SQLDriverConnect : Danger with using semicolons ( ';' ) in passwords of UC4 database users.

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

This issue impacts passwords that contains ";" for database connection users in the sqlDriverConnect definition string because ";" is the separator used by the routine to extract the password during the authentication procedure.

This woud be related to this kind of messages:

20220113/002224.393 - U00003537 UCUDB - RECONNECT: DB call 'OCILogon': Return code: '-1'.
20220113/002224.393 - U00003590 UCUDB - DB error: 'OCILogon', 'ERROR ', '', 'ORA-28000: The account is locked.'
20220113/002224.393 - U00003592 UCUDB - Status: '' Native error: '28000' Msg: 'ORA-28000: The account is locked.'

 

 

Environment

Component/Release : AE 12.3, AE 21.0, 22.0

 

Cause

The authentication routing in AE is a single entry point.

If the password in unhashed the authentication routine, will automatically truncate the password because the internal ";" will be interpreted as a separator, so the authentication will fail and the account will be locked at startup.

If the password is hashed the first authentication will work, One Automation will be operational, but at the next reconnection attempt the password will be truncated, the connection will fail and the account will locked in Oracle.

This has been classified as a bug: AE server processes use an incorrect database password when reconnecting to the database.

Resolution

Description of the issue :

A problem has been fixed where the AE server processes used an incorrect database password when reconnecting to the database. This issue can happen with Oracle and PostgreSql databases when DB passwords contain special characters (';' for Oracle and ' ' for PostgreSql).

This bug has been fixed in the following releases:

Automation Engine 12.3.9

Automation Engine 21.0.3