topic Re: create permission check failed for oracle directory objects in Qlik Replicate

create permission check failed for oracle directory objects

SomeDude — Tue, 05 Apr 2022 20:09:35 GMT

DBA will not grant CREATE ANY DIRECTORY privilege. He says oracle directories for REDO and ARCHIVED logs are already created and READ was granted to QLIKREPLICATE user and I don't need to create them.

How do I set the names of the directories in the Qlik replication configuration and skip the CREATE DIRECTORY step?

Thanks

Re: create permission check failed for oracle directory objects

lyka — Tue, 05 Apr 2022 20:15:19 GMT

Hello,

You need to create the corresponding directories manually. The names of directories that are created manually must not be prefixed with ATTUREP_, ATTUTMP_, or ATTUGRP_. If you create the directories manually and the Oracle user specified in the Oracle Source endpoint is not the user that created the Oracle Directories, grant the READ on DIRECTORY privilege as well.

Sample SQL Statements: create or replace directory _ATTU_ONLINE as <’ONLINE_REDO_PATH’> create or replace directory _ATTU_ARCHIVE as <’ARCHIVE_LOG_PATH’> create or replace directory _ATTU_ALTERNATIVE as <'ALTERNATIVE_PATH define in endpoint'> GRANT SELECT ON dba_directories TO ARUSER; --- Please not include the last '\' in path. E.g. following definition will lead “directory can’t be found” error. Create directory ABC_ATTU_ONLINE as c:\Oracle\online\’

Hope this helps!

Thanks

Lyka

Re: create permission check failed for oracle directory objects

SwathiPulagam — Tue, 05 Apr 2022 20:15:57 GMT

Hi @SomeDude ,

If your source is Oracle:

If you want Replicate to create and manage the Oracle directories, you need to grant the CREATE ANY DIRECTORY privilege specified above. Note that the directory names will be prefixed with attrep_. If you do not grant this privilege, you need to create the corresponding directories manually. The names of directories that are created manually must not be prefixed with ATTUREP_, ATTUTMP_, or ATTUGRP_. If you create the directories manually and the Oracle user specified in the Oracle Source endpoint is not the user that created the Oracle Directories, grant the READ on DIRECTORY privilege as well.

If your source is RDS Oracle:

Set up the supplemental logging.

The following steps are relevant only when using Replicate Log Reader to access the redo logs.

Create directories for online and archived logs

Before you can use Replicate Log Reader, you need to create directories for the online and archived logs.

To create the directories, run the following commands:

exec rdsadmin.rdsadmin_master_util.create_archivelog_dir;

exec rdsadmin.rdsadmin_master_util.create_onlinelog_dir;

To remove the directories (if there are no ongoing replication tasks), run the following commands:

exec rdsadmin.rdsadmin_master_util.drop_archivelog_dir;

exec rdsadmin.rdsadmin_master_util.drop_onlinelog_dir;

For more information please refer to the below user guide link:

https://help.qlik.com/en-US/replicate/November2021/Content/Replicate/Main/Oracle/Work_with_Oracle_on_Amazon_RDS.htm

Thanks,

Swathi

Re: create permission check failed for oracle directory objects

Michael_Litz — Tue, 05 Apr 2022 20:17:42 GMT

Hi Some Dude,

There is also an article in the Qlik knowledge base that discusses this topic that may help out.

https://community.qlik.com/t5/Knowledge/Why-does-Replicate-perform-create-directory-and-drop-directory/ta-p/1881066

Thank you, 
Michael Litz 
Support Engineer

Re: create permission check failed for oracle directory objects

SomeDude — Tue, 05 Apr 2022 20:41:49 GMT

Thanks for that. Directories were created and READ permission granted to the QlikReplicate user. We are still getting the "create permission check failed for oracle directory objects" message. Is there something we need to do to get around this error, like manually entering the directory names in the Replicate configuration?

Re: create permission check failed for oracle directory objects

lyka — Tue, 05 Apr 2022 21:03:56 GMT

Hello,

If you are getting this message when you test the endpoint, its most likely a warning that you can safely ignore.

Thanks

Lyka

Re: create permission check failed for oracle directory objects

adershb — Mon, 29 Aug 2022 15:54:30 GMT

Hello @lyka

We have created a new source end-point for DR database of primary. While testing the DR source end-point getting this warning "create permission check failed for oracle directory objects" . Primary site source end-point is working and task is running fine. This is just for the DR readiness we created the source DR end-points and tried to validate it. in DR site the physical standby is in read only mode with apply as below.

NAME OPEN_MODE DATABASE_ROLE

--------- -------------------- ----------------

AG0001P READ ONLY WITH APPLY PHYSICAL STANDBY

At the same time when we try to validate the DR site source connection through sqlplus it is working fine. Why the source end-point is giving this warning ? Hence we cannot validate the SR source end-points.

Please advise.

Thanks,

Adersh

Re: create permission check failed for oracle directory objects

john_wang — Tue, 30 Aug 2022 00:28:32 GMT

Hello @adershb ,

The warning "create permission check failed for oracle directory objects" can be safely ignored if you are accessing standby node of Oracle source. This warning only show up in EndPoint Connection Test. It does not impact the task running.

Hope this helps.

Regards,

John.

Re: create permission check failed for oracle directory objects

adershb — Tue, 30 Aug 2022 07:43:46 GMT

Hello @john_wang ,

We would like to validate the DR source end-points as part of the DR readiness. Due to this warning the test connection of source DR end-points are not passed. We are not sure the end-points are working or not. How do we validate it. At the same time sqlplus connection from replicate server to source DR is working fine. What is the reason for this warning? Please advise.

Thanks,
Adersh

Re: create permission check failed for oracle directory objects

john_wang — Tue, 30 Aug 2022 09:03:07 GMT

Hello @adershb ,

As DR node is some special (eg it's read-only ) and Replicate needs some additional privileges (eg SELECT on V$STANDBY_LOG), there is chance to get the warning.

The way to know the reason is checking the "repsrv.log" file after you press the "Test Connection" button. Steps:

1- Set "Server" --> "Server Logging Levels" --> "SERVER" to "Verbose"

2- Press "Test Connection" then check the "repsrv.log". The file show what's the operations/SQLs are done during the Test Connection.

Best Regards,

John.

Re: create permission check failed for oracle directory objects

adershb — Tue, 30 Aug 2022 09:20:38 GMT

Hello @john_wang ,

I have tested this with verbose logging. Please see the below output from repsrv.log

00018855: 2022-08-30T09:02:18:858649 [SERVER ]V: Oracle error code is '604' (oracle_endpoint_utils.c:3113)
00018855: 2022-08-30T09:02:18:858710 [SERVER ]T: ORA-00604: error occurred at recursive SQL level 1 ORA-16000: database or pluggable database open for read-only access [1022307] (oracle_endpoint_utils.c:3113)
00018855: 2022-08-30T09:02:18:858752 [SERVER ]T: Create permission check failed for Oracle directory objects [1020103] (oracle_endpoint_conn.c:514)
00018855: 2022-08-30T09:02:18:858778 [SERVER ]T: Free component test_database (oracle_endpoint.c:51)

Attached the repsrv.log for your reference. Please advise.

Thanks, Adersh

Re: create permission check failed for oracle directory objects

john_wang — Tue, 30 Aug 2022 09:17:30 GMT

Hello @adershb ,

For security reason, please do not share your log files in community articles. Remove the file asap please.

A support ticket is needed, please open a support case and attach the file. Support team will help you on the issue.

Regards,

John.

Re: create permission check failed for oracle directory objects

adershb — Tue, 30 Aug 2022 09:25:14 GMT

Hello @john_wang ,

Removed the log file. From the output, what could be the reason. Is that due to read-only standby?

see the below output from repsrv.log

Already a case opened with support - case # 50619

Thanks,

Adersh

Re: create permission check failed for oracle directory objects

adershb — Tue, 30 Aug 2022 14:43:09 GMT

Hello @john_wang ,

Thank you. The warning was due to the create directory statement failed as the source DB was a physical standby (readonly).

00018855: 2022-08-30T09:02:18:332367 [SERVER ]T: Going to execute the statement 'create or replace directory attrep_dir_test as 'attrep_dir_test'' (without select) (oracle_endpoint_utils.c:3103)

00018855: 2022-08-30T09:02:18:858649 [SERVER ]V: Oracle error code is '604' (oracle_endpoint_utils.c:3113)
00018855: 2022-08-30T09:02:18:858710 [SERVER ]T: ORA-00604: error occurred at recursive SQL level 1 ORA-16000: database or pluggable database open for read-only access [1022307] (oracle_endpoint_utils.c:3113)
00018855: 2022-08-30T09:02:18:858752 [SERVER ]T: Create permission check failed for Oracle directory objects [1020103] (oracle_endpoint_conn.c:514)

Thanks for your support.

Regards,

Adersh