Listener Start Problem with TDE (Transparent Data Encryption)

i am testing Transparent Data Encryption in Oracle 10g by using the following link
http://oracle-base.com/articles/10g/TransparentDataEncryption_10gR2.php
Before Implementing the TDE listener was running fine but after implementation of TDE the listener was unable to start
Please check the steps which i follow
Step1-
specify the ENCRYPTION_WALLET_LOCATION parameter in the sqlnet.ora file, now SQLNET.ora file looks like the following
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
ENCRYPTION_WALLET_LOCATION=
(SOURCE=(METHOD=FILE)(METHOD_DATA=
(DIRECTORY=D:\oracle\product\10.2.0\wallet\)))
please check the contents of listener.ora file,i didn't make any configuration changes for listener before or after implementation of TDE
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = D:\oracle\product\10.2.0\db_1)
(PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
(ADDRESS = (PROTOCOL = TCP)(HOST = shakeel-pc.lhr.inov8.com.pk)(PORT = 1521))
Step2-
CONN sys/password AS SYSDBA
ALTER SYSTEM SET ENCRYPTION KEY AUTHENTICATED BY "myPassword";
TDE implemented successfuly implemented.
But when i try to stop/start listener
C:\>lsnrctl status
LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 06-JUN-2008 05:44
:30
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Produ
ction
Start Date 05-JUN-2008 22:40:14
Uptime 0 days 7 hr. 4 min. 16 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File D:\oracle\product\10.2.0\db_1\network\admin\listener.o
ra
Listener Log File D:\oracle\product\10.2.0\db_1\network\log\listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=shakeel-pc.lhr.inov8.com.pk)(PORT=15
21)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "orcl" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "orclXDB" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "orcl_XPT" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
The command completed successfully
C:\>lsnrctl stop
LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 06-JUN-2008 05:44
:35
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
The command completed successfully
C:\>lsnrctl start
[i]LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 06-JUN-2008 05:44
:40
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Starting tnslsnr: please wait...
TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Production
System parameter file is D:\oracle\product\10.2.0\db_1\network\admin\listener.or
a
Log messages written to D:\oracle\product\10.2.0\db_1\network\log\listener.log
Error listening on: (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PARTIAL=yes)(QUEUESI
ZE=1))
No longer listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\E
XTPROC1ipc)))
TNS-12560: TNS:protocol adapter error
TNS-00583: Valid node checking: unable to parse configuration parameters
Listener failed to start. See the error message(s) above...
To start the listener i have to close wallet as
1- SQL>conn sys as sysdba
ALTER SYSTEM SET WALLET CLOSE;
2- Replace the SQLNET.ora file as previous ,now SQLNET.ora contains
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
Now if i start the listener then the listener was started succesfuly
Please suggest why listener is not being start with TDE?

I have the same problem. I'm testing TDE using Oracle 11gR1. After setting the parameter encryption_wallet_location and restart the listener, the listener failed to start. The error is exactly the same
TNS-12560: TNS:protocol adapter error
TNS-00583: Valid node checking: unable to parse configuration parameters
By removing the parameter encryption_wallet_location, the listner can be started successfully.
Anyone can help?

Similar Messages

SQL Server Transparent Data encryption

I have implemented TDE for the Database and Column Level Encryption for Sensitive data in Tables. But, the Porblem is the data is entered through an front end application how could i encrypt this data when it is inserted from the Front end. And how to decry-pt
this data for the users when it is selected.
Your suggestions are most valuable.
Reagrds
Rehaan Khan
RehaanKhan. M

Let me start with a solution that may have been overlooked, but it is good to make sure we cover it. Have you considered using column-level permissions? It may not be a complete solution for your particular scenario if you need to give access to the column
for other reasons (after all, the group you are trying to restrict is probably developing applications on top of the column storing sensitive data) or if the developer group has permission to create objects that would render the sensitive data subject to ownership
chains. For more information on column-permissions look at
http://msdn.microsoft.com/en-us/library/ms186915.aspx
Assuming permissions alone will not solve the problem. By using encryption you should be able to limit access to the sensitive data to the developers, but it will also require some changes to your schema & application. TDE (Transparent Data Encryption)
will not help you in this scenario since you need to restrict access to the data and restricting access to the column is not sufficient.
The following links may be useful to get you started with SQL Encryption capabilities:
SQL Server Encryption (http://msdn.microsoft.com/en-us/library/bb510663.aspx)
Data Encryption in SQL Server (http://msdn.microsoft.com/en-us/library/bb669072(v=vs.110).aspx)
Encrypt a Column of data (http://msdn.microsoft.com/en-us/library/ms179331.aspx)
Cryptographic Functions (T-SQL) (http://msdn.microsoft.com/en-us/library/ms173744.aspx)
Older articles, but they may still be quite useful:
Indexing encrypted Data (http://blogs.msdn.com/b/raulga/archive/2006/03/11/549754.aspx)
SQL Server 2005: searching encrypted data (http://blogs.msdn.com/b/lcris/archive/2005/12/22/506931.aspx)
One recommendation may be to encrypt the data using an AES key, and protect the key using one or more certificates (I would recommend using a separate certificate per individual if possible), making sure that only authorized people have access to the keys.
Anyone else with access to the column, but not to the keys would not be able to decrypt the data.
BTW. I would also recommend using SQL Auditing (http://msdn.microsoft.com/en-us/library/cc280386.aspx) in order to keep honest people honest, by monitoring access to the keys & to the
sensitive data.
I hope this information helps,
-Raul Garcia
SQL Server Security
This posting is provided "AS IS" with no warranties, and confers no rights.

General review of Transparent Data Encryption (TDE) and performance of...

I understand that the implementation of just about any database encryption solution, is going to result in a some degree of a performance hit, especially as searches are performed against the database, but none-the-less, we are thinking about implementing the Oracle TDE solution and as recommended, just isolating encryption needs to ONLY necessary columns of data - in our case, columns pertaining to private ASNWER (results) data and/or PII (Pers. Ident. Info.). This being said, is anyone else doing something similar with TDE, or does anyone have any pointers up front on what to look out for, what to expect, and how they are operating with TDE. (Just reaching out for some thoughts, insight, comments, and/or warnings)... Thank you very much. - Jason

Yes, we have many customers using it, please check my updated TDE best practices paper; it has lots of hints and tricks and things to look out for:
Available from http://www.oracle.com/technology/deploy/security/database-security/transparent-data-encryption/index.html (scroll down, please).
Thanks, Peter

Transparent Data Encryption clarification

Hello All,
{color:#993300}http://www.oracle.com/technology/deploy/security/database-security/transparent-data-encryption/tde_faq.html#A12010
Does the database memory (SGA) contain clear-text or encrypted data?
With column-level TDE, encrypted data remains
encrypted inside the SGA, but with tablespace encryption, data is
already decrypted in the SGA.{color}
my doubt here is,
1. when a select query issued when and where the decryption takes place before the data comes to SGA?
2. Is there any tool to dump the duffer cache in SGA to find whether data is encrypted or not?
Plz do help me
Thanks in advance

AFAIK, TDE is for encrypting data on disk (so database cant be stolen), not for encryting data in the tables (may be wrong there)
dbms_obfuscation is deprecated in 10g, so used dbms_crypto instead - its much better

Transparent Data Encryption Configuration

Hi,
I want to configure Transparent Data Encryption on a Database which is protected with Database Vault.
Is there any document which talks about the integration of Database Vault with Transparent Data Encryption.
I want to create a common security administrator user (other than sys/system users) for Transparent Data Encryption configuration.
If i create a new administrator from Enterprise Manager console i am getting the following error:
SQL Error ORA-47401: Realm violation for grant system privilege on SELECT ANY DICTIONARY. ORA-06512: at "SYSMAN.MGMT_USER", line 9316 ORA-06512
How to avoid this error.
Any pointers on this is appreciated.
Thanks & regards,
Srikanth

Turning off DBVault is not needed to turn on TDE ... the DB user who wants to manage the DB through Enterprise Manager, needs to have the SELECT ANY DICTIONARY privilege (I think I remember this is done by logging into EM (not DVA) as DBV_OWNER, or DV_ACCT_MNGR if you have configured one).
If then the creation of the wallet fails, make the user an OWNER of the DATA DICTIONARY realm in DBVault. Note that the directory that you plan to use to store the wallet needs to exist before you create the wallet and master key for TDE.
Peter
Edited by: Peter Wahl on 03.07.2010 02:20

How can I debug a problem with the 3g data connection on my iPhone 4s?

This question didn't get any answers in the "Using iPhone" forum. Thought I would re-ask here. Note, I had to reset the network again today 2 days after the last reset:
I've been having intermittent problems with my 3g data connection on my iPhone 4s on ATT. Whenever this happens I see full bars etc, but can't browse from safari or get any data in other apps. My wife's iPhone 4 right next to me has no issues at all. Switching on/off airplane mode and turning off/on Cellular Data does not help. The only thing that helps is resetting the Network Settings or hard restarting the phone.
I figured my problems were hardware related so I took my phone in for a replacement the other day. Things started out fine but after I upgraded it to 5.01 and restored my backup and now I am back to having the same issue today. I assume the issue is with something coming from my backup / restore but is there any way for me to pinpoint what could be causing the issue. I have a lot of apps, I'd rather not have to reinstall and set them all backup manually, but I would if I knew that would fix the problem... but for all I know one of the apps could be causing it.
Anyone have any logs I can check or testing I can do on my end?
Thanks!

Unfortunately, Apple does not make any logs available to the average schmoe (like us) for networking, kernel dumps, or anything else (assuming, of course, it is not jailbroken).
Your best bet is to take it back into the store. Ask them to look at the notes in GCRM regarding the last time this occured, then explain after upgrading to 5.01 it is occuring again. Then ask them for a phone swap since it is a reoccuring issue and doesn't sound like an OS/SW issue. Good luck!

Transparent Data Encryption vs. OS level encryption

Can someone help me by posting few URLs to read about Oracle's Transparent Data Encryption vs. OS Level Encryption (Win 2003 server)? We are trying to choose an option and go with it. I'm looking for a comparative analysis doc (Oracle 10.2.0.2 on MS Win 2003 Server), or if you can give me pros and cons for each of those options.
Many thanks in advance,
Dejan

http://www.oracle.com/technology/deploy/security/database-security/transparent-data-encryption/index.html

Transparency Data Encryption V.S. DBMS_CRYPTO

Which provides more security between Transparency Data Encryption V.S. DBMS_CRYPTO?

The security protection is, for all essential purposes, identical.
TDE automates encryption at the column level (10g) and dbms_crypto is used by PL/SQL.

Problem with displaying chart data

Hello everybody,
I have problem with displaying chart data correctly. I'm using a cartesian chart with DateTimeAxis. The stockdata I'm using is for half a year and
with ticks for every day. The problem is, that Flex displays the data of february in march together with the data of march. I have added a picture
to show the result. The second column of the grid is for february and the third for march.
Could anybody help me with this problem. Thanks in advance.
Thomas

Hi Chris,
thanks for your reply. Here you get the source code:
The following method creates the LineChart:
        public function init():void
            model.upperChart = this;
            model.upperChartStyle.setChartViewStyle(this);
            this.hAxis = new MyDateTimeAxis();
            model.upperChartData.configureHAxis(this.hAxis);
            this.vAxis = new LinearAxis();
            model.upperChartData.configureVAxis(this.vAxis);
            this.vAxisTitle = new Label();
            this.vAxisTitle.text = model.upperChartData.getVAxisTitle();
            model.upperChartStyle.setVAxisTitleLabelStyle(this.vAxisTitle);
            this.vAxisTitle.x = 10
            this.vAxisTitle.y = 0;
            this.addChild(this.vAxisTitle);
            this.myChart = new CartesianChart();
            //remove default datatip
            this.myChart.showDataTips = false;
            this.myChart.x = 10;
            this.myChart.y = 0;
            this.myChart.width = 768;
            this.myChart.height = 196;
            model.upperChartStyle.setChartStyle(this.myChart);
            this.addChild(this.myChart);
            //Remove line shadow
            this.myChart.seriesFilters = null;
            this.myChart.horizontalAxis = this.hAxis;
            this.myChart.verticalAxis = this.vAxis;
            this.hAxisRenderer = new AxisRenderer();
            model.upperChartData.configureHAxisRenderer(this.hAxisRenderer);
            this.hAxisRenderer.axis = this.hAxis;
            model.upperChartStyle.setHAxisRendererStyle(this.hAxisRenderer);
            this.myChart.horizontalAxisRenderers.push(this.hAxisRenderer);
            this.vAxisRenderer = new AxisRenderer();
            model.upperChartData.configureVAxisRenderer(this.vAxisRenderer);
            this.vAxisRenderer.axis = this.vAxis;
            model.upperChartStyle.setVAxisRendererStyle(this.vAxisRenderer);
            this.myChart.verticalAxisRenderers.push(this.vAxisRenderer);
            model.upperChartStyle.setVAxisDataLabelStyle(this.vAxisMinLabel);
            this.addChild(this.vAxisMinLabel);
            model.upperChartStyle.setSeriesStyle(model.upperChartData.series, model.upperChartData.shares);
            this.myChart.dataProvider = model.upperChartData.dataProvider;
            this.myChart.series = model.upperChartData.series;
The data for dataprovider and series you can see in attached file dataprovider.xml.
xfield is equivalent to timestamp
yfield is equivalent to absolute
I think the problem could be the configuration of the datetimeaxis. The following method shows the parameter for the datetimeaxis:
        public function configureHAxis(axis:MyDateTimeAxis):void
            axis.parseFunction = UtilityClass.parseYYYYMMDDHHNNSSString2Date;
            axis.dataUnits = "days";
            axis.dataInterval = 1;
            axis.title = "";
            axis.minimum = new Date(UtilityClass.parseYYYYMMDDHHNNSSString2Date("2009-01-07 00:00:00").time);
            axis.maximum = new Date(UtilityClass.parseYYYYMMDDHHNNSSString2Date("2009-07-06 00:00:00").time);
And finally you get the function, that I'm using for string to date conversion:
        public static function parseYYYYMMDDHHNNSSString2Date(input:String):Date
            var result:Date = new Date();
            var year:Number = Number(input.substring(0,4));
            var month:Number = Number(input.substring(5,7));
            var date:Number = Number(input.substring(8,10));
            var hours:Number = Number(input.substring(11,13));
            var minutes:Number = Number(input.substring(14,16));
            var seconds:Number = Number(input.substring(17,19));
            result.setUTCFullYear(year);
            result.setUTCMonth(month-1);
            result.setUTCDate(date);
            result.setUTCHours(hours);
            result.setUTCMinutes(minutes);
            result.setUTCSeconds(seconds);
            return result;
I hope that will help to locate the reason for the wrong chart visualization.
Thanks for any help.

Sql Devloper 4.0.0.13 - problems with displaying user data types

Hi,
I have installed new version of sqldeveloper and have discovered some problems with displaying user data types. The data that is described as VARCHAR2 are displayed with ‘???’.
The problem persist in table view, script output and exported files.
My type is described as follows:
create or replace TYPE "DPTY_ADRESA" AS OBJECT
ID_DPSF_OPCINE                                         NUMBER,
ID_DPSF_MJESTA                                        NUMBER,
OPCINA                                            VARCHAR2(100),
MJESTO                                            VARCHAR2(100),
ULICA                                 VARCHAR2(200),
BROJ                                   VARCHAR2(20),
SPRAT                VARCHAR2(20),
OSTALO                             VARCHAR2(100),
CONSTRUCTOR FUNCTION dpty_adresa RETURN SELF AS RESULT
add MEMBER FUNCTION dajAdresu RETURN VARCHAR2 cascade;
when make select column from table that contains this type I get next results:
CASE 1:
SQLDeveloper Version 3.2.20.09; Build MAIN-09.87; JDK 1.6.0_43; Windows 7 64 bit
Select:
select id, adresalokacija
from dptr_saglasnosti
where id = 1;
Result:
        ID ADRESALOKACIJA
         1 COMP.DPTY_ADRESA(124,4913,'TRAIK','TURBE','BABANA','3452','0',NULL)
END CASE 1;
CASE 2:
SQLDeveloper Version 4.0.0.13; Build MAIN-13.80; JDK 1.7.0_40; Windows 7 64 bit
Select1:
select id, adresalokacija
from dptr_saglasnosti
where id = 1;
Result1:
ID ADRESALOKACIJA
         1 COMP.DPTY_ADRESA(124,4913,'???','???','???','???','???',NULL)
But if I select one element it is displayed normal.
Select2:
select id, a.adresalokacija.opcina
from dptr_saglasnosti a
where id = 1;
Result2:
ID ADRESALOKACIJA.OPCINA
         1 TRAVNIK
END CASE 2;
I have tried this scenario on three different pc with same output.
Pleas help me to get rid of the '???' in result.
Best Regards,
Omer

I tried on SQLDeveloper Version 4.0.0.13; Build MAIN-13.80; JDK 1.7.0_45; Windows 7 64 bit; NLS setting is default
all data can show,No ??? in result
Test step as following:
create or replace TYPE "DPTY_ADRESA" AS OBJECT
ID_DPSF_OPCINE                                         NUMBER,
ID_DPSF_MJESTA                                        NUMBER,
OPCINA                                            VARCHAR2(100),
MJESTO                                            VARCHAR2(100),
ULICA                                 VARCHAR2(200),
BROJ                                   VARCHAR2(20),
SPRAT                VARCHAR2(20),
OSTALO                             VARCHAR2(100),
CONSTRUCTOR FUNCTION dpty_adresa RETURN SELF AS RESULT
alter TYPE "DPTY_ADRESA" add MEMBER FUNCTION dajAdresu RETURN VARCHAR2 cascade;
CREATE TABLE dptr_saglasnosti (
adresalokacija        DPTY_ADRESA,
id    number);
INSERT INTO dptr_saglasnosti VALUES (
DPTY_ADRESA (65,225,'Vrinda Mills', '1-800-555-4412','sss','aaaa','eeeee','attta'),1 );
select id, adresalokacija from dptr_saglasnosti where id = 1;
ID ADRESALOKACIJA
1    HRCP.DPTY_ADRESA(65,225,'Vrinda Mills','1-800-555-4412','sss','aaaa','eeeee','attta')

When I try and restore from iCloud it says problem with back up data help !!!

Can anyone help me back up my phone from iCloud. It is saying there is a problem with my data

Hey Shopaholic1181,
Thanks for using Apple Support Communities.
iCloud: Understanding alert messages when restoring from an iCloud Backup
http://support.apple.com/kb/TS4585
"Your iPhone cannot be restored because there is a problem with your backup data. Choose a different backup to restore from."
Your backup does not appear to be usable. If you receive this alert, you should check the iCloud System Status at the iCloud Support website to make sure there are not any issues occurring with iCloud Backup. If there is not a widespread issue notated on the iCloud System Status, the error may self-resolve if you wait several minutes and try again. If issues persist, you should contact iCloud Support via the iCloud Support website.
Have a nice day,
Mario

Does oracle 10.1 support transparent data encryption?

hi,
does oracle Release 10.1.0.3.0 support transparent data encryption?
if not, what can i use instead?
thanks

According to http://download-uk.oracle.com/docs/cd/B14117_01/network.101/b10772/asoconfg.htm ,
data encryption is supported for Oracle Net services in release 10.1.

Problem with Real Time Data Acquisition

Hello,
I tried to built a RDA data flow according to the SAP-Help and this blog (/people/kamaljeet.kharbanda/blog/2006/11/13/real-time-data-acquisition-bi2004s), but I ran into a problem. Everything seems to be fine, but even though the daemon is running no new data is added to the DSO. I'll explain in detail what steps I took and hope someone can pinpoint my error(s).
System is BW4 on SPS 17. My datasource as well as my DSObject are in the same system
1.) Created a transparent table with a timestamp-field for generic delta as a local object.
2.) Created a generic datasource from view/table (used the above table), marked it as realtime-enabled and used timestamp as delta-specific field.
3.) Replicated the metadata for my datasource and activated it.
4.) Created a Data Storage Object with infoobjects corresponding to the table fields
5.) Created a transformation between DataSource and DSO
6.) Created a DTP from Data Source to DSO. The type is realtime-DTP.
7.) Created an InfoPackage for Delta-Initial Load. Update mode: Initialize Delta Process -> Initialization with Data Transfer.
8.) Then I changed my DTP (step 6) to "normal DTP" and executed it. Then activated the data in the DSO. The datasets from the table (which i filled with an ABAP-program) were successfully loaded and activated. So now my DSO contains 5 datasets.
9.) Changed the DTP back to "realtime DTP"
10.) Created an InfoPackage for RDA. Adapter is set to "Realtime extraction from SAP System"
11.) Created a daemon, assigned the IP for RDA and the DTP to the daemon and started it up.
12.) Executed my ABAP program to added 3 datasets to the table which is used as a datasource.
So now in my source table there are 8 datasets, but the daemon won't load them. In my RDA-Monitor (trx rsrda) it shows my daemon, the assigned IP and the assigned DTP (status green). Under the IP there's one yellow request (that should be right according to the help), but unlike the picture in the blog (link see above) there's no request under the DTP.
Job overview (sm37) shows an active batch job and some jobs that are ready (every 10minutes a new batch starts and the old one is closed). the job log shows, that the daemon runs, but loads no data...
i think it might be a problem with the delta extraction somewhere, because the intial load works fine and there are no errors anywhere.
Edit: perhaps my settings in the data source unter tab: extraction are wrong?
Delta process: AIE After Images By Extractor (can't change that)
Direct Access: Allowd
real Time: Real-Time DA Supported
Adapter: realtime data extraction (also tried Access to SAP Data through Service API which seems senseless)
Data Format: Fixed Lenght
Anyone can explain what those fileds mean and which one i should use?
Edited by: Christoph Jender on Apr 10, 2008 2:48 PM
Edited by: Christoph Jender on Apr 10, 2008 3:33 PM

Hi again, another thing i'd like to try is to just active a business content datasource which is realtime-enabled and has the ability to dynamically add some values so that i can test if it works. but i have no idea what business content would be applicable here, any ideas on that perhaps?

Problems with Concatenating Binary Data

Hi
I am experiencing a problem with the unreliable concatenation of binary data.
I have a stored procedure that I wrote to perform cell encryption on long text fields (> 4000 characters in length). This takes the string, splits it into chunks of a set length, encrypts and concatenates the encrypted chunks into a varbinary(max) variable.
It then stores the length of the encrypted chunk at the beginning of the data (the length of output when encrypting strings of a set length is always be the same), e.g.
DECLARE @output VARBINARY(MAX), @length INT
SELECT @length = LEN(@encryptedchunk1)
SELECT @output = CONVERT(binary(8), @length) + @encryptedchunk1 + @encryptedchunk2 + @encryptedchunk3 + ...
So far so good, and when I decrypt the data, I can read the first 8 bytes of data at beginning of the binary data to get the length of the chunk:
-- get the length of the encrypted chunk
SELECT @length = CONVERT(INT, CONVERT(binary(8), LEFT(@encrypteddata, 8)))
-- then remove the first 8 bytes of data
SELECT @encrypteddata = CONVERT(VARBINARY(MAX), RIGHT(@encrypteddata, LEN(@encrypteddata) - 8))
<snip> code to split into chunks of length @length and decrypt
</snip>
This is where I am experiencing an issue. 99.4% of the time, the above code is reliable. However, 0.6% of the time this fails for one of two reasons:
the length is stored incorrectly. The length of the encrypted chunks is usually 4052 and substituting 4052 for the returned value (4051) allows the encrypted chunks to be decrypted.
the encrypted data sometimes starts at offset 8 instead of 9. The @length variable is correctly read at length 8 but only 7 bytes should be removed from the start, e.g.
SELECT @length = CONVERT(INT, CONVERT(binary(8), LEFT(@encrypteddata, 8)))
SELECT @encrypteddata = CONVERT(VARBINARY(MAX), RIGHT(@encrypteddata, LEN(@encrypteddata) - 7))
Has anyone any ideas on why this is happening and how the process can be made more reliable?
Julian

Use datalength, not len. Len() is designed for character strings and will ignore trailing bytes. And count characters. Datalength does exactly what you want: it counts bytes. Look at this:
DECLARE @b varbinary(200)
SELECT @b = 0x4142434420202020
SELECT @b, len(@b), datalength(@b)
Erland Sommarskog, SQL Server MVP, [email protected]

Problem with logminer in Data Guard configuration

Hi all,
I experience strange problem with applying of the logs in DataGuard configuration on the logical standby database side.
I've set up the configuration step by step as it is described in documentation (Oracle Data Guard Concepts and Administration, chapter 4).
Everything went fine until I issued
ALTER DATABASE START LOGICAL STANDBY APPLY;
I saw that log applying process was started by checking the output of
SELECT NAME, VALUE FROM V$LOGSTDBY_STATS WHERE NAME = 'coordinator state';
and
SELECT TYPE, HIGH_SCN, STATUS FROM V$LOGSTDBY;
but in few minutes it stoped and quering DBA_LOGSTDBY_EVENTS I saw the following records:
ORA-16111: log mining and apply setting up
ORA-01332: internal Logminer Dictionary error
Alert log says the following:
LOGSTDBY event: ORA-01332: internal Logminer Dictionary error
Wed Jan 21 16:57:57 2004
Errors in file /opt/oracle/admin/whouse/bdump/whouse_lsp0_5817.trc:
ORA-01332: internal Logminer Dictionary error
Here is the end of the whouse_lsp0_5817.trc
error 1332 detected in background process
OPIRIP: Uncaught error 447. Error stack:
ORA-00447: fatal error in background process
ORA-01332: internal Logminer Dictionary error
But the most useful info I found in one more trace file (whouse_p001_5821.trc):
krvxmrs: Leaving by exception: 604
ORA-00604: error occurred at recursive SQL level 1
ORA-01031: insufficient privileges
ORA-06512: at "SYS.LOGMNR_KRVRDREPDICT3", line 68
ORA-06512: at line 1
Seems that somewhere the correct privileges were not given or smth like this. By the way I was doing all the operations under SYS account (as SYSDBA).
Could smb give me a clue where could be my mistake or what was done in the wrong way?
Thank you in advance.

Which is your SSIS version?
Please Mark This As Answer if it solved your issue
Please Vote This As Helpful if it helps to solve your issue
Visakh
My MSDN Page
My Personal Blog
My Facebook Page

Listener Start Problem with TDE (Transparent Data Encryption)

Similar Messages

Maybe you are looking for