Error 1234 returned trying to run SQL requests

Bug #1455585 reported by Roberta Marton
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Trafodion
Fix Committed
Critical
Roberta Marton

Bug Description

After merging with https://review.trafodion.org/1635, I get the following error when trying to run a query through sqlci:

showddl user1.games;

*** ERROR[1234] Authorization need to be reinitialized due to missing or corrupted privilege manager metadata. To reinitialize, do 'initialize authorization, drop' followed by 'initialize authorization'. This deletes and recreates privilege manager metadata. Trafodion metadata is not affected.

*** ERROR[2235] Compiler Internal Error: An unknown error, originated from file ../arkcmp/CmpContext.cpp at line 515.

*** ERROR[8822] The statement was not prepared.

Following the directions in the message, I try running initialize authorization, drop unsuccessfully:

initialize authorization, drop;

*** ERROR[1234] Authorization need to be reinitialized due to missing or corrupted privilege manager metadata. To reinitialize, do 'initialize authorization, drop' followed by 'initialize authorization'. This deletes and recreates privilege manager metadata. Trafodion metadata is not affected.

*** ERROR[1234] Authorization need to be reinitialized due to missing or corrupted privilege manager metadata. To reinitialize, do 'initialize authorization, drop' followed by 'initialize authorization'. This deletes and recreates privilege manager metadata. Trafodion metadata is not affected.

*** ERROR[1234] Authorization need to be reinitialized due to missing or corrupted privilege manager metadata. To reinitialize, do 'initialize authorization, drop' followed by 'initialize authorization'. This deletes and recreates privilege manager metadata. Trafodion metadata is not affected.

*** ERROR[1234] Authorization need to be reinitialized due to missing or corrupted privilege manager metadata. To reinitialize, do 'initialize authorization, drop' followed by 'initialize authorization'. This deletes and recreates privilege manager metadata. Trafodion metadata is not affected.

*** ERROR[1234] Authorization need to be reinitialized due to missing or corrupted privilege manager metadata. To reinitialize, do 'initialize authorization, drop' followed by 'initialize authorization'. This deletes and recreates privilege manager metadata. Trafodion metadata is not affected.

*** ERROR[1028] The schema must be empty. It contains at least one object COMPONENTS.

--- SQL operation failed with errors.

I cannot run - what can I do?

Until the problem is fixed, here are some workarounds:

Workaround #1:

This problem only occurs in a debug build, do a release build and perform "initialize authorization, drop;"

Workaround #2:

If you want to continue to run with a debug build, run the following steps:

swhbase

create 'TRAFODION._PRIVMGR_MD_.COLUMN_PRIVILEGES', {NAME => '#1'}
create 'TRAFODION._PRIVMGR_MD_.SCHEMA_PRIVILEGES', {NAME => '#1'}
quit

sqlci

initialize authorization, drop;
exit;

swhbase

disable 'TRAFODION._PRIVMGR_MD_.COLUMN_PRIVILEGES'
drop 'TRAFODION._PRIVMGR_MD_.COLUMN_PRIVILEGES'
disable 'TRAFODION._PRIVMGR_MD_.SCHEMA_PRIVILEGES'
drop 'TRAFODION._PRIVMGR_MD_.SCHEMA_PRIVILEGES'
exit

Workaround #3:

Otherwise, you can drop trafodion -> initialize trafodion, drop;

Tags: sql-security
Changed in trafodion:
importance: Undecided → Critical
assignee: nobody → Roberta Marton (roberta-marton)
tags: added: sql-security
Revision history for this message
Roberta Marton (roberta-marton) wrote :

If code is refreshed with https://review.trafodion.org/1635 (which adds the
first phase of column level privileges), authorization is enabled, and running
in debug mode; error 1234 is returned and you are not able to drop or
initialize authorization. SQL requests fail.

The fix is to allow operations to proceed even if
there are missing privilege manager tables, to turn off checks
for column level privileges (can be turned on by setting cqd CAT_TEST_BOOL)
and to not run catman1/TEST129(column privileges regression test).

Changed in trafodion:
status: New → Fix Committed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.