2 Replies Latest reply: Dec 9, 2012 12:08 AM by Osama_Mustafa RSS

    ORA-01031: insufficient privileges using brbackup with rman in SAP

    user11987810
      hi,
      We are getting error ORA-01031: insufficient privileges in SAP when running the below command on Solaris 10 and we have run sapdba_role.sql sapconn_role.sql

      /usr/sap/BQ2/SYS/exe/run/brbackup -u /

      and below are the BR files permission

      -rwsrwxr-x 1 orabq2 dba 6524528 Mar 5 2012 brarchive
      -rwsrwxr-x 1 orabq2 dba 6763216 Mar 5 2012 brbackup
      -rwsrwxr-x 1 orabq2 sapsys 8966536 Mar 5 2012 brconnect
      -rwxr-xr-x 1 bq2adm sapsys 7271040 Mar 5 2012 brrecover
      -rwxr-xr-x 1 bq2adm sapsys 2766184 Mar 5 2012 brrestore
      -rwxr-xr-x 1 bq2adm sapsys 9665480 Mar 5 2012 brspace
      -rwxr-xr-x 1 bq2adm sapsys 3345016 Mar 5 2012 brtools

      and below are the id groups

      orabq2 is under below groups
      dba oper sapsys sapinst cmplr

      bq2adm is under below groups
      sapsys oper dba

      and we can connect fine with sqlplus using sysdba and below is the log of the error and if any one have any idea causing the issue


      BR0280I BRBACKUP time stamp: 2012-12-05 01.03.53
      BR0505I Full database backup (level 0) using RMAN successful


      BR0280I BRBACKUP time stamp: 2012-12-05 01.03.55
      BR0530I Cataloging backups of all database files to database BQ2/PRIMARY ...
      BR0278E Command output of 'SHELL=/bin/sh /oracle/BQ2/112_64/bin/rman nocatalog':


      Recovery Manager: Release 11.2.0.2.0 - Production on Wed Dec 5 01:03:55 2012


      Copyright (c) 1982, 2009, Oracle and/or its affiliates. All rights reserved.


      RMAN>
      RMAN> connect target *
      RMAN-00571: ===========================================================
      RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
      RMAN-00571: ===========================================================
      ORA-01031: insufficient privileges


      RMAN> **end-of-file**


      RMAN>
      host command complete

      thanks
        • 1. Re: ORA-01031: insufficient privileges using brbackup with rman in SAP
          jgarry
          user11987810 wrote:
          hi,
          We are getting error ORA-01031: insufficient privileges in SAP when running the below command on Solaris 10 and we have run sapdba_role.sql sapconn_role.sql

          /usr/sap/BQ2/SYS/exe/run/brbackup -u /

          and below are the BR files permission
          It's much easier to read if you use {noformat}
          {noformat} tags.  
          >
          -rwsrwxr-x 1 orabq2 dba 6524528 Mar 5 2012 brarchive
          -rwsrwxr-x 1 orabq2 dba 6763216 Mar 5 2012 brbackup
          -rwsrwxr-x 1 orabq2 sapsys 8966536 Mar 5 2012 brconnect
          -rwxr-xr-x 1 bq2adm sapsys 7271040 Mar 5 2012 brrecover
          -rwxr-xr-x 1 bq2adm sapsys 2766184 Mar 5 2012 brrestore
          -rwxr-xr-x 1 bq2adm sapsys 9665480 Mar 5 2012 brspace
          -rwxr-xr-x 1 bq2adm sapsys 3345016 Mar 5 2012 brtools

          and below are the id groups

          orabq2 is under below groups
          dba oper sapsys sapinst cmplr

          bq2adm is under below groups
          sapsys oper dba

          and we can connect fine with sqlplus using sysdba and below is the log of the error and if any one have any idea causing the issue


          BR0280I BRBACKUP time stamp: 2012-12-05 01.03.53
          BR0505I Full database backup (level 0) using RMAN successful


          BR0280I BRBACKUP time stamp: 2012-12-05 01.03.55
          BR0530I Cataloging backups of all database files to database BQ2/PRIMARY ...
          BR0278E Command output of 'SHELL=/bin/sh /oracle/BQ2/112_64/bin/rman nocatalog':


          Recovery Manager: Release 11.2.0.2.0 - Production on Wed Dec 5 01:03:55 2012


          Copyright (c) 1982, 2009, Oracle and/or its affiliates. All rights reserved.


          RMAN>
          RMAN> connect target *
          RMAN-00571: ===========================================================
          RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
          RMAN-00571: ===========================================================
          ORA-01031: insufficient privileges


          RMAN> **end-of-file**


          RMAN>
          host command complete
          >
          
          thanks
          Don't know anything about SAP, but I suspect the issue here is confusion between SAP and Oracle sysoper or sysdba privilges.  When you use the sqlplus / as sysdba, the operating system login is checked against the groups to be sure that login is part of the dba group.  I don't know what is in the sapdba role, but I would expect it is just granting Oracle privileges.  So whoever the operating system thinks is running the br* stuff needs to be part of the dba group to do this (or more rationally, check the Oracle docs about the osoper group).  The latter details may vary by version, so always remember to post the Oracle version number, which would look like 10.2.0.5, not 10gR2. There may be better response in an SAP group.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
          • 2. Re: ORA-01031: insufficient privileges using brbackup with rman in SAP
            Osama_Mustafa
            Refer to this Document :
            http://help.sap.com/saphelp_nw04/helpdata/en/0e/f10a7443d711d29fef0000e8a5ae06/content.htm