Oracle Database Collector fails with "ORA-01017:invalid username/password" in RSA Identity Governance & Lifecycle
Originally Published: 2019-05-08
Last Modified: 2022-06-20
Article Number
000041078
Applies To
RSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.0.2, 7.1.0, 7.1.1
 
Issue
When testing or collecting an RSA Identity Governance & Lifecycle collector of DB Type 'Oracle', the bind fails with the following error message even if the correct credentials are used.
 
java.sql.SQLException: ORA-01017: invalid username/password; logon denied
 
User-added image

The /home/oracle/wildfly-8.2.0.Final/standalone/log/aveksaServer.log shows the following ERROR level log message:
 
05/08/2019 15:16:27.292 ERROR (Thread-6499 (HornetQ-client-global-threads-1354152125)) [com.aveksa.server.utils.NodeMessageBroker] Exception while getting test data from collector com.aveksa.server.runtime.ServerException: com.aveksa.sdk.collector.CollectionException: com.aveksa.common.DataReadException: ERROR: Could not get accounts data: . Caused by com.aveksa.common.DataReadException: ERROR: Could not get accounts data: . Caused by java.sql.SQLException: ORA-01017: invalid username/password; logon denied .. Caused by: java.sql.SQLException: ORA-01017: invalid username/password; logon denied
Cause

This is a known issue if the Oracle bind password contains certain special characters.  RSA Identity Governance & Lifecycle currently sanitizes input in the Password dialog box of the collector to prevent potential scripting attacks.  Although these characters are valid characters allowed by Oracle as part of the Oracle password, they cannot be used in the password dialog box.  
 

The list of characters currently known to cause this issue are the following.

  • # - number sign, also known as pound or hash character
  • $ - dollar sign
  • _ - underscore or underline
     
Resolution
There is no resolution to this issue at the time of writing.
Workaround
Avoid the use of the following characters in datastores used for collecting data.
  • # - number sign, also known as pound or hash character
  • $ - dollar sign
  • _ - underscore or underline


 

Related Articles

Trending Articles

Don't see what you're looking for?