Backup jobs of the Oracle RAC databases may fail if the root does not have the oracle permission
|Article:TECH205507|||||Created: 2013-04-25|||||Updated: 2013-11-19|||||Article URL http://www.symantec.com/docs/TECH205507|
When Oracle Real Application Cluster (RAC) is configured in Linux servers, backup jobs of the Oracle databases may fail if the root user does not have the oracle permission. This can occur even if the root is not specified for the credential of either the backup jobs or AgentConfig.
In this situation, RMAN backups to disk are completed successfully.
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-03002: failure of allocate command at 04/18/2013 15:55:25
ORA-00204: error in reading (block 1, # blocks 1) of control file
ORA-00202: control file: '+DATA/orcl/control01.ctl'
ORA-15081: failed to submit an I/O operation to a disk
When a backup job is started, remote agent would impersonate a user which is specified in the property of the backup job. In the impersonation, remote agent would change a user and a primary group but would not change secondary groups.
The secondary groups are inherited from root user. Thus, root user should be a member of the additional group which have a permission to access to Oracle database or ASM.
After the SP3 below, remote agent would impersonate the secondary groups in addition to the user and primary group.
Before applying SP3: Secondary groups which are member of the root user are effective.
After applied SP3: Secondary groups which are member of a specified user in the credentials of backup jobs are effective.
A hotfix is now available for this issue in the current version(s) of the product(s) mentioned in this article. Refer to the Hotfix link under Related Documents at the end of this article to obtain the hotfix needed to resolve the issue.
Backup Exec 2012 Rev 1798 Service Pack 3 (TECH205351).
Add the root to a member of oinstall, dba and asmadmin groups.
Also check the credentials specified in the backup jobs. The users of the credentials should be a member of beoper, oinstall, dba and asmadmin groups.
Cannot get Oracle RAC backup if the root does not have Oracle permissions
Article URL http://www.symantec.com/docs/TECH205507