CRS-2630: Only cluster administrators are allowed to create local resources

I have installed and configured a 12c database across two linux nodes and all is well. I have also installed the Oracle rdbms 12.1.01 on the same nodes. Now when I try and use netca or dbca to create a database or listener, I get the following errors;
CRS-2630: Only cluster administrators are allowed to create local resources
I can log in as the GRID user and can create resources but not as database user. Both users are members of the dba group.
Any ideas anyone?  Thanks a lot H.

The issue is resolved, the 12c configuration is a lot more comprehensive than 11g. Here we have to create the user DBA with the right rights to access and change the cluster resources.
For example to allow the dba users the ability to create listeners on the RAC nodes, we have to issue some command such as follows; here the oedsdp is the dba user and ogridp is the grid main owner.
t@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.rac1node.vip -u user:oedsdp:rwx
[root@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.net1.network -u user:oedsdp:rwx
[root@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.net1.network -u user:oedsdp:rwx
[root@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.rac2node.vip -u user:oedsdp:rwx
[root@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.net1.network -u user:oedsdp:rwx
Interesting, I think we need to carefully plan the new user groups before we start the GRID configuration.
H.

Similar Messages

  • ExceptionMessage: 'Access denied. Only machine administrators are allowed to create administration service job definitions of type: Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition

    Hi,
    I am getting error "Access Denied" when my code tries to get "SPWebService.JobDefinition" with an AppPool account of content site. The same core runs correctly for the AppPool of CentralAdmin site.
    Lemme provide some background of the servers
    - We have multi-server FARM
    - WFE and APP servers are in different domains, there is one-way trust between the domains.
    - We have UAC (User Access Control) set as high on each server
    - My site is internet site
    Lines of Code are following
    SPWebServiceservice =
    SPWebService.ContentService
    varsyncTimerJob =
    fromSPJobDefinitionjob
    inservice.JobDefinitions
                       wherejob.Name
    == "MyJob"
    selectjob;
    I am running the above code with in SPSecurity.RunWithElevatedPrivileges so the above code is running with APP POOL account. I m getting
    the error in the 2nd line where I have a LINQ query. And I m assuming this is because of "service.JobDefinition" line. Can anyone help me?
    Detailed Error:
    An exception has occurred.   ExceptionType: 'TargetInvocationException'   ExceptionMessage: 'Exception has been thrown by the target of an invocation.'   StackTrace: ' 
    at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor)     
    at System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)     
    at Microsoft.SharePoint.Administration.SPAutoSerializingObject.GetInstanceFromType(Type type, String typename)     
    at Microsoft.SharePoint.Administration.SPPersistedObject.GetInstance(XmlNode xml, Guid classId, Boolean bResolveMissingTypes)     
    at Microsoft.SharePoint.Administration.SPFileSystemCache.FetchObjectFromFileSystem(Guid id)     
    at Microsoft.SharePoint.Administration.SPFileSystemCache.GetValue(Guid id)     
    at Microsoft.SharePoint.Administration.SPCache`2.get_Item(K key)     
    at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid id, Boolean checkInMemoryCache, Boolean checkFileSystemCache)     
    at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid id)     
    at Microsoft.SharePoint.Administration.SPConfigurationDatabase.Microsoft.SharePoint.Administration.ISPPersistedStoreProvider.GetObject(Guid id)     
    at Microsoft.SharePoint.Administration.SPPersistedObjectCollection`1.get_Item(Guid objId)     
    at Microsoft.SharePoint.Administration.SPPersistedObjectCollection`1.<GetEnumeratorImpl>d__0.MoveNext()     
    at System.Linq.Enumerable.WhereEnumerableIterator`1.MoveNext()     
    at System.Linq.Enumerable.Count[TSource](IEnumerable`1 source)     
    at Project1.SharePoint.Common.UtilityHelper.IsSyncSchedulingDisabled(StringBuilder logMessage)'   Source: 'mscorlib'   TargetSite: 'System.Object InvokeMethod(System.Object, System.Object[], System.Signature, Boolean)'   ------------------------------------------------------------  
    Inner exception:   ------------------------------------------------------------    ExceptionType: 'SecurityException'    ExceptionMessage: 'Access denied.  Only machine administrators are allowed to create administration
    service job definitions of type: Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition, Microsoft.TeamFoundation.SharePoint.WebAccess, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a.'    StackTrace:
    at Microsoft.SharePoint.Administration.SPAdministrationServiceJobDefinition..ctor(String name, SPService service, SPServer server, SPJobLockType lockType)      
    at Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition..ctor()'    Source: 'Microsoft.SharePoint'    TargetSite: 'Void .ctor(System.String, Microsoft.SharePoint.Administration.SPService, Microsoft.SharePoint.Administration.SPServer,
    Microsoft.SharePoint.Administration.SPJobLockType)'
    Any help will be appreciated.

    The bottom of your stack trace begs to differ:
    at Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition..ctor()'   
    Source: 'Microsoft.SharePoint'    TargetSite: 'Void .ctor(System.String, Microsoft.SharePoint.Administration.SPService, Microsoft.SharePoint.Administration.SPServer, Microsoft.SharePoint.Administration.SPJobLockType)'
    Scott Brickey
    MCTS, MCPD, MCITP
    www.sbrickey.com
    Strategic Data Systems - for all your SharePoint needs

  • License not present. With the trail version only limited replays are allowed... Qtp automation

    Hi All.
             We are doing QTP automation testing for our flex application. But after running all 30 tests it is showing License not present. with the trail version only limited replays are allowed. We are using  flex sdk 3.5 and flash builder 4 plugin for eclipse. we are building our application using ant and we are deploying the application directly and testing it.  Can any one tell Steps to resolve this issue...
              please step by step required..
    Thanks
    Ram

    You need to have valid premium license for Adobe. Only then it would work.

  • License not present.  With the trial version only limited replays are allowed -- Flex builder 4.5 Premium eclipse plugin with SDK 3.5

    Hi ,
    We are using Flex SDK 3.5 and using eclipse to build the war in order to make it automation compatible , Right now we tried with Premium version of Flex Builder 4.5 eclipse plugging to build and make application automation capable. But we are facing issues in terms of license , After deploying the automation compatible build we are getting error message "License not present.  With the trial version only limited replays are allowed".
    Previously we are using Flex Builder 4.0 and everything was working fine .
    Is Flex Builder 4.5 doesn't support SDK 3.5 ?
    Please help .
    Thanks in advance
    Thanks and Regards
    Sunil Kumar

    with trial version (FB basic) you can record/replay only 30
    script lines. You need to buy FB pro license to remove this
    restriction

  • AUR Submition: only lowercase letters are allowed.

    I'm getting this error when trying to submit a src tarball:
    Submit
    Invalid name: only lowercase letters are allowed.
    pkgname() is all lower-case, so I'm not sure why it's complaining....?
    Here's the PKGBUILD:
    # Maintainer: Phillip Smith <[email protected]>
    pkgname=('kernel26-fedora-pae' 'kernel26-fedora-devel-pae')
    pkgbase="kernel26-fedora-pae"
    pkgver=2.6.31
    _FEDORA_RELEASE=40.fc12
    pkgrel=1
    url="http://www.kernel.org/"
    pkgdesc="The Linux Kernel and modules, compiled by Fedora. PAE supported. (Memory >= 4GB)"
    arch=('i686' 'x86_64')
    license=('GPL2')
    depends=('coreutils' 'module-init-tools' 'mkinitcpio>=0.5.15')
    makedepends=('rpmextract')
    backup=('etc/mkinitcpio.d/kernel26.preset')
    provides=("kernel26=$pkgver" "kernel26-fedora-pae=$pkgver")
    conflicts=('kernel24' 'kernel24-scsi' 'kernel26-scsi' 'kernel26' 'kernel26-fedora')
    # We need to force the upgrade because the previous maintainer
    # used the Fedora release number as the pkgrel number so we could
    # never have more than one release of each PKGBUILD!
    options=(force)
    install="kernel26-fedora.install"
    source=("http://kojipkgs.fedoraproject.org/packages/kernel/${pkgver}/${_FEDORA_RELEASE}/${CARCH}/kernel-PAE-${pkgver}-${_FEDORA_RELEASE}.${CARCH}.rpm"
    "http://kojipkgs.fedoraproject.org/packages/kernel/${pkgver}/${_FEDORA_RELEASE}/${CARCH}/kernel-PAE-devel-${pkgver}-${_FEDORA_RELEASE}.${CARCH}.rpm"
    "kernel26-fedora.preset")
    md5sums=('cfc0310d8afbfdc42074029a2d6ae565'
    '2ade9257df9eaccff5a4ad8fbbbd0c7c'
    'c8f559ad29f3bce277ed054d85878c40')
    build() {
    msg "Nothing to compile for $pkgname"
    package_kernel26-fedora-pae() {
    cd $pkgdir
    rpmextract.sh $srcdir/kernel-PAE-${pkgver}-${_FEDORA_RELEASE}.${CARCH}.rpm
    rm -rf $pkgdir/etc/ld.so.conf.d || return 1
    rm -rf $pkgdir/usr || return 1
    msg "Generating kernel26-fedora.kver..."
    _kernver=${pkgver}-${_FEDORA_RELEASE}.${CARCH}.PAE
    mkdir -p $pkgdir/etc/mkinitcpio.d/kernel26-fedora.kver <<EOT
    cat > $pkgdir/etc/mkinitcpio.d/kernel26-fedora.kver <<EOT
    # DO NOT EDIT THIS FILE
    ALL_kver='$_kernver'"
    EOT
    # Install mkinitcpio files
    install -D -m644 $srcdir/kernel26-fedora.preset $pkgdir/etc/mkinitcpio.d/kernel26-fedora.preset || return 1
    package_kernel26-fedora-devel-pae() {
    replaces=('kernel-devel-pae')
    cd $pkgdir
    rpmextract.sh $srcdir/kernel-PAE-devel-${pkgver}-${_FEDORA_RELEASE}.${CARCH}.rpm
    # vim:set ts=2 sw=2 et:

    Oh... I thought I had other split packages in there. Obviously not!
    And I see there's already a feature request for it... Cool. I'll split the package back into individual PKGBUILD's for now
    http://bugs.archlinux.org/index.php?do= … k_id=16394

  • Only asset postings are allowed in this account

    Hi All,
    My client upgraded SAP System from 4.6 to 6.0. While testing the depreciation run in AFAB, it is showing the error as "Only asset postings are allowed in this account". We have checked all the settings relating to GL Accounts for Depreciation and Accumulated Depereciation. All are correct, like  Depreciation account is a P&L Acccount and Accumulated depreciation account is a Balance sheet Asset reconciliation account. Checked the account assignement in AO90 as well. They are also correct.
    The deprecaition was posted up to 2nd period and now we are simulating for 3rd period for which the error is showing, We did not change any configuration setting or the master data.
    Is anybody having any idea why such error is showing ? Kindly let us know
    Thanks
    shankar

    Hi,
    The user has written a Validation for authorisation to run the depreciation with out proper message. The problem was solved when we run the depreciation with another user. Thanks all .
    Regards
    shankar

  • I can't download music from my library to my ipod because it says only 5 accounts are allowed to share content. How do I get around this?

    I can't download music from my library to my ipod because it says only 5 accounts are allowed to share content. How do I get around this?

    Or how do I change the 5 devices. Some are not used anymore

  • Sorry, only emergency calls are allowed !

    I recently bought this curve off someone and when i put in my sim card it just states "Sorry, only emergency calls are allowed ". Is there a way to get this off so i can use it? I have tried to format it by entering the wrong password and tried to erase and wipe out everything but still no answer. Any clues? Please please help!

    This problem is usually because the BlackBerry is locked to a specific carrier.  Unfortunately, you are probably using a different carrier than the person who sold you the BlackBerry.
    If this is a legitimate BlackBerry you have obtained, see if you can get in contact with the seller and get them to unlock the BlackBerry.  Often, T-Mobile allows BlackBerries to be unlocked if the subscriber have been with them for some time.  So contact the seller, get them to call the original carrier, get the BlackBerry unlock code for you, and send it to you to unlock the unit.  You may need to provide the IMEI code.  Make sure the seller has properly deactivated his/her BlackBerry service, so that the PIN is not in use.
    There are other gray-area options (i.e. "GSM unlocking" services), but I am not sure if RIM wants such discussion on these forums.

  • CR Add-on 2.0.0.7 Problem: Only Super Users are allowed access ...

    Hi Everybody,
    We have installed the latest ( to my best understanding) version of CR Add-on (2.0.0.7 , compiled for 64 bit , downloaded from Richard Duffy's blog) and we are receiving the error message "Only Super Users are allowed access to this function" .
    We've checked that the users are all Super Users and they have Professional and Addon licenses.
    The only relevant thread I've found in forums solved the issue by installing the latest version of CR Add-on, which we've did.
    The installation is  B1 2007 A SP001 ,PL 11.
    Any ideas will be highly welcomed.
    Thanks in advance,
    Simon

    We have the same issue, this happens when you go to Administration > Crystal Reports
    We can't see the reports in CR
    Please if you have a solution tell me.
    Thx and Regards,

  • Only emergency calls are allowed

    my Droid is up to date in billing, so this is not the issue.
    my phone will not let me call anone because it says it is for emergency use only.  i do not know how it got changed.  i have been using it for a couple of months now and walaah, somewhere a setting is stopping me from using my unlimited plan.  please help.

    Yes, my phone does have a sim card.  I got Verizon to verify that.  Yes, I rebooted and everything cleared up.  She said if this happens again and the reboot does not work to please call the 1800 number and get technical support.  Good luck.  Thanks for your help too.

  • Allow to create, only two objects for a class

    Hi,
    This question is asked in my interview. In singleton concept only one object is created, likewise only two objects are created for a class.
    For that i have write a code like this,
    public class OnlyTwoObjects {
         private static OnlyTwoObjects a1;
         private static OnlyTwoObjects a2;
         public static int n = 0;
         public static OnlyTwoObjects getInstance() {
              if (a1 == null) {
                   a1 = new OnlyTwoObjects();
                   return a1;
              } else if (a2 == null) {
                   a2 = new OnlyTwoObjects();
                   return a2;
              } else if (n == 1) {
                   return a1;
              } else if (n == 2) {
                   return a2;
              return null;
    } But they told this is not good way to do this.
    I don't know how to do this, if any body knows kindly let me know.

    vijay wrote:
    But i will explain my code, in that code we are allowed to create only two objects, Maximum. Understood.
    suppose both objects are created, then i will ask which object you need first or second, this is decided using the variable n if it is 1 then it will return the first object and it is 2 it will return the second object. sorry i didn't explain this in my previous post.This is your approach. Is this the requirement as well? Is it necessary that the user decide on which instance (first or second) is returned?Even if it was the requirement that the user decides which instance (first or second) is returned, with the original proposed implementation, the user only gets to decide which instance after calling getInstance() twice. If he calls getInstance() with n=2 when a1 is still null, he still gets a1. If he calls getInstance with n=1 when a2 is still null but a1 is non-null, then he gets a2. As is, he always gets a1 on the first call, a2 on the second call, and after that gets null unless he has set n to 1 or 2. (This explanation ignores any multi-threading issues that may come into play. This explanation is for a single thread.)

  • Share Feature - Document Library - Contribute Users getting: Only a limited amount of people are allowed to share this content

    Hi
    I am getting the following error when users with contribute permissions try to share an individual document from a document library.
    If I upgrade the user to full control they are then able to Share the file ok and not get the above error.
    So what I am wondering is should users with contribute access be able to Share the document? If not then why is the Share option available?
    Which permission level if I edit the contribute permission levels do I need to add, I cannot see any Share specific permissions for lists and reluctant to give contribute users access to modify permissions?
    I'll continue troubleshooting to see if I find the solution but wondered if anyone in the community had come accross this? Googling the error message
    Only a limited amount of people are allowed to share this content brings up nothing.

    Today I fixed this issue by enabling Site Access Requests on the SharePoint sites with this problem. (http://blog.cloudshare.com/2012/12/09/how-to-configure-the-site-access-request-in-sharepoint-2013/)
    Personally I think this is created by design, because it happens a lot that content is shared with users which do not have access to a SharePoint site and/or library. So I guess we do not have another option..
    Programmatically the above could be done by setting the "SPWeb.RequestAccessEmail" property with a valid e-mail address. For example the site owner's e-mail address. Setting the "SPWeb.RequestAccessEnabled" property is not allowed and
    is automatically done by settings the "SPWeb.RequestAccessEmail" property

  • XML Error: Only segments are allowed on top level,found non-segment E1EDK03

    Hi,
    I have a problem in my senario of receiving XML files with a Business Connector (4.7), adding some data to certain segments and elements, do some mapping steps and then convert the XML file to SAP IDoc. Then the IDoc should be send to R/3 system via ALE.
    The senario works so far, if I test it with the "Send XML file.." option in the menu "Test" of the Business Connectior itself.
    If I try to send the XML data as string in my browser the following error always occurs:
    $localizedError:
    com.wm.lang.xml.WMDocumentException: Invalid IDocXML document: Only segments are allowed on top level, found non-segment E1EDK03
    $errorType:
    com.wm.util.coder.InvalidDatatypeException
    If I send send a string containing the XML data incl. the data I actually wanted to add in a flow step, it works.
    Can anybody help me?
    Thanks,
    Kai
    Message was edited by: Kai Lerch-Baier

    I had been using MC Internet Explorer until this . Have compared this one to functioning XML viewable with MS Internet explorer. Below is code I am using trying to resolve this problem.
    <?xml version="1.0"?>
    <?sap.transform simple?>
    <tt:transform xmlns:tt="http://www.sap.com/transformation-templates">
    <tt:root name="ecrtas"/>
    <tt:template>
    <tt:loop ref="ecrtas">
    <ImportInstructions>
    <ProjectSponsorInstruction>
      <Instruction mode="Add">
       <SponsorName tt:value-ref="SPONME"/>
       <SponsorNumber>
         <IdValue name="Sponsor Number"><tt:value ref="SPONSOR"/></IdValue>
         </SponsorNumber>
        <SponsorType tt:value-ref="SPONTYP"/>
      </Instruction>
    </ProjectSponsorInstruction>
    </ImportInstructions>
    </tt:loop>
    </tt:template>
    </tt:transform>
    Thank you again

  • Edit Return Addresses - Invalid hostname. Only US-ASCII characters are allowed.

    On our two C series appliances the C350 and the C660 we can log in to the GUI and go to System Administration \ Return Addresses and change the
    Return Addresses for System-Generated Email to something more meaningful and practical then reports@hostname.  For example we like to use a proper suffix instead of @hostname we use @ourAwesomeCompany.com. Anyway on the M series the M650 we can't change the suffix East of the @ sign.  We get this error:
    Invalid hostname. Only US-ASCII characters are allowed.
    Did any of you, or can any of you change the Return Addresses on your M series?  You don't have to go as far as commiting the changes if you are willing to try this for me, just type something in and hit Submit that should be enough to generate the error.

    Hello,
    We have two M1060.
    When we tested the version 7.7.0-206 or earlier, we found the same problem as you by GUI.
    Recently, we're migrating to 7.9.0-107 and that is right now.
    So, you can migrate without fear

  • Err "Only absence less than 1 day are allowed for this absence type

    Hi Experts,
    When I am creating IT2001 record for EL an error is coming, "Only absence less than 1 day are allowed for this absence type". Although Counting rule is defined properly and in check for Condition of absence <1 day & full day both are checked.
    Regards,
    Tomesh

    Hi Nalla,
    The remaining amount for Casual leave is not updated even after we apply the casual leave .
    Suppose there are 20 CL quotas available. If we apply for 2 CLs then remaining should be 18.
    Regards,
    Tomesh

Maybe you are looking for

  • Hi - How do I connect an HDTV as a second monitor to Thunderbolt display with macbook pro in clamshell mode?

    I have a Late 2011 Macbook Pro in clamshell mode connected to a Thunderbolt Display with the built in Thunderbolt cable. I want to then connect an HDTV via the Thunderbolt port at the back of the Thunderbolt display. I already had a  cable that I tho

  • How to trace a USER in oracle?

    Hi Sir, I have a rquirement that I need to Trace a session created through the Application. The only data I have is that I know the application will connect to a Database schema and nothing else. How is it possilbe that I can create a trace file for

  • Add AEX to Time Capsule

    Hello- I just bought Time Capsule and it works great. I would like to use my old Airport Express to extend the network so I can also stream music from iTunes. Does anybody know how to do this? Thanks.

  • Photoshop Elements doesnt work on my NEW computer.

    Had PS Elements on my old computer, it died got a new one.  Downloaded PS Elements on my new computer but now it wont work.  What do I need to do to get it to work? Someone told me that Adobe wont let the same program software be downloaded onto more

  • Logic Express 7.2 can't find contiguous sync to sync video properly

    I'm trying to Sync video in Logic Express, I remember in Logic Pro that there was a contiguous Sync section that you could uncheck on the movie and then the movie would play fine, but now I keep on seeing the movie continually hunting for the correct