on 12-07-2012 4:34 PM
hi,
We are getting error ORA-01031: insufficient privileges when running the below command on Solaris 10 and we have run sapdba_role.sql sapconn_role.sql
/usr/sap/BQ2/SYS/exe/run/brbackup -u /
and below are the BR files permission
-rwsrwxr-x 1 orabq2 dba 6524528 Mar 5 2012 brarchive
-rwsrwxr-x 1 orabq2 dba 6763216 Mar 5 2012 brbackup
-rwsrwxr-x 1 orabq2 sapsys 8966536 Mar 5 2012 brconnect
-rwxr-xr-x 1 bq2adm sapsys 7271040 Mar 5 2012 brrecover
-rwxr-xr-x 1 bq2adm sapsys 2766184 Mar 5 2012 brrestore
-rwxr-xr-x 1 bq2adm sapsys 9665480 Mar 5 2012 brspace
-rwxr-xr-x 1 bq2adm sapsys 3345016 Mar 5 2012 brtools
and below are the id groups
orabq2 is under below groups
dba oper sapsys sapinst cmplr
bq2adm is under below groups
sapsys oper dba
and we can connect fine with sqlplus using sysdba and below is the log of the error and if any one have any idea causing the issue
BR0280I BRBACKUP time stamp: 2012-12-05 01.03.53
BR0505I Full database backup (level 0) using RMAN successful
BR0280I BRBACKUP time stamp: 2012-12-05 01.03.55
BR0530I Cataloging backups of all database files to database BQ2/PRIMARY ...
BR0278E Command output of 'SHELL=/bin/sh /oracle/BQ2/112_64/bin/rman nocatalog':
Recovery Manager: Release 11.2.0.2.0 - Production on Wed Dec 5 01:03:55 2012
Copyright (c) 1982, 2009, Oracle and/or its affiliates. All rights reserved.
RMAN>
RMAN> connect target *
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
ORA-01031: insufficient privileges
RMAN> **end-of-file**
RMAN>
host command complete
thanks
Hi Stefan,
I also faced the same issue after upgrading my DB to 11g.
Please follower below steps and lets know the result
1. Update the brtools to the latest patch level to avoid any known bugs.
2. Execute saproot.sh & oraroot.sh as root user it will set the BR*tools file permission
OS> /sapmnt/<SID>/exe/saproot.sh <SID>
OS> /sapmnt/<SID>/exe/oraroot.sh <SID>
3. Execute the sapconn_role.sql and sapdba_role.sql again. Refer note 12741 & Note 134592 for more detail.
Now check the db user permission with below query.
select * from dba_role_privs where grantee = '<SAP USER>';
Thanks
Rajat
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi,
good question with many usefull information in the initial posting to work with!
This note has a similar problem for Linux
https://service.sap.com/sap/support/notes/776505
Is for Linux, but may be the s-bit for group DBA is needed on Solaris as well when using RMAN?
From note 776505:
chmod 6754 brbackup brarchive
Volker
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Andrew, hi Volker,
well it is the same on Solaris, BUT there is a nasty pitfall called "setuid" property, if Andrew is using ZFS file systems.
Details can be found here: http://docs.oracle.com/cd/E23823_01/html/819-5461/gazss.html (Table 6-1 / property "setuid").
Regards
Stefan
User | Count |
---|---|
84 | |
25 | |
12 | |
9 | |
6 | |
6 | |
5 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.