{"id":783,"date":"2014-08-03T15:30:23","date_gmt":"2014-08-03T18:30:23","guid":{"rendered":"http:\/\/www.dbarj.com.br\/?p=783"},"modified":"2014-10-09T23:41:25","modified_gmt":"2014-10-10T02:41:25","slug":"atualizar-oracle-em-12c-database-vault-habilitado","status":"publish","type":"post","link":"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/","title":{"rendered":"Como atualizar Oracle EM 12c com Database Vault habilitado"},"content":{"rendered":"

Nestes \u00faltimos dias, fui\u00a0atualizar o EM 12c do release\u00a012.1.0.3.0 para o release\u00a012.1.0.4.0. No entanto,\u00a0o BD onde estava o reposit\u00f3rio do Enterprise Manager tinhao Oracle Database Vault habilitado e pela pol\u00edtica de seguran\u00e7a de empresa, eu n\u00e3o poderia desabilit\u00e1-lo nem temporariamente para prosseguir com o upgrade.<\/p>\n

Sem d\u00favidas a melhor forma de prosseguir com a instala\u00e7\u00e3o sem ter problemas teria sido desligando temporariamente o Database Vault.<\/p>\n

O reposit\u00f3rio executava\u00a0um Oracle Database 11.2.0.4<\/strong>\u00a0atualizado com PSU 3<\/strong>.<\/p>\n

Quando iniciei o processo de instala\u00e7\u00e3o, j\u00e1 na etapa de atualiza\u00e7\u00e3o do reposit\u00f3rio, me deparei com o seguinte erro:<\/p>\n

ORA-01031: insufficient privileges\r\nORA-06512: at line 21\r\nFile:\/u01\/app\/oem\/em12cR4\/Middleware\/oms\/sysman\/admin\/emdrep\/sql\/core\/latest\/admin\/admin_create_cloud_engine_user.sql\r\nStatement:declare \r\n    l_sql varchar2(512);\r\n    l_count number;\r\nBEGIN\r\n    select count(*) into l_count from all_users where username = upper('CLOUD_ENGINE_USER');\r\n    IF (l_count = 0) THEN\r\n        l_sql := \r\n            'CREATE USER CLOUD_ENGINE_USER ' ||\r\n            ' IDENTIFIED BY \"dbaspdgs10rio\" ' ||\r\n            ' DEFAULT TABLESPACE MGMT_ECM_DEPOT_TS ' ||\r\n            ' TEMPORARY TABLESPACE TEMP '||\r\n            '  PASSWORD EXPIRE  ACCOUNT LOCK';\r\n\r\n        execute immediate l_sql; \r\n    END IF;\r\n\r\nEXCEPTION WHEN OTHERS THEN \r\n    IF SQLCODE = -01920 THEN \r\n        NULL;\r\n    ELSE\r\n        raise;\r\n    END IF;\r\nEND;<\/pre>\n
O SYS n\u00e3o tem permiss\u00e3o de criar usu\u00e1rios quando o DV est\u00e1 habilitado. Para passar por este erro, eu resolvi conceder temporariamente os grants nas roles\u00a0dv_acctmgr<\/strong> e\u00a0dv_owner<\/strong> para o usu\u00e1rio SYS<\/strong> e SYSMAN<\/strong> (ambos participam da tarefa de upgrade). Ap\u00f3s isso, cliquei em RETRY<\/strong> e passei pelo problema:<\/p>\n
grant dv_acctmgr to sys;\r\ngrant dv_acctmgr to sysman;\r\n\r\ngrant dv_owner to sys;\r\ngrant dv_owner to sysman;<\/pre>\n
Por\u00e9m, isso n\u00e3o foi o suficiente. Mais a frente, tive erros\u00a0com outro privil\u00e9gio:<\/p>\n
ORA-47410: Realm violation for GRANT on CONNECT\r\nFile:\/u01\/app\/oem\/em12cR4\/Middleware\/oms\/sysman\/admin\/emdrep\/sql\/core\/latest\/admin\/admin_grants_repos_user.sql\r\nStatement:GRANT connect, resource TO SYSMAN<\/pre>\n
O problema aqui foi no momento em que o usu\u00e1rio SYS tentou conceder grant na role CONNECT para o usu\u00e1rio SYSMAN (que por sinal, j\u00e1 possuia este grant).<\/p>\n
Para passar por esta etapa, adicione temporariamente o usu\u00e1rio SYS na realm\u00a0‘Database Vault Account Management’<\/strong>:<\/p>\n
BEGIN\r\n  DVSYS.DBMS_MACADM.ADD_AUTH_TO_REALM(\r\n  REALM_NAME => 'Database Vault Account Management',\r\n  GRANTEE => 'SYS',\r\n  AUTH_OPTIONS => DVSYS.DBMS_MACUTL.G_REALM_AUTH_OWNER);\r\nEND;\r\n\/<\/pre>\n
Ao clicar em RETRY<\/strong>, n\u00e3o tive mais nenhum problema e a instala\u00e7\u00e3o da nova vers\u00e3o seguiu transparente at\u00e9 o final.<\/p>\n
A melhor forma de ter atualizado teria sido desabilitando o Oracle Database Vault antes do in\u00edcio da tarefa, mas com estes workarounds, \u00e9 poss\u00edvel atualiz\u00e1-lo com o Vault habilitado.<\/p>\n
Por fim, revogue os acessos concedidos temporariamente:<\/p>\n
revoke dv_acctmgr from sys;\r\nrevoke dv_acctmgr from sysman;\r\n\r\nrevoke dv_owner from sys;\r\nrevoke dv_owner from sysman;\r\n\r\nBEGIN\r\n  DVSYS.DBMS_MACADM.DELETE_AUTH_FROM_REALM(\r\n  REALM_NAME => 'Database Vault Account Management',\r\n  GRANTEE => 'SYS');\r\nEND;\r\n\/<\/pre>\nGostou? N\u00e3o deixe de comentar ou deixar um \ud83d\udc4d!<\/b>\n
Continue lendo<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,3],"tags":[],"class_list":["post-783","post","type-post","status-publish","format-standard","hentry","category-security","category-oem12c","item-wrap"],"yoast_head":"\nComo atualizar Oracle EM 12c com Database Vault habilitado - DBA - Rodrigo Jorge - Oracle Tips and Guides<\/title>\n<meta name=\"description\" content=\"How to Upgrade EM 12c to the latest version when Oracle Database Vault is enabled.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"DBA RJ\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2014\\\/08\\\/atualizar-oracle-em-12c-database-vault-habilitado\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2014\\\/08\\\/atualizar-oracle-em-12c-database-vault-habilitado\\\/\"},\"author\":{\"name\":\"DBA RJ\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\"},\"headline\":\"Como atualizar Oracle EM 12c com Database Vault habilitado\",\"datePublished\":\"2014-08-03T18:30:23+00:00\",\"dateModified\":\"2014-10-10T02:41:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2014\\\/08\\\/atualizar-oracle-em-12c-database-vault-habilitado\\\/\"},\"wordCount\":301,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\"},\"articleSection\":[\"Database Security\",\"Enterprise Manager 12c\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2014\\\/08\\\/atualizar-oracle-em-12c-database-vault-habilitado\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2014\\\/08\\\/atualizar-oracle-em-12c-database-vault-habilitado\\\/\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2014\\\/08\\\/atualizar-oracle-em-12c-database-vault-habilitado\\\/\",\"name\":\"Como atualizar Oracle EM 12c com Database Vault habilitado - DBA - Rodrigo Jorge - Oracle Tips and Guides\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#website\"},\"datePublished\":\"2014-08-03T18:30:23+00:00\",\"dateModified\":\"2014-10-10T02:41:25+00:00\",\"description\":\"How to Upgrade EM 12c to the latest version when Oracle Database Vault is enabled.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2014\\\/08\\\/atualizar-oracle-em-12c-database-vault-habilitado\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2014\\\/08\\\/atualizar-oracle-em-12c-database-vault-habilitado\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/2014\\\/08\\\/atualizar-oracle-em-12c-database-vault-habilitado\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Como atualizar Oracle EM 12c com Database Vault habilitado\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#website\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/\",\"name\":\"DBA - Rodrigo Jorge - Oracle Tips and Guides\",\"description\":\"Blog about Databases, Security and High Availability\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/pt-br\\\/#\\\/schema\\\/person\\\/28a44ca3a6633fe4156ad1ea209d40a9\",\"name\":\"DBA RJ\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\",\"url\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\",\"contentUrl\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\",\"width\":712,\"height\":712,\"caption\":\"DBA RJ\"},\"logo\":{\"@id\":\"https:\\\/\\\/www.dbarj.com.br\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/RodrigoJorgePOUG19.png\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Como atualizar Oracle EM 12c com Database Vault habilitado - DBA - Rodrigo Jorge - Oracle Tips and Guides","description":"How to Upgrade EM 12c to the latest version when Oracle Database Vault is enabled.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/","twitter_misc":{"Escrito por":"DBA RJ","Est. tempo de leitura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/#article","isPartOf":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/"},"author":{"name":"DBA RJ","@id":"https:\/\/www.dbarj.com.br\/pt-br\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9"},"headline":"Como atualizar Oracle EM 12c com Database Vault habilitado","datePublished":"2014-08-03T18:30:23+00:00","dateModified":"2014-10-10T02:41:25+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/"},"wordCount":301,"commentCount":0,"publisher":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9"},"articleSection":["Database Security","Enterprise Manager 12c"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/","url":"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/","name":"Como atualizar Oracle EM 12c com Database Vault habilitado - DBA - Rodrigo Jorge - Oracle Tips and Guides","isPartOf":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/#website"},"datePublished":"2014-08-03T18:30:23+00:00","dateModified":"2014-10-10T02:41:25+00:00","description":"How to Upgrade EM 12c to the latest version when Oracle Database Vault is enabled.","breadcrumb":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbarj.com.br\/pt-br\/2014\/08\/atualizar-oracle-em-12c-database-vault-habilitado\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.dbarj.com.br\/pt-br\/"},{"@type":"ListItem","position":2,"name":"Como atualizar Oracle EM 12c com Database Vault habilitado"}]},{"@type":"WebSite","@id":"https:\/\/www.dbarj.com.br\/pt-br\/#website","url":"https:\/\/www.dbarj.com.br\/pt-br\/","name":"DBA - Rodrigo Jorge - Oracle Tips and Guides","description":"Blog about Databases, Security and High Availability","publisher":{"@id":"https:\/\/www.dbarj.com.br\/pt-br\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbarj.com.br\/pt-br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":["Person","Organization"],"@id":"https:\/\/www.dbarj.com.br\/pt-br\/#\/schema\/person\/28a44ca3a6633fe4156ad1ea209d40a9","name":"DBA RJ","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png","url":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png","contentUrl":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png","width":712,"height":712,"caption":"DBA RJ"},"logo":{"@id":"https:\/\/www.dbarj.com.br\/wp-content\/uploads\/2019\/09\/RodrigoJorgePOUG19.png"}}]}},"_links":{"self":[{"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/posts\/783","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/comments?post=783"}],"version-history":[{"count":0,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/posts\/783\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/media?parent=783"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/categories?post=783"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbarj.com.br\/pt-br\/wp-json\/wp\/v2\/tags?post=783"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}