Home » Server Options » RAC & Failsafe » RAC 12c:ORA-01031: insufficient privileges as sys user (RAC 12c, DB 11.2.0.4.0, AIX)
RAC 12c:ORA-01031: insufficient privileges as sys user [message #623950] Tue, 16 September 2014 09:45 Go to next message
zaff
Messages: 50
Registered: July 2008
Member
Hello all,
I'm having issues executing some "ALTER SYSTEM SET" queries on our RAC database.
I'm logging in as sys: sqlplus as sysdba.

I can run the following command successfully:
alter system set REMOTE_OS_ROLES=FALSE scope=spfile sid='*';


However, when I run the following query:
alter system set O7_DICTIONARY_ACCESSIBILITY=FALSE scope=spfile sid='*';


.....I get the following error:
ORA-01031: insufficient privileges.

My OS user has been assigned the following groups: "oinstall" "dba" "asmdba".

Any ideas why I get the above error?

Thanks in advance,
Zaff

Report message to a moderator

Re: RAC 12c:ORA-01031: insufficient privileges as sys user [message #623952 is a reply to message #623950] Tue, 16 September 2014 10:05 Go to previous messageGo to next message
Michel Cadot
Messages: 68420
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

You must not do this so what is the problem?

Report message to a moderator

Re: RAC 12c:ORA-01031: insufficient privileges as sys user [message #623953 is a reply to message #623952] Tue, 16 September 2014 10:29 Go to previous messageGo to next message
zaff
Messages: 50
Registered: July 2008
Member
Hi Michel - Thanks for the short response/question. I'm assuming when you say "You must not do this" you're referring to 
alter system set O7_DICTIONARY_ACCESSIBILITY=FALSE scope=spfile sid='*';
? The reason i need to do this is to protect sys objects from users with "SELECT ANY TABLE" privilege etc. However, the point is that I want to be able to do this and I should be able to. The command works in a single node database, but not on RAC.

Would be great if someone can help or provide direction.

Thanks,
Zaff

Report message to a moderator

Re: RAC 12c:ORA-01031: insufficient privileges as sys user [message #623955 is a reply to message #623953] Tue, 16 September 2014 11:22 Go to previous messageGo to next message
Michel Cadot
Messages: 68420
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

Quote:
he reason i need to do this is to protect sys objects from users with "SELECT ANY TABLE" privilege etc.


The default value is FALSE so you should not have to set its value.

Quote:
The command works in a single node database, but not on RAC.


Try to do it for each database but they may be remove the possibility to change this parameter in 12c.
In this case, if you have it set to TRUE in your database, then just create a pfile from the spfile, then remove the parameter from the pfile and create back the spfil from the pfile.

Report message to a moderator

Re: RAC 12c:ORA-01031: insufficient privileges as sys user [message #623957 is a reply to message #623955] Tue, 16 September 2014 11:59 Go to previous message
zaff
Messages: 50
Registered: July 2008
Member
great! Thanks, Michel.

Regards,
Zaff

Report message to a moderator

Previous Topic: Oracle 11.2.0.3 RAC - after upgrade cannot start database - TNS protocol error
Next Topic: RAC 11g new install...newbie question
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Wed Mar 29 11:16:44 CDT 2023
.:: Forum Home :: Blogger Home :: Wiki Home :: Contact :: Privacy ::.