CRS-4228: Value of attribute 'pgrp:dba:r-x' is missing

We connected Exalogic to Exadata.
Over SDP. And created the LISTENER_IB, which listens in IB interface.

Next time, during dbca created next one ordinary DB the message appears:

PRCR-1006 : Failed to add resource ora.DBNAME.db
PRCP-0171 : Failed to register or update resource ora.DBNAME.db
CRS-2566: User 'oracle' does not have sufficient permissions to operate on resource 'ora.LISTENER_IB.lsnr', which is part of dependency specification





















Let's check rights:
 
$ crsctl status resource ora.LISTENER_IB.lsnr -p

NAME=ora.LISTENER_IB.lsnr
TYPE=ora.listener.type
ACL=owner:root:rwx,pgrp:root:r-x,other::r--
ACTION_FAILURE_TEMPLATE=
...

But other resources have other rights:

# /u01/app/11.2.0.3/grid/bin/crsctl status resource ora.LISTENER_SCAN1.lsnr -p
NAME=ora.LISTENER_SCAN1.lsnr
TYPE=ora.scan_listener.type
ACL=owner:oracle:rwx,pgrp:oinstall:r-x,other::r--
ACTION_FAILURE_TEMPLATE=


CRSCTL utility reference

So, let's change:

[oracle@ed01db02 ~]$ crsctl modify resource ora.LISTENER_IB.lsnr -attr ACL=owner:oracle:rwx,pgrp:dba:r-x,other::r--
CRS-4228: Value of attribute 'pgrp:dba:r-x' is missing
CRS-4000: Command Modify failed, or completed with errors.

[oracle@ed01db02 ~]$ crsctl modify resource ora.LISTENER_IB.lsnr -attr ACL=owner:oracle
CRS-0258: Invalid ACL string format.
CRS-4000: Command Modify failed, or completed with errors.

[oracle@ed01db02 ~]$ crsctl modify resource ora.LISTENER_IB.lsnr -attr "ACL=owner:oracle:rwx,pgrp:dba:r-x,other::r--"
CRS-4228: Value of attribute 'pgrp:dba:r-x' is missing
CRS-4000: Command Modify failed, or completed with errors.

What's wrong ???

MOS helps:

"crsctl modify resource" fails with "CRS-4228: Value of attribute ')' is missing" [ID 958455.1]
Solution: To prevent the comma in the attribute from being interpreted as an attribute delimiter,
the attribute value needs to be enclosed in single quotes ('):


[root@ed01db01 ~]#  crsctl modify resource ora.LISTENER_IB.lsnr -attr "ACL='owner:oracle:rwx,pgrp:dba:r-x,other::r--' "
[root@ed01db01 ~]#