Data Loss Prevention

 View Only
  • 1.  Readiness Tool output has errors

    Posted Jul 29, 2022 04:46 PM
    Hello Team,

    Run update readiness tool to upgrade DLP from 15.7 to 15.8. In the output file we have 3 warnings and 4 errors.

    Hostname : WIN-RDOEBTQKTR8
    Upgrade Source Version : 15.7
    no rows selected
    no rows selected
    no rows selected
    No errors.
    No errors.
    No errors.
    No errors.
    Readiness Tool Release : October 2020
    Upgrade Target Version : 15.8
    Date : 2022-07-26 17:34:13
    Database Schema Version : 15.7
    Oracle Version : Oracle Database 19c Standard Edition 2 Release 19.0.0.0.0 - Production
    Oracle Server Platform : Microsoft Windows x86 64-bit
    Oracle Registry History :
    Action Time Action Comments
    -------------------- --------------- ----------------------------------------
    (null) BOOTSTRAP RDBMS_19.3.0.0.0DBRU_WINDOWS.X64_190528
    Enforce Install History :
    Enforce Version Date Installed Is Current Version?
    -------------------- ------------------------------ -------------------
    15.7.0.18016 2020-02-29 14:19:14 Y
    15.0.0.45028 2018-03-10 12:46:38 N
    Start: Oracle Support Validation - 2022-07-26 17:34:13
    End : Oracle Support Validation - elapsed 0s - PASSED
    Start: Oracle System Privilege Validation - 2022-07-26 17:34:13
    Missing system privileges
    -------------------------
    CREATE JOB
    End : Oracle System Privilege Validation - elapsed .06s - FAILED (1 error)
    Start: Oracle Object Privilege Validation - 2022-07-26 17:34:13
    Missing object privileges
    Oblect Name Privilege Required Needs Direct Grant
    ---------------------------- ------------------ ------------------
    DATA_PUMP_DIR WRITE N
    DATA_PUMP_DIR READ N
    End : Oracle Object Privilege Validation - elapsed 2.47s - FAILED (2 errors)
    Start: Oracle CDC support not enabled - 2022-07-26 17:34:15
    End : Oracle CDC support not enabled - elapsed 0s - PASSED
    Start: Oracle Queued Jobs - 2022-07-26 17:34:15
    End : Oracle Queued Jobs - elapsed .02s - PASSED
    Start: Oracle Securefile Validation - 2022-07-26 17:34:15
    End : Oracle Securefile Validation - elapsed .06s - PASSED
    Start: Oracle Virtual Column Validation - 2022-07-26 17:34:15
    End : Oracle Virtual Column Validation - elapsed .5s - PASSED
    Start: Oracle Partition Table Validation - 2022-07-26 17:34:16
    End : Oracle Partition Table Validation - elapsed .02s - PASSED
    Start: Numeric Overflow Validation - 2022-07-26 17:34:16
    End : Numeric Overflow Validation - elapsed 0s - PASSED
    Start: Table Definition Validation - 2022-07-26 17:34:16
    End : Table Definition Validation - elapsed 2.99s - PASSED
    Start: Index Definition Validation - 2022-07-26 17:34:19
    End : Index Definition Validation - elapsed 16.66s - PASSED
    Start: Foreign Key Validation - 2022-07-26 17:34:36
    End : Foreign Key Validation - elapsed 4.28s - PASSED
    Start: Trigger Validation - 2022-07-26 17:34:40
    End : Trigger Validation - elapsed .15s - PASSED
    Start: Miscellaneous Object Validation - 2022-07-26 17:34:40
    End : Miscellaneous Object Validation - elapsed .03s - PASSED
    Start: **** Object Validation - 2022-07-26 17:34:40
    End : **** Object Validation - elapsed 6.18s - PASSED
    Start: Tablespace Validation - 2022-07-26 17:34:46
    End : Tablespace Validation - elapsed .06s - PASSED
    Start: Check Constraint Validation - 2022-07-26 17:34:46
    End : Check Constraint Validation - elapsed .4s - PASSED
    Start: Sequence Validation - 2022-07-26 17:34:47
    Out-of-order sequences
    Sequence Name Table Name Column Name Sequence.NEXTVAL Highest PK Value
    ------------------------------ ------------------------------ ------------------------------ ---------------- ----------------
    End : Sequence Validation - elapsed 1.98s - PASSED
    Start: Oracle System Parameter Validation - 2022-07-26 17:34:49
    Parameter Name Current Value Recommended Value
    ------------------------------ -------------------- --------------------
    compatible 19.0.0 19.0.0.0.0
    memory_target 0 3221225472
    sort_area_size 65536 0
    End : Oracle System Parameter Validation - elapsed .03s - WARNING (3 warnings)
    Start: Data Check Constraint Validation - 2022-07-26 17:34:49
    Data violations are detected on your schema, please use the below query(s) to retrieve the **** data.
    SELECT DISTINCT CommandName FROM CommandInfo WHERE CommandName IN ('protect-encrypt', 'endpoint-encrypt-cancel', 'cloud-storage-encrypt', 'rest-response-dim-encrypt', 'rest-response-dar-encrypt', 'rest-response-encrypt');
    End : Data Check Constraint Validation - elapsed 0s - FAILED (1 violation)
    Data Objects Check Summary: There are total of 3 warnings and 4 errors.
    For details about the Update Readiness Tool output messages and troubleshooting information, see "Reviewing update readiness results" in the Data Loss Prevention online help.

    Can you please guide me for next POA


  • 2.  RE: Readiness Tool output has errors

    Trusted Advisor
    Posted Aug 07, 2022 01:36 PM
    Over all it looks like the permissions of the DLP user for the Database is not correct.

    1. Make sure that you ran the Readiness tool as the right Oracle DB user (protect)
    2. If you did run the tool correctly, then you should make sure the user (protect) has the right privileges.
    3. Log into the Oracle DB using the sys or system account :
      1. connect sys/syspass@ sid as sysdba;
      2. Replace syspass - with sys password
      3. Replace sid with the DB sid name
    4. The run the following commands - replace &username with the username for DLP that connects to the DB (protect)

    GRANT
    create session
    ,alter session
    ,create synonym
    ,create view
    ,create table
    ,create sequence
    TO &username;

    GRANT
    create table
    ,create cluster
    ,create sequence
    ,create trigger
    ,create procedure
    ,create type
    ,create indextype
    ,create operator
    TO &username;

    GRANT create materialized view TO &username;
    GRANT unlimited tablespace TO &username;

    grant select on dba_tablespaces to &username;
    grant select on dba_data_files to &username;
    grant select on dba_temp_files to &username;
    grant select on dba_extents to &username;

    grant select on v_$session to &username;
    grant select on v_$database to &username;
    grant select on v_$instance to &username;

    grant select on v_$parameter to &username;
    grant select on dba_segments to &username;
    grant select on v_$sqlarea to &username;
    grant select on v_$session_longops to &username;

    GRANT SELECT ON v_$sql TO &username;
    GRANT SELECT ON v_$sql_plan TO &username;
    GRANT SELECT ON v_$sql_plan_statistics_all TO &username;
    GRANT EXECUTE ON dbms_session TO &username;
    GRANT EXECUTE ON dbms_lock TO &username;

    GRANT read, write ON directory data_pump_dir TO &username;
    GRANT SELECT ON dba_registry_history TO &username;
    GRANT SELECT ON dba_temp_free_space TO &username;
    GRANT SELECT ON v_$version TO &username;
    GRANT EXECUTE ON dbms_lob TO &username;
    GRANT EXECUTE ON dbms_sql TO &username;
    GRANT EXECUTE ON dbms_job TO &username;

    GRANT CREATE JOB TO &username;


    The rerun the Readiness tool again.. it should take about 20-30 minutes to complete.

    ------------------------------
    Good Luck. - RP
    PLEASE MARKED SOLVED WHEN POSSIBLE
    ------------------------------



  • 3.  RE: Readiness Tool output has errors

    Trusted Advisor
    Posted Aug 07, 2022 01:36 PM
    Your oracle user does not have the right permissions.. 

    1. connect sys/&syspass@ &sid as sysdba; ---- (update the $syspass and &sid)
    Change &username to the right DB user account (protect?)
    -- ----------------------------------------------------------------------
    -- Create the &username user
    -- ----------------------------------------------------------------------
    CREATE USER &username IDENTIFIED BY &ppass;
    ALTER USER &username DEFAULT TABLESPACE users;
    ALTER USER &username TEMPORARY TABLESPACE temp;

    -- ----------------------------------------------------------------------
    -- These grants make up the connect role:
    -- ----------------------------------------------------------------------
    GRANT
    create session
    ,alter session
    ,create synonym
    ,create view
    ,create table
    ,create sequence
    TO &username;

    -- ----------------------------------------------------------------------
    -- These grants make up the resource role:
    -- ----------------------------------------------------------------------
    GRANT
    create table
    ,create cluster
    ,create sequence
    ,create trigger
    ,create procedure
    ,create type
    ,create indextype
    ,create operator
    TO &username;

    -- ----------------------------------------------------------------------
    -- Grant privileges to the &username user.
    -- ----------------------------------------------------------------------
    GRANT create materialized view TO &username;
    GRANT unlimited tablespace TO &username;

    grant select on dba_tablespaces to &username;
    grant select on dba_data_files to &username;
    grant select on dba_temp_files to &username;
    grant select on dba_extents to &username;

    grant select on v_$session to &username;
    grant select on v_$database to &username;
    grant select on v_$instance to &username;

    -- ----------------------------------------------------------------------
    -- These privileges are new in v8.
    -- ----------------------------------------------------------------------
    grant select on v_$parameter to &username;
    grant select on dba_segments to &username;
    grant select on v_$sqlarea to &username;
    grant select on v_$session_longops to &username;


    -- ----------------------------------------------------------------------
    -- These privileges are new in v11.
    -- ----------------------------------------------------------------------

    GRANT SELECT ON v_$sql TO &username;
    GRANT SELECT ON v_$sql_plan TO &username;
    GRANT SELECT ON v_$sql_plan_statistics_all TO &username;
    GRANT EXECUTE ON dbms_session TO &username;
    GRANT EXECUTE ON dbms_lock TO &username;

    -- ----------------------------------------------------------------------
    -- These privileges are new in v15.
    -- ----------------------------------------------------------------------
    GRANT read, write ON directory data_pump_dir TO &username;
    GRANT SELECT ON dba_registry_history TO &username;
    GRANT SELECT ON dba_temp_free_space TO &username;
    GRANT SELECT ON v_$version TO &username;
    GRANT EXECUTE ON dbms_lob TO &username;
    GRANT EXECUTE ON dbms_sql TO &username;
    GRANT EXECUTE ON dbms_job TO &username;

    -- ----------------------------------------------------------------------
    -- Privileges for Oracle 19c
    -- ----------------------------------------------------------------------
    GRANT CREATE JOB TO &username;

    ------------------------------
    Good Luck. - RP
    PLEASE MARKED SOLVED WHEN POSSIBLE
    ------------------------------



  • 4.  RE: Readiness Tool output has errors

    Posted Aug 09, 2022 02:35 AM
    Thanks for the suggestion.

    After providing required permission we ran the URT tool and it still has 1 error and 3 warnings.

    Hostname : WIN-RDOEBTQKTR8
    Upgrade Source Version : 15.7
    Readiness Tool Release : October 2020
    Upgrade Target Version : 15.8
    Date : 2022-08-08 17:26:23
    Database Schema Version : 15.7
    Oracle Version : Oracle Database 19c Standard Edition 2 Release 19.0.0.0.0 - Production
    Oracle Server Platform : Microsoft Windows x86 64-bit
    Oracle Registry History :
    Action Time Action Comments
    -------------------- --------------- ----------------------------------------
    (null) BOOTSTRAP RDBMS_19.3.0.0.0DBRU_WINDOWS.X64_190528

    Enforce Install History :
    Enforce Version Date Installed Is Current Version?
    -------------------- ------------------------------ -------------------
    15.7.0.18016 2020-02-29 14:19:14 Y
    15.0.0.45028 2018-03-10 12:46:38 N

    Start: Oracle Support Validation - 2022-08-08 17:26:23
    End : Oracle Support Validation - elapsed 0s - PASSED

    Start: Oracle System Privilege Validation - 2022-08-08 17:26:23
    End : Oracle System Privilege Validation - elapsed .08s - PASSED

    Start: Oracle Object Privilege Validation - 2022-08-08 17:26:23
    End : Oracle Object Privilege Validation - elapsed 3.03s - PASSED

    Start: Oracle CDC support not enabled - 2022-08-08 17:26:26
    End : Oracle CDC support not enabled - elapsed 0s - PASSED

    Start: Oracle Queued Jobs - 2022-08-08 17:26:26
    End : Oracle Queued Jobs - elapsed .02s - PASSED

    Start: Oracle Securefile Validation - 2022-08-08 17:26:26
    End : Oracle Securefile Validation - elapsed .04s - PASSED

    Start: Oracle Virtual Column Validation - 2022-08-08 17:26:26
    End : Oracle Virtual Column Validation - elapsed .58s - PASSED

    Start: Oracle Partition Table Validation - 2022-08-08 17:26:26
    End : Oracle Partition Table Validation - elapsed .02s - PASSED

    Start: Numeric Overflow Validation - 2022-08-08 17:26:26
    End : Numeric Overflow Validation - elapsed 0s - PASSED

    Start: Table Definition Validation - 2022-08-08 17:26:27
    End : Table Definition Validation - elapsed 3.39s - PASSED

    Start: Index Definition Validation - 2022-08-08 17:26:30
    End : Index Definition Validation - elapsed 17.24s - PASSED

    Start: Foreign Key Validation - 2022-08-08 17:26:47
    End : Foreign Key Validation - elapsed 4.28s - PASSED

    Start: Trigger Validation - 2022-08-08 17:26:52
    End : Trigger Validation - elapsed .16s - PASSED

    Start: Miscellaneous Object Validation - 2022-08-08 17:26:52
    End : Miscellaneous Object Validation - elapsed .03s - PASSED

    Start: Invalid Object Validation - 2022-08-08 17:26:52
    End : Invalid Object Validation - elapsed 7.58s - PASSED

    Start: Tablespace Validation - 2022-08-08 17:26:59
    End : Tablespace Validation - elapsed .05s - PASSED

    Start: Check Constraint Validation - 2022-08-08 17:27:00
    End : Check Constraint Validation - elapsed .37s - PASSED

    Start: Sequence Validation - 2022-08-08 17:27:00
    Out-of-order sequences
    Sequence Name Table Name Column Name Sequence.NEXTVAL Highest PK Value
    ------------------------------ ------------------------------ ------------------------------ ---------------- ----------------
    End : Sequence Validation - elapsed 3.18s - PASSED

    Start: Oracle System Parameter Validation - 2022-08-08 17:27:03
    Parameter Name Current Value Recommended Value
    ------------------------------ -------------------- --------------------
    compatible 19.0.0 19.0.0.0.0
    memory_target 0 3221225472
    sort_area_size 65536 0
    End : Oracle System Parameter Validation - elapsed .03s - WARNING (3 warnings)

    Start: Data Check Constraint Validation - 2022-08-08 17:27:04
    Data violations are detected on your schema, please use the below query(s) to retrieve the invalid data.
    SELECT DISTINCT CommandName FROM CommandInfo WHERE CommandName IN ('protect-encrypt', 'endpoint-encrypt-cancel', 'cloud-storage-encrypt', 'rest-response-dim-encrypt', 'rest-response-dar-encrypt', 'rest-response-encrypt');
    End : Data Check Constraint Validation - elapsed 0s - FAILED (1 violation)

    Data Objects Check Summary: There are total of 3 warnings and 1 error.




  • 5.  RE: Readiness Tool output has errors

    Trusted Advisor
    Posted Aug 12, 2022 10:09 AM
    It says what to do in the error..

    Data violations are detected on your schema, please use the below query(s) to retrieve the invalid data.
    SELECT DISTINCT CommandName FROM CommandInfo WHERE CommandName IN ('protect-encrypt', 'endpoint-encrypt-cancel', 'cloud-storage-encrypt', 'rest-response-dim-encrypt', 'rest-response-dar-encrypt', 'rest-response-encrypt');

    You may need to open a case and send the error logs..

    ------------------------------
    Good Luck. - RP
    PLEASE MARKED SOLVED WHEN POSSIBLE
    ------------------------------



  • 6.  RE: Readiness Tool output has errors

    Posted Sep 06, 2022 08:21 AM
    we had several permissions errors as well.  Did your DB get upgraded to v19c while on or moving to Sym v15?