Having problems with your account or logging in?
A lot of changes are happening in the community right now. Some may affect you. READ MORE HERE
ronlevyca Trusted Contributor.
Trusted Contributor.
1664 views

Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Just upgraded from DP 9.09 to DP10.03.  Using Oracle Integration.

Have upgraded the client on the Oracle boxes from 9.09 to 10.03.

Try to run a backup and I get:

[Major] From: ob2rman@oradb6.scdev.businesswire.com "" Time: 04/23/18 18:15:21
The database reported error while performing requested operation.

ERROR:
ORA-01031: insufficient privileges
CONNECT: sys/*****@REPDEVSC6
[Major] From: ob2rman@oradb6.scdev.businesswire.com "" Time: 04/23/18 18:15:21
Backup of target database failed.

 

Password hasn't changed, exactly same password.

0 Likes
1 Solution

Accepted Solutions
Micro Focus Expert
Micro Focus Expert

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Hello All

This modification was included in DP 10.01 and was properly documented into integration and ProductAnnouncements.pdf

 

Username and password for login to the target or
primary database. Note that the user must have the
SYSDBA privilege granted. For Oracle version 12c the
user must have been granted the SYSBACKUP privilege.
Also you can use the user with SYSDBA privilege for
Oracle 12c but first you must set omnirc variable
OB2_ORACLE_USE_SYSDBA to 1.

 

Oracle 12c SYSBACKUP compatibility
Currently, Data Protector Oracle integration uses SYSDBA as requested user privileges to connect to
the database. With the new Oracle 12c version, a new SYSBACKUP user privilege with all required
privileges for backup, restore and recover functionalities are provided. This enhancement enables
SYSBACKUP user privileges to connect to the Oracle database for 12c Oracle version. The older
Oracle versions will continue with the SYSDBA user privileges as before.

 

Best Regards

9 Replies
ronlevyca Trusted Contributor.
Trusted Contributor.

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Database user hasn't changed, exactly same permissions as the day before when it worked.

0 Likes
Highlighted
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Hello ronlevyca,

What is the client operating system and Oracle database version? Can you try to login with sqlplus using the password? Have you tried to reconfigure the integration for this client to see if it works afterwards?

Anything obvious in the debug.log and oracle8.log on the client system?

Regards,
Sebastian Koehler

---
Please use the Like button below, if you find this post useful.
0 Likes
antaln Outstanding Contributor.
Outstanding Contributor.

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Can you attach full session output before and after the upgrade? Comparing output of working and non-working state may yield a difference that causes the issue. Which Oracle version are you using?

0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Hello @ronlevyca,

I found the problem. After upgrade to A.10.03 the Oracle Integration checks if the database is running Oracle 12 or higher. If this is the case the user account used for backup requires the SYSBACKUP privilege.

The connection string used is sqlplus user/password AS SYSBACKUP instead of sqlplus user/password AS SYSDBA.

Regards,
Sebastian Koehler

---
Please use the Like button below, if you find this post useful.
ronlevyca Trusted Contributor.
Trusted Contributor.

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Awesome, will be trying this as soon as my DBA gets back from lunch.

The SYS user has SYSDBA but doesn't have SYSBACKUP so this fits right in with our readout.

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Hello All

This modification was included in DP 10.01 and was properly documented into integration and ProductAnnouncements.pdf

 

Username and password for login to the target or
primary database. Note that the user must have the
SYSDBA privilege granted. For Oracle version 12c the
user must have been granted the SYSBACKUP privilege.
Also you can use the user with SYSDBA privilege for
Oracle 12c but first you must set omnirc variable
OB2_ORACLE_USE_SYSDBA to 1.

 

Oracle 12c SYSBACKUP compatibility
Currently, Data Protector Oracle integration uses SYSDBA as requested user privileges to connect to
the database. With the new Oracle 12c version, a new SYSBACKUP user privilege with all required
privileges for backup, restore and recover functionalities are provided. This enhancement enables
SYSBACKUP user privileges to connect to the Oracle database for 12c Oracle version. The older
Oracle versions will continue with the SYSDBA user privileges as before.

 

Best Regards

ronlevyca Trusted Contributor.
Trusted Contributor.

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

We have created a new user with the SYSBACKUP role, put it on all machines in the RAC cluster, and it is working properly.  We are in the process of pushing the new user and new role out to all machines as we upgrade.

As a side note, we tried the setting in the .omnirc file and it didn't work.

It's strange - the SYSDBA role has all the permissions SYSBACKUP does and more, but it doesn't work.  And you can have the SYSDBA role and not have the SYSBACKUP role.  Now we know.

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Hello Ronlevyca

Using omnirc variable SYSBACKUP shouldn't be necessary, if you get the same issue using variable and still want analyze it please log support case and we will analyze the issue.

If you already have new user configured and working using SYSBACKUP role that is fine too. 

Best Regards

0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Upgraded from DP9 to 10.03, Oracle integration Insufficient Privileges

Jump to solution

Hello @JBasilio,

That's true. If you can't change to SYSBACKUP and need to continue backing up the Oracle 12 database running the following command solves the problem by defining the omnirc on the database server in A.10.03.

omnicc -update_omnirc OB2_ORACLE_USE_SYSDBA -value 1 ClientFQDN

Regards,
Sebastian Koehler

---
Please use the Like button below, if you find this post useful.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.