000027889 - KB-1666 Oracle ORA-12514 connection errors during ACM installation using remote Oracle database instance

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000027889
Applies To6.5.1; 6.5; 6.x
ORA-12514, ORA-01017, remote, database
RSA Identity Management and Governance
IssueKB-1666 Oracle ORA-12514 connection errors during ACM installation using remote Oracle database instance
Oracle error message "ORA-12514 TNS:listener does not currently know of service requested in connect descriptor" is seen on terminal output during installation, using a remote database, yet connection information has been confirmed using sqldeveloper. What could be wrong?
Resolution

Testing:


 


To confirm that the all of the connection information is correct, a connection using sqldeveloper was created and tested sucessfully.


A similiar test was then made on the Linux system where ACM is being installed. 


 


Various tests were made to ensure that:


1) the hostname and port were accessible,  and


2) that a sqlplus connection could be established


 


1) To test the hostname and port access, a simple telnet session was started. If a login prompt apprears, this confirms that the host and port are accessible from this system


 


    $ telnet  <hostname>  <port#>             


 


for example:


 


    $ telnet vm-support-30 1555
Trying 192.168.21.128...
Connected to vm-support-30.aveksa.local (192.168.21.128).
Escape character is '^]'.


 


This confirms that the host, in this example (vm-support-30) is reachable, and port 1555 is active.


 


 


2) To test that a sqlplus connection could (or could not)  be established, the following two sqlplus commands were used, essentially a short and long 'form'  connection test, based on connection information stored in the   /home/oracle/instantclient_11_2/tnsnames.ora file.


 


 


The 'short form'  test is to specify just the Oracle account, password and the connection alias from the tnanames.ora file:


 


$ sqlplus avuser/<avuser-pwd>@<ACM-Alias-from-tnsnames.ora>


 


 


The error returned on this test is shown below. 


 


( Note there is a space shown in these examples  between the password  my$test and the @ sign for the SID descriptor.  That is to prevent this SalesForce Solution to display this example information as an email/url link.   This is a limitation in the Solution display.  Our apologies for any confusion it may cause.)


 


 


$ sqlplus avuser/my$test @ AVDB 


SQL*Plus: Release 11.2.0.2.0 Production on Mon Aug 19 09:02:04 2013


Copyright (c) 1982, 2010, Oracle.  All rights reserved.


 


ORA-12514: TNS:listener does not currently know of service requested in connect descriptor


 


 


 


The 'long' form is to pass the entire connection information at the sqlplus command:


 


$ sqlplus avuser/<avuser-pwd>@'(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=<hostname-of_remote-oracle_installation>)(PORT=<listener-port# on remote host>))(CONNECT_DATA=(SERVICE_NAME=<Service name on remote host>)))'


 


 


The error returned on this test is:


 


 


$ sqlplus avuser/my$test @ '(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=vm-support-30>)(PORT=<1555))(CONNECT_DATA=(SERVICE_NAME=AVDB)))'


 


SQL*Plus: Release 11.2.0.2.0 Production on Mon Aug 19 09:02:04 2013


Copyright (c) 1982, 2010, Oracle.  All rights reserved.


 


ERROR:


ORA-01017: invalid username/password; logon denied


 

Problem Description:


 


While installing ACM and specifying use of a remote database, the installation fails with this error message displayed on the terminal output:


 


Checking database connections...


ERROR: Unable to connect to the database; aborting installation



No details are provided in the aveksa-install.log nor the oracle.log


  


The Oracle avuser password, SID, hostname, listener port # and Service_name all seem correct.  A connection using a sqldeveloper client was tested and is sucessful.  What could be wrong?


 

Problem Summary:


 


The Oracle ORA-01017 error is the more accurate error for this problem.  The problem is due to the use of a dollar-sign ($) as part of the Oracle account password.  In this specific example, the password shown is:  my$test.   Although Oracle lists a dollar-sign ($) as an acceptable character for Oracle account passwords,  Oracle also specfically mentions in one of their Support Knowledge Bases that it is strongly advised to NOT use this character.   The connection attempt is failing because Oracle sqlplus does not handle a dollar-sign without special 'treatment'.


 


The external Oracle Support knowledge base is listed below.  It is relevant for Oracle versions  6 thru 11g.    


  


Doc ID 305981.1  Getting ORA-12154 when Special Characters Used in Password.


 


 


The key msg in this knowledge base is:  "Passwords can contain only alphanumeric characters and the underscore (_), dollar sign ($), and pound sign (#). Oracle strongly discourages you from using $ and #..


 

Workaround:


 


The current workaround is to NOT use a dollar-sign ($) as part of an Oracle account password that is created for use with ACM.

Legacy Article IDa66681

Attachments

    Outcomes