ASM device error ORA-27041 ORA-15025 ORA-15081 (Doc ID 1487475.1)
ASM device error ORA-27041 ORA-15025 ORA-15081 (Doc ID 1487475.1)
In this Document
Symptoms |
Cause |
Solution |
References |
Applies to:
Oracle Database - Enterprise Edition - Version 11.2.0.1 to 11.2.0.4 [Release 11.2]Information in this document applies to any platform.
Symptoms
1. All ASM diskgroups are currently mounted
2. Majority of the business applications are running without any issue.
3. There is no issue when connecting to RDBMS using RDBMS OS user ( example "oracle" user )
4. Role separation between ASM devices and RDBMS has been implemented.
For example, grid for ASM instance & oracle for RDBMS instance
5. The following error is reported in RDBMS alert.log.
ORA-27041: unable to open file
IBM AIX RISC System/6000 Error: 13: Permission denied
Additional information: 11
ORA-01115: IO error reading block from file 1
ORA-01110: data file 1; +DATA/orcl/system
ORA-15081: failed to submit an I/O operation to a disk
ORA-01110: data file 1; +DATA/orcl/system; ORA-15081: failed to submit an I/O operation to a disk
Cause
This issue can happen with wrong permission of oracle binary from RDBMS home or wrong permission of ASM devices. The group owner of oracle binary from RDBMS home should be the same as the group owner of all ASM devices with setuid and setgid bit configured, so that any user connecting RDBMS can have the group priviledge configured for oracle binary.
For example, if all ASM devices are owned by "asmadmin" group, the group of oracle binary should be set to "asmadmin" with setgid priviledge.
And the group owner of ASM devices should be the same as the one specified as sysasm group on GRID installation and can be checked with the following command.
$ cat $GRID_HOME/rdbms/lib/config.[sc] | grep -i SS_ASM_GRP
Examples of wrong configuration for role separation between GRID and RDBMS.
GRID OS user : grid
SYSASM group owner : asmadmin
$ cat $GRID_HOME/rdbms/lib/config.[sc] | grep -i SS_ASM_GRP
#define SS_ASM_GRP "asmadmin"
char *ss_dba_grp[] = {SS_DBA_GRP, SS_OPER_GRP, SS_ASM_GRP};
CASE | GRID(oracle binary) | RDBMS(oracle binary) | ASM Devices permission | Impact |
---|---|---|---|---|
1. Wrong ASM device group permission | -rwsr-s--x 1 grid oinstall | -rwsr-s--x 1 oracle asmadmin |
brw-rw---- 1 grid dba ( or asmdba ) |
Database connections using oracle user does not have any issue as oracle user usually belong to dba as a secondary group who has read/write permission on ASM devices. But any user who does not belong to dba group will cause the error described in the symptom. |
2. Wrong oracle group permission from RDBMS | -rwsr-s--x 1 grid oinstall | -rwsr-s--x 1 oracle oinstall | brw-rw---- 1 grid asmadmin | Database will not start up as even oracle user does not have enough priviledge to read/write from/to ASM devices |
3. Wrong oracle binary group permission from RDBMS and wrong ASM device group permission | -rwsr-s--x 1 grid oinstall | -rwsr-s--x 1 oracle oinstall | brw-rw---- 1 grid oinstall |
Any user who doesn't belong to oinstall group will cause the error described in the symptom above. And this is not a real role separation between ASM ( SA - Storage team ) and RDBMS ( DBA team ) as all users belonged to oinstall group can destroy ASM devices using OS command such as "dd" etc. |
4. No setuid bit for oracle binary from RDBMS Home | -rwsr-s--x 1 grid oinstall | -rwxr-x--x 1 oracle asmadmin | brw-rw---- 1 grid asmadmin | Any user other than oracle will cause the error described in the symptom above |
5. No setuid bit for oracle binary from GRID Home | -rwxr-x--x 1 grid oinstall | rwsr-s--x 1 oracle asmadmin | brw-rw---- 1 grid asmadmin | Database will not start up with ORA-00205 and ORA-27123 error from RDBMS side. See Oracle Note 1487382.1 |
6. Correct Permission for role separation | -rwsr-s--x 1 grid oinstall | -rwsr-s--x 1 oracle asmadmin | brw-rw---- 1 grid asmadmin | No issue. |
Solution
1. Implement the correct permission for oracle binary from GRID and RDBMS Home and ASM devices.
GRID(oracle binary) | RDBMS(oracle binary) | ASM Devices permission | |
---|---|---|---|
Correct Permission for role separation | -rwsr-s--x 1 grid oinstall | -rwsr-s--x 1 oracle asmadmin | brw-rw---- 1 grid asmadmin |
2. How to add setuid and setgid bit to oracle binary
Shutdown RDBMS ( or ASM ) instance
$ chmod 6751 oracle
And start up instance
3. How to change the group permission of oracle binary from RDBMS home.
- See Oracle Note 1084186.1
<< Confirm sysasm group name using "$ cat $GRID_HOME/rdbms/lib/config.[sc] | grep -i SS_ASM_GRP "
4. How to change the group permission of ASMLib devices.
4-1. Stop CRS ( or ASM instance ) from all nodes but this can be done in a rolling fashion in a situation where CRS stack can not be stopped at the same time.
<< This will shutdown RDBMS/ASM and CRS
4-2. Stop oracleasm
<< If ASMlib is not stopped properly, see Solution #2 ] in Oracle Note 1444115.1 .
4-3. Reconfigure ASMlib with the correct group ( ex. asmadmin )
4-4. Startup ASMlib
4-5. Check whether group infromation from all ASM disks in /dev/oracleasm/disks/* has been changed to correct group.
4-6. Start CRS
Simple Workaround
1. Give read permission to the world for all ASM devices to check whether the issue is the same described in the Cause section because this error only happens on read operation from ASM devices.
But this temporary workaround won't work on next reboot or on ASMlib restart as ASMLib restart will restore the original permission.
2. If the group owner of oracle binary from RDBMS home has changed to conform to the group owner of ASM devices other than sysasm ( SS_ASM_GRP) group, chances are that the next RDBMS startup with srvctl will change the group owner to the original group, which is an expected behaviour. But the issue doesn't happen with sqlplus.
Appendix I
If the impact of this issue and which application or user causing this issue have not been determined, run OSWatcher till the same error is reported and find process id in RDBMS alert.log to check which application or OS user is responsible for this error from oswps data.
- OS Watcher Black Box User Guide (Doc ID 301137.1)
References
NOTE:1084186.1 - Database Creation on 11.2 Grid Infrastructure with Role Separation ( ORA-15025, KFSG-00312, ORA-15081 )NOTE:1317692.1 - 11.2 Job Seperation causes WARNINGS and ORA-15025 ORA-27041 With Certain Users
來自 “ ITPUB部落格 ” ,連結:http://blog.itpub.net/17252115/viewspace-1104341/,如需轉載,請註明出處,否則將追究法律責任。
相關文章
- Configuring device-mapper for CRS/ASM (Doc ID 357472.1)devAPPASM
- ORACLE ORA-15025 ORA-27041 報錯解決方法Oracle
- How to Prepare Storage for ASM (Doc ID 452924.1)ASM
- Database Creation on 11.2 Grid Infracture( ORA-15025, KFSG-00312, ORA-15081 )Database
- ORA-15097 Cannot Shutdown ASM if OCR is Located in ASM (Doc ID 984663.1)ASM
- ASM: Device is already labeled for ASM diskASMdev
- 【Bug】Bug 11827204: NON-OSDBA USERS WITH LOCAL CONNECTIONS: ORA-15025 ORA-27041
- ASM tools used by Support : KFOD, KFED, AMDU (Doc ID 1485597.1)ASM
- Performing duplicate database with ASM/OMF/RMAN (Doc ID 340848.1)ORMDatabaseASM
- How to free space from an ASM diskgroup? (Doc ID 1553744.1)ASM
- oracleasm createdisk ASM: Device is already labeled for ASM diskOracleASMdev
- Setting up ASM on linux with LVM (Doc ID 292348.1)ASMLinuxLVM
- error initializing graphdriver: devmapper: Base Device UUID and Filesystem verifErrordevAPPUI
- [Oracle] Device Checks for ASM - This is a pre-check........OracledevASM
- Oracle ASM oracleasm createdisk "Device or resource busy"OracleASMdev
- error:slave communication error with ASMErrorASM
- ERROR: slave communication error with ASMErrorASM
- 釋出android apk,Error running app: No target device found.AndroidAPKErrorAPPdev
- Andorid“emulator: ERROR: unknown virtual device name”問題解決Errordev
- emulator: ERROR: unknown virtual device nameErrordev
- Placeholder for AMDU binaries and using with ASM 10g (Doc ID 553639.1)ASM
- 【踩坑】RuntimeError: CUDA error: device-side assert triggeredErrordevIDE
- ORA-15024: discovered duplicately numbered ASM disk(Doc ID 1457185.1)ASM
- Top ASM Bugs In 11gR2 (Doc ID 1506033.1)ASM
- Rman Backup Failed With Error Rman-00600 [8201] (Doc ID 412786.1)AIError
- Step by Step Troubleshooting Guide for TDE Error ORA-28374 (Doc ID 1541818.1)GUIIDEError
- Error: Connection activation failed: Device not managed by NetworkManagerErrorAIdev
- ASM學習筆記_配置RAW Device磁碟組ASM筆記dev
- 【ASM】ORA-27504 ORA-27300 ORA-27303 while starting ASM (Doc ID 2281441.1)ASMWhile
- openGauss 出現-Error-No-space-left-on-device-提示Errordev
- SQL error 2812: Could not find stored procedure.docSQLError
- linux下asm裡如何找到asm disk和os device的對應關係LinuxASMdev
- 【故障處理】Bug : ASM FAILS WITH CHECKRESOURCE ERROR ERROR CODE = 139ASMAIError
- 修改vip (Doc ID 276434.1)
- linux下如何使用raw device來建立管理asm diskLinuxdevASM
- 二述_rhel4利用loop device deploying asm storageOOPdevASM
- 建立raw device tablespace報Linux Error: 13: Permission denieddevLinuxError
- FILE ON OCFS CANNOT BE DELETED LINUX ERROR: 16: DEVICE OR RESOURCE BUSYdeleteLinuxErrordev