码迷,mamicode.com
首页 > 其他好文 > 详细

关于ORA-01031: insufficient privileges 问题处理总结

时间:2014-08-26 17:20:36      阅读:325      评论:0      收藏:0      [点我收藏+]

标签:os   使用   io   for   文件   ar   数据   2014   art   

关于ORA-01031: insufficient privileges 问题处理总结

 

A) File $ORACLE_HOME/network/admin/sqlnet.ora
这个是涉及oracle 是os 认证,还是密码文件认证

$ORACLE_HOME/network/admin/sqlnet.ora中的AUTHENTICATION_SERVICES参数:
1、在windows下,SQLNET.AUTHENTICATION_SERVICES必须设置为NTS或者ALL才能使用OS认证;
不设置或者设置为其他任何值都不能使用OS认证。

2、在linux下,在SQLNET.AUTHENTICATION_SERVICES的值设置为ALL,或者不设置的情况下,OS验证才能成功;

此外还有这个参数
spfile中的REMOTE_LOGIN_PASSWORDFILE参数:
1、值为exclusive时,远程能作为sysdba身份登录
2、值为none时,以sysdba身份无法登录

B) File $ORACLE_HOME/rdbms/lib/config.c(or config.s)
C) The output of command "id"
oracle 用户拥有正确辅组,如果没有dba 组则也无法进行操作系统认证登入数据库


一般以上2个是常见的原因,如果查证后还是有问题可以尝试以下方法:
D) A trace file obtained with the following commands:

 

Linux:
strace -o /tmp/strace_sysdba.output -cfT sqlplus / as sysdba

AIX, Solaris:
truss -fea -o /tmp/truss_sysdba.output sqlplus / as sysdba
 

HP-UX:
tusc -afpo /tmp/tusc_sysdba.output -aef sqlplus / as sysdba

For Windows

A) File %ORACLE_HOME%/network/admin/sqlnet.ora
B) The output of the commands  "echo %username% and  "NET LOCALGROUP ORA_DBA"
C) A pair of client/server SQL*Net traces obtained while reproducing the problem as per Note 395525.1 and Note 374116.1

 


以下是一个测试案例:【去掉oracle 的 dba 组】

[oracle@vmrac1 ~]$ strace -o /tmp/strace_sysdba.output -cfT sqlplus / as sysdba

SQL*Plus: Release 11.2.0.2.0 Production on Tue Aug 26 16:04:46 2014

Copyright (c) 1982, 2010, Oracle.  All rights reserved.

ERROR:
ORA-01031: insufficient privileges


Enter user-name: sys
Enter password:
ERROR:
ORA-27140: attach to post/wait facility failed
ORA-27300: OS system dependent operation:invalid_egid failed with status: 1
ORA-27301: OS failure message: Operation not permitted
ORA-27302: failure occurred at: skgpwinit6
ORA-27303: additional information: startup egid = 1200 (asmadmin), current egid
= 1000 (oinstall)


Enter user-name:
ERROR:
ORA-01017: invalid username/password; logon denied


这个是跟踪后的trace 文件不是很看的懂:
[oracle@vmrac1 ~]$ cat  /tmp/strace_sysdba.output
% time     seconds  usecs/call     calls    errors syscall
------ ----------- ----------- --------- --------- ----------------
 45.06    0.003262           2      1611       328 open
 12.50    0.000905           1       881         5 read
  9.55    0.000691           5       132           write
  7.90    0.000572           0      1382           mmap
  4.68    0.000339           0       886           munmap
  4.64    0.000336          11        31           brk
  3.59    0.000260          52         5           execve
  2.43    0.000176           1       307           fstat
  2.33    0.000169           1       136           mprotect
  2.04    0.000148          49         3           readlink
  1.17    0.000085           0      1340           close
  0.93    0.000067           0       233           rt_sigaction
  0.86    0.000062           0       272        55 stat
  0.55    0.000040           2        20           getcwd
  0.52    0.000038           0       144       144 mkdir
  0.47    0.000034           1        67        65 access
  0.39    0.000028           0       153           fcntl
  0.37    0.000027           1        23           socket
  0.00    0.000000           0        42         2 lstat
  0.00    0.000000           0       116           lseek
  0.00    0.000000           0        67           rt_sigprocmask
  0.00    0.000000           0        10         2 ioctl
  0.00    0.000000           0         8           pipe
  0.00    0.000000           0        96        84 shmget
  0.00    0.000000           0        20           shmat
  0.00    0.000000           0         4           dup
  0.00    0.000000           0        18        18 connect
  0.00    0.000000           0         5           bind
  0.00    0.000000           0         4           clone
  0.00    0.000000           0        51           uname
  0.00    0.000000           0        20           shmdt
  0.00    0.000000           0        22           getdents
  0.00    0.000000           0         4           chdir
  0.00    0.000000           0         8           chmod
  0.00    0.000000           0       168           getrlimit
  0.00    0.000000           0        31           times
  0.00    0.000000           0        32           getuid
  0.00    0.000000           0         1           getgid
  0.00    0.000000           0        14           geteuid
  0.00    0.000000           0         2           getegid
  0.00    0.000000           0         5           getppid
  0.00    0.000000           0         8         4 setsid
  0.00    0.000000           0         4           sigaltstack
  0.00    0.000000           0         5           arch_prctl
  0.00    0.000000           0        15           setrlimit
  0.00    0.000000           0         8           gettid
  0.00    0.000000           0        17           futex
  0.00    0.000000           0         5           set_tid_address
  0.00    0.000000           0         5           set_robust_list
------ ----------- ----------- --------- --------- ----------------
100.00    0.007239                  8441       707 total
[oracle@vmrac1 ~]$ strace -o /tmp/strace_sysdb1a.output -cfT sqlplus / as sysdba

SQL*Plus: Release 11.2.0.2.0 Production on Tue Aug 26 16:06:06 2014

Copyright (c) 1982, 2010, Oracle.  All rights reserved.

ERROR:
ORA-01031: insufficient privileges


Enter user-name:
ERROR:
ORA-01017: invalid username/password; logon denied


Enter user-name:
ERROR:
ORA-01017: invalid username/password; logon denied


SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus
[oracle@vmrac1 ~]$ cat /tmp/strace_sysdb1a.output
% time     seconds  usecs/call     calls    errors syscall
------ ----------- ----------- --------- --------- ----------------
 31.05    0.001321           1      1600       326 open
 19.93    0.000848           1       839         5 read
 16.06    0.000683         137         5           execve
 11.71    0.000498           0      1375           mmap
  8.56    0.000364           0       773           munmap
  6.16    0.000262           2       138           write
  2.37    0.000101           0      1329           close
  1.55    0.000066           0       303           fstat
  1.18    0.000050           1        96        84 shmget
  0.87    0.000037           0       227           rt_sigaction
  0.56    0.000024           1        21           socket
  0.00    0.000000           0       227        55 stat
  0.00    0.000000           0        34         4 lstat
  0.00    0.000000           0        94           lseek
  0.00    0.000000           0       136           mprotect
  0.00    0.000000           0        31           brk
  0.00    0.000000           0        65           rt_sigprocmask
  0.00    0.000000           0         3         1 ioctl
  0.00    0.000000           0        66        65 access
  0.00    0.000000           0         8           pipe
  0.00    0.000000           0        20           shmat
  0.00    0.000000           0         4           dup
  0.00    0.000000           0        16        16 connect
  0.00    0.000000           0         5           bind
  0.00    0.000000           0         4           clone
  0.00    0.000000           0        49           uname
  0.00    0.000000           0        20           shmdt
  0.00    0.000000           0       139           fcntl
  0.00    0.000000           0        22           getdents
  0.00    0.000000           0        20           getcwd
  0.00    0.000000           0         4           chdir
  0.00    0.000000           0       108       108 mkdir
  0.00    0.000000           0         2           readlink
  0.00    0.000000           0         6           chmod
  0.00    0.000000           0       161           getrlimit
  0.00    0.000000           0        28           times
  0.00    0.000000           0        29           getuid
  0.00    0.000000           0         1           getgid
  0.00    0.000000           0        13           geteuid
  0.00    0.000000           0         1           getegid
  0.00    0.000000           0         4           getppid
  0.00    0.000000           0         8         4 setsid
  0.00    0.000000           0         4           sigaltstack
  0.00    0.000000           0         5           arch_prctl
  0.00    0.000000           0        14           setrlimit
  0.00    0.000000           0         8           gettid
  0.00    0.000000           0        16           futex
  0.00    0.000000           0         5           set_tid_address
  0.00    0.000000           0         5           set_robust_list
------ ----------- ----------- --------- --------- ----------------
100.00    0.004254                  8091       668 total


 

关于ORA-01031: insufficient privileges 问题处理总结

标签:os   使用   io   for   文件   ar   数据   2014   art   

原文地址:http://blog.csdn.net/lixora/article/details/38850409

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!