梦想有多远

一直在/var/log/message下有如下信息
The /var/log/messages file is being flooded with messages about sessions being created:

Feb 12 10:16:57 su(pam_unix)[28104]: session opened for user oracle by (uid=0)
Feb 12 10:16:57 su(pam_unix)[28104]: session closed for user oracle

TIP: Click help for a detailed explanation of this page.
书签 转到末尾

主题: file /var/log/messages Flooded with “su(pam_unix)session opened/closed for user oracle”
文档 ID: 注释:415665.1 类型: PROBLEM
上次修订日期: 30-OCT-2007 状态: PUBLISHED

In this Document
Symptoms
Cause
Solution
References

——————————————————————————–

Applies to:
Oracle Server - Enterprise Edition - Version: 10.2.0.3
This problem can occur on any platform.

Symptoms
The /var/log/messages file is being flooded with messages about sessions being created:

Feb 12 10:16:57 su(pam_unix)[28104]: session opened for user oracle by (uid=0)
Feb 12 10:16:57 su(pam_unix)[28104]: session closed for user oracle

.(note that the system messages file may be named differently on platforms other than Linux)

Cause
The messages are being reported correctly. They are generated by an error in the Oracle CSS component.
CSS is used by Oracle RAC and ASM

The problem is reported in Bug 5722352

Solution
To implement the solution, please execute the following steps::

Obtain patch for unpublished Bug 5679560 from MetaLink and apply it

Or:

1. take a backup copy of /etc/init.d/init.cssd
2. edit /etc/init.d/init.cssd
Replace code section:

$SU $ORACLE_USER -c “$ECHO \$TZ > /tmp/oratz.$$ ” > /dev/null 2>&1
NEWTZ=`$SED ’s/^[ \t]*//;s/[ \t]*$//’ < /tmp/oratz.$$`
$RMF /tmp/oratz.$$
if [ ! -z "$NEWTZ" ]; then
TZ=$NEWTZ;
export TZ;
fi

with:

TZCHANGE=/tmp/TZCHANGE
if [ -f $TZCHANGE ]
then
$SU $ORACLE_USER -c "$ECHO \$TZ > /tmp/oratz.$$ ” > /dev/null 2>&1
NEWTZ=`$SED ’s/^[ \t]*//;s/[ \t]*$//’ < /tmp/oratz.$$`
$RMF /tmp/oratz.$$
if [ ! -z "$NEWTZ" ]; then
TZ=$NEWTZ;
export TZ;
fi
$RMF $TZCHANGE
fi

Note this change fixes the symptom, not the problem, which is excessive calls to init.cssd.
If this alternate solution is used, ensure it is backed out out prior to applying the proper fix, which is the patch for (unpublished) Bug 5679560

References