Currently using IMG 7.0.1 with AFX Connector Connected to a Oracle 12.1 database.
Firstly, we are able to reset a oracle id with password value "password123"
But when password contain special char "pa$$word123", AFX return error java.lang.IllegalArgumentException: Illegal group reference.
Anyone can advice ?
We did tried reset the same password "pa$$word123" manually using sqlplus and it works !
Hi Boris,
If i use this SQL command in Oracle Connector (double quote with hardcoded password value) then it works(where connector able to perform reset password)
ALTER USER ${Account} IDENTIFIED BY "pa$$word123"
But when i tried with this command(Where ${Password} is pa$$word123)
ALTER USER ${Account} IDENTIFIED BY "${Password}"
Then I still hit the same error(Error=-1,java.lang.IllegalArgumentException: Illegal group reference)
regards,
William
Is this issue happens only during capabilities testing or during normal change request as well?
I already opened a support ticket, Case no: 01095978
Support reply:-
This seem to be an issue with the use of '$' character.This is already reported to engineering under ACM-64072.
Root cause of this issue is :
String methods like replaceAll, replaceFirst uses patterns and regex.
Here $ character is a meta character and has special meaning in regular expressions (it means the end of input). So this needs to be escaped to keep it as literal in the input string. Since this was not done hence the replaceFirst() function failed and threw the exception.
Engineering is working on the fix.
The jira describes an issue when using the test capability functionality.
Worth to check if this happens in a regular change request as well.
If it still happens during a regular change request (probably will) then as a workaround consider excluding the '$' char from the list of possible chars.
In that case you would likely want to block ^ as well as a potential character, just as other regex chars such as "[]-.?*" ?
Fair point.
However I'm not sure if there is an issue with those chars.
I am having the same issue with 7.0.2 P02 when trying to use the $ character in a password.
It also fails if we try to use a '?' with the following error:
java.sql.SQLException: Missing IN or OUT parameter at index:: 1
We have been trying to better align our password policies across both Oracle and Windows AD but these 2 characters do not appear to work in IGL password reset functionality.
As stated above by William:
This seem to be an issue with the use of '$' character.This is already reported to engineering under ACM-64072.
Root cause of this issue is :
String methods like replaceAll, replaceFirst uses patterns and regex.
Here $ character is a meta character and has special meaning in regular expressions (it means the end of input). So this needs to be escaped to keep it as literal in the input string. Since this was not done hence the replaceFirst() function failed and threw the exception.
Engineering is working on the fix
.
You can contact support to get a better clarity on when the fix will be released
on Jan 2, 2018
Extract from afx log
RSA Via L&G (IMG) - Connector: Oracle DB