Hello community,
i have question regarding SSFS with Oracle 12c on ExaData (distributed System).
I have installed ASCS and PAS on a standalone server and the Oracle database as a 3 node RAC on the ExaData.
R3trans -d is working from application- and database server witch <sid>adm user. No Problem:
4 ETW000 R3trans version 6.25 (release 742 - 01.02.16 - 13:15:00).
4 ETW000 unicode enabled version
4 ETW000 ===============================================
4 ETW000
4 ETW000 date&time : 08.03.2016 - 10:41:31
4 ETW000 control file: <no ctrlfile>
4 ETW000 R3trans was called as follows: R3trans -d
4 ETW000 trace at level 1 opened for a given file pointer
4 ETW000 [ dev trc,00000] Tue Mar 8 10:41:31 2016
4 ETW000 [ dev trc,00000] Loading DB library '/usr/sap/<SID>/SYS/exe/run/dboraslib.so' ...
4 ETW000 [ dev trc,00000] Library '/usr/sap/<SID>/SYS/exe/run/dboraslib.so' loaded
4 ETW000 [ dev trc,00000] Version of '/usr/sap/<SID>/SYS/exe/run/dboraslib.so' is "742.06", patchlevel (0.324)
4 ETW000 [ dev trc,00000] read_con_info_ssfs(): DBSL supports extended connect protocol
4 ETW000 ==> connect info for default DB will be read from ssfs
4 ETW000 [ dev trc,00000] Register application info.
4 ETW000 [ dev trc,00000] Oracle client version: 12.1.0.2.0, V2, default build, (dbsl 742 160216, UNICODE[2])
4 ETW000 [ dev trc,00000] Installed Oracle client patches:
4 ETW000 [ dev trc,00000] # Patch 20988771 : Created on 10 May 2015, 05:21:28 hrs PST8PDT
4 ETW000 [ dev trc,00000] # Patch 19594959 : Created on 29 Sep 2014, 03:47:01 hrs PST8PDT
4 ETW000 [ dev trc,00000] # Patch 11799748 : Created on 29 Sep 2014, 12:28:11 hrs CEST
4 ETW000 [ dev trc,00000] # Patch 11742262 : Created on 29 Sep 2014, 12:28:17 hrs CEST
4 ETW000 [ dev trc,00000] Client NLS setting (by OCINlsGetInfo(con=0)): 'AMERICAN_AMERICA.UTF16'
4 ETW000 [ dev trc,00000] Connecting as SAP<SID>/<pwd>@<SID> on connection 0 (nls 0) ... (dbsl 742 160216, UNICODE[2])
4 ETW000 [ dev trc,00000] OCIHandleAlloc(con=0): Service svc=2064028 created, rc=0
4 ETW000 [ dev trc,00000] OCIServerAttach(con=0, svc=2064028): New server hdl. srv=2066690 attached to '<SID>'
4 ETW000 [ dev trc,00000] OCISessionBegin(con=0, svc=2064028, srv=2066690='<SID>'): start session usr=2097d50='SAP<SID>', rc=0
4 ETW000 [ dev trc,00000] Now 'SAP<SID>/<pwd>@<SID>' is connected: con=0, nls=0, session=598, time='2016-03-08 10:41:31'
4 ETW000 [ dev trc,00000] DB instance <SID>1 is running on dbserver with ORACLE version 12.1.0.2.0 since FEB 29, 2016, 09:08:08.
4 ETW000 [ dev trc,00000] con=0, V$NLS_PARAMETERS: NLS_LANG=AMERICAN_AMERICA.UTF8, NLS_NCHAR=UTF8
4 ETW000 [ dev trc,00000] # CharacterSet (DB) NCharSet svchp srvhp usrhp nls TNS
4 ETW000 [ dev trc,00000] 0 UTF8 UTF8 2064028 2066690 2097d50 0 <SID>
4 ETW000 [ dev trc,00000] # CharacterSet (Env) NCharSet envhp errhp er2hp bathp
4 ETW000 [ dev trc,00000] 0 UTF16 AL16UTF16 203b200 2062010 2063090 2064110
4 ETW000 [ dev trc,00000] Connection 0 opened (DBSL handle 0)
4 ETW000 [ dev trc,00000] DbSlControl(DBSL_CMD_SAPRELEASE_SET,abap='740')
4 ETW000 [ dev trc,00000] NTAB: Structure of NTAB on DB is VERS_B, unicodelg of executable is 2, unicodelg of SVERS in nametab is 2
4 ETW000 Connected to DBMS = ORACLE --- dbs_ora_tnsname = '<SID>' --- SYSTEM = '<SID>'.
4 ETW690 COMMIT "0" "0"
4 ETW000 trace to file pointer closed
4 ETW000 trace at level 1 opened for a given file pointer
4 ETW000
4 ETW000 ================== STEP 1 =====================
4 ETW000 date&time : 08.03.2016 - 10:41:31
4 ETW000 function : CONNECT
4 ETW000 buffersync : YES
4 ETW000 clients : default
4 ETW000 purgedocu : YES
4 ETW000 commit : 100000
4 ETW000 table cache : dynamic
4 ETW000
4 ETW000 [ dev trc,00000] Disconnecting from ALL connections:
4 ETW000 [ dev trc,00000] Disconnecting con=0
4 ETW000 [ dev trc,00000] OCISessionEnd(con=0, svc=2064028, srv=2066690='<SID>'): Close session usr=2097d50, rc=0
4 ETW000 [ dev trc,00000] OCIServerDetach(stale1 con=0, svc=2064028, srv=2066690='<SID>') successfully detached
4 ETW000 [ dev trc,00000] OCIHandleFree(con=0, svc=2064028): Server handle srv=2066690 freed
4 ETW000 [ dev trc,00000] OCIHandleFree(con=0): Service hdl. svc=2064028 freed.
4 ETW000 [ dev trc,00000] Disconnected from connection 0
4 ETW000 [ dev trc,00000] statistics db_con_commit (com_total=1, com_tx=1)
4 ETW000 [ dev trc,00000] statistics db_con_rollback (roll_total=0, roll_tx=0)
4 ETW000 Disconnected from database.
4 ETW000 End of Transport (0000).
4 ETW000 date&time: 08.03.2016 - 10:41:31
Right now i tried to run brconnect as <sid>adm on the databaseserver and i got the following error:
>>>>> brconnect -u // -c -f check
BR0801I BRCONNECT 7.40 (21)
BR1528E Calling a function of library rsec5lib failed at location BrSsBrUsrPwdGet-2, return code 1
BR1301E Error message from rsec5lib: SSFS-4187: Record with key "BR_TOOLS/DEFAULT_DB_USER" not found in secure storage <-- SSFS-4182: Data file "/oracle/<SID>/security/rsecssfs/data/SSFS_<SIS>.DAT" does not exist (this is not an error per se: a non-existing data file is a valid situation and treated equally as one without entries) <-- SSFS
BR1529E Getting BR*Tools user name/password from secure storage /oracle/<SID>/security/rsecssfs/data/SSFS_<SID>.DAT failed
BR0806I End of BRCONNECT processing: cesrhpzb.log 2016-03-08 10:44:47
BR0280I BRCONNECT time stamp: 2016-03-08 10:44:47
BR0804I BRCONNECT terminated with errors
And now my question.
I read about creating some directories in this post SSFS Implementation for Oracle Database
Create necessary directories
- K sidadm
cd /usr/sap/SID/SYS/global
mkdir /usr/sap/SID/SYS/global/security
mkdir /usr/sap/SID/SYS/global/security/rsecssfs
mkdir /usr/sap/SID/SYS/global/security/rsecssfs/data
mkdir /usr/sap/SID/SYS/global/security/rsecssfs/key
But this is only on the application server i think. But what about the ExaData?
brconnect looked for the .DAT file in the following directory:
/oracle/<SID>/security/rsecssfs/data
And this is because $SAPDATA_HOME is set /oracle/<SID>
Is correct up to here?
So which user should create the following directories (oracle, <SID>adm or ora<SID>):
/oracle/<SID>/security
/oracle/<SID>/security/rsecssfs
/oracle/<SID>/security/rsecssfs/data
/oracle/<SID>/security/rsecssfs/key
And which permissions should they have?!
I also tried to copy the existing SSFS_<SID>.DAT from /usr/sap/SID/SYS/global/security/rsecssfs/data to /oracle/<SID>/security/rsecssfs/data with user oracle and also with <SID>adm. Then i go the following error message:
>>>>>>> brconnect -u // -c -f check
BR0801I BRCONNECT 7.40 (21)
BR1528E Calling a function of library rsec5lib failed at location BrSsBrUsrPwdGet-2, return code 1
BR1301E Error message from rsec5lib: SSFS-4218: Record with key "BR_TOOLS/DEFAULT_DB_USER" not found in secure storage <-- SSFS-4215: Data file "/oracle/<SID>/security/rsecssfs/data/SSFS_<SID>.DAT" exists, but does not contain the requested entry
BR1529E Getting BR*Tools user name/password from secure storage /oracle/<SID>/security/rsecssfs/data/SSFS_<SID>.DAT failed
BR0806I End of BRCONNECT processing: cesrhrmr.log 2016-03-08 11:01:57
BR0280I BRCONNECT time stamp: 2016-03-08 11:01:57
BR0804I BRCONNECT terminated with errors
Did someone had the same problem and what would be the solution for this?!
Regards,
Sascha