Audit Vault and Database Firewall (AVDF) - Expired Password
I was recently having problems bringing up my Audit Trails. The logs were telling me that the connection could not be made. So I went to check that. On the AV Server, I attempted to connect as the username specified on the Secured Target -> Targets configuration page. For me, that's avdfuser. I used the Secured Target Location connection string to attempt it from SQL*Plus, which looks like this:
jdbc:oracle:thin:@//111.111.111.111:1521/msa.oracle.com
where the "111" numbers are the IP address of the target. When I tried this, I got an "Account Locked" error. It turns out my profile was such that it let the account password expire. I corrected that, and reattempted. I still got the same error. Then I noticed that the Target configuration page had nothing entered for the avdfuser password. That initially seemed OK to me, as that was the case for other targets that were connecting fine, but then it occurred to me that, since I'd just unlocked the account, I probably need to reenter the password on that page. I did that, and it connected just fine.
jdbc:oracle:thin:@//111.111.111.111:1521/msa.oracle.com
where the "111" numbers are the IP address of the target. When I tried this, I got an "Account Locked" error. It turns out my profile was such that it let the account password expire. I corrected that, and reattempted. I still got the same error. Then I noticed that the Target configuration page had nothing entered for the avdfuser password. That initially seemed OK to me, as that was the case for other targets that were connecting fine, but then it occurred to me that, since I'd just unlocked the account, I probably need to reenter the password on that page. I did that, and it connected just fine.
Labels: AVDF