Error when configuring SLT Replication to multiple schemas in one HANA DB

[THorton]

Hi,

I have set up a SAP HANA side car database.  We would like to replicate data from ERP, SCM and CRM into this database.  I have created 3 schemas - one each for the ERP, SCM and CRM systems.  I was able to successfully set up SLT Replication for the first system (ERP) in the ERP schema.  However, now I am trying to create a new configuration in LTR to establish replication for the other two systems, pointing to the SCM and CRM schemas, and I am getting an "insufficient privilege: Not authorized" error.

On the SLT Replication server, I found the following in the /usr/sap/<SID>/DVEBMGS##/work/dev_## file:

C  Attach to HDB : 1.00.091.00.1418659308 (fa/newdb100_rel)

C  Database release is HDB 1.00.091.00.1418659308

C  INFO : Database 'SBX/00' instance is running on '<hana side car db>'

C  INFO : Connect to DB as 'CRM', connection_id=212490

C  INFO : FDA feature is supported by HANA

C  INFO : FAE with FDA feature is supported by HANA

C  DB max. input host variables  : 32767

C  DB max. statement length      : 104857600

C  DB max. array size            : 100000

C  use decimal precision as length

C  ABAPVARCHARMODE is used

C  INFO : DBSL buffer size = 1048576

C  Command info enabled

C  Now I'm connected to HDB

C  00: <SLT server>-SLT/20, since=20150415134928, ABAP= <unknown> (0)

C  01: <hana side car db>-SBX/00, since=20150421204842, ABAP= CL_SQL_CONNECTION=============CP (320)

B  Connection 1 opened (DBSL handle 1)

C

C  *** ERROR =>   execute(), rc=1, rcSQL=258

[dbsdbsql.cpp 1055]

C  {root-id=0A38A17B674D1ED4BA8CA8E95A8870E2}_{conn-id=0A38A17B674D1ED4BA8CA56FB9F2B0DF}_1

C  *** ERROR => EXECUTE on connection 1, rc=258

[dbslsdb.cpp  3678]

C  SQLCODE    : 258

C  SQLERRTEXT : insufficient privilege: Not authorized

C  SQL COMMAND: DROP PUBLIC SYNONYM "/1CADMC/S0000201" ;

B  ***LOG BY2=> sql error 258 performing EXE [dbds         670]

B  ***LOG BY0=> insufficient privilege: Not authorized [dbds         670]

C  Disconnecting from connection 1 ...

C  Now I'm disconnected from HDB

C  00: <SLT server>-SLT/20, since=20150415134928, ABAP= <unknown> (0)

B  Disconnected from connection 1, con_da={020:R:R,37000329}

B  Connect to 020:R:R as CRM with <hana side car db>:30015

C  Try to connect as CRM/<pwd>@<hana side car db>:30015 on connection 1 ...

C  Attach to HDB : 1.00.091.00.1418659308 (fa/newdb100_rel)

C  Database release is HDB 1.00.091.00.1418659308

C  INFO : Database 'SBX/00' instance is running on '<hana side car db>'

C  INFO : Connect to DB as 'CRM', connection_id=212491

C  INFO : FDA feature is supported by HANA

C  INFO : FAE with FDA feature is supported by HANA

C  DB max. input host variables  : 32767

C  DB max. statement length      : 104857600

C  DB max. array size            : 100000

C  use decimal precision as length

C  ABAPVARCHARMODE is used

In HANA Studio, I filtered on /1CADMC/S0000201  (referenced above) under Catalog and found that this public synonym already exists and is associated with the existing ERP schema.  What do I need to do in order to successfully create a configuration to replicate from the other two systems?

Thanks in advance for any assistance!

Best Regards,

Tommye Horton

[former_member256353 · Accepted solution]

Hi Tommye,

I have a very similar setup - using the sidecar with CRM&ERP.

Now, your error seems to be related to authorizations in the source system.

Has the "user" connecting to the source systems enough authorizations in your SCM&CRM?

Trace the user in the source systems and then assign him the necessary rights.

I suggest to check the SLT guide - especially this

http://help.sap.com/hana/SAP_HANA_Security_Guide_Trigger_Based_Replication_SLT_en.pdf

Regards

Greg

[THorton · Accepted solution]

Hi Greg,

Thank you for your response.

For the DBACOCKPIT database connection, I am using SAPSR3 to connect to the CRM and SCM source system databases.  This user is the schema owner for tablespace PSAPSR3, so I would expect the user to have sufficient privileges.

For the RFC Destination, I am using a CPIC user that has been granted the SAP_IUUC_REPL_REMOTE role.

The "/1CADMC/S0000201" object referenced in the error does not exist in the source system; it exists in the HANA DB.  Therefore, I agree that there is an authorization issue, but I think it may be within the HANA DB.

Thanks again for your help.

Best Regards,

Tommye

[former_member256353 · Accepted solution]

Hi Tommye,

well if its not the source system, lets try it on HANA side.

What privileges does the user you use have in Hana?

I use the user "SYSTEM" to connect SLT to HANA.

Does your user have the analytic privilege "_SYS_BI_CP_ALL" ?

Has the user the object privilege "_SYS_BIC"?

Furthermore I've found something that might help you:

Extend the privileges of user SAP<SID>:

1. HANA Studio -> Security -> Users -> SAP<SID>
2. Go to tab 'Object Privileges' and add object 'GET_OBJECT_VERSION' with the 'EXECUTE' privileges.

Hope this helps you tracking down the issue.

Regards

Greg

[THorton · Accepted solution]

Greg,

I am also using "SYSTEM" to connect SLT to HANA.

The SYSTEM user has "Object Privilege" "GET_OBJECT_VERSION' with "EXECUTE" privileges.  It does not have "Analytic Privilege" "_SYS_BI_CP_ALL" ? nor "Object Privilege" "_SYS_BIC".  Did you have to add these privileges to SYSTEM to get the replication mulitple schemas to work?

Thanks again for all of your help!

Best Regards,

Greg