Suse lunix root folders permission changed

[Former Member]

Dear SDN,

My server (Quality) on Suse Linux 10 and Mistakenly some / folders permissions got changed from root to rq1adm list is given below.

Now the server is running and sap also running but some service like ftp not running and also not able to login using putty and gives the permission errors.

SAP is also working but some functionality like DB13 (update statistics ; BDcheck ) not running.

Kindly suggest is any script available in suse linux using that I can changed the default permissions to system level folders or suggest any better solution.

If i am restart the server what happen at this movement. ?

drwxr-xr-x 2 orarq1 root 48 May 3 2007 mnt

drwxr-xr-x 2 orarq1 root 48 Sep 19 21:20 srv

drwxr-xr-x 4 root root 80 Sep 19 21:20 stand

drwxr-xr-x 2 orarq1 root 2888 Sep 19 21:28 bin

drwxr-xr-x 5 root root 4224 Sep 19 21:28 lib64

drwxr-xr-x 10 orarq1 root 3856 Sep 19 21:28 lib

-rw------- 1 root root 1024 Sep 19 21:43 .rnd

drwxr-xr-x 2 root root 216 Sep 19 21:47 ARtmp

drwxr-xr-x 4 root root 1024 Sep 19 21:53 boot

drwxr-xr-x 3 root root 72 Sep 19 22:20 sapmnt

drwxr-xr-x 2 root root 48 Sep 22 18:31 media

drwxr-xr-x 19 root root 504 Sep 23 17:25 usr

drwxr-xr-x 7 root root 152 Sep 24 21:50 home

drwxr-xr-x 3 root root 9032 Sep 25 11:31 sbin

drwxr-xr-x 8 orarq1 dba 184 Sep 25 12:59 oracle

drwxr-xr-x 11 orarq1 root 264 Sep 25 21:54 opt

drwxr-xr-x 8 orarq1 root 192 Sep 26 18:35 nsr

drwxr-xr-x 18 orarq1 root 440 Oct 1 14:55 var

-rw-rr 1 root root 44184 Nov 3 21:30 pass.txt

drwxrwxrwx 14 root root 640 Nov 11 18:04 sapcd

dr-xr-xr-x 172 root root 0 Nov 22 21:52 proc

drwxr-xr-x 11 orarq1 root 0 Nov 22 21:52 sys

drwxr-xr-x 79 orarq1 root 6960 Dec 19 11:03 etc

drwx------ 27 root root 1304 Dec 19 15:32 root

drwxr-xr-x 13 orarq1 root 7260 Dec 22 16:15 dev

drwxrwxrwt 43 orarq1 root 9872 Dec 24 11:00 tmp

cd bin

-rwxr-xr-x 1 orarq1 root 52936 Jun 16 2006 ed

-rwxr-xr-x 1 orarq1 root 451 Jun 16 2006 unicode_stop

-rwxr-xr-x 1 orarq1 root 3133 Jun 16 2006 unicode_start

-rwxr-xr-x 1 orarq1 root 9960 Jun 16 2006 showkey

-rwxr-xr-x 1 orarq1 root 12256 Jun 16 2006 showconsolefont

-rwxr-xr-x 1 orarq1 root 7144 Jun 16 2006 setmetamode

-rwxr-xr-x 1 orarq1 root 8720 Jun 16 2006 setleds

-rwxr-xr-x 1 orarq1 root 7512 Jun 16 2006 setkeycodes

-rwxr-xr-x 1 orarq1 root 32624 Jun 16 2006 setfont

-rwxr-xr-x 1 orarq1 root 15432 Jun 16 2006 psfxtable

-rwxr-xr-x 1 orarq1 root 19848 Jun 16 2006 mapscrn

-rwxr-xr-x 1 orarq1 root 19856 Jun 16 2006 loadunimap

-rwxr-xr-x 1 orarq1 root 8344 Jun 16 2006 kbdrate

-rwxr-xr-x 1 orarq1 root 7744 Jun 16 2006 kbd_mode

-rwxr-xr-x 1 orarq1 root 7752 Jun 16 2006 getkeycodes

-rwxr-xr-x 1 orarq1 root 7064 Jun 16 2006 fgconsole

-rwxr-xr-x 1 orarq1 root 72896 Jun 16 2006 dumpkeys

-rwxr-xr-x 1 orarq1 root 7440 Jun 16 2006 deallocvt

-rwxr-xr-x 1 orarq1 root 7088 Jun 16 2006 chvt

-rwxr-xr-x 1 orarq1 root 7032 Jun 16 2006 testutf8

-rwxr-xr-x 1 orarq1 root 11784 Jun 16 2006 openvt

-rwxr-xr-x 1 orarq1 root 97904 Jun 16 2006 loadkeys

-rwxr-xr-x 1 orarq1 root 675736 Jun 16 2006 ash.static

-rwxr-xr-x 1 orarq1 root 136144 Jun 16 2006 ash

-r-xr-xr-x 2 orarq1 root 8296 Jun 16 2006 ypdomainname

-r-xr-xr-x 2 orarq1 root 8296 Jun 16 2006 nisdomainname

-rwxr-xr-x 1 orarq1 audio 24384 Jun 16 2006 eject

-r-xr-xr-x 1 orarq1 root 10048 Jun 16 2006 mktemp

-rwxr-xr-x 1 orarq1 root 24480 Jun 16 2006 fuser

-rwxr-xr-x 1 orarq1 root 685040 Jun 16 2006 sash

-rwxr-xr-x 1 orarq1 root 584520 Jun 16 2006 zsh

-rwxr-xr-x 1 orarq1 root 33824 Jun 16 2006 fillup

-rwxr-xr-x 1 orarq1 root 266408 Jun 16 2006 gawk

-rwxr-xr-x 3 orarq1 root 61144 Sep 13 2006 zcat

-rwxr-xr-x 3 orarq1 root 61144 Sep 13 2006 gzip

-rwxr-xr-x 3 orarq1 root 61144 Sep 13 2006 gunzip

-rwxr-xr-x 1 orarq1 root 339 May 3 2007 ipg

-rwxr-xr-x 1 orarq1 root 35048 May 3 2007 ping6

-rwxr-xr-x 1 orarq1 root 38152 May 3 2007 ping

-rwxr-xr-x 1 orarq1 root 51640 May 3 2007 sed

-rwxr-xr-x 1 orarq1 root 574632 May 3 2007 bash

-rwxr-xr-x 1 orarq1 root 37880 May 3 2007 su

-rwxr-xr-x 1 orarq1 root 41800 May 3 2007 rm

-rwxr-xr-x 1 orarq1 root 71656 May 3 2007 mv

-rwxr-xr-x 1 orarq1 root 87728 May 3 2007 ls

-rwxr-xr-x 1 orarq1 root 29640 May 3 2007 ln

-rwxr-xr-x 1 orarq1 root 38176 May 3 2007 df

-rwxr-xr-x 1 orarq1 root 42312 May 3 2007 dd

-rwxr-xr-x 1 orarq1 root 65048 May 3 2007 cp

-rwxr-xr-x 1 orarq1 root 22752 May 3 2007 cat

-rwxr-xr-x 1 orarq1 root 20368 May 3 2007 uname

-rwxr-xr-x 1 orarq1 root 16800 May 3 2007 true

-rwxr-xr-x 1 orarq1 root 43664 May 3 2007 touch

-rwxr-xr-x 1 orarq1 root 17680 May 3 2007 sync

-rwxr-xr-x 1 orarq1 root 44544 May 3 2007 stty

-rwxr-xr-x 1 orarq1 root 54368 May 3 2007 sort

-rwxr-xr-x 1 orarq1 root 20680 May 3 2007 sleep

-rwxr-xr-x 1 orarq1 root 18824 May 3 2007 rmdir

-rwxr-xr-x 1 orarq1 root 20960 May 3 2007 pwd

-rwxr-xr-x 1 orarq1 root 22728 May 3 2007 mknod

-rwxr-xr-x 1 orarq1 root 26464 May 3 2007 mkdir

-rwxr-xr-x 1 orarq1 root 22480 May 3 2007 kill

-rwxr-xr-x 1 orarq1 root 16800 May 3 2007 false

-rwxr-xr-x 1 orarq1 root 20640 May 3 2007 echo

-rwxr-xr-x 1 orarq1 root 51872 May 3 2007 date

-rwxr-xr-x 1 orarq1 root 43472 May 3 2007 chown

-rwxr-xr-x 1 orarq1 root 38000 May 3 2007 chmod

-rwxr-xr-x 1 orarq1 root 41536 May 3 2007 chgrp

-rwxr-xr-x 1 orarq1 root 18624 May 3 2007 basename

-r-xr-xr-x 1 orarq1 root 32784 May 4 2007 login

-rwxr-xr-x 1 orarq1 root 18720 Sep 13 2007 lsmod.static

-rwxr-xr-x 1 orarq1 root 8248 Sep 13 2007 lsmod

-rwxr-xr-x 1 orarq1 root 5064 Dec 12 2007 vitmp

-rwxr-xr-x 1 orarq1 root 1365664 Dec 12 2007 vim

-rwxr-xr-x 1 orarq1 root 86488 Apr 22 2008 rpm

-rwxr-xr-x 1 orarq1 root 679504 Apr 22 2008 makedumpfile

-rwxr-xr-x 1 orarq1 root 18032 Apr 22 2008 initviocons

-r-xr-xr-x 1 orarq1 root 118224 Apr 22 2008 ps

-rwxr-xr-x 1 orarq1 root 106608 Apr 22 2008 cpio

-rwxr-xr-x 1 orarq1 root 118456 Apr 22 2008 netstat

-rwxr-xr-x 1 orarq1 root 12608 Apr 22 2008 hostname

-rwxr-xr-x 1 orarq1 root 146201 Apr 22 2008 umount

-rwxr-xr-x 1 orarq1 root 365122 Apr 22 2008 mount

-rwxr-xr-x 1 orarq1 root 36304 Apr 22 2008 more

-rwxr-xr-x 1 orarq1 root 11952 Apr 22 2008 logger

-rwxr-xr-x 1 orarq1 root 57935 Apr 22 2008 guessfstype

-rwxr-xr-x 1 orarq1 root 7104 Apr 22 2008 dmesg

-rwxr-xr-x 1 orarq1 root 4880 Apr 22 2008 arch

-rwxr-xr-x 1 orarq1 root 215928 Apr 22 2008 tar

-rwxr-xr-x 1 orarq1 root 143872 Apr 22 2008 grep

-rwxr-xr-x 1 orarq1 root 38 Apr 22 2008 fgrep

-rwxr-xr-x 1 orarq1 root 38 Apr 22 2008 egrep

-rwxr-xr-x 1 orarq1 root 5800 Apr 22 2008 usleep

-rwxr-xr-x 1 orarq1 root 7112 Apr 22 2008 mountpoint

-rwxr-xr-x 1 orarq1 root 15216 Apr 22 2008 rescan-scsi-bus.sh

-rwxr-xr-x 1 orarq1 root 45088 Apr 22 2008 scsidev

-rwxr-xr-x 1 orarq1 root 348880 Apr 22 2008 tcsh

lrwxrwxrwx 1 orarq1 root 8 Sep 19 21:21 domainname -> hostname

lrwxrwxrwx 1 orarq1 root 8 Sep 19 21:21 dnsdomainname -> hostname

lrwxrwxrwx 1 orarq1 root 4 Sep 19 21:22 sh -> bash

lrwxrwxrwx 1 orarq1 root 8 Sep 19 21:23 ip -> /sbin/ip

lrwxrwxrwx 1 orarq1 root 4 Sep 19 21:23 awk -> gawk

lrwxrwxrwx 1 orarq1 root 9 Sep 19 21:24 psfstriptable -> psfxtable

lrwxrwxrwx 1 orarq1 root 9 Sep 19 21:24 psfgettable -> psfxtable

lrwxrwxrwx 1 orarq1 root 9 Sep 19 21:24 psfaddtable -> psfxtable

lrwxrwxrwx 1 orarq1 root 14 Sep 19 21:24 pidof -> /sbin/killall5

lrwxrwxrwx 1 orarq1 root 4 Sep 19 21:24 csh -> tcsh

lrwxrwxrwx 1 orarq1 root 3 Sep 19 21:25 vi -> vim

lrwxrwxrwx 1 orarq1 root 18 Sep 19 21:26 ksh -> /lib64/ast/bin/ksh

lrwxrwxrwx 1 orarq1 root 13 Sep 19 21:28 mail -> /usr/bin/nail

Regards,

Ravi ghangurde

[Former Member]

hi ravi,

It is simple job. Just look at your DEV or PRD server. Compare it and change the ownership just like the other server.

ardhian

http://ardhian.kioslinux.com

http://sapbasis.wordpress.com

[Former Member]

the previous permisssions cannot be found. As far as I think the system does not have a history of permissions of folders.

Since this is you quality server, can you look into your dev and prd servers for the list of folders and their permissions. you can comapre the permissions and modify them accordingly.

Also, you said that you are not able to login from Putty. can you please tell me what error are you getting exaclty? If it is a simple authentication failed - permission denied message, pls login with your root and change the password for the user. Please revert with the error.

Regards,

Sam

[Former Member]

Thanks sam,

After changing the var directory permisson form orarq1 to root the putty and ftp works properly.

also found the directory BIN is also replaced by user root to orarq1, and also changed bin directory permisson to orarwq1 to root with option -R.

Now till i am facing the problem of DB13 usage and not able to sheduled DBCHECK and UPDATE STATISTICS .

Error Message is as below.

Job started

Step 001 started (program RSDBAJOB, variant &0000000000020, user ID BASIS001)

Execute logical command BRCONNECT On host KNDTRTST

Parameters: -u / -jid STATS20081230160522 -c -f stats -t ALL

External communication error at program start (see system log)

SAPXPG_START_XPG_LONG: sy-subrc ne 0

destination = %_TCPIP_%1

SXPG_STEP_COMMAND_START: SXPG_STEP_XPG_START returned: 1.006

SXPG_COMMAND_EXECUTE(LONG)

COMMANDNAME = BRCONNECT

OPERATINGSYSTEM = ANYOS

TARGETSYSTEM = KNDTRTST

DESTINATION =

SXPG_COMMAND_EXECUTE failed for BRCONNECT - Reason: x_error

Job cancelled after system exception ERROR_MESSAGE

Please suggest what to do.

current permissons is as bloew

drwxr-xr-x 2 orarq1 root 48 May 3 2007 mnt

drwxr-xr-x 2 orarq1 root 48 Sep 19 21:20 srv

drwxr-xr-x 4 root root 80 Sep 19 21:20 stand

drwxr-xr-x 2 root root 2888 Sep 19 21:28 bin

drwxr-xr-x 5 root root 4224 Sep 19 21:28 lib64

drwxr-xr-x 10 orarq1 root 3856 Sep 19 21:28 lib

-rw------- 1 root root 1024 Sep 19 21:43 .rnd

drwxr-xr-x 2 root root 216 Sep 19 21:47 ARtmp

drwxr-xr-x 4 root root 1024 Sep 19 21:53 boot

drwxr-xr-x 3 root root 72 Sep 19 22:20 sapmnt

drwxr-xr-x 2 root root 48 Sep 22 18:31 media

drwxr-xr-x 19 root root 504 Sep 23 17:25 usr

drwxr-xr-x 7 root root 152 Sep 24 21:50 home

drwxr-xr-x 3 root root 9032 Sep 25 11:31 sbin

drwxr-xr-x 8 orarq1 dba 184 Sep 25 12:59 oracle

drwxr-xr-x 11 orarq1 root 264 Sep 25 21:54 opt

drwxr-xr-x 8 orarq1 root 192 Sep 26 18:35 nsr

drwxr-xr-x 18 orarq1 root 440 Oct 1 14:55 var

-rw-rr 1 root root 44184 Nov 3 21:30 pass.txt

drwxrwxrwx 14 root root 640 Nov 11 18:04 sapcd

dr-xr-xr-x 172 root root 0 Nov 22 21:52 proc

drwxr-xr-x 11 orarq1 root 0 Nov 22 21:52 sys

drwxr-xr-x 79 orarq1 root 6960 Dec 19 11:03 etc

drwx------ 27 root root 1304 Dec 19 15:32 root

drwxr-xr-x 13 orarq1 root 7260 Dec 22 16:15 dev

drwxrwxrwt 43 root root 9872 Dec 30 16:15 tmp

Thanks and Regards,

Ravi

[Former Member]

Can you please put the whole log as it is saying it to be a communication error. One more thing we can try here is to check for the BRTOOLS executables and the folder permissions for them as compared to the DEV or PRD servers. can you try to run an online backup or an archive backup from os level and tell us if we are able to do that.

Regards,

Sam

[Former Member]

Well, as far as I see it you have a big task ahead cause u have used -R option for changing the permissions. there might be some files which are owned by the root or are in the root group. I would suggest to go ahead with the most important directories like etc usr bin opt etc.. cause here you will find files most important to the functioning of the OS functions. Please give the exact permissions.

Regards,

Sam

[Former Member]

drwxr-xr-x 13 orarq1 root 7260 Dec 22 16:15 dev

drwxr-xr-x 79 orarq1 root 6960 Dec 19 11:03 etc

drwxr-xr-x 18 orarq1 root 440 Oct 1 14:55 var

drwxr-xr-x 11 orarq1 root 264 Sep 25 21:54 opt

drwxr-xr-x 8 orarq1 dba 184 Sep 25 12:59 oracle

drwxr-xr-x 10 orarq1 root 3856 Sep 19 21:28 lib

drwxr-xr-x 2 orarq1 root 48 May 3 2007 mnt

drwxr-xr-x 2 orarq1 root 48 Sep 19 21:20 srv

Check the above with your DEV and PRD again cause /etc should not be owned by orarq1 and also the other directories like lib var mnt.... i have listed.

Please check again

[Former Member]

Hi Sam,

Thanks for your valuable support.

Now found the wrong owener for RQ1 folder ( change with ORARQ1 to RQ1ADM) now the DB13 all function working fine.

but still i am facing the problems like when run the brtool.

please suggest.

1 - BRSPACE profile (profile) ....... [initRQ1.sap]

2 - Database user/password (user) ... [/]

3 ~ Alter data file action (action) . []

4 ~ Tablespace names (tablespace) ... []

5 ~ Data file names (file) .......... []

6 - Confirmation mode (confirm) ..... [yes]

7 - Scrolling line count (scroll) ... [20]

8 - Message language (language) ..... [E]

9 - BRSPACE command line (command) .. [-p initRQ1.sap -s 20 -l E -f dfalter]

Standard keys: c - cont, b - back, s - stop, r - refr, h - help

-

---

BR0662I Enter your choice:

c

BR0280I BRTOOLS time stamp: 2009-01-12 16.26.54

BR0663I Your choice: 'c'

BR0259I Program execution will be continued...

BR0291I BRSPACE will be started with options '-p initRQ1.sap -s 20 -l E -f dfalter'

BR0280I BRTOOLS time stamp: 2009-01-12 16.26.54

BR0670I Enter 'c[ont]' to continue, 'b[ack]' to go back, 's[top]' to abort:

c

BR0280I BRTOOLS time stamp: 2009-01-12 16.26.57

BR0257I Your reply: 'c'

BR0259I Program execution will be continued...

BR0252E Function fopen() failed for '/oracle/RQ1/sapbackup/.user.pas' at location BrToolCall-2

BR0253E errno 13: Permission denied

BR0669I Cannot continue due to previous warnings or errors - you can go back to repeat the last action

please suggest .

sapbackup folder permisson as below

all files of /oracle/RQ1/sapbackup have a owener ORARQ1

and for same folder

drwxr-xr-x 4 orarq1 dba 2352 2009-01-11 21:52 sapbackup

suggest.

Regards,

Ravi ghangurde

[Former Member]

The issue is with permissions and you have to change not just directories but also files. Unless and untill that be done properly you will keep facing some or the other issue. i have helped you to the max i can.

Regards,

Samant Kumar