cancel
Showing results for 
Search instead for 
Did you mean: 

MCOD and DB13 (ORA-01031: insufficient privileges)

Former Member
0 Kudos

Hello Oracle experts,

I have a problem with a MCOD installation.

Situation:

I have an Oracle Real Application Cluster with two database instances (DE1_1 and DE1_2). In database 1 (DE1_1) there are running two SAP systems (DE1 and DE2).

In database 2 (DE1_2) there are running also two SAP systems (QE1 and QE2).

DE1: SAPSR3 (DE1_1 )

DE2: SAPSR4 (DE1_1)

QE1: SAPSR5 (DE1_2)

QE2: SAPSR6 (DE1_2)

DE1 has been the first installation. The next one´s have been DE2 (SAPSR4), QE1 (SAPSR5) and QE2 (SAPSR6).

Complication:

Transaction DB13 is making trouble in the systems DE2, QE1 and QE2.

There is a pop-up containing this information:


SQL Errorcode: 1.031
SELECT beg, funct, sysid, obj, rc, ende, actid,  line FROM sap_sdbah 
 WHERE beg BETWEEN  '20110416000000' AND '20110524235959' AND sysid =  'DE1'

ORA-01031: insufficient privileges

I can confirm this popup and reach the DBA Planning Calendar. In the message window there are two error messages:

- An error occurred when processing system DE2

- Function ORA_LOG_READ failed with return code = Other error

Only in the first system (DE1) there are no problems when calling DB13!

Solution:

I already checked the following notes:

Note 134592 - Importing the SAPDBA role (sapdba_role.sql)

--> I executed the script from the note.

Note 834917 - Oracle Database 10g: New database role SAPCONN

--> I executed the script from the note.

And checked this:


SQL> select grantee, granted_role from dba_role_privs 
where granted_role in ('SAPDBA', 'SAPCONN');

GRANTEE                        GRANTED_ROLE
------------------------------ ------------------------------
SYS                            SAPDBA
OPS$SAPSERVICEDE2              SAPDBA
OPS$SAPSERVICEQE1              SAPDBA
OPS$QE1ADM                     SAPDBA
SAPSR6                         SAPCONN
OPS$ORADE1                     SAPDBA
SAPSR5                         SAPCONN
OPS$QE2ADM                     SAPDBA
OPS$SAPSERVICEQE2              SAPDBA
SYS                            SAPCONN
OPS$DE1ADM                     SAPDBA

GRANTEE                        GRANTED_ROLE
------------------------------ ------------------------------
SAPSR3                         SAPCONN
OPS$SAPSERVICEDE1              SAPDBA
SAPSR4                         SAPCONN
SYSTEM                         SAPDBA
OPS$DE2ADM                     SAPDBA

16 rows selected.

Is it correct that there is only ONE ORA<SID>?

The rest is correct regarding the note.

Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role

Checked this statement:


SQL> select grantee, granted_role, default_role from dba_role_privs 
where grantee = 'SAPSR6';

GRANTEE                        GRANTED_ROLE                   DEF
------------------------------ ------------------------------ ---
SAPSR6                         SAPCONN                        YES

It´s correct regarding the note.

Note 91216 - BRBACKUP/SAPDBA: ORA-01031 Insufficient privileges

Checked it!

Note 400241 - Problems with ops$ or sapr3 connect to Oracle


SQL> SELECT OWNER, TABLE_OWNER, TABLE_NAME FROM DBA_SYNONYMS 
WHERE SYNONYM_NAME = 'SAPUSER';

OWNER                          TABLE_OWNER
------------------------------ ------------------------------
TABLE_NAME
------------------------------
OPS$SAPSERVICEDE1              OPS$DE1ADM
SAPUSER

OPS$SAPSERVICEDE2              OPS$DE2ADM
SAPUSER

OPS$SAPSERVICEQE1              OPS$QE1ADM
SAPUSER


OWNER                          TABLE_OWNER
------------------------------ ------------------------------
TABLE_NAME
------------------------------
OPS$SAPSERVICEQE2              OPS$QE2ADM
SAPUSER

It´s correct regarding the note.

Note 113747 - Permissions for DBA tools BR*Tools and SAPDBA

Permissons for BR*Tools are adjusted regarding this note.

It is still not working!!

Any further suggestions? I don´t know exactly what to configure in a MCOD database. Maybe I forgot one thingu2026

Thank you in advance and kind regards,

Geraldine

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
0 Kudos

Do you really need DB13 in systems DE2, QE1 and QE2?

I don't think so.

All you need, like backup, update statistics, and so on, may be done from DE1, and will affect all systems.

We had MCOD systems for several years, and we found it sufficient to run DB13 from just one system.

There are ways to make it work from all systems. But I doubt that it is worth the effort...

regards

Former Member
0 Kudos

Hello Joe,

Ok we can use only DB13 in DE1 system. That´s ok.

But nevertheless isn´t it better to solve this ORA-01031 problem? I think there shouldn´t be problems like this in a SAP system...

thanks and regards,

Geraldine

Former Member
0 Kudos

Well, it's up to you whether or not you consider that a problem.

And it seems SAP doesn't.

The solution for your ORA-01031 probably will be:

In the schema of Oracle user SAPSR3 there are tables SDBAH and SDBAD. Grant full access to Oracle users SAPSR4/5/6.

But afterwards you may encounter another error message.

You have been warned.

Not sure if this is documented anywhere.

And as I wrote, I doubt that it is worth the effort...

It always seemed SAP did not really like nor support MCOD installations. So by now we haven't any of them left.

regards