000037465 - Oracle Database Collector fails with "ORA-01017:invalid username/password" in RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Jun 5, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037465
Applies ToRSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.0.2, 7.1.0, 7.1.1
 
IssueWhen testing or collecting an RSA Identity Governance & Lifecycle collector of DB Type 'Oracle', the bind fails with the following error message even if the correct credentials are used.
 
java.sql.SQLException: ORA-01017: invalid username/password; logon denied
 


User-added image


The /home/oracle/wildfly-8.2.0.Final/standalone/log/aveksaServer.log shows the following ERROR level log message:
 
05/08/2019 15:16:27.292 ERROR (Thread-6499 (HornetQ-client-global-threads-1354152125)) [com.aveksa.server.utils.NodeMessageBroker] Exception while getting test data from collector com.aveksa.server.runtime.ServerException: com.aveksa.sdk.collector.CollectionException: com.aveksa.common.DataReadException: ERROR: Could not get accounts data: . Caused by com.aveksa.common.DataReadException: ERROR: Could not get accounts data: . Caused by java.sql.SQLException: ORA-01017: invalid username/password; logon denied .. Caused by: java.sql.SQLException: ORA-01017: invalid username/password; logon denied
Cause

This is a known issue if the Oracle bind password contains certain special characters.  RSA Identity Governance & Lifecycle currently sanitizes input in the Password dialog box of the collector to prevent potential scripting attacks.  Although these characters are valid characters allowed by Oracle as part of the Oracle password, they cannot be used in the password dialog box.  
 



The list of characters currently known to cause this issue are the following.



  • # - number sign, also known as pound or hash character
  • $ - dollar sign
  • _ - underscore or underline
     
ResolutionThere is no resolution to this issue at the time of writing.
WorkaroundAvoid the use of the following characters in datastores used for collecting data.
  • # - number sign, also known as pound or hash character
  • $ - dollar sign
  • _ - underscore or underline


 

Attachments

    Outcomes