Changing GID of DBA group

Hi All,
The UNIX SA would like to change the gid of the DBA group (basically when this was first setup the group was give an ID of 15 ... so the Unix SA would like to change this to something > 100).
I've read a number of articles regarding this however I've found conflicting information as to what steps are required. Some say that the oracle software does not reference the ID and so no re-linking is required other say that the software will require re-linking. Could anyone clarify this?
N.B
Only the ID of the group is changing the name of the group will stay the same.
System information:
Oracle Database 10g Release 10.2.0.1.0 - 64bit Production
PL/SQL Release 10.2.0.1.0 - Production
CORE 10.2.0.1.0 Production
TNS for Linux: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production
Linux 2.6.9-89.0.23.ELsmp #1 SMP Fri Mar 5 23:27:13 EST 2010 x86_64 x86_64 x86_64 GNU/Linux
Thanks for your help
- Kai

If group name is going to be same and ID is changing , no need of any relink.

Similar Messages

Changing the default DBA group

Hi guys,
For Oracle8i, 9i, and 10g, is it possible to change the DBA group once Oracle is installed? Let me give you an example:
I got Oracle 10g, with the DBA group 'oinstall'. Is it possible that i create a new OS group called 'DBAtest' and use this as the default DBA group so OS users members of this group can os-authenticate to oracle?
thanks,
james

Yes, on Unix platforms I think it is possible to change the OSDBA group (the group used to authenticate SYSDBA connection).
Not sure if there are any consequences afterwards, if you did not separate the Oracle software owner OraInventory group, usually 'oinstall', from OSDBA/OPER groups. Could be a good idead to work that out before implementing any changes!

"change the DBA group" in a windows environment

I would like to prevent OS-privileged users or connect as SYSDBA without giving password!
(there would be no passwordfile)
In a unix environment we can hide the name of dba-group changing config at /rdbms/lib
and relink:
Change: #define SS_DBA_GRP "dba" to: #define SS_DBA_GRP "mygroup"
rm config.o
make -f ins_rdbms.mk config.o ioracle
??? How can I do that in a WINDOWS environment ???

lkahlenb wrote:
sorry, thats an windows environment.
I didnt found anything like a config for group name as in unix (there is no relinking at windows).
If I use windows I can modify the config (another existing group), relink and recopy the default config.
So a unix.admin with only basic oracle o´know-how is confused.
I am looking for similar steps on windows...Someone with admin authority on the OS has ultimate authority. Even if you figure out a way to have Oracle use a group other than ora_dba, it won't take a rocket scientist of an SA to figure it out and put himself in the correct group. You need to turn on auditing and have some strong policies regarding DBAs and SAs staying in their lane.

Why we are creartinng uid=500(oracle) gid=500(oinstall) groups=501(dba),

why we are creartinng uid=500(oracle) gid=500(oinstall) groups=501(dba), UID is 500
any reason for this . please answer oracle gurus.
i important that the UID and the GID of user oracle are identical to that of the other RAC nodes. This information can be obtained using the following command:
[oracle@oradb1 oracle]$ id oracle
uid=500(oracle) gid=500(oinstall) groups=501(dba), 502(oper)

user8680248 wrote:
why we are creartinng uid=500(oracle) gid=500(oinstall) groups=501(dba), UID is 500
any reason for this . please answer oracle gurus.Because. Literally ... just because.
By convention, it should be above 100. By Red Hat community decision, the starting UID/GID has been moved from 100 to 500, to avoid accidental overlaps with 'system admin' accounts.
BUT, the Oracle owner is a system-like account. It could legitimately be under 500.
There is no magic to the number, other than the auto-increment tool that is provided in many of the commercial Linux variants start there. There is no Oracle dependency. There is only convention.
You should discuss this with your system administrator and come up with a number that is comfortable. If that means talking to yourself, all the easier.

How to add a dba group in Unix after Installation

I need help in figuring out how to add a dba group, which one would do prior to installation, but how can one do it after installation?
I need to have a group that will have people allowed to start and stop oracle. Is this possible to modify to do after installation?
Please help... Thank you.

Thanks for the advice. I am looking in my config.s file and this is what i see..
     .section     ".text",#alloc,#execinstr
/* 0x0000     7 */          .file     "x.c"
     .section     ".data",#alloc,#write
/* 0x0000     9 */          .global     ss_dba_grp
/* 0x0000     10 */          .align     8
     .global ss_dba_grp
ss_dba_grp:
/* 0x0000     17 */          .align     8
/* 0x0000     18 */          .xword     (.L12+0)
/* 0x0004     24 */          .align     8
/* 0x0004     25 */          .xword     (.L13+0)
/* 0x0008     26 */          .type     ss_dba_grp,#object
/* 0x0008     27 */          .size     ss_dba_grp,16
     .section     ".rodata1",#alloc
/* 0x0008     13 */          .align     8
.L12:
/* 0x0008     15 */          .ascii     "dba\0"
/* 0x0014     20 */          .align     8
.L13:
/* 0x0014     22 */          .ascii     "dba\0"
What should i change?

ORA-01031: insufficient privileges despite oracle belonging to DBA group

DB Version : 10.2.0.4.0
OS Version : Solaris 5.10
Os user oracle already belongs to DBA group.
$ id -a
uid=1001(oracle) gid=1100(oinstall) groups=1100(oinstall),1800(dba)But, i get the following error
$ sqlplus / as sysdba
SQL*Plus: Release 10.2.0.4.0 - Production on Mon Nov 29 14:33:59 2010
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.
ERROR:
ORA-01031: insufficient privileges
Enter user-name: ^C
$
$
$ sqlplus sys/password as sysdba
SQL*Plus: Release 10.2.0.4.0 - Production on Mon Nov 29 09:34:13 2010
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - Production
With the Partitioning, Data Mining and Real Application Testing options
SQL>Value of remote_login_passwordfile parameter
SQL> show parameter password
NAME TYPE VALUE
remote_login_passwordfile string EXCLUSIVEWhat could possibly be the reason?

Hi,
Have you create the orapw file in the $ORACLE_HOME/dbs with orapwd ?
example :
orapwd file=${ORACLE_HOME}/dbs/orapw${ORACLE_SID} password=change_on_install entries=40
Then the unix user oracle will be create in the orapw${ORACLE_SID} file
after if you want to create another user :
grant sysdba to TOTO; the unix user TOTO could do : connect / as sysdba
Regards,
Mario Alcaide
http://marioalcaide.wordpress.com

Add grid user to dba group

Hello,
After RAC installation, We are facing some cluster issues. After investigation, Oracle support suggested to add the grid user to the dba group. We missed to add the grid user to the dba user in most of the nodes. This is Linux Redhat 5.
How can I add grid user to dba group and keep the grid user belonging to the other linux groups? what 's the correct command?
Thanks,
Diego

Hi,
As root:
#### check before
id grid
#### Change It
usermod -a -G dba grid
#### Check after
id gridLevi Pereira

11gR2 problem for dba group user

Hi Pavan Sir,
After the 11gR2 Installation and connect to oracle as one of the dba group user(ex: tuser)
1) when sqlplus / as sysdba --> startup nomount --> receiving the error ORA-48189 (The OS command to create directory failed) for the diagnostic_dest(ex: /disk1/oradata/test)location, but the specified directory is created and owned by the same dba group user(test).
2) If suppose the "/disk1/oradata/test" directory permission are modified by 777, the dba group user(test) can connect to nomount stage, but the sub directories of diagnostic_dest automatically gets created (like /disk1/oradata/test/diag/rdbms then etc......) are being owned by oracle user and also if the db is created ,the control file,redolog file and datafiles are automatically getting owned by oracle user but not by the test user.
Which was not the case till 10gR2.
Plz. provide any body provide us with some solution to overcome the above experienced problem which is implemented in our Dev. box.
Thanks in Advance.
Best regards,
Habeeb.

Dear user,
Even if the perm are changed by -R ,the files are automatically owned by oracle user, not by the test user.
Have any body tried creating oracle database using dba group user in 11gR2, but the db files being created by test user should not be automatically owned by oracle user. If so , plz. forward me the steps.
Thanx in advance.

Problemm with dba group vs oinstall group

Hi to all ;
This is related to oracle as well as some os related security problems. please clarify it.
I tried but couldn't solve it All information's given here ..
Testing from user 'A'
+# useradd -m -g oinstall a+
+# passwd a+
Changing password for user a.
New UNIX password:
BAD PASSWORD: its WAY too short
Retype new UNIX password:
passwd: all authentication tokens updated successfully.
su - a
+[a@testorcl ~]$ export+
ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1
+$ export PATH=$PATH:$ORACLE_HOME/bin+
+$ export ORACLE_SID=testdb+
+$ sqlplus /nolog+
SQL*Plus: Release 10.2.0.1.0 - Production on Thu Jan 3 01:33:49 2013
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Testing From user 'b' :
+# useradd -m -g dba b+
+# passwd b+
Changing password for user b.
New UNIX password:
BAD PASSWORD: its WAY too short
Retype new UNIX password:
passwd: all authentication tokens updated successfully.
su - b
Password:
+$ export ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1+
+$ export PATH=$PATH:$ORACLE_HOME/bin+
+$ export ORACLE_SID=testdb+
+$ sqlplus /nolog+
sqlplus: error while loading shared libraries: libsqlplus.so: cannot open shared object file: No such file or directory
*>> From oracle user finding libsqlplus.so >>*
*[oracle@testorcl ~]$*
*$ find / -name libsqlplus\* -ls 2>/dev/null*
+1378188 1296 -rw-r----- 1 oracle oinstall 1319436 Jun 22 2005 /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.a+
+1378193 1028 -rw-r----- 1 oracle oinstall 1047293 Jun 22 2005 /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.so+
SQLPLUS LOCATION with associated group
+$ ls -l $ORACLE_HOME+
drwxr-x--- 9 oracle oinstall 4096 Dec 24 03:28 sqlplus
Please Note :
USER 'a' belongs oinstall group.
USER 'b' belongs dba group.
My questions are :
*1.why OS user can access database with oinstall group ?*
*2.why OS user can't access database with dba group ?*
Note: This is concept of oracle
**To connect as sysdba using OS Authe*ntication ; UNIX OS user must be a part of OSDBA (dba) group.*
Once the user is part of OSDBA group.
but in dba group with os user 'b' , can't connect sqlplus , what's the real problem here ?
version : 10gr2
*$ uname -a*
Linux testorcl 2.6.9-42.0.0.0.1.ELsmp #1 SMP Sun Oct 15 14:02:40 PDT 2006 i686 athlon i386 GNU/Linux
Edited by: 952909 on Jan 4, 2013 1:03 PM

Hi dude ;
Thanks for your reply.
So , You suggest me to change install directory permission from 750 to 775.
$ cd install
[oracle@testorcl install]$ ls -l
total 240
-rw-r----- 1 oracle oinstall      0 Jun 7 2005 createseed1.sh
-rw-r----- 1 oracle oinstall      0 Jun 7 2005 createseed.sh
-rw-r----- 1 oracle oinstall    977 Dec 24 03:29 envVars.properties
drwxr-x--- 2 oracle oinstall   4096 Dec 24 03:26 jlib
-rw-r----- 1 oracle oinstall 194849 Dec 24 03:29 make.log
-rwxr-xr-x 1 oracle oinstall      0 Dec 24 03:29 oratab
-rw-r----- 1 oracle oinstall    132 Dec 24 04:01 portlist.ini
-rw-r----- 1 oracle oinstall    221 Dec 24 04:02 readme.txt
-rwxr-xr-x 1 oracle oinstall    824 Dec 24 03:28 rootdeletenode.sh
-rw-r----- 1 oracle oinstall   9646 Dec 24 03:28 rootlocaladd
-rw-r----- 1 oracle oinstall      0 Jun 7 2005 seed.log
-rw-r----- 1 oracle oinstall   2800 Jun 7 2005 templocal
drwxr-x--- 2 oracle oinstall   4096 Dec 24 03:29 unix
drwxr-x--- 2 oracle oinstall   4096 Dec 24 03:28 utl
*>> Permission changed as per your suggestion >>*
*[oracle@testorcl db_1]$ chmod 775 install*
*[oracle@testorcl db_1]$ ls -l*
drwxrwxr-x   5 oracle oinstall   4096 Dec 24 04:02 install
*>> Trying to find changePerm.sh >>*
[oracle@testorcl db_1]$ cd install
[oracle@testorcl install]$ ./changePerm.sh
-bash: ./changePerm.sh: No such file or directory
[oracle@testorcl install]$ cd
[oracle@testorcl ~]$ whereis changePerm.sh
changePerm:
[oracle@testorcl ~]$
In my testdb file not found ... Any suggestion to find DUDE
Please note :
http://www.oracle-base.com/articles/10g/oracle-db-10gr2-installation-on-rhel-4.php
Installation Doc did n't say anything to change permission related to install group +( from 750 to 775 )+
Can you please clarify this ?
Thanks Dude ..

Oracle-Xe, can't seem to tell that I am a part of the dba group

Hi, I just installed oracle-xe and it seemed to go well. but when I make myself part of the group and try to start the database from the applications menu. I get this message.
Operation failed. KarlRove is not a member of 'dba' group
in Gnome. Yet when I do
[KarlRove@WhiteHouse ~]$ id KarlRove
uid=1000(KarlRove) gid=100(users) groups=100(users),7(lp),10(wheel),50(games),91(video),92(audio),93(optical),95(storage),98(power),1000(dba)
Oracle created the dba group I just added myself to it with
usermod -a -G dba KarlRove
Was that wrong? Any ideas as to what is happening? Oracle also created a user called Oracle, who's account is disabled in user settings.

I don't know about oracle, but with regular system-level groups you have to completely logout out your user and log back in before it picks up a new group.

PO Change according to material group and G/L Account no.

Hi Expert,
I have a requirement of "PO Change according to material group and G/L Account no.". I am using BAPI_PO_CHANGE.
But it is giving error.
"I 06 684 Releases already effected are liable to be reset
E BA 003 Instance 4500010532 of object type PurchaseOrder could not be changed
E ME 046 Purchase order item 00010 still contains faulty account assignments
W ME 039 Goods receipt posted unvaluated due to multiple account assignment
E ME 083 Enter G/L account no."
Can any body tell me how to fill this BAPI.......
Even i am trying to debug standard tocde of PO but it is not calling bapi BAPI_PO_CHANGE.
Could you please help me on this.
Regards
Sanjay Kumar

Hello,
To assign material group to G/l account you have to matain valuation class for Material group
SPRO >> Materials Managment >> Purchasing >> Material Master >> Entry aids for items with out material master.
Assign this valaution class to G/l in OBYC.
Regards,
Shailesh

Change in Account Assignment group in Open Sales orders

Dear All
In SAP 4.7 there are 100 nos of Sale order item having Account Assignment Group .
I need to change the account assigment group field from open sale orders, but the field is grey.
Is it possible to change the subject field.? Please help
Regards
BGLimaye

If I am correct, even in creation mode, this field (Account Assignment Group) will be in grey mode and cannot be maintained manually in sale order.
Whatever you maintain in material master, that only will flow. Due to some reasons, if the same is not flowing in sale order and you want to rectify this, if you ask me, the only option is close those line items, maintain the account assignment group in material master, create LSMW for VA02 and include as new line items.
thanks
G. Lakshmipathi

LINUX:while Deleting OLD backup's got error that ORACLE is not in DBA group

Error
Error - The specified host user is not a member of the operating system DBA group. The host user must be a DBA group member since the database user does not have the SYSDBA role.
But. put users: system,oracle in OS /etc/group :
oracle:x:500:oracle,system
And both users have the DBA role

To be able to OS authenticate login as sysdba, your OS user need to be in dba group which you choose when you do installation.
SYSDBA role is not same as DBA role

BAPI or FM to change the PO release group

Hi,
I would like to change the PO release group (EKKO-FRGGR).
I could not find the way to change this field through BAPI BAPI_PO_CHANGE.
Please suggest me any BAPI or FM!
Thanks,
Khanh

Hi,
It seems ME_REL_STRATEGIE_EKKO is used for creating a new PO.
I want to change the PO release group for a specific PO only.
And the BAPI BAPI_PO_RELEASE seems to change the Release Code, not Release Group!!!
Please advice!
Thanks,
Khanh
Edited by: Khanh Nguyen on Sep 23, 2010 2:37 PM

Change/ Add screen in Group Box specify tab layout for Asset master Record

Hi All,
I need to add or change group box in specify tab layout for Asset Master Record. Please advice where i can change or create new Group Box.
Thanks & Regards,
Pankaj

Hi,
Try at below path:
Financial Accounting (New)>>Asset Accounting>>Master Data>>Screen Layout>>Define Screen Layout for Asset Master Data.
here you can change the layout for the same.
Kind Regards,
Mehul

Changing GID of DBA group

Similar Messages

Maybe you are looking for