2 Preinstallation Tasks

2.2.1 Check for Required APARS

Depending on the products that you intend to install, verify that the fixes for IBM APAR PQ75251 for C++ programs is installed on the system.

2.3.1 Perform Product Security Activities

Some activities that are related to installing Oracle Database 10g for z/OS can be performed independently, even before the software arrives. All of these activities are related to product security features, and one activity, which is optional, requires an initial program load (IPL) of your system before it takes effect. Depending on the organization and procedures of your installation, you may need to work with system security personnel or systems programmers to perform these activities.

The following descriptions are provided in RACF (IBM z/OS Security Server) terms with the assumption that RACF is in use. Any product which fully implements z/OS System Authorization Facility (SAF) can be substituted. If your installation uses a product other than RACF, refer to the documentation for that product for information on how to perform the steps that are discussed in this chapter.

2.3.2 Configure BPX Parameters

The following BPX parameter files need to be modified and activated on the system. They are set in SYS1.PARMLIB(BPXxxx). After doing so, you do not need to IPL the system:

• MAXTHREADTASKS(1000)

• MAXTHREADS(1000)

• MAXCPUTIME(2147483647)

• MAXASSIZE(2147483647)

• MAXSHAREPAGES(131072)

• SHRLIBMAXPAGES(8192)

2.3.3 Check User Virtual Storage

Determine the virtual region size for the user performing the installation. If it is less than the required size, you must increase the maximum allowable size of the virtual region to 512 MB. The method you use to determine the virtual region size depends on whether you entered the z/OS UNIX System Services shell environment through Telnet or rlogin or through TSO OMVS:

• If you entered the z/OS UNIX System Services shell environment through Telnet or rlogin, the virtual storage is the amount set in the SYS1.PARMLIB(BPXPRMxx) field MAXASSIZE. This amount can be limited in the OMVS segment of your RACF profile.

  For example, if you do not define ASSIZEMAX in your RACF OMVS segment, and you have MAXASSIZE set to 2147483647, all Telnet or rlogin sessions will get 2 GB of virtual storage.

• If you entered the z/OS UNIX System Services shell environment through TSO OMVS, then the virtual storage is the region size that you set for the REGION field when you logged on to TSO. This value is in KB. This amount can be limited in the TSO segment of your RACF profile.

  You will need to ask your system administrator to issue the following command, which shows the maximum allowed value:

  $ tso listuser username tso
  

  For example:

  tso listuser arogers tso
  USER=AROGERS  NAME=ANDREW ROGERS         OWNER=RACF      CREATED=96.106
  DEFAULT-GROUP=OEG647    PASSDATE=03.356  PASS-INTERVAL= 92
  ...
  TSO INFORMATION
  --------------- 
  ACCTNUM= NOACCT
  PROC= $AROGERS
  SIZE= 02048000
  MAXSIZE= 02048000
  USERDATA= 0000
  

  This shows that you can have up to 2 GB of virtual storage.

You should be aware that the SMF exit IEFUSI can limit virtual storage in either of the previous cases. Therefore, ensure that the SMF exit IEFUSI allows for enough virtual storage to use Oracle products.

2.3.4 Add an APF-Authorized Library

Oracle Database 10g for z/OS requires the database and network region programs to run with APF authorization, which means that the load modules must reside in an APF-authorized library. While it is possible to copy these modules into an existing authorized library, Oracle recommends that you create an authorized library specifically for Oracle Database 10g for z/OS. Because z/OS requires all modules that are loaded by an authorized program to come from authorized libraries, the library will contain a number of modules in addition to the database and network region programs, including the Oracle Database kernel. The authorized library must be a PDSE type rather than a PDS type.

A load library can be authorized in either of two ways: add an entry for the data set to the PROGxx member of SYS1.PARMLIB, or add an entry for the data set to the IEAAPFxx member of SYS1.PARMLIB. The first way (using the PROGxx member) utilizes a newer mechanism. The second way (using the IEAAPFxx member) utilizes an older mechanism. You may need to talk to your systems programmer to determine which method to use and the correct suffix to substitute for xx. If you plan to name the authorized library ORACLE.V10G.AUTHLOAD, for example, then the following code shows a suitable entry in PROGxx:

APF ADD DSNAME(ORACLE.V10G.AUTHLOAD) SMS

If your installation is using IEAAPFxx instead of PROGxx, a comparable entry there would be:

ORACLE.V10G.AUTHLOAD ,

The comma in the above entry is included only if the entry is not the last record in the member. Omit the comma in the new entry if it is last in the member, and ensure that the preceding entry has a comma.

Changes to PROGxx or IEAAPFxx do not take effect until the next IPL. If your installation has enabled z/OS dynamic APF facilities, then a library can be authorized without an IPL by using a SETPROG APF,ADD operator command as shown in the following example:

SETPROG APF,ADD,DSN=ORACLE.V10G.AUTHLOAD,SMS

The authorization that is conferred by the SETPROG command is independent of the PROGxx or IEAAPFxx members and lasts only until the next IPL. This means that you would use this technique only if you expect to install the software and actually configure and run a database service or network service before the next IPL of your system.

Regardless of the technique used, a data set does not need to exist to be authorized. Oracle Universal Installer will prompt you for the location of the data set and can optionally allocate it for you. If you can choose the data set name that you will use, then this step can be performed before the data set is created and populated. However, once you create a data set, you will need to authorize it.

2.3.5 Ensure Adequate Address Space IDs (ASIDs)

Oracle Database 10g for z/OS instances can be composed of multiple address spaces and can make extensive use of z/OS Cross Memory Services. When a cross-memory address space is terminated, the address space ID (ASID) that was used for this address space is made unavailable. Eventually, the pool of z/OS ASIDs can become exhausted, which prevents new address spaces from being created. In order to avoid the above condition, the RSVNONR parameter in the IEASYSxx member of SYS1.PARMLIB should be set to a higher value.

2.3.6 Add Program Properties

The database and network service region programs must run nonswappable and noncancelable, and should not be subject to system time limits. In addition, the database service runs in protect key 7. These attributes are indicated by adding entries for these programs to the z/OS Program Properties Table (PPT), through a member of the SYS1.PARMLIB data set named SCHEDxx, where xx is a 2-letter or 2-digit suffix. The entries that you add should be similar to those in the following example. The comments, which are included for clarity, are allowed but are not required.

/* SCHEDxx PPT entry for Oracle database region */
PPT PGMNAME(ORARASC)        /* Program (module) name    */
    NOCANCEL                /* Not cancelable           */
    KEY(7)                  /* Protection key           */
    NOSWAP                  /* Not swappable            */
    SYST                    /* Not subject to timing    */
   /* SCHEDxx PPT entry for Oracle network region */
PPT PGMNAME(MINMAIN)        /* Program (module) name    */
    NOCANCEL                /* Not cancelable           */
    NOSWAP                  /* Not swappable            */
    SYST                    /* Not subject to timing    */

The entries in the SCHEDxx member are usually read at z/OS IPL. You can cause z/OS to re-read the member without an IPL by using the SET SCH operator command. The PPT entries must take effect before Oracle database and network services are started.

2.3.7 Create and Activate a Resource Class

The authorization-checking mechanism of SAF is based on resource names, which are simply character strings that identify the data, interface, or other entity that is protected. Resource names are organized into classes. A resource class is a name for a group of resources with similar name structure and attributes. RACF has a number of predefined resource classes for items such as data sets, tape volumes, and terminals.

Oracle Database 10g for z/OS has three types of resources that are subject to authorization checking:

1. OSDI commands

2. The client-service bind interface

3. The database server SYSOPER/SYSDBA connection privilege

These resources must have an associated resource class. By default, Oracle Database 10g for z/OS is set up with the assumption that the resources are in the FACILITY class, which is a predefined RACF class. FACILITY is a general-use class whose resource name structure accommodates all three of the resource types of Oracle Database 10g for z/OS. If you use the default FACILITY class, then you may need to activate the class if your installation has not previously defined resources in the class.

This is done with a SETROPTS CLASSACT RACF command and does not require a z/OS IPL.

The security standards or procedures of your installation may make it preferable to create distinct resource classes for Oracle Database 10g for z/OS resources. RACF allows security administration privileges to be granted on a resource class basis. If you create distinct classes for Oracle Database 10g for z/OS, those RACF administration privileges can be granted to users without enabling administrative privileges on other non-Oracle Database resources that may be associated with the FACILITY class.

If you decide to create resource classes for Oracle Database 10g for z/OS, then two classes should be created: one for OSDI commands and one that is shared by both bind and database SYSOPER/SYSDBA connect authorizations.

The procedure involves coding Assembler Language macro instructions that are assembled to create non-executable load modules that are the class table and router table, and an IPL of z/OS is required to activate the change.

If you choose to add new resource classes for Oracle Database 10g for z/OS, then the ICHERCDE macro that you code for the class table entries should specify parameters as in the following example, which defines the classes $ORACMD and $ORACONN.

$ORACMD ICHERCDE CLASS=$ORACMD,
       GROUP=$ORACONN,
       ID=192,                    Some number between 128 & 255
       MAXLNTH=19,
       RACLIST=ALLOWED,
       FIRST=ALPHANUM,
       OTHER=ANY,
       POSIT=42,                  Probably unique to this class
       OPER=NO,
       DFTUACC=NONE
$ORACONN ICHERCDE CLASS=$ORACONN,
       MEMBER=$ORACMD,
       ID=191,                    Some number between 128 & 255
       MAXLNTH=19,
       FIRST=ALPHANUM,
       OTHER=ANY,
       POSIT=42,                  Probably unique to this class
       OPER=NO,
       DFTUACC=NONE 

You must also add entries to the installation-supplied router table module ICHRFR01, as in the following example:

ICHRFRTB CLASS=$ORACMD,ACTION=RACF
ICHRFRTB CLASS=$ORACONN,ACTION=RACF

After the class table is updated and the system is IPLed, the new classes can be activated with the SETROPTS CLASSACT command.

You must also provide Oracle Database 10g for z/OS with the class names. This is done in the subsystem parameter file discussed in the Oracle Database System Administration Guide for IBM z/OS (OS/390).

2.3.8 Associate Userids with Services

Oracle Database 10g for z/OS-managed services execute as system address spaces, similar to started tasks or STCs. Some of the z/OS system functions that are invoked by Oracle Database 10g for z/OS services perform authorization checks based on the z/OS userid that is associated with the service address space. Depending on the security configuration and standards of your installation, those system functions may fail if no userid is associated with the address space. You, or security personnel for your installation, may need to take steps to ensure that Oracle Database 10g for z/OS services have an associated userid that can be authorized for system functions that are invoked by the database and network services.

If you are already running the TNS programs of previous releases as started tasks (as opposed to submitting them as batch jobs), then your installation probably already has STARTED or USER profiles for the associated JCL procedures. You should not rely on those for Oracle Database 10g for z/OS because the Oracle Database 10g for z/OS procedures should have different names. Plan to create at least two new STARTED or USER profiles, one for the database service and one for the network service. These may be all that you need, because different instances of a type of service can generally share the same JCL procedure. You may want to create additional profiles, though, if you want different instances of a service to run with different userids. This requires using distinct JCL procedures even though the procedures themselves may be otherwise identical. The RDEFINE command that is used to add profiles is described in the RACF CLR.

With RACF, it is also possible to associate a userid with a started task using a started procedures table that is built with Assembler macros somewhat like the resource class table discussed in the previous section. Activating such changes requires an IPL, however, and is not the preferred method.

Certain database features are implemented using z/OS UNIX System Services, formerly called Open Edition. These features include Java, XML, Oracle Text, Spatial Data Option, UTL_FILE package, and external LOB(BFILE) support. In order for these features to work, the database service address space must be capable of being "dubbed" as a z/OS UNIX System Services process. This requires that the z/OS userid that is associated with the address space have a default z/OS UNIX System Services segment that is defined to the security subsystem.

In addition, certain utilities run only in a z/OS UNIX System Services shell environment, such as Oracle Universal Installer, Enterprise Manager, and some client-side Java applications. For users requiring these applications, an OMVS RACF segment must be defined. The OMVS RACF segment can be defined to a group and then the users who are likely to require these Oracle Java applications can be associated with the group. Such users are typically Oracle DBAs and Oracle operators.

Depending on whether this is the first time Oracle software is being installed on this system and on the products that you are installing, you may need to create several groups and users who will be responsible for the installation, maintenance and operation of the oracle database.

Installation User/Group Considerations

Oracle Universal Installer requires that all users performing Oracle software installation and maintenance belong to the same group. Oracle recommends that you define a user group for all users performing installation and maintenance.

The user who performs the installation becomes the owner of the files created as part of the installation. You may want to define a z/OS user who will be the software owner. Any user performing an Oracle installation must have an OMVS RACF segment defined. This user must be able to create and update the Oracle PDS/PDSE data sets.

For maintenance, only the software owner is granted write access to the archive libraries. You may need to change the permissions for the archive libraries to allow anyone in the group write access after the installation has completed.

Determining Whether the Oracle Inventory Group Exists

When you install Oracle software on the system for the first time, Oracle Universal Installer creates the oraInst.loc file. This file is located in the /var/opt/oracle directory. Alternatively, this directory can contain a pointer to a different inventory location.

Users who are performing installation and maintenance tasks must have RACF authority to create and update the directory /var/opt/oracle and its contents, as well as the Oracle file systems created by the installation and the PDS data sets required for the installation.

This file identifies the name of the Oracle Inventory group. To determine whether the Oracle Inventory group exists, enter the following command:

$ more /var/opt/oracle/oraInst.loc

If the oraInst.loc file exists, the output from this command is similar to the following:

inventory_loc=/u01/app/oracle/oraInventory
inst_group=oinstall

The inst_group parameter shows the name of the Oracle Inventory group.

2.6.1 Client X Server Environment

This environment is required for an interactive installation. It is a non-z/OS environment and will typically be a UNIX system running X windows or a PC or other system with X windows software installed.

If you are installing the software from an X windows workstation, X terminal, or PC running an X server application, you need to enable this X server to accept X client (z/OS) applications. To do this, perform the following steps:

1. Start a local terminal session, for example, an X terminal (xterm).

2. To enable remote hosts to display X windows applications on the local X server, enter the following command:

   $ xhost +
   

2.6.2 z/OS User Environment

The z/OS user environment is required for an interactive or noninteractive installation. It is a z/OS UNIX System Services shell environment running under the user who will be performing the installation. You must Telnet to this z/OS UNIX System Services shell environment using a VT terminal, or you can use the command OMVS from a TSO user who is logged on to the system, as described in the following steps:

1. On the z/OS (X client) system, connect to z/OS UNIX System Services using Telnet. Enter a command similar to the following, using the port number for z/OS UNIX System Services:

   $ telnet remote_host port
   

   If you are using a 3270 terminal emulator, you need to enter the OMVS shell command to access z/OS UNIX System Services.

2. If you are not logged on to the remote system as an authorized user, enter the following commands at the prompts:

   EZYTE27I logon: username
   EZYTE27I logon username Password: password
   

Before you start Oracle Universal Installer, you must configure the environment of the user performing the installation. To configure this environment, you must perform the following tasks:

• Set the default file mode creation mask (umask) to 002 in the shell startup file.

• Set the JAVA_HOME, PATH, LIBPATH, CLASSPATH and DISPLAY environment variables.

To set the user's environment, follow these steps:

1. In any text editor, create an environment file similar to the following, specifying the appropriate values for the environment variables:

   export JAVA_HOME=/usr/lpp/java/J1.4
   export PATH=/bin:/usr/local/bin
   export LIBPATH=$JAVA_HOME/bin/classic:$JAVA_HOME/bin:$LIBPATH
   export CLASSPATH=$JAVA_HOME/lib/libjitc.so:$CLASSPATH
   export DISPLAY=nn.nn.nn.nn:0
   

   The PATH environment variable must include Java, make, and ORACLE_HOME/bin. The JAVA_HOME environment variable must point to the Java home directory, and the LIBPATH environment variable must point to the JAVA_HOME/lib directory.

2. If necessary, specify in the environment file the environment variables listed in the following table. If you must specify several values for an environment variable, for example PATH, separate the values with a colon (:).

   Environment Variable	Required By	Sample Setting and Description
   JAVA_HOME	Oracle Universal Installer must point to the Java installation location (directory or directories containing the Java executables)	/usr/lpp/java/J1.4
   PATH	All applications running in the z/OS UNIX System Services shell environment	/bin Note: On most systems, the /usr/local/bin directory is included in the default setting of the PATH environment variable.
   LIBPATH	Path for library files	This should concatenate $ JAVA_HOME/lib: LIBPATH
   CLASSPATH	Path for class files	This should concatenate $ JAVA_HOME/lib/libjitc.so: CLASSPATH
   DISPLAY	Interactive installation	This is the TCP/IP address of the X server (the UNIX system or PC) where you want the installation panels to appear. It is in the form of a TCP/IP address followed by :port_number. The TCP/IP address can be a host name if you have DNS service on your z/OS system.

   
   

3. Open the user's shell startup file in any text editor:

   $ vi .profile
   

4. Enter or edit the following line, specifying a value of 022 for the default file creation mask:

   umask 002
   

5. Save the file and exit from the editor.

6. To run both the shell startup script and the environment script, enter commands similar to the following:

   $ . ./.profile
   

7. To verify that the environment has been set correctly, enter the following commands:

   $ umask
   $ env | more
   

   Verify that the umask command displays a value of 22, 022, or 0022 and the environment variables that you set in this section have the correct values.

8. For interactive installations, enter a command similar to the following to direct X applications to display on your X server system:

   $ DISPLAY=local_host:0.0 ; export DISPLAY
   

   In this example, local_host is the host name or IP address of the system you want to use to display Oracle Universal Installer (your workstation or PC).

9. If you determined that the /tmp directory has less than 100 MB of free disk space, identify or create a file system with at least 100 MB of free space and set the TMP and TMPDIR environment variables to specify a temporary directory on this file system.

   Enter commands similar to the following to set the TMP and TMPDIR environment variables:

   $ TMP=/mount_point/tmp
   $ TMPDIR=/mount_point/tmp
   $ export TMP TMPDIR
   

2.7.1 Copying the Software to the Hard Disk

z/OS does not have direct DVD support. Therefore, the software must be copied to a temporary location on the system before you can install it. In order to simplify this process, the installation directories have been compressed using PAX.

Each product DVD contains an installation archive file labeled Disk1.pax or Disk2.pax. Approximately 900 MB of temporary disk space is required for the contents of the two archive files.

To load the installation archive files from the product DVDs, perform the following steps:

1. Mount the first product DVD on a system that has a DVD drive and has either FTP or NFS access to the z/OS system where you will be installing the software. If you NFS-mount the DVD, then it needs to be mounted in binary mode. Ask your system administrator for the mount instructions specific to your system.

2. FTP the installation archive files in binary mode to a temporary location on the z/OS system. Ask your system administrator for the FTP instructions specific to your system.

Repeat the previous steps for each product DVD. When the installation archive files Disk1.pax and Disk2.pax are on your z/OS system, you no longer need the DVDs.

The next step is to extract the installation archive files. Refer to the section "Extracting the Installation Archive Files".

2.7.2 Downloading Oracle Database 10g Software from the OTN Web Site

This section describes how to download the installation archive files from OTN and extract them on your hard disk.

To download the installation archive files, perform the following steps:

1. Use any browser to access the software download page on OTN at:

   http://otn.oracle.com/software/products/oracle10g/
   

2. Choose the link for the software that you want to download.

3. On the Oracle Technology Network Developer License Terms page, answer all questions.

4. On the download page, identify the required disk space by adding the file sizes for each required file.

   The file sizes are listed next to the filenames.

5. Select a file system with enough free space to store and expand the installation archive files.

   In most cases, the available disk space must be at least twice the size of the installation archive files.

6. On the file system that you selected in step 5, create a parent directory, for example oracle10g, to hold the installation archive files.

7. Download the installation archive files to the directory that you created in step 6. Verify that the files you downloaded are the same size as the corresponding files on OTN.

8. Unzip the installation archive files using the unzip utility, as follows:

   Unzip each file on a PC or UNIX system, using a command similar to the following:

   $ unzip filename.zip
   

   The preceding command creates the following files:

   Disk1.pax
   Disk2.pax
   doc/
   welcome.htm
   

   FTP the unzipped files, Disk1.pax and Disk2.pax, in binary mode to your z/OS system. Ask your system administrator for the FTP instructions specific to your system.

   The result should be that there are two files, Disk1.pax and Disk2.pax, on your z/OS system.

   The next step is to extract the installation archive files. Refer to the following section "Extracting the Installation Archive Files".