Connect as SYSDBA on 11.2 Cloned Home Gives "ORA-1031: Insufficient Privileges" Error

In 11.2, the syntax for cloning an ORACLE_HOME has changed.

The clone.pl script has to be called using the following new variables:

OSDBA_GROUP=OSDBA_privileged_group
OSOPER_GROUP=OSOPER_privileged_group

SOLUTION

To avoid the issue, run clone.pl command using next syntax:

$ORACLE_HOME/perl/bin/perl clone.pl ORACLE_BASE="target_oracle_base" ORACLE_HOME="target_oracle_home" OSDBA_GROUP=OSDBA_privileged_group OSOPER_GROUP=OSOPER_privileged_group -defaultHomeName

or

$ORACLE_HOME/perl/bin/perl clone.pl ORACLE_BASE="target_oracle_base" ORACLE_HOME="target_oracle_home" OSDBA_GROUP=OSDBA_privileged_group OSOPER_GROUP=OSOPER_privileged_group ORACLE_HOME_NAME="target_home_name"

This syntax is documented in Appendix B of the 11.2 Installation Guide

If the software has already been cloned and you want to resolve the error :

1. Edit $ORACLE_HOME/rdbms/lib/config.c and set the correct groups:

#define SS_DBA_GRP "dba"
#define SS_OPER_GRP "dba"
#define SS_ASM_GRP "dba"

2. Generate a new config.o and relink the oracle executable

% cd $ORACLE_HOME/rdbms/lib
% mv config.o config.bck
% make -f ins_rdbms.mk ioracle

NOTE

11.2 on Linux and HP-UX use config.c, but 11.2 on Solaris and AIX use config.s (see step 7 of Note:558478.1 or Note:50507.1 for more information about this)