Since the message is insufficient privileges, I would suspect an issue
with the GID of the oracle owner.
An easy thing to check or try would be to re-order the user-groups for
the Oracle account. Try putting the dba group ahead of the oinstall
group and see what happens. During the linking of the oracle
executable, the group to access the account via
Sqlplus /nolog
Connect / as sysdba
Is included in a file under $ORACLE_HOME/rdbms/lib. (In aix it is
config.s) If for some reason the OS is only passing the oinstall group
and not passing the dba group to oracle, you would be able to connect
via the listener, but not / as sysdba directly. Metalink has some
documentation regarding this.
Note:69642.1 Is a good document to cover most of the bases with this
type of issue.
David W. Hornbeck
-----Original Message-----
From: BERK DAVID
[mailto:oracledba-ezmlmshield-x21708886.[Email address protected]
Sent: Thursday, January 31, 2008 2:44 PM
To: LazyDBA Discussion
Subject: RE: ORA-01031: insufficient privileges when trying to connect
to instance using "/" as oracle owner account
Have you dropped and recreated the orapw<inst> file?
David R. Berk
Lead Database Administrator
Information Technology
Edw. C. Levy Co.
Phone: 313-429-2939
Cell: 248-755-0479
Fax: 313-429-2903
-----Original Message-----
From: Terance W. Ebert
[mailto:oracledba-ezmlmshield-x22325001.[Email address protected]
Sent: Thursday, January 31, 2008 2:37 PM
To: LazyDBA Discussion
Subject: RE: ORA-01031: insufficient privileges when trying to connect
to instance using "/" as oracle owner account
Have you created the ops$oracle database user?
-----Original Message-----
From: Stephen Price [mailto:oracledba-ezmlmshield-x80537072.[Email
address protected]
Sent: Thursday, January 31, 2008 11:22 AM
To: LazyDBA Discussion
Subject: ORA-01031: insufficient privileges when trying to connect to
instance using "/" as oracle owner account
I have been through everything I can think of and I still cannot
understand why this particular LINUX install will not allow the oracle
user to connect using command (sqlplus / as sysdba).
uid=500(oracle) gid=500(oinstall)
groups=500(oinstall),501(dba),502(oper)
Oracle owns almost everything and oinstall is the group owner on just
about everything.
Oracle = 10.2.0.3 64-bit
[[Email Address Removed] ~]$ find . -user root -exec ls -al {} \; lrwxrwxrwx 1
root root 22 Jan 30 14:44
../app/oracle/product/10.2.0/db_1/rdbms/filemap ->
/opt/ORCLfmap/prot1_64
-rw-r----- 1 root oinstall 1534 Dec 22 2005
../app/oracle/product/10.2.0/db_1/rdbms/admin/externaljob.ora
-rwsr-s--- 1 root oinstall 18143 Jan 28 16:50
../app/oracle/product/10.2.0/db_1/bin/nmb
-r-sr-s--- 1 root oinstall 14931 Dec 20 2006
../app/oracle/product/10.2.0/db_1/bin/oradism
-rwsr-x--- 1 root oinstall 58383 Jan 30 14:55
../app/oracle/product/10.2.0/db_1/bin/extjob
-rwsr-s--- 1 root oinstall 16375 Jan 28 16:50
../app/oracle/product/10.2.0/db_1/bin/nmo
Linux traindb 2.6.18-8.el5 #1 SMP Fri Jan 26 14:15:14 EST 2007 x86_64
x86_64 x86_64 GNU/Linux
SQLNET.AUTHENTICATION_SERVICES= (NTS) is the only line in my
$ORACLE_HOME/network/admin/sqlnet.ora file
I can connect using (sqlplus [Email Address Removed] as sysdba <mailto:[Email Address Removed] as
sysdba> ) just fine, so SQL*NET works...
OS is Red Hat Enterprise Linux Server release 5 (Tikanga)
Any other ideas???
Stephen Price
Oracle Database Administrator
Compusearch Software Systems, Inc.
---------------------------------------------------------------------
TO REPLY TO EVERYBODY , PLEASE CLICK REPLY-ALL, NOT JUST REPLY To post a
dba job: http://jobs.lazydba.com To Subscribe : http://www.LazyDBA.com
To unsubscribe: http://www.lazydba.com/unsubscribe.html
---------------------------------------------------------------------
TO REPLY TO EVERYBODY , PLEASE CLICK REPLY-ALL, NOT JUST REPLY
To post a dba job: http://jobs.lazydba.com
To Subscribe : http://www.LazyDBA.com
To unsubscribe: http://www.lazydba.com/unsubscribe.html
This e-mail and any files transmitted with it are confidential and
are intended solely for the use of the individual or entity to whom
they are addressed. This communication may contain material
protected by the attorney-client privilege. lf you are not the intended
recipient or the person responsible for delivering the e-mail to the
intended recipient, be advised that you have received this e-mail in
error and that any use, dissemination, forwarding, printing, or
copying of this e-mail is strictly prohibited. If you have received this
e-mail in error, please immediately notify the sender.
---------------------------------------------------------------------
TO REPLY TO EVERYBODY , PLEASE CLICK REPLY-ALL, NOT JUST REPLY
To post a dba job: http://jobs.lazydba.com
To Subscribe : http://www.LazyDBA.com
To unsubscribe: http://www.lazydba.com/unsubscribe.html
______________
The information contained in this message is proprietary and/or confidential. If you are not the
intended recipient, please: (i) delete the message and all copies; (ii) do not disclose,
distribute or use the message in any manner; and (iii) notify the sender immediately. In addition,
please be aware that any message addressed to our domain is subject to archiving and review by
persons other than the intended recipient. Thank you.
_____________
Oracle LazyDBA home page