DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:mime-version:content-type;
	b=ECAdfnbURhY8ELx+RVBtRxIKCg8RZS7ALbQZ5ag7d09aEyxKPVgfC4fhgufDpDOYmJ6ZaPWF5Im1URDp+NqLjvxQE0P7ipBmRAjiAMP5cE4NlpOb3j5bJfNsHm4vEalg+2GJPJvN0hcsJ0gN334fBKhiUpKSaHCtmxDDxYVf29c=
Message-ID: <8078a1730805281837y1ed331bey4e7db16a63423cfa@mail.gmail.com>
Date: Wed, 28 May 2008 18:37:06 -0700
From: "Medi Montaseri" <montaseri@gmail.com>
To: postgresql-admin <pgsql-admin@postgresql.org>
Subject: what happend to my database
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_9074_7918691.1212025026631"

------=_Part_9074_7918691.1212025026631
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi,

I am faced with a database disapperance and seeking some explanations
outside of gremlins.
I had a database running at

cat /etc/sysconfig/pgsl/postmaster
PGDATA=/qmsvol/pg_8.1.9/data
PGLOG=/var/log/pgsql/pgstartup.log

Where /qmsvol is an iSCSI block device
A couple of days ago, my server was rebooted and by the time I got to it my
database was deleted, gone, zapped, not there any more.

I looked at my pgstartup.log where I see the following....

postmaster cannot access the server configuration file
"/qmsvol/pg_8.1.9/postgresql.conf": Permission denied
over 17 times and then following by...
The database cluster will be initialized with locale en_US.UTF-8.

I think the following happend...
Since my PGDATA was on an iSCSI device, by the time /etc/rc3.d/S64postgresql
was executed, the device below it was not available.....question...why the
error says "permission denied" vs "file not found".  In the meantime, pg_ctl
kept trying and finally concluded that the data directory is blank, and
hence this must be a out-of-box case and he is good to initdb the PGDATA and
as it called initdb to do the job... the iSCSI volume below it came online
and by then the bomb had already been dropped.

Now I need to find some facts to support this...
Where else can I look for forensics

Thanks
Medi

------=_Part_9074_7918691.1212025026631
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi,<br><br>I am faced with a database disapperance and seeking some explanations outside of gremlins.<br>I had a database running at <br><br>cat /etc/sysconfig/pgsl/postmaster <br>PGDATA=/qmsvol/pg_8.1.9/data<br>PGLOG=/var/log/pgsql/pgstartup.log<br>
<br>Where /qmsvol is an iSCSI block device<br>A couple of days ago, my server was rebooted and by the time I got to it my database was deleted, gone, zapped, not there any more.<br><br>I looked at my pgstartup.log where I see the following....<br>
<br>postmaster cannot access the server configuration file &quot;/qmsvol/pg_8.1.9/postgresql.conf&quot;: Permission denied<br>over 17 times and then following by...<br>The database cluster will be initialized with locale en_US.UTF-8.<br>
<br>I think the following happend...<br>Since my PGDATA was on an iSCSI device, by the time /etc/rc3.d/S64postgresql was executed, the device below it was not available.....question...why the error says &quot;permission denied&quot; vs &quot;file not found&quot;.&nbsp; In the meantime, pg_ctl kept trying and finally concluded that the data directory is blank, and hence this must be a out-of-box case and he is good to initdb the PGDATA and as it called initdb to do the job... the iSCSI volume below it came online and by then the bomb had already been dropped.<br>
<br>Now I need to find some facts to support this...<br>Where else can I look for forensics<br><br>Thanks<br>Medi<br><br><br><br><br>

------=_Part_9074_7918691.1212025026631--