Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

Create account with 'PASSWORD_EXP' fails with error

Issue: When a customer adds PASSWORD_EXP to the Account Schema and Create Account policy and triggers a create account operation, the account is created in Oracle DB successfully and the user account status is marked as EXPIRED. However, the provisioning request shows the following error message:

Error: Please contact your administrator
Provisioning
sailpoint.connector.ConnectorException: [ ConnectorException ] [ Error details ] The server encountered an unexpected error while contacting target system during get object operation. Please check the logs. The column [PASSWORD_EXP] does not exist

Resolution: Do not add PASSWORD_EXP to the account schema. Add it only to the create policy and execute the provisioning use case.

Oracle accounts are missing the "CREATE SESSION (ADMIN_OPTION ='NO')" system privilege

Oracle is not adding the "CREATE SESSION (ADMIN_OPTION ='NO')" automatically while creating accounts.

Resolution: The Oracle connector does not automatically add "CREATE SESSION (ADMIN_OPTION ='NO')" while creating an account using the role, it is only applicable while creating an account using the SYSTEM privilege.

Provisioning SYSDBA and SYSOPER Fails with Insufficient Privileges

User entitlements not modified sailpoint.connector.ConnectorException: ORA-01031: insufficient privileges

Resolution: The user must connect with the user as "<username> as sysdba" and the <username> must have SYSDBA privileges.

Access Requests Fail with Role or System Privilege Errors

This error message displays when the service user does not have the required permissions available:

[ConnectorException] [Error details] NEW The server encountered an unexpected error while contacting target system. Please check the logs. User entitlements not modifiedsailpoint.connector.ConnectorException: ORA-01924: role 'AUDIT_VIEWER' not granted or does not exist
[ConnectorException] [Error details] NEW The server encountered an unexpected error while contacting target system. Please check the logs. User entitlements not modifiedsailpoint.connector.ConnectorException: ORA-00604: error occurred at recursive SQL level 1 ORA-20997: "ALTER SYSTEM" grants not allowed ORA-06512: at "RDSADMIN.RDSADMIN", line 79 ORA-06512: at line 2

Resolution: Ensure that the roles/system privileges being granted are available for the service user by using the following: WITH ADMIN OPTION=YES.

Provisioning Fails When the USERNAME Column Is Missing

The identity attribute USERNAME does not exist in table

Resolution: The connector performs a Get Object of the provisioned accounts and checks for the USERNAME column in the DBA_USERS table. Ensure that USERNAME is present in the DBA_USERS table.

Testing the Connection Fails with ORA-01882

The following error can occur when you test the connection if you are connecting this source to an 11.2 Oracle database with an Oracle 11.2 ojdbc drive:

ORA-01882: timezone region not found

Resolution: Check the version of the DST file that exists in the database using the following command: SELECT * FROM v$timezone_file;

If the version number is lower than 18, upgrade the DST file to version 18 or the latest version.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.