Insufficient privileges with nm-applet but polkit policy set

Hi folks, I'm not running gnome but do run gnome-settings-daemon along with the sawfish window manager. My problem is that nm-applet tells me "insufficient privileges" whenever I select a wireless network. So I've been reading up on it and found that the culprit is probably polkit-1. After setting
<allow_any>yes</allow_any>
<allow_active>yes</allow_active>
<allow_inactive>yes</allow_inactive>
for all entries in /usr/share/polkit-1/actions/org.freedesktop.NetworkManager.policy I was hoping this would solve the problem but it hasn't. I still get the same error. So maybe it's not policykit related? How do I find out?
Last edited by fetchinson (2012-10-19 14:17:09)

Similar Messages

ORA-01031: insufficient privileges in PL/SQL but not in SQL

I have problem with following situation.
I switched current schema to another one "ban", and selected 4 rows from "ed"
alter session set current_schema=ban;
SELECT * FROM ed.PS WHERE ROWNUM < 5;
the output is OK, and I get 4 rows like
ID_S ID_Z
1000152 1
1000153 1
1000154 1
1000155 1
but following procedure is compiled with warning
create or replace
procedure proc1
as
rowcnt int;
begin
select count(*) into rowcnt from ed.PS where rownum < 5;
end;
"Create procedure, executed in 0.031 sec."
5,29,PL/SQL: ORA-01031: insufficient privileges
5,2,PL/SQL: SQL Statement ignored
,,Total execution time 0.047 sec.
Could you help me why SELECT does work in SQL but not in PL/SQL procedure?
Thanks.
Message was edited by:
MattSk

Privs granted via a role are only valid from SQL - and not from/within stored PL/SQL code.
Quoting Tom's (from http://asktom.oracle.com) response to this:I did address this role thing in my book Expert one on one Oracle:
<quote>
What happens when we compile a Definer rights procedure
When we compile the procedure into the database, a couple of things happen with regards to
privileges. We will list them here briefly and then go into more detail:
q    All of the objects the procedure statically accesses (anything not accessed via dynamic SQL)
are verified for existence. Names are resolved via the standard scoping rules as they apply to the
definer of the procedure.
q    All of the objects it accesses are verified to ensure that the required access mode will be
available. That is, if an attempt to UPDATE T is made - Oracle will verify the definer or PUBLIC
has the ability to UPDATE T without use of any ROLES.
q    A dependency between this procedure and the referenced objects is setup and maintained. If
this procedure SELECTS FROM T, then a dependency between T and this procedure is recorded
If, for example, I have a procedure P that attempted to 'SELECT * FROM T', the compiler will first
resolve T into a fully qualified referenced. T is an ambiguous name in the database - there may be
many T's to choose from. Oracle will follow its scoping rules to figure out what T really is, any
synonyms will be resolved to their base objects and the schema name will be associated with the
object as well. It does this name resolution using the rules for the currently logged in user (the
definer). That is, it will look for an object owned by this user called T and use that first (this
includes private synonyms), then it will look at public synonyms and try to find T and so on.
Once it determines exactly what T refers to - Oracle will determine if the mode in which we are
attempting to access T is permitted.   In this case, if we as the definer of the procedure either
owns the object T or has been granted SELECT on T directly or PUBLIC was granted SELECT, the
procedure will compile. If we do not have access to an object called T by a direct grant - the
procedure P will fail compilation. So, when the object (the stored procedure that references T) is
compiled into the database, Oracle will do these checks - and if they "pass", Oracle will compile
the procedure, store the binary code for the procedure and set up a dependency between this
procedure and this object T. This dependency is used to invalidate the procedure later - in the
event something happens to T that necessitates the stored procedures recompilation. For example,
if at a later date - we REVOKE SELECT ON T from the owner of this stored procedure - Oracle will
mark all stored procedures this user has that are dependent on T, that refer to T, as INVALID. If
we ALTER T ADD some column, Oracle can invalidate all of the dependent procedures. This will cause
them to be recompiled automatically upon their next execution.
What is interesting to note is not only what is stored but what is not stored when we compile the
object. Oracle does not store the exact privilege that was used to get access to T. We only know
that procedure P is dependent on T. We do not know if the reason we were allowed to see T was due
to:
q    A grant given to the definer of the procedure (grant select on T to user)
q    A grant to public on T (grant select on T to public)
q    The user having the SELECT ANY TABLE privilege
The reason it is interesting to note what is not stored is that a REVOKE of any of the above will
cause the procedure P to become invalid. If all three privileges were in place when the procedure
was compiled, a revoke of ANY of them will invalidate the procedure - forcing it to be recompiled
before it is executed again. Since all three privileges were in place when we created the procedure
- it will compile successfully (until we revoke all three that is). This recompilation will happen
automatically the next time that the procedure is executed.
Now that the procedure is compiled into the database and the dependencies are all setup, we can
execute the procedure and be assured that it knows what T is and that T is accessible. If something
happens to either the table T or to the set of base privileges available to the definer of this
procedure that might affect our ability to access T -- our procedure will become invalid and will
need to be recompiled.
This leads into why ROLES are not enabled during the compilation and execution of a stored
procedure in Definer rights mode. Oracle is not storing exactly WHY you are allowed to access T -
only that you are. Any change to your privileges that might cause access to T to go away will cause
the procedure to become invalid and necessitate its recompilation. Without roles - that means only
'REVOKE SELECT ANY TABLE' or 'REVOKE SELECT ON T' from the Definer account or from PUBLIC. With
roles - it greatly expands the number of times we would invalidate this procedure. If some role
that was granted to some role that was granted to this user was modified, this procedure might go
invalid, even if we did not rely on that privilege from that role. ROLES are designed to be very
fluid when compared to GRANTS given to users as far as privilege sets go. For a minute, let's say
that roles did give us privileges in stored objects. Now, most any time anything was revoked from
ANY ROLE we had, or any role any role we have has (and so on -- roles can and are granted to roles)
-- many of our objects would become invalid. Think about that, REVOKE some privilege from a ROLE
and suddenly your entire database must be recompiled! Consider the impact of revoking some system
privilege from a ROLE, it would be like doing that to PUBLIC is now, don't do it, just think about
it (if you do revoke some powerful system privilege from PUBLIC, do it on a test database). If
PUBLIC had been granted SELECT ANY TABLE, revoking that privilege would cause virtually every
procedure in the database to go invalid. If procedures relied on roles, virtually every procedure
in the database would constantly become invalid due to small changes in permissions. Since one of
the major benefits of procedures is the 'compile once, run many' model - this would be disastrous
for performance.
Also consider that roles may be
q    Non-default: If I have a non-default role and I enable it and I compile a procedure that
relies on those privileges, when I log out I no longer have that role -- should my procedure become
invalid -- why? Why not? I could easily argue both sides.
q    Password Protected: if someone changes the password on a ROLE, should everything that might
need that role be recompiled? I might be granted that role but not knowing the new password - I
can no longer enable it. Should the privileges still be available? Why or Why not? Again, arguing
either side of this is easy. There are cases for and against each.
The bottom line with respect to roles in procedures with Definer rights are:
q    You have thousands or tens of thousands of end users. They don't create stored objects (they
should not). We need roles to manage these people. Roles are designed for these people (end users).
q    You have far fewer application schema's (things that hold stored objects). For these we want
to be explicit as to exactly what privileges we need and why. In security terms this is called the
concept of 'least privileges', you want to specifically say what privilege you need and why you
need it. If you inherit lots of privileges from roles you cannot do that effectively. We can manage
to be explicit since the number of development schemas is SMALL (but the number of end users is
large)...
q    Having the direct relationship between the definer and the procedure makes for a much more
efficient database. We recompile objects only when we need to, not when we might need to. It is a
large efficiency enhancement.
</quote>

Getting ORA-01031: insufficient privileges with underlying code

Any hlp welcome,
I'm using this function to create user's
CREATE OR REPLACE function create_user_from_asdb
(p_user IN VARCHAR2,p_wachtwoord IN VARCHAR2) return VARCHAR2
as
sql_stmt VARCHAR2(100);
v_message VARCHAR2(2000);
begin
sql_stmt := 'create user :1 identified by :2 DEFAULT TABLESPACE :3 TEMPORARY TABLESPACE :4';
EXECUTE IMMEDIATE sql_stmt USING p_user, p_wachtwoord,'TS_USER_DATA','GRP_TS_TEMP';
v_message := 'Gebruiker '||p_user||' met wachtwoord '||p_wachtwoord||' aangemaakt';
return v_message;
exception
WHEN OTHERS then
v_message := sqlerrm;
return v_message;
end;
But when run by SYSTEM (who ownes this function) I get the ORA-01031. Whats wrong here? The function will later be called through a dblink by a user on a different dbase.
Thanks in advance

Hi !
It's not a good idea to grant CREATE USER privilege directly to a schema and to create a function to create user's, because anyone on your database who own the CREATE ANY PROCEDURE or EXECUTE ANY PROCEDURE can also create users on your database. Issshhh !
To solve this problem, you can add AUTHID CURRENT_USER to your function :
CREATE OR REPLACE function create_user_from_asdb (p_user IN VARCHAR2,p_wachtwoord IN VARCHAR2) return VARCHAR2
AUTHID CURRENT_USER
as
sql_stmt VARCHAR2(100);
v_message VARCHAR2(2000);
begin
sql_stmt := 'create user :1 identified by :2 DEFAULT TABLESPACE :3 TEMPORARY TABLESPACE :4';
EXECUTE IMMEDIATE sql_stmt USING p_user, p_wachtwoord,'TS_USER_DATA','GRP_TS_TEMP';
v_message := 'Gebruiker '||p_user||' met wachtwoord '||p_wachtwoord||' aangemaakt';
return v_message;
exception
WHEN OTHERS then
v_message := sqlerrm;
return v_message;
end;
With AUTHID CURRENT_USER, a stored procedure runs with the rights of the caller, not with the rights of the procedure's owner. So there's no need to grant system privilege to the owner...
You only need to grant execute on your function and CREATE USER via a role or not to the users you want to be able to create users remotely (via dblink), or not.
Hope it helps.

I got a free hp wireless printer with my mac but i cant set it up

If anyone has had the same problem please help. The printer is a Deskjet 5030 j610 series. I get all the way through the installation and it tells me that my device cannot be found but to download the installer. So I did and go all the way through the steps and at the end it tells me the same thing. That my device was not found. I'm not the handiest with computers so I might be making small stupid errors. Thanks.

You set up the printer from Print & Scan. IOS 4.3.3 is not the OS that you are using on your MBP. It would help if you posted the correct information. It only helps you.

Q: GraphAPI returns "Insufficient privileges to complete the operation." when setting Mobile field, Password Reset works!

I'm experiencing the behaviour noted in the subject. Being able to reset a password but not mobile a Mobile number seems odd to me!
Any assistance warmly received.
//Adam

Adam, can you provide some more details on how you've configured the application? What kind of application (WebApp/WebAPI or Native Client)? What kind of permissions does the application have? Which application permissions, and which delegated permissions?
And finally, what directory role does the signed in use have? (User, Global Admin?)
Also, is the user you are trying to act on the signed in user acting on themselves, or on another user?

Insufficient privileges: is there an answer?

Has Apple responded to the "insufficient privileges" problem?
My itunes was acting up in several ways, such that the only thing I could do was listen to the music I had ripped in. No itunes store, no device-synching, no radio. So I uninstalled it. As a result, I can't even listen to my music any more, because I can't reinstall.
Every time I try, I'm told I have insufficient privileges to modify c\program files\common files\apple\mobile device support/applemobiledevicehelper.exe.
On googling, I find the "insufficient privileges" problem widely-discussed, but unfortunately every self-proclaimed expert who steps up with an answer says something different. I have tried every one I see, including
- I uninstalled all apple products and rebooted and tried again
- disabled my security programs and tried again
- disabled UAC and tried again
- made sure my Windows updates are current and tried again
- taking over full control of the apple mobile devices folder, and/or of the entire program files folder, but it said I didn't have privileges to take full control of apple mobile devices folder or of the common files folder or of that specific file.
- I couldn't copy, rename, or delete the folder
and none have worked.
My question is simple: has Apple provided any kind of answer to this common, recurrent problem? Maybe I just don't know how to navigate Apple support, but I can't find it. Obviously trying things from helpful people on the internet isn'tn working realy great.

If you backed up when they were there, you can restore with a backup. You might also want to ask on a Yahoo forum if there's another way.
I would think it would be OK to use the Notes app. I don't sync it with anything and I've never had any trouble. You might also look at 3rd party apps... I've heard that Evernote is very good.

Keeping contact with controlling applet while u/l XML file via servlet

Hello everybody,
if I am thinking too complicated, please send me other suggestions. Here's the situation:
I already have a working applet for a metadata application, that is sending the contents of the client's textfields to a remote database via servlet communication. Now I want to implement the following:
-The users have some attribute data in form of an XML file
-I want them to upload this file to the server (I already have that functionality using the fileUpload libraries of Apache Commons) by calling the servlet from a pop-up html page (is there any other possibility to do the communication, i.e. getting files from the file system?)
-the XML file should be parsed on the server and the content should be sent back to the calling applet for previewing reasons.
-when the user gives his/her O.K. the data should be transferred to the database.
Now there are some obstacles to overcome: When I upload the XML file to the server, I loose "contact" with the applet, i.e. the file is not connected with the applet code in any way. This is not a problem, when there is only one user at the time, but with many users loading up their data at the same time, things could get tricky.
What I thought was to copy the XML file to a temp directory with a unique name, the name of which would be transferred back to the applet by another servlet that is called when the (upload)pop-up window closes. The name of the temp directory could be the ID of the applet thread (is there such an ID, if yes, how can it be retrieved?)
Any suggestions (or just shaking heads concerning my complicated construction ;-) )
Cheers and many thanks in advance
Jan

You may be able to read a file from the file system with the applet, but it may require you to sign the applet. If you can, then use an HttpURLConnection to the servlet and send the file that way.
On the server side, you could create a session object (wether you actually need a session or not), and use the session's id as the key id for the directory name for the uploaded file. Session IDs are unique per client, and if the client handles cookies, then the same session will be used from one request to the next.
session = request.getSession();
String sessionID = session.getId();The response from the servlet would be a link to the server-side file. If you are using the Applet to send the request, you could get the response and automatically view the new file. Otherwise, you could send a page to the popup window saying: "Click This Link To See Your File" type of thing.

Upload a file with an Applet

Hi,
I want to know if it's possible to upload a file with an Applet, but not a signed Applet.
Thanks
Cris

Yes, but you are limited to uploading to the server from where the applet was originating from.
Regards,
Peter Norell

11.2.0.1 :ORA-01031: insufficient privileges / as sysdba

Hi All,
I installed 11.2.0.1 $ORACLE_HOME in process of performing database upgrade in 11i applications environment.
Installation went successfully, while installing i have to select group name as "other" as it was not listing the dba group in installation screen. I manually changed the group to dba after Installation.
Now when im trying to login as /sysdba its getting error-ed out:
bash-3.00$ sqlplus / as sysdba
SQL*Plus: Release 11.2.0.1.0 Production on Sat Jun 5 08:53:35 2010
Copyright (c) 1982, 2009, Oracle. All rights reserved.
ERROR:
ORA-01031: insufficient privileges
- proper oracle home, sid, path is set
- listener is up and running
what could be the problem?
Thanks in advance for all you inputs.

Prathmesh wrote:
You do this by running the utility orapwd from a command line.
orapwd file=$ORACLE_HOME/dbs/orapwsid password=secure entries=5Dear Prathmesh "sqlplus / as sysdba" command do not use passwordfile or this is not password file authentication,this is OS authentication.Pls see http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/dba.htm#sthref149

ITunes 7.4.2 Run Error with Vista (insufficient privileges)

Short and sweet. Windows Vista. McAfee Security. User Profile is coded as Adminsistrator and previous iTunes version was working fine.
Loaded 7.4.2 and install registered complete. First time to open the store..rec'd error: "The Installer has insufficient privileges to modify this file: C;\Program Files\iTunes\About iTunes.rtf." Now..when I click on the actual file, I get "You don't have permission to open file". Yes..I went into the security tab to open the file to all users, and when I clicked the icon again, it showed another file, and another...so on. I certainly do not want to manually edit every single file and when I try to uninstall, I don't have permission to erase the files. Anybody with an idea what I am going through and have a fix?

Hello, first of all thank you veyr much polydorus the driver resolved the itunes error
But I still having problems with most of my movie files I keep getting the error: Error -2202: a bad public atom was found in the movie
And strangest is on my brothers ipod the files work, and they did work before on my old ipod (30gb) to now I bought a new one (160gb) and I cant copy any files to it, also if I convert my offical files again I keep getting this error.
is there anyone that knows what is wrong maybe?

I can't get new version of itunes to install on Windows 7 64 bit computer. Receive message that reads insufficient privileges to access c:\program files\ipod\bin. Tried to follow some suggestions found here but nothing is working. Any new suggestions?

I can't get new version of itunes to install on Windows 7 64 bit computer. Receive message that reads insufficient privileges to access c:\program files\ipod\bin. I've followed several threads I've read here but nothing is working.

For such situation, I'd suggest the following:
1. Remove current installed office with the fix-it tool in
KB2739501, and follow the "Remove Office manually" section to make sure there are no remaining files
2. Either download a trial version of Office 2013 from
http://office.microsoft.com/, or from
http://technet.microsoft.com/en-us/evalcenter/jj937170
3. Reboot your computer in clean boot mode, and run setup again
Max Meng
TechNet Community Support

8.1.6 install fails with Error 1321 Installer has insufficient privileges -

Adobe Reader “Check for Updates” identifies “Adobe Reader 8.1.6 (CPSID_49167)” as “Available”.
Installation fails with “Error 1321.The Installer has insufficient privileges to modify the file C:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Search.api.”
Reboot tries to complete install adding unwanted desktop icon, but CPSID_49167 still shows as “Available” and MSI29706>LOG(s) show above error.
XP SP3 Home, IE7, Adobe Reader 8.1.5

Thanx kashifMohd,
Downloaded the fix, vetted it, and before creating a new Administrator account used the following recipe with success:
1. Ran downloaded fix with usual Admin Account and got the “Error 1321 for Search.api.” as before, but now there is a pop-up asking "Retry" or "Cancel" that did not appear when using "Get Updates" function from running Adobe Reader. Replied "Cancel".
2. Rebooted, and disabled Kaspersky Anti-Virus.
3. Again ran downloaded fix with usual Admin Account and got Error 1321 for different file: "C:\Program Files\Adobe\Reader 8.0\Reader\plug_ins3d\3difr.x3d" with pop-up asking "Retry" or "Cancel".
4. Clicked "Retry" this time and installation completed successfully.
Thanx again.

Execute immediate on DBMS_METADATA.GET_DDL with error of ORA-01031: insufficient privileges

I want to mirror a schema to a existing schema by creating DDL and recreate on the other schema with same name.
I wrote the code below:
create or replace
PROCEDURE                                    SCHEMA_A."MAI__DWHMIRROR"
AS
v_sqlstatement CLOB:='bos';
str varchar2(3999);
BEGIN
select
    replace(
      replace(replace(
      replace(DBMS_METADATA.GET_DDL('TABLE','XXXX','SCHEMA_A'),'(CLOB)',''),';','')
    ,'SCHEMA_A'
    ,'SCHEMA_B'
into v_sqlstatement
from dual;
select CAST(v_sqlstatement AS VARCHAR2(3999)) into str from dual;
execute immediate ''||str;
END;
And Executing this block with below code:
set serveroutput on
begin
SCHEMA_A.MAI__DWHMIRROR;
end;
But still getting the following error code:
Error report:
ORA-01031: insufficient privileges
ORA-06512: at "SCHEMA_A.MAI__DWHMIRROR", line 47
ORA-06512: at line 2
01031. 00000 - "insufficient privileges"
*Cause:    An attempt was made to change the current username or password
           without the appropriate privilege. This error also occurs if
           attempting to install a database without the necessary operating
           system privileges.
           When Trusted Oracle is configure in DBMS MAC, this error may occur
           if the user was granted the necessary privilege at a higher label
           than the current login.
*Action:   Ask the database administrator to perform the operation or grant
           the required privileges.
           For Trusted Oracle users getting this error although granted the
           the appropriate privilege at a higher label, ask the database
           administrator to regrant the privilege at the appropriate label.

user5199319 wrote:
USER has DBA Role
when all else fails Read The Fine Manual
DBMS_METADATA

File Access with unsigned Applet through editing the java.policy file

I'am starting to lose my hair on this...
I am trying to get an applet to run so that it can access the file system to move files on my local maschin. Because this applet is only running on my VM i can change the java.policy to avoid the signing of the applet.
first of all, if i wrote in the java.policy file
grant {
permission java.security.AllPermission;
};everything is working perfekt.
But I have not the intention to open the gates for any applet out there, so i want to limit the access to my applet. With every of the following versions I get at best an
java.security.AccessControlException: access denied (java.io.FilePermission...
My Setup
My Java Version: jre1.6.0_02
My applet is located unter the url
http://admin.mydomain.com/applet.jar
In Html i tryed the following different versions of loading the applet - none worked
<applet codebase="http://admin.mydomain.com/" name="shortcut" code="start.class" archive="applet.jar" width="0" height="0"></applet>
<applet codebase="http://admin.mydomain.com" name="shortcut" code="start.class" archive="applet.jar" width="0" height="0"></applet>
<applet name="shortcut" code="start.class" archive="http://admin.mydomain.com/applet.jar" width="0" height="0"></applet>in java.policy i tryed following versions with every html applet load version
grant codeBase "http://admin.x-press.de/-" {
permission java.security.AllPermission;
grant codeBase "http://admin.x-press.de/+" {
permission java.security.AllPermission;
grant codeBase "http://admin.x-press.de/applet.jar" {
permission java.security.AllPermission;
};why is it with
grant {
permission java.security.AllPermission;
};working, and not with the other versions?
i am almost bold now, please try to save my last hair from falling down.
any suggestion would be nice
thanks, feyyaz
Message was edited by:
feyyazdogu

I read the mentioned documentation and your right, some of my versions were wrong, but after reading the doumentation again i came to following result which should had worked but didn't.
java.policy
grant codeBase "http://admin.mydomain.com/*" {
permission java.security.AllPermission;
HTML File
<applet codebase="http://admin.mydomain.com/" name="shortcut" code="start.class" archive="applet.jar" height="0" width="0"></applet>if I am entering http://admin.mydomain.com/applet.jar i can download the jar, so the archive lays in the correct directory.
what i am doing wrong? do i have to change an additional file somewhere else?

Check database with error "ORA-01031: insufficient privileges"

Dear Gurus,
        I ran "Check database" in DB13 but I got error "ORA-01031: insufficient privileges"
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0301E SQL error -1031 at location BrDbdiffRead-1, SQL statement:
'PREPARE stmt_5 STATEMENT FROM'
'SELECT OBJNAME FROM "SAPSR3".DBDIFF WHERE DBSYS IN ('ORACLE', ' ') AND OBJTYPE = 'TABL' AND DIFFKIND IN ('02', '61', '99') ORDER BY OBJNAME'
ORA-01031: insufficient privileges
BR0806I End of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.37.00
       Note I try to execute sapdba_role.sql (with command "sqlplus /nolog @sapdba_role.sql SR3") as Note 134592 both login 'oradev' and 'devadm' but it seem to do nothing (not found sapdba_role.log)
      Please advice.
Best regards,
Choosak B.
Ps.
detailed log of /oracle/DEV/sapcheck/cecxekdh.chk
BR0801I BRCONNECT 7.00 (40)
BR0477I Oracle pfile /oracle/DEV/102_64/dbs/initDEV.ora created from spfile /oracle/DEV/102_64/dbs/spfileDEV.ora
BR0805I Start of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.30.53
BR0484I BRCONNECT log file: /oracle/DEV/sapcheck/cecxekdh.chk
BR0101I Parameters
Name                           Value
oracle_sid                     DEV
oracle_home                    /oracle/DEV/102_64
oracle_profile                 /oracle/DEV/102_64/dbs/initDEV.ora
sapdata_home                   /oracle/DEV
sap_profile                    /oracle/DEV/102_64/dbs/initDEV.sap
system_info                    devadm/oradev sapdev SunOS 5.10 Generic_142900-03 sun4v
oracle_info                    DEV 10.2.0.4.0 8192 7465 94896497 sapdev UTF8 UTF8
sap_info                       701 SAPSR3 0002LK0003DEV0011N11827599290015Maintenance_ORA
make_info                      sun_64 OCI_102 Feb 21 2009
command_line                   brconnect -u / -jid CHECK20100331123000 -c -f check
alert_log                      /oracle/DEV/saptrace/background/alert_DEV.log
BR0280I BRCONNECT time stamp: 2010-03-31 12.30.56
BR0813I Schema owners found in database DEV:
DBSNMP, DIP, OPS$DEVADM, OPS$ORADEV, OPS$SAPSERVICEDEV, ORACLE_OCM, OUTLN, SAPSR3*, SYS, SYSTEM,
TSMSYS
BR0118I Tablespaces and data files
Tablespace     Status     File                                               Status     Id.        Size      MaxSize     IncrSize BlkSize      Device Type Link
PSAPSR3        ONLINE+    /oracle/DEV/sapdata2/sr3_1/sr3.data1               ONLINE+     4   2411732992 10485760000     20971520     8192    16777219 FILE NOLINK
SYSTEM         ONLINE+    /oracle/DEV/sapdata1/system_1/system.data1         SYSTEM+     1   1017126912 10485760000     20971520     8192    16777219 FILE NOLINK
BR0119I Redo log files
File                                          Status Group       Size       Device Type Link
/oracle/DEV/origlogA/log_g11m1.dbf            INUSE      1    52429312     16777218 FILE NOLINK
/oracle/DEV/mirrlogA/log_g11m2.dbf            INUSE      1    52429312     16777218 FILE NOLINK
/oracle/DEV/origlogB/log_g12m1.dbf            INUSE      2    52429312     16777218 FILE NOLINK
/oracle/DEV/mirrlogB/log_g12m2.dbf            INUSE      2    52429312     16777218 FILE NOLINK
/oracle/DEV/origlogA/log_g13m1.dbf            INUSE      3    52429312     16777218 FILE NOLINK
/oracle/DEV/mirrlogA/log_g13m2.dbf            INUSE      3    52429312     16777218 FILE NOLINK
/oracle/DEV/origlogB/log_g14m1.dbf            INUSE      4    52429312     16777218 FILE NOLINK
/oracle/DEV/mirrlogB/log_g14m2.dbf            INUSE      4    52429312     16777218 FILE NOLINK
BR0120I Control files
File                                                Size       Device Type Link
/oracle/DEV/origlogA/cntrl/cntrlDEV.dbf         15024128     16777218 FILE NOLINK
/oracle/DEV/origlogB/cntrl/cntrlDEV.dbf         15024128     16777218 FILE NOLINK
/oracle/DEV/sapdata1/cntrl/cntrlDEV.dbf         15024128     16777219 FILE NOLINK
BR0982I Database disk volumes
Directory / Raw disk                          Device      Total[KB]      Free[KB]    Used[%]   MaxNeed[KB]   MaxMiss[KB]
/oracle/DEV/102_64                          16777218     480700086     404332206      15.89             0             0
/oracle/DEV                                 16777218     480700086     404332206      15.89             0             0
/oracle/DEV/mirrlogA                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/mirrlogB                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/origlogA                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/origlogB                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/sapdata1                        16777219     591212116     404332206      31.61     240019884             0
/oracle/DEV/sapdata2                        16777219     591212116     404332206      31.61     240019884             0
/oracle/DEV/sapdata3                        16777219     591212116     404332206      31.61     240019884             0
/oracle/DEV/sapdata4                        16777219     591212116     404332206      31.61     240019884             0
/oracle/DEV/saparch                         16777218     480700086     404332206      15.89             0             0
/oracle/DEV/sapbackup                       16777218     480700086     404332206      15.89             0             0
/oracle/DEV/sapcheck                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/sapreorg                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/saptrace                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/oraarch                         16777218     480700086     404332206      15.89             0             0
BR0280I BRCONNECT time stamp: 2010-03-31 12.31.29
BR0814I Number of tables in schema of owner SAPSR3: 74582
BR0836I Number of info cube tables found for owner SAPSR3: 49
BR0814I Number of tables/partitions in schema of owner SYS: 625/189
BR0814I Number of tables/partitions in schema of owner SYSTEM: 134/27
BR0280I BRCONNECT time stamp: 2010-03-31 12.32.28
BR0815I Number of indexes in schema of owner SAPSR3: 89159
BR0815I Number of indexes/partitions in schema of owner SYS: 678/199
BR0815I Number of indexes/partitions in schema of owner SYSTEM: 175/32
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0816I Number of segments in schema of owner DBSNMP: 25
BR0816I Number of segments in schema of owner OPS$DEVADM: 1
BR0816I Number of segments in schema of owner OUTLN: 9
BR0816I Number of segments/LOBs in schema of owner SAPSR3: 168369/2314
BR0816I Number of segments/LOBs in schema of owner SYS: 1831/87
BR0816I Number of segments/LOBs in schema of owner SYSTEM: 353/22
BR0816I Number of segments in schema of owner TSMSYS: 4
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0961I Number of conditions found in DBCHECKORA: 118
BR0983I Tablespace fragmentation
Tablespace    Files   Tables Indexes    Extents     Total[KB]   Used[%]     Free[KB]   FreeExt.   MaxSize[KB]   MaxAlloc[KB]   Used[%]       Free[KB]       Largest[KB]
PSAPSR3          16    74248    88689     209864     54138880     94.51      2970752        240     163840000+     109701120+    31.23+     112671872+       9246720:7966720:7946240:7905280:7905280+
PSAPSR3701       14        0        0          0     54466560      0.00     54465664         20     143360000+      88893440+     0.00+     143359104+       9021440:8192000:8192000:8192000:8192000+
PSAPSR3701X       4      310      445      12190     68342784     94.20      3962240          7      68342784              0     94.20        3962240        1298432:1191936:979968:163776:163776
PSAPSR3USR        1       24       25         51        51200      6.50        47872          1      10240000+      10188800+     0.03+      10236672+      10188800+:47872:0:0:0
PSAPTEMP          1        0        0          0      1433600      0.00      1433600          0      10240000+       8806400+     0.00+      10240000+       8806400+:0:0:0:0
PSAPUNDO          1        0        0          0      7823360      0.00      7823296        406      10240000+       2416640+     0.00+      10239936+       2416640+:2041792:1814464:1433536:603072
SYSAUX            1      254      284       2059       307200     93.35        20416         16      10240000+       9932800+     2.80+       9953216+       9932800+:13248:3072:1024:640
SYSTEM            1      505      569       2926       993280     98.91        10816          2      10240000+       9246720+     9.59+       9257536+       9246720+:10176:640:0:0
Total:           39    75341    90012     227090    187556864     62.29     70734656        692     426742784      239185920     27.38      309920576       60157952:19463744:18936384:17695616:16864768
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0301E SQL error -1031 at location BrDbdiffRead-1, SQL statement:
'PREPARE stmt_5 STATEMENT FROM'
'SELECT OBJNAME FROM "SAPSR3".DBDIFF WHERE DBSYS IN ('ORACLE', ' ') AND OBJTYPE = 'TABL' AND DIFFKIND IN ('02', '61', '99') ORDER BY OBJNAME'
ORA-01031: insufficient privileges
BR0806I End of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.37.00
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0804I BRCONNECT terminated with errors

Hi,
       It solved after change permission of directory that sapdba_role.sql kept to oradev:dba after that it can write sapdba_role.log.
      Thank you for your guideline.
      Now, I can ran 'Check database' via DB13 without that error.
Best regards,
Choosak B.

Insufficient privileges with nm-applet but polkit policy set

Similar Messages

Maybe you are looking for