TNS - 01190 : listener not shutting down

[Former Member]

Hi,

I am executing the command via orasid as lsnrctl stop . I am getting the following error. I tried with sidadm as well. But same error as below:

TNS - 01190:the user is not authorized to execute the requested listener command

The scenario is, we have two instances running on the same server i.,e.,Development and Test.

I checked the permission level of the following path

oracle/SID/102_64/network/admin.

oracle/SID/102_64/network/log.

Both have got orasid permission with full access.

I checked up the files at oracle/SID/102_64/network/log. In this folder, i cannot see sqlnet.log file whereas this file exists in the other servers where listener is able to shutdown.

Please help on how i can resolve this issue.

regards,

Raj

[stefan_koehler · Accepted solution]

Hello Raj,

please perform the following stuff and post the output.

shell> su - ora<SID>
shell> ps -fu ora<SID>
shell> id
shell> lsnrctl
LSNRCTL> status

Regards

Stefan

[Former Member · Accepted solution]

Hi stefan,

Below is the output>

devserver_root>su - orauq1

DEVSERVER:orauq1 1> ps -fu orauq1

UID PID PPID C STIME TTY TIME CMD

orauq1 1245388 1208476 0 15:23:58 pts/1 0:00 -csh

orauq1 1257552 1261768 0 15:59:10 pts/0 0:00 ps -fu orauq1

orauq1 1261768 741434 0 15:58:03 pts/0 0:00 -csh

DEVSERVER:orauq1 2> id

uid=208(orauq1) gid=206(dba) groups=204(sapinst),207(oper)

DEVSERVER:orauq1 3> lsnrctl

LSNRCTL for IBM/AIX RISC System/6000: Version 10.2.0.2.0 - Productio

2010 16:01:35

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Welcome to LSNRCTL, type "help" for information.

LSNRCTL> status

Connecting to (ADDRESS=(PROTOCOL=IPC)(KEY=UQ1.WORLD))

STATUS of the LISTENER

-

---

Alias LISTENER

Version TNSLSNR for IBM/AIX RISC System/6000: Vers

.0 - Production

Start Date 19-DEC-2009 20:08:52

Uptime 15 days 19 hr. 52 min. 47 sec

Trace Level off

Security ON: Local OS Authentication

SNMP ON

Listener Parameter File /oracle/UQ1/102_64/network/admin/listener.

Listener Log File /oracle/UQ1/102_64/network/log/listener.lo

Listening Endpoints Summary...

(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=UQ1.WORLD)))

(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=UQ1)))

(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=DEVSERVER)(PORT=1521)))

Services Summary...

Service "UD1" has 1 instance(s).

Instance "UD1", status READY, has 1 handler(s) for this service...

Service "UD1_XPT" has 1 instance(s).

Instance "UD1", status READY, has 1 handler(s) for this service...

Service "UQ1" has 2 instance(s).

Instance "UQ1", status UNKNOWN, has 1 handler(s) for this service.

Instance "UQ1", status READY, has 1 handler(s) for this service...

Service "UQ1_XPT" has 1 instance(s).

Instance "UQ1", status READY, has 1 handler(s) for this service...

The command completed successfully

[stefan_koehler · Accepted solution]

Hello Raj,

thanks for the output .. the cause of the problem should be clear now.

DEVSERVER:orauq1 1> ps -fu orauq1
UID PID PPID C STIME TTY TIME CMD
orauq1 1245388 1208476 0 15:23:58 pts/1 0:00 -csh
orauq1 1257552 1261768 0 15:59:10 pts/0 0:00 ps -fu orauq1
orauq1 1261768  741434 0 15:58:03 pts/0 0:00 -csh

LSNRCTL> status
...
Security ON: Local OS Authentication
...

The reason why you get the erorr TNS-01190 is that the listener was not started by user orauq1. In this configuration (Local OS Authentication) only the user who started the listener is able to perform commands like start, stop, etc. This Oracle 10g security behavior is described in metalink note #260986.1 too.

Please check the user by running the following command and try it with this one.

shell> ps -ef | grep -i listener

Regards

Stefan

[Former Member · Accepted solution]

Hi Stefan,

Thanks for ur response. Below is the output of the command u had given. In this case, I should be using ORASID(ORAUQ1) to stop the listener. Right?

DEVSERVER:orauq1 4> ps -ef | grep -i listener

root 258186 1 0 Dec 19 - 0:06 /usr/bin/cimlistener

uq1adm 417822 1 0 Dec 19 - 0:33 /oracle/UQ1/102_64/bin/tnslsn

r LISTENER -inherit

ud1adm 942298 1 0 Dec 20 - 0:25 /oracle/UD1/102_64/bin/tnslsn

r LISTENER -inherit

orauq1 1298490 1261768 0 16:27:05 pts/0 0:00 grep -i listener

regards,

raj

[stefan_koehler · Accepted solution]

Hello Raj,

no your listener was started by uq1adm .. that should be the user that is allowed to stop the listener.

No idea, why the listener was started by this user ... you can also crosscheck the environment of this user.

shell> su - uq1adm 
shell> id
shell> env | grep -i TNS
shell> env | grep -i ORA
shell> ls -la /oracle/UQ1/102_64/bin/tnslsnr
shell> ps -ef -o comm=command,args=argument,ruser,user | grep -i listener

Regards

Stefan

[Former Member · Accepted solution]

Hi,

I tried the step. But problem remains the same.

regards,

raj

[Former Member · Accepted solution]

Can someone help me out on this issue. TNS-01190 ; The user is not authorized to execute this command. I am unable to stop the listener either thru SIDADM or ORASID.

[Former Member · Accepted solution]

Hi,

As stepen said, listener is started with as user SIDADM, so please do the following

su - uq1adm
lsnrctl stop
lsnrctl status

if it isn't working, do the following...

Make sure that your database is stopped, then use the following commands as a ROOT

ps -ef | grep lsnrctl

it will show you the running process of listner. Note down the PID of the process..

then kill all the process id

in your case, pid is 417822 and 942298

kill 417822

after this try starting and stopping the listener from user "orauq1"

Regards.

Rajesh Narkhede

Edited by: Rajesh Narkhede on Jan 8, 2010 2:58 PM

[Former Member · Accepted solution]

Also make sure that, all database executables are ownership of orasid:dba user.

To check it, give the following command:

[root@hostname]/ # ls -l /oracle/UQ1/102_64

and see if below lines match to your output...

drwxr-xr-x   2 orauq1     dba           8192 Oct 28 15:39 bin
drwxr-xr-x  13 orauq1     dba           1024 Oct 28 15:19 network

Regards.

Rajesh Narkhede

[Former Member · Accepted solution]

Hi,

I tried with the steps. I am facing the below error message.

Starting /oracle/UQ1/102_64/bin/tnslsnr: please wait...

TNSLSNR for IBM/AIX RISC System/6000: Version 10.2.0.2.0 - Production

System parameter file is /oracle/UQ1/102_64/network/admin/listener.ora

Log messages written to /oracle/UQ1/102_64/network/log/listener.log

Error listening on: (ADDRESS=(PROTOCOL=IPC)(KEY=UQ1.WORLD))

TNS-12555: TNS:permission denied

TNS-12560: TNS:protocol adapter error

TNS-00525: Insufficient privilege for operation

IBM/AIX RISC System/6000 Error: 1: Not owner

Listener failed to start. See the error message(s) above...

[Former Member · Accepted solution]

Hi,

Please check and compare the below commands output in your system.

# su - orauq1
# ls -l `which lsnrctl`
-rwxr-x--x   1 orauq1     dba         192344 Oct 28 15:36 /oracle/UQ1/102_64/bin/lsnrctl

Please post the output of above command.

its nothing but a permission issue...

also post the log of "/oracle/UQ1/102_64/network/log/listener.log"

Regards.

Rajesh Narkhede

[Former Member · Accepted solution]

Below is the output:

Oracle/sid/102_64/bin/lsnrctl

-rwxrwxrwx 1 orauq1 dba 22633192 Jul 17 11:25 lsnrctl

listerner log details:

TNSLSNR for IBM/AIX RISC System/6000: Version 10.2.0.2.0 - Production on 08-JAN-2010 15:14:48

Copyright (c) 1991, 2005, Oracle. All rights reserved.

System parameter file is /oracle/UQ1/102_64/network/admin/listener.ora

Log messages written to /oracle/UQ1/102_64/network/log/listener.log

Trace information written to /oracle/UQ1/102_64/network/trace/listener.trc

Trace level is currently 0

Started with pid=1204336

Error listening on: (ADDRESS=(PROTOCOL=IPC)(KEY=UQ1.WORLD))

TNS-12555: TNS:permission denied

TNS-12560: TNS:protocol adapter error

TNS-00525: Insufficient privilege for operation

IBM/AIX RISC System/6000 Error: 1: Not owner

[Former Member · Accepted solution]

Hi,

Your lsnrctl executable has more than required previledges... so that is not a cause of the problem.

Now the only thing we can see the get the clue is "/oracle/UQ1/102_64/network/admin/listener.ora"

i.e. listener configuration file...

before that make sure that you have same permission (recursive) on /oracle folder (at least 755)

if it is not give the permission using the below command:

chmod -R 755 /oracle

it will reset the permission on /oracle directory.

(Now, my main doubt is there must be some thing missconfiguration/changes in listener.ora by any reason...)

please post the contents of listener.ora file to clear the picture...

Again I assumed that there is not network issues in the system, means network interface is up and working fine...

Regards.

Rajesh Narkhede

[Former Member · Accepted solution]

Hi Guys,

This issue is resolved. Permision issue at lsnctrl file. Works fine. Thanks to all of you.

regards,

raj

[markus_doehr2 · Accepted solution]

>

chmod -R 755 /oracle

> it will reset the permission on /oracle directory.

Do not do that.

Some oracle binaries have special permissions (such as a sticky bit).

The easiest way to fix those permissions is

- stop all Oracle processes (shutdown database, stop listener etc.)

- login as ora<SID>

- execute "relink all"

Markus