OPSS - Auditing run-time event with database audit store not working as expected showing IAU:Unable to write Audit Event
(Doc ID 2216161.1)
Last updated on MARCH 01, 2023
Applies to:
Oracle Platform Security for Java - Version 11.1.1.7.0 to 11.1.1.7.0 [Release Oracle11g]Information in this document applies to any platform.
Symptoms
OAM auditing run-time event with database audit store , not working as expected
After set up the database audit store to audit user login activities in the database according to this guide
9.7.1 Setting Up the Audit Database Store
Observing On average, once a day, sometimes once every two days, the database audit would stop.
The log file continues to log the user's login activities, but the database store stops.
Every time this happens, it is necessary restart the OAM server to restore the service.
Observing these errors in logs:
[<SERVER_NAME>] [ERROR] [] [oracle.security.audit.logger] [tid: <TID>] [userId: <WLS Kernel>] [ecid: <ECID>] IAU:Unable to prepare statement:INSERT INTO OAM COLUMNS ( IAU_ID, IAU_ApplicationDomainName, IAU_AuthenticationSchemeID, IAU_AgentID, IAU_SSOSessionID, IAU_AdditionalInfo, IAU_AuthorizationScheme, IAU_UserDN, IAU_ResourceID, IAU_AuthorizationPolicyID, IAU_AuthenticationPolicyID, IAU_PolicyObjectID, IAU_ReadOnly, IAU_PolicyAdminContext, IAU_PolicyType, IAU_UserID, IAU_ResourceHost, IAU_RequestID, IAU_Impersonator, IAU_ProtectionLevel, IAU_ResourceType, IAU_ServiceURI, IAU_ServiceIdentifier, IAU_ServiceOperation, IAU_AdminRoleName, IAU_ClientIPAddress, IAU_SessionCreationTime, IAU_SessionExpirationTime, IAU_SessionLastUpdateTime, IAU_SessionLastAccessTime, IAU_IdentityDomain, IAU_GenericAttribute1, IAU_GenericAttribute2, IAU_GenericAttribute3, IAU_GenericAttribute4, IAU_GenericAttribute5, IAU_PolicyName, IAU_SchemeName, IAU_ResourceHostName, IAU_OldAttributes, IAU_OldSettings, IAU_NewAttributes, IAU_NewSettings, IAU_ResponseType, IAU_AgentType, IAU_ConstraintType, IAU_InstanceName, IAU_DataSourceName, IAU_DataSourceType, IAU_HostIdentifierName, IAU_ResourceURI, IAU_ResourceOperations, IAU_ResourceTemplateName, IAU_TstzOriginating, IAU_EventType, IAU_EventCategory ) VALUES ( ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? )
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Cause |
| Solution |
| References |