Return
-
Title
"ORA-01031: insufficient privileges" logging with sys as sysasm in the ASM agent -
Description
The following error occurs in the Foglight Oracle ASM agent log when logging as SYS as SYSASM in a 11g +ASM instance,
ORA-01031: insufficient privileges
The same error also occurs when logging in using the account in SQL*Plus.
-
Cause
Connect as SYSDBA or SYSASM (Oracle version 11G release 2 and above). -
Resolution
In Oracle 11g a new SYSASM privilege was introduced for doing ASM specific work.
Login on db tier (host where +ASM is installed) as sys as sysasm or sysdba and check if remote access is enabled for SYSASM.
-bash-4.1$ sqlplus /as sysasm
SQL*Plus: Release 11.2.0.3.0 Production on Wed Jun 11 15:50:29 2014
Copyright (c) 1982, 2011, Oracle. All rights reserved.
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
With the Automatic Storage Management optionSQL> select * from v$pwfile_users;USERNAME SYSDB SYSOP SYSAS—————————— —– —– —–SYS TRUE TRUE FALSEIf the SYSASM column is FALSE then it is currently turned off and it should be turned on.SQL> grant sysasm to sys;Grant succeeded.
SQL> select * from v$pwfile_users;USERNAME SYSDB SYSOP SYSAS—————————— —– —– —–SYS TRUE TRUE TRUEThe user should be able to login remotely as SYSASM.Please note that there may be a security risk of having the access enabled remotely.