Creating a secured TCPS Oracle connection using a Wallet and JDBC drivers in different TDM tools such as FDM, Portal, Datamaker, Subset and Javelin

Products

• CA Test Data Manager (Data Finder / Grid Tools)

Issue/Introduction

We are planning to use TCPS for Oracle connections to avoid using the default port 1521, which should increase security.
We have configured a Wallet on the Oracle server side and on the Oracle client side, but we are not able to establish a connection in FastDataMasker.

We are seeing the following error when attempting to connect to Oracle Wallet via the FDM ORACLETNS connection:

ORA-28034: INVALID BIND CREDENTIALS FOR DB-OID CONNECTION
URL:JDBC:ORACLE:THIN:@<NET_SERVICE_NAME>

Furthermore, we would also need to test this in other CATDM tools such as TDM Portal, Datamaker, Subset, and Javelin.

Environment

Release : 4.10

Component : Fast Data Masker

Cause

The error above is telling us that the password stored in the wallet did not match the one in OID.  You should work with your DBA to verify the passwords in Wallet and OID match. You may also need to verify that you are using the correct TNSNAMES.ORA file. Double-check the file to ensure you have the proper NET_SERVICE_NAME and SERVICE_Name defined, and the credentials are correct. You could be passing the correct credentials, but using the wrong Service Name, which results in the passwords not matching.

Another common error is:

IO ERROR: COULD NOT RESOLVE THE CONNECT IDENTIFIER "XXXXXXXX"
URL:JDBC:ORACLE:THIN:@XXXXXXXX

This error indicates that the

NET_SERVICE_NAME used to create the Oracle connection cannot be found in the tnsnames.ora file.

The tnsnames.ora file has the following format:

<NET_SERVICE_NAME>=
     (DESCRIPTION=
          (ADDRESS = (PROTOCOL = <TCP/TCPS>)(HOST = <FQDN_hostname>)(PORT = <port>)
     )
     (CONNECT_DATA = 
          (SERVICE_NAME = <service_name>)
     )

To resolve this type of error, ensure the Net_Service_Name you are using is configured properly for the Service you wish to use.

Resolution

Currently, Fast Data Masker is the only TDM component that supports using Oracle TNSNames to connect to Oracle wallets.

FDM uses the following format for the Oracle connection string:

 jdbc:oracle:thin:@<net_service_name>?TNS_ADMIN=<tnsnames.ora location>

Additional Information

FDM connection establishment to Secure Oracle DB type - TCPS
https://knowledge.broadcom.com/external/article?articleId=220264