This discussion is archived
2 Replies Latest reply: Dec 8, 2012 10:08 PM by Osama_Mustafa RSS

ORA-01031: insufficient privileges using brbackup with rman in SAP

user11987810 Newbie
Currently Being Moderated
hi,
We are getting error ORA-01031: insufficient privileges in SAP when running the below command on Solaris 10 and we have run sapdba_role.sql sapconn_role.sql

/usr/sap/BQ2/SYS/exe/run/brbackup -u /

and below are the BR files permission

-rwsrwxr-x 1 orabq2 dba 6524528 Mar 5 2012 brarchive
-rwsrwxr-x 1 orabq2 dba 6763216 Mar 5 2012 brbackup
-rwsrwxr-x 1 orabq2 sapsys 8966536 Mar 5 2012 brconnect
-rwxr-xr-x 1 bq2adm sapsys 7271040 Mar 5 2012 brrecover
-rwxr-xr-x 1 bq2adm sapsys 2766184 Mar 5 2012 brrestore
-rwxr-xr-x 1 bq2adm sapsys 9665480 Mar 5 2012 brspace
-rwxr-xr-x 1 bq2adm sapsys 3345016 Mar 5 2012 brtools

and below are the id groups

orabq2 is under below groups
dba oper sapsys sapinst cmplr

bq2adm is under below groups
sapsys oper dba

and we can connect fine with sqlplus using sysdba and below is the log of the error and if any one have any idea causing the issue


BR0280I BRBACKUP time stamp: 2012-12-05 01.03.53
BR0505I Full database backup (level 0) using RMAN successful


BR0280I BRBACKUP time stamp: 2012-12-05 01.03.55
BR0530I Cataloging backups of all database files to database BQ2/PRIMARY ...
BR0278E Command output of 'SHELL=/bin/sh /oracle/BQ2/112_64/bin/rman nocatalog':


Recovery Manager: Release 11.2.0.2.0 - Production on Wed Dec 5 01:03:55 2012


Copyright (c) 1982, 2009, Oracle and/or its affiliates. All rights reserved.


RMAN>
RMAN> connect target *
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
ORA-01031: insufficient privileges


RMAN> **end-of-file**


RMAN>
host command complete

thanks
  • 1. Re: ORA-01031: insufficient privileges using brbackup with rman in SAP
    jgarry Guru
    Currently Being Moderated
    user11987810 wrote:
    hi,
    We are getting error ORA-01031: insufficient privileges in SAP when running the below command on Solaris 10 and we have run sapdba_role.sql sapconn_role.sql

    /usr/sap/BQ2/SYS/exe/run/brbackup -u /

    and below are the BR files permission
    It's much easier to read if you use {noformat}
    {noformat} tags.  
    >
    -rwsrwxr-x 1 orabq2 dba 6524528 Mar 5 2012 brarchive
    -rwsrwxr-x 1 orabq2 dba 6763216 Mar 5 2012 brbackup
    -rwsrwxr-x 1 orabq2 sapsys 8966536 Mar 5 2012 brconnect
    -rwxr-xr-x 1 bq2adm sapsys 7271040 Mar 5 2012 brrecover
    -rwxr-xr-x 1 bq2adm sapsys 2766184 Mar 5 2012 brrestore
    -rwxr-xr-x 1 bq2adm sapsys 9665480 Mar 5 2012 brspace
    -rwxr-xr-x 1 bq2adm sapsys 3345016 Mar 5 2012 brtools

    and below are the id groups

    orabq2 is under below groups
    dba oper sapsys sapinst cmplr

    bq2adm is under below groups
    sapsys oper dba

    and we can connect fine with sqlplus using sysdba and below is the log of the error and if any one have any idea causing the issue


    BR0280I BRBACKUP time stamp: 2012-12-05 01.03.53
    BR0505I Full database backup (level 0) using RMAN successful


    BR0280I BRBACKUP time stamp: 2012-12-05 01.03.55
    BR0530I Cataloging backups of all database files to database BQ2/PRIMARY ...
    BR0278E Command output of 'SHELL=/bin/sh /oracle/BQ2/112_64/bin/rman nocatalog':


    Recovery Manager: Release 11.2.0.2.0 - Production on Wed Dec 5 01:03:55 2012


    Copyright (c) 1982, 2009, Oracle and/or its affiliates. All rights reserved.


    RMAN>
    RMAN> connect target *
    RMAN-00571: ===========================================================
    RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
    RMAN-00571: ===========================================================
    ORA-01031: insufficient privileges


    RMAN> **end-of-file**


    RMAN>
    host command complete
    >
    
    thanks
    Don't know anything about SAP, but I suspect the issue here is confusion between SAP and Oracle sysoper or sysdba privilges.  When you use the sqlplus / as sysdba, the operating system login is checked against the groups to be sure that login is part of the dba group.  I don't know what is in the sapdba role, but I would expect it is just granting Oracle privileges.  So whoever the operating system thinks is running the br* stuff needs to be part of the dba group to do this (or more rationally, check the Oracle docs about the osoper group).  The latter details may vary by version, so always remember to post the Oracle version number, which would look like 10.2.0.5, not 10gR2. There may be better response in an SAP group.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
  • 2. Re: ORA-01031: insufficient privileges using brbackup with rman in SAP
    Osama_Mustafa Oracle ACE
    Currently Being Moderated
    Refer to this Document :
    http://help.sap.com/saphelp_nw04/helpdata/en/0e/f10a7443d711d29fef0000e8a5ae06/content.htm

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points