check DB failing in R/3 4.6C

[Former Member]

Hi there,

Our R/3 4.6C checkd and verify DB are failing with the following errors. Can somebody shed light on this?

BR301E SQL error -1031 at location ora_vers_get-5

ORA-01031: insufficient privileges

BR303E Determination of RDBMS version failed

[anindya_bose · Accepted solution]

Did you change any thing in recent past?

Is other DBA jobs running fine?

Once you know the user who is executing that Check DB command and if that users does not have DBA role try to assign dba role to the user by SQL command

SQL> grant dba to <user>;

[Former Member]

Hi,

Is the user under whose identity the BR* tool is executed member of the "oper" group (UNIX) or the ORA_<SID>_OPER group (Windows) on the database server? Starting with the 6.x versions (I think) the BR* tools connect with "/ AS SYSOPER". If the user (orasid or sidadm) is not a member of the oper group, then the ORA-01031 occurs.

Regards,

Mark

[fidel_vales]

Here Mark put it in nicer words.

This is what i'm looking for since my first answer, information that I requested and requested and requested

[Former Member]

Hi Fidel,

The gateway user is not part of the Oper group . i have requested the UNIX team to add the group to the user. Thanks for your quick replies all the while

[Former Member]

Also, Did you try to login to the database as <gwsid> user? Some how, i have a feeling whether adding oper group will help you? cause, you stated that analyze statistiscs is working fine..........

However its worth giving a try.. Good Luck!!

[fidel_vales]

Hi,

Adding the group is the solution.

why? only look at the error:

> BR200I BR_TRACE: location ora_vers_get-5, SQL command:

> 'CONNECT / AT OPER_CONN IN SYSOPER MODE;'

> BR300I BR_TRACE: SQL code: -1031, number of processed rows: 1

> BR280I Time stamp 2009-09-18 10.22.00

> BR301E SQL error -1031 at location ora_vers_get-5

> ORA-01031: insufficient privileges

The error "insuficient privileges' appear when the program tries to connect as SYSOPER identified by the OP.

This is not an operation that is done by all

• br tools

• options

To know the reason behind logging as SYSOPER you should contact the developer and ask him.

Probbaly is to perform some operations that the normal "ops$" user cannot perform

[Former Member]

Surely you would have saved so much time for all involved if you only had told that this was a remote operation.

Anything remote from SAP would be executed by <SID>adm

what you need to confirm as Fidel rightly pointed out is

Does <SID>adm have all the rights to execute this operation ??

Go thorugh the steps which were mentioned earlier and then reply back for an answer

Pravin

[Former Member]

Hi Thanks you for your reply.

It fails both from brtools with no user specified and also DB13 jobs. The OPS$ user has DBA role as well.

[Former Member]

Just to add update stats run fine without any issue and it is only the Check DB and VerifyDB.

[anindya_bose]

running Out of Idea..

Check https://service.sap.com/sap/support/notes/91216 if it helps.

Can you run one SQL command and let us know the out put

Login as sysdba

SQL>connect /as sysdba;

SQL> select username,account_status,expiry_date from dba_users:

[fidel_vales]

Please,

try the following

1) answer all questions I posted, it is difficult if you keep hiding information

2) then, and oly then, execute the following as your <sid>adm user:

> brconnect -u / -c -f check -TRC 15

the trace file should show the command tha is causing the error. vheck it

[Former Member]

Hi Fidel,

Yes it is 4.6c and Oracle 91. I have executed the command and the trace shows the error at the following location.

BR200I BR_TRACE: location ora_vers_get-5, SQL command:

'CONNECT / AT OPER_CONN IN SYSOPER MODE;'

BR300I BR_TRACE: SQL code: -1031, number of processed rows: 1

BR280I Time stamp 2009-09-18 10.22.00

BR301E SQL error -1031 at location ora_vers_get-5

ORA-01031: insufficient privileges

[fidel_vales]

and you keep not answering my questions:

> have you exected the SAPDBA role? I'm only guessing as you do not provide much info

> what is the command line you execute?

> what is the user who execute it?

> to what groups this user belongs?

I assume that you have executed the command as <sid>adm and I also assume that you have executed the command I wrote.

But I still would like to know to what groups this user belongs to, as I'm pretty sure the issue is here.

[Former Member]

we also use gateway system here and the database and application server are on different hosts. I ran this command with sidadm for gateway .

[Former Member]

Fidel,

We have distributed installation. We have installed a standalone gateway on database server and us TCP/IP connection to execute BR* tolls using sapxpg command from the application. (This is the background)

i am not sure why you are referring to SAPDBA role, this was executed during the installation (4 yrs back) and evertything was setup. check db was working fine till last month.

Also, interesting thing is 'update statistics is working fine' which uses the same gateway and same BR* tools (BRCONNECT).

This is surprising me. We have already given appropriate groups to OPS$<gw-sid>ADM. I have a final solution as re-running SAPDBA-role script as SYS user. but i am trying to find out the root-cause as this is a LIVE system

Any thoughts on this will be great helpful

[fidel_vales]

I'm still waiting for the key answer. So I'll do it slowly.

1.- you telnet (or ssh) to the database sever

2.- you log in as <sid>adm

3.- you issue the command "id" or "groups" or whatever command in your OS provide you with the groups the user <sid>adm belongs to.

and, as we are already in the server, you change to the kernel directory and issue the command

ls -ls br*

[fidel_vales]

you do not provide much information.

so I'll guess.

> You have 46C and Oracle 9i

is that correct?

have you exected the SAPDBA role? I'm only guessing as you do not provide much info

what is the command line you execute?

what is the user who execute it?

to what groups this user belongs?

and a long list of other possible questions

[Former Member]

for ORA errors, generally help is available at marketplace and db help pages

SAP Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role

and other jobs working fine in DB13 ?

SAP Note 651351 - BR tools on UNIX: Error due to executable permissions

SAP Note 113747 - Permissions for DBA tools BR*Tools and SAPDBA