Infrastructure Software

I'm running 10gR2 RAC(ASM+CLUSTERWARE) on Centos4.4 using VMWARE workstation v5.5.1.

After upgrading to 10.2.0.3(both Database home and CRS_HOME) using patchset, there is too many 'su oracle' command executed by some background process. (cssd suspected)..

I ran following commands, and then too many su command log appeared.

%srvctl stop database -d RAC
%srvctl stop asm -n jairac1
%srvctl stop asm -n jairac2
%srvctl stop nodeapps -n jairac1
%srvctl stop nodeapps -n jairac2
su {enter}
#crsctl stop crs
(stop crs succeed)

/etc/init.d/init.crs disable ( on all nodes)
/etc/init.d/init.cssd disable (on all nodes)

# reboot (on all nodes)

After boot-up, ps -ef|grep init shows

root 1 0 0 17:17 ? 00:00:00 init [3]
root 4215 1 0 17:18 ? 00:00:00 /bin/sh /etc/init.d/init.evmd run
root 4216 1 0 17:18 ? 00:00:00 /bin/sh /etc/init.d/init.cssd fatal
root 4380 1 0 17:18 ? 00:00:00 /bin/sh /etc/init.d/init.crsd run

but certainly crs is DISABLED.. is it right?

and there showed up too many 'su oracle' log at /var/log/messages file as following:

Dec 21 17:30:18 jairac1 su(pam_unix)[13585]: session closed for user oracle
Dec 21 17:30:18 jairac1 su(pam_unix)[13628]: session opened for user oracle by (uid=0)
Dec 21 17:30:18 jairac1 su(pam_unix)[13628]: session closed for user oracle
Dec 21 17:30:36 jairac1 su(pam_unix)[13683]: session opened for user oracle by (uid=0)
Dec 21 17:30:36 jairac1 su(pam_unix)[13688]: session opened for user oracle by (uid=0)
Dec 21 17:30:36 jairac1 su(pam_unix)[13688]: session closed for user oracle
Dec 21 17:30:36 jairac1 su(pam_unix)[13683]: session closed for user oracle
Dec 21 17:30:36 jairac1 su(pam_unix)[13769]: session opened for user oracle by (uid=0)
Dec 21 17:30:37 jairac1 su(pam_unix)[13792]: session opened for user oracle by (uid=0)
Dec 21 17:30:37 jairac1 su(pam_unix)[13769]: session closed for user oracle
Dec 21 17:30:37 jairac1 su(pam_unix)[13835]: session opened for user oracle by (uid=0)
Dec 21 17:30:37 jairac1 su(pam_unix)[13792]: session closed for user oracle
Dec 21 17:30:37 jairac1 su(pam_unix)[13884]: session opened for user oracle by (uid=0)
Dec 21 17:30:37 jairac1 su(pam_unix)[13835]: session closed for user oracle
Dec 21 17:30:38 jairac1 su(pam_unix)[13884]: session closed for user oracle
Dec 21 17:30:49 jairac1 su(pam_unix)[13944]: session opened for user oracle by (uid=0)
Dec 21 17:30:49 jairac1 su(pam_unix)[13944]: session closed for user oracle
Dec 21 17:30:49 jairac1 su(pam_unix)[13987]: session opened for user oracle by (uid=0)
Dec 21 17:30:49 jairac1 su(pam_unix)[13987]: session closed for user oracle
Dec 21 17:30:49 jairac1 su(pam_unix)[14030]: session opened for user oracle by (uid=0)
Dec 21 17:30:49 jairac1 su(pam_unix)[14030]: session closed for user oracle
Dec 21 17:31:08 jairac1 su(pam_unix)[14079]: session opened for user oracle by (uid=0)
Dec 21 17:31:08 jairac1 su(pam_unix)[14079]: session closed for user oracle
Dec 21 17:31:08 jairac1 su(pam_unix)[14121]: session opened for user oracle by (uid=0)
Dec 21 17:31:08 jairac1 su(pam_unix)[14153]: session opened for user oracle by (uid=0)
Dec 21 17:31:08 jairac1 su(pam_unix)[14121]: session closed for user oracle
Dec 21 17:31:09 jairac1 su(pam_unix)[14204]: session opened for user oracle by (uid=0)
Dec 21 17:31:09 jairac1 su(pam_unix)[14153]: session closed for user oracle
Dec 21 17:31:09 jairac1 su(pam_unix)[14243]: session opened for user oracle by (uid=0)
Dec 21 17:31:09 jairac1 su(pam_unix)[14204]: session closed for user oracle
Dec 21 17:31:09 jairac1 su(pam_unix)[14243]: session closed for user oracle
Dec 21 17:31:09 jairac1 su(pam_unix)[14298]: session opened for user oracle by (uid=0)
Dec 21 17:31:10 jairac1 su(pam_unix)[14298]: session closed for user oracle
Dec 21 17:31:20 jairac1 su(pam_unix)[14345]: session opened for user oracle by (uid=0)
Dec 21 17:31:20 jairac1 su(pam_unix)[14345]: session closed for user oracle
Dec 21 17:31:20 jairac1 su(pam_unix)[14388]: session opened for user oracle by (uid=0)
Dec 21 17:31:20 jairac1 su(pam_unix)[14388]: session closed for user oracle
Dec 21 17:31:20 jairac1 su(pam_unix)[14431]: session opened for user oracle by (uid=0)
Dec 21 17:31:21 jairac1 su(pam_unix)[14431]: session closed for user oracle
Dec 21 17:31:39 jairac1 su(pam_unix)[14478]: session opened for user oracle by (uid=0)
Dec 21 17:31:40 jairac1 su(pam_unix)[14478]: session closed for user oracle
Dec 21 17:31:40 jairac1 su(pam_unix)[14531]: session opened for user oracle by (uid=0)
Dec 21 17:31:40 jairac1 su(pam_unix)[14541]: session opened for user oracle by (uid=0)
Dec 21 17:31:40 jairac1 su(pam_unix)[14541]: session closed for user oracle
Dec 21 17:31:40 jairac1 su(pam_unix)[14531]: session closed for user oracle
Dec 21 17:31:40 jairac1 su(pam_unix)[14607]: session opened for user oracle by (uid=0)
Dec 21 17:31:41 jairac1 su(pam_unix)[14629]: session opened for user oracle by (uid=0)
Dec 21 17:31:41 jairac1 su(pam_unix)[14607]: session closed for user oracle
Dec 21 17:31:41 jairac1 su(pam_unix)[14629]: session closed for user oracle
Dec 21 17:31:41 jairac1 su(pam_unix)[14693]: session opened for user oracle by (uid=0)
Dec 21 17:31:41 jairac1 su(pam_unix)[14693]: session closed for user oracle
Dec 21 17:31:51 jairac1 su(pam_unix)[14746]: session opened for user oracle by (uid=0)
Dec 21 17:31:51 jairac1 su(pam_unix)[14746]: session closed for user oracle
Dec 21 17:31:51 jairac1 su(pam_unix)[14789]: session opened for user oracle by (uid=0)
Dec 21 17:31:51 jairac1 su(pam_unix)[14789]: session closed for user oracle
Dec 21 17:31:51 jairac1 su(pam_unix)[14832]: session opened for user oracle by (uid=0)
Dec 21 17:31:52 jairac1 su(pam_unix)[14832]: session closed for user oracle
Dec 21 17:32:11 jairac1 su(pam_unix)[14879]: session opened for user oracle by (uid=0)
Dec 21 17:32:12 jairac1 su(pam_unix)[14916]: session opened for user oracle by (uid=0)
Dec 21 17:32:12 jairac1 su(pam_unix)[14879]: session closed for user oracle
Dec 21 17:32:12 jairac1 su(pam_unix)[14957]: session opened for user oracle by (uid=0)
Dec 21 17:32:12 jairac1 su(pam_unix)[14916]: session closed for user oracle
Dec 21 17:32:12 jairac1 su(pam_unix)[14957]: session closed for user oracle
Dec 21 17:32:12 jairac1 su(pam_unix)[15016]: session opened for user oracle by (uid=0)
Dec 21 17:32:12 jairac1 su(pam_unix)[15028]: session opened for user oracle by (uid=0)
Dec 21 17:32:13 jairac1 su(pam_unix)[15028]: session closed for user oracle
Dec 21 17:32:13 jairac1 su(pam_unix)[15016]: session closed for user oracle
Dec 21 17:32:13 jairac1 su(pam_unix)[15094]: session opened for user oracle by (uid=0)
Dec 21 17:32:13 jairac1 su(pam_unix)[15094]: session closed for user oracle
Dec 21 17:34:12 jairac1 su(pam_unix)[15145]: session opened for user oracle by (uid=0)
Dec 21 17:34:12 jairac1 su(pam_unix)[15145]: session closed for user oracle
Dec 21 17:34:12 jairac1 su(pam_unix)[15188]: session opened for user oracle by (uid=0)
Dec 21 17:34:13 jairac1 su(pam_unix)[15188]: session closed for user oracle
Dec 21 17:34:13 jairac1 su(pam_unix)[15231]: session opened for user oracle by (uid=0)
Dec 21 17:34:13 jairac1 su(pam_unix)[15231]: session closed for user oracle
Dec 21 17:34:26 jairac1 su(pam_unix)[7106]: session closed for user oracle
Dec 21 17:34:33 jairac1 su(pam_unix)[15280]: session opened for user oracle by (uid=0)

These su logged continuosly, does not quit..
I don't know what happened .. cssd or crsd doing such a behavior thou they are disabled?

Message was edited by:
Jailee

Message was edited by:
Jailee

Message was edited by:
Jailee

Message was edited by:
Jailee