GoldenGate 12.2 OGG-01201 Error reported by MGR : Access denied

GoldenGate 12.2 OGG-01201  Error reported by MGR : Access denied

GoldenGate 12.2 OGG-01201  Error reported by MGR : Access denied.

The GoldenGate SOURCEISTABLE is a traditional way of instantiating small tables in order to perform a quick initial load operation.  This is accomplished via a very simple extract parameter file that connects directly from the source to the target.  An example of such a parameter file is shown here:

Extract iesoe2

SETENV (NLS_LANG = AMERICAN_AMERICA.AL32UTF8)
USERIDALIAS ggadm

RmtHost gg20b, mgrport 7809
RmtTask Replicat, Group irsoe2

Table soe.*;

The extract is added with the parameter SOURCEISTABLE as shown here:

add extract iesoe2, sourceistable

Of course the matching replicat must be created on the target side.  The target parameter file and command are shown later in this blog.

When attempting to run the SOURCEISTABLE extract the extract will start and then stop.  The contents of the report show the following:

Source Context :

  SourceModule            : [er.idlx]

  SourceID                : [/scratch/aime/adestore/views/aime_adc4150378/oggcore/OpenSys/src/app/er/idlx.c]

  SourceFunction          : [idlx_get_port_from_remote_mgr]

  SourceLine              : [1443]

  ThreadBacktrace         : [13] elements

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/libgglog.so(CMessageContext::AddThre

adContext()+0x1b) [0x7f9f09b93f8b]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/libgglog.so(CMessageFactory::CreateM

essage(CSourceContext*, unsigned int, …)+0x134) [0x7f9f09b8e114]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/libgglog.so(_MSG_ERR_IDLX_MGR_ERROR(

CSourceContext*, char const*, CMessageFactory::MessageDisposition)+0x30) [0x7f9f09b70c87]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/extract(IDLX_tcp_send_data+0x61d) [0

x595c81]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/extract(IDLX_send_session_begin_cmd+

0xc0) [0x596057]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/extract(ggs::er::DatabaseDataSource:

:processSourceTables()+0xfe) [0x5ee2de]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/extract() [0x5f3d04]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/extract(ggs::gglib::MultiThreading::

MainThread::ExecMain()+0x60) [0x6d0400]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/extract(ggs::gglib::MultiThreading::

Thread::RunThread(ggs::gglib::MultiThreading::Thread::ThreadArgs*)+0x14d) [0x6d15ed]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/extract(ggs::gglib::MultiThreading::

MainThread::Run(int, char**)+0xb1) [0x6d16d1]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/extract(main+0x3b) [0x5f4feb]]

                          : [/lib64/libc.so.6(__libc_start_main+0xfd) [0x387ae1ed5d]]

                          : [/u01/app/oracle/product/12.2.0.1.0/gghome_1/extract() [0x5630f9]]

 

2016-03-23 20:41:00  ERROR   OGG-01201  Error reported by MGR : Access denied.

 

2016-03-23 20:41:00  ERROR   OGG-01668  PROCESS ABENDING.

A review of the ggserr.log file on the target shows the following:

2016-03-23 20:41:00  INFO    OGG-00963  Oracle GoldenGate Manager for Oracle, mgr.prm:  Command received from EXTRACT on host [172.17.50.40]:46817 (START REPLICAT IRSOE2 CPU -1 PRI -1 PARAMS ).

2016-03-23 20:41:00  WARNING OGG-00936  Oracle GoldenGate Manager for Oracle, mgr.prm:  Access denied (request from 172.17.50.40, rule #0).

This is due to a new security restriction in GoldenGate 12.2.  In order to allow access from a remote system the ACCESSRULE parameter must be put into the manager parameter file on the target in order to allow access from the source.  The syntax is as follows:

accessrule, prog *, ipaddr ip_of_the_trusted_host_where_you_want_to_access_mgr_from, allow

So in order to allow my source system to startup the replicat I would put something like this in my manager parameter file

ACCESSRULE, PROG *, IPADDR 172.17.50.40, ALLOW

This will allow my source system to perform the initial load using SOURCEISTABLE by allowing the remote extract to start the replicat.  The initial load will now proceed as expected.

By |2017-09-20T08:13:38+00:00March 24th, 2016|Performance Wire|Comments Off on GoldenGate 12.2 OGG-01201 Error reported by MGR : Access denied