Backups/Archivelogs triggered via DB13 hitting errors at TSM(Tivoli) level.

[Former Member]

We are encountering problem with our redolog/online backups that are triggered

via DB13 whereby we will

receive this error message in the logs before a failure message:

BKI5014E: Tivoli Storage Manager Error:

ANS1087E (RC106) Access to the specified file or directory is denied

We have checked with the OS side and it seems that the permissions for

all the accesses are fine. However, when we tried to manually enter the

BRARCHIVE/BRBACKUP command in the OS (AIX) the thing seems to work fine. Although we can trigger it manually in the OS, but we cannot track it through

DB13, or even schedule it, as it will continue to hit the said access error.

Thanks.

[Former Member]

Hi ,

I'm facing the same error wherein I'm unable to schedule archival of redologs from db13 but its working fine from brtools.

I'm getting the below error

BKI2027I: Using TSM-API version 5.3.2.0 (compiled with 5.3.0.0).

BKI2000I: Successfully connected to ProLE on port tdpr3ora64.

BKI0005I: Start of program at: Mon Dec 20 07:02:57 GMT 2010 .

BKI5014E: Tivoli Storage Manager Error:

ANS1087E (RC106) Access to the specified file or directory is denied

The permissions are as follows:

-rwsrwxr-x 1 oraSID sapsys brbackup

-rwsrwxr-x 1 oraSID sapsys brarchive

-rwsrwxr-x 1 oraSID sapsys brtools

I also changed the permission for ERRORLOGNAME in dsm.sys

Still getting the same error. Please help.

[Former Member]

Check www-01.ibm.com/support/docview.wss?uid=swg21218576

[Former Member]

Hi Sunil,

I've already tried that. The backint command is running fine and is gining the return code 0. The redo-log backup is running fine when scheduled through crontab or brtools. The problem arises when I'm trying to schedule it from db13. I'm guessing that there is some permission error , but I cannot pin point where. I've tried assigning the correct permissions to

/oracle/SID,

/oracle/SID/saparch,

/oracle/SID/saparch/archSID/log,

dsm.sys,

dsm.opt,

initSID.utl,

initSID.bki,

initSID.ora,

initSID.sap,

backint,

backfm,

brrestore,

brbackup,

brconnect,

brtools,

brrecover,

brspace.

I've also assigned correct permission to the errorlog, whose entry is maintained in dsm.sys.

Still, its not working.

Please help.

Thanks,

Riya Sarkar

[Former Member]

We also had a similar problem -

backups happening ok using orasid bur failing with sidadm.

In addition to ownership of backfm and backint, we also checked dsm.sys which had parameters schedlogname and errorlogname. One of the files had incorrect file permissions.

Once we set permissions to 775 to these files, problem got resolved.

Thanks,

Vaibhav

[Former Member]

Dear Kelvin,

Please reply whether you were able to solve the issue of scheduling a backup from DB13 in SAP?

We are also facing the same issue, we are able to take the backup from BRTOOLS in TSM.

We tried changing the permissions of BRTOOLS utilities from /sapmnt/SID/exe path. Even then the backup fails with the same message, please find below the logs.

BR0280I BRBACKUP time stamp: 2010-08-28 19.23.45

BR0315I 'Alter database begin backup' successful

BR0280I BRBACKUP time stamp: 2010-08-28 19.23.45

BR0229I Calling backup utility with function 'backup'...

BR0278I Command output of '/usr/sap/BSM/SYS/exe/run/backint -u BSM -f backup -i /oracle/BSM/sapbackup/.bedzpjrz.lst -t file -p /oracle/BSM/102_64/dbs/initBSM.utl -c':

Data Protection for SAP(R)

Interface between BR*Tools and Tivoli Storage Manager

- Version 6, Release 1, Modification 0.0 for AIX LF 64-bit -

Build: 358 compiled on Nov 4 2008

(c) Copyright IBM Corporation, 1996, 2008, All Rights Reserved.

BKI5014E: Tivoli Storage Manager Error:

ANS1087E (RC106) Access to the specified file or directory is denied

BKI0020I: End of program at: Sat Aug 28 19:23:45 GMT06:00 2010 .+

BKI0021I: Elapsed time: 00 sec .

BKI0024I: Return code is: 2.

BR0280I BRBACKUP time stamp: 2010-08-28 19.23.45

BR0279E Return code from '/usr/sap/BSM/SYS/exe/run/backint -u BSM -f backup -i /oracle/BSM/sapbackup/.bedzpjrz.lst -t file -p /oracle/BSM/102_64/dbs/initBSM.utl -c': 2

BR0232E 0 of 32 files saved by backup utility

BR0280I BRBACKUP time stamp: 2010-08-28 19.23.45

BR0231E Backup utility call failed

BR0280I BRBACKUP time stamp: 2010-08-28 19.23.48

BR0317I 'Alter database end backup' successful

BR0056I End of database backup: bedzpjrz.anf 2010-08-28 19.23.45

BR0280I BRBACKUP time stamp: 2010-08-28 19.23.48

BR0054I BRBACKUP terminated with errors

BR0280I BRBACKUP time stamp: 2010-08-28 19.23.48

BR0291I BRARCHIVE will be started with options '-U -jid ALLOG20100828192343 -d util_file -c force -p initBSM.sap -cds'

BR0280I BRBACKUP time stamp: 2010-08-28 19.23.49

BR0292I Execution of BRARCHIVE finished with return code 5

file permissions for BRTOOLS files,

SAPSOLMAN:bsmadm 2> cd /sapmnt/BSM/exe

SAPSOLMAN:bsmadm 3> ls -ltr br*

-rwsrwxr-x 1 orabsm dba 2132759 Feb 21 2009 brrestore

-rwsrwxr-x 1 orabsm dba 2785581 Feb 23 2009 brtools

-rwsrwxr-x 1 orabsm dba 5074068 Feb 25 2009 brarchive

-rwsrwxr-x 1 orabsm dba 6786275 Feb 25 2009 brconnect

-rwsrwxr-x 1 orabsm dba 5202913 Feb 25 2009 brbackup

-rwsrwxr-x 1 orabsm dba 5670503 Feb 25 2009 brrecover

-rwsrwxr-x 1 orabsm dba 6996331 Feb 25 2009 brspace

SAPSOLMAN:bsmadm 4>

Please help us in solving this error.

Thank you

Regards,

Vineeth

Edited by: Vineeth Damodar on Aug 30, 2010 1:09 PM

[former_member546548]

Dear all,

we got the same Problem:

TDP / TSM send error

ANS1087E (RC106) Access to the specified file or directory is denied

when starting brbackup as user adm.

I set group-menbership to "dba" and set them group-writable.

That works. To own br*-Prgs to root and set them suid was not necessary.

How to find out which Logfiles TDP uses:

Look at /usr/tivoli/tsm/client/api/bin64 bzw. /opt/tivoli/tsm/client/api/bin64 into dsm.opt which "Servername" Entry you are using.

Then into dsm.sys about the whole record.

In our case I see the Parameters:

ERRORLOGNAME /var/log/tsm/dsmerror_d01.log

SCHEDLOGNAME /var/log/tsm/dsmsched_d01.log

These differ from the TSM-Filebackup ( in our case).

IBM should add a debug mode, to let us know WHICH File is not accessible in such cases.

Ruediger

Edited by: Rüdiger Schenk on Jul 15, 2010 4:21 PM

[Former Member]

Hi,

It seems the problem is with permission of backfm & backint files of tdp client (TSM).

check the permission, it should be 4775 and owner should be

root:system

Regards,

Sachin Rane

[former_member204746]

provide contents from initSID.utl

[Former Member]

Hi:

We are using TDP (Tivoli Data Protection for SAP) 5.5 with Windows 2003 and Oracle 10.2.0.2. We can execute backup jobs through command like after implementation of TDP but when we are trying to execute from DB13 it is giving following error.

BR0059I BRBACKUP function ID: anf

BR0110I Backup mode: ALL

BR0077I Database file for backup: F:\oracle\TST\sapbackup\CNTRLTST.DBF

BR0061I 16 files found for backup, total size 22582.195 MB

BR0143I Backup type: online

BR0130I Backup device type: util_file_online

BR0109I Files will be saved by backup utility

BR0142I Files will be switched to backup status during the backup

BR0134I Unattended mode with 'force' active - no operator confirmation allowed

BR0280I BRBACKUP time stamp: 2009-01-25 12.04.43

BR0229I Calling backup utility with function 'backup'...

BR0278I Command output of 'D:\usr\sap\TST\SYS\exe\uc\NTAMD64\backint.exe -u TST -f backup -i F:\oracle\TST\sapbackup\.bdztzjue.lst -t file_onl

Data Protection for SAP(R)

Interface between BR*Tools and Tivoli Storage Manager

- Version 5, Release 5, Modification 0.0 for Win x64 -

Build: 316D compiled on Nov 5 2007

(c) Copyright IBM Corporation, 1996, 2007, All Rights Reserved.

BKI5014E: Tivoli Storage Manager Error:

ANS1087E (RC106) Access to the specified file or directory is denied

BKI0405I: TDP waited 0 sec. for BRBACKUP in util_file_online communication.

BKI0020I: End of program at: 01/25/09 12:04:43 .

BKI0021I: Elapsed time: 00 sec .

BKI0024I: Return code is: 2.

BR0280I BRBACKUP time stamp: 2009-01-25 12.04.43

BR0279E Return code from 'D:\usr\sap\TST\SYS\exe\uc\NTAMD64\backint.exe -u TST -f backup -i F:\oracle\TST\sapbackup\.bdztzjue.lst -t file_onli

BR0232E 0 of 16 files saved by backup utility

BR0280I BRBACKUP time stamp: 2009-01-25 12.04.43

BR0231E Backup utility call failed

BR0056I End of database backup: bdztzjue.anf 2009-01-25 12.04.43

BR0280I BRBACKUP time stamp: 2009-01-25 12.04.46

BR0054I BRBACKUP terminated with errors

Please help.

Thanks in advance.

Thanks,

Miral.

[Former Member]

miral

i am having exactly the same problem.

we have windows 2003 R2 64 bit and oracle 10.2.0.4 running SAP kernel 7.10 (patch 131)

we installed tsm tdp and now we can schedule backups at the command line but cannot via DB13

did you find an answer to your problem

i have set permissions on C:\Program Files\tivoli and C:\Program File (x86)\tivoli to allow sap user (local and domain) to access the APIs but this hasn't helped

thanks in advance

[Former Member]

Kristy:

Please check system variable for DSMI_LOG and assign that folder access for SAP_<SID>_Globaladmin.

Generally the folder is <Drive>\usr\sap\<SID>\tmp

Please let me know if you have any problem.

Do not forget to revward points if this helps..

Thanks,

Miral.

[former_member204746]

Miral is right, it's use SAPservice[SID] that runs brbackup through DB13, so setting DSMI* vaenvironement variables as system variables will probably fix your issue.

[Former Member]

hi miral

i have set the folder (DSMI_DIR variable) to give sapservice_<SID> permissions, also sap_<sid>_globaladmin as well as sap_localadmin and <sid>adm

this has helped.

(originally i did not give it the 'full control' access but obviously this is required!)

thanks for your help

kirsty

Edited by: Kirsty Howe on Apr 21, 2009 5:49 PM

Edited by: Kirsty Howe on Apr 21, 2009 6:04 PM

[Former Member]

Hi

When we had this same problem we had to change the rights of the folder c:\tsm\log for users to write to it.

Regards

Marcio

[former_member350481]

Hi Kelvin,

We had the same problem like yours.

When we ran the BR commands (brbackup, brarchive) under user orasid everything went well.

When we ran the commands under sidadm we had the same problems.

The db13 jobs using the sidadm user and we solved it when we changed the permissions under /usr/sap/SID.

Please check again the permissions under the /usr/sap/SID and DVEBMGSxx , SYS and subfolders.

I dont know exactly which file or directory to tell you, cross check it with a another system.

Also do not use the "sap nw 04s security guide under unix" because we already did.

Keep this guide as recommendation not as a sap permissions bible.

[markus_doehr2]

Is the owner of brbackup/brachive the user ora<SID> and have those files the sticky bit set?

Markus

[Former Member]

Kelvin,

When you test this function at the OS level, where you hit no issues, which user ID are you using (assuming Oracle here?).

Remember that when you execute from DB13, you are executing the BRTOOLS as sidadm and not orasid. The permissions for these files (BR*) are not set-up correctly out of the box by the installation.

You typically need to assign the user orasid / group sapsys with permissions "4775" on these pieces (BRTOOLS, BRBACKUP, BRBARCHIVE) to allow for successfull DB13 operations.

In as much, you may also want to confirm the relationship of sidadm to the Tivoli group.

Hope this helps.

Tim