{"id":2719,"date":"2013-07-22T05:12:00","date_gmt":"2013-07-22T03:12:00","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/errors-while-installing-oracle-database-vault-on-oracle-11203\/"},"modified":"2013-07-22T05:12:00","modified_gmt":"2013-07-22T03:12:00","slug":"errors-while-installing-oracle-database-vault-on-oracle-11203","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/errors-while-installing-oracle-database-vault-on-oracle-11203\/","title":{"rendered":"Errors while installing Oracle Database Vault on Oracle 11.2.0.3"},"content":{"rendered":"

During one of my last consulting missions, I had to install Oracle Database Vault on an existing Oracle environment. It clearly was not a straigthforward process, since I experienced some weird errors such as: ORA-28003<\/strong>: password verification for the specified password failed, ORA-20001<\/strong>: Password length less than 8, and ORA-01917<\/strong>: user or role ‘LBACSYS’ does not exist.<\/p>\n

After having a look at several log files, I found the root causes of this error. Below, you will find a solution in order to bypass this pitfall.<\/p>\n

First of all, let’s start by checking that Oracle Database Vault has not been compiled with the current Oracle binaries:<\/p>\n

SQL> select * from v$option where parameter like '%Oracle Database Vault%'<\/span><\/code>PARAMETER\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0 VALUE
\n————————- ——————————–
\nOracle Database Vault\u00a0\u00a0\u00a0\u00a0\u00a0 False<\/p>\n<\/div>\n

In order to be able to compile Oracle with the Database Vault option, it is mandatory to install Oracle Label Security first. For both components, we can use chopt:<\/p>\n

myserver:\/users\/dba\/oracle> chopt enable lbac<\/span><\/code>
\nmyserver:\/users\/dba\/oracle> chopt enable dv<\/span><\/code><\/div>\n

 <\/p>\n

For additional information on the chopt command, please have a look on Yann Neuhaus blog<\/a>.
\nOnce your Oracle binaries are compiled with both components, we can proceed with DBCA (DataBase Configuration Assistant):<\/p>\n

1.<\/strong> Select “Configure Database Options”:<\/p>\n

\"Oracle<\/p>\n

2.<\/strong> Select the database where you want to configure Database Vault:<\/p>\n

\"Oracle<\/p>\n

3.<\/strong> Tick the radio button “Configure Database for local management”:<\/p>\n

\"DBCA003\"<\/p>\n

4.<\/strong> Select the option that fits your Directory Service needs best – in my case: “No, keep the database registrated”:<\/p>\n

\"DBCA004\"<\/p>\n

5.<\/strong> Select Oracle “Label Security”, “Enterprise Manager Repository” and “Oracle Database Vault”:<\/p>\n

\"Oracle<\/p>\n

6. <\/strong>Create a Database Vault Owner with his dedicated password and optionally a Separate Account Manager. You can find more information regarding Database Vault access rights policy on Oracle Documentation on the following address: http:\/\/docs.oracle.com\/cd\/E11882_01\/server.112\/e23090\/getting_started.htm<\/a><\/p>\n

\"DBCA006\"<\/p>\n

7. <\/strong>Set the DBSNMP and SYSMAN passwords:<\/p>\n

\"DBCA007\"<\/p>\n

8.<\/strong> Select the connection mode that fits your needs best. In my case it is “Dedicated Server Mode”:<\/p>\n

\"DBCA008\"<\/p>\n

9.<\/strong> A first pop-up appears, informing you that the database will be restarted:<\/p>\n

\"DBCA009\"<\/p>\n

10.<\/strong> A second pop-up appears, informing you about the database where the operations will be performed:<\/p>\n

\"confirmation\"<\/p>\n

It is possible that you experience the following errors during this installation:<\/p>\n