====== TDP Oracle installation v2 ======
====== Installation TDP pour Oracle ======
===== Install TSM client, with GSKit and TDP Oracle =====
[root@claixora01]/tsm/clora/config/baclient# lslpp -Lc | grep tsm
tivoli.tsm.client.api.64bit:tivoli.tsm.client.api.64bit:8.1.13.0: : :C: :IBMSP Client - 64bit Application Programming Interface: : : : : : :0:0:/:
tivoli.tsm.client.ba.64bit:tivoli.tsm.client.ba.64bit.base:8.1.13.0: : :C: :IBMSP Client 64 - Backup/Archive Base Files: : : : : : :0:0:/:
tivoli.tsm.client.ba.64bit:tivoli.tsm.client.ba.64bit.common:8.1.13.0: : :C: :IBMSP Client 64 - Backup/Archive Common Files: : : : : : :0:0:/:
tivoli.tsm.client.ba.64bit:tivoli.tsm.client.ba.64bit.image:8.1.13.0: : :C: :IBMSP Client 64 - IMAGE Backup Client: : : : : : :0:0:/:
tivoli.tsm.client.ba.64bit:tivoli.tsm.client.ba.64bit.web:8.1.13.0: : :C: :IBMSP Client 64 - Backup/Archive Java GUI & WEB Client: : : : : : :0:0:/:
tivoli.tsm.client.oracle.aix.64bit:tivoli.tsm.client.oracle.aix.64bit:8.1.13.0: : :C: :IBM Spectrum Protect for Databases - Oracle on AIX: : : : : : :0:0:/:
tivoli.tsm.client.oracle.tools.aix.64bit:tivoli.tsm.client.oracle.tools.aix.64bit:8.1.13.0: : :C: :IBM Spectrum Protect for Databases - Oracle Tools on AIX: : : : : : :0:0:/:
[root@claixora01]/tsm/clora/config/baclient# lslpp -Lc | grep GSK
GSKit8:GSKit8.gskcrypt64.ppc.rte:8.0.55.24: : :C: :IBM GSKit Cryptography Runtime: : : : : : :0:0:/:
GSKit8:GSKit8.gskssl64.ppc.rte:8.0.55.24: : :C: :IBM GSKit SSL Runtime With Acme Toolkit: : : : : : :0:0:/:
===== File configuration for TDP Oracle =====
TDP Oracle work with the **dsm.sys** file located into /usr/tivoli/tsm/client/api/bin64/dsm.sys
To prevent managing 2 dsm.sys files, create a symbolic link to /usr/tivoli/tsm/client/ba/bin64/dsm.sys
[root@aixora10]/usr/tivoli/tsm/client/oracle/bin64# ls -l /usr/tivoli/tsm/client/api/bin64/dsm.sys
lrwxrwxrwx 1 root system 39 Apr 28 12:23 /usr/tivoli/tsm/client/api/bin64/dsm.sys -> /usr/tivoli/tsm/client/ba/bin64/dsm.sys
===== Single server configuration =====
Default folder for TDP Oracle to store certificates, and password is:
/usr/tivoli/tsm/client/oracle/bin64/
First connection, will register the password into a DB
* If you migrate from older version of TDP (Ex: <8.1.2), then use **root** for the following command (because previously the password was stored in an encrypted file owned by root which 'll be moved to *.sav)
* Else you can use **oracle** user (used for backup RMAN)
[root@claixora01]/tsm/clora/config/itsm# tdpoconf SHOWENVironment -TDPO_OPTfile=tdpo.opt
IBM Spectrum Protect for Databases:
Data Protection for Oracle
Version 8, Release 1, Level 13.0
(C) Copyright IBM Corporation 1997, 2021. All rights reserved.
Data Protection for Oracle Information
Version: 8
Release: 1
Level: 13
Sublevel: 0
Platform: 64bit TDP Oracle AIX
IBM Spectrum Protect Server Information
Server Name: TSM_ITSM
Server Address: tsm.test.lu
Server Type: AIX
Server Port: 1500
Communication Method: TCP/IP
Session Information
Owner Name: oracle
Node Name: clora_itsm
Node Type: TDP Oracle AIX
DSMI_DIR: /usr/tivoli/tsm/client/api/bin64
DSMI_ORC_CONFIG: /tsm/clora/config/itsm/dsm.opt
TDPO_OPTFILE: tdpo.opt
Compression: TRUE
License Information: License file exists and contains valid license data.
If password is register as **root**, then change the owner of the TSM.* files
Password DB, with good owner and rights: **chown oracle TSM.IDX TSM.KDB TSM.sth**
[root@aixora10]/# ls -l /usr/tivoli/tsm/client/oracle/bin64/TSM*
4 -rw-rw-r-- 1 oracle system 1290 Oct 03 09:54 TSM.IDX
8 -rw-rw-r-- 1 oracle system 6319 Oct 03 09:54 TSM.KDB
4 -rw------- 1 oracle system 193 Sep 28 17:28 TSM.sth
Node certificates:
[root@aixora10]/usr/tivoli/tsm/client/oracle/bin64# ls -lRt Nodes
total 0
drwxr-xr-x 2 root system 256 Oct 18 11:59 AIXORA10_ITSM
Nodes/AIXORA10_ITSM:
total 40
-rw-rw-r-- 1 root system 5080 Sep 28 17:28 spclicert.kdb
-rw------- 1 root system 193 Sep 28 17:28 spclicert.sth
-rw-rw-r-- 1 root system 80 Sep 28 17:28 spclicert.crl
-rw-rw-r-- 1 root system 80 Sep 28 17:28 spclicert.rdb
Important for logs files, you have to set specific owner/rights:
* Log folder is set into **tdpo.opt**, using variable **DSMI_LOG**
Example for non-clustered
[root@aixora10]/usr/tivoli/tsm/client/oracle/bin64# grep DSMI tdpo.opt
DSMI_LOG /usr/tivoli/tsm/client/oracle/logs
[root@aixora10]/# ls -l /usr/tivoli/tsm/client/oracle/logs/*
-rw-r--r-- 1 oracle dba 6915 Aug 13 05:01 /usr/tivoli/tsm/client/oracle/logs/citScanOutput.xml
-rw-r--r-- 1 oracle dba 15499417 Oct 18 15:04 /usr/tivoli/tsm/client/oracle/logs/dsminstr.log
-rw-r--r-- 1 oracle dba 0 Oct 18 15:04 /usr/tivoli/tsm/client/oracle/logs/dsminstr.log.lock
-rw-rw-rw- 1 oracle dba 73136326 Oct 03 10:12 /usr/tivoli/tsm/client/oracle/logs/tdpoerror.log
===== Cluster configuration =====
For info: the BA client use his own certificates and password DB, please do not remove them
[root@claixora01]/tsm/clora/config/baclient# ls -l
0 drwxr-xr-x 3 root system 256 Mar 13 2018 Nodes
4 -rw-rw-r-- 1 root system 645 Oct 18 13:06 TSM.IDX
4 -rw-rw-r-- 1 root system 3260 Oct 18 13:06 TSM.KDB
4 -rw------- 1 root system 193 Oct 18 13:06 TSM.sth
4 -rw-r--r-- 1 root system 936 Sep 03 2014 dsm.opt
4 -rw-r--r-- 1 root system 185 Apr 13 2011 inclexcl.lst
The TDP Oracle use his own certificates and password DB (TSM* have oracle as owner)
[root@claixora01]/tsm/clora/config/itsm# ls -l
0 drwxr-xr-x 3 root system 256 Oct 18 12:04 Nodes
4 -rw-r--r-- 1 root system 57 Apr 13 2011 TDPO.clora_itsm.save
4 -rw-rw-r-- 1 oracle system 645 Oct 18 12:05 TSM.IDX
4 -rw-rw-r-- 1 oracle system 3260 Oct 18 12:05 TSM.KDB
4 -rw------- 1 oracle system 193 Oct 18 12:05 TSM.sth
4 -rw-r--r-- 1 root system 34 Apr 13 2011 dsm.opt
4 -rw-r--r-- 1 root system 676 Apr 13 2011 tdpo.opt
Log files and lock must be aceesible in W for user oracle
[root@claixora01]/tsm/clora/logs/itsm# ls -l /tsm/clora/logs/itsm/*
-rw-r--r-- 1 root system 4779 Oct 18 12:04 /tsm/clora/logs/itsm/citScanOutput.xml
-rw-r--r-- 1 oracle dba 3522 Oct 18 14:54 /tsm/clora/logs/itsm/dsminstr.log
-rw-r--r-- 1 oracle dba 0 Oct 18 14:54 /tsm/clora/logs/itsm/dsminstr.log.lock
-rw-rw-rw- 1 oracle dba 97679 Oct 18 14:54 /tsm/clora/logs/itsm/tdpoerror.log
File **tdpo.opt**
[root@claixora01]/tsm/clora/config/itsm# cat tdpo.opt
***************************************************************************
* IBM Tivoli Storage Manager for Databases
* Data Protection for Oracle
*
* Sample tdpo.opt for the AIX Data Protection for Oracle 64bit
*********************************************************************
DSMI_ORC_CONFIG /tsm/clora/config/itsm/dsm.opt
DSMI_LOG /tsm/clora/logs/itsm
TDPO_FS tsmorc
TDPO_NODE clora_itsm
TDPO_OWNER oracle
TDPO_PSWDPATH /tsm/clora/config/itsm
*TDPO_DATE_FMT 1
*TDPO_NUM_FMT 1
*TDPO_TIME_FMT 1
*TDPO_MGMT_CLASS_2 mgmtclass2
*TDPO_MGMT_CLASS_3 mgmtclass3
*TDPO_MGMT_CLASS_4 mgmtclass4
File **dsm.opt**
[root@claixora01]/tsm/clora/config/itsm# cat /tsm/clora/config/itsm/dsm.opt
servername tsm_itsm
File **dsm.sys**
[root@claixora01]/# cat /usr/tivoli/tsm/client/api/bin64/dsm.sys
* Entry for the ITSM for Oracle Cluster Resources (clora)
SErvername tsm_itsm
COMMMethod TCPip
TCPServeraddress tsm.test.lu
TCPPort 1500
Nodename clora_itsm
PasswordAccess prompt
Compression yes
INCLexcl /usr/tivoli/tsm/client/api/bin64/inclexcl.lst
===== Restore from a different node =====
You can backup and restore all database using a single node_name in TSM
[root@srv01]/tsm/config/itsm# cat dsm_as_prod_itsm.opt
Servername tsm_as_prod_itsm
[root@srv01]/tsm/config/itsm# cat tdpo-prod_itsm.opt
***************************************************************************
* IBM Tivoli Storage Manager for Databases
* Data Protection for Oracle
*
* Sample tdpo.opt for the AIX Data Protection for Oracle 64bit
*********************************************************************
DSMI_ORC_CONFIG /tsm/config/itsm/dsm_as_prod_itsm.opt
DSMI_LOG /tsm/logs/itsm
TDPO_FS tsmorc
TDPO_NODE srv01_itsm
TDPO_OWNER oracle
TDPO_PSWDPATH /tsm/config/itsm
[root@srv01]/tsm/config/itsm# grep -p tsm_as_prod_itsm /usr/tivoli/tsm/client/ba/bin64/dsm.sys
SErvername tsm_as_prod_itsm
COMMMethod TCPip
TCPServeraddress tsmsrv
TCPPort 1500
Asnodename prod_itsm
PasswordAccess prompt
Compression no
INCLexcl /usr/tivoli/tsm/client/oracle/bin64/itsm_inclexcl.lst
You have also to grant proxy in TSM
TSM1> grant proxy target=prod_itsm agent=srv01_itsm
All backups 'll be located on node **prod_itsm** and access is available to all granted access nodes