Using An Oracle 12c Database with 12.9 Enterprise Management

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)
• CA Privileged Access Manager (PAM)

Issue/Introduction

When installing 12.9 Enterprise Management using an Oracle 12c database, connections cannot be made to the database. In the server.log, the following message appears.

WARN  [org.jboss.resource.connectionmanager.JBossManagedConnectionPool] Throwable while attempting to get a new connection: null
org.jboss.resource.JBossResourceException: Could not create connection; - nested throwable: (java.sql.SQLException: ORA-28040: No matching authentication protocol)

Environment

Enterprise Management 12.9.x with an Oracle 12c database

Cause

In Oracle 12c, the default value for the SQLNET.ALLOWED_LOGON_VERSION parameter has been updated to exclude older JDBC thin drivers. Since Enterprise Management uses older JDBC drivers, it cannot authenticate to Oracle 12c databases by default.

Resolution

On the Oracle database server, please set SQLNET.ALLOWED_LOGON_VERSION=8 in the oracle/network/admin/sqlnet.ora file.

Additional Information

For more information about how to change SQLNET.ALLOWED_LOGON_VERSION, please contact Oracle.