Get ORA-01031: insufficient privileges error, but only when using dbstart.

I am getting ORA-01031: insufficient privileges error, but only when using dbstart. the listener starts but not the database. How come I can start it from SQL prompt but not from dbstart scripts as the oracle user?
[oracle@mallard bin]$ ./dbstart
Processing Database instance "gf44": log file /prod/oracle/10/startup.log
[oracle@mallard bin]$
Log file:
Wed Aug 20 10:15:02 CDT 2008
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Aug 20 10:15:02 2008
Copyright (c) 1982, 2005, Oracle. All rights reserved.
SQL> ERROR:
ORA-01031: insufficient privileges
SQL> ORA-01031: insufficient privileges
SQL>
/prod/oracle/10/bin/dbstart: Database instance "gf44" warm started.
>
oratab file:
gf44:/prod/oracle/10:Y
dbstart file section:
# See if it is a V6 or V7 database
VERSION=undef
if [ -f $ORACLE_HOME/bin/sqldba ] ; then
SQLDBA=svrmgrl
VERSION=`$ORACLE_HOME/bin/sqldba command=exit | awk '
/SQL\*DBA: (Release|Version)/ {split($3, V, ".") ;
print V[1]}'`
case $VERSION in
"6") ;;
*) VERSION="internal" ;;
esac
else
if [ -f $ORACLE_HOME/bin/svrmgrl ] ; then
SQLDBA=svrmgrl
VERSION="internal"
else
SQLDBA="sqlplus /nolog"
fi
fi
Permissions of file:
[oracle@mallard bin]$ ls -la dbstart
-rwxrwxr-x 1 oracle oinstall 10407 Aug 19 12:27 dbstart
[oracle@mallard bin]$
User permissions:
[root@mallard 10]# id oracle
uid=503(oracle) gid=503(oinstall) groups=503(oinstall),504(dba)
[root@mallard 10]#
I can start the listener manually using "./lsnrctl start" and start the database manually from sql prompt using "SQL>startup" (as sysdba) with no problems. this only happens when using dbstart file. I am logged in as oracle user and all environment variables are set
Thank you for any help you could provide.

I have the same problem, but i don't want insert this string
Connect sys/{password} as sysdbaI have deployed an Oracle 10g with os SunOS
$ uname -a
SunOS DB02 5.10 Generic_141444-09 sun4v sparc SUNW,Sun-Blade-T6320
I can connect with sys/password, but I can't login with
$ sqlplus /nolog
SQL*Plus: Release 10.2.0.1.0 - Production on Thu Jan 7 15:19:50 2010
Copyright (c) 1982, 2005, Oracle. All rights reserved.
SQL> connect / as sysdba
ERROR:
ORA-01031: insufficient privilegesthe the startup and dbshut don't work.
Someone maybe help me?
Thanks,
Regards.
Lain

Similar Messages

ORA-01031 insufficient privileges error when selecting from a view

OK I think this might be a dumb question but I can't figure it out:
User John has been granted SELECT privilege (directly, not through a database role) to schema FRED.table1;
User John can issue select * from FRED.table1; and it works just fine.
User John has then been granted SELECT privilege (directly, not via a database role) to schema
MARK.view1;
MARK.view1 only selects from FRED.table1. No other tables are in the view1.
Schema MARK can successfully query the views. SELECT * FROM VIEW1 returns results.
I also checked the MARK schema to ensure that it has been granted SELECT on FRED.table1 directly which it has.
Now, when logged into schema John, I try SELECT * FROM MARK.VIEW1; and I get ORA-01031 insufficient privileges error.
I'm not sure how to troubleshoot this. If John is granted SELECT ANY TABLE, it of course works but I don't want John to have that powerful priv.
To recap, John has SELECT on both MARK.VIEW1 and the table which VIEW1 selects from (FRED.TABLE1).
John can select from FRED.TABLE1 no problem but receives a privilege error even though John has SELECT on MARK.VIEW1.
Any thoughts?
Oh, Oracle EE 10.2.0.4

JSebastian wrote:
OK I think this might be a dumb question but I can't figure it out:
User John has been granted SELECT privilege (directly, not through a database role) to schema FRED.table1;
User John can issue select * from FRED.table1; and it works just fine.
User John has then been granted SELECT privilege (directly, not via a database role) to schema
MARK.view1;
MARK.view1 only selects from FRED.table1. No other tables are in the view1.
Schema MARK can successfully query the views. SELECT * FROM VIEW1 returns results.
I also checked the MARK schema to ensure that it has been granted SELECT on FRED.table1 directly which it has.
Now, when logged into schema John, I try SELECT * FROM MARK.VIEW1; and I get ORA-01031 insufficient privileges error.
I'm not sure how to troubleshoot this. If John is granted SELECT ANY TABLE, it of course works but I don't want John to have that powerful priv.
To recap, John has SELECT on both MARK.VIEW1 and the table which VIEW1 selects from (FRED.TABLE1).
John can select from FRED.TABLE1 no problem but receives a privilege error even though John has SELECT on MARK.VIEW1.
Any thoughts?
Oh, Oracle EE 10.2.0.4Are you certain John has been granted select on Mark.view1 ? In order for that to work Mark would have to have been given select on Fred.table1 WITH GRANT OPTION ... otherwise the grant would fail and then John would not be able to select from the view because the grant was never successfully issued.
Here's a basic test case (which i think conforms to what you've outlined) to get it working.
drop user u1 cascade;
drop user u2 cascade;
drop user u3 cascade;
create user u1 identified by u1;
grant connect, resource to u1;
create user u2 identified by u2;
grant connect, resource, create view to u2;
create user u3 identified by u3;
grant connect, resource to u3;
connect u1/u1@orcl
create table test1 (col1 number);
grant select on test1 to u2 with grant option; --> this is the important part
grant select on test1 to u3;
connect u2/u2@orcl
create view test2 as select * from u1.test1;
grant select on test2 to u3;
connect u3/u3@orcl
select * from u2.test2;

"ora-01031 insufficient privilege" error

We are getting "ora-01031 insufficient privilege" error while registering Apps as target user in production environment.
We tried to add the user using below method
· Design Center / Global Explorer / Security / Users -> Right click -> New user
· Repository assistance.
· Given the OWB owner as the DBA privilege.
Please let me know how to investigate further
Thanks a lot for your help.

Hi!
Please check the following query after the user registration. But the question is, are you registering the users with the repository owner?
select * FROM user_role_privs;
Regards.
Sebastian

ORA-01031: Insufficient privileges error in upgrading from 9.2.0.5 to 10.2

Hi, I am using DBUA to upgrade oracle 9i database to 10g. In step 1 of 7 when I select 9i datagase to upgrade I get ORA-01031: Insufficient privileges error. However, I can connect to the database from 9i as well as 10g using SQLPlus. Any idea what could be going wrong? Thanks. Manish
Edited by: user635081 on Jul 22, 2009 10:38 AM

Check your REMOTE_LOGIN_PASSWORDFILE . If it is set to NONE, then make sure that SQLNET.AUTHENTICATION_SERVICES = (NTS) in your sqlnet.ora file.
the OS user should be in ORA_DBA group.
Try connecting as SYS,
SQL> sqlplus /nolog
SQL> connect / as sysdba
HTH
Anantha

Weird Error - sometime getting ORA-01031: insufficient privileges

Problem - Java process throwing java.sql.SQLException: ORA-01031: insufficient privileges for simple select statement select * from MYTABLE , table having only three rows
Observation - While investigating. I did same select from sql developer using same credential, I get same ORA-01031: insufficient privileges error in sql developer too BUT ONLY if I create new connection. (Disconnect and connect again), If I fire same query again in same connection it runs fine.
SELECT * FROM MYTABLE;
there is no problem if I run query in small case (notice only select and from in small case), even if it is fresh connection there is no error.
select * from MYTABLE;
I am out of any clue what is going on. Any help?
Java stack track -
Caused by: java.sql.SQLException: ORA-01031: insufficient privileges
        at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:112)
        at oracle.jdbc.driver.T2CConnection.checkError(T2CConnection.java:676)
        at oracle.jdbc.driver.T2CConnection.checkError(T2CConnection.java:602)
        at oracle.jdbc.driver.T2CPreparedStatement.executeForDescribe(T2CPreparedStatement.java:571)
        at oracle.jdbc.driver.OracleStatement.executeMaybeDescribe(OracleStatement.java:1039)
        at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1134)
        at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:3339)
        at oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:3384)
        at org.apache.commons.dbcp.DelegatingPreparedStatement.executeQuery(DelegatingPreparedStatement.java:93)
        at org.springframework.jdbc.core.JdbcTemplate$1.doInPreparedStatement(JdbcTemplate.java:648)
        at org.springframework.jdbc.core.JdbcTemplate.execute(JdbcTemplate.java:591)
Oracle SQL Developerer Error
ORA-01031: insufficient privileges
01031. 00000 - "insufficient privileges"
*Cause:    An attempt was made to change the current username or password
           without the appropriate privilege. This error also occurs if
           attempting to install a database without the necessary operating
           system privileges.
           When Trusted Oracle is configure in DBMS MAC, this error may occur
           if the user was granted the necessary privilege at a higher label
           than the current login.
*Action:   Ask the database administrator to perform the operation or grant
           the required privileges.
           For Trusted Oracle users getting this error although granted the
           the appropriate privilege at a higher label, ask the database
           administrator to regrant the privilege at the appropriate label.

Guys...
I'm having the same problem.
The platform is a Windows 2003 R2 64bit (SP2) with Oracle 11g.
In the production server from the same client, the connection is usually ... however, to a server where I have the same instances retrieved from an RMAN backup, does not connect!
In the Productoion Server:
C:\>sqlplus sys@bmknfe as sysdba
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Aug 18 17:43:41 2010
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL>
In the Recovered Server:
C:\>sqlplus sys@bmknfe_rt as sysdba
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Aug 18 17:42:39 2010
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-01031: insufficient privileges
I've tried recreating the password file, but is not resolving ...
Can someone give me a light?

Getting ORA-01031: insufficient privileges if try to connect in sqlplus

Hi,
I've tried to connect to my db which stands at host (Solaris), but getting
ORA-01031: insufficient privileges.
The client I've used is sqlplus.
SQL> conn sys@REP as sysdba
ERROR:
ORA-01031: insufficient privileges
At the same time I can successfully connect to the same db from the same PC with the same connection string at PL/SQL Developer.
How it can be possible?

Guys...
I'm having the same problem.
The platform is a Windows 2003 R2 64bit (SP2) with Oracle 11g.
In the production server from the same client, the connection is usually ... however, to a server where I have the same instances retrieved from an RMAN backup, does not connect!
In the Productoion Server:
C:\>sqlplus sys@bmknfe as sysdba
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Aug 18 17:43:41 2010
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL>
In the Recovered Server:
C:\>sqlplus sys@bmknfe_rt as sysdba
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Aug 18 17:42:39 2010
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-01031: insufficient privileges
I've tried recreating the password file, but is not resolving ...
Can someone give me a light?

Ora-01031: Insufficient Privileges error during 10g install on Suse 9.1

I have tried installing Oracle 10g on Suse 9.1 Professional several times. Although I have tried to carefully follow the instructions in the installation guide, I get the following error.
When the Database Configuration Assistant start during the initial installation, I receive the error -> Ora-01031: Insufficient Privileges.
I created the oinstall and dba group according to the installation guide and made oracle a member with oinstall being the primary group. I also ran -> chown -R oracle:oinstall -> on the Oracle_Base folder to which I want to install the software and oradata files. Similarly, I ran -> chmod -R 775 -> on that folder. During the install I ran the script -> oracle_base/oraInventory/orainstRoot.sh -> during the installation when prompted.
I would really appreciate any help that any of you could provide. Thank you so much in advance.
-Daniel

I'm logged in as oracle when I perform the installation but as soon as the database configuration assistant tries to create the database I get this error. I had made oracle a member of oinstall and dba just as it was desribed in the instructions. (At one point I even tried giving oracle root, which didn't seem to work either. I have since reinstalled the OS.)
Thank you for helping me with this!

ORA-01031:Insufficient Privileges error when I am trying to use ALERT_QUE

Hi,
I am working on SYS.ALERT.QUE for getting system alerts. I am using ODP in C# for connecting to Oracle database with username = SYSTEM, but when I am trying to enque or deque any message from SYS.ALERT.QUE, its gives an error ORA-01031:Insufficient Privileges. I am not able to understand how to assign SYSDBA privileges to SYSTEM and access ALERT_QUE for getting system alerts. I am posting my code below, plz have a look and let me know whats wrong with the code. I am able to connect to databse using SYSTEM, do I need to use username = SYS for accesing ALERT_QUE of database? Plz let me know whats the solution.
OracleConnection con = new OracleConnection(constr);
// Create queue
OracleAQQueue queue = new OracleAQQueue("sys.alert_que", con);
// Open connection
con.Open();
// Begin txn for enqueue
OracleTransaction txn = con.BeginTransaction();
// Set message type for the queue
queue.MessageType = OracleAQMessageType.Raw;
// Prepare message and RAW payload
OracleAQMessage enqMsg = new OracleAQMessage();
byte[] bytePayload = { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9 };
enqMsg.Payload = bytePayload;
OracleAQAgent[] agent = new OracleAQAgent[1];
agent[0] = new OracleAQAgent("SUBSCRIBER1");
enqMsg.Recipients = agent;
enqMsg.SenderId = new OracleAQAgent("SENDER1");
// Prepare to Enqueue
queue.EnqueueOptions.Visibility = OracleAQVisibilityMode.OnCommit;
// Enqueue message
queue.Enqueue(enqMsg);
The code throws exception at line "queue.Enqueue(enqMsg);" saying ORA-01031:Insufficient Privileges
Edited by: 916462 on Feb 27, 2012 3:31 AM

Hi Sudheendra,
Thanks a lot, that worked. Now I am facing one more new issue, when I am trying to deque message from ALERT_QUE which is oracle maintained queue for alerts, I am getting an error "ORA-25215:User data type and queue type do not match". Is there something wrong with my code like Message type, payload and all. I am very new to Oracle database so I don't have idea about this details. Can u plz help me in solving this.
OracleTransaction txn = con.BeginTransaction();
// Set message type for the queue
queue.MessageType = OracleAQMessageType.Raw;
// Prepare message and RAW payload
OracleAQMessage enqMsg = new OracleAQMessage();
byte[] bytePayload = { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9 };
enqMsg.Payload = bytePayload;
OracleAQAgent[] agent = new OracleAQAgent[1];
agent[0] = new OracleAQAgent("SUBSCRIBER1");
enqMsg.Recipients = agent;
enqMsg.SenderId = new OracleAQAgent("SENDER1");
// Begin txn for Dequeue
txn = con.BeginTransaction();
// Prepare to Dequeue
queue.DequeueOptions.Visibility = OracleAQVisibilityMode.OnCommit;
queue.DequeueOptions.Wait = 10;
queue.DequeueOptions.ConsumerName = "SUBSCRIBER1";
// Dequeue message
OracleAQMessage deqMsg = queue.Dequeue();
txn.Commit();
Edited by: 916462 on Feb 28, 2012 9:55 PM

ORA-01031: insufficient privileges error

DB Version : 10.2.0.4.0
OS version : Sun SPARC 5.10
When i try logging in as SYS through local authentication, i get
$ sqlplus / as sysdba
SQL*Plus: Release 10.2.0.4.0 - Production on Wed Aug 18 15:56:16 2010
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.
ERROR:
ORA-01031: insufficient privileges
Enter user-name:So, i recreated the password file in
$ORACLE_HOME/dbsBut i still am getting this error.
I can login to SYS locally and remotely through tns entry though
sqlplus sys/secret@tnsentry as sysdbaFollowing is the result of id command
$ id oracle
uid=1001(oracle) gid=1000(oinstall)Result of ls command in ORACLE_HOME/dbs directory
$ ls -alrt *pw*
-rw-r----- 1 oracle oinstall 1536 Aug 18 12:01 orapwmhprod -- instance name is mhprod

Your OS user which currently logged on actually is not member of dba OS group,provide this and try again.
oinstall is the owner of the oracle inventory.
[oracle@rac1 bin]$ id oracle
uid=500(oracle) gid=500(oinstall) groups=500(oinstall),501(dba)

Why Am I Getting ORA-01031: insufficient privileges To Add Trandata?

I create a table C##TOM.CUSTOMERS in SQL Plus.
I go to the ggsci command line and attempt to add trandata and get the following insufficient privileges response:
GGSCI (TPFAEFFL-LAP) 11> add trandata C##TOM.CUSTOMERS
ERROR: Error (1031, ORA-01031: insufficient privileges) start select in get_total_columns.
I have already granted connect, dba, flashback, create session, alter session, select any dictionary, select any table, select any transaction, and select unlimited tablespace to the user.
What privileges am I missing?
TIA.

Did you use the DBMS_GOLDENGATE_AUTH.GRANT_ADMIN_PRIVILEGE procedure to the DBLOGIN user?
This call grants all of the required privileges for ADD SCHEMATRANDATA and ADD TRANDATA - whether it is classic or integrated capture.

Getting ORA-01031: Insufficient privileges when connecting as sys as sysdba

Hi There,
I am running Linux AS version 4, oracle 102.0.1, and logginging as oracle user which belongs to dba group. I got error "ORA-01031: Insufficient privileges" when trying to connect as sys user to bring up database. I wondered what is causing the error. Here is an example
oracle-dev>sqlplus /nolog
SQL>conn as sys/oracle@dev as sysdba
ERROR:
ORA-01031: Insufficient privileges
Any suggestions would be greatly appreciated. Thanks again.
Rich,

Did you create a password file ?
http://download-uk.oracle.com/docs/cd/B19306_01/server.102/b15658/admin_ora.htm#sthref142
Message was edited by:
Paul M.
BTW, the syntax is
SQL>conn sys/oracle@dev as sysdba

Getting ORA-01031: insufficient privileges with underlying code

Any hlp welcome,
I'm using this function to create user's
CREATE OR REPLACE function create_user_from_asdb
(p_user IN VARCHAR2,p_wachtwoord IN VARCHAR2) return VARCHAR2
as
sql_stmt VARCHAR2(100);
v_message VARCHAR2(2000);
begin
sql_stmt := 'create user :1 identified by :2 DEFAULT TABLESPACE :3 TEMPORARY TABLESPACE :4';
EXECUTE IMMEDIATE sql_stmt USING p_user, p_wachtwoord,'TS_USER_DATA','GRP_TS_TEMP';
v_message := 'Gebruiker '||p_user||' met wachtwoord '||p_wachtwoord||' aangemaakt';
return v_message;
exception
WHEN OTHERS then
v_message := sqlerrm;
return v_message;
end;
But when run by SYSTEM (who ownes this function) I get the ORA-01031. Whats wrong here? The function will later be called through a dblink by a user on a different dbase.
Thanks in advance

Hi !
It's not a good idea to grant CREATE USER privilege directly to a schema and to create a function to create user's, because anyone on your database who own the CREATE ANY PROCEDURE or EXECUTE ANY PROCEDURE can also create users on your database. Issshhh !
To solve this problem, you can add AUTHID CURRENT_USER to your function :
CREATE OR REPLACE function create_user_from_asdb (p_user IN VARCHAR2,p_wachtwoord IN VARCHAR2) return VARCHAR2
AUTHID CURRENT_USER
as
sql_stmt VARCHAR2(100);
v_message VARCHAR2(2000);
begin
sql_stmt := 'create user :1 identified by :2 DEFAULT TABLESPACE :3 TEMPORARY TABLESPACE :4';
EXECUTE IMMEDIATE sql_stmt USING p_user, p_wachtwoord,'TS_USER_DATA','GRP_TS_TEMP';
v_message := 'Gebruiker '||p_user||' met wachtwoord '||p_wachtwoord||' aangemaakt';
return v_message;
exception
WHEN OTHERS then
v_message := sqlerrm;
return v_message;
end;
With AUTHID CURRENT_USER, a stored procedure runs with the rights of the caller, not with the rights of the procedure's owner. So there's no need to grant system privilege to the owner...
You only need to grant execute on your function and CREATE USER via a role or not to the users you want to be able to create users remotely (via dblink), or not.
Hope it helps.

ORA-01031: insufficient privileges problem

Hi all,
I am trying to create the below procedure in the BOLMIN schema which in turn selects data from the tables of VALMIN schema. and I get ORA-01031: insufficient privileges error.
CREATE OR REPLACE PROCEDURE BOLMIN.prcs_load_data
IS
BEGIN
FOR c
IN (SELECT DISTINCT AL4.GOAL_TEXT,
AL5.RESPONSE_TEXT,
AL7.SAMPLE_ID,
AL7.ACADEMY_NAME,
AL8.NAME
FROM VALMIN.USER_PROFILE AL3,
VALMIN.STUDENT_GOALS AL4,
VALMIN.STUDENT_QUESTION_DETAILS AL5,
VALMIN.STUDENT_QUESTION_RESPONSE AL6,
VALMIN.SAMPLE AL7,
VALMIN.NAME AL8
WHERE ( AL3.GOAL_ID = AL4.GOAL_ID(+)
AND AL3.USER_ID = AL6.USER_ID(+)
AND AL6.QUESTION_TYPE_SUB_ID = AL5.QUESTION_TYPE_SUB_ID(+)
AND AL7.NAME_ID = AL8.NAME_ID(+)))
LOOP
NULL;
END LOOP;
END;
I checked the grants of each of the VALMIN schema tables involved in the associated sql query & they all have SELECT grant (to BOLMIN schema). Also, the SQL query itself, when executed in BOLMIN schema runs perfectly fine. The problem is occurring only when I enclose the query in a procedure. Isn't that weird? or am I missing something here? Any help regarding this issue is appreciated. Thanks.
The BOLMIN schema as CREATE PROCEDURE privilege as I have already created other procedures for other purposes.
Thanks,
Sirisha
Edited by: siri_me on Oct 2, 2010 9:23 AM

siri_me wrote:
All Roles are disabled in PL/SQL and explicit privileges are needed right from creating procedures to the accessing the underlying tables.WRONG. Roles are disabled in definer rights stored objects - stored procedures, functions, packages triggers. Stored procedures, functions, packages with authid current user and anonymous PL/SQL block honor roles.
SY.

ORA-01031: insufficient privileges when creating a table in other schema

Dear all,
I appreciate your help please in this issue :
when i try to issue the below statement to create a table in an another schema than the user i am connected in
CREATE TABLE SCHEMA_NAME_B.HST_ARCH nologging AS
SELECT *
FROM HST
WHERE 1 = 0;
I always get ORA-01031: insufficient privileges error, even if i have granted the create table privilege to the user i am connected in.
What other privileges should i grant also,
Please if you have any idea.

user562674 wrote:
Dear all,
I appreciate your help please in this issue :
when i try to issue the below statement to create a table in an another schema than the user i am connected in
CREATE TABLE SCHEMA_NAME_B.HST_ARCH nologging AS
SELECT *
FROM HST
WHERE 1 = 0;
I always get ORA-01031: insufficient privileges error, even if i have granted the create table privilege to the user i am connected in.
What other privileges should i grant also,
Can you show us a cut/paste from the sql*plus of session of yours which should show that you have given the privilege directly to this user and after that the command fails?
Aman....

ORA-01031 (Insufficient Privileges) after moving server to new domain

Hello SAP/Oracle experts,
We recently performed a 'lift & shift' to move our SAP test system (QAS) from our HQ to our hosting partner's data centre. Although SAP works fine, we've lost the ability to run database operations through DB13. We now receive ORA-01031 - Insufficient Privileges errors whenever we try anything through DB13.
Because moving the server involved changing the Windows domain to which it belonged, we created a trust relationship between old and new domains so that we didn't have to change the details of QASADM and SAPServiceQAS. We ran the usual oradbuser.sql and sapdba_role.sql scripts. We also removed and reassigned the ORA_QAS_DBA and ORA_QAS_OPER groups to the QASADM and SAPServiceQAS users. All of which seems to have made no difference and we still get ORA-01031 errors in DB13.
Even stranger though is the fact that at the Oracle level, user sys is able to log in 'as sysdba', whilst user system cannot. e.g.
sqlplus sys/<password>@qas as sysdba Works.
sqlplus sys/<password> as sysdba Works.
sqlplus / as sysdba Doesnt work
sqlplus system/<password>@qas as sysdba Doesnt work.
sqlplus system/<password> as sysdba Doesnt work.
This leads me to believe that the problem is not SAP-related (i.e. sapdba_role won't fix it!), but is more likely Oracle-related and perhaps down to the fact that ths system was built in one domain, but now resides in another. I guess the easiest thing to do would be to create QASADM and SAPServiceQAS accounts in the new domain and try that, but that's clutching at straws and doesn't explain why Oracle user sys works, whilst system doesn't.
Has anyone moved servers between domains and experienced similar problems?
Thanks in advance of any help,
Arwel.

is the recommended procedure when moving SAP Systems (or the server where they installed on) from one Domain to the next one (at least if the user accounts are in the same domain as the Server).
You have following dependencies when installing in a domain:
1. domain groups
2. local groups containing domain groups and/or domain accounts
3. Domain Accounts
4. maybe domain groups are used in Access Control Lists of local Files / Directories
5. User rights Assignment in registry
6. as in Oracle Database internal users reflecting Operating System users.
In Windows Security Objects (ACLs of Files, Directories) a Windows Account is referenced by it's SID which is unique (you can have a look at those strings in Upper Keys of the Registry HKEY_USERS). This means that a Domain User XYZ in Domain A has a different SID than Domain User XYZ in Domain B. The same applies to Windows Groups.
As a result of this c:\documents and Settings\XYZ will not be for the use with the same name if you move the computer to a diferent domain.
Windows will create something like c:\documents and Settings\XYZ.NEW_DOMAIN. As a result of this all envrionment variables of XYZ in the old domain are not visible in the new domain, because they are stored in the users registry which resides in c:\documents and Settings\XYZ\ntuser.dat in the old domain and c:\documents and Settings\XYZ.NEW_DOMAIN\ntuser.dat in the new domain.
Too many things to do, to many possibilities you can make mistakes - therefore --> homogenious system copy.
regards
Peter

Get ORA-01031: insufficient privileges error, but only when using dbstart.

Similar Messages

Maybe you are looking for