Skip to Content
Former Member
Jun 12, 2007 at 12:07 PM

ORA-01031 (Insufficient Privileges) after moving server to new domain


Hello SAP/Oracle experts,

We recently performed a 'lift & shift' to move our SAP test system (QAS) from our HQ to our hosting partner's data centre. Although SAP works fine, we've lost the ability to run database operations through DB13. We now receive ORA-01031 - Insufficient Privileges errors whenever we try anything through DB13.

Because moving the server involved changing the Windows domain to which it belonged, we created a trust relationship between old and new domains so that we didn't have to change the details of QASADM and SAPServiceQAS. We ran the usual oradbuser.sql and sapdba_role.sql scripts. We also removed and reassigned the ORA_QAS_DBA and ORA_QAS_OPER groups to the QASADM and SAPServiceQAS users. All of which seems to have made no difference and we still get ORA-01031 errors in DB13.

Even stranger though is the fact that at the Oracle level, user sys is able to log in 'as sysdba', whilst user system cannot. e.g.

sqlplus “sys/<password>@qas as sysdba” – Works.

sqlplus “sys/<password> as sysdba” – Works.

sqlplus “/ as sysdba” – Doesn’t work

sqlplus “system/<password>@qas as sysdba” – Doesn’t work.

sqlplus “system/<password> as sysdba” – Doesn’t work.

This leads me to believe that the problem is not SAP-related (i.e. sapdba_role won't fix it!), but is more likely Oracle-related and perhaps down to the fact that ths system was built in one domain, but now resides in another. I guess the easiest thing to do would be to create QASADM and SAPServiceQAS accounts in the new domain and try that, but that's clutching at straws and doesn't explain why Oracle user sys works, whilst system doesn't.

Has anyone moved servers between domains and experienced similar problems?

Thanks in advance of any help,