BRTools 7.40 patch 15 - sapdba_role.sql works only temporarily

[symon_braunbaer]

Dear Experts,

I am performing the first upgrade to oracle 12c in our environment. Currently, I finished the procedure

for switching the Oracle Software owner user from oraSID to oracle, which is described in SAP note

1915317 - Migrating Software Owner to 'oracle'

There, at point 13 Configure SAP BR*Tools for user 'oracle', I wanted to check the result by launching:

OS> brconnect -u / -f check

OS> brbackup -u / -q

Unfortunately, these commands are failing:

<SID>adm 1%  brbackup -u / -q

BR0051I BRBACKUP 7.40 (15)

BR0055I Start of database backup: beqgenmx.qub 2015-04-09 15:33:23

BR0484I BRBACKUP log file: /oracle/<SID>/sapbackup/beqgenmx.qub

BR0280I BRBACKUP time stamp: 2015-04-09 15:33:23

BR0301E SQL error -1031 at location BrInitOraCreate-2, SQL statement:

'CONNECT / AT PROF_CONN IN SYSOPER MODE'

ORA-01031: insufficient privileges

BR0303E Determination of Oracle version failed

BR0056I End of database backup: beqgenmx.qub 2015-04-09 15:33:23

BR0280I BRBACKUP time stamp: 2015-04-09 15:33:23

BR0054I BRBACKUP terminated with errors

This can easily be fixed by launching the sapdba_role.sql and sapconnect_role.sql scripts, which are

contained in the BRTools 7.40.SAR file. But soon after, I found out, that things are good just in the

current session. Once I log out from the user and then switch back to it, the above error comes back

again. I have compared the environment when it works and when it doesn't, and there is no difference,

so here I am out of ideas... Please kindly help me to solve this, THANKS!

[former_member226400]

Hi Symon,

What is the output of command " echo $ORACLE_HOME " from session you execute sapdba_role.sql?

[symon_braunbaer]

Hi Nitin, it is /oracle/<SID>/112_64, both before and after the script. Thank you!

[former_member185954]

Hello Symon,

Which Operating system is your Oracle running on ?

Regards,

Siddhesh

[symon_braunbaer]

Hi Siddhesh, it is Solaris 10.

[former_member182657]

Hi Symon,

yep, but the double-slash (//) convention is for SSFS, I did not enable that yet...

If still you're using OPS$ database connection method,then have you tried with SAP Note   1028220 - ORA-01031: Insufficient privileges despite SAPCONN role

Hope this will help you.

Regards,

[symon_braunbaer]

Thanks a lot, Gaurav, but I have tried this note before I had opened this thread and it didn't help 😕

[JamesZ]

Hi Symon,

It is weird, because sapdba_role.sql and sapconnect_role.sql scripts should be permanent working.

Can you please try log off all the users and then try log only one user to apply the scripts?
Then try to log off all the users again and check the brbackup works this time?

Best regards,
James

[Former Member]

Hey Symon,

That's an interesting one and I do have a vested interest in this as I'm planning the same for a sandbox in the coming weeks

So if I understand you correctly, it seems as though your correction is only valid as long as you stay logged on. Once you logoff, back to square one.

Try this so that we can see a before/after situation amongst other things.

1. Logon and reproduce the problem.

1.1 Check your ora<sid> group assignments

You should belong to at least groups dba, oper

2. Run the following sql.

select *

from role_sys_privs

where ROLE = 'SAPCONN'

order by 1;

3. Run the sapconnect_role.sql script.

4. Run sql from #2

5. Compare output from #2 to #3

6. If no joy, consider point 8 from the following note.

480266 - Problems with SYSDBA/SYSOPER/INTERNAL connect

Seems like a persistence issue but let's see what it is step by step.

Cheers,

Amerjit

[symon_braunbaer]

Hello Amerjit,

many thanks for you so detailed answer! I have tried all this, unfortunately without any success:

running your select returns exactly the same result before and after running sapconn_role.sql:

SQL> select * from role_sys_privs where ROLE = 'SAPCONN';

ROLE                           PRIVILEGE                                ADM

------------------------------ ---------------------------------------- ---

SAPCONN                        ANALYZE ANY                              NO

SAPCONN                        CREATE SYNONYM                           NO

SAPCONN                        CREATE CLUSTER                           NO

SAPCONN                        CREATE TABLE                             NO

SAPCONN                        ADVISOR                                  NO

SAPCONN                        CREATE OPERATOR                          NO

SAPCONN                        CREATE SEQUENCE                          NO

SAPCONN                        CREATE INDEXTYPE                         NO

SAPCONN                        CREATE TYPE                              NO

SAPCONN                        CREATE MATERIALIZED VIEW                 NO

SAPCONN                        CREATE TRIGGER                           NO

ROLE                           PRIVILEGE                                ADM

------------------------------ ---------------------------------------- ---

SAPCONN                        CREATE VIEW                              NO

SAPCONN                        ALTER SESSION                            NO

SAPCONN                        CREATE SESSION                           NO

SAPCONN                        CREATE PROCEDURE                         NO

I have also performed step 8 from note 480266:

As we are running on Solaris, according to the note, the file config.s should have the following:

.ascii "dba\0"

.ascii "oper\0"

It did not have those lines, so I have added them at the beginning of the file, so it currently looks like this:

% cat config.s

        .ascii "dba\0"

        .ascii "oper\0"

        .file   "config.c"

        .section        .data

        .align  8

.L2_.data:

        .align  8

        .globl  ss_dba_grp

ss_dba_grp:     .type   ss_dba_grp,@object

        .size   ss_dba_grp,24

        .align  8

        .8byte  .LV12

        .8byte  .LV13

        .8byte  .LV14

.LV12:  .string "dba"

        .align  8

.LV13:  .string "oper"

        .align  8

.LV14:  .string ""

        .stabs  "",0x62,0,0,0x0

The make command has run successfully, but I still have the same problem...

Of course, there is a workaround to change the environment scripts in a way, so that sapconn_role.sql will be executed each time a switch to this user occurs, but this probably is quite a rude action 😉

The only thing that remains me to try, is to implement SSFS and see if this helps. The guide anyway says, that it has to be done in advance, but I was so curious to see how switching to the oracle user works...

Thank you!

[Former Member]

Hey Symon,

As you have already said, implement SSFS and see if that helps you move forward. If not, you know there's plenty of helpful people waiting to help you out.

Bon Chance.

KR,

Amerjit

[symon_braunbaer]

Hello Amerjit,

many thanks to those helpful people!! I will really need all the help I can get 😉

I went through the note for implementing SSFS. Nearly everything was done in advance.

We have 2 Solaris zones - AS and DB zone. And this is where it gets messy... All the new setup

is not clear to me 😕

R3trans -d, called on the AS returns fine with RC=0000 and it has always been like that.

brconnect doesn't work from the DB server (as it was the case before):

% brconnect -u // -f check

BR0801I BRCONNECT 7.40 (15)

BR0282E Directory '/oracle/<SID>/security/rsecssfs/data' not found

BR1529E Getting BR*Tools user name/password from secure storage failed

BR0806I End of BRCONNECT processing: ceqifyxm.log 2015-04-20 12:27:22

BR0280I BRCONNECT time stamp: 2015-04-20 12:27:22

BR0804I BRCONNECT terminated with errors

Do I need to execute the steps, mentioned in note 1639578 on the DB server as well ?

Or all the calls to BR Tools will now be done on the AS server under <SID>adm ?

This is miserably failing as well, as brconnect should be owned by ora<SID> and this user

looks damaged on that AS:

% ls -la brconnect

-rwsrwsr--   1 100      101      14489040 Apr  8 11:50 brconnect

# su - ora<SID>

su: No directory!

Kindly let me know how should the configuration be for a distributed system and what should I focus on ? Note 1639578 on the DB server or fixing ora<SID> on the AS ? Many thanks in advance!

P.S.: Or perhaps I should just create the oracle user on the AS, as actually brconnect is now owned by oracle on the DB server:

3% ls -la brconnect

-rwsrwsr--   1 oracle   oinstall 14489040 Apr  8 11:50 brconnect

[former_member185954]

Hello Symon,

Looks like there could be an issue with your OS configuration

% ls -la brconnect
-rwsrwsr--   1 100      101      14489040 Apr  8 11:50 brconnect

The host on which the file is in the above state depicts that it doesn't recognise your oracle:oinstall userid.

So instead of attempting to implement SSFS etc, try and sort out the OS issue first.

Regards,

Siddhesh

[symon_braunbaer]

Hello Siddhesh,

the OS issue is, that the oracle user doesn't exist on the AS host.

[symon_braunbaer]

Hello Siddhesh,

I am sorry, but your suggestion is not bringing me further, as brconnect requires ORACLE_HOME to be set for the user (oracle), which in my case is /oracle/<SID>/112_64/bin. This path exists only on the DB server and not on the AS machine, so I guess I can't execute this command from the AS. Then for me it only remains to attempt to configure SSFS on the DB host...

[fschoen]

Hi Symon

I'm not sure if this points were already highlighted in one of the answers in this thread.

A)

Symon Braunbaer wrote:


the OS issue is, that the oracle user doesn't exist on the AS host.

Do you know how the permissions looked before?

B)

Symon Braunbaer wrote:
R3trans -d, called on the AS

So, if you execute R3trans -d on the AS you can see in the log (trans.log) that it is connected via SSFS ?

Similar to:

______

B read_con_info_ssfs(): DBSL supports extended connect protocol

B   ==> connect info for default DB will be read from ssfs

"

______

C)

What does the following SQL statement returns:

______

select grantee, granted_role, default_role

      from dba_role_privs

       where grantee = '<your_database_schema_name>';

______

regards

fabian

[symon_braunbaer]

Hi Fabian,

thanks, but all these points are fine:

A) the permissions can easily be seen on the DB server:

% ls -al brconnect

-rwsrwsr--   1 oracle   oinstall 14489040 Apr  8 11:50 brconnect

B) Yes, it is connecting to SSFS from the AS system, as the string you mentioned is present in trans.log, this is a check, mentioned in note 1639578.

Probably I need to make it use SSFS also from the DB server...

C)

SQL> select grantee, granted_role, default_role from dba_role_privs where grantee = 'SAPSR3';

GRANTEE                        GRANTED_ROLE                   DEF

------------------------------ ------------------------------ ---

SAPSR3                         SAPCONN                        YES

[former_member185954]

Hello Symon,

A dumb question to ask, but have you stop/started the instance after modifications to ownership. Have you cleared all shared memory segments etc that SAP may continue to use.

On your DB server, you confirmed that everything works okay for a particular session and stops working when you attempt to login again.

On AIX such spurious problems are observed when shared memory hasn't been cleaned up. Don't know much about Solaris though.

Regards,

Siddhesh

[symon_braunbaer]

Hello,

maybe I will reboot everything. I have tried to implement SSFS on the DB server, but it is failing:

% brconnect -u // -f check

BR0801I BRCONNECT 7.40 (15)

BR1528E Calling a function of library rsec5lib failed at location BrSsBrUsrPwdGet-2, return code 1

BR1301E Error message from rsec5lib: SSFS-4218: Record with key "BR_TOOLS/DEFAULT_DB_USER" not found in secure storage <-- SSFS-4215: Data file "/oracle/<SID>/security/rsecssfs/data/SSFS_Y07.DAT" exists, but does not contain the requested entry

BR1529E Getting BR*Tools user name/password from secure storage /oracle/<SID>/security/rsecssfs/data/SSFS_<SID>.DAT failed

BR0806I End of BRCONNECT processing: ceqignop.log 2015-04-20 15:12:31

BR0280I BRCONNECT time stamp: 2015-04-20 15:12:31

BR0804I BRCONNECT terminated with errors

I gave again the commands:

% rsecssfx put DB_CONNECT/DEFAULT_DB_USER <SID>adm -plain

% rsecssfx put DB_CONNECT/DEFAULT_DB_PASSWORD <pass>

% rsecssfx list

|---------------------------------------------------------------------------------|

| Record Key                     | Status             | Timestamp of last Update  |

|---------------------------------------------------------------------------------|

| DB_CONNECT/DEFAULT_DB_PASSWORD | Encrypted          | 2015-04-20  13:12:16  UTC |

| DB_CONNECT/DEFAULT_DB_USER     | Plaintext          | 2015-04-20  13:12:09  UTC |

|---------------------------------------------------------------------------------|

it looks all good, but again failing as above 😞 This is now getting really nasty 😕

[former_member185954]

I would agree, do not try and implement new stuff, when existing isn't working as it should, you will only end up muddying the water even more

Regards,

Siddhesh

[fschoen]

Hi Symon

Symon Braunbaer wrote:


% rsecssfx put DB_CONNECT/DEFAULT_DB_USER <SID>adm -plain
% rsecssfx put DB_CONNECT/DEFAULT_DB_PASSWORD <pass>
% rsecssfx list
|---------------------------------------------------------------------------------|
| Record Key                     | Status             | Timestamp of last Update  |
|---------------------------------------------------------------------------------|
| DB_CONNECT/DEFAULT_DB_PASSWORD | Encrypted          | 2015-04-20  13:12:16  UTC |
| DB_CONNECT/DEFAULT_DB_USER     | Plaintext          | 2015-04-20  13:12:09  UTC |
|---------------------------------------------------------------------------------|


it looks all good, but again failing as above 😞 This is now getting really nasty 😕

Hmm. Maybe I'm now going totally into the wrong direction, but do you have a database user/schema called <SID>adm ?

Shouldn't that be something like SAPSR3 or similar?

regards

fabian

[Former Member]

Fabian,

You are perfectly correct that DEFAULT_DB_USER should be SAPSR3 or whatever the schema owner is (schema owner should be in UPPERCASE).

After that, I always try a test with brconnect -chpass to ensure that the secure storage can be written to successfully.

Cheers,

Amerjit

[symon_braunbaer]

Hello guys,

your point for SAPSR3 has been correct for sure! Then I have looked again into the error message and it actually complains, that the record BR_TOOLS/DEFAULT_DB_USER is missing. Yes, it is!! Because note 1639578 doesn't mention this step!! But... it is not that easy!! The following error follows:

% brconnect -u // -f check

BR0801I BRCONNECT 7.40 (15)

BR1528E Calling a function of library rsec5lib failed at location BrSsBrUsrPwdGet-4, return code 1

BR1301E Error message from rsec5lib: SSFS-4218: Record with key "BR_TOOLS/DEFAULT_DB_PASSWORD" not found in secure storage <-- SSFS-4215: Data file "/oracle/<SID>/security/rsecssfs/data/SSFS_<SID>.DAT" exists, but does not contain the requested entry

BR1529E Getting BR*Tools user name/password from secure storage /oracle/<SID>/security/rsecssfs/data/SSFS_<SID>.DAT failed

BR0806I End of BRCONNECT processing: ceqikexi.log 2015-04-21 09:06:38

BR0280I BRCONNECT time stamp: 2015-04-21 09:06:38

BR0804I BRCONNECT terminated with errors

But I have it, according to the note, mentioned above! So I got quite fed up and supplied the password unencrypted: rsecssfx put BR_TOOLS/DEFAULT_DB_PASSWORD <pwd> -plain.

This resulted in ORA-1031, so I remembered my issue with the non-persisting sapdba_role.sql script. I have run it again, now brconnect -u / -f check works, as before, BUT brconnect -u // -f check is producing an error, which is even more strange:

% brconnect -u // -f check

BR0801I BRCONNECT 7.40 (15)

BR0805I Start of BRCONNECT processing: ceqikfit.chk 2015-04-21 09:11:35

BR0484I BRCONNECT log file: /oracle/<SID>/sapcheck/ceqikfit.chk

BR0477I Oracle pfile /oracle/<SID>/sapprof/init<SID>.ora created from spfile /oracle/<SID>/112_64/dbs/spfile<SID>.ora

BR1805I Oracle spfile /oracle/<SID>/sapprof/spfile<SID>.ora created from pfile /oracle/<SID>/sapprof/init<SID>.ora

BR0280I BRCONNECT time stamp: 2015-04-21 09:11:38

BR0301E SQL error -942 at location BrLicCheck-105, SQL statement:

'SELECT COUNT(*), NVL(SUM(BLOCKS), 0) FROM SYS.SEG$ WHERE USER# = 34'

ORA-00942: table or view does not exist

BR0806I End of BRCONNECT processing: ceqikfit.chk 2015-04-21 09:11:38

BR0280I BRCONNECT time stamp: 2015-04-21 09:11:38

BR0804I BRCONNECT terminated with errors

Anyone any ideas ? This really looks unsolvable... Thanks!

[symon_braunbaer]

Btw. this object exists and the select works in sqlplus, so maybe some permission issue ??

SQL> desc SYS.SEG$;

Name                                      Null?    Type

----------------------------------------- -------- ----------------------------

FILE#                                     NOT NULL NUMBER

BLOCK#                                    NOT NULL NUMBER

TYPE#                                     NOT NULL NUMBER

TS#                                       NOT NULL NUMBER

BLOCKS                                    NOT NULL NUMBER

EXTENTS                                   NOT NULL NUMBER

INIEXTS                                   NOT NULL NUMBER

MINEXTS                                   NOT NULL NUMBER

MAXEXTS                                   NOT NULL NUMBER

EXTSIZE                                   NOT NULL NUMBER

EXTPCT                                    NOT NULL NUMBER

USER#                                     NOT NULL NUMBER

LISTS                                              NUMBER

GROUPS                                             NUMBER

BITMAPRANGES                              NOT NULL NUMBER

CACHEHINT                                 NOT NULL NUMBER

SCANHINT                                  NOT NULL NUMBER

HWMINCR                                   NOT NULL NUMBER

SPARE1                                             NUMBER

SPARE2                                             NUMBER

SQL> SELECT COUNT(*), NVL(SUM(BLOCKS), 0) FROM SYS.SEG$ WHERE USER# = 34;

  COUNT(*) NVL(SUM(BLOCKS),0)

---------- ------------------

     60258           22341792

OK, then I could reproduce the error as user SAPSR3:

% sqlplus

SQL*Plus: Release 11.2.0.3.0 Production on Tue Apr 21 09:34:50 2015

Copyright (c) 1982, 2011, Oracle.  All rights reserved.

Enter user-name: SAPSR3

Enter password:

Connected to:

Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production

With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL> SELECT COUNT(*), NVL(SUM(BLOCKS), 0) FROM SYS.SEG$ WHERE USER# = 34;

SELECT COUNT(*), NVL(SUM(BLOCKS), 0) FROM SYS.SEG$ WHERE USER# = 34

                                              *

ERROR at line 1:

ORA-00942: table or view does not exist

So, there is something wrong with SAPSR3... Any ideas please ?

[Former Member]

Hey,

That looks like a issue with role sapdba as it is this role that has grants on various sys.* objects

Run (as orasid) on DB Zone (assuming your SAP directories are mounted on the DB Zone. If NOT then you'll need to copy the script sapdba_role.sql from your "cdexe" directory )

I understand that you might feel you are going around in circles. Remember, your initial errors were different.

Give the sapdba_role a try again and logoff/logon again after successful execution of the script and do your brconnect check again.

KR,

A.

Message was edited by: Amerjit CHAHAL

[symon_braunbaer]

OK, I am obviously typing faster than I am thinking 🙂 I easily fixed that by

SQL> grant select on SYS.SEG$ to SAPSR3;

I have also deleted the plain-text password and put it encrypted in the secure store. Now brconnect -u // -f check FINALLY works !! Just that the script sapconn_role.sql has to be executed every time before working with BR*Tools!! And actually, even after implementing SSFS, this problem is still persisting, so the main question in this thread remains still open 😕

[symon_braunbaer]

Hi, yes, your assumptions are right, but this is my problem. When executed, sapconn_role.sql and sapdba_role.sql work only in the current session. Once you log out, it is over. For the next login, the scripts have to be executed again... This is why I have opened this thread.

[fschoen]

Hi Symon

Good to know that one issue has been solved

Symon Braunbaer wrote:

Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

Are you now on Oracle 12c or 11g?

Can you please run the following SQL statement and let us know the output?

select grantee, granted_role, default_role from dba_role_privs where granted_role ='SAPDBA' order by grantee;

regards

fabian

[Former Member]

Symon,

I have been following the thread sufficiently to understand the problem. The thing is that soooooo many changes have been made I wanted to validate it one more time.

A.

[Former Member]

Hey Fabian,

That seems to be the underlying problem.

He executes the sapdba/sapconn roles and it would seem from what Symon is telling us is that the changes are only persisted for his current session.

He logs off and the role assignments are apparently lost.

In any case, that's what I have understood he is describing.

Cheers,

Amerjit

[symon_braunbaer]

Hi Fabian, still on 11g, doing the pre-actions for the upgrade now. Here is the output of the query:

SQL> select grantee, granted_role, default_role from dba_role_privs where granted_role ='SAPDBA' order by grantee;

GRANTEE                        GRANTED_ROLE                   DEF

------------------------------ ------------------------------ ---

OPS$ORACLE                     SAPDBA                         YES

OPS$ORA<SID>                     SAPDBA                         YES

OPS$SAPSERVICE<SID_of_PRD>              SAPDBA                         YES

OPS$SGWADM                     SAPDBA                         YES

OPS$<SID>ADM                     SAPDBA                         YES

SYS                            SAPDBA                         YES

SYSTEM                         SAPDBA                         YES

[symon_braunbaer]

Yes, thank you, I sincerely apologize if I sounded rude at any point!

[symon_braunbaer]

I confirm this. Thanks!

[Former Member]

Symon,

You weren't 🙂 ... Maybe it's just my humour that doesn't travel 🙂

Amerjit

[fschoen]

Hi Symon

For me the situation is quite strange. If you run the .sql scripts for SAPCONN and SAPDBA properly they should be permanent. I don't see any reason, why Oracle db should "change" it dynamically. When a role has be granted, then it is assigned, as long nobody revoke them.

So. Let me try to summarize the status.

A)

brconnect -u / -f check

Is working as expected multiple times?

B)

brconnect -u // -f check

Is working only if you run before sapconn_role.sql?

What if you call the "brconnect -u // " multiple times without running the .sql? Does it always fail or just randomly?

C)

/oracle/<SID>/security/rsecssfs/data/SSFS_<SID>.DAT

This directory exists on the database server?

D)

sqlplus /nolog @sapdba_role SR3

You run this .sql against the database and the .log doesn't contains any error?

E)

brspace -u / -f dbshow

Just as a test. The command above does work? Also with double slashes // ?

F)

Are you using Oracle RAC in the background or others?

G)

When you are executing brconnect... as which databases user are you connected on the database? ops$oracle?

...)

Z)

Btw: As which operating system user are you starting brconnect on the database server? <sid>adm?

regards

fabian

[symon_braunbaer]

Hello everybody,

I finished the upgrade to 12c, it went quite smooth 😉

Now, having a bit more free time, I wanted to go back to this thread and sort out the issue.

So, I started checking again, and under both oraSID and SIDadm users, the brconnect

command works just fine, with / and even with // !!

I didn't do anything specific to fix it, it just got solved by itself after the upgrade. I will

leave the thread still open and unresolved, until I finish a few more upgrades and see

whether the issue will occur on other systems as well!

Thanks a lot to all of you!

[Former Member]

Hi Amerjit

I have successfully upgrade oracle 10G to 12C on Windows Server 2008R2 and configured SSFS as per the Note -1639578 but while running the brconnect -u // -c -f stats -t system_stats i am getting below error.

C:\Users\<SIDADM>brconnect -u // -c -f stats -t system_stats

BR0801I BRCONNECT 7.40 (15)

BR0282E Directory 'E:\oracle\<SID>\security\rsecssfs\data' not found

BR1529E Getting BR*Tools user name/password from secure storage failed

BR0806I End of BRCONNECT processing: ceqtdwky.log 2015-06-17 10:02:28

BR0280I BRCONNECT time stamp: 2015-06-17 10:02:28

BR0804I BRCONNECT terminated with errors

According to Note i have created/configured \security\rsecssfs\data and \security\rsecssfs\key in global directory Drive:\usr\sap\<SID>\SYS\global\security\rsecssfs but its searching rsecssfs data in E:\oracle\<SID>\security\rsecssfs location, even all Var and Profile are configured as per the note.

Please help.

[former_member182657]

Hi Swalay,

Could you share parameter value for RSEC_SSFS_DATAPATH.

Regards,

[Former Member]

Hi Gaurav,

Please find the below detail.

rsec/ssfs_datapath

E:\usr\sap\SID\SYS\global\security\rsecssfs\data

rsec/ssfs_keypath

E:\usr\sap\SID\SYS\global\security\rsecssfs\key

Rgds/Swalay

[former_member182657]

Hi,

Could you share brconnect logs too.If possible try to restart the system to check again.

Regards,

[Former Member]

Hi Gaurav,

If i run default brconnect "brconnect -u / -c -f stats -t system_stats" command it works and create a log, but new method "brconnect -u // -c -f stats -t system_stats" did't generate a error log :

please find the below brconnect.log for default brconnect.

BR0801I BRCONNECT 7.40 (15)

BR0805I Start of BRCONNECT processing: ceqtengo.sta 2015-06-17 13:12:06

BR0484I BRCONNECT log file: E:\oracle\SID\sapcheck\ceqtengo.sta

BR0101I Parameters

Name                           Value

oracle_sid                     SID

oracle_home                    E:\oracle\oraclehome01\SID\02

oracle_profile                 E:\oracle\oraclehome01\SID\12102\database\initSID.ora

sapdata_home                   E:\oracle\SID

sap_profile                    E:\oracle\oraclehome01\SID\12102\database\initSID.sap

system_info                    NEWSYS\sidadm NEWSYS Windows 6.1 Build 7601 Service Pack 1 AMD64

oracle_info                    ECQ 12.1.0.2.0 8192 789 9508523 NEWECQ UTF8 UTF8 1837215166 &ECQ

sap_info                       700 SAPSR3 ECQ TEMPLICENSE R3_ORA INITIAL

make_info                      NTAMD64 OCI_11201_SHARE Mar 30 2015 741_REL

command_line                   brconnect -u / -c -f stats -t system_stats

br_env                         JAVA_HOME=C:\j2sdk1.4.2_17-x64,

                               NLS_LANG=AMERICAN_AMERICA.UTF8,

                               ORACLE_HOME=E:\oracle\oraclehome01\SID\12102,

                               ORACLE_SID=SID,

                               SAPDATA_HOME=E:\oracle\SID,

                               SAPEXE=E:\usr\sap\SID\SYS\exe\uc\NTAMD64,

                               SAPSYSTEMNAME=SID,

                               TNS_ADMIN=\\NEWSYS\sapmnt\SID\SYS\profile\oracle

stats_table                    SYSTEM_STATS

stats_system_interval          0

BR0280I BRCONNECT time stamp: 2015-06-17 13:12:10

BR0807I Name of database instance: ECQ

BR0808I BRCONNECT action ID: ceqtengo

BR0809I BRCONNECT function ID: sta

BR0810I BRCONNECT function: stats

BR0812I Database objects for processing: SYSTEM_STATS

BR0997I System statistics will be collected with 'NOWORKLOAD' option

BR0126I Unattended mode active - no operator confirmation required

BR0280I BRCONNECT time stamp: 2015-06-17 13:12:10

BR0992I Starting collection of system statistics with option/interval NOWORKLOAD ...

BR0280I BRCONNECT time stamp: 2015-06-17 13:13:38

BR0993I Collection of system statistics completed

BR0806I End of BRCONNECT processing: ceqtengo.sta 2015-06-17 13:13:38

BR0280I BRCONNECT time stamp: 2015-06-17 13:13:38

BR0802I BRCONNECT completed successfully

Rgds/Swalay

[former_member182657]

Hi,

I would like to check trans.log file from the system to check for parameter rsdb/ssfs_connect .It should be set with value as 1.

Regards,

[Former Member]

Hi,

Yes rsdb/ssfs_connect  Profile parameter and Env Var. rsdb_ssfs_connect value set to 1

Rgds/Swalay

[former_member182657]

Hi,

Please share trans.log file.

Regards,

[Former Member]

Hi Gaurav,

Below is the R3trans -d output, which is 0000.

C:\Users\SIDADM>R3trans -d

This is R3trans version 6.24 (release 721 - 12.05.15 - 20:15:05).

unicode enabled version

R3trans=>sapparam(1c): No Profile used.

R3trans=>sapparam: SAPSYSTEMNAME neither in Profile nor in Commandline

R3trans finished (0000).

Rgds/Swalay

[former_member182657]

Hi Swalay,

R3tarns -d will generate trans.log file on the system.Kindly share the file.

Regards,

[Former Member]

Hi Gaurav,

Good Mrng, Please find the attached trans.log below.

4 ETW000 R3trans version 6.24 (release 721 - 12.05.15 - 20:15:05).

4 ETW000 unicode enabled version

4 ETW000 ===============================================

4 ETW000

4 ETW000 date&time   : 17.06.2015 - 15:05:33

4 ETW000 control file: r3trans.log

4 ETW000 R3trans was called as follows: R3trans -d r3trans.log

4 ETW000  trace at level 1 opened for a given file pointer

4 ETW000  [     dev trc,00000]  Wed Jun 17 15:05:33 2015

4 ETW000  [     dev trc,00000]  Loading DB library 'dboraslib.dll' ...

4 ETW000  [     dev trc,00000]  Library 'dboraslib.dll' loaded

4 ETW000  [     dev trc,00000]  Version of 'dboraslib.dll' is "721.02", patchlevel (0.419)

4 ETW000  [     dev trc,00000]  con_info_ext_support(): DBSL supports extended connect protocol

4 ETW000                          ==> connect info for default DB will be read from ssfs

4 ETW000  [     dev trc,00000]  dbs/ora/stmt_cache_size = 250

4 ETW000  [     dev trc,00000]  Register application info.

4 ETW000  [     dev trc,00000]  Oracle client version: 12.1.0.2.0, (dbsl 721 030315, UNICODE[2])

4 ETW000  [     dev trc,00000]  Detailed Oracle client (patch) info not available.

4 ETW000  [     dev trc,00000]  Client NLS setting (by OCINlsGetInfo(con=0)): 'AMERICAN_AMERICA.UTF16'

4 ETW000  [     dev trc,00000]  Connecting as SAPSR3/<pwd>@<SID> on connection 0 (nls 0) ... (dbsl 721 030315, UNICODE[2])

4 ETW000  [     dev trc,00000]  OCIHandleAlloc(con=0): Service svc=0B1DC9F8 created, rc=0

4 ETW000  [     dev trc,00000]  OCIServerAttach(con=0, svc=0B1DC9F8): New server hdl. srv=0B1DCDB0 attached to '<SID>'

4 ETW000  [     dev trc,00000]  OCISessionBegin(con=0, svc=0B1DC9F8, srv=0B1DCDB0='<SID>'): start session usr=0B2F6880='SAPSR3', rc=0

4 ETW000  [     dev trc,00000]  Now 'SAPSR3/<pwd>@SID' is connected: con=0, nls=0, session=76, time='2015-06-17 15:05:33'

4 ETW000  [     dev trc,00000]  DB instance <SID> is running on NEWSYS with ORACLE version 12.1.0.2.0 since JUN 16, 2015, 15:21:14.

4 ETW000  [     dev trc,00000]  con=0, V$NLS_PARAMETERS: NLS_LANG=AMERICAN_AMERICA.UTF8, NLS_NCHAR=UTF8

4 ETW000  [     dev trc,00000]   # CharacterSet                   NCharSet   envhp            errhp            er2hp            bathp          

4 ETW000  [     dev trc,00000]   0 UTF16                          AL16UTF16  0B1B18A0         0B1D8AE0         0B1D9B60         0B1DABE0       

4 ETW000  [     dev trc,00000]  Connection 0 opened (DBSL handle 0)

4 ETW000  [     dev trc,00000]     DbSlControl(DBSL_CMD_SAPRELEASE_SET,abap='700')

4 ETW000  [     dev trc,00000]  NTAB: version is VERS_B, UNICODELG=2, SAP_UC_LN=2

4 ETW000 Connected to DBMS = ORACLE --- dbs_ora_tnsname = '<SID>' --- SYSTEM = 'ECQ'.

4 ETW690 COMMIT "0" "0"

4 ETW000  trace to file pointer closed

4 ETW000  trace at level 1 opened for a given file pointer

4 ETW000

4 ETW000 ================== STEP 1 =====================

4 ETW000 date&time        : 17.06.2015 - 15:05:33

4 ETW000 function         : CONNECT

4 ETW000 buffersync       : YES

4 ETW000 clients          : default

4 ETW000 commit           : 100000

4 ETW000 table cache      : dynamic

4 ETW000

4 ETW000  [     dev trc,00000]  Disconnecting from ALL connections:

4 ETW000  [     dev trc,00000]  dbcon[db_con_disconnect_all]: disconnecting from connection 0 ...

4 ETW000  [     dev trc,00000]  Disconnecting con=0

4 ETW000  [     dev trc,00000]  OCISessionEnd(con=0, svc=0B1DC9F8, srv=0B1DCDB0='ECQ'): Close session usr=0B2F6880, rc=0

4 ETW000  [     dev trc,00000]  OCIServerDetach(stale1 con=0, svc=0B1DC9F8, srv=0B1DCDB0='ECQ') successfully detached

4 ETW000  [     dev trc,00000]  OCIHandleFree(con=0, svc=0B1DC9F8): Server handle srv=0B1DCDB0 freed

4 ETW000  [     dev trc,00000]  OCIHandleFree(con=0): Service hdl. svc=0B1DC9F8 freed.

4 ETW000  [     dev trc,00000]  dbcon[db_con_disconnect_all]: disconnected from connection 0

4 ETW000  [     dev trc,00000]  statistics db_con_commit (com_total=1, com_tx=1)

4 ETW000  [     dev trc,00000]  statistics db_con_rollback (roll_total=0, roll_tx=0)

4 ETW000 Disconnected from database.

4 ETW000 End of Transport (0000).

4 ETW000 date&time: 17.06.2015 - 15:05:33

Regards,

[former_member182657]

Hi Symon,

OS> brconnect -u / -f check
OS> brbackup -u / -q

Unfortunately, these commands are failing:

For the issue i would suggest you to follow SAP Notes  1764043 - Support for secure storage in BR*Tools

&  1914631 - Central Technical Note for Oracle Database 12c Release 1 (12.1)

as you're already using latest br*tools version,so instead of

brconnect -u / -f check

try to execute it as like

brconnect -u // -f check

Hope this would resolve your issue.

Good luck !!

[symon_braunbaer]

Hi Gaurav,

yep, but the double-slash (//) convention is for SSFS, I did not enable that yet...