# Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

- [SailPoint Identity Services Documentation](<https://documentation.sailpoint.com/saas/help/index.html>)
- [SailPoint Support Knowledge Base](<https://support.sailpoint.com/csm?id=kb_view2&amp;kb_id=05ff44289f011200550bf7b6077fcfa3>)
- [SailPoint Developer Community](<https://developer.sailpoint.com/>)

## Create account with 'PASSWORD\_EXP' fails with error

**Issue**: When a customer adds `PASSWORD_EXP` to the Account Schema and Create Account policy and triggers a create account operation, the account is created in Oracle DB successfully and the user account status is marked as `EXPIRED`. However, the provisioning request shows the following error message:

```text
Error: Please contact your administrator
Provisioning
sailpoint.connector.ConnectorException: [ ConnectorException ] [ Error details ] The server encountered an unexpected error while contacting target system during get object operation. Please check the logs. The column [PASSWORD_EXP] does not exist
```

**Resolution**: Do not add `PASSWORD_EXP` to the account schema. Add it only to the create policy and execute the provisioning use case.

## Oracle accounts are missing the "CREATE SESSION (ADMIN\_OPTION ='NO')" system privilege

Oracle is not adding the "CREATE SESSION (ADMIN\_OPTION ='NO')" automatically while creating accounts.

**Resolution**: The Oracle connector does not automatically add "CREATE SESSION (ADMIN\_OPTION ='NO')" while creating an account using the role, it is only applicable while creating an account using the SYSTEM privilege.

## Provisioning SYSDBA and SYSOPER Fails with Insufficient Privileges

```text
User entitlements not modified sailpoint.connector.ConnectorException: ORA-01031: insufficient privileges
```

**Resolution**: The user must connect with the user as `"<username> as sysdba"` and the `<username>` must have SYSDBA privileges.

## Access Requests Fail with Role or System Privilege Errors

This error message displays when the service user does not have the required permissions available:

```text
[ConnectorException] [Error details] NEW The server encountered an unexpected error while contacting target system. Please check the logs. User entitlements not modifiedsailpoint.connector.ConnectorException: ORA-01924: role 'AUDIT_VIEWER' not granted or does not exist
[ConnectorException] [Error details] NEW The server encountered an unexpected error while contacting target system. Please check the logs. User entitlements not modifiedsailpoint.connector.ConnectorException: ORA-00604: error occurred at recursive SQL level 1 ORA-20997: "ALTER SYSTEM" grants not allowed ORA-06512: at "RDSADMIN.RDSADMIN", line 79 ORA-06512: at line 2
```

**Resolution**: Ensure that the roles/system privileges being granted are available for the service user by using the following: `WITH ADMIN OPTION=YES`.

## Provisioning Fails When the USERNAME Column Is Missing

```text
The identity attribute USERNAME does not exist in table
```

**Resolution**: The connector performs a Get Object of the provisioned accounts and checks for the `USERNAME` column in the `DBA_USERS` table. Ensure that `USERNAME` is present in the `DBA_USERS` table.

## Testing the Connection Fails with ORA-01882

The following error can occur when you test the connection if you are connecting this source to an 11.2 Oracle database with an Oracle 11.2 ojdbc drive:

```text
ORA-01882: timezone region not found
```

**Resolution**: Check the version of the DST file that exists in the database using the following command: `SELECT * FROM v$timezone_file;`

If the version number is lower than 18, upgrade the DST file to version 18 or the latest version.