Advanced Authentication: DataBase connectivity issue SQL State:08001 Connection Dead

Products

• CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)
• CA Advanced Authentication
• CA Advanced Authentication - Risk Authentication (RiskMinder / RiskFort)

Issue/Introduction

Failed to connect Oracle database with error,

ArDBConnection::connect: Connection to database [CAAA9XDSN]. user [xxx] failed. Error detail [SQL State:08001, Native Code: FFFFFFFC, ODBC code: [AA][ODBC Oracle Wire Protocol driver][Oracle]Connection Dead. This may have occurred because the server requires Oracle Advanced Security. To enable the driver to use OAS, please use the DataIntegrityLevel and/or EncryptionLevel connect options.]

Environment

Release : 9.0

Component : AuthMinder(Arcot WebFort) Strong Authentication

Cause

Migrated DB to a new Oracle server which have different OAS settings,

Resolution

As per the settings on new Oracle server (above screenshot), need to append following 4 lines to the <AA install folder>/CA/AdvAuth/odbc64<xxx>/odbc.ini

EncryptionLevel=2
EncryptionTypes=AES256
DataIntegrityLevel=2
DataIntegrityTypes=SHA1

 

Restart AA

Additional Information

There are four levels,

0 - Rejected
1 - Accepted
2 - Requested
3 - Required

 

https://docs.oracle.com/database/121/DBSEG/asoconfg.htm

https://knowledgebase.progress.com/articles/Article/connection-dead-error-while-connecting-to-oracle-with-oracle-advanced-security

https://media.datadirect.com/download/docs/odbc/allodbc/odbc/data-integrity-level.html

https://www.ibm.com/docs/en/integration-bus/10.0?topic=eocd-connecting-database-from-linux-unix-systems-by-using-integration-odbc-database-extender

https://knowledge.broadcom.com/external/article/16934/how-to-enable-encryption-for-odbc-connec.html