- Welcome BMC Customer Support Site Guest User
Knowledge Article
AR System Server - Error:"ORA-28000: the account is locked" after changing the password to the database for the Oracle Account ARAdmin and AR Server is not starting up
Changing the password to the database for the Oracle Account ARAdmin. While making this change the account began to lock up.
Remedy AR System Server
AR System
Remedy AR System Server with Oracle Database
Use Case1: Changing the password to the database for the Oracle Account ARAdmin the account began to lock up. The arerror.log shows: .............................. Tue Oct 31 15:00:00.839 2017 Error encountered in bundle: com.bmc.arsys.server Tue Oct 31 15:00:00.839 2017 Application context refresh failed (OsgiBundleXmlApplicationContext(bundle=com.bmc.arsys.server, config=spring-context/base_context.xml,spring-context/infrastructure_septran_context.xml,spring-context/profiles/aspectj_ctw/application_context.xml,spring-context/osgi.xml)) Tue Oct 31 15:00:00.854 2017 Unable to create application context for [com.bmc.arsys.server], unsatisfied dependencies: none Tue Oct 31 15:00:00.870 2017 TID 79 initTransport Normal ARServer shutdown process Initiated. Tue Oct 31 15:00:00.902 2017 Stopserver.await: accept Tue Oct 31 15:01:13.482 2017 Error trying to find a system form. Tue Oct 31 15:01:13.557 2017 Error trying to find a system form. Tue Oct 31 15:01:16.041 2017 Error encountered in bundle: com.bmc.arsys.server Tue Oct 31 15:01:16.041 2017 Application context refresh failed (OsgiBundleXmlApplicationContext(bundle=com.bmc.arsys.server, config=spring-context/base_context.xml,spring-context/infrastructure_septran_context.xml,spring-context/profiles/aspectj_ctw/application_context.xml,spring-context/osgi.xml)) Tue Oct 31 15:01:16.056 2017 Unable to create application context for [com.bmc.arsys.server], unsatisfied dependencies: none Tue Oct 31 15:01:16.088 2017 Stopserver.await: accept Tue Oct 31 15:01:16.088 2017 TID 79 initTransport Normal ARServer shutdown process Initiated. .............................. The armonitor.log shows: .............................. */ ProcessMonitor starting process [ ARSERVER ]. */ Server port socket listener initializing.. */ Server Statup Notification Port [ARSERVERPORT] :49384 */ Process ID for the server process is: 4552 */ Server Process ID: 4552 */ Tue Oct 31 15:01:06.682 2017 RestApiActivator:starting bundle... */ Tue Oct 31 15:01:06.682 2017 Restapi bundle started. */ Tue Oct 31 15:01:13.482 2017 Error trying to find a system form. */ org.apache.commons.dbcp.SQLNestedException: Cannot create PoolableConnectionFactory (ORA-01017: invalid username/password; logon denied */ ) ..... org.eclipse.gemini.blueprint.extender.internal.dependencies.startup.DependencyWaiterApplicationContextExecutor$CompleteRefreshTask.run(DependencyWaiterApplicationContextExecutor.java:137) [bundlefile:2.0.0] */ at java.lang.Thread.run(Unknown Source) [na:1.8.0_92] */ Caused by: java.sql.SQLException: ORA-01017: invalid username/password; logon denied */ ...... */ at oracle.jdbc.driver.T4CTTIoauthenticate.doOAUTH(T4CTTIoauthenticate.java:383) ~[ojdbc6-11.2.0.4.0.jar:11.2.0.4.0] */ at oracle.jdbc.driver.T4CTTIoauthenticate.doOAUTH(T4CTTIoauthenticate.java:776) ~[ojdbc6-11.2.0.4.0.jar:11.2.0.4.0] */ at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:432) ~[ojdbc6-11.2.0.4.0.jar:11.2.0.4.0] */ at oracle.jdbc.driver.PhysicalConnection.<init>(PhysicalConnection.java:553) ~[ojdbc6-11.2.0.4.0.jar:11.2.0.4.0] */ at oracle.jdbc.driver.T4CConnection.<init>(T4CConnection.java:254) ~[ojdbc6-11.2.0.4.0.jar:11.2.0.4.0] */ at oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension.java:32) ~[ojdbc6-11.2.0.4.0.jar:11.2.0.4.0] */ at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:528) ~[ojdbc6-11.2.0.4.0.jar:11.2.0.4.0] */ at org.apache.commons.dbcp.DriverConnectionFactory.createConnection(DriverConnectionFactory.java:38) ~[commons-dbcp-1.4.jar:1.4] */ at org.apache.commons.dbcp.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:582) ~[commons-dbcp-1.4.jar:1.4] */ at org.apache.commons.dbcp.BasicDataSource.validateConnectionFactory(BasicDataSource.java:1556) ~[commons-dbcp-1.4.jar:1.4] */ at org.apache.commons.dbcp.BasicDataSource.createPoolableConnectionFactory(BasicDataSource.java:1545) ~[commons-dbcp-1.4.jar:1.4] */ ... 26 common frames omitted */ Tue Oct 31 15:01:13.557 2017 Error trying to find a system form. */ org.apache.commons.dbcp.SQLNestedException: Cannot create PoolableConnectionFactory (ORA-28000: the account is locked */ ) .............................. Use Case2: AR Server Service did not start. Error in arerror.log: .............................. Thu Jul 29 13:12:25 2021 Dispatch : The SQL database operation failed. (Cannot open database "ARSystem" requested by the login. The login failed. ClientConnectionId:b7bb6273-2dcb-484d-a8ff-4106976bf165) ARERR - 552 Thu Jul 29 13:12:37.554 2021 Error in failover monitor ERROR (552): The SQL database operation failed.; Cannot open database "ARSystem" requested by the login. The login failed. ClientConnectionId:439ca787-0474-4f84-b759-5c0ce128d8c1 ..............................
|
Oracle password incorrectly set or Oracle profile having a set limit for the password life time.
This knowledge article may contain information that does not apply to version 21.05 or later which runs in a container environment. Please refer to Article Number 000385088 for more information about troubleshooting BMC products in containers. Use Case1: Check the following in the Oracle side to ensure the password is correctly set:
1- The Database (Oracle) does not allow special characters to be the first letter in a password change. 2- Check the ARADMIN user's main PROFILE in Oracle to ensure the assigned profile has the Oracle parameter PASSWORD_LIFE_TIME set to UNLIMITED Example: SELECT profile FROM dba_users WHERE username='ARADMIN'; > Result: DEFAULT 3- If the ARADMIN user belongs to the profile DEFAULT then check the properties of this profile, specifically the PASSWORD_LIFE_TIME parameter: Example: SELECT resource_name,limit FROM dba_profiles WHERE profile='DEFAULT' AND resource_name='PASSWORD_LIFE_TIME'; > Result: PASSWORD_LIFE_TIME UNLIMITED 4- In the event of this profile not being set as Unlimited perform the following: Example: ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED; Commit; > Result: Profile DEFAULT altered. Commit complete. 5- Check then the status of the user ARADMIN account Example: SELECT account_status FROM dba_users WHERE username='ARADMIN'; 6- In the event the user ARADMIN is not OPEN then perform the following: To unlock the user: ALTER USER <Username> IDENTIFIED BY password ACCOUNT UNLOCK; Example : ALTER USER ARADMIN IDENTIFIED BY password ACCOUNT UNLOCK; commit; To change the user's password: ALTER USER ARADMIN IDENTIFIED BY <password>; Example: ALTER USER ARADMIN IDENTIFIED BY AR#Admin#; Commit; 7- Use SQLPlus or SQLDeveloper tool to login into the Oracle AR System instance to ensure the ARADMIN user is accessible. 8- Once the ARADMIN user is fully accessible and correctly set in Oracle it needs to be updated also in Remedy IF the password was changed. Note: If the password was not changed but only the account unlocked then no further action is required and the AR System can be restarted. If the ARADMIN's Oracle password was changed then check the further actions needed to be done in Remedy by checking this article: Remedy AR System Server - How to change ARAdmin database user password in Remedy - INCLUDES VIDEO Use Case2: 1. Reset the database user 'ARAdmin' password in remedy. 2. Start the ARService successfully. |
Attachment(s):