Oracle group privileges

Hello

on my db 11.2 on Linux oracle user has this config group/id:

UID = 1001 (Oracle) gid = 1002 (dba) groups = 1002 (dba), 501 (oradb), 1001 (oinstall)

I created a/aa/bb of file system in which the Group extuser can read/write/execution.

I added 1003 (extuser) to my oracle user so now the config is

UID = 1001 (Oracle) gid = 1002 (dba) groups = 1002 (dba), 501 (oradb), 1001 (oinstall), 1003 (extuser)

Now I use an external table with file preprocessor that simply retrieve the list of files, but oracle cannot read

the content of/aa/bb because the process to reproduce by the external table does not contain the new group.

I have alse bounce PB but nothing.

In my file preprocessor, I put this command:

/ usr/bin/ID > /tmp/ext/test.txt

/ bin/ls t/aa/bb

the contents of test.txt is:

UID = 1001 (Oracle) gid = 1002 (dba) groups = 1002 (dba), 501 (oradb), 1001 (oinstall)

but the id is:

$ id

UID = 1001 (Oracle) gid = 1002 (dba) groups = 1002 (dba), 501 (oradb), 1001 (oinstall), 1003 (extuser)

Why?

Hello

Have you restarted the listener?

Kind regards

Rich

Tags: Database

Similar Questions

  • Confused with the Oracle group

    Hi all

    11.2.0.3.11

    AIX 6

    I'm new to this company to manage their existing database in which the administrator has left.

    I noticed their PROD has groups dba, oinstall.  But on their DEV, TEST, machines QAT does not oinstall group but only group dba.

    What I need to fix the DEV, TEST, servers QAT to add the oinstall group?


    Thank you

    MK

    Maria, if the current system works then it would seem that using oinstall is not an absolute requirement, but I suggest to future installations of the software according to the recommendations of the Oracle RDBMS.  I want my test and production environments to follow the same general implemented.   How many different houses Oracle are there in the test?  While the current environment is running, you should be able to install a new House and migrate databases from test to it at your leisure.

    - -

    HTH - Mark D Powell.

  • Oracle group by

    Hi all!

    I have a question I have seen a lot of conversation but it has come to the solution that I need, so if someone could give me a light I understand that!

    The problem is: I do a query that returns values, but the column may not be on the GROUP BY clause. We will try to explain the cenario:

    Suppose I have a registry table with this info:

    Event_id Date GPS
    * 01 21/10/2012 09:08:12 100 *.
    * 02/22/10/2012 10:00:05 105 *.
    * 05 19/10/2012 00:00:00 120 *.
    * 03/22/10/2012 17:53:10 100 *.
    * 01/22/10/2012 07:05:14 125 *.
    * 01 21/10/2012 21:38:00 110 *.
    * 02 18/10/2012 03:15:17 115. *

    I would like to have the "most recent" registry of each GPS but also the event_id occurred in Ontario in this register.
    If I use the query
    SOME gps, MAX (Date)
    TABLE
    GROUP BY gps
    ORDER BY gps
    Can I get the result I want, but without the event_id
    GPS date
    * 01 07:05:14 10/22/2012 *.
    * 02 10:00:05 10/22/2012 *.
    * 03/22/10/2012 17:53:10 *.
    * 05 19/10/2012 00:00:00 *.
    I would like to have respectively the info
    Event_id
    * 125 *.
    * 105 *.
    * 100 *.
    * 120 *.

    But, if I put the column event_id on SELECTION, I must put on the GROUP BY which works it. If I do, the result I get is fairly identical to the table because of the different event_ids all, I have for each register.

    Does anyone have an idea on how to do this?


    In addition, I am using Oracle 11g

    Thanks in advance,

    Bruno.

    Hi, Bruno.

    Welcome to the forum!

    Here's one way:

    SELECT    gps
    ,        MAX (dt)          -- DATE is not a good column anme
                         AS max_dt
    ,       MIN (event_id) KEEP (DENSE_RANK LAST ORDER BY dt)
                         AS last_event_id
    FROM      table_x          -- TABLE is not a good table name
    GROUP BY  gps
    ORDER BY  gps
    ;
    

    What happens if the lines 2 (or more) with the gps even have exactly the same date? Maybe it's not possible in your table, but if this happens, then the query above wouold chose the lowest of the event_ids of the last date; That's what MIN (event_id) done.
    For example, if it were your sample data:

    GPS     DT                EVENT_ID
    ---     -------------------   --------
    05      01/01/2012 00:00:00   102
    05      19/10/2012 00:00:00   120
    05      19/10/2012 00:00:00   121
    

    There is for the last line. Both event_id = 120 and event_id = 121 have an equal claim that it is the last line. In this case, the above query returns 120 as the last_event_id, because it is the lowest number among the contenders. (Note that this is not the same as the lowest overall event_id. 102 is the event_id below, but it has no claim that it is the last line).

    If you want to select all the contenders in the case of a tie (i.e., 120 and 121, considering the above data), then you could do soemthing like this:

    WITH     got_r_num     AS
    (
         SELECT  gps, dt, event_id
         ,     RANK () OVER ( PARTITION BY  gps
                               ORDER BY          dt     DESC
                        )           AS r_num
         FROM    table_x
    )
    SELECT    gps, dt, event_id
    FROM       got_r_num
    WHERE       r_num     = 1
    ORDER BY  gps, event_id
    ;
    

    Whenever you have questions, please post CREATE TABLE and INSERT statement for your sample data. Also post the exact resuolts you want from these data exactly as you want them to.
    See the FAQ forum {message identifier: = 9360002}

    Published by: Frank Kulash on October 22, 2012 15:40

    Published by: Frank Kulash on October 22, 2012 15:46

  • the Oracle user privileges

    Hello

    is there a method or the request to know what are the privileges that we have at the level of the operating system as a dba

    Thank you very much

    is there a method or the request to know what are the privileges that we have at the level of the operating system as a dba

    No, DB knows little about the OS level environment.
    Access OS should work without error.

  • All files generated by a coil in sqlplus receive ownership of oracle: dba instead of the user of the BONE started sqlplus and run the script. There's a file with users owners of BONES of the coil.

    All files generated by a coil in sqlplus receive ownership of oracle: dba instead of the user of the BONE started sqlplus and run the script. There's a file with users owners of BONES of the coil.

    Script launched in until OS user 'A' on the 'A' server which launches sqlplus, then connects to a remote database through a service of tnsnames.ora as another user of the database and the results of this script are spoulées on the server "A".

    The file queued on the old server is written with rw-rw-r: read write user, group read the writing, reading and possession header that is the user of the OS. The file queued on the new server is written to rw-r-r user: reading writing, reading group, public reading and ownership oracle: dba.

    "" The user then has no privileges to modify the file and continue the process of transmitting the file, editing and deleting the file for the next set of commands. This allows us to keep the possibility to migrate to the new server we are unable to process orders.

    $ORACLE_HOME/bin/sqlplus - s user/password@prd1 @./script/CustomScript/R12_OM_UFPC-oracle.sql

    Background: old server running 4.8, Oracle 10.2.0.4 OEL

    New server running OEL 6.5, Oracle 11.2.0.4

    Tested so far:

    File and update umask to 0002 instead of 0022 is now generated as rw-r-r. However, the property is still oracle: dba.

    Update of ownershipt of $ORACLE_HOME/bin/oracle.exe of oracle: oracle (edi added the user to the oracle group) and chmod 6751 oracle.exe. This created several problems where crucial scripts, that is to say of sqlplus failed to run.

    Added! chmod 755 output.file.name - OS user 'A' is not allowed to change to mod.

    Added! command cp MV output file and that generated the file as a user of the operating system: oracle. It is a potential work around in case of emergency, but the developer would have to rewrite the countless scripts.

    Any ideas?

    I have reproduced the behavior of the old server and am able to spool a file via sqlplus under OS user. No changes have been made on the remote database server. All the changes have been on the new server hosting a small 11.2.0.4 database on a server running OEL 6.5 32 - bit OS.

    (1) removed the sticky bit $ORACLE_HOME/bin/sqlplus using chmod u-s, g-s, o - s suggestion of Billy ~ Verreynne

    (2) modified the main group for the 'oracle' user match the user operating system applications, while maintaining membership in the groups 'oracle' and 'dba '.

    -We are dealing with here EDI processes, so the Group was called edi.

    (3) modified property of the files tnsnames.ora and listener.ora for oracle: edi

    (4) restart the receiver

    (5) disconnect / reconnect

    Script runs as expected, the output file contains the correct ownership and permissions.

    Thank you all for taking a look and offering options.

    -Josh

  • when insufficient privileges connect you to the database as sysdba

    I installed a vision with Oracle EBS R12 database. I need to connect to the database as sysdba to unlock the system account. but when I ran command sqlplus / as sysdba, I will this error "ORA-01031: insufficient privileges".
    I sought an answer in the internet, most answer said that it requires the user to linux to be in the dba group. in my config.c file I have this definiation "#define SS_DBA_GRP 'Oracle'. This group "Oracle" is my dba group. and I also checked my current user id (Oracle username is too) and the group, I got:
    [Oracle@linux admin] $id Oracle
    UID = 500 (Oracle) gid = 500 (Oracle) groups = 500 (Oracle)
    all above looks them good to me. I also added authentication_services to sqlnet.ora like this: sqlnet. authentication_services = (All). but I still have the same error. Can someone tell me what is the problem?
    Or y at - it another way to unlock the account system?

    Published by: user12100435 on April 15, 2013 19:53

    user12100435 wrote:
    I installed a vision with Oracle EBS R12 database. I need to connect to the database as sysdba to unlock the system account. but when I ran command sqlplus / as sysdba, I will this error "ORA-01031: insufficient privileges".
    I sought an answer in the internet, most answer said that it requires the user to linux to be in the dba group. in my config.c file I have this definiation "#define SS_DBA_GRP 'Oracle'. This group "Oracle" is my dba group. and I also checked my current user id (Oracle username is too) and the group, I got:
    [Oracle@linux admin] $id Oracle
    UID = 500 (Oracle) gid = 500 (Oracle) groups = 500 (Oracle)
    all above looks them good to me. I also added authentication_services to sqlnet.ora like this: sqlnet. authentication_services = (All). but I still have the same error. Can someone tell me what is the problem?
    Or y at - it another way to unlock the account system?

    Published by: user12100435 on April 15, 2013 19:53

    your operating system user must be member of the group 'dba' OS

  • Groups and filters

    Hi all

    I exported the security_file from my server (11.1.2) essbase, and I currently have a relationship between users and groups. But the problem is that I am not able to find the relationship between the filters and groups.

    All I'm looking for is a list of users and their accesses (filters) or list of groups with their filter associations. So that I can tie everything together and see which users have access to which members of the cube.

    I need help! Any suggestion is appreciated.

    Thank you!!

    It's very easy using MaxL:

    Get all users:
    user display all;

    Get all the groups:
    Display group;

    Get all assignments of user group:
    display the user in the group as a whole;

    Get all filters, including their ranks:
    show the line of filter all;

    Get all the privilege of groups (for example: filter of subsidies on a cube for the Group):
    view group privilege.

    Get all the privileges of users (for example: filter of subsidies on a cube - on the user directly not through Group):
    display privilege user.

    And to be complete - get all the cubes:
    display bases

    If you select spool in MaxL you get a list for each commnd in a text file. You can then import the textfiles to a relational database and connect everything.
    For the privileges you get a column "type". Please refer to the follwing page to see what types exist:
    http://docs.Oracle.com/CD/E12825_01/EPM.111/esb_techref/maxl_disppriv.htm

    Kind regards
    Thomas

    Published by: th. Reich on November 6, 2012 12:07 AM

    Published by: th. Reich on November 6, 2012 12:08

  • Client Oracle connection with another UNIX user

    Hi all


    I installed the oracle client in one of the user named 'oracle' and it is configured to connect to the database that is on the other server.
    And now, I want to connect to the database that is on the other server with another user who, on the Client, Server installed.
    Please let us know how to proceed.

    Thank you and best regards,
    Sagar Maram

    I think you need to read on unix Group privileges. Basically your second user will have to either his own client, or execute privileges on the existing client installation (by group or world execute privileges). You will also need to set PATH, LD_LIBRARY_PATH, ORACLE_HOME environment variables, TWO_TASK etc.

  • Operator privileges does not

    I use TS2014 SP1 (32-bit) and I was wondering if anyone has come across the following:

    I have in my User Manager, an administrator and a user of the operator (operator user and group operator attached).  What I see is that when logged in as an operator, I still all administrator privileges. For example, I can always edit globals station and change users, including the definition of the password for the admin user.  The privilege of the operator is to EditStationGlobals (debug) is set to False, such as changing users (under Setup).

    I tried some actions:

    1 remove the user from the operator

    2. completely out of TestStand, not only close or disconnect

    3. restart TestStand, log in as administrator

    4. Add a new user operator assigned to the Group of operators

    5. Repeat step 2 & 3, but the login as operator

    6. always am able to modify globals users and station

    7. checked group privileges are set to do not allow the global station or user change

    8 tried this method on another installation and works as expected.  The operator cannot change the globals users or station.

    Short of a one-install/re-install, I don't know where else adventure.

    Thank you!

    Never mind... found out what that was interfering.

    Check user privileges has been set to False in the StationOptions/User Manager

  • I got an error grid Infrastructure installation Oracle 11 GR 2 (11.2.0.4) for a stand-alone server on Oracle Linux 7

    I got an error grid Infrastructure installation Oracle 11 GR 2 (11.2.0.4) for a stand-alone server on Oracle Linux 7

    It's my environment:

    VM VirtualBox

    OS: Linux to Oracle 7

    RAM: 2G

    CPU: 1 outlet | 2 carrots

    OS packages for the needs of the DB: all except pdksh. (installed in ksh). Jut ignored.

    Oracle software version: 11 GR 2 (11.2.0.4) Oracle grid Infrastructure

    Installation type: SServer tandalone.

    The installation user: uid = 501 (oracle)

    installation groups: gid = 501 (oinstall) groups: oinstall, dba, oper, asmadmin, asmdba, asmoper.

    Put ASM implementation with Linux e/s Standard (No. ASMLib).


    The virtual machine has 3 disks attached.


    Features: / dev/sdb, / dev/sdc, / dev/sdd


    I ran to related records:


    # / bin / / dev/raw/raw1 gross/dev/sdb1

    # / bin / / dev/raw/raw2 gross/dev/sdc1

    # / bin / / dev/raw/raw3 gross/dev/sdd1


    # raw - qa

    / dev/RAW/raw1: linked main 8, minor 17

    / dev/RAW/raw2: linked main 8, minor 33

    / dev/RAW/raw3: linked main 8, minor 49


    Also, I have configured the following command to set permanent configuration:

    #vi /etc/udev/rules.d/99-vmware-scsi-udev.rules99-vmware-scsi-udev.rules

    ACTION == "add", KERNEL == "sdb1", RUN += "/ bin/raw/dev/raw/raw1 %N".

    ACTION == "add", KERNEL == "sdc1", RUN += "/ bin/raw/dev/raw/raw2 %N".

    ACTION == "add", KERNEL == "sdd1", RUN += "/ bin/raw/dev/raw/raw3 %N".

    # set permissions on these discs for the owner of the Oracle user.

    ACTION == "add" KERNEL == "" raw * ', OWNER is 'oracle', GROUP is 'oinstall' MODE is "0660" "


    NOTE: when I run # ls - lrt/dev/sd *, I - I don't know if the disks has permissions icies because they are on the way to access/dev/raw/raw *.


    BRW - rw-. 1 root disk 8, 16, 19 August 01:54 / dev/sdb

    BRW - rw-. 1 root disk 8, 17, 19 Aug 01:54 / dev/sdb1

    BRW - rw-. 1 root disk 8, 32 19 August to 01:54 / dev/sdc

    BRW - rw-. 1 root disk 8, 13, 19 Aug 01:54 / dev/sdc1

    BRW - rw-. 1 root disk 8, 48-19 August to 01:54 / dev/sdd

    BRW - rw-. 1 root disk 8, 49-19 August to 01:54 / dev/sdd1


    This happens whenever I restart the server.


    But authorities are good when I run # ls - lrt/dev/raw/raw *.


    CRW - rw-. 1 oracle oinstall 162, 0 19 Aug 01:54 / dev/raw/rawctl

    CRW - rw-. 1 oracle oinstall 162, 0 19 Aug 01:54 / dev/raw/raw1

    CRW - rw-. 1 oracle oinstall 162, 0 19 Aug 01:54 / dev/raw/raw2

    CRW - rw-. 1 oracle oinstall 162, 0 19 Aug 01:54 / dev/raw/raw3


    Problem: when running script $GRID_HOME/root.sh.

    Adding Clusterware entries to inittab

    ohasd could not start

    Cannot start the Clusterware. Last 20 lines of the trace log alert:

    2015 08-19 02:15:24.442:

    [client (7260)] CRS-2101: the RSC has been formatted using version 3.

    2015 08-19 02:15:28.238:

    [client (7283)] CRS-1001: the OCR has been formatted using version 3.

    ohasd could not start /u01/app/oracle/product/11g/grid_1/crs/install/roothas.pl 337 line, line < ALERTLOG > 4

    failed execution of /u01/app/oracle/product/11g/grid_1/crs/install/roothas.pl of the/u01/app/oracle/product / 11 g/grid_1/src/install

    Please help me.

    Geraldo Peralta

    Using RAW could be the problem. I'm not sure someone who has used Virtual Box with raw disks for their RAC testbed. Most people use ASM. I've seen a few people use NFS as well. You'll also want to stay away raw because that which is frowned upon in 11.2. See http://docs.oracle.com/cd/E11882_01/install.112/e41962/whatsnew.htm#RILIN931

    Under the Options deprecated for Oracle RAC 11 g Release 2:

    "Installation of files on raw devices is no longer an option available during installation. You must use a shared file system, or using Oracle Automatic Storage Management. »

    Here's how to configure RAC on my laptop with Virtual Box: http://www.peasland.net/2015/04/23/oracle-rac-on-my-laptop-with-virtual-box/

    HTH,
    Brian

  • I forgot system password Oracle 11 g r2

    A way to recover the sys password in oracle 11 g r2

    Oracle linux 6.6

    ReemaPuri wrote:

    A way to recover the sys password in oracle 11 g r2

    Oracle linux 6.6

    NO, not possible & unnecessary

    [oracle@localhost dbs] $ id

    UID = 500 (Oracle) gid = 500 (oracle) groups = 500 (oracle)

    [oracle@localhost dbs] $ sqlplus / as sysdba

    SQL * more: Production of the 11.2.0.2.0 version Sat Jun 20 10:54:38 2015

    Copyright (c) 1982, 2010, Oracle.  All rights reserved.

    Connected to:

    Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - Production

    With partitioning, OLAP, Data Mining and Real Application Testing options

    SQL > show user

    The USER is "SYS".

    SQL >

  • The link for the last group of fixes for 11.2.0.3.0 64-bit windows

    Hello
    Platform: windows 64-bit
    Oracle 11.2.0.3 database

    Successfully, I have improved my 11.2.0.1.0 to 11.2.0.3.0 oracle database and the upgrade worked fine.
    I installed the 11.2.0.3.0 in a new oracle home.

    Now, my task is to install the latest version of the patches on the oracle group new home (make sure database up to date with the latest patches, in fact).
    I'm confused with the available documentations in my oracle support.
    CPU is now regarded as a subset of patch of the PSU, I think I must apply the last power supply only. Is this correct?
    Is there a step by step guide to apply the latest patch? I saw there are 5 PSUS out (plus late 11.2.0.3.5), do I have to apply each of them or just the final?

    Please give me the latest available patches/patch(Still not clear) installation guide group and links to download latest patch available.

    Thanks a lot for all the help so far through its forum... its so useful and I thank the people who make quick responses.

    PL see if this Doc MOS can help you

    Oracle database, networking and grid Agent Patches for Microsoft [161549.1 ID] platform

    HTH
    Srini

  • Catalog object privilege validation failed

    Hello
    I created a new user and assigned to the group 'BIConsumers '. If I want to change it to «my dashboard "as showing following error.»
    * Error: *.
    Catalog object privilege validation failed for user path/users/mkuser/_portal/page 1.

    Currently you do not have sufficient privileges to save a report page or dashboard that contains the HTML markup. Dashboard contains HTML tags customized for static text.

    How to solve this problem? Please let me know.

    Hello

    What version do you use? If your using obie10g add just "everyone" just add another required roles.

    Go to settings-> directors-> Manage privileges-> "answers".
    Here you can see - 'Save content with HTML markup' next to it, you will see "presentation server administrators.
    Click on it and change for all a required user or group or role, or 'BIConsumers' just add and test
    And save the changes.

    If its not affect please restarts the BI Services now, you can add the content and it will not error messages appear
    (FYI: for testing add the BI Administrator role)

    Note: for your case number must assign catalog eats Group privileges. (is required when his case refused questions) If none of the work top please add BI Administrator role and then test 1

    Reward points and close the response unit to help others with the same question

    Thank you
    Deva

  • Integrated Oracle database reports space usage out bad results?

    Hi members,

    I use GC 11g OEM. I created a group with 6-7 members.

    I generated built-in reports "Area of database using Oracle (Group)".

    -J' I note the sum of the current size (GB) / section "Use of space allocated by database" is equal to allocated (GB) / section "use of the current Cumulative space '... I consider that the data are correct. Current size allocated: 2, 3 to and used size to 1.8.

    Good news... BUT the picture is FAKE! and does not match this amount:
    On the chart allocated size (GB) is equal to 2 TB and used size (GB) is equal to 1.6 TB

    question 1: why such a difference?

    -Use of space allocated by database:
    Current database average maximum minimum
    Size (GB) used for free (GB) (GB) used (%) Size (GB) used for free (GB) (GB) used (%) Size (GB) used for free (GB) (GB) used (%) Size (GB) used for free (GB) (GB) used (%)
    INSTANCE1. PRD 1,085.77 895.14 190,63 82.44 898.63 1 085,67 187,04 82.77 898.63 1 085,67 187,04 82.77 898.63 1 085,67 187,04 82.77
    INSTANCE2. PRD 245.14 190.44 54.7 77,69 238,58 183.1 55,48 76,75 238,58 183.1 55,48 76,75 238,58 183.1 55,48 76,75

    2nd question: results are BAD = > section/size (gb) current is superior to section/size (gb) maximum?
    How to explain?

    Thanks for your comments.

    Best regards
    Guillaume

    Hi William,.

    1 - my diagram of db group is, with the correct values. Why it's different in your case I don't know. You do not have the latest installed SGD patches?
    2. same here. I some cases, max db size > current size, but it doesn't really bother me, since I barely use this report. You can check the calculation to help to create it as an option on the report of the "space of database using Oracle (Group)"

    Eric

  • doubts about adding users to the Group

    Hello

    I'm working on obiee10g.

    "Group is created in settings-> Admin-> manage the catalogue presentation groups and users.
    For each access Group privileges is assigned in 'Manage privileges'.
    Now, there's a table in the schema that is created which stores the group with assigned users.
    The table was already created by someone else.
    But we know that ' users can be added to the group using the UI of the use of OBIEE settings-> Admin-> Manage presentation catalog groups and users ' directly.

    I just want to know by experts, what may be the reason behind the creation of the table for the same purpose to store users?

    Thank you

    No it's not. Just to make it clearer,

    How it works is that, once the authentication has been made by the SSO application engine, the user id is passed to the OBI and captured in the HTTP header on the web server OBI. This user id is used as an input to extract the different parameters of the external Table(as in discussion). The web group to which the user has access to is also extracted as parameters.

    After that, the system for webgroups session variable is set with the value retrieved, and so the access control is assured.

    In a summary, the authorization part must also be implemented using the external table as well. The mapping of id of the user with the role (web group) are there in the table and recovered in the same block of initialization.

    Just to mention, web groups would still be created in OBI BAU only.

    It would be rather convenient for you in view of the current implementation, you got.

    P.S.: Please note the answers with points always a good practice :)

Maybe you are looking for