How to recover the highest privileges of OpenVMS

[Hoangles]

Urgent!
Hi everyone,
Our system was down due to the database corrupted.
Following recommendation we must restore database to which was backed up before.
However does not allow me to restore, it said that
" Restoring....
Failed...
...have no privilege to attempt ..."

Does Anyone know how can i operate with the highest privileges?

[Thomas Ritter]

0/60 in your situation I'd just use the system account. Depending on what sort of database you are trying to recover, event the system account may need some special identifiers.

[Hoangles]

OOLS>dbrestore rdb$res Hi,
Pls see more

Are you sure you want to restore database. Enter Y/[N]>y

--------------------------------------------------------------------------------
Restore of database rdb$res from rdb$res.rbf started
Restoring......
Using explicit multi directory option file
%RMU-F-NOPRIVERR, no privileges for attempted operation
%RMU-F-FTL_RSTR, Fatal error for RESTORE operation at 12-MAR-2010 04:03:34.20
Failed, Cc:%RMU-F-NOMSG, Message number 12C88AE4

[Thomas Ritter]

try
$ mc authorize
mod hoangles/priv=all/defpriv=all
exit
$
logoff and on.

[Hoangles]

Hi Thomas,
I tried as your command but it says:

TTLES1-TTCES 6_4 $ mc authorize
%DCL-W-ACTIMAGE, error activating image AUTHORIZE
-CLI-E-IMGNAME, image file TTLES1$DKA0:[SYS0.SYSCOMMON.][SYSEXE]AUTHORIZE.EXE;
-RMS-E-PRV, insufficient privilege or file protection violation

[Thomas Ritter]

If $ set process/priv=all fails, then you will have to contact the systems administrator and discuss your requirements with him.

[Robert Gezelter]

Hoangles,

You will most likely need the system manager if you are getting that message.

As a start at troubleshooting this problem, please do the following:

- login to the system
- at the "$" prompt, please do the following two commands:

$ SET PROCESS/PRIVILEGE=ALL
$ SHOW PROCESS/ALL

Capture the output and please post it here.

- Bob Gezelter, http://www.rlgsc.com

[Bob Blunt]

Hoangles, there are OpenVMS privs and privs within most database solutions. One isn't always the same as the other. As others have said, try
$ SHOW PROC/PRIV
$ SET PROC/PRIV=ALL and then another
$ SHOW PROC/PRIV to see if you added privs and retry if you did. That still may not give you what you need because your database product may have it's own security. If that's the case then you need to get your DBA involved. Engage your system manager if you don't have the VMS privs you need.

If you ARE the system manager or the DBA...well, there isn't any kind way to say this. The amount of time you'll spend trying to get things working "onesy-twosy" thru ITRC will be a huge waste of time when you could get both the problem(s) fixed and some training for yourself rolled into some consulting time. It would probably work out cheaper in the long run.

bob

[Hoangles]

Bob Gezelter,
Hear I posted the results

***********************
TTLES1-TTCES 6_4 $ SET PROCESS/PRIVILEGE=ALL
%SYSTEM-W-NOTALLPRIV, not all requested privileges authorized
TTLES1-TTCES 6_4 $ SHOW PROCESS/ALL

14-MAR-2010 08:14:20.23 User: TTCES Process ID: 20203EDE
Node: TTLES1 Process name: "_TNA120:"

User Identifier: [LES_SYSTEM,TTCES]
Base priority: 4
Default file spec: SYS$USER:[USER.TTCES]
Number of Kthreads: 1

Devices allocated: TTLES1$TNA120:

Process Quotas:
Account name: TTCES
CPU limit: Infinite Direct I/O limit: 1000
Buffered I/O byte count quota: 19999808 Buffered I/O limit: 1000
Timer queue entry quota: 1000 Open file quota: 1000
Paging file quota: 994448 Subprocess quota: 50
Default page fault cluster: 64 AST quota: 998
Enqueue quota: 16776958 Shared file limit: 100
Max detached processes: 0 Max active jobs: 0

Accounting information:
Buffered I/O count: 196 Peak working set size: 2368
Direct I/O count: 67 Peak virtual size: 171856
Page faults: 619 Mounted volumes: 0
Images activated: 10
Elapsed CPU time: 0 00:00:00.13
Connect time: 0 00:01:09.31

Authorized privileges:
CMKRNL DIAGNOSE EXQUOTA GROUP GRPNAM IMPERSONATE
IMPORT LOG_IO MOUNT NETMBX OPER PFNMAP
PHY_IO SHMEM TMPMBX VOLPRO

Process privileges:
CMKRNL may change mode to kernel
DIAGNOSE may diagnose devices
EXQUOTA may exceed disk quota
GROUP may affect other processes in same group
GRPNAM may insert in group logical name table
IMPERSONATE may impersonate another user
IMPORT may set classification for unlabeled object
LOG_IO may do logical i/o
MOUNT may execute mount acp function
NETMBX may create network device
OPER may perform operator functions
PFNMAP may map to specific physical pages
PHY_IO may do physical i/o
SHMEM may create/delete objects in shared memory
TMPMBX may create temporary mailbox
VOLPRO may override volume protection

Process rights:
TTCES resource
INTERACTIVE
REMOTE

System rights:
SYS$NODE_TTLES1

Auto-unshelve: on

Image Dump: off

Soft CPU Affinity: off

Parse Style: Traditional

Case Lookup: Blind

Units: Blocks

Home RAD: 0

Scheduling class name: none

Process Dynamic Memory Area
Current Size (KB) 128.00 Current Size (Pagelets) 256
Free Space (KB) 113.53 Space in Use (KB) 14.46
Largest Var Block (KB) 113.35 Smallest Var Block (By) 16.00
Number of Free Blocks 4 Free Blocks LEQU 64 bytes 2

There is 1 process in this job:

_TNA120: (*)

[Volker Halle]

Hoangles,

please Google for: RMU-F-NOPRIVERR - this error may have NOTHING to do with OpenVMS privileges, but may be a bug in RDB (depending on the RDB version you're using) or may be a RDB/RMU privilege issue regarding your VMS account and the RDB database being accessed.

Volker.

[Robert Gezelter]

Hoangles,

re Volker's comment. In particular, I draw your attention to the Chapter 8, Section 8.5 (pp 234) of "RDB: A Comprehensive Guide". This section notes several different situations in which RMU-F-NOPRIVERR can be returned.

If the book is not directly available, it is available for searching via Google Books.

- Bob Gezelter, http://www.rlgsc.com