ora-15025 Permission denied
1.今天在用RMAN新搭建数据库的过程中，遇到如下错误
2.报权限错误，我紧接着去做了dd 看下是否有权限读写，结果报如下错误
3.接着我查询了磁盘组属正常
4.查询了ORACLE_HOME/bin/oracle可执行文件权限和组属
发现oracle可执行文件用户组不对，应该属于asmadmin
5.因此我做了如下处理
su - grid
cd $GRID_HOME/bin
./setasmgidwrap o=<11.2 RDBMS>/bin/oracle
经过如上处理后，一切正常。后面我查看了moS 可以参考如下文档解决
1084186.1和1487475.1
|
CASE |
GRID(oracle binary) |
RDBMS(oracle binary) |
ASM Devices permission |
Impact |
|
1. Wrong ASM device group permission |
-rwsr-s--x 1 grid oinstall |
-rwsr-s--x 1 oracle asmadmin |
brw-rw---- 1 grid dba ( or asmdba ) |
Database connections using oracle user does not have any issue as oracle user usually belong to dba as a secondary group who has read/write permission on ASM devices. But any user who does not belong to dba group will cause the error described in the symptom. |
|
2. Wrong oracle group permission from RDBMS |
-rwsr-s--x 1 grid oinstall |
-rwsr-s--x 1 oracle oinstall |
brw-rw---- 1 grid asmadmin |
Database will not start up as even oracle user does not have enough priviledge to read/write from/to ASM devices |
|
3. Wrong oracle binary group permission from RDBMS and wrong ASM device group permission |
-rwsr-s--x 1 grid oinstall |
-rwsr-s--x 1 oracle oinstall |
brw-rw---- 1 grid oinstall |
Any user who doesn't belong to oinstall group will cause the error described in the symptom above. And this is not a real role separation between ASM ( SA - Storage team ) and RDBMS ( DBA team ) as all users belonged to oinstall group can destroy ASM devices using OS command such as "dd" etc. |
|
4. No setuid bit for oracle binary from RDBMS Home |
-rwsr-s--x 1 grid oinstall |
-rwxr-x--x 1 oracle asmadmin |
brw-rw---- 1 grid asmadmin |
Any user other than oracle will cause the error described in the symptom above |
|
5. No setuid bit for oracle binary from GRID Home |
-rwxr-x--x 1 grid oinstall |
rwsr-s--x 1 oracle asmadmin |
brw-rw---- 1 grid asmadmin |
Database will not start up with ORA-00205 and ORA-27123 error from RDBMS side. See Oracle Note 1487382.1 |
|
6. Correct Permission for role separation |
-rwsr-s--x 1 grid oinstall |
-rwsr-s--x 1 oracle asmadmin |
brw-rw---- 1 grid asmadmin |
No issue. |
Solution
1. Implement the correct permission for oracle binary from GRID and RDBMS Home and ASM devices.
|
|
GRID(oracle binary) |
RDBMS(oracle binary) |
ASM Devices permission |
|
Correct Permission for role separation |
-rwsr-s--x 1 grid oinstall |
-rwsr-s--x 1 oracle asmadmin |
brw-rw---- 1 grid asmadmin |
来自 “ ITPUB博客 ” ，链接：https://blog.itpub.net/31134212/viewspace-2119242/ ，如需转载，请注明出处，否则将追究法律责任。
