DB13 jobs errors (ORA-01031: insufficient privileges) after System Copy
Dear SAP gurus,
I performed an ECC60 System copy from Dev to a sandbox system (Linux-Oracle). When I try to access DB13 all jobs are cancelled:
Example of "check and update optimizer statistics" job log:
Job started
Step 001 started (program RSDBAJOB, variant &0000000000001, user ID TGEPOMA1)
Execute logical command BRCONNECT On host eccsbx01
Parameters: -u / -jid STATS20110720050000 -c -f stats -t ALL
BR0801I BRCONNECT 7.00 (46)
BR0805I Start of BRCONNECT processing: cegkmpzk.sta 2011-07-27 05.00.32
BR0484I BRCONNECT log file: /oracle/SBX/sapcheck/cegkmpzk.sta
BR0280I BRCONNECT time stamp: 2011-07-27 05.00.36
BR0301W SQL error -1031 at location brc_dblog_open-1, SQL statement:
'INSERT INTO SAP_SDBAH (BEG, FUNCT, SYSID, OBJ, RC, ENDE, ACTID, LINE) VALUES ('20110727050032', 'sta', 'SBX', 'ALL', '9999', '
ORA-01031: insufficient privileges
BR0324W Insertion of database log header failed
I read the SAP note 400241 (Problems with ops$ or sapr3 connect to Oracle) and performed the general checks such checking the SAPUSER owner,etc.
If I executed the sapdba_role.sql script I get the following log errors on sapdba_role.log:
old 1: grant ALL on &User..SDBAH to sapdba
new 1: grant ALL on SAPR3.SDBAH to sapdba
grant ALL on SAPR3.SDBAH to sapdba
ERROR at line 1:
ORA-00942: table or view does not exist
old 1: grant ALL on &User..SDBAD to sapdba
new 1: grant ALL on SAPR3.SDBAD to sapdba
grant ALL on SAPR3.SDBAD to sapdba
ERROR at line 1:
ORA-00942: table or view does not exist
old 1: grant ALL on &User..DBAML to sapdba
new 1: grant ALL on SAPR3.DBAML to sapdba
grant ALL on SAPR3.DBAML to sapdba
Should I create those tables in order to allow ops$ user to access Oracle DB in order to execute the DB job from DB13?
Please let me know if anybody can help me or has face a situation before?
Thanks in advance, Marc
Hi Markus,
I dont think that it is an authorization issue becasue it has the same authorizations than Development:
eccsbx01:/sapmnt/SBX/exe # ls -ltr br*
-rwsr-srw- 1 orasbx dba 4121272 Jul 19 11:55 brarchive
-rwsr-srw- 1 orasbx dba 4227280 Jul 19 11:55 brbackup
-rwsrwxr-x 1 orasbx sapsys 5489731 Jul 19 11:55 brconnect
-rwxr-xr-x 1 sbxadm sapsys 4537880 Jul 19 11:55 brrecover
-rwxr-xr-x 1 sbxadm sapsys 1554379 Jul 19 11:55 brrestore
-rwxr-xr-x 1 sbxadm sapsys 5617510 Jul 19 11:55 brspace
-rwsrwxr-x 1 orasbx sapsys 2289337 Jul 19 11:55 brtools
Regards, Marc
Similar Messages
-
Scheduled Batch jobs error : ora-01031 insufficient privileges
I have created a batch job that runs my database backups on a windows 2000 server. This job works perfect from the command line with the following syntax:
coldbackup.bat PROD
I have tried to schedule this backup to run every evening as follows:
at 01:00 /every:M,T,W,Th,F,S C:\coldbackup.bat PROD
The batch job does run every morning but generates an error when trying to shutdown the database. The error is ora-01031 insufficient privileges and seems to be related to the 'connect / as sysdba' command. The job has been scheduled using the local 'Administrator' user, which have been added to the ORA_DBA group.
I have thought of one solution and that entails hard-coding the username and password into the script, but that creates a security risk.
Can someone explain this behaviour and possible provide a good solution.
Thank youSolution: Yes, I have found the solution to my problem.
I was trying to schedule the batch job from the command line and in doing so the job was running in a 'system' user.
When I scheduled the job from the control panel --> schedule tasks I was able to enter the 'run as' username and password. -
Backup via Cron job - SQL ERROR: ORA-01031: insufficient privileges
Hi,
We are Using Oracle RAC - linux - SAP EP . We have scheduled online backup through crontab .
Always we are getting below error when the backup job runs via crontab
================
BR0278E Command output of '/usr/sap/EP1/SYS/exe/run/brtools -f printcmd -U /oracle/EP1/sapbackup/.begpjvay.003 'archive log list;' 'exit;' | /oracle/EP1/102_6
4/bin/sqlplus /nolog':
SQL*Plus: Release 10.2.0.5.0
Copyright (c) 1982, 2010, Oracle. All Rights Reserved.
SQL> ERROR:
ORA-01031: insufficient privileges
SQL> ORA-01012: not logged on
SQL>
BR0280I BRBACKUP time stamp: 2011-08-22 02.00.12
BR0279E Return code from '/usr/sap/EP1/SYS/exe/run/brtools -f printcmd -U /oracle/EP1/sapbackup/.begpjvay.003 'archive log list;' 'exit;' | /oracle/EP1/102_64
/bin/sqlplus /nolog': 0
BR0302E SQLPLUS call for database instance EP12 failed
=====================
whereas if i trigger the same commend
brbackup -u / -c force -t online -m all -p <init*.sap> manually it end successfully.
Kindly can anyone help over below issue.
Regards,
AyyappanHi Ayyappan,
Thanks in Advance,
We are also having same scenario with RAC and Linux, we are trying to configure backup and getting the same error could you please guide me how u resolved the issue, please help....
Regards,
Sumeesh -
Check database with error "ORA-01031: insufficient privileges"
Dear Gurus,
I ran "Check database" in DB13 but I got error "ORA-01031: insufficient privileges"
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0301E SQL error -1031 at location BrDbdiffRead-1, SQL statement:
'PREPARE stmt_5 STATEMENT FROM'
'SELECT OBJNAME FROM "SAPSR3".DBDIFF WHERE DBSYS IN ('ORACLE', ' ') AND OBJTYPE = 'TABL' AND DIFFKIND IN ('02', '61', '99') ORDER BY OBJNAME'
ORA-01031: insufficient privileges
BR0806I End of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.37.00
Note I try to execute sapdba_role.sql (with command "sqlplus /nolog @sapdba_role.sql SR3") as Note 134592 both login 'oradev' and 'devadm' but it seem to do nothing (not found sapdba_role.log)
Please advice.
Best regards,
Choosak B.
Ps.
detailed log of /oracle/DEV/sapcheck/cecxekdh.chk
BR0801I BRCONNECT 7.00 (40)
BR0477I Oracle pfile /oracle/DEV/102_64/dbs/initDEV.ora created from spfile /oracle/DEV/102_64/dbs/spfileDEV.ora
BR0805I Start of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.30.53
BR0484I BRCONNECT log file: /oracle/DEV/sapcheck/cecxekdh.chk
BR0101I Parameters
Name Value
oracle_sid DEV
oracle_home /oracle/DEV/102_64
oracle_profile /oracle/DEV/102_64/dbs/initDEV.ora
sapdata_home /oracle/DEV
sap_profile /oracle/DEV/102_64/dbs/initDEV.sap
system_info devadm/oradev sapdev SunOS 5.10 Generic_142900-03 sun4v
oracle_info DEV 10.2.0.4.0 8192 7465 94896497 sapdev UTF8 UTF8
sap_info 701 SAPSR3 0002LK0003DEV0011N11827599290015Maintenance_ORA
make_info sun_64 OCI_102 Feb 21 2009
command_line brconnect -u / -jid CHECK20100331123000 -c -f check
alert_log /oracle/DEV/saptrace/background/alert_DEV.log
BR0280I BRCONNECT time stamp: 2010-03-31 12.30.56
BR0813I Schema owners found in database DEV:
DBSNMP, DIP, OPS$DEVADM, OPS$ORADEV, OPS$SAPSERVICEDEV, ORACLE_OCM, OUTLN, SAPSR3*, SYS, SYSTEM,
TSMSYS
BR0118I Tablespaces and data files
Tablespace Status File Status Id. Size MaxSize IncrSize BlkSize Device Type Link
PSAPSR3 ONLINE+ /oracle/DEV/sapdata2/sr3_1/sr3.data1 ONLINE+ 4 2411732992 10485760000 20971520 8192 16777219 FILE NOLINK
SYSTEM ONLINE+ /oracle/DEV/sapdata1/system_1/system.data1 SYSTEM+ 1 1017126912 10485760000 20971520 8192 16777219 FILE NOLINK
BR0119I Redo log files
File Status Group Size Device Type Link
/oracle/DEV/origlogA/log_g11m1.dbf INUSE 1 52429312 16777218 FILE NOLINK
/oracle/DEV/mirrlogA/log_g11m2.dbf INUSE 1 52429312 16777218 FILE NOLINK
/oracle/DEV/origlogB/log_g12m1.dbf INUSE 2 52429312 16777218 FILE NOLINK
/oracle/DEV/mirrlogB/log_g12m2.dbf INUSE 2 52429312 16777218 FILE NOLINK
/oracle/DEV/origlogA/log_g13m1.dbf INUSE 3 52429312 16777218 FILE NOLINK
/oracle/DEV/mirrlogA/log_g13m2.dbf INUSE 3 52429312 16777218 FILE NOLINK
/oracle/DEV/origlogB/log_g14m1.dbf INUSE 4 52429312 16777218 FILE NOLINK
/oracle/DEV/mirrlogB/log_g14m2.dbf INUSE 4 52429312 16777218 FILE NOLINK
BR0120I Control files
File Size Device Type Link
/oracle/DEV/origlogA/cntrl/cntrlDEV.dbf 15024128 16777218 FILE NOLINK
/oracle/DEV/origlogB/cntrl/cntrlDEV.dbf 15024128 16777218 FILE NOLINK
/oracle/DEV/sapdata1/cntrl/cntrlDEV.dbf 15024128 16777219 FILE NOLINK
BR0982I Database disk volumes
Directory / Raw disk Device Total[KB] Free[KB] Used[%] MaxNeed[KB] MaxMiss[KB]
/oracle/DEV/102_64 16777218 480700086 404332206 15.89 0 0
/oracle/DEV 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/mirrlogA 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/mirrlogB 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/origlogA 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/origlogB 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/sapdata1 16777219 591212116 404332206 31.61 240019884 0
/oracle/DEV/sapdata2 16777219 591212116 404332206 31.61 240019884 0
/oracle/DEV/sapdata3 16777219 591212116 404332206 31.61 240019884 0
/oracle/DEV/sapdata4 16777219 591212116 404332206 31.61 240019884 0
/oracle/DEV/saparch 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/sapbackup 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/sapcheck 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/sapreorg 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/saptrace 16777218 480700086 404332206 15.89 0 0
/oracle/DEV/oraarch 16777218 480700086 404332206 15.89 0 0
BR0280I BRCONNECT time stamp: 2010-03-31 12.31.29
BR0814I Number of tables in schema of owner SAPSR3: 74582
BR0836I Number of info cube tables found for owner SAPSR3: 49
BR0814I Number of tables/partitions in schema of owner SYS: 625/189
BR0814I Number of tables/partitions in schema of owner SYSTEM: 134/27
BR0280I BRCONNECT time stamp: 2010-03-31 12.32.28
BR0815I Number of indexes in schema of owner SAPSR3: 89159
BR0815I Number of indexes/partitions in schema of owner SYS: 678/199
BR0815I Number of indexes/partitions in schema of owner SYSTEM: 175/32
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0816I Number of segments in schema of owner DBSNMP: 25
BR0816I Number of segments in schema of owner OPS$DEVADM: 1
BR0816I Number of segments in schema of owner OUTLN: 9
BR0816I Number of segments/LOBs in schema of owner SAPSR3: 168369/2314
BR0816I Number of segments/LOBs in schema of owner SYS: 1831/87
BR0816I Number of segments/LOBs in schema of owner SYSTEM: 353/22
BR0816I Number of segments in schema of owner TSMSYS: 4
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0961I Number of conditions found in DBCHECKORA: 118
BR0983I Tablespace fragmentation
Tablespace Files Tables Indexes Extents Total[KB] Used[%] Free[KB] FreeExt. MaxSize[KB] MaxAlloc[KB] Used[%] Free[KB] Largest[KB]
PSAPSR3 16 74248 88689 209864 54138880 94.51 2970752 240 163840000+ 109701120+ 31.23+ 112671872+ 9246720:7966720:7946240:7905280:7905280+
PSAPSR3701 14 0 0 0 54466560 0.00 54465664 20 143360000+ 88893440+ 0.00+ 143359104+ 9021440:8192000:8192000:8192000:8192000+
PSAPSR3701X 4 310 445 12190 68342784 94.20 3962240 7 68342784 0 94.20 3962240 1298432:1191936:979968:163776:163776
PSAPSR3USR 1 24 25 51 51200 6.50 47872 1 10240000+ 10188800+ 0.03+ 10236672+ 10188800+:47872:0:0:0
PSAPTEMP 1 0 0 0 1433600 0.00 1433600 0 10240000+ 8806400+ 0.00+ 10240000+ 8806400+:0:0:0:0
PSAPUNDO 1 0 0 0 7823360 0.00 7823296 406 10240000+ 2416640+ 0.00+ 10239936+ 2416640+:2041792:1814464:1433536:603072
SYSAUX 1 254 284 2059 307200 93.35 20416 16 10240000+ 9932800+ 2.80+ 9953216+ 9932800+:13248:3072:1024:640
SYSTEM 1 505 569 2926 993280 98.91 10816 2 10240000+ 9246720+ 9.59+ 9257536+ 9246720+:10176:640:0:0
Total: 39 75341 90012 227090 187556864 62.29 70734656 692 426742784 239185920 27.38 309920576 60157952:19463744:18936384:17695616:16864768
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0301E SQL error -1031 at location BrDbdiffRead-1, SQL statement:
'PREPARE stmt_5 STATEMENT FROM'
'SELECT OBJNAME FROM "SAPSR3".DBDIFF WHERE DBSYS IN ('ORACLE', ' ') AND OBJTYPE = 'TABL' AND DIFFKIND IN ('02', '61', '99') ORDER BY OBJNAME'
ORA-01031: insufficient privileges
BR0806I End of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.37.00
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0804I BRCONNECT terminated with errorsHi,
It solved after change permission of directory that sapdba_role.sql kept to oradev:dba after that it can write sapdba_role.log.
Thank you for your guideline.
Now, I can ran 'Check database' via DB13 without that error.
Best regards,
Choosak B. -
Not able to Start the oracle db error "ORA-01031: insufficient privileges"
Hi experts,
I have oracle 11g setup on so solaris. i changed the db_cache_size
& processes values and stopped the DB services after that i am not able to start the oracle DB. Listener is running.
when i start the db server its giving the below error(startup.log)
./dbstart: Starting up database "orcl"
Mon Sep 27 04:31:08 MDT 2010
SQL*Plus: Release 11.1.0.7.0 - Production on Mon Sep 27 04:31:08 2010
Copyright (c) 1982, 2008, Oracle. All rights reserved.
SQL> ERROR:
ORA-01031: insufficient privileges
SQL> ORA-01031: insufficient privileges
SQL>
./dbstart: Database instance "orcl" warm started.
Please help me to ressolve this issue.
Thanks
Krishnayes, password file is there in /etc/passwd
here are the contents:
root:x:0:0:Super-User:/:/sbin/sh
lroot:x:0:0:Super-User:/:/sbin/sh
daemon:x:1:1::/:
bin:x:2:2::/usr/bin:/bin/false
sys:x:3:3::/:
adm:x:4:4:Admin:/var/adm:/bin/false
lp:x:71:8:Line Printer Admin:/usr/spool/lp:/bin/false
uucp:x:5:5:uucp Admin:/usr/lib/uucp:/bin/false
nuucp:x:9:9:uucp Admin:/var/spool/uucppublic:/usr/lib/uucp/uucico
listen:x:37:4:Network Admin:/usr/net/nls:/bin/false
nobody:x:60001:60001:Nobody:/:/bin/false
noaccess:x:60002:60002:No Access User:/:/bin/false
nobody4:x:65534:65534:SunOS 4.x Nobody:/:/bin/false
itunix:x:50000:14:IT Unix Account:/export/home/itunix:/bin/csh
hharika:x:765:38:Harpal Harika:/export/home/hharika:/bin/csh
prsingh:x:795:38:Pradeep Singh:/export/home/prsingh:/bin/csh
mmir:x:1229:21:Mir Monis Ali:/export/home/mmir:/bin/csh
bogunnai:x:1207:21:Bose Ogunnaike:/export/home/bogunnai:/bin/ksh
mpokala:x:2117:21:Mahesh Pokala:/export/home/mpokala:/bin/ksh
apopov:x:2385:38:Anton Popov:/export/home/apopov:/bin/csh
kkeith:x:2629:227:Kevin Keith:/home/kkeith:/usr/bin/ksh
sshd:x:22:22:SSH Privsep:/var/empty:/bin/false
patrol:x:2784:10:Patrol User:/opt/bmc:/usr/bin/ksh
smmsp:x:25:25:Sendmail Submission user:/none:/bin/false
ldap:x:50001:1002::/export/home/ldap:/bin/sh
perfuser:x:884:268::/export/home/perfuser:/bin/csh
webservd:x:80:80::/home/webservd:/bin/pfsh
oracle:x:156:40:Oracle Software Owner:/export/home/oracle:/bin/bash
perfuser_idc:x:64383:1::/home/perfuser_idc:/bin/sh
idc_perf:x:64384:292::/home/idc_perf:/bin/sh -
See error : ORA-01031: insufficient privileges
hi master
sir i create user with that command
CREATE USER test IDENTIFIED BY t
but not create user and give this error
ORA-01031: insufficient privileges
sir how i create user please give me ideaIt appears you have connected with a normal user
like scott which do not have the priviledge to create a user
you should logon as system/manager to create a user
then give the create user command
after that give command
grant connect to 'youruser' -
ERRor ORA-01031: insufficient privileges
hi all,
i am presently working on logical standby database
but i am facing a problem from primary database
" select * from V$ARCHIVE_DEST"
LOG_ARCHIVE_DEST_1 valid
LOG_ARCHIVE_DEST_2 ERROR ORA-01031: insufficient privileges
at present database not synchronizing
please help
VaibhavVaibhav;
Is the password file is missing at standby site? Or is the password different between primary/standby database?
If yes I would correct by copying the password file from the primary to the standby and renaming to match your setup.
OR
Try this command :
Alter database guard standby;Best Regards
mseberg -
SQL connect /as sysdba; ERROR: ORA-01031: insufficient privileges
wondering what could be the case, OS Solaris10
SQL*Plus: Release 10.2.0.3.0 - Production on Thu Sep 11 13:36:17 2008
Copyright (c) 1982, 2006, Oracle. All Rights Reserved.
SQL> connect /as sysdba;
ERROR:
ORA-01031: insufficient privileges
i have orapwd also setup &
SQL> connect sys/******** as sysdba;
Connected.
SQL> show parameter remote
NAME TYPE VALUE
remote_archive_enable string true
remote_dependencies_mode string TIMESTAMP
remote_listener string
remote_login_passwordfile string EXCLUSIVE
remote_os_authent boolean FALSE
remote_os_roles boolean FALSE
Oracle 10.2.0.3: id -a oracle
uid=101(oracle) gid=101(dba) groups=101(dba)Hi DBA2008,
Please refer to this Metalink Notes:
- Troubleshooting ORA-1031 Insufficient Privilege While Authentication Note [730067.1|https://metalink.oracle.com/metalink/plsql/f?p=130:14:3634364694467571378::::p14_database_id,p14_docid,p14_show_header,p14_show_help,p14_black_frame,p14_font:NOT,730067.1,1,1,1,helvetica]
- UNIX: Checklist for Resolving Connect AS SYSDBA Issues Note [69642.1|https://metalink.oracle.com/metalink/plsql/f?p=130:14:3634364694467571378::::p14_database_id,p14_docid,p14_show_header,p14_show_help,p14_black_frame,p14_font:NOT,730067.1,1,1,1,helvetica]
- UNIX:Connect Internal asks for password when TWO_TASK is set Note [1066589.6|https://metalink.oracle.com/metalink/plsql/f?p=130:14:3634364694467571378::::p14_database_id,p14_docid,p14_show_header,p14_show_help,p14_black_frame,p14_font:NOT,1066589.6,1,0,1,helvetica]
Regards,
Francisco Munoz Alvarez
www.oraclenz.com -
Database Error - ORA-01031 : insufficient privileges
hi
i am trying to create a custom folder, in Disco Admin 10.1.2.48.18
but i am getting the following error!
Database Error - ORA-01031 : insufficient privileges
regards
-PreethaVerify that you have select privs on the objects you are using in the custom folder
-
ORA-01031: insufficient privileges after changing group.
I installed oracle 10g with oracle:oinstall as owner and I was able to connect using "sqlplus / as sysdba".
But today I chaged owner of 10g software owner to oracle:dba.
Now when I am trying "sqlplus / as sysdba".
ERROR:
ORA-01031: insufficient privileges
But I am able to connect with "sqlplus sys/password as sysdba".
linux1:(oracle):DEV +-> id
uid=175(oracle) gid=115(dba) groups=115(dba)
What to do to have OS authen working?
ThanksMost probably this is what the user means :-
1. Installation was done with oracle:oinstall a year back.
oracle as the user and oinstall as the group owner.
At that time sqlplus "/ as sysdba" was working fine for him
2. He probably wanted his setting to be oracle:dba and he issued the following command:-
chown -R oracle:dba $ORACLE_HOME
Now the issue is that he cannot use sqlplus "/ as sysdba" however sqlplus sys/connpass works just fine.
He probably wants to know why his settings are not working now.
Have you read metalink for that error ORA-1031, there is a whole set of document available to diagonise this issue. -
Error ORA-01031: insufficient privileges when backup via DB13
Hi expert,
Currently, I have system on SuSE 10 SP2 with ECC6 and Oracle 10.2 installed.
Database backup works fine when using BRTOOLS from command line.
Error like this :
BR0278E Command output of 'SHELL=/bin/sh /oracle/I20/920_32/bin/rman
nocatalog':
Recovery Manager: Release 9.2.0.4.0 - Production
Copyright (c) 1995, 2002, Oracle Corporation. All rights reserved.
RMAN>
RMAN> connect target /;
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
ORA-01031: insufficient privileges
RMAN> *end-of-file*
happened when I try to schedule backup through DB13.
I try to solved this with SAP Note 776505 but still doesn't work.
Any suggestion ?
ardhianHi,
Execute the following command at sql prompt.
grant dba,resource,connect,sapdba to OPS$<SID>ADM OPS$ORA<SID>
grant dba,resource,connect,sapdba to O OPS$ORA<SID>
grant dba,resource,connect,sapdba to SAPSR3 or SAP<SID>(YOUR SCHEMA NAME)
Also check owner of SAPUSER table
SELECT OWNER FROM DBA_TABLES WHERE TABLE_NAME = 'SAPUSER';
If it returns value OPS$<SID>ADM than its ok, otherwise you have to drop this & recreate with command
CREATE TABLE "OPS$QASADM".SAPUSER
(USERID VARCHAR2(256), PASSWD VARCHAR2(256));
INSERT INTO "OPS$<sid>ADM".SAPUSER VALUES ('<sapowner>',
'<password>');
For more info go through the snote 400241
[https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=400241]
Thanks & Regards
Karan -
ORA-01031 (Insufficient Privileges) after moving server to new domain
Hello SAP/Oracle experts,
We recently performed a 'lift & shift' to move our SAP test system (QAS) from our HQ to our hosting partner's data centre. Although SAP works fine, we've lost the ability to run database operations through DB13. We now receive ORA-01031 - Insufficient Privileges errors whenever we try anything through DB13.
Because moving the server involved changing the Windows domain to which it belonged, we created a trust relationship between old and new domains so that we didn't have to change the details of QASADM and SAPServiceQAS. We ran the usual oradbuser.sql and sapdba_role.sql scripts. We also removed and reassigned the ORA_QAS_DBA and ORA_QAS_OPER groups to the QASADM and SAPServiceQAS users. All of which seems to have made no difference and we still get ORA-01031 errors in DB13.
Even stranger though is the fact that at the Oracle level, user sys is able to log in 'as sysdba', whilst user system cannot. e.g.
sqlplus sys/<password>@qas as sysdba Works.
sqlplus sys/<password> as sysdba Works.
sqlplus / as sysdba Doesnt work
sqlplus system/<password>@qas as sysdba Doesnt work.
sqlplus system/<password> as sysdba Doesnt work.
This leads me to believe that the problem is not SAP-related (i.e. sapdba_role won't fix it!), but is more likely Oracle-related and perhaps down to the fact that ths system was built in one domain, but now resides in another. I guess the easiest thing to do would be to create QASADM and SAPServiceQAS accounts in the new domain and try that, but that's clutching at straws and doesn't explain why Oracle user sys works, whilst system doesn't.
Has anyone moved servers between domains and experienced similar problems?
Thanks in advance of any help,
Arwel.is the recommended procedure when moving SAP Systems (or the server where they installed on) from one Domain to the next one (at least if the user accounts are in the same domain as the Server).
You have following dependencies when installing in a domain:
1. domain groups
2. local groups containing domain groups and/or domain accounts
3. Domain Accounts
4. maybe domain groups are used in Access Control Lists of local Files / Directories
5. User rights Assignment in registry
6. as in Oracle Database internal users reflecting Operating System users.
In Windows Security Objects (ACLs of Files, Directories) a Windows Account is referenced by it's SID which is unique (you can have a look at those strings in Upper Keys of the Registry HKEY_USERS). This means that a Domain User XYZ in Domain A has a different SID than Domain User XYZ in Domain B. The same applies to Windows Groups.
As a result of this c:\documents and Settings\XYZ will not be for the use with the same name if you move the computer to a diferent domain.
Windows will create something like c:\documents and Settings\XYZ.NEW_DOMAIN. As a result of this all envrionment variables of XYZ in the old domain are not visible in the new domain, because they are stored in the users registry which resides in c:\documents and Settings\XYZ\ntuser.dat in the old domain and c:\documents and Settings\XYZ.NEW_DOMAIN\ntuser.dat in the new domain.
Too many things to do, to many possibilities you can make mistakes - therefore --> homogenious system copy.
regards
Peter -
Brbackup error ; ORA-01031: insufficient privileges
Hi Experts,
We are getting following error when to try to backup our database ;
BR0301E SQL error -1031 at location BrSapTspList-8, SQL statement:
'PREPARE stmt_1 STATEMENT FROM'
'SELECT TABSPACE FROM "SAPSR3".TSORA UNION SELECT INDSPACE FROM "SAPSR3".TSORA ORDER BY 1'
ORA-01031: insufficient privileges
BR0056I End of database backup: bebakpth.ant 2009-07-16 10.54.47
BR0280I BRBACKUP time stamp: 2009-07-16 10.54.47
BR0054I BRBACKUP terminated with errors
How can we fix it,
RegardsDear atakan yavuz
i have faced this issue and fix the issue.
After executing Oracle sapdba_role.sql which is provided in sapdba_role_ora10.SAR from SAP Note: Note 134592 - Importing the SAPDBA role (sapdba_role.sql)
Please execute manaully from sql prompt below statemets to assign the privileges to the owner SAPSR3 for the following tables which will fix the issue.
grant ALL on SAPSR3.SDBAH to sapdba;
grant ALL on SAPSR3.SDBAD to sapdba;
grant ALL on SAPSR3.DBAML to sapdba;
grant ALL on SAPSR3.DBARCL to sapdba;
grant ALL on SAPSR3.DBAFID to sapdba;
grant ALL on SAPSR3.DBAEXTL to sapdba;
grant ALL on SAPSR3.DBAREOL to sapdba;
grant ALL on SAPSR3.DBABARL to sapdba;
grant ALL on SAPSR3.DBADFL to sapdba;
grant ALL on SAPSR3.DBAOPTL to sapdba;
grant ALL on SAPSR3.DBASPAL to sapdba;
grant ALL on SAPSR3.DBABD to sapdba;
grant ALL on SAPSR3.DBABL to sapdba;
grant ALL on SAPSR3.DBATL to sapdba;
grant ALL on SAPSR3.DBAOBJL to sapdba;
grant ALL on SAPSR3.DBAPHAL to sapdba;
grant ALL on SAPSR3.DBAGRP to sapdba;
grant ALL on SAPSR3.DBAERR to sapdba;
grant ALL on SAPSR3.DBATRIAL to sapdba;
grant ALL on SAPSR3.DBSTATC to sapdba;
grant ALL on SAPSR3.DBSTATTORA to sapdba;
grant ALL on SAPSR3.DBSTATIORA to sapdba;
grant ALL on SAPSR3.DBSTATHORA to sapdba;
grant ALL on SAPSR3.DBSTAIHORA to sapdba;
grant ALL on SAPSR3.DBMSGORA to sapdba;
grant ALL on SAPSR3.DBCHECKORA to sapdba;
grant ALL on SAPSR3.MLICHECK to sapdba;
grant SELECT on SAPSR3.TGORA to sapdba;
grant SELECT on SAPSR3.IGORA to sapdba;
grant SELECT on SAPSR3.TSORA to sapdba;
grant SELECT on SAPSR3.TAORA to sapdba;
grant SELECT on SAPSR3.IAORA to sapdba;
grant SELECT on SAPSR3.SVERS to sapdba;
grant SELECT on SAPSR3.CVERS to sapdba;
grant SELECT on SAPSR3.DD02L to sapdba;
grant SELECT on SAPSR3.DD09L to sapdba;
grant SELECT on SAPSR3.DDNTT to sapdba;
grant SELECT on SAPSR3.DDART to sapdba;
grant SELECT on SAPSR3.DARTT to sapdba;
grant SELECT on SAPSR3.DBCHK to sapdba;
grant SELECT on SAPSR3.DBDIFF to sapdba;
grant ALL on SAPSR3.SAPLIKEY to sapdba;
grant SELECT on SAPSR3.RSNSPACE to sapdba;
grant SELECT on SAPSR3.RSPSPACE to sapdba;
The cause is sapdba role script existing owner is SAPR3 but from SR3 release default owner is SAPSR3 so which is causing this issue so when grant the above tables to the SAP DB owner SAPSR3 where they can access the tables.The similar issue you will when you try to execute DBCheck also and even saplicense shows no valid license found.
Me too searching for Oracle 10.2.0.4 SAP SR3 release sapdba role in service market place which i am unable to find waiting for update from sap suppport.
Update in this thread after this action whether your issue has been solved.I
Best Regards,
Venkata.
Edited by: babjipvr on Jul 22, 2009 6:25 PM
Edited by: babjipvr on Jul 22, 2009 6:31 PM -
ORA-01031: insufficient privileges - after upgrade from 2.1 to 3.0.1
Hi I installed 10g with APEX 2.1 and started working on an app. I had the privs needed to do all DDL.
I updated to 3.0.1 (not 3.1 because my work won't go to 3.1 yet)
I started working on the app not problem with DML but I tried to create a function and found ORA-01031: insufficient privileges
Did I miss running a script after the install? Is there a POST install?Here are the results from PL?SQL Developer:
select user from dual;
1 EDIUSER
select * from user_role_privs;
1 EDIUSER CONNECT NO YES NO
2 EDIUSER DBA NO YES NO
3 EDIUSER RESOURCE NO YES NO
select * from user_sys_privs;
1 EDIUSER UNLIMITED TABLESPACE NO
doesn't the roles give me all I need?
And as I said, in PL/SQL Developer I can do anything.
Here are the results from the APEX SQL Worksheet:
select user from dual;
ANONYMOUS
select * from user_role_privs;
EDIUSER CONNECT NO YES NO
EDIUSER DBA NO YES NO
EDIUSER RESOURCE NO YES NO
select * from user_sys_privs;
EDIUSER UNLIMITED TABLESPACE NO -
Srvctl start service/stop throwing error ORA-01031: insufficient privileges
Hi Gurus,
When i try to start/stop the service getting below error.Please help me troubleshoot it.
AIX-6.1
11.2.0.1
Plato1:/u01/app/11.2.0/grid/network/admin>srvctl start service -d maxcv
PRCR-1079 : Failed to start resource ora.maxcv.maxcv.svc
CRS-2680: Clean of 'ora.maxcvuat.svc' on 'Plato1' failed
CRS-5807: Agent failed to process the message
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
CRS-2680: Clean of 'ora.maxcvuat.svc' on 'Plato1' failed
ThanksSQL> execute dbms_service.start_service('maxcvuat');PL/SQL procedure successfully completed.
Output from alert.log
EMNC started with pid=32, OS id=1384660
2011-09-09 09:32:09.820000 -04:00
Starting background process CJQ0
CJQ0 started with pid=53, OS id=1429756
2011-09-09 09:37:00.698000 -04:00
Starting background process SMCO
SMCO started with pid=33, OS id=1687726
2011-09-09 09:52:59.212000 -04:00
ALTER SYSTEM SET service_names='maxcvuat' SCOPE=MEMORY SID='maxcv2';
~crsctl stat output:
plato2:/home/grid>crsctl stat res -t
NAME TARGET STATE SERVER STATE_DETAILS
Local Resources
ora.CRS.dg
OFFLINE OFFLINE plato1
OFFLINE OFFLINE plato2
ora.CRS_DATA.dg
ONLINE OFFLINE plato1
ONLINE ONLINE plato2
ora.CRS_DATA1.dg
ONLINE OFFLINE plato1
ONLINE ONLINE plato2
ora.CRS_VDISK.dg
OFFLINE OFFLINE plato1
ONLINE ONLINE plato2
ora.LISTENER.lsnr
ONLINE ONLINE plato1
ONLINE ONLINE plato2
ora.maxcv_DATA.dg
ONLINE INTERMEDIATE plato1
ONLINE ONLINE plato2
ora.maxcv_REC.dg
ONLINE INTERMEDIATE plato1
ONLINE ONLINE plato2
ora.asm
ONLINE OFFLINE plato1
ONLINE ONLINE plato2
ora.eons
ONLINE ONLINE plato1
ONLINE ONLINE plato2
ora.gsd
OFFLINE OFFLINE plato1
OFFLINE OFFLINE plato2
ora.net1.network
ONLINE ONLINE plato1
ONLINE ONLINE plato2
ora.ons
ONLINE ONLINE plato1
ONLINE ONLINE plato2
Cluster Resources
ora.LISTENER_SCAN1.lsnr
1 ONLINE ONLINE plato2
ora.LISTENER_SCAN2.lsnr
1 ONLINE ONLINE plato1
ora.LISTENER_SCAN3.lsnr
1 ONLINE ONLINE plato1
ora.plato1.vip
1 ONLINE ONLINE plato1
ora.plato2.vip
1 ONLINE ONLINE plato2
ora.maxcv.db
1 ONLINE ONLINE plato2 Open
2 ONLINE ONLINE plato1 Open
ora.maxcv.maxcvuat.svc
1 OFFLINE UNKNOWN plato1
2 OFFLINE UNKNOWN plato1
ora.coscv.db
1 ONLINE ONLINE plato1 Open
2 ONLINE ONLINE plato2 Open
ora.coscv.coscvuat.svc
1 ONLINE UNKNOWN plato1
2 ONLINE UNKNOWN plato1
ora.oc4j
1 OFFLINE OFFLINE
ora.scan1.vip
1 ONLINE ONLINE plato2
ora.scan2.vip
1 ONLINE ONLINE plato1
ora.scan3.vip
1 ONLINE ONLINE plato1
plato2:/home/grid>Stopping of database:
plato2:/home/oracle>srvctl stop database -d maxcv
PRCD-1124 : Failed to stop database maxcv and its services
PRCR-1065 : Failed to stop resource (((((NAME STARTS_WITH ora.maxcv.) && (NAME ENDS_WITH .svc)) && (TYPE == ora.service.type)) && ((STATE != OFFLINE) || (TARGET != OFFLINE))) || (((NAME == ora.maxcv.db) && (TYPE == ora.database.type)) && (STATE != OFFLINE)))
CRS-2680: Clean of 'ora.maxcv.maxcvuat.svc' on 'plato1' failed
CRS-5807: Agent failed to process the message
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
CRS-2680: Clean of 'ora.maxcv.maxcvuat.svc' on 'plato1' failed
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
CRS-2675: Stop of 'ora.maxcv.db' on 'plato1' failed
CRS-2680: Clean of 'ora.maxcv.maxcvuat.svc' on 'plato1' failed
CRS-5807: Agent failed to process the message
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
CRS-2680: Clean of 'ora.maxcv.maxcvuat.svc' on 'plato1' failed
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
CRS-2675: Stop of 'ora.maxcv.db' on 'plato1' failed
plato2:/home/oracle>ps -ef |grep pmon
oracle 892946 1818664 0 09:30:35 pts/0 0:00 grep pmon
grid 1360080 1 0 Sep 06 - 1:23 asm_pmon_+ASM2
oracle 1376428 1 0 Sep 06 - 1:42 ora_pmon_coscv2
plato2:/home/oracle>Thanks
Maybe you are looking for
-
Why do I get the message "Cannot send mail, the user name and or password for my email outgoing server is incorrect"? I use the same account, etc. on my iPhone and haven't any trouble sending mail.
-
PCA Manual Posting - Open/close posting periods
All, Is there a way you can open or close PCA posting periods? The FI posting period control does not control the PCA manual posting. We need however to do this. Is there a way to do it. I know I can create a validation. But is there any other way? R
-
EXC_BAD_ACCESS KERN_INVALID_ADDRESS What?!
Over the past month I have had repeated app crashes when trying to open Word, PowerPoint, Indesign & Photoshop, either from the dock or from a document. If I restart or in many cases just try a second time the app will open. All logs say the same thi
-
Font error in file with no fonts
Here is an oddity... running PS CC 20140730.r.148 on an iMac running OS X 10.9.4. Fonts are being managed by Suitcase Fusion 5. As stated in the subject, I am getting a font error in a file where there are no fonts, let alone any layers other than th
-
I'm currently running the latest version of FCP (7.0.1). However, it appears that whenever I close/quit FCP, it deletes all my recent render files. Is there some type of setting or known bug that would cause FCP to delete render files? Thanks! lance