ERROR ORA-28040 or ORA-01017 in uce_server error.log — oracle-tech

    Forum Stats

  • 3,714,819 Users
  • 2,242,634 Discussions
  • 7,845,078 Comments

Discussions

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

ERROR ORA-28040 or ORA-01017 in uce_server error.log

cgrzemba
cgrzemba Member Posts: 36

I see constantly repeating error messages in ./var.opt/server/logs/error.log

25595:2018-01-11_16:46:55 INFO [ db_interface: ../src/DbInstance.cc: #  97 ] 0 fopen /var/opt/sun/xvm/dbpw.properties OK

25595:2018-01-11_16:46:55 INFO [ db_interface: ../src/DbInstance.cc: # 119 ] 0 Try to get database password from dbpw.properties

25595:2018-01-11_16:46:55 INFO [ db_interface: ../src/DbInstance.cc: # 120 ] 0 Command is /usr/jdk/jdk1.8.0_141/bin/java -classpath /opt/sun/n1gc/lib/domainmodel.jar:/opt/sun/n1gc/lib/svccommon.jar com.sun.xvm.services.common.impl.CipherCLI Decrypt-Password Properties-Filename=/var/opt/sun/xvm/dbpw.properties

25595:2018-01-11_16:46:56 DEBUG [ db_interface: ../src/DbInstance.cc: # 175 ] 0 DB params.

25595:2018-01-11_16:46:56 DEBUG [ db_interface: ../src/DbInstance.cc: # 176 ] 0 dbuser: OPSCSCHEMA

25595:2018-01-11_16:46:56 DEBUG [

25595:2018-01-11_16:46:55 INFO [ db_interface: ../src/DbInstance.cc: #  97 ] 0 fopen /var/opt/sun/xvm/dbpw.properties OK

25595:2018-01-11_16:46:55 INFO [ db_interface: ../src/DbInstance.cc: # 119 ] 0 Try to get database password from dbpw.properties

25595:2018-01-11_16:46:55 INFO [ db_interface: ../src/DbInstance.cc: # 120 ] 0 Command is /usr/jdk/jdk1.8.0_141/bin/java -classpath /opt/sun/n1gc/lib/domainmodel.jar:/opt/sun/n1gc/lib/svccommon.jar com.sun.xvm.services.common.impl.CipherCLI Decrypt-Password Properties-Filename=/var/opt/sun/xvm/dbpw.properties

25595:2018-01-11_16:46:56 DEBUG [ db_interface: ../src/DbInstance.cc: # 175 ] 0 DB params.

25595:2018-01-11_16:46:56 DEBUG [ db_interface: ../src/DbInstance.cc: # 176 ] 0 dbuser: OPSCSCHEMA

25595:2018-01-11_16:46:56 DEBUG [ db_interface: ../src/DbInstance.cc: # 179 ] 0 dbname: localhost:1521/TEST

25595:2018-01-11_16:46:56 DEBUG [ db_interface: ../src/DbInstance.cc: # 180 ] 0 dbhost: 127.0.0.1

25595:2018-01-11_16:46:57 INFO [ db_interface: ../src/OciInterface.cc: # 542 ] 0 status = OCI_ERROR

25595:2018-01-11_16:46:57 INFO [ db_interface: ../src/OciInterface.cc: # 544 ] 0 Error code = 1017 message = ORA-01017: Benutzername/Kennwort ungultig; Anmeldung abgelehnt

25595:2018-01-11_16:46:57 ERROR [ db_interface: ../src/OciInterface.cc: #  84 ] 0 FAILED: OCISessionBegin(), RC = 1

25595:2018-01-11_16:46:57 DEBUG [ db_interface: ../src/DbInstance.cc: # 198 ] 0 DbInstance Creation failed 1

25595:2018-01-11_16:46:57 ERROR [ db_interface: ../src/OciInterface.cc: # 608 ] 0 Freeing up the Database Connection

25595:2018-01-11_16:46:57 SEVERE [ db_interface: ../src/DbInstance.cc: #  57 ] 0 Cannot connect to database - exiting.

But the returning password and all other login parameter are correct. Why do the uce_server log this problem?

Answers

  • Klausm-Oracle
    Klausm-Oracle Member Posts: 28
    edited January 2018

    HI,

    the decryption of the passwd is failing, open and MOS SR to get it fixed.

    Passwd file conatin the encrypted passwd

    /var/opt/sun/xvm/dbpw.properties

    and

    /var/opt/sun/xvm/db.properties

    Regards
    Klaus M

  • cgrzemba
    cgrzemba Member Posts: 36
    edited January 2018

    I opened a SR but no response so far.

    The password returned by CipherCLI is correct for this DB user (but I see no option to get the second password (ro user) from the file).

  • Klausm-Oracle
    Klausm-Oracle Member Posts: 28
    edited January 2018

    Hi,

    user RO password should be same  as normal user, can you decrypt it too?

    Kind Regards

    klausM

  • cgrzemba
    cgrzemba Member Posts: 36
    edited January 2018

    How can I check this?

    In the dbpw file are two Passwords, but I see no option for CipherCLI to pick the second one for decryption.

  • Klausm-Oracle
    Klausm-Oracle Member Posts: 28
    edited January 2018

    Hi,

    which MOS Sr is these as need to verify the current data.

    Kind Regards
    KlausM.

  • Klausm-Oracle
    Klausm-Oracle Member Posts: 28
    edited January 2018

    Hi,

    am i correct that you setup on same host (localhost:1521) an own DB instance "TEST" with User "OPSCSCHEMA" and and own RO user ?

    DB user and DB user RO can be set by use on ecadm change-db-password (-r).

    command:

    /opt/SUNWxvmoc/bin/change-db-password

    ...

      change-db-password {-r} -i <interactive mode> -p <password file>

            -r stands for as_read_only_user

            The password file should only contain the new password.

    ...

    Regards
    KlausM.

This discussion has been closed.