Oracle does not start automatically ORA-01031: insufficient privileges

Hi,
OS WS2008R2.
ORACLE 11gR2.
Oracle Instance does not start with oracle services but if i stop and restart the services it comes up clean.
Moreover if i change service ownership to Domain\Administrator it again works well.
Checked registery and all ok. No error in alert.log. Only clue found in Oradim.log.
ORADIM.LOG....
C:\Oracle\Ora11g\bin\oradim.exe -startup -sid ptdb -usrpwd * -log oradim.log -nocheck 0
Thu Nov 15 15:16:15 2012
ORA-01031: insufficient privileges
Please help
Thanks

1- startup type- Auto
2- Group to user- ORA_DBA
3 - you can check log on tab in the service properties and set the username and password who responsible about this services
As i already stated 3 works. but i want it to work under Local System and not under any user.
Thanks

Similar Messages

  • Oracle Database 10g Express Edition (ORA-01031: insufficient privileges)

    Hello,
    I am new to 10g Express. I am working on Windows XP and I have Oracle App Server and JDev install on my box. I just installed 10g Express. When I try to connect to the database but I get the following error msg:
    SQL> connect sys/admin as sysdba;
    ERROR: ORA-01031: insufficient privileges
    I am also not able to see the homepage either.
    Can some please help.
    Thanks
    etnot

    Are you saying you can only have one instance of an
    Oracle Database install if you are going to use
    Oracle XE?Yes.
    Oracle Database XE is free for usage with the following limitations:
    • Supports up to 4GB of user data (in addition to Oracle system data)
    • Single instance only of Oracle Database XE on any server
    • May be installed on a multiple CPU server, but only executes on one processor in any server
    • May be installed on a server with any amount of memory, but will only use up to 1GB RAM of available memory

  • Oracle does not start automatically on AIX

    Dear all,
    Oracle version is 10.2 on AIX
    This is the script as suggested by oracle.
    #! /bin/sh  -x
    # Change the value of ORACLE_HOME to specify the correct Oracle home
    # directory for your installation.
    ORACLE_HOME=/opt/oracle/product/10.2
    # Change the value of ORACLE to the login name of the
    # oracle owner at your site.
    ORACLE=oracle
    PATH=${PATH}:$ORACLE_HOME/bin
    HOST=`hostname`
    PLATFORM=`uname`
    export ORACLE_HOME PATH
    if [ ! "$2" = "ORA_DB" ] ; then
       if [ "$PLATFORM" = "AIX" ] ; then
          remsh $HOST -l $ORACLE -n "$0 $1 ORA_DB"
          exit
       else
          rsh $HOST -l $ORACLE  $0 $1 ORA_DB
          exit
       fi
    fi
    case $1 in
    'start')
            $ORACLE_HOME/bin/dbstart $ORACLE_HOME &
    'stop')
            $ORACLE_HOME/bin/dbshut $ORACLE_HOME &
            echo "usage: $0 {start|stop}"
            exit
    esac
    exitThe links were also created as suggested by oracle
    chgrp and chmod was done as suggested. Also Ihave added one line in /etc/hosts.equiv file
    server.servername.com root
    please help
    Its working. Sorry for the trouble. I did one mistake
    Message was edited by:
    user480060

    1- startup type- Auto
    2- Group to user- ORA_DBA
    3 - you can check log on tab in the service properties and set the username and password who responsible about this services
    As i already stated 3 works. but i want it to work under Local System and not under any user.
    Thanks

  • Oracle does not start automaticly after reboot

    I've installed O 9i on win2ksrv after installing DB2.
    Then I create a database and this db starts successfully.
    After reboot the database is shutdown and can only starts manually by sysdba.

    Hi,
    Have you checked the space of ORAARCH or SAPARCH folder/directory ? The problem may be "Archive destination full".  If its full then try to move some old Offline redo log file to other safe location as a backup and then try to restart the Oracle Instance again.
    Regards
    Bhavik G. Shroff

  • ORA-01031: insufficient privileges from auxiliary database while connecting

    i am getting this error ORA-01031: insufficient privileges from auxiliary database while connecting plz help.
    TNS-01106: Listener using listener name VINAR has already been started
    [oraclone@server VINTEST_server]$ tnsping VINAR
    TNS Ping Utility for Linux: Version 11.1.0.7.0 - Production on 17-JAN-2013 19:10:49
    Copyright (c) 1997, 2008, Oracle.  All rights reserved.
    Used parameter files:
    /d04/oraclone/db/tech_st/11.1.0/network/admin/VINTEST_server/sqlnet_ifile.ora
    Used TNSNAMES adapter to resolve the alias
    Attempting to contact (DESCRIPTION= (ADDRESS=(PROTOCOL=tcp)(HOST=server.csacons.com)(PORT=1571)) (CONNECT_DATA= (SERVICE_NAME=VINAR) (INSTANCE_NAME=VINAR)))
    OK (0 msec)
    [oraclone@server VINTEST_server]$ rman target sys/change_on_install@VINAR auxiliary /
    Recovery Manager: Release 11.1.0.7.0 - Production on Thu Jan 17 19:11:38 2013
    Copyright (c) 1982, 2007, Oracle.  All rights reserved.
    RMAN-00571: ===========================================================
    RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
    RMAN-00571: ===========================================================
    RMAN-00554: initialization of internal recovery manager package failed
    RMAN-04005: error from target database:
    ORA-01031: insufficient privileges
    [oraclone@server VINTEST_server]$ sqlplus sys/change_on_install@VINAR as sysdba
    SQL*Plus: Release 11.1.0.7.0 - Production on Thu Jan 17 19:31:52 2013
    Copyright (c) 1982, 2008, Oracle.  All rights reserved.
    ERROR:
    ORA-01031: insufficient privileges
    Enter user-name: sys@VINAR as sysdba
    Enter password:
    ERROR:
    ORA-01031: insufficient privileges
    Enter user-name: [oraclone@server VINTEST_server]$
    [oraclone@server VINTEST_server]$
    SQL> select * from v$pwfile_users;
    no rows selected
    SQL>
    listner.ora
    SID_LIST_VINTEST =
      (SID_LIST =
        (SID_DESC =
          (ORACLE_HOME= /d04/oraclone/db/tech_st/11.1.0)
          (SID_NAME = VINTEST)
          #(GLOBAL_DBNAME = VINAR)
          #(ORACLE_HOME= /d03/oravnr/db/tech_st/11.1.0)
          #(SID_NAME = VINAR)
          (SID_DESC =
          #(ORACLE_HOME= /d04/oraclone/db/tech_st/11.1.0)
          #(SID_NAME = VINTEST)
          (GLOBAL_DBNAME = VINAR)
          (ORACLE_HOME= /d03/oravnr/db/tech_st/11.1.0)
          (SID_NAME = VINAR)
    tnsnames.ora
    VINTEST=
            (DESCRIPTION=
                    (ADDRESS=(PROTOCOL=tcp)(HOST=server.csacons.com)(PORT=1591))
                (CONNECT_DATA=
                    (SERVICE_NAME=VINTEST)
                    (INSTANCE_NAME=VINTEST)
    VINAR=
            (DESCRIPTION=
                    (ADDRESS=(PROTOCOL=tcp)(HOST=server.csacons.com)(PORT=1571))
                (CONNECT_DATA=
                    (SERVICE_NAME=VINAR)
                    (INSTANCE_NAME=VINAR)
    kind regards
    plz help

    Pl do not post duplicates - ORA-01031: insufficient privileges from auxiliary database while connecting

  • ORA-01031: insufficient privileges when using RESOLVECONFLICT

    Hello,
    I use RESOLVECONFLICT component for a new filter.
    I have an insufficient privileges error :
    2015-03-18 11:26:49  WARNING OGG-01919  Oracle GoldenGate Delivery for Oracle, pivot01.prm:  Missing RESOLVECONFLICT for SQL error 1.
    2015-03-18 11:26:49  WARNING OGG-00869  Oracle GoldenGate Delivery for Oracle, pivot01.prm:  OCI Error ORA-01031: insufficient privileges (status = 1031), SQL <SELECT ROWNUM FROM "OGG_STGPIV"."PSTREENODE"  WHERE "SETID" = :b0 AND "SETCNTRLVALUE" = :b1 AND "TREE_NAME" = :b2 AND "EFFDT" = :b3 AND "TREE_NODE_NUM" = :b4 AND "TREE_NODE" = :b5 AND "TREE_BRANCH" = :b6 FOR UPDATE >.
    2015-03-18 11:26:49  WARNING OGG-01004  Oracle GoldenGate Delivery for Oracle, pivot01.prm:  Aborted grouped transaction on 'OGG_STGPIV.PSTREENODE', Database error 1 (OCI Error ORA-00001: unique constraint (OGG_STGPIV.PSTREENODE_INDX01) violated (status = 1), SQL <INSERT INTO "OGG_STGPIV"."PSTREENODE" ("SETID","SETCNTRLVALUE","TREE_NAME","EFFDT","TREE_NODE_NUM","TREE_NODE","TREE_BRANCH","TREE_NODE_NUM_END","TREE_LEVEL_NUM","TREE_NODE_TYPE","PARENT_NODE_NUM","PARENT_NODE_NAME","OLD_TREE_NODE_NUM","NODECOL_IMAGE","NODEEXP_IMAGE","DML_TYPE","DML_DATE","DML_SCN") VALUES (:a0,:a1,:a2,:a3,:a4,:a5,:a6,:a7,:a8,:a9,:a10,:a11,:a12,:a13,:a14,:a15,:a16,:a17)>).
    2015-03-18 11:26:49  WARNING OGG-01003  Oracle GoldenGate Delivery for Oracle, pivot01.prm:  Repositioning to rba 4862 in seqno 19.
    2015-03-18 11:26:49  WARNING OGG-01154  Oracle GoldenGate Delivery for Oracle, pivot01.prm:  SQL error 1 mapping PIVOTMAT2.PSTREENODE to OGG_STGPIV.PSTREENODE OCI Error ORA-00001: unique constraint (OGG_STGPIV.PSTREENODE_INDX01) violated (status = 1), SQL <INSERT INTO "OGG_STGPIV"."PSTREENODE" ("SETID","SETCNTRLVALUE","TREE_NAME","EFFDT","TREE_NODE_NUM","TREE_NODE","TREE_BRANCH","TREE_NODE_NUM_END","TREE_LEVEL_NUM","TREE_NODE_TYPE","PARENT_NODE_NUM","PARENT_NODE_NAME","OLD_TREE_NODE_NUM","NODECOL_IMAGE","NODEEXP_IMAGE","DML_TYPE","DML_DATE","DML_SCN") VALUES (:a0,:a1,:a2,:a3,:a4,:a5,:a6,:a7,:a8,:a9,:a10,:a11,:a12,:a13,:a14,:a15,:a16,:a17)>.
    privilege granted to my user :
    grant EXECUTE ANY RULE SET to "GGADM" WITH ADMIN OPTION;
    grant SELECT ANY DICTIONARY to "GGADM" ;
    grant UPDATE ANY TABLE to "GGADM" ;
    grant INSERT ANY TABLE to "GGADM" ;
    grant LOCK ANY TABLE to "GGADM" ;
    grant CREATE TABLE to "GGADM" ;
    grant CREATE RULE to "GGADM" WITH ADMIN OPTION;
    grant CREATE RULE SET to "GGADM" WITH ADMIN OPTION;
    grant DELETE ANY TABLE to "GGADM" ;
    grant UNLIMITED TABLESPACE to "GGADM" ;
    grant ALTER SESSION to "GGADM" ;
    grant CREATE EVALUATION CONTEXT to "GGADM" WITH ADMIN OPTION;
    grant DEQUEUE ANY QUEUE to "GGADM" WITH ADMIN OPTION;
    grant CREATE JOB to "GGADM" ;
    grant SELECT ANY TRANSACTION to "GGADM" ;
    grant CREATE SESSION to "GGADM" ;
    Any idea?

    Hello,
    Try to grant  SELECT ANY TABLE  to GGADM;
    Regards
    Arturo

  • Getting ORA-01031: Insufficient privileges when connecting as sys as sysdba

    Hi There,
    I am running Linux AS version 4, oracle 102.0.1, and logginging as oracle user which belongs to dba group. I got error "ORA-01031: Insufficient privileges" when trying to connect as sys user to bring up database. I wondered what is causing the error. Here is an example
    oracle-dev>sqlplus /nolog
    SQL>conn as sys/oracle@dev as sysdba
    ERROR:
    ORA-01031: Insufficient privileges
    Any suggestions would be greatly appreciated. Thanks again.
    Rich,

    Did you create a password file ?
    http://download-uk.oracle.com/docs/cd/B19306_01/server.102/b15658/admin_ora.htm#sthref142
    Message was edited by:
    Paul M.
    BTW, the syntax is
    SQL>conn sys/oracle@dev as sysdba

  • Not able to Start the oracle db error "ORA-01031: insufficient privileges"

    Hi experts,
    I have oracle 11g setup on so solaris. i changed the db_cache_size
    & processes values and stopped the DB services after that i am not able to start the oracle DB. Listener is running.
    when i start the db server its giving the below error(startup.log)
    ./dbstart: Starting up database "orcl"
    Mon Sep 27 04:31:08 MDT 2010
    SQL*Plus: Release 11.1.0.7.0 - Production on Mon Sep 27 04:31:08 2010
    Copyright (c) 1982, 2008, Oracle. All rights reserved.
    SQL> ERROR:
    ORA-01031: insufficient privileges
    SQL> ORA-01031: insufficient privileges
    SQL>
    ./dbstart: Database instance "orcl" warm started.
    Please help me to ressolve this issue.
    Thanks
    Krishna

    yes, password file is there in /etc/passwd
    here are the contents:
    root:x:0:0:Super-User:/:/sbin/sh
    lroot:x:0:0:Super-User:/:/sbin/sh
    daemon:x:1:1::/:
    bin:x:2:2::/usr/bin:/bin/false
    sys:x:3:3::/:
    adm:x:4:4:Admin:/var/adm:/bin/false
    lp:x:71:8:Line Printer Admin:/usr/spool/lp:/bin/false
    uucp:x:5:5:uucp Admin:/usr/lib/uucp:/bin/false
    nuucp:x:9:9:uucp Admin:/var/spool/uucppublic:/usr/lib/uucp/uucico
    listen:x:37:4:Network Admin:/usr/net/nls:/bin/false
    nobody:x:60001:60001:Nobody:/:/bin/false
    noaccess:x:60002:60002:No Access User:/:/bin/false
    nobody4:x:65534:65534:SunOS 4.x Nobody:/:/bin/false
    itunix:x:50000:14:IT Unix Account:/export/home/itunix:/bin/csh
    hharika:x:765:38:Harpal Harika:/export/home/hharika:/bin/csh
    prsingh:x:795:38:Pradeep Singh:/export/home/prsingh:/bin/csh
    mmir:x:1229:21:Mir Monis Ali:/export/home/mmir:/bin/csh
    bogunnai:x:1207:21:Bose Ogunnaike:/export/home/bogunnai:/bin/ksh
    mpokala:x:2117:21:Mahesh Pokala:/export/home/mpokala:/bin/ksh
    apopov:x:2385:38:Anton Popov:/export/home/apopov:/bin/csh
    kkeith:x:2629:227:Kevin Keith:/home/kkeith:/usr/bin/ksh
    sshd:x:22:22:SSH Privsep:/var/empty:/bin/false
    patrol:x:2784:10:Patrol User:/opt/bmc:/usr/bin/ksh
    smmsp:x:25:25:Sendmail Submission user:/none:/bin/false
    ldap:x:50001:1002::/export/home/ldap:/bin/sh
    perfuser:x:884:268::/export/home/perfuser:/bin/csh
    webservd:x:80:80::/home/webservd:/bin/pfsh
    oracle:x:156:40:Oracle Software Owner:/export/home/oracle:/bin/bash
    perfuser_idc:x:64383:1::/home/perfuser_idc:/bin/sh
    idc_perf:x:64384:292::/home/idc_perf:/bin/sh

  • ORA-01031: insufficient privileges and shared memory realm does not exist

    Hi all,
    I came to a dead end to start oracle 10.2 database. I have searched on google and this forum, none of these solutions work for me. PS, I have installed 11g on my machine too.
    I have set up ORACLE_SID,ORACLE_HOME to 10.2 database based on the tnsnames.ora.
    follow is error message:
    sqlplus sys as sysdba
    SQL*Plus: Release 10.2.0.1.0 - Production on Wed Apr 3 02:09:54 2013
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    Enter password:
    ERROR:
    ORA-01031: insufficient privileges
    sqlplus /nolog
    SQL*Plus: Release 10.2.0.1.0 - Production on Wed Apr 3 02:10:55 2013
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    SQL> conn / as sysdba
    ERROR:
    ORA-01031: insufficient privileges
    SQL> conn scott/tiger
    ERROR:
    ORA-01034: ORACLE not available
    ORA-27101: shared memory realm does not exist
    Linux-x86_64 Error: 2: No such file or directory
    First I thought the instance has been start yet, but since I can't login with sysdba. I don't know what other options.
    For 10.2, the tnsnames.ora
    ORA102 =
    +(DESCRIPTION =+
    +(ADDRESS = (PROTOCOL = TCP)(HOST =XXX)(PORT = 1523))+
    +(CONNECT_DATA =+
    +(SERVER = DEDICATED)+
    +(SERVICE_NAME = ora102)+
    +)+
    +)+
    LISTENER_ORA102 =
    +(ADDRESS = (PROTOCOL = TCP)(HOST =XXX)(PORT = 1523))+
    EXTPROC_CONNECTION_DATA =
    +(DESCRIPTION =+
    +(ADDRESS_LIST =+
    +(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC2))+
    +)+
    +(CONNECT_DATA =+
    +(SID = PLSExtProc)+
    +(PRESENTATION = RO)+
    +)+
    +)+
    listener.ora:
    SID_LIST_LISTENER =
    (SID_LIST =
    (SID_DESC =
    (SID_NAME = PLSExtProc)
    (ORACLE_HOME = /data/oracle/ora102)
    (PROGRAM = extproc)
    LISTENER =
    (DESCRIPTION_LIST =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC2))
    (ADDRESS = (PROTOCOL = TCP)(HOST =XXXXX)(PORT = 1523))
    EXTPROC_CONNECTION_DATA =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
    (CONNECT_DATA =
    (SID = PLSExtProc)
    (PRESENTATION = RO)
    )

    try do this steps on server side:
    1) sqlplus sys as sysdba
    2) select open_mode from v$database;
    show result 2 step

  • Oracle service, Listener and http server does not start automatically

    Hello,
    I have Oracle 9i release 2 installed on Unix HP box if system restart in case of power failure the Oracle service, Listener and http server does not start automatically, is there any ready reference available to check what's wrong is happening(I don't have knowledge of Unix).
    Thanks, Khawar.

    Hi Rajesh,
    Thanks for reply, I will check this link and will be back if facing problem.
    Regards, Khawar.

  • ORA-01031: insufficient privileges in PL/SQL but not in SQL

    I have problem with following situation.
    I switched current schema to another one "ban", and selected 4 rows from "ed"
    alter session set current_schema=ban;
    SELECT * FROM ed.PS WHERE ROWNUM < 5;
    the output is OK, and I get 4 rows like
    ID_S ID_Z
    1000152 1
    1000153 1
    1000154 1
    1000155 1
    but following procedure is compiled with warning
    create or replace
    procedure proc1
    as
    rowcnt int;
    begin
    select count(*) into rowcnt from ed.PS where rownum < 5;
    end;
    "Create procedure, executed in 0.031 sec."
    5,29,PL/SQL: ORA-01031: insufficient privileges
    5,2,PL/SQL: SQL Statement ignored
    ,,Total execution time 0.047 sec.
    Could you help me why SELECT does work in SQL but not in PL/SQL procedure?
    Thanks.
    Message was edited by:
    MattSk

    Privs granted via a role are only valid from SQL - and not from/within stored PL/SQL code.
    Quoting Tom's (from http://asktom.oracle.com) response to this:I did address this role thing in my book Expert one on one Oracle:
    <quote>
    What happens when we compile a Definer rights procedure
    When we compile the procedure into the database, a couple of things happen with regards to
    privileges.  We will list them here briefly and then go into more detail:
    q    All of the objects the procedure statically accesses (anything not accessed via dynamic SQL)
    are verified for existence. Names are resolved via the standard scoping rules as they apply to the
    definer of the procedure.
    q    All of the objects it accesses are verified to ensure that the required access mode will be
    available. That is, if an attempt to UPDATE T is made - Oracle will verify the definer or PUBLIC
    has the ability to UPDATE T without use of any ROLES.
    q    A dependency between this procedure and the referenced objects is setup and maintained. If
    this procedure SELECTS FROM T, then a dependency between T and this procedure is recorded
    If, for example, I have a procedure P that attempted to 'SELECT * FROM T', the compiler will first
    resolve T into a fully qualified referenced.  T is an ambiguous name in the database - there may be
    many T's to choose from. Oracle will follow its scoping rules to figure out what T really is, any
    synonyms will be resolved to their base objects and the schema name will be associated with the
    object as well. It does this name resolution using the rules for the currently logged in user (the
    definer). That is, it will look for an object owned by this user called T and use that first (this
    includes private synonyms), then it will look at public synonyms and try to find T and so on.
    Once it determines exactly what T refers to - Oracle will determine if the mode in which we are
    attempting to access T is permitted.   In this case, if we as the definer of the procedure either
    owns the object T or has been granted SELECT on T directly or PUBLIC was granted SELECT, the
    procedure will compile.  If we do not have access to an object called T by a direct grant - the
    procedure P will fail compilation.  So, when the object (the stored procedure that references T) is
    compiled into the database, Oracle will do these checks - and if they "pass", Oracle will compile
    the procedure, store the binary code for the procedure and set up a dependency between this
    procedure and this object T.  This dependency is used to invalidate the procedure later - in the
    event something happens to T that necessitates the stored procedures recompilation.  For example,
    if at a later date - we REVOKE SELECT ON T from the owner of this stored procedure - Oracle will
    mark all stored procedures this user has that are dependent on T, that refer to T, as INVALID. If
    we ALTER T ADD  some column, Oracle can invalidate all of the dependent procedures. This will cause
    them to be recompiled automatically upon their next execution.
    What is interesting to note is not only what is stored but what is not stored when we compile the
    object. Oracle does not store the exact privilege that was used to get access to T. We only know
    that procedure P is dependent on T. We do not know if the reason we were allowed to see T was due
    to:
    q    A grant given to the definer of the procedure (grant select on T to user)
    q    A grant to public on T (grant select on T to public)
    q    The user having the SELECT ANY TABLE privilege
    The reason it is interesting to note what is not stored is that a REVOKE of any of the above will
    cause the procedure P to become invalid. If all three privileges were in place when the procedure
    was compiled, a revoke of ANY of them will invalidate the procedure - forcing it to be recompiled
    before it is executed again. Since all three privileges were in place when we created the procedure
    - it will compile successfully (until we revoke all three that is). This recompilation will happen
    automatically the next time that the procedure is executed.
    Now that the procedure is compiled into the database and the dependencies are all setup, we can
    execute the procedure and be assured that it knows what T is and that T is accessible. If something
    happens to either the table T or to the set of base privileges available to the definer of this
    procedure that might affect our ability to access T -- our procedure will become invalid and will
    need to be recompiled.
    This leads into why ROLES are not enabled during the compilation and execution of a stored
    procedure in Definer rights mode. Oracle is not storing exactly WHY you are allowed to access T -
    only that you are. Any change to your privileges that might cause access to T to go away will cause
    the procedure to become invalid and necessitate its recompilation. Without roles - that means only
    'REVOKE SELECT ANY TABLE' or 'REVOKE SELECT ON T' from the Definer account or from PUBLIC. With
    roles - it greatly expands the number of times we would invalidate this procedure. If some role
    that was granted to some role that was granted to this user was modified, this procedure might go
    invalid, even if we did not rely on that privilege from that role. ROLES are designed to be very
    fluid when compared to GRANTS given to users as far as privilege sets go. For a minute, let's say
    that roles did give us privileges in stored objects. Now, most any time anything was revoked from
    ANY ROLE we had, or any role any role we have has (and so on -- roles can and are granted to roles)
    -- many of our objects would become invalid. Think about that, REVOKE some privilege from a ROLE
    and suddenly your entire database must be recompiled! Consider the impact of revoking some system
    privilege from a ROLE, it would be like doing that to PUBLIC is now, don't do it, just think about
    it (if you do revoke some powerful system privilege from PUBLIC, do it on a test database). If
    PUBLIC had been granted SELECT ANY TABLE, revoking that privilege would cause virtually every
    procedure in the database to go invalid. If procedures relied on roles, virtually every procedure
    in the database would constantly become invalid due to small changes in permissions. Since one of
    the major benefits of procedures is the 'compile once, run many' model - this would be disastrous
    for performance.
    Also consider that roles may be
    q    Non-default: If I have a non-default role and I enable it and I compile a procedure that
    relies on those privileges, when I log out I no longer have that role -- should my procedure become
    invalid -- why? Why not? I could easily argue both sides.
    q    Password Protected: if someone changes the password on a ROLE, should everything that might
    need that role be recompiled?  I might be granted that role but not knowing the new password - I
    can no longer enable it. Should the privileges still be available?  Why or Why not?  Again, arguing
    either side of this is easy. There are cases for and against each.
    The bottom line with respect to roles in procedures with Definer rights are:
    q    You have thousands or tens of thousands of end users. They don't create stored objects (they
    should not). We need roles to manage these people. Roles are designed for these people (end users).
    q    You have far fewer application schema's (things that hold stored objects). For these we want
    to be explicit as to exactly what privileges we need and why. In security terms this is called the
    concept of 'least privileges', you want to specifically say what privilege you need and why you
    need it. If you inherit lots of privileges from roles you cannot do that effectively. We can manage
    to be explicit since the number of development schemas is SMALL (but the number of end users is
    large)...
    q    Having the direct relationship between the definer and the procedure makes for a much more
    efficient database. We recompile objects only when we need to, not when we might need to. It is a
    large efficiency enhancement.
    </quote>

  • Ora-01031 insufficient privileges in oracle

    Hi All,
    I have a case where in i have upgraded my oracle 10.2.0.2 to 10.2.0.4 in solaris env.
    After upgrade i am able to start and use the system but when i schedule a job in DB13 for ex update statis. it is giving an error
    ora-01031 insufficient privileges in oracle.
    Please let me know how to go about it, as i am doing an EHP4 upgrade on same system.
    Thanks & Regards,
    Balaji.S

    Balaji,
    Check SAP Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role
    SAP note 134592 sapdba_role.sql
    Also see below threads. It may help you.
    ORA-01031: insufficient privileges
    ORA-01031: insufficient privileges
    Brconnect  Error
    Thanks,
    Sushil

  • My database does not start automatically

    i am using windows 2000 server and oracle 9.0.1, my database does not start automatically when i am booting the system.
    in regedit autostart is there, my service is getting started automatically and i used startmode auto in my oradim command but still i have to manually log in to start the database, PLS help!!!
    another issue is that i want to startup/shutdown the database using a user other than sysdba, pls tell which permission shud i grant as dba, connect, resource permissions are not doing the required job

    spfile concept is introduced from Oracle 9i. You can call it system parameter file. Benefits of having spfile concept is that what ever changes u make to system through commands
    alter system set ??? = ????
    get automatically saved in the spfile???.ora which is managed by Oracle.
    Main idea behind that as thought by Oracle is that previously u needed to change that parameter in init.ora file then start the database again after shutdown. Now u are doing everything online. spfile???.ora takes priority in the new Oracle concept.
    If u delete spfile???.ora file, then it needs some specific init.ora which need to told to Oracle which can be through command like
    startup pfile='complete patah .............'
    Bansal

  • ORA-01031: insufficient privileges in oracle 10.2 in windows 2008r2

    Dear All,
    We have install SAP ecc6 EHP4 on oracle 10.2.0.5 on windows 2008R2
    whenever we schedule any activity in db13 we are getting below error .
    =================================
    Job started
    Step 001 started (program RSDBAJOB, variant &0000000000059, user ID PARESH)
    Execute logical command BRBACKUP On host IRDAECCDEV
    Parameters:-u / -jid FLL__20110922104226 -c force -t online -m full -p initieq_online.sap
    BR0051I BRBACKUP 7.20 (3)
    BR0055I Start of database backup: begvgwgh.fnf 2011-09-22 10.42.27
    BR0484I BRBACKUP log file: K:\oracle\IEQ\sapbackup\begvgwgh.fnf
    BR0280I BRBACKUP time stamp: 2011-09-22 10.42.28
    BR0301E SQL error -1031 at location BrInitOraCreate-2, SQL statement:
    'CONNECT / AT PROF_CONN IN SYSOPER MODE'
    ORA-01031: insufficient privileges
    BR0303E Determination of Oracle version failed
    =================================
    As per sap note 400421 i have carry out all the check and all are perfect.
    Also i have check below notes and every thing are fine
    Note 834917 - Oracle Database 10g: New database role SAPCONN
    Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role
    Note 700548 - FAQ: Oracle authorizations
    Also i have check the note which suggest to run the sapdba_role.sql script
    But still i am getting the same error.
    Also SAPSID services is running with user id sapserviceSID and i change it to SIDadm but no lock.
    Request you please help me in this regard.
    Sincerely
    Paresh

    As expected
    This is really a very small problem but very weird we suffered so many times. May be we should confirm the authorizations for SAPServiceSID and sidadm users on that windows host, sometimes we miss this part in Windows to check.
    Kernel folders should be proper accessible by both of the users. Also, please keep SAP instance service via SAPServiceSID itself.
    Just to reconfirm - you restarted SAP and restarted SAP/Oracle services as well, right ?
    Thanks

  • ORA-01031: insufficient privileges getting After upg. oracle from 8i to 9i

    Hi,
    Microsoft Windows [Version 5.2.3790]
    (C) Copyright 1985-2003 Microsoft Corp.
    C:\Documents and Settings\s47adm>sqlplus "/as sysdba"
    SQL*Plus: Release 9.2.0.7.0 - Production on Thu Apr 9 19:20:10 2009
    Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.
    ERROR:
    ORA-01031: insufficient privileges
    Enter user-name: system
    Enter password:
    ERROR:
    ORA-01034: ORACLE not available
    ORA-27101: shared memory realm does not exist
    Enter user-name:
    *The above happened after successfully upgraded oracle from 8i to 9i.  After upgrade assistant successfully completed then its giving above error. Please help ASAP.

    Rohit,
    Thanks for your reply.
    Its solved.....I just changed NTS in place of NONE in the below line of sqlnet.ora file.
    SQLNET.AUTHENTICATION_SERVICES= (NTS)
    With Regards,
    Krishna.

Maybe you are looking for

  • Copy and paste file path into bridge

    I use bridge a lot! One of the most annoying things about bridge is that I can't paste a file path into bridge to browse to that file, on a network server, for example. I work at a graphics company, all our files are stored on servers with hundreds o

  • 'empty slideshow' error message

    Hi all, Sorry to repeat this question, but I'm desperate - the movie I've made is due to be screened in two days and I can't burn it. When I click the Burn button, I get this message: The following warnings and errors were found during the validation

  • TSQL Retrieve from linked Oracle server

    We're porting an Oracle system to SQL server and it's not going well... Our system is a data warehouse that extracts data from an Oracle operational system. In the Oracle version we use database links to access Oracle. On SQL Server we've created a l

  • Adobe -- Turn off Missing Frames warning!

    If you generate frames one at time (i.e. 3d rendering) -- you might have missing frames in your sequences used in After Effects. Beware because CS6 makes this a massive headache. If someone knows a workaround besides a huge time-waster that is creati

  • Error - Need Help!!! csidentity error domain error 11

    What I can Do? I cant to log in my accaunt at general settigs in Users and groups Mac Mini with Lion 10.7.5