Backup jobs of the Oracle RAC databases may fail if the root does not have the oracle permission

Article:TECH205507  |  Created: 2013-04-25  |  Updated: 2014-01-27  |  Article URL http://www.symantec.com/docs/TECH205507
Article Type
Technical Solution


Subject

Issue



When Oracle Real Application Cluster (RAC) is configured in Linux servers, backup jobs of the Oracle databases may fail if the root user does not have the oracle permission.  This can occur even if the root is not specified for the credential of either the backup jobs or AgentConfig.
In this situation, RMAN backups to disk are completed successfully.

 


Error



RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of allocate command at 04/18/2013 15:55:25
ORA-00204: error in reading (block 1, # blocks 1) of control file
ORA-00202: control file: '+DATA/orcl/control01.ctl'
ORA-15081: failed to submit an I/O operation to a disk
 


Cause



When a backup job is started, remote agent would impersonate a user which is specified in the property of the backup job. In the impersonation, remote agent would change a user and a primary group but would not change secondary groups.

The secondary groups are inherited from root user. Thus, root user should be a member of the additional group which have a permission to access to Oracle database or ASM.

After the SP3 below, remote agent would impersonate the secondary groups in addition to the user and primary group.

 

Summary

Before applying 2012 SP3/2010 SP4: Secondary groups which are member of the root user are effective.
After applied 2012 SP3/2010 SP4: Secondary groups which are member of a specified user in the credentials of backup jobs are effective.
 


Solution



A hotfix is now available for this issue in the current version(s) of the product(s) mentioned in this article. Refer to the Hotfix link under Related Documents at the end of this article to obtain the hotfix needed to resolve the issue.

Backup Exec 2012 Rev 1798 Service Pack 3 (TECH205351).

Backup Exec 2010 R3 Rev 5204 Service Pack 4  (TECH208828).

Supplemental Materials

SourceETrack
Value3165940
Description

Cannot get Oracle RAC backup if the root does not have Oracle permissions




Article URL http://www.symantec.com/docs/TECH205507


Terms of use for this information are found in Legal Notices