WCC / Web UI upgrade fails with error "CAUAJM_E_112142 Failed to get CA EEM server details from database"
search cancel

WCC / Web UI upgrade fails with error "CAUAJM_E_112142 Failed to get CA EEM server details from database"

book

Article ID: 372393

calendar_today

Updated On:

Products

Autosys Workload Automation

Issue/Introduction

12.1.01 upgrade of a working WebUI/WCC 11.4.7 using Oracle Wallets errors out with:

 Web UI                CAUAJM_E_112142 Failed to get CA EEM server
                           details from database. Please verify "Web UI
                           (WCC)" database connectivity or try to
                           re-activate CA EEM security.

/tmp/cawa_installer.log contains errors like this:

2024-07-15 14:52:00,309 [main] DEBUG com.ca.autosys.db.helper.SystemUtil(151) - val: 
2024-07-15 14:52:00,309 [main] DEBUG com.ca.autosys.db.utils.FileIOUtil(72) - Does file exists?  : false
2024-07-15 14:52:00,309 [main] DEBUG com.ca.autosys.db.helper.Utils(429) - The autosys connection file not found. Reverting to the default connection file
2024-07-15 14:52:00,311 [main] DEBUG com.ca.autosys.db.url.OracleURLBuilder(28) - Obj: dbTnsAlias ORCL19C.example.com dbServiceName=null dbHostMachine= dbPort=0
2024-07-15 14:52:00,311 [main] DEBUG com.ca.autosys.db.url.OracleURLBuilder(57) - TNS_ADMIN=/home/autosys/tnsadmin
2024-07-15 14:52:00,311 [main] DEBUG com.ca.autosys.db.url.OracleURLBuilder(82) - url template:jdbc:oracle:thin:@${dbname}
2024-07-15 14:52:00,311 [main] DEBUG com.ca.autosys.db.url.OracleURLBuilder(71) - Database connection string :jdbc:oracle:thin:@ORCL19C.example.com
2024-07-15 14:52:00,312 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(90) - tnsAdmin= /home/autosys/tnsadmin
2024-07-15 14:52:00,312 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(103) - Setting TNS_ADMIN to : /home/autosys/tnsadmin
2024-07-15 14:52:00,313 [main] INFO  com.ca.autosys.db.connection.DBConnectionOracle(113) - Fetching the external authentication PKI properties
2024-07-15 14:52:00,313 [main] INFO  com.ca.autosys.db.helper.Utils(73) - loadProperties : loading /home/autosys/tnsadmin/sqlnet.ora, escape true 
2024-07-15 14:52:00,313 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(296) - Provided dnmatch=false
2024-07-15 14:52:00,313 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(301) - SSL_VERSION: 1.0 SSL_SERVER_DN_MATCH: false SSL_CLIENT_AUTHENTICATION: TRUE
2024-07-15 14:52:00,314 [main] INFO  com.ca.autosys.db.connection.DBConnectionOracle(129) - connecting ... [jdbc:oracle:thin:@ORCL19C.example.com]
2024-07-15 14:52:00,314 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(134) - Properties:{javax.net.ssl.keyStoreType=SSO, oracle.net.authentication_services=(TCPS), oracle.net.ssl_client_authentication=TRUE, javax.net.ssl.keyStore=/home/autosys/tnsadmin/wallet/cwallet.sso, javax.net.ssl.trustStore=/home/autosys/tnsadmin/wallet/cwallet.sso, javax.net.ssl.trustStoreType=SSO, oracle.net.ssl_version=1.0, oracle.net.ssl_server_dn_match=false}
2024-07-15 14:52:00,314 [main] DEBUG com.ca.autosys.db.helper.Utils(325) - loadOracleWalletjars using walletJarPath: /app/ora/dbclient/jlib
2024-07-15 14:52:00,317 [main] INFO  com.ca.autosys.db.connection.DBConnectionOracle(154) - connecting ... [jdbc:oracle:thin:@ORCL19C.example.com]
2024-07-15 14:52:00,864 [main] ERROR com.ca.autosys.db.connection.DBConnectionOracle(208) - SQLException: 
2024-07-15 14:52:00,864 [main] ERROR com.ca.autosys.db.connection.DBConnectionOracle(209) - IO Error: No appropriate protocol (protocol is disabled or cipher suites are inappropriate), Authentication lapse 0 ms.
2024-07-15 14:52:00,865 [main] DEBUG com.ca.wla.ae.installer.customaction.initialize.AEDBSetUpgradeList(346) - Exception occurred while connecting to database:OracleObject [tnsAlias=ORCL19C.example.com, tnsAdmin=null, oracleWalletJarPath=/app/ora/dbclient/jlib, schemaOwner=, cacheLocation=null, principalName=null, jassConfigFile=null] com.ca.autosys.db.exception.AutosysDBException: java.sql.SQLRecoverableException: IO Error: No appropriate protocol (protocol is disabled or cipher suites are inappropriate), Authentication lapse 0 ms.
    at com.ca.autosys.db.connection.DBConnectionOracle.openConnection(DBConnectionOracle.java:210)
    at com.ca.autosys.db.connection.DBConnectionOracle.openConnection(DBConnectionOracle.java:184)
    at com.ca.autosys.db.connection.DBConnectionOracle.<init>(DBConnectionOracle.java:122)
    at com.ca.autosys.db.connection.DBFactory.getConnection(DBFactory.java:65)
    at com.ca.autosys.db.main.AutoSysDBConnection.openConnection(AutoSysDBConnection.java:78)
    at com.ca.autosys.db.main.AutoSysDBConnection.<init>(AutoSysDBConnection.java:57)
    at com.ca.autosys.db.main.AutoSysDBConnection.getAutoSysDBConnection(AutoSysDBConnection.java:468)
    at com.ca.wla.ae.installer.database.AEDatabase.getAEDatabaseConnection(AEDatabase.java:259)

Environment

WCC / WebUI setup using Oracle Wallets

Cause

SQLNet was forcing SSL 1.0 while installer Java did not allow it.

$TNS_ADMIN/sqlnet.ora had below content:

SQLNET.AUTHENTICATION_SERVICES = (TCPS,NTS,BEQ)
SQLNET.RECV_TIMEOUT = 120
SQLNET.OUTBOUND_CONNECT_TIMEOUT = 120
SQLNET.INBOUND_CONNECT_TIMEOUT = 120
SSL_CLIENT_AUTHENTICATION = TRUE
SSL_SERVER_DN_MATCH = FALSE
SQLNET.CRYPTO_CHECKSUM_CLIENT = rejected
SQLNET.ENCRYPTION_CLIENT = rejected
SSL_VERSION = 1.0
SQLNET.ALLOWED_LOGON_VERSION=19
SQLNET.ALLOWED_LOGON_VERSION_CLIENT=19

This matched what was seen in the cawa_installer.log:

2024-07-15 14:52:00,313 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(301) - SSL_VERSION: 1.0 SSL_SERVER_DN_MATCH: false SSL_CLIENT_AUTHENTICATION: TRUE

12.1.01 installer is based out of updated Java 1.8 where this version of SSL is not being allowed. 

Resolution

  1. Work with the DBA team to get the database server side be configured with SSL_VERSION 1.2. Mostly it will be something like this:
    SSL_VERSION = 1.2

  2. Once the above is done, fix the $TNS_ADMIN/sqlnet.ora on the WCC/WebUI server above to match what the DBAs have created in Step1 above
  3. If possible, test sqlplus to connect to the WCC database using wallet configured in $TNS_ADMIN/tnsnames.ora / sqlnet.ora
  4. Then retry the installer. It should go through fine using SSL 1.2 now.  /tmp/cawa_installer.log would show the updated SSL_VERSION too

2024-07-16 09:49:07,701 [main] DEBUG com.ca.autosys.db.url.OracleURLBuilder(57) - TNS_ADMIN=/oracle/product/19.3.0/db_1/network/admin
2024-07-16 09:49:07,702 [main] DEBUG com.ca.autosys.db.url.OracleURLBuilder(82) - url template:jdbc:oracle:thin:@${dbname}
2024-07-16 09:49:07,702 [main] DEBUG com.ca.autosys.db.url.OracleURLBuilder(71) - Database connection string :jdbc:oracle:thin:@ORCL19C
2024-07-16 09:49:07,703 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(90) - tnsAdmin= /oracle/product/19.3.0/db_1/network/admin
2024-07-16 09:49:07,703 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(103) - Setting TNS_ADMIN to : /oracle/product/19.3.0/db_1/network/admin
2024-07-16 09:49:07,704 [main] INFO  com.ca.autosys.db.connection.DBConnectionOracle(113) - Fetching the external authentication PKI properties
2024-07-16 09:49:07,704 [main] INFO  com.ca.autosys.db.helper.Utils(73) - loadProperties : loading /oracle/product/19.3.0/db_1/network/admin/sqlnet.ora, escape true
2024-07-16 09:49:07,705 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(296) - Provided dnmatch=false
2024-07-16 09:49:07,706 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(301) - SSL_VERSION: 1.2 SSL_SERVER_DN_MATCH: false SSL_CLIENT_AUTHENTICATION: TRUE
2024-07-16 09:49:07,706 [main] INFO  com.ca.autosys.db.connection.DBConnectionOracle(129) - connecting ... [jdbc:oracle:thin:@ORCL19C]
2024-07-16 09:49:07,707 [main] DEBUG com.ca.autosys.db.connection.DBConnectionOracle(134) - Properties:{javax.net.ssl.keyStoreType=SSO, oracle.net.authentication_services=(TCPS), oracle.net.ssl_client_authentication=TRUE, javax.net.ssl.keyStore=/home/autosys/userWallet/cwallet.sso, javax.net.ssl.trustStore=/home/autosys/userWallet/cwallet.sso, javax.net.ssl.trustStoreType=SSO, oracle.net.ssl_version=1.2, oracle.net.ssl_server_dn_match=false}
2024-07-16 09:49:07,707 [main] DEBUG com.ca.autosys.db.helper.Utils(325) - loadOracleWalletjars using walletJarPath: /oracle/product/19.3.0/db_1/jlib
2024-07-16 09:49:07,708 [main] INFO  com.ca.autosys.db.connection.DBConnectionOracle(154) - connecting ... [jdbc:oracle:thin:@ORCL19C]
2024-07-16 09:49:07,853 [main] INFO  com.ca.autosys.db.connection.DBConnectionOracle(203) - Connected to jdbc:oracle:thin:@ORCL19C
2024-07-16 09:49:07,853 [main] INFO  com.ca.autosys.db.connection.DBConnectionOracle(204) - Connected  with user ... [wccadmin]
2024-07-16 09:49:07,854 [main] DEBUG com.ca.autosys.db.connection.DBOperations(81) - Running query: SELECT COUNT(*) as value FROM ALL_USERS WHERE USERNAME = UPPER(?)
2024-07-16 09:49:07,854 [main] DEBUG com.ca.autosys.db.connection.DBOperations(190) - Query params:
2024-07-16 09:49:07,854 [main] DEBUG com.ca.autosys.db.connection.DBOperations(194) - [1 : wccadmin]
2024-07-16 09:49:07,854 [main] DEBUG com.ca.autosys.db.connection.DBOperations(194) - [1 : wccadmin]
2024-07-16 09:49:07,855 [main] INFO  com.ca.autosys.db.validation.OracleDBValidator(87) - ORACLE_DB_SETUP : doesUserExists - 1
2024-07-16 09:49:07,856 [main] DEBUG com.ca.wla.ae.installer.database.DBHelper(2018) - userExists=true
2024-07-16 09:49:07,856 [main] DEBUG com.ca.wla.ae.installer.database.DBHelper(2034) - isCreateDBMode:true
2024-07-16 09:49:07,856 [main] DEBUG com.ca.wla.ae.installer.database.DBHelper(2038) - wccAppDB:1
2024-07-16 09:49:07,857 [main] DEBUG com.ca.wla.ae.installer.database.DBHelper(2044) - isWccAPPDb:true
2024-07-16 09:49:07,857 [main] DEBUG com.ca.autosys.db.connection.DBOperations(81) - Running query: SELECT COUNT(*) as value FROM user_tables WHERE UPPER(table_name) = UPPER(?)
2024-07-16 09:49:07,858 [main] DEBUG com.ca.autosys.db.connection.DBOperations(190) - Query params:
2024-07-16 09:49:07,858 [main] DEBUG com.ca.autosys.db.connection.DBOperations(194) - [1 : CFG_GLOBAL_PREF]
2024-07-16 09:49:07,899 [main] INFO  com.ca.autosys.db.validation.OracleDBValidator(170) - ORACLE_DB_SETUP : doesUserTableExists, tableName-CFG_GLOBAL_PREF , count-0
2024-07-16 09:49:07,899 [main] DEBUG com.ca.wla.ae.installer.database.DBHelper(2488) - Checking the db presence:false
2024-07-16 09:49:07,899 [main] DEBUG com.ca.wla.ae.installer.database.DBHelper(1912) - isCreateDBMode:true
2024-07-16 09:49:07,900 [main] DEBUG com.ca.wla.ae.installer.database.DBHelper(1916) - Check if the other schema type is at compatible level if available in the same database isWCCAppSchemaSelected=true isWCCRptSchemaSelected=false

 

 

Powered by Wolken Software