An ASA database table which is queried by CommandCentral Enterprise Reporter (CCER) during data rollup from a CommandCentral Storage (CCS) 5.0 GA (generally available) Management Server (MS) called HALCHM.FC_VirtualMachine is missing the PUBLIC select permission which causes the rollup to error out and abort resulting in failure.

Article:TECH54308  |  Created: 2007-01-19  |  Updated: 2008-01-20  |  Article URL http://www.symantec.com/docs/TECH54308
Article Type
Technical Solution


Environment

Issue



An ASA database table which is queried by CommandCentral Enterprise Reporter (CCER) during data rollup from a CommandCentral Storage (CCS) 5.0 GA (generally available) Management Server (MS) called HALCHM.FC_VirtualMachine is missing the PUBLIC select permission which causes the rollup to error out and abort resulting in failure.

Error



be.ibridge.kettle.trans.Trans - ERROR (version 2.4.0, build 159 from 2007/05/01 16:24:18) : Errors detected!

ASA Error -121: Permission denied: you do not have permission to select from

Solution



Upgrading the DCAP version of CommandCentral Storage (CCS) 5.0 to the GA version of CCS 5.0 can leave some database tables without the PUBLIC access permission required to read from the table.
This issue is resolved in the CCS 5.0MP1 version when upgrading directly from DCAP 5.0 or CCS 5.0.
The missing access will cause the rollup of data from a CCS 5.0 GA MS by CCER 5.0 to error out and abort resulting in failure.
The issue will also cause errors when creating adhoc reports on the Vmware data collected by the CCS 5.0 application due to many tables missing the PUBLIC 'select' permission.
These tables include: HALCHM.FC_HostStoragePool, HALCHM.FC_HostStoragePool_HostList, HALCHM.FC_HostVirtualDisk, HALCHM.FC_HostVirtualDisk_Status, HALCHM.FC_VirtualMachine, and HALCHM.FC_VirtualMachine_OperationalStatus.
The report will fail to run with an error referencing the table name. A part of the error will read ASA Error -121: Permission denied: you do not have permission to select from <Table_Name>.

The remedy is to grant the PUBLIC select permission at the CCS 5.0 Management Server (MS) to the ASA database tables.
The compressed script and Operating System shell is attached below. It is expected to source the location of the ASA database and tools.
Please contact Symantec Technical Support Services if in running the commands difficulties are experienced.
For CCS 5.0 GA MS running in Windows environments:
1) Download and extract the GrantSelectToAllHALCHMTables_292472.zip file into as temporary location on the CCS 5.0 MS.
2) Extract the GrantSelectToAllHALCHMTables.sql and QueryDB.bat files.
3) Execute the command cmd from the Start >> Run box to open a DOS command window.
4) As Administrator from within the temporary directory location containing the extracted files run the command:
[location]:> QueryDB.bat GrantSelectToAllHALCHMTables.sql
5) Close the DOS window and delete the extracted files as they will not be used again.

For CCS 5.0 GA MS running in Solaris environments:
1) Download and extract the GrantSelectToAllHALCHMTables_292472.zip file into as temporary location on the CCS 5.0 MS.
2) Extract the GrantSelectToAllHALCHMTables.sql and QueryDB.sh files.
3) Open a terminal session on the CCS 5.0 MS .
4) As root from within the temporary directory location containing the extracted files run the command:
# sh QueryDB.sh GrantSelectToAllHALCHMTables.sql
5) Delete the extracted files as they will not be used again and close the terminal session.












Legacy ID



292472


Article URL http://www.symantec.com/docs/TECH54308


Terms of use for this information are found in Legal Notices