ORA-01031: insufficient privileges problem

Hi all,
I am trying to create the below procedure in the BOLMIN schema which in turn selects data from the tables of VALMIN schema. and I get ORA-01031: insufficient privileges error.
CREATE OR REPLACE PROCEDURE BOLMIN.prcs_load_data
IS
BEGIN
FOR c
IN (SELECT DISTINCT AL4.GOAL_TEXT,
AL5.RESPONSE_TEXT,
AL7.SAMPLE_ID,
AL7.ACADEMY_NAME,
AL8.NAME
FROM VALMIN.USER_PROFILE AL3,
VALMIN.STUDENT_GOALS AL4,
VALMIN.STUDENT_QUESTION_DETAILS AL5,
VALMIN.STUDENT_QUESTION_RESPONSE AL6,
VALMIN.SAMPLE AL7,
VALMIN.NAME AL8
WHERE ( AL3.GOAL_ID = AL4.GOAL_ID(+)
AND AL3.USER_ID = AL6.USER_ID(+)
AND AL6.QUESTION_TYPE_SUB_ID = AL5.QUESTION_TYPE_SUB_ID(+)
AND AL7.NAME_ID = AL8.NAME_ID(+)))
LOOP
NULL;
END LOOP;
END;
I checked the grants of each of the VALMIN schema tables involved in the associated sql query & they all have SELECT grant (to BOLMIN schema). Also, the SQL query itself, when executed in BOLMIN schema runs perfectly fine. The problem is occurring only when I enclose the query in a procedure. Isn't that weird? or am I missing something here? Any help regarding this issue is appreciated. Thanks.
The BOLMIN schema as CREATE PROCEDURE privilege as I have already created other procedures for other purposes.
Thanks,
Sirisha
Edited by: siri_me on Oct 2, 2010 9:23 AM

siri_me wrote:
All Roles are disabled in PL/SQL and explicit privileges are needed right from creating procedures to the accessing the underlying tables.WRONG. Roles are disabled in definer rights stored objects - stored procedures, functions, packages triggers. Stored procedures, functions, packages with authid current user and anonymous PL/SQL block honor roles.
SY.

Similar Messages

  • Resolving problem with ORA-01031: insufficient privileges

    hello i just to write a few word about my installation of oracle database 9i
    My installation is on a Red Hat AS3
    I have a problem with the error :ORA-01031: insufficient privileges
    The one who read this know what about i tell.
    The authorization is only for the user which Group is DBA as you can read everywhere.
    but me when i tried groupadd dba => it tells group already exist.
    but i can't find the group dba in the file /etc/group.
    So i tried to make my user 'oracle' works with the 'already group exist' dba .
    useradd -g dba oracle
    but when i tried to start the database i create i have the message. : ORA-01031: insufficient privileges
    i tried to add manualy the group dba to /etc/group (as i can read in websites)
    and add a user manualy (/etc/passwd).
    But does works.
    I try all i can during 1 days long.
    I was really upset because nothing that i read work.
    finaly I go to the RedHat Menu (things i don't really do normaly on LINUX) and go to 'SYSTEM SETTINGS' and choose 'User and Group'
    Here i can see my user 'Oracle' I get the property of the user .
    there is a tab group ( 'select the group that the user will be member of:')
    None of them where name DBA so i decidied to select all of them and tried.
    MAGIC!!! then it works!!!
    ps: after when i see the list of the group I saw that one of them is named 'SYS' . I really think that it is the one group i had to select. but don't know.
    Now It is working for me so... And good luck for you. bye.

    Errors
    ORA-01031 "insufficient privileges"
    Symptoms
    During database upgrade phase using DBUA , it fails with error
    ORA-1031 Insufficient privileges
    Connection from sqlplus also fails with same error
    $ sqlplus /nolog
    SQLPLUS "conn / as sysdba"
    ORA-1031 Insufficient privileges
    Changing the REMOTE_LOGIN_PASSWORDFILE to SHARED / NONE does not make differen
    Cause
    ORACLE_HOME owner oramigts is part of OS group "dba" ,but config.s shows group "g680"
    The 'OSDBA' and 'OSOPER' groups are chosen at installation time and usually both default to the group 'dba'.
    These groups are compiled into the 'oracle' executable and so are the same for all databases running from a given ORACLE_HOME directory.
    The actual groups being used for OSDBA and OSOPER can be checked thus:
    cd $ORACLE_HOME/rdbms/lib
    cat config.[cs]
    Solution
    To implement the solution, please execute the following steps:
    1. Checked the ORACLE_HOME owner.
    echo $ORACLE_HOME
    /h02/app/oracle/product/9.2.0_64
    cd / h02/app/oracle/product/
    ls -l
    drwxr-xr-x 58 oramigts dba 1024 Jan 2 2004 9.2.0_64
    2.ORACLE_HOME software owner "oramigts" is part of group "dba"
    3.Checked file $ORACLE_HOME/rdbms/lib/config.s
    [If your platform has config.c:
    Due to the way different compilers under different architectures generate
    assembler code, it's not possible to give a universal rule.]
    It shows dba group as "g680" where software owner is part of "dba" group
    You can more find detail on config.s / config.c in the following doc.
    Note 50507.1 SYSDBA and SYSOPER Privileges in Oracle
    4. Modified the config.s for correct group.
    .ascii "g680\0"
    to
    .ascii "dba\0"
    7. mv config.o config.o.bak
    8. make -f ins_rdbms.mk config.o ioracle
    9. Checked the file config.o is created at $ORACLE_HOME/rdbms/lib
    10. Connected / as sysdba thru Sqlplus from 9.2 Home, which connected sucessfully.

  • ORA-01031: insufficient privileges in PL/SQL but not in SQL

    I have problem with following situation.
    I switched current schema to another one "ban", and selected 4 rows from "ed"
    alter session set current_schema=ban;
    SELECT * FROM ed.PS WHERE ROWNUM < 5;
    the output is OK, and I get 4 rows like
    ID_S ID_Z
    1000152 1
    1000153 1
    1000154 1
    1000155 1
    but following procedure is compiled with warning
    create or replace
    procedure proc1
    as
    rowcnt int;
    begin
    select count(*) into rowcnt from ed.PS where rownum < 5;
    end;
    "Create procedure, executed in 0.031 sec."
    5,29,PL/SQL: ORA-01031: insufficient privileges
    5,2,PL/SQL: SQL Statement ignored
    ,,Total execution time 0.047 sec.
    Could you help me why SELECT does work in SQL but not in PL/SQL procedure?
    Thanks.
    Message was edited by:
    MattSk

    Privs granted via a role are only valid from SQL - and not from/within stored PL/SQL code.
    Quoting Tom's (from http://asktom.oracle.com) response to this:I did address this role thing in my book Expert one on one Oracle:
    <quote>
    What happens when we compile a Definer rights procedure
    When we compile the procedure into the database, a couple of things happen with regards to
    privileges.  We will list them here briefly and then go into more detail:
    q    All of the objects the procedure statically accesses (anything not accessed via dynamic SQL)
    are verified for existence. Names are resolved via the standard scoping rules as they apply to the
    definer of the procedure.
    q    All of the objects it accesses are verified to ensure that the required access mode will be
    available. That is, if an attempt to UPDATE T is made - Oracle will verify the definer or PUBLIC
    has the ability to UPDATE T without use of any ROLES.
    q    A dependency between this procedure and the referenced objects is setup and maintained. If
    this procedure SELECTS FROM T, then a dependency between T and this procedure is recorded
    If, for example, I have a procedure P that attempted to 'SELECT * FROM T', the compiler will first
    resolve T into a fully qualified referenced.  T is an ambiguous name in the database - there may be
    many T's to choose from. Oracle will follow its scoping rules to figure out what T really is, any
    synonyms will be resolved to their base objects and the schema name will be associated with the
    object as well. It does this name resolution using the rules for the currently logged in user (the
    definer). That is, it will look for an object owned by this user called T and use that first (this
    includes private synonyms), then it will look at public synonyms and try to find T and so on.
    Once it determines exactly what T refers to - Oracle will determine if the mode in which we are
    attempting to access T is permitted.   In this case, if we as the definer of the procedure either
    owns the object T or has been granted SELECT on T directly or PUBLIC was granted SELECT, the
    procedure will compile.  If we do not have access to an object called T by a direct grant - the
    procedure P will fail compilation.  So, when the object (the stored procedure that references T) is
    compiled into the database, Oracle will do these checks - and if they "pass", Oracle will compile
    the procedure, store the binary code for the procedure and set up a dependency between this
    procedure and this object T.  This dependency is used to invalidate the procedure later - in the
    event something happens to T that necessitates the stored procedures recompilation.  For example,
    if at a later date - we REVOKE SELECT ON T from the owner of this stored procedure - Oracle will
    mark all stored procedures this user has that are dependent on T, that refer to T, as INVALID. If
    we ALTER T ADD  some column, Oracle can invalidate all of the dependent procedures. This will cause
    them to be recompiled automatically upon their next execution.
    What is interesting to note is not only what is stored but what is not stored when we compile the
    object. Oracle does not store the exact privilege that was used to get access to T. We only know
    that procedure P is dependent on T. We do not know if the reason we were allowed to see T was due
    to:
    q    A grant given to the definer of the procedure (grant select on T to user)
    q    A grant to public on T (grant select on T to public)
    q    The user having the SELECT ANY TABLE privilege
    The reason it is interesting to note what is not stored is that a REVOKE of any of the above will
    cause the procedure P to become invalid. If all three privileges were in place when the procedure
    was compiled, a revoke of ANY of them will invalidate the procedure - forcing it to be recompiled
    before it is executed again. Since all three privileges were in place when we created the procedure
    - it will compile successfully (until we revoke all three that is). This recompilation will happen
    automatically the next time that the procedure is executed.
    Now that the procedure is compiled into the database and the dependencies are all setup, we can
    execute the procedure and be assured that it knows what T is and that T is accessible. If something
    happens to either the table T or to the set of base privileges available to the definer of this
    procedure that might affect our ability to access T -- our procedure will become invalid and will
    need to be recompiled.
    This leads into why ROLES are not enabled during the compilation and execution of a stored
    procedure in Definer rights mode. Oracle is not storing exactly WHY you are allowed to access T -
    only that you are. Any change to your privileges that might cause access to T to go away will cause
    the procedure to become invalid and necessitate its recompilation. Without roles - that means only
    'REVOKE SELECT ANY TABLE' or 'REVOKE SELECT ON T' from the Definer account or from PUBLIC. With
    roles - it greatly expands the number of times we would invalidate this procedure. If some role
    that was granted to some role that was granted to this user was modified, this procedure might go
    invalid, even if we did not rely on that privilege from that role. ROLES are designed to be very
    fluid when compared to GRANTS given to users as far as privilege sets go. For a minute, let's say
    that roles did give us privileges in stored objects. Now, most any time anything was revoked from
    ANY ROLE we had, or any role any role we have has (and so on -- roles can and are granted to roles)
    -- many of our objects would become invalid. Think about that, REVOKE some privilege from a ROLE
    and suddenly your entire database must be recompiled! Consider the impact of revoking some system
    privilege from a ROLE, it would be like doing that to PUBLIC is now, don't do it, just think about
    it (if you do revoke some powerful system privilege from PUBLIC, do it on a test database). If
    PUBLIC had been granted SELECT ANY TABLE, revoking that privilege would cause virtually every
    procedure in the database to go invalid. If procedures relied on roles, virtually every procedure
    in the database would constantly become invalid due to small changes in permissions. Since one of
    the major benefits of procedures is the 'compile once, run many' model - this would be disastrous
    for performance.
    Also consider that roles may be
    q    Non-default: If I have a non-default role and I enable it and I compile a procedure that
    relies on those privileges, when I log out I no longer have that role -- should my procedure become
    invalid -- why? Why not? I could easily argue both sides.
    q    Password Protected: if someone changes the password on a ROLE, should everything that might
    need that role be recompiled?  I might be granted that role but not knowing the new password - I
    can no longer enable it. Should the privileges still be available?  Why or Why not?  Again, arguing
    either side of this is easy. There are cases for and against each.
    The bottom line with respect to roles in procedures with Definer rights are:
    q    You have thousands or tens of thousands of end users. They don't create stored objects (they
    should not). We need roles to manage these people. Roles are designed for these people (end users).
    q    You have far fewer application schema's (things that hold stored objects). For these we want
    to be explicit as to exactly what privileges we need and why. In security terms this is called the
    concept of 'least privileges', you want to specifically say what privilege you need and why you
    need it. If you inherit lots of privileges from roles you cannot do that effectively. We can manage
    to be explicit since the number of development schemas is SMALL (but the number of end users is
    large)...
    q    Having the direct relationship between the definer and the procedure makes for a much more
    efficient database. We recompile objects only when we need to, not when we might need to. It is a
    large efficiency enhancement.
    </quote>

  • Logical standby: ORA-01031: insufficient privileges

    Dear Colleagues,
    Today in my Logical Standby don't apply archivelogs and I see an error in alert.log:
    ORA-26808: Apply process AS01 died unexpectedly.
    ORA-01031: insufficient privileges
    Also I see next logs in trace files:
    h4.
    1)
    Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
    With the Partitioning, Data Mining and Real Application Testing options
    ORACLE_HOME = /ora/Ora11203
    System name: Linux
    Node name: base
    Release: 2.6.18-308.20.1.el5
    Version: #1 SMP Tue Nov 6 04:38:29 EST 2012
    Machine: x86_64
    Instance name: oracle
    Redo thread mounted by this instance: 1
    Oracle process number: 43
    Unix process pid: 16634, image: oracle@base (AS01)
    *** 2013-04-04 16:58:47.062
    *** SESSION ID:(146.16811) 2013-04-04 16:58:47.062
    *** CLIENT ID:() 2013-04-04 16:58:47.062
    *** SERVICE NAME:(SYS$USERS) 2013-04-04 16:58:47.062
    *** MODULE NAME:(Streams) 2013-04-04 16:58:47.062
    *** ACTION NAME:( - Apply Server) 2013-04-04 16:58:47.062
    knasplcr: eager error was not rolled back
    ++ LCR Dump Begin: 0x2b0cf2a6d168 - ddl
    op: 5, Original op: 5, baseobjn: 0, objn: 0, objv: 0
    DF: 0x00000002, DF2: 0x00000010, MF: 0x00020810, MF2: 0x00000000
    PF: 0x00000000, PF2: 0x08000000
    MergeFlag: 0x00, FilterFlag: 0x00
    Id: 0, iotPrimaryKeyCount: 0, numChgRec: 1
    NumCrSpilled: 0
    RedoThread#: 1, rba: 0x0213d7.00023455.01ac
    scn: 0x0002.fc0f8769, (scn: 0x0000.00000000, scn_sqn: 0, lcr_sqn: 0)xid: 0x0019.00e.0007f8d9, parentxid: 0x0019.00e.0007f8d9, proxyxid: 0x0000.000.00000000
    ncol: 0 newcount: 24, oldcount: 0
    LUBA: 0x4.1000ad1.e.0.0
    ++ LCR Dump Begin: 0x59b1afdc8 - commit
    op: 7, Original op: 7, baseobjn: 0, objn: 0, objv: 0
    DF: 0x00000002, DF2: 0x00000010, MF: 0x00220000, MF2: 0x02000000
    PF: 0x00100000, PF2: 0x08040000
    MergeFlag: 0x03, FilterFlag: 0x00
    Id: 3, iotPrimaryKeyCount: 0, numChgRec: 0
    NumCrSpilled: 0
    RedoThread#: 1, rba: 0x0213d7.00023456.0108
    scn: 0x0002.fc0f876b, (scn: 0x0002.fc0f876b, scn_sqn: 1, lcr_sqn: 1)xid: 0x0019.00e.0007f8d9, parentxid: 0x0019.00e.0007f8d9, proxyxid: 0x0000.000.00000000
    ncol: 0 newcount: 0, oldcount: 0
    LUBA: 0x4.1000ad1.e.0.0
    Apply Slave is exiting due to error ORA-1031KSV 1031 error in slave process
    *** 2013-04-04 16:58:47.067
    ORA-01031: insufficient privileges
    OPIRIP: Uncaught error 447. Error stack:
    ORA-00447: fatal error in background process
    ORA-01031: insufficient privileges
    h4.
    2)
    Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
    With the Partitioning, Data Mining and Real Application Testing options
    ORACLE_HOME = /ora/Ora11203
    System name: Linux
    Node name: base
    Release: 2.6.18-308.20.1.el5
    Version: #1 SMP Tue Nov 6 04:38:29 EST 2012
    Machine: x86_64
    Instance name: oracle
    Redo thread mounted by this instance: 1
    Oracle process number: 30
    Unix process pid: 16404, image: oracle@base (LSP0)
    *** 2013-04-04 16:41:58.401
    *** SESSION ID:(294.35251) 2013-04-04 16:41:58.401
    *** CLIENT ID:() 2013-04-04 16:41:58.401
    *** SERVICE NAME:(SYS$BACKGROUND) 2013-04-04 16:41:58.401
    *** MODULE NAME:() 2013-04-04 16:41:58.401
    *** ACTION NAME:() 2013-04-04 16:41:58.401
    knahcapplymain: encountered error=26808
    *** 2013-04-04 16:41:58.401
    dbkedDefDump(): Starting a non-incident diagnostic dump (flags=0x0, level=0, mask=0x0)
    ----- Error Stack Dump -----
    ORA-26808: Apply process AS02 died unexpectedly.
    ORA-01031: insufficient privileges
    KNACDMP: *******************************************************
    KNACDMP: Dumping apply coordinator's context at 25487cb0
    KNACDMP: Apply Engine # 0
    KNACDMP: Apply Engine name
    KNACDMP: Coordinator's Watermarks ------------------------------
    KNACDMP: Apply High Watermark = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Apply Low Watermark = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Recovery Low Watermark = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Fetch Low Watermark = 0002fc0f876b (SCN=0x0002.fc0f876b)
    KNACDMP: Fetch Low Watermark Time = 811857327
    KNACDMP: Oldest SCN = (SCN=0x0000.00000000)
    KNACDMP: Oldest XID =
    KNACDMP: Oldest Create Time = 0
    KNACDMP: Last replicant syncpoint SCN = 0x0000.00000000
    KNACDMP: Last syncpoint at primary SCN = 0x0002.fc0f875f
    KNACDMP: First partition max pos = 0002fc10fab4 (SCN=0x0002.fc10fab4)
    KNACDMP: Last partition max pos = 0002fc10fab4 (SCN=0x0002.fc10fab4)
    KNACDMP: Last processed = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Conservative pos = 0002fc0f8cb2 (SCN=0x0002.fc0f8cb2)
    KNACDMP: Recovery start pos = (SCN=0x0000.00000000)
    KNACDMP: Recovery high watermark = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Spill LWM = (SCN=0x0000.00000000)
    KNACDMP: Spill LWM Create Time = 0
    KNACDMP: Coordinator's constants -------------------------------
    KNACDMP: number of apply slaves = 5
    KNACDMP: min number of apply slaves = 5
    KNACDMP: max number of apply slaves = 5
    KNACDMP: safety level (K) = 1
    KNACDMP: max txns in memory = 400
    KNACDMP: max constraints per table = 620
    KNACDMP: hash table size (in entries) = 10000000
    KNACDMP: Coordinator's intervals -------------------------------
    KNACDMP: syncpoint interval (ms) = 0
    KNACDMP: write low watermark interval(ms)= 1
    KNACDMP: Coordinator's timers/counters -------------------------
    KNACDMP: current time = 1365082918
    KNACDMP: low watermark timer = 0
    KNACDMP: syncpoint timer = 1365082918
    KNACDMP: txnbufsize timer = 1365082220
    KNACDMP: Coordinator's txn counts -------------------------
    KNACDMP: total txns applied = 0
    KNACDMP: number of unassigned comp txns = 0
    KNACDMP: number of unassigned incomp txns= 0
    KNACDMP: avg number of unassigned txns = 0.00
    KNACDMP: total applied at last plwm write= 0
    KNACDMP: apply prog. entries below plwm = 0
    KNACDMP: total unassigned lcrs = 0
    KNACDMP: Coordinator's State/Flags -----------------------------
    KNACDMP: Coordinator's State = KNACST_APPLY_UNTIL_END
    KNACDMP: Coordinator's Flags = 0x408004
    KNACDMP: Slave counts ------------------------------------------
    KNACDMP: number of reserved slaves = 0
    KNACDMP: number of admin slaves = 0
    KNACDMP: number of slaves in wait cmt = 1
    KNACDMP: number of slaves suspended = 0
    KNACDMP: number of safe slaves = 1
    KNACDMP: avg number of idle slaves = 0.00
    KNACDMP: number of slaves initializing = 0
    KNACDMP: number of slaves terminating = 0
    KNACDMP: Slave Lists -------------------------------------------
    KNACDMP: Dumping All Slaves :-
    Slave id = 0, State = 8, Flags = 0, Not Assigned 0 txns 0 lcrs
    Slave id = 1, State = 9, Flags = 2, Assigned Xid = 0x001e.006.0005d213 1 txns 0 lcrs
    Slave id = 2, State = 5, Flags = 1, Assigned Xid = 0x0019.00e.0007f8d9 1 txns 0 lcrs
    Slave id = 3, State = 0, Flags = 0, Not Assigned 0 txns 0 lcrs
    Slave id = 4, State = 0, Flags = 0, Not Assigned 0 txns 0 lcrs
    Slave id = 5, State = 0, Flags = 0, Not Assigned 0 txns 0 lcrs
    KNACDMP: End dumping all slaves
    KNACDMP: syncdep slaves = { }
    KNACDMP: cont chunk slaves = { }
    KNACDMP: cont slaves = { }
    KNACDMP: exec txn slaves = { }
    KNACDMP: Active slaves (2) = { 1 2 }
    KNACDMP: Idle slaves (3) = { 3 4 5 }
    KNACDMP: Txn Lists ---------------------------------------------
    KNACDMP: Dumping all txns :-
    XID = 0x001e.006.0005d213 Commit pos = 0002fc06718c (SCN=0x0002.fc06718c) State = 0
    Lcr cnt = 0
    Assigned to slavid = 1
    Fetched chunks = 142
    depslaves = { } wm depslaves = { }
    XID = 0x0019.00e.0007f8d9 Commit pos = 0002fc0f876b (SCN=0x0002.fc0f876b) State = 1
    Lcr cnt = 0
    Assigned to slavid = 2
    Fetched chunks = 1
    depslaves = { } wm depslaves = { }
    KNACDMP: End dumping all txns.
    KNACDMP: Complete txns = { 0x0019.00e.0007f8d9 ** NO UNASS ** }
    KNACDMP: Unassigned txns = { }
    KNACDMP: *******************************************************
    Warning: Apply error received: ORA-26714: User Error encountered during apply process. Clearing.
    knahcapplymain: encountered error=26808
    *** 2013-04-04 16:58:47.073
    dbkedDefDump(): Starting a non-incident diagnostic dump (flags=0x0, level=0, mask=0x0)
    ----- Error Stack Dump -----
    ORA-26808: Apply process AS01 died unexpectedly.
    ORA-01031: insufficient privileges
    KNACDMP: *******************************************************
    KNACDMP: Dumping apply coordinator's context at 25487cb0
    KNACDMP: Apply Engine # 0
    KNACDMP: Apply Engine name
    KNACDMP: Coordinator's Watermarks ------------------------------
    KNACDMP: Apply High Watermark = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Apply Low Watermark = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Recovery Low Watermark = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Fetch Low Watermark = 0002fc0f876b (SCN=0x0002.fc0f876b)
    KNACDMP: Fetch Low Watermark Time = 811857327
    KNACDMP: Oldest SCN = (SCN=0x0000.00000000)
    KNACDMP: Oldest XID =
    KNACDMP: Oldest Create Time = 0
    KNACDMP: Last replicant syncpoint SCN = 0x0000.00000000
    KNACDMP: Last syncpoint at primary SCN = 0x0002.fc0f875f
    KNACDMP: First partition max pos = 0002fc10fab4 (SCN=0x0002.fc10fab4)
    KNACDMP: Last partition max pos = 0002fc10fab4 (SCN=0x0002.fc10fab4)
    KNACDMP: Last processed = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Conservative pos = 0002fc0f8cb2 (SCN=0x0002.fc0f8cb2)
    KNACDMP: Recovery start pos = (SCN=0x0000.00000000)
    KNACDMP: Recovery high watermark = 0002fc0f875f (SCN=0x0002.fc0f875f)
    KNACDMP: Spill LWM = (SCN=0x0000.00000000)
    KNACDMP: Spill LWM Create Time = 0
    KNACDMP: Coordinator's constants -------------------------------
    KNACDMP: number of apply slaves = 5
    KNACDMP: min number of apply slaves = 5
    KNACDMP: max number of apply slaves = 5
    KNACDMP: safety level (K) = 1
    KNACDMP: max txns in memory = 400
    KNACDMP: max constraints per table = 620
    KNACDMP: hash table size (in entries) = 10000000
    KNACDMP: Coordinator's intervals -------------------------------
    KNACDMP: syncpoint interval (ms) = 0
    KNACDMP: write low watermark interval(ms)= 1
    KNACDMP: Coordinator's timers/counters -------------------------
    KNACDMP: current time = 1365083926
    KNACDMP: low watermark timer = 0
    KNACDMP: syncpoint timer = 1365083926
    KNACDMP: txnbufsize timer = 1365083218
    KNACDMP: Coordinator's txn counts -------------------------
    KNACDMP: total txns applied = 0
    KNACDMP: number of unassigned comp txns = 0
    KNACDMP: number of unassigned incomp txns= 1
    KNACDMP: avg number of unassigned txns = 0.00
    KNACDMP: total applied at last plwm write= 0
    KNACDMP: apply prog. entries below plwm = 0
    KNACDMP: total unassigned lcrs = 0
    KNACDMP: Coordinator's State/Flags -----------------------------
    KNACDMP: Coordinator's State = KNACST_APPLY_UNTIL_END
    KNACDMP: Coordinator's Flags = 0x8204
    KNACDMP: Slave counts ------------------------------------------
    KNACDMP: number of reserved slaves = 0
    KNACDMP: number of admin slaves = 0
    KNACDMP: number of slaves in wait cmt = 0
    KNACDMP: number of slaves suspended = 0
    KNACDMP: number of safe slaves = 1
    KNACDMP: avg number of idle slaves = 0.00
    KNACDMP: number of slaves initializing = 0
    KNACDMP: number of slaves terminating = 0
    KNACDMP: Slave Lists -------------------------------------------
    KNACDMP: Dumping All Slaves :-
    Slave id = 0, State = 8, Flags = 0, Not Assigned 0 txns 0 lcrs
    Slave id = 1, State = 5, Flags = 1, Assigned Xid = 0x0019.00e.0007f8d9 1 txns 0 lcrs
    Slave id = 2, State = 0, Flags = 0, Not Assigned 0 txns 0 lcrs
    Slave id = 3, State = 0, Flags = 0, Not Assigned 0 txns 0 lcrs
    Slave id = 4, State = 0, Flags = 0, Not Assigned 0 txns 0 lcrs
    Slave id = 5, State = 0, Flags = 0, Not Assigned 0 txns 0 lcrs
    KNACDMP: End dumping all slaves
    KNACDMP: syncdep slaves = { }
    KNACDMP: cont chunk slaves = { }
    KNACDMP: cont slaves = { }
    KNACDMP: exec txn slaves = { }
    KNACDMP: Active slaves (1) = { 1 }
    KNACDMP: Idle slaves (4) = { 2 3 4 5 }
    KNACDMP: Txn Lists ---------------------------------------------
    KNACDMP: Dumping all txns :-
    XID = 0x001e.006.0005d213 Commit pos = 0002fc06718c (SCN=0x0002.fc06718c) State = 0
    Lcr cnt = 0
    Not Assigned
    Fetched chunks = 142
    depslaves = { } wm depslaves = { }
    XID = 0x0019.00e.0007f8d9 Commit pos = 0002fc0f876b (SCN=0x0002.fc0f876b) State = 1
    Lcr cnt = 0
    Assigned to slavid = 1
    Fetched chunks = 1
    depslaves = { } wm depslaves = { }
    KNACDMP: End dumping all txns.
    KNACDMP: Complete txns = { 0x0019.00e.0007f8d9 ** NO UNASS ** }
    KNACDMP: Unassigned txns = { 0x001e.006.0005d213 }
    KNACDMP: *******************************************************
    *** 2013-04-04 16:58:47.513
    Warning: Apply error received: ORA-26714: User Error encountered during apply process. Clearing.
    I watched this link http://docs.oracle.com/cd/E11882_01/server.112/e17069/strms_trapply.htm#i1014714 and I checked grants of schemas owners. These grants identical as on Primary DB Server.
    I don't know what I need to do. It's very critical Server. Please help me.

    So, my problem is solved very easy.
    Logical Standby didn't work because I added grant SYSDBA to temporary user and revoked this grant at once and I didn't change orapwSID file on Logical Standby from Primary.
    http://docs.oracle.com/cd/E11882_01/server.112/e25608/create_ps.htm#SBYDB00424Note:
    Whenever you grant or revoke the SYSDBA or SYSOPER privileges or change the login password of a user who has these privileges, you must replace the password file at each physical or snapshot standby database in the configuration with a fresh copy of the password file from the primary database.
    >
    So, I deleted temporary user on Logical Standby and it solved the problem.
    Thanks a lot to all who helped me!

  • 11.2.0.1 :ORA-01031: insufficient privileges / as sysdba

    Hi All,
    I installed 11.2.0.1 $ORACLE_HOME in process of performing database upgrade in 11i applications environment.
    Installation went successfully, while installing i have to select group name as "other" as it was not listing the dba group in installation screen. I manually changed the group to dba after Installation.
    Now when im trying to login as /sysdba its getting error-ed out:
    bash-3.00$ sqlplus / as sysdba
    SQL*Plus: Release 11.2.0.1.0 Production on Sat Jun 5 08:53:35 2010
    Copyright (c) 1982, 2009, Oracle. All rights reserved.
    ERROR:
    ORA-01031: insufficient privileges
    - proper oracle home, sid, path is set
    - listener is up and running
    what could be the problem?
    Thanks in advance for all you inputs.

    Prathmesh wrote:
    You do this by running the utility orapwd from a command line.
    orapwd file=$ORACLE_HOME/dbs/orapwsid password=secure entries=5Dear Prathmesh "sqlplus / as sysdba" command do not use passwordfile or this is not password file authentication,this is OS authentication.Pls see http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/dba.htm#sthref149

  • ORA-01031: insufficient privileges in oracle 10.2 in windows 2008r2

    Dear All,
    We have install SAP ecc6 EHP4 on oracle 10.2.0.5 on windows 2008R2
    whenever we schedule any activity in db13 we are getting below error .
    =================================
    Job started
    Step 001 started (program RSDBAJOB, variant &0000000000059, user ID PARESH)
    Execute logical command BRBACKUP On host IRDAECCDEV
    Parameters:-u / -jid FLL__20110922104226 -c force -t online -m full -p initieq_online.sap
    BR0051I BRBACKUP 7.20 (3)
    BR0055I Start of database backup: begvgwgh.fnf 2011-09-22 10.42.27
    BR0484I BRBACKUP log file: K:\oracle\IEQ\sapbackup\begvgwgh.fnf
    BR0280I BRBACKUP time stamp: 2011-09-22 10.42.28
    BR0301E SQL error -1031 at location BrInitOraCreate-2, SQL statement:
    'CONNECT / AT PROF_CONN IN SYSOPER MODE'
    ORA-01031: insufficient privileges
    BR0303E Determination of Oracle version failed
    =================================
    As per sap note 400421 i have carry out all the check and all are perfect.
    Also i have check below notes and every thing are fine
    Note 834917 - Oracle Database 10g: New database role SAPCONN
    Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role
    Note 700548 - FAQ: Oracle authorizations
    Also i have check the note which suggest to run the sapdba_role.sql script
    But still i am getting the same error.
    Also SAPSID services is running with user id sapserviceSID and i change it to SIDadm but no lock.
    Request you please help me in this regard.
    Sincerely
    Paresh

    As expected
    This is really a very small problem but very weird we suffered so many times. May be we should confirm the authorizations for SAPServiceSID and sidadm users on that windows host, sometimes we miss this part in Windows to check.
    Kernel folders should be proper accessible by both of the users. Also, please keep SAP instance service via SAPServiceSID itself.
    Just to reconfirm - you restarted SAP and restarted SAP/Oracle services as well, right ?
    Thanks

  • ORA-01031: insufficient privileges during 8i to 9i upgrade

    Hello,
    I am following the Oracle 9i upgrade checklist Doc ID: 159657.1 to upgrade from 8.1.7.3 to 9.2.0.4.
    In step 31, after setting the environment to new ORACLE_HOME, I am trying to start the 9.2.0.4 instance in migrate mode. This is the sequence of errors that I get.
    Any help is greatly appreciated.
    Thanks,
    Rao
    oracle>sqlplus /nolog
    SQL*Plus: Release 9.2.0.4.0 - Production on Mon Aug 25 09:55:29 2003
    Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
    SQL> connect / as sysdba;
    Connected to an idle instance.
    SQL> shutdown immediate
    ORA-24324: service handle not initialized
    ORA-24323: value not allowed
    ORA-01092: ORACLE instance terminated. Disconnection forced
    SQL> startup migrate
    ORA-01031: insufficient privileges
    SQL> quit
    Disconnected
    oracle>

    You dont have enough privilege cause you were disconnected from the previous command you enter :
    ORA-24324: service handle not initialized
    ORA-24323: value not allowed
    ORA-01092: ORACLE instance terminated. Disconnection forced <= you are no longer logged here
    Your problem is the ORA-24324, not a privilege problem.
    Fred

  • MCOD and DB13 (ORA-01031: insufficient privileges)

    Hello Oracle experts,
    I have a problem with a MCOD installation.
    Situation:
    I have an Oracle Real Application Cluster with two database instances (DE1_1 and DE1_2). In database 1 (DE1_1) there are running two SAP systems (DE1 and DE2).
    In database 2 (DE1_2) there are running also two SAP systems (QE1 and QE2).
    DE1: SAPSR3     (DE1_1 )
    DE2: SAPSR4     (DE1_1)
    QE1: SAPSR5     (DE1_2)
    QE2: SAPSR6     (DE1_2)
    DE1 has been the first installation. The next one´s have been DE2 (SAPSR4), QE1 (SAPSR5) and QE2 (SAPSR6).
    Complication:
    Transaction DB13 is making trouble in the systems DE2, QE1 and QE2.
    There is a pop-up containing this information:
    SQL Errorcode: 1.031
    SELECT beg, funct, sysid, obj, rc, ende, actid,  line FROM sap_sdbah
    WHERE beg BETWEEN  '20110416000000' AND '20110524235959' AND sysid =  'DE1'
    ORA-01031: insufficient privileges
    I can confirm this popup and reach the DBA Planning Calendar. In the message window there are two error messages:
    - An error occurred when processing system DE2
    - Function ORA_LOG_READ failed with return code = Other error
    Only in the first system (DE1) there are no problems when calling DB13!
    Solution:
    I already checked the following notes:
    Note 134592 - Importing the SAPDBA role (sapdba_role.sql)
    --> I executed the script from the note.
    Note 834917 - Oracle Database 10g: New database role SAPCONN
    --> I executed the script from the note.
    And checked this:
    SQL> select grantee, granted_role from dba_role_privs
    where granted_role in ('SAPDBA', 'SAPCONN');
    GRANTEE                        GRANTED_ROLE
    SYS                            SAPDBA
    OPS$SAPSERVICEDE2              SAPDBA
    OPS$SAPSERVICEQE1              SAPDBA
    OPS$QE1ADM                     SAPDBA
    SAPSR6                         SAPCONN
    OPS$ORADE1                     SAPDBA
    SAPSR5                         SAPCONN
    OPS$QE2ADM                     SAPDBA
    OPS$SAPSERVICEQE2              SAPDBA
    SYS                            SAPCONN
    OPS$DE1ADM                     SAPDBA
    GRANTEE                        GRANTED_ROLE
    SAPSR3                         SAPCONN
    OPS$SAPSERVICEDE1              SAPDBA
    SAPSR4                         SAPCONN
    SYSTEM                         SAPDBA
    OPS$DE2ADM                     SAPDBA
    16 rows selected.
    Is it correct that there is only ONE ORA<SID>?
    The rest is correct regarding the note.
    Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role
    Checked this statement:
    SQL> select grantee, granted_role, default_role from dba_role_privs
    where grantee = 'SAPSR6';
    GRANTEE                        GRANTED_ROLE                   DEF
    SAPSR6                         SAPCONN                        YES
    It´s correct regarding the note.
    Note 91216 - BRBACKUP/SAPDBA: ORA-01031 Insufficient privileges
    Checked it!
    Note 400241 - Problems with ops$ or sapr3 connect to Oracle
    SQL> SELECT OWNER, TABLE_OWNER, TABLE_NAME FROM DBA_SYNONYMS
    WHERE SYNONYM_NAME = 'SAPUSER';
    OWNER                          TABLE_OWNER
    TABLE_NAME
    OPS$SAPSERVICEDE1              OPS$DE1ADM
    SAPUSER
    OPS$SAPSERVICEDE2              OPS$DE2ADM
    SAPUSER
    OPS$SAPSERVICEQE1              OPS$QE1ADM
    SAPUSER
    OWNER                          TABLE_OWNER
    TABLE_NAME
    OPS$SAPSERVICEQE2              OPS$QE2ADM
    SAPUSER
    It´s correct regarding the note.
    Note 113747 - Permissions for DBA tools BR*Tools and SAPDBA
    Permissons for BR*Tools are adjusted regarding this note.
    It is still not working!!
    Any further suggestions? I don´t know exactly what to configure in a MCOD database. Maybe I forgot one thingu2026
    Thank you in advance and kind regards,
    Geraldine

    Well, it's up to you whether or not you consider that a problem.
    And it seems SAP doesn't.
    The solution for your ORA-01031 probably will be:
    In the schema of Oracle user SAPSR3 there are tables SDBAH and SDBAD. Grant full access to Oracle users SAPSR4/5/6.
    But afterwards you may encounter another error message.
    You have been warned.
    Not sure if this is documented anywhere.
    And as I wrote, I doubt that it is worth the effort...
    It always seemed SAP did not really like nor support MCOD installations. So by now we haven't any of them left.
    regards

  • ERRor  ORA-01031: insufficient privileges

    hi all,
    i am presently working on logical standby database
    but i am facing a problem from primary database
    " select * from V$ARCHIVE_DEST"
    LOG_ARCHIVE_DEST_1 valid
    LOG_ARCHIVE_DEST_2 ERROR ORA-01031: insufficient privileges
    at present database not synchronizing
    please help
    Vaibhav

    Vaibhav;
    Is the password file is missing at standby site? Or is the password different between primary/standby database?
    If yes I would correct by copying the password file from the primary to the standby and renaming to match your setup.
    OR
    Try this command :
    Alter database guard standby;Best Regards
    mseberg

  • ORA-01031: insufficient privileges - after upgrade from 2.1 to 3.0.1

    Hi I installed 10g with APEX 2.1 and started working on an app. I had the privs needed to do all DDL.
    I updated to 3.0.1 (not 3.1 because my work won't go to 3.1 yet)
    I started working on the app not problem with DML but I tried to create a function and found ORA-01031: insufficient privileges
    Did I miss running a script after the install? Is there a POST install?

    Here are the results from PL?SQL Developer:
    select user from dual;
    1     EDIUSER
    select * from user_role_privs;
    1     EDIUSER     CONNECT     NO     YES     NO
    2     EDIUSER     DBA     NO     YES     NO
    3     EDIUSER     RESOURCE     NO     YES     NO
    select * from user_sys_privs;
    1     EDIUSER     UNLIMITED TABLESPACE     NO
    doesn't the roles give me all I need?
    And as I said, in PL/SQL Developer I can do anything.
    Here are the results from the APEX SQL Worksheet:
    select user from dual;
    ANONYMOUS
    select * from user_role_privs;
    EDIUSER     CONNECT     NO     YES     NO
    EDIUSER     DBA     NO     YES     NO
    EDIUSER     RESOURCE     NO     YES     NO
    select * from user_sys_privs;
    EDIUSER     UNLIMITED TABLESPACE     NO

  • ORA-01031 (Insufficient Privileges) after moving server to new domain

    Hello SAP/Oracle experts,
    We recently performed a 'lift & shift' to move our SAP test system (QAS) from our HQ to our hosting partner's data centre. Although SAP works fine, we've lost the ability to run database operations through DB13. We now receive ORA-01031 - Insufficient Privileges errors whenever we try anything through DB13.
    Because moving the server involved changing the Windows domain to which it belonged, we created a trust relationship between old and new domains so that we didn't have to change the details of QASADM and SAPServiceQAS. We ran the usual oradbuser.sql and sapdba_role.sql scripts. We also removed and reassigned the ORA_QAS_DBA and ORA_QAS_OPER groups to the QASADM and SAPServiceQAS users. All of which seems to have made no difference and we still get ORA-01031 errors in DB13.
    Even stranger though is the fact that at the Oracle level, user sys is able to log in 'as sysdba', whilst user system cannot. e.g.
    sqlplus “sys/<password>@qas as sysdba” – Works.
    sqlplus “sys/<password> as sysdba” – Works.
    sqlplus “/ as sysdba” – Doesn’t work
    sqlplus “system/<password>@qas as sysdba” – Doesn’t work.
    sqlplus “system/<password> as sysdba” – Doesn’t work.
    This leads me to believe that the problem is not SAP-related (i.e. sapdba_role won't fix it!), but is more likely Oracle-related and perhaps down to the fact that ths system was built in one domain, but now resides in another. I guess the easiest thing to do would be to create QASADM and SAPServiceQAS accounts in the new domain and try that, but that's clutching at straws and doesn't explain why Oracle user sys works, whilst system doesn't.
    Has anyone moved servers between domains and experienced similar problems?
    Thanks in advance of any help,
    Arwel.

    is the recommended procedure when moving SAP Systems (or the server where they installed on) from one Domain to the next one (at least if the user accounts are in the same domain as the Server).
    You have following dependencies when installing in a domain:
    1. domain groups
    2. local groups containing domain groups and/or domain accounts
    3. Domain Accounts
    4. maybe domain groups are used in Access Control Lists of local Files / Directories
    5. User rights Assignment in registry
    6. as in Oracle Database internal users reflecting Operating System users.
    In Windows Security Objects (ACLs of Files, Directories) a Windows Account is referenced by it's SID which is unique (you can have a look at those strings in Upper Keys of the Registry HKEY_USERS). This means that a Domain User XYZ in Domain A has a different SID than Domain User XYZ in Domain B. The same applies to Windows Groups.
    As a result of this c:\documents and Settings\XYZ will not be for the use with the same name if you move the computer to a diferent domain.
    Windows will create something like c:\documents and Settings\XYZ.NEW_DOMAIN. As a result of this all envrionment variables of XYZ in the old domain are not visible in the new domain, because they are stored in the users registry which resides in c:\documents and Settings\XYZ\ntuser.dat in the old domain and c:\documents and Settings\XYZ.NEW_DOMAIN\ntuser.dat in the new domain.
    Too many things to do, to many possibilities you can make mistakes  - therefore --> homogenious system copy.
    regards
    Peter

  • Getting ORA-01031: insufficient privileges if try to connect in sqlplus

    Hi,
    I've tried to connect to my db which stands at host (Solaris), but getting
    ORA-01031: insufficient privileges.
    The client I've used is sqlplus.
    SQL> conn sys@REP as sysdba
    ERROR:
    ORA-01031: insufficient privileges
    At the same time I can successfully connect to the same db from the same PC with the same connection string at PL/SQL Developer.
    How it can be possible?

    Guys...
    I'm having the same problem.
    The platform is a Windows 2003 R2 64bit (SP2) with Oracle 11g.
    In the production server from the same client, the connection is usually ... however, to a server where I have the same instances retrieved from an RMAN backup, does not connect!
    In the Productoion Server:
    C:\>sqlplus sys@bmknfe as sysdba
    SQL*Plus: Release 10.2.0.1.0 - Production on Wed Aug 18 17:43:41 2010
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL>
    In the Recovered Server:
    C:\>sqlplus sys@bmknfe_rt as sysdba
    SQL*Plus: Release 10.2.0.1.0 - Production on Wed Aug 18 17:42:39 2010
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    Enter password:
    ERROR:
    ORA-01031: insufficient privileges
    I've tried recreating the password file, but is not resolving ...
    Can someone give me a light?

  • Weird Error - sometime getting ORA-01031: insufficient privileges

    Problem - Java process throwing java.sql.SQLException: ORA-01031: insufficient privileges for simple select statement select * from MYTABLE , table having only three rows
    Observation - While investigating. I did same select from sql developer using same credential, I get same ORA-01031: insufficient privileges error in sql developer too BUT ONLY if I create new connection. (Disconnect and connect again), If I fire same query again in same connection it runs fine.
    SELECT * FROM MYTABLE;
    there is no problem if I run query in small case (notice only select and from in small case), even if it is fresh connection there is no error.
    select * from MYTABLE;
    I am out of any clue what is going on. Any help?
    Java stack track -
    Caused by: java.sql.SQLException: ORA-01031: insufficient privileges
            at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:112)
            at oracle.jdbc.driver.T2CConnection.checkError(T2CConnection.java:676)
            at oracle.jdbc.driver.T2CConnection.checkError(T2CConnection.java:602)
            at oracle.jdbc.driver.T2CPreparedStatement.executeForDescribe(T2CPreparedStatement.java:571)
            at oracle.jdbc.driver.OracleStatement.executeMaybeDescribe(OracleStatement.java:1039)
            at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1134)
            at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:3339)
            at oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:3384)
            at org.apache.commons.dbcp.DelegatingPreparedStatement.executeQuery(DelegatingPreparedStatement.java:93)
            at org.springframework.jdbc.core.JdbcTemplate$1.doInPreparedStatement(JdbcTemplate.java:648)
            at org.springframework.jdbc.core.JdbcTemplate.execute(JdbcTemplate.java:591)
    Oracle SQL Developerer Error
    ORA-01031: insufficient privileges
    01031. 00000 -  "insufficient privileges"
    *Cause:    An attempt was made to change the current username or password
               without the appropriate privilege. This error also occurs if
               attempting to install a database without the necessary operating
               system privileges.
               When Trusted Oracle is configure in DBMS MAC, this error may occur
               if the user was granted the necessary privilege at a higher label
               than the current login.
    *Action:   Ask the database administrator to perform the operation or grant
               the required privileges.
               For Trusted Oracle users getting this error although granted the
               the appropriate privilege at a higher label, ask the database
               administrator to regrant the privilege at the appropriate label.

    Guys...
    I'm having the same problem.
    The platform is a Windows 2003 R2 64bit (SP2) with Oracle 11g.
    In the production server from the same client, the connection is usually ... however, to a server where I have the same instances retrieved from an RMAN backup, does not connect!
    In the Productoion Server:
    C:\>sqlplus sys@bmknfe as sysdba
    SQL*Plus: Release 10.2.0.1.0 - Production on Wed Aug 18 17:43:41 2010
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL>
    In the Recovered Server:
    C:\>sqlplus sys@bmknfe_rt as sysdba
    SQL*Plus: Release 10.2.0.1.0 - Production on Wed Aug 18 17:42:39 2010
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    Enter password:
    ERROR:
    ORA-01031: insufficient privileges
    I've tried recreating the password file, but is not resolving ...
    Can someone give me a light?

  • DB13 jobs errors (ORA-01031: insufficient privileges) after System Copy

    Dear SAP gurus,
    I performed an ECC60 System copy from Dev to a sandbox system (Linux-Oracle). When I try to access DB13 all jobs are cancelled:
    Example of "check and update optimizer statistics" job log:
    Job started
    Step 001 started (program RSDBAJOB, variant &0000000000001, user ID TGEPOMA1)
    Execute logical command BRCONNECT On host eccsbx01
    Parameters: -u / -jid STATS20110720050000 -c -f stats -t ALL
    BR0801I BRCONNECT 7.00 (46)
    BR0805I Start of BRCONNECT processing: cegkmpzk.sta 2011-07-27 05.00.32
    BR0484I BRCONNECT log file: /oracle/SBX/sapcheck/cegkmpzk.sta
    BR0280I BRCONNECT time stamp: 2011-07-27 05.00.36
    BR0301W SQL error -1031 at location brc_dblog_open-1, SQL statement:
    'INSERT INTO SAP_SDBAH (BEG, FUNCT, SYSID, OBJ, RC, ENDE, ACTID, LINE) VALUES ('20110727050032', 'sta', 'SBX', 'ALL', '9999', '
    ORA-01031: insufficient privileges
    BR0324W Insertion of database log header failed
    I read the SAP note 400241 (Problems with ops$ or sapr3 connect to Oracle) and performed the general checks such checking the SAPUSER owner,etc.
    If I executed the sapdba_role.sql script I get the following log errors on sapdba_role.log:
    old   1: grant ALL on &User..SDBAH to sapdba
    new   1: grant ALL on SAPR3.SDBAH to sapdba
    grant ALL on SAPR3.SDBAH to sapdba
    ERROR at line 1:
    ORA-00942: table or view does not exist
    old   1: grant ALL on &User..SDBAD to sapdba
    new   1: grant ALL on SAPR3.SDBAD to sapdba
    grant ALL on SAPR3.SDBAD to sapdba
    ERROR at line 1:
    ORA-00942: table or view does not exist
    old   1: grant ALL on &User..DBAML to sapdba
    new   1: grant ALL on SAPR3.DBAML to sapdba
    grant ALL on SAPR3.DBAML to sapdba
    Should I create those tables in order to allow ops$ user to access Oracle DB in order to execute the DB job from DB13?
    Please let me know if anybody can help me or has face a situation before?
    Thanks in advance, Marc

    Hi Markus,
    I dont think that it is an authorization issue becasue it has the same authorizations than Development:
    eccsbx01:/sapmnt/SBX/exe # ls -ltr br*
    -rwsr-srw- 1 orasbx dba    4121272 Jul 19 11:55 brarchive
    -rwsr-srw- 1 orasbx dba    4227280 Jul 19 11:55 brbackup
    -rwsrwxr-x 1 orasbx sapsys 5489731 Jul 19 11:55 brconnect
    -rwxr-xr-x 1 sbxadm sapsys 4537880 Jul 19 11:55 brrecover
    -rwxr-xr-x 1 sbxadm sapsys 1554379 Jul 19 11:55 brrestore
    -rwxr-xr-x 1 sbxadm sapsys 5617510 Jul 19 11:55 brspace
    -rwsrwxr-x 1 orasbx sapsys 2289337 Jul 19 11:55 brtools
    Regards, Marc

  • Error with fullonline_backup (ORA-01031: insufficient privileges)

    Hi experts,
    we are facing problem during sap fullonline + redolog backup. while wholeonline+redolog backup working fine.
    please see the detail.
    BR0280I BRBACKUP time stamp: 2011-12-22 16.06.40
    BR0063I 35 of 35 files processed - 117460.273 of 117460.273 MB done
    BR0204I Percentage done: 100.00%, estimated end time: 16:06
    BR0001I **************************************************
    BR0280I BRBACKUP time stamp: 2011-12-22 16.06.40
    BR0317I 'Alter tablespace SYSTEM end backup' successful
    BR0280I BRBACKUP time stamp: 2011-12-22 16.06.42
    BR0530I Cataloging backups of all database files...
    BR0278E Command output of 'SHELL=/bin/sh /oracle/R3P/102_64/bin/rman nocatalog':
    Recovery Manager: Release 10.2.0.4.0 - Production on Thu Dec 22 16:06:42 2011
    Copyright (c) 1982, 2007, Oracle.  All rights reserved.
    RMAN>
    RMAN> connect target *
    RMAN-00571: ===========================================================
    RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
    RMAN-00571: ===========================================================
    ORA-01031: insufficient privileges
    RMAN> **end-of-file**
    RMAN>
    host command complete
    RMAN> 2> 3> 4> 5> 6> 7> 8> 9> 10> 11> 12> 13> 14> 15> 16> 17> 18> 19> 20> 21> 22> 23> 24> 25> 26> 27> 28> 29> 30> 31> 32> 33> 34> 35> 36> 37>
    RMAN-00571: ===========================================================
    RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
    RMAN-00571: ===========================================================
    RMAN-03002: failure of catalog command at 12/22/2011 16:06:42
    RMAN-06171: not connected to target database
    RMAN>
    Recovery Manager complete.
    BR0280I BRBACKUP time stamp: 2011-12-22 16.06.42
    BR0279E Return code from 'SHELL=/bin/sh /oracle/R3P/102_64/bin/rman nocatalog': 1
    BR0536E RMAN call for database instance R3P failed
    BR0280I BRBACKUP time stamp: 2011-12-22 16.06.42
    BR0532E Cataloging backups of all database files failed
    BR0056I End of database backup: behmnbjo.fnt 2011-12-22 16.06.42
    BR0280I BRBACKUP time stamp: 2011-12-22 16.06.42
    BR0054I BRBACKUP terminated with errors
    Regards
    Imran Khan

    Hi,
    i dont think is due to authorization issue. There's a different between "FULL" and "WHOLE" database online backup.
    Full database backup : Will backup all the databasee files (Inclusing datafiles, online redolog files and the control files) and do the catalog. So that we can use this as the referance backup and we can do the incremental backup.
    Whole database backup : Will backup all the databasee files (Inclusing datafiles, online redolog files and the control files). We can't use this for the incremental backup.
    As you see from the log, full database online backup is calling RMAN. FYI, backup your system with "Whole" is equally good unless you want to to use incremental backup.
    Thanks,
    Nicholas Chang
    Edited by: Nicholas Chang on Dec 23, 2011 12:03 AM

Maybe you are looking for

  • Firefox 3.6.6 crashes every few minutes or freezes up even when i'm not doing anything

    For the last few days, firefox has been crashing or freezing up every few minutes. It seems to be independent of what websites i'm on. Firefox either just freezes up ("this program is not responding") or will crash entirely and i'll get the firefox c

  • Align ALV Output Display to fit window resolution using cl_gui_custom_conta

    hi, my ALV Display is not fitting to the window screen for different resolutions. big monitor the screen display is too small and small monitor its fitting. I want to have DYNAMIC screen fit using   cl_gui_custom_container... is it possible?? ags.

  • Rounded Corner Text Box in iWeb 2.0 - just like this site

    As you can see on this very apple site the corners of its main boxes are rounded. In iWeb you can't make your text box rounded unless you place your text in a rounded corner shaped box. However for formatting purposes the shaped box won't expand or c

  • Adobe form processing issue in portal

    Hi, We have one issue on user processing of adobe form in portal When user clicked on approve or reject button of HR position form its not completing. Its keep on processing till 3o minutes,i mean processing wheel not completing. What is reason for t

  • Adobe Reader does not open weblinks in document.

    We have several PDF brohures for our marketing material and all of them have weblinks added to the documents. When I click on these links in Adobe Reader, it does not respond and does not recognise it as a weblink. However, opening the same document