cancel
Showing results for 
Search instead for 
Did you mean: 

ORA-01031: insufficient privileges using brbackup with rman

Former Member
0 Kudos

hi,

We are getting error ORA-01031: insufficient privileges when running the below command on Solaris 10 and we have run sapdba_role.sql sapconn_role.sql

/usr/sap/BQ2/SYS/exe/run/brbackup -u /

and below are the BR files permission

-rwsrwxr-x   1 orabq2   dba      6524528 Mar  5  2012 brarchive

-rwsrwxr-x   1 orabq2   dba      6763216 Mar  5  2012 brbackup

-rwsrwxr-x   1 orabq2   sapsys   8966536 Mar  5  2012 brconnect

-rwxr-xr-x   1 bq2adm   sapsys   7271040 Mar  5  2012 brrecover

-rwxr-xr-x   1 bq2adm   sapsys   2766184 Mar  5  2012 brrestore

-rwxr-xr-x   1 bq2adm   sapsys   9665480 Mar  5  2012 brspace

-rwxr-xr-x   1 bq2adm   sapsys   3345016 Mar  5  2012 brtools

and below are the id groups

orabq2 is under below groups

dba oper sapsys sapinst cmplr

bq2adm is under below groups

sapsys oper dba

and we can connect fine with sqlplus using sysdba and below is the log of the error and if any one have any idea causing the issue

BR0280I BRBACKUP time stamp: 2012-12-05 01.03.53

BR0505I Full database backup (level 0) using RMAN successful

BR0280I BRBACKUP time stamp: 2012-12-05 01.03.55

BR0530I Cataloging backups of all database files to database BQ2/PRIMARY ...

BR0278E Command output of 'SHELL=/bin/sh /oracle/BQ2/112_64/bin/rman nocatalog':

Recovery Manager: Release 11.2.0.2.0 - Production on Wed Dec 5 01:03:55 2012

Copyright (c) 1982, 2009, Oracle and/or its affiliates.  All rights reserved.

RMAN>

RMAN> connect target *

RMAN-00571: ===========================================================

RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============

RMAN-00571: ===========================================================

ORA-01031: insufficient privileges

RMAN> **end-of-file**

RMAN>

host command complete

thanks

Accepted Solutions (0)

Answers (2)

Answers (2)

Former Member
0 Kudos

Hi Stefan,

I also faced the same issue after upgrading my DB to 11g.

Please follower below steps and lets know the result

 

1. Update the brtools to the latest patch level to avoid any known bugs.

2. Execute saproot.sh & oraroot.sh as root user it will set the BR*tools file permission

OS> /sapmnt/<SID>/exe/saproot.sh <SID>

OS> /sapmnt/<SID>/exe/oraroot.sh <SID>

3. Execute the sapconn_role.sql and sapdba_role.sql again. Refer note 12741 & Note 134592 for more detail.

Now check the db user permission with below query.

select * from dba_role_privs where grantee = '<SAP USER>';

Thanks

Rajat

volker_borowski2
Active Contributor
0 Kudos

Hi,

good question with many usefull information in the initial posting to work with!

This note has a similar problem for Linux

https://service.sap.com/sap/support/notes/776505

Is for Linux, but may be the s-bit for group DBA is needed on Solaris as well when using RMAN?

From note 776505:

chmod 6754 brbackup brarchive

Volker

stefan_koehler
Active Contributor
0 Kudos

Hi Andrew, hi Volker,

well it is the same on Solaris, BUT there is a nasty pitfall called "setuid" property, if Andrew is using ZFS file systems.

Details can be found here: http://docs.oracle.com/cd/E23823_01/html/819-5461/gazss.html (Table 6-1 / property "setuid").

Regards

Stefan