cancel
Showing results for 
Search instead for 
Did you mean: 

ORA-01031: insufficient privileges on first RMAN backup

Former Member
0 Kudos

Hello all,

I am trying to schedule my first RMAN backup in a RAC ASM setup on Oracle Linux 5.5, Oracle version 11.2.0.3, brtools 7.20 patch 23.

I put the following parameters in initSID.sap

backup_dev_type=disk

disk_copy_cmd=rman

asm_ora_sid = (PID1:+ASM1, PID2:+ASM2)

asm_ora_home = (PID1:/oracle/GRID/11203, PID2:/oracle/GRID/11203)

asm_root_dir = ASM

parallel_instances = (PID1:/oracle/PID/112@PID1,PID2:/oracle/PID/112@PID2)

I first try to run the preparation for the RMAN backup with command line:

brbackup -u system/password -p initPID.sap -d rman_prep -t offline -m all -e 0 -l E

I also tried brbackup -u / -p initPID.sap -d rman_prep -t offline -m all -e 0 -l E

In both cases, I get the below:

R0051I BRBACKUP 7.20 (23)

BR0055I Start of database backup: beiqoexy.rmp 2012-05-29 08.05.18

BR0484I BRBACKUP log file: /oracle/PID/sapbackup/beiqoexy.rmp

BR0278E Command output of '/oracle/PID/112/bin/sqlplus /nolog < /oracle/PID/sapb                                                                             ackup/.beiqoexy.spi':

SQL*Plus: Release 11.2.0.3.0 Production on Tue May 29 08:05:18 2012

Copyright (c) 1982, 2011, Oracle.  All rights reserved.

SQL> SQL> SQL> SQL> ERROR:

ORA-01031: insufficient privileges

SQL>

SQL> SP2-0640: Not connected

SQL> SP2-0640: Not connected

SQL>

BR0280I BRBACKUP time stamp: 2012-05-29 08.05.18

BR0279E Return code from '/oracle/PID/112/bin/sqlplus /nolog < /oracle/PID/sapba                                                                             ckup/.beiqoexy.spi': 0

BR0302E SQLPLUS call for database instance PID failed

BR0303E Determination of Oracle version failed

BR0056I End of database backup: beiqoexy.rmp 2012-05-29 08.05.18

BR0280I BRBACKUP time stamp: 2012-05-29 08.05.18

BR0054I BRBACKUP terminated with errors

I have already run sapdba and sapconn roles.

I have read note  776505 - BR*Tools fail with ORA-01017 / ORA-01031 on Linux and have changed the ownership of brbackup and brarchive

-rwsr-srw- 1 oracle dba      6466617 May 25 09:13 brarchive

-rwsr-srw- 1 oracle dba      6596893 May 25 09:13 brbackup

-rwsrwsr-- 1 oracle oinstall 8418234 May 25 09:13 brconnect

-rwsrwsr-- 1 oracle oinstall 7043091 May 25 09:13 brrecover

-rwsrwsr-- 1 oracle oinstall 2398807 May 25 09:13 brrestore

-rwsrwsr-- 1 oracle oinstall 8856765 May 25 09:13 brspace

-rwsrwsr-- 1 oracle oinstall 3279960 May 25 09:13 brtools

Any ideas?

Many thanks

Andreas

Accepted Solutions (0)

Answers (3)

Answers (3)

Former Member
0 Kudos

Short answer, edit /etc/groups using root (or sudo vi), and add user "oracle" to the dba group. It should looks like this

dba:oracle

The BRTools command is executed by UNIX user "oracle." This indirectly calls RMAN, which requires the UNIX user belongs to UNIX group dba. There could be other additional UNIX user added, but for SAP, they are normally ora<sid> and <sid>adm

Former Member
0 Kudos

Well, now I have changed the ORACLE_SID from PID to PID1 in the environment of user pidadm in the node of the cluster I am trying to get the backup from. I did that as I realised that I couldn't execute sqlplus / from sidadm. When I changed it, I could do sqlplus /

and running the backup reduced the error to the below

lp001:pidadm 53> brbackup -u / -p initPID.sap -d rman_prep -t offline -m all -e 0 -l E

BR0051I BRBACKUP 7.20 (23)

BR0055I Start of database backup: beiqovkv.rmp 2012-05-29 11.11.09

BR0484I BRBACKUP log file: /oracle/PID/sapbackup/beiqovkv.rmp

BR0280I BRBACKUP time stamp: 2012-05-29 11.11.09

BR0301E SQL error -1031 at location BrInitOraCreate-2, SQL statement:

'CONNECT / AT PROF_CONN IN SYSOPER MODE'

ORA-01031: insufficient privileges

BR0303E Determination of Oracle version failed

BR0056I End of database backup: beiqovkv.rmp 2012-05-29 11.11.09

BR0280I BRBACKUP time stamp: 2012-05-29 11.11.09

BR0054I BRBACKUP terminated with errors

This is described exactly in note 776505 paragraph 3 but while I changed the permissions to the 6756, I hadn't changed the ownership to orapid:dba but I left it to oracle:dba.

Well, when I changed to orapid:dba, it worked! 

So much for the RAC brtools support for Oracle 11G presentation  telling me to get rid of ora<sid>....

Unless of course I have just found a workaround and not a proper solution. But this is what note 776505 reads...

Andreas

Former Member
0 Kudos

Andreas,

I presume this happened, because your Linux user orapid is in secondary group oper, whereas oracle isn't.

Former Member
0 Kudos

Hi Andreas,

Please find the owners of br commands, below;

brbackup -> ora<sid>:sapsys
brarchive -> ora<sid>:sapsys
brrecover -> <sid>adm:sapsys
brconnect -> ora<sid>:sapsys
brspace -> <sid>adm:sapsys
brrestore -> <sid>adm:sapsys
brtools -> <sid>adm:sapsys

Additionally, check the ./etc/groups entries. Find the sample entries, below;

dba -> ora<sid>, <sid>adm
oper -> ora<sid>, <sid>adm
sapsys -> <sid>adm

Best regards,

Orkun Gedik

Former Member
0 Kudos

Hello Orkun,

Thank you for the reply but I do not think that this is applicable for RAC and ASM. In RAC/ASM, brtools are supposed to be owned by oracle:oinstall as per presentation "BR*Tools Support for Oracle 11g ASM and RAC" . It looks like there is an exception for brbackup and braarchive for Linux. I opened a message to SAP to confirm it and will update here when they reply

Regards

Andreas

Former Member
0 Kudos

Thanks Joe,

That makes sense. Something happened and the oper group is not with user oracle any more but I am sure I requested it to be set up. I will have it changed and use user oracle instead of user orasid and see what happens.

Andreas

Former Member
0 Kudos

Hi,

Check ownership permissions where backup will be taken.

Regards,