Lsnrctl Start Fails with TNS-12546 or TNS: Permission Denied

 

Error:

$cd $ORACLE_HOME/bin

$./lsnrctl start

An attempt to start the listener fails with the following error stack:

TNS-12546: TNS:permission denied
TNS-12560: TNS:proto adapter error
TNS-00516: Permission denied

A listener trace reveals the following message:

[22-AUG-2007 12:22:02:571] nttvlser: valid node check on incoming node <ip address here>

[22-AUG-2007 12:22:02:571] nttvlser: Denied Entry: <ip address here>

Solution:

----------

This is likely a new installation or the sqlnet.ora file on the server has recently been edited to include a setting for TCP.VALIDNODE_CHECKING=YES.

The sqlnet.ora file is configured for TCP.VALIDNODE_CHECKING with a TPC.INVITED_NODES list that does not include the ip address on which the listener is trying to start.  The "permission denied" message is the result of the SQL*Net layer refusing a connection from the listener.

Either unset TCP.VALIDNODE_CHECKING in the server side sqlnet.ora file or configure the TCP.INVITED_NODES list to include the ip address or hostname of the server where the listener is failing to start.

$ cd $ORACLE_HOME/network/admin

[applmgr@oraebs12 PROD_oraebs12]$ vi sqlnet.ora

NAMES.DIRECTORY_PATH=(TNSNAMES, ONAMES, HOSTNAME)

SQLNET.EXPIRE_TIME= 10

tcp.validnode_checking = yes

tcp.invited_nodes=(192.168.1.200) 

SQLNET.INBOUND_CONNECT_TIMEOUT =60

SQLNET.ALLOWED_LOGON_VERSION_SERVER=8

==================================================

Note: tcp.invited_nodes=(192.168.1.200) -- Instead of hostname add IP address

Refer

(Doc ID 456113.1)