wrong os user for tasks in db13

[marcus_borchardt]

hello,

i have 2 instances on the same server, each with a own database on this server, too.

one system is a IDES ECC6.0 installation (SID: I66), the other a solution manager 7.0 EHP 1 (SID: SM4).

Both with latest supportpackages and kernel patches. brtools are also up-to-date.

my problem: a task scheduled in db13 on sm4 is executed as orai66. this means, db13 on sm4 uses the os user from i66.

the same tasks manually executed as sm4adm or orasm4 works successfully.

is there any configuration that may be wrong so that sm4 uses the wrong os user?

thanks,

marcus

[anindya_bose · Accepted solution]

Which server?

Can you check the Environment Variables for both the adm accounts?

[marcus_borchardt]

hello,

some answers for the questions:

the os is solaris 5.10.

-

---

the enviroment variables from sm4:

LIBPATH = /usr/sap/SM4/DVEBMGS04/exe: SHLIB_PATH = /usr/sap/SM4/DVEBMGS04/exe: DB_SID = SM4 DIR_LIBRARY = /usr/sap/SM4/DVEBMGS04/exe EDITOR = vi HOME = /home/sm4adm HZ = JAVA_HOME = /usr/java LD_LIBRARY_PATH = /usr/sap/SM4/DVEBMGS04/exe:/usr/sap/SM4/DVEBMGS04/exe:/usr/sap/SM4/SYS/exe/run:/oracle/client/10x_64/instantclient LOGNAME = sm4adm MAIL = /usr/mail/sm4adm MANPATH = :/usr/share/man:/usr/local/man NLS_LANG = AMERICAN_AMERICA.UTF8 ORACLE_BASE = /oracle ORACLE_HOME = /oracle/SM4/102_64 ORACLE_SID = SM4 PATH = /oracle/SM4/102_64/bin:/usr/java/bin:.:/home/sm4adm:/usr/sap/SM4/SYS/exe/run:/usr/bin::/usr/local/bin:/usr/ccs/bin:/usr/ucb PWD = /home/sm4adm SAPDATA_HOME = /oracle/SM4 SAPSYSTEMNAME = SM4 SHELL = /usr/bin/bash SHLVL = 1 TERM = xterm THREAD = NOPS TNS_ADMIN = /oracle/SM4/102_64/network/admin TZ = MET _ = /usr/sap/SM4/SYS/exe/run/startsap dbms_type = ORA dbs_ora_schema = SAPSR3 dbs_ora_tnsname = SM4

(copied from SM51: Goto -> Server Name -> Information -> Enviroment)

-

---

the ops$ user authentication also works:

sm4adm> sqlplus / SQL*Plus: Release 10.2.0.4.0 - Production on Tue Sep 15 06:16:52 2009 Copyright (c) 1982, 2007, Oracle. All Rights Reserved. Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production With the Partitioning, Data Mining and Real Application Testing options SQL> show user USER is "OPS$SM4ADM"

as i66adm the op$ user authentication works correctly, too. the "show user" command shows "OPS$I66ADM" as user.

and i know it is executed as orai66, because then i start for example a db check in db13 on sm4, there is only on process for brconnect on shell and the owner of this process is orai66.the job log from this db check in db13 shows the task as completed successfully, the task itself in db13 is marked as 'Scheduling failed'.

but the job log shows also, this task was executed for the i66 db, and not for sm4 db.db13 from i66 shows all task started from sm4 db13 as successfull executed task with action log and detail log.

the permissions of br tools are also correct.

or what mean you with authorization, fidel?

thanks,

marcus

Edited by: Marcus Borchardt on Sep 15, 2009 7:43 AM

Edited by: Marcus Borchardt on Sep 15, 2009 7:47 AM

[marcus_borchardt]

Permission of br*tools from sm4:

sm4adm> ls -l br*

-rwsrwxr-x 1 orasm4 sapsys 5769536 Jul 6 21:46 brarchive

-rwsrwxr-x 1 orasm4 sapsys 5931672 Jul 6 21:46 brbackup

-rwsrwxr-x 1 orasm4 sapsys 7798448 Jul 6 21:46 brconnect

-rwxrwxr-x 1 sm4adm sapsys 6292744 Jul 6 21:46 brrecover

-rwxrwxr-x 1 sm4adm sapsys 2483968 Jul 4 02:44 brrestore

-rwxrwxr-x 1 sm4adm sapsys 8120984 Jul 6 21:46 brspace

-rwsrwxr-x 1 orasm4 sapsys 3099928 Jul 5 21:26 brtools

[Former Member]

ok, what this says for BRTOOLS,

SAP Note 113747 - Permissions for DBA tools BR*Tools and SAPDBA

[fidel_vales]

Hi,

sorry, for authorization I meant the permissions of br* tools, as you pasted.

This is getting interesting.

Everything you shown seems to be correct.

Could you do the following check?

in transaction SA38 (or SE38) execute report RSBDCOS0

You get one line. execute the following commands there:

• id

• groups

• which brconnect

• ls -l `which brconnect`

The trick on the last one is in the single quotes, you can do instead an "ls -l <output of which breconnect>"

[marcus_borchardt]

hi fidel,

thx for your help,

here is the output from the report:

R/3 SM4 000 User BORCHARDT Date 15.09.2009 Time 10:48:59

Host User sm4adm

Path /usr/sap/SM4/DVEBMGS04/work

[1]id

uid=2671(sm4adm) gid=8403(sapsys)

[2]groups

sapsys dba oper sapinst

[3]which brconnect

/usr/sap/SM4/SYS/exe/run/brconnect

[4]ls -l `which brconnect`

-rwsrwxr-x 1 orasm4 sapsys 7798448 Jul 6 21:46 /usr/sap/SM4/SYS/exe/run/brconnect

in my opinion, its all correct...i have no idea where its failing.

it seems to me, that the transaction db13 especial has a wrong configuration.

[Former Member]

[4]ls -l `which brconnect`
-rwsrwxr-x 1 orasm4 sapsys 7798448 Jul 6 21:46 /usr/sap/SM4/SYS/exe/run/brconnect

If i am not wrong the permission should be as orasm4: dba in place of orasm4: sapsys

Please check if this help you.

Thanks..

Mohit

[marcus_borchardt]

hiho,

this sadly change nothing...

but note 113747 specified for all br*tools sapsys as group. the permission and user/group assigment is also correct.

[former_member204746]

maybe something is wrong in your SAP startup, default or instance profile. please check over there.

[anindya_bose]

Can you delete that job which is crating problem for your system and then reschedule?

Also check table SDBAR and https://service.sap.com/sap/support/notes/564576

[marcus_borchardt]

hello,

i have finally the answer

my workmate had accidentally changed the sap gateway in the rfc connection SAPXPG_DBDEST_<SM4 Host>. so that the connection for sm4 referenced to the gateway from i66.

small error, but huge effect

thx for your help,

marcus

[fidel_vales]

Hi Marcus

You mentioned

>

> my problem: a task scheduled in db13 on sm4 is executed as orai66. this means, db13 on sm4 uses the os user from i66.
> the same tasks manually executed as sm4adm or orasm4 works successfully.

How do you know it is executed as orai66?

do you get information from the I66 instance or the files are created with owner orai66?

if it s the latter you should check

1) the path (you can see the environment variables in SM51)

2) the authorizaions of br* tools, maybe the owner is the wrong one

[former_member204746]

what is your OS?

I suspect that environment variables are not defined properly on your SM4ADM user. it should not be executed with ORAI66.

I would also check OPS$ user authentication.