| Author |
Message
|
| wibble7 |
 Posted: Mon Apr 30, 2012 6:22 am Post subject: SSL ORACLE ODBC connections |
 |
|
Novice
Joined: 30 Apr 2012
Posts: 18
|
 we are trying to add SSL to our ODBC connections on Message Broker 7 fixpack 3 but are getting the following:-
BIP2393E: Database error: ODBC return code '-1' from data source ''ESBDB'' using ODBC driver manager ''libbipodbc.a(odbc.so)''.
The broker received an error when processing a database operation. The ODBC return code was '-1'. See the following messages for informati
on obtained from the database about this error.
Use the following messages to determine the cause of the error. Typical problems are an incorrect data source, or table names. Correct eit
her the database or the broker configuration.
BIP2322E: Database error: SQL State ''HY000''; Native Error Code '2733'; Error Text ''[IBM][ODBC Oracle Wire Protocol driver]Unable to dyn
amically load client DLL libUKssl24.a(UKssl24.so).''.
The error has the following diagnostic information: SQL State ''HY000'' SQL Native Error Code '2733' SQL Error Tex
t ''[IBM][ODBC Oracle Wire Protocol driver]Unable to dynamically load client DLL libUKssl24.a(UKssl24.so).''
This message may be accompanied by other messages describing the effect on the message broker itself. Use the reason identified in this m
essage with the accompanying messages to determine the cause of the error.
BIP2322E: Database error: SQL State ''08001''; Native Error Code '0'; Error Text ''[IBM][ODBC Oracle Wire Protocol driver]SSL Initializati
on failure.''.
The error has the following diagnostic information: SQL State ''08001'' SQL Native Error Code '0' SQL Error Text
''[IBM][ODBC Oracle Wire Protocol driver]SSL Initialization failure.''
This message may be accompanied by other messages describing the effect on the message broker itself. Use the reason identified in this m
essage with the accompanying messages to determine the cause of the error.
BIP2322E: Database error: SQL State ''08001''; Native Error Code '-1'; Error Text ''[IBM][ODBC Oracle Wire Protocol driver][Oracle]ORA-122
03: unable to connect to destination''.
The error has the following diagnostic information: SQL State ''08001'' SQL Native Error Code '-1' SQL Error Text
''[IBM][ODBC Oracle Wire Protocol driver][Oracle]ORA-12203: unable to connect to destination''
This message may be accompanied by other messages describing the effect on the message broker itself. Use the reason identified in this m
essage with the accompanying messages to determine the cause of the error.
BIP8040E: Unable to connect to the database.
The database cannot be accessed with the specified user Id and password pair.
- Check that the database is running.
- Check that the database has an adequate number of database connections available for use.
- On Windows, check that an ODBC connection has been created.
- On systems that use $ODBCINI, check that the file pointed to by $ODBCINI has been correctly updated.
- On z/OS check the BIPDSNAO member of the component's dataset, and check the DB2 64bit ODBC driver (DSNAO64C) is in the STEPLIB.
- Use mqsisetdbparms to set the password to the correct value and try again.
IBM have said they don't ship the missing file nor do they support SSL on ODBC connections although DataDirect's site suggets it should be possible.
Has anyone managed to succesfully implement this? |
|
| Back to top |
|
 |
| lancelotlinc |
| Posted: Mon Apr 30, 2012 6:25 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
ORA-2733 means your db name exceeds the length limit. What is the name of your DB ? Are you passing in an incorrect parm for db name? This is not a broker problem, this is an ODBC problem. Ask your DBA to help you. You need to be able to use TOAD or other tool to connect to this DB from the same system to prove your ODBC conx is working.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Apr 30, 2012 6:51 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| lancelotlinc wrote: |
| You need to be able to use TOAD or other tool to connect to this DB from the same system to prove your ODBC conx is working. |
mqsicvp at v7.0.0.3 will do the job just fine. |
|
| Back to top |
|
|
| wibble7 |
| Posted: Mon Apr 30, 2012 7:35 am Post subject: |
|
|
Novice
Joined: 30 Apr 2012
Posts: 18
|
This is the output from the trace:-
ENTER SQLSetEnvAttr
SQLHENV 0x100a47f0
SQLINTEGER 200 <SQL_ATTR_ODBC_VERSION>
SQLPOINTER 3
SQLINTEGER 0
EXIT SQLSetEnvAttr with return code 0 (SQL_SUCCESS)
SQLHENV 0x100a47f0
SQLINTEGER 200 <SQL_ATTR_ODBC_VERSION>
SQLPOINTER 3
SQLINTEGER 0
ENTER SQLAllocConnect
HENV 0x100a47f0
HDBC * 0x1009d3a0
EXIT SQLAllocConnect with return code 0 (SQL_SUCCESS)
HENV 0x100a47f0
HDBC * 0x1009d3a0 ( 0x00000001)
ENTER SQLSetConnectOption
HDBC 0x1009d730
UWORD 102
UDWORD 0
EXIT SQLSetConnectOption with return code 0 (SQL_SUCCESS)
HDBC 0x1009d730
UWORD 102
UDWORD 0
ENTER SQLSetConnectOption
HDBC 0x1009d730
UWORD 2535
UDWORD 0
EXIT SQLSetConnectOption with return code 0 (SQL_SUCCESS)
HDBC 0x1009d730
UWORD 2535
UDWORD 0
ENTER SQLConnect
HDBC 0x1009d730
UCHAR * 0x1009d6de [ -3] "ESBDB"
SWORD -3
UCHAR * 0x100a6e9e [ -3] "esb_user"
SWORD -3
UCHAR * 0xa18c1308 [ -3] "******"
SWORD -3
EXIT SQLConnect with return code -1 (SQL_ERROR)
HDBC 0x1009d730
UCHAR * 0x1009d6de [ -3] "ESBDB"
SWORD -3
UCHAR * 0x100a6e9e [ -3] "esb_user"
SWORD -3
UCHAR * 0xa18c1308 [ -3] "******"
SWORD -3
ENTER SQLError
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b3c70
SWORD 1024
SWORD * 0xffffa598
EXIT SQLError with return code 0 (SQL_SUCCESS)
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 [ 5] "HY000"
SDWORD * 0xffffa5b0 (2733)
UCHAR * 0x100b3c70 [ 102] "[IBM][ODBC Oracle Wire Protocol driver]Unable to dynamically load client DLL libUKssl24.a(UKssl24.so)."
SWORD 1024
SWORD * 0xffffa598 (102)
ENTER SQLError
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b3c70
SWORD 1024
SWORD * 0xffffa598
EXIT SQLError with return code 0 (SQL_SUCCESS)
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 [ 5] "08001"
SDWORD * 0xffffa5b0 (0)
UCHAR * 0x100b3c70 [ 66] "[IBM][ODBC Oracle Wire Protocol driver]SSL Initialization failure."
SWORD 1024
SWORD * 0xffffa598 (66)
ENTER SQLError
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b3c70
SWORD 1024
SWORD * 0xffffa598
EXIT SQLError with return code 0 (SQL_SUCCESS)
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 [ 5] "08001"
SDWORD * 0xffffa5b0 (-1)
UCHAR * 0x100b3c70 [ 90] "[IBM][ODBC Oracle Wire Protocol driver][Oracle]ORA-12203: unable to connect to destination"
SWORD 1024
SWORD * 0xffffa598 (90)
ENTER SQLError
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b3c70
SWORD 1024
SWORD * 0xffffa598
EXIT SQLError with return code 100 (SQL_NO_DATA_FOUND)
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b3c70
SWORD 1024
SWORD * 0xffffa598
ENTER SQLSetEnvAttr
SQLHENV 0x100a4990
SQLINTEGER 200 <SQL_ATTR_ODBC_VERSION>
SQLPOINTER 3
SQLINTEGER 0
EXIT SQLSetEnvAttr with return code 0 (SQL_SUCCESS)
SQLHENV 0x100a4990
SQLINTEGER 200 <SQL_ATTR_ODBC_VERSION>
SQLPOINTER 3
SQLINTEGER 0
ENTER SQLAllocConnect
HENV 0x100a4990
HDBC * 0x1009d3a0
EXIT SQLAllocConnect with return code 0 (SQL_SUCCESS)
HENV 0x100a4990
HDBC * 0x1009d3a0 ( 0x00000001)
ENTER SQLSetConnectOption
HDBC 0x1009d730
UWORD 102
UDWORD 0
EXIT SQLSetConnectOption with return code 0 (SQL_SUCCESS)
HDBC 0x1009d730
UWORD 102
UDWORD 0
ENTER SQLSetConnectOption
HDBC 0x1009d730
UWORD 2535
UDWORD 0
EXIT SQLSetConnectOption with return code 0 (SQL_SUCCESS)
HDBC 0x1009d730
UWORD 2535
UDWORD 0
ENTER SQLConnect
HDBC 0x1009d730
UCHAR * 0x1009d6de [ -3] "ESBDB"
SWORD -3
UCHAR * 0x100aa1be [ -3] "esb_user"
SWORD -3
UCHAR * 0xa18c1308 [ -3] "******"
SWORD -3
EXIT SQLConnect with return code -1 (SQL_ERROR)
HDBC 0x1009d730
UCHAR * 0x1009d6de [ -3] "ESBDB"
SWORD -3
UCHAR * 0x100aa1be [ -3] "esb_user"
SWORD -3
UCHAR * 0xa18c1308 [ -3] "******"
SWORD -3
ENTER SQLError
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b39d0
SWORD 1024
SWORD * 0xffffa598
EXIT SQLError with return code 0 (SQL_SUCCESS)
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 [ 5] "HY000"
SDWORD * 0xffffa5b0 (2733)
UCHAR * 0x100b39d0 [ 102] "[IBM][ODBC Oracle Wire Protocol driver]Unable to dynamically load client DLL libUKssl24.a(UKssl24.so)."
SWORD 1024
SWORD * 0xffffa598 (102)
ENTER SQLError
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b39d0
SWORD 1024
SWORD * 0xffffa598
EXIT SQLError with return code 0 (SQL_SUCCESS)
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 [ 5] "08001"
SDWORD * 0xffffa5b0 (0)
UCHAR * 0x100b39d0 [ 66] "[IBM][ODBC Oracle Wire Protocol driver]SSL Initialization failure."
SWORD 1024
SWORD * 0xffffa598 (66)
ENTER SQLError
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b39d0
SWORD 1024
SWORD * 0xffffa598
EXIT SQLError with return code 0 (SQL_SUCCESS)
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 [ 5] "08001"
SDWORD * 0xffffa5b0 (-1)
UCHAR * 0x100b39d0 [ 90] "[IBM][ODBC Oracle Wire Protocol driver][Oracle]ORA-12203: unable to connect to destination"
SWORD 1024
SWORD * 0xffffa598 (90)
ENTER SQLError
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b39d0
SWORD 1024
SWORD * 0xffffa598
EXIT SQLError with return code 100 (SQL_NO_DATA_FOUND)
HENV 0x00000000
HDBC 0x1009d730
HSTMT 0x00000000
UCHAR * 0xffffa5b4 (NYI)
SDWORD * 0xffffa5b0
UCHAR * 0x100b39d0
SWORD 1024
SWORD * 0xffffa598
is the SSL failure not causing the ORA12203 error which in turn is been caused by the unable to load file error? |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Apr 30, 2012 7:41 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
So IBM has said they don't provide the needed files to accomplish this, and even if you make it work, they won't support it.
If you need the needed files and need to make this work and are able to live with the fact that this is unsupported, you will need to find the needed files from DataDirect somehow.
There's no guarantee that DataDirect will give them to you.
You could also consider something ridiculous like using stunnel to handle the ssl piece between the broker runtime and the database runtime. That may meet the needs without requiring that you use an unsupported function of broker. |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Mon Apr 30, 2012 7:46 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
Or talk to your IBM sales rep about an RFE (Request for Enhancement). IBM generally will implement support for requested functionality if enough customers ask for it.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Apr 30, 2012 8:02 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| lancelotlinc wrote: |
| Or talk to your IBM sales rep about an RFE (Request for Enhancement). IBM generally will implement support for requested functionality if enough customers ask for it. |
Don't even need to talk to your sales rep these days. Just go file one and then badger all your friends into upvoting it. |
|
| Back to top |
|
|
| wibble7 |
| Posted: Tue May 01, 2012 7:22 am Post subject: |
|
|
Novice
Joined: 30 Apr 2012
Posts: 18
|
|
| Back to top |
|
|
| mqjeff |
| Posted: Tue May 01, 2012 7:47 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
You might also just be able to use the regular Oracle ODBC drivers for Unix using this
Lancelotlinc will tell you this is only for soliddb, and he's not entirely wrong. And it may not be entirely supported to use this for a database for which the DataDirect drivers are available. But it may be a "closer to supported" solution than trying to extend the datadirect drivers. |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Tue May 01, 2012 8:54 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
Here is a potential config that may work: Connect to a local Oracle instance without SSL then replicate that data across the SSL link Oracle-to-Oracle style.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
|
|
