Phase 2 of the DLP Migration Utility fails on the DatabaseUpdate step with an ORA-2396 exception while trying to upgrade Enforce server

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Plus Suite
• Data Loss Prevention Oracle Standard Edition 2
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention Enforce

Issue/Introduction

When attempting to run phase 2 of the DLP MigrationUtility in the Enforce server upgrade process the DatabaseUpdate step will fail with an ORA-2396 exception. This causes the entire phase 2 of the migrator to fail and you cannot proceed with the upgrade nor run phase 2 of the migrator again before taking additional actions.

The MigrationUtility log will contain the following error in the DatabaseUpdate step:

May 19, 2025 9:53:52 PM com.symantec.dlp.migrationcommon.MigrationActionsExecutor executeMigrationActions
SEVERE: Failed to execute migration actions. Please refer to the log file for details
com.symantec.dlp.migrationcommon.MigrationException: Failed to run migration action "DatabaseUpdate"
    at com.symantec.dlp.migrationcommon.MigrationActionsExecutor.runMigrationAction(MigrationActionsExecutor.java:72)
    at com.symantec.dlp.migrationcommon.MigrationActionsExecutor.executeMigrationActions(MigrationActionsExecutor.java:118)
    at com.symantec.dlp.migrationcommon.MigrationUtility.runMigrationUtility(MigrationUtility.java:183)
    at com.symantec.dlp.migrationcommon.MigrationUtility.runMigrationUtility(MigrationUtility.java:109)
    at com.symantec.dlp.migrationcommon.MigrationUtility.runMigrationUtility(MigrationUtility.java:119)
    at com.symantec.dlp.enforceservermigrationutility.EnforceServerMigrationUtility.runMigration(EnforceServerMigrationUtility.java:44)
Caused by: com.symantec.dlp.migrationcommon.MigrationException: com.symantec.dlp.migrationcommon.MigrationException: Failed to check for errors during migration
    at com.symantec.dlp.enforceservermigrationutility.actions.DatabaseUpdateMigrationAction.runAction(DatabaseUpdateMigrationAction.java:98)
    at com.symantec.dlp.migrationcommon.MigrationActionsExecutor.runMigrationAction(MigrationActionsExecutor.java:65)
    ... 5 more
Caused by: com.symantec.dlp.migrationcommon.MigrationException: Failed to check for errors during migration
    at com.symantec.databasemigration.DatabaseMigrationProvider.migrate(DatabaseMigrationProvider.java:78)
    at com.symantec.dlp.enforceservermigrationutility.actions.DatabaseUpdateMigrationAction.runAction(DatabaseUpdateMigrationAction.java:89)
    ... 6 more
    Suppressed: java.sql.SQLRecoverableException: Closed Connection
        at oracle.jdbc.driver.OracleStatement.ensureOpen(OracleStatement.java:4236)
        at oracle.jdbc.driver.OracleStatement.clearWarnings(OracleStatement.java:3205)
        at oracle.jdbc.driver.OracleStatement.prepareForNewResults(OracleStatement.java:3694)
        at oracle.jdbc.driver.OracleStatement.endOfResultSet(OracleStatement.java:3830)
        at oracle.jdbc.driver.InsensitiveScrollableResultSet.close(InsensitiveScrollableResultSet.java:207)
        at oracle.jdbc.driver.ForwardOnlyResultSet.close(ForwardOnlyResultSet.java:58)
        at com.symantec.dlp.enforceservermigrationutility.actions.DatabaseUpdateMigrationAction.runAction(DatabaseUpdateMigrationAction.java:95)
        ... 6 more
    Suppressed: java.sql.SQLRecoverableException: Closed Connection
        at oracle.jdbc.driver.PhysicalConnection.needLine(PhysicalConnection.java:3586)
        at oracle.jdbc.driver.OracleStatement.closeOrCache(OracleStatement.java:1486)
        at oracle.jdbc.driver.OracleStatement.close(OracleStatement.java:1469)
        at oracle.jdbc.driver.OracleStatementWrapper.close(OracleStatementWrapper.java:122)
        at com.symantec.dlp.enforceservermigrationutility.actions.DatabaseUpdateMigrationAction.runAction(DatabaseUpdateMigrationAction.java:95)
        ... 6 more
Caused by: java.sql.SQLException: ORA-2396
    at oracle.jdbc.driver.T4CStatement.executeForDescribe(T4CStatement.java:779)

Cause

The Oracle IDLE_TIME parameter in the profile the DLP database user is using was too short, causing it to timeout while the MigrationUtility was running, which caused the migration to fail. The oracle_create_user.sql script creates the DLP Oracle user with the default profile so the user should be using the IDLE_TIME value from that profile unless a different profile was used for the database user.

Resolution

Because the DatabaseUpdate step failed in the process of updating the database schema, the Oracle DLP database will need to be rolled back to the backup that was taken before the upgrade started.

In addition, to fix the issue causing the ORA-2396 exception, the database IDLE_TIME timeout will need to be extended or set to unlimited so the MigrationUtility no longer times out while upgrading the database schema. You can then proceed with running phase 1 and 2 of the Enforce MigrationUtility again.