Create a user who can run only 'rman script'

Question

Dear Friends ,
I have created a 'rmanback; user who only can run the RMAN script only . I have created user like follwoing way :
1)
SQL> CREATE USER rmanback IDENTIFIED BY rmanback;
User created.
SQL> GRANT RECOVERY_CATALOG_OWNER TO rmanback;
Grant succeeded.
SQL> GRANT CONNECT, RESOURCE TO rmanback;
Grant succeeded.
2)
And My rman script is :
rman target rmanback/rmanback@orcl <<!
run
allocate channel t1 type disk;
backup format 'df_%t_%s_%p'
(database);}
3) And I make a situation where sys user cannot enter the database using its password . For this reason i give the follwoing entry in "sqlnet.ora" :
SQLNET.AUTHENTICATION_SERVICES=(NONE)
Now when I run the script then it shows the follwing error :
[oracle@localhost RMAN]$ sh rman.sh.copy
Recovery Manager: Release 10.1.0.3.0 - Production
Copyright (c) 1995, 2004, Oracle. All rights reserved.
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-00554: initialization of internal recovery manager package failed
RMAN-04005: error from target database:
ORA-01031: insufficient privileges
Now plz tell me where is the problem . If I make any mistake then plz inform me .....
Thx
-----

Answer 1

SYSOPER is a privilege that is not enough for recovery manager. Talking about SYSOPER privileges to perform a backup/recover operation from a sqlplus prompt, SYSOPER can perform backup operations, but when recovery is required, the only kind of recover it can perform is a complete recover, if the user requires any kind of incomplete recover it won't be possible since SYSOPER cannot issue neither of until time|change|cancel|controlfile operations, which require the user to connect with the SYSDBA role.
If you attempt to connect to the database by means of recovery manager with an account with SYSOPER role, you will get the following error:
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS===============
RMAN-00571: ===========================================================
RMAN-00554: initialization of internal recovery manager package failed
RMAN-04005: error from target database:
ORA-01031: insufficient privilegesFor the OP, there is no way to create some sort of operator accout, since this will have to connect as SYSDBA to perform all operations required by recovery manager, you will absolutely have to rethink your security strategy, and as I previously posted, you should use OS authentication and protect access to the host server.
~ Madrid
http://hrivera99.blogspot.com/