Cannot access remote database

Last Updated : Sep 05, 2013 |

Recent versions of Java include code to handle cipher block chaining (CBC) attacks. This security enhancement might prevent Avaya Experience Portal from connecting to a Microsoft SQL Server 2008 external database. To work around this issue you must disable CBC protection in Java.

Proposed Solution

About this task

Perform the following procedure on the Primary EPM server and each Auxiliary EPM server.

Procedure

  1. Log in to Linux on the EPM server as a user with root privileges.
  2. Open the file /etc/profile.d/epm.sh in a text editor.
  3. Locate the line that begins with export JAVA_OPTS_EPM.
  4. Change this line to include the text -Djsse.enableCBCProtection=false.
    Important:

    Ensure that you enter the text in a single line.

    For example:

    JAVA_OPTS_EPM="-server -XX:MaxNewSize=256m -Xmx1024M -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:ThreadStackSize=1024 -Ddss.port=31050 
    -XX:PermSize=256m -XX:MaxPermSize=256m -XX:+HeapDumpOnOutOfMemoryError -XX:GCTimeRatio=19 -XX:CMSInitiatingOccupancyFraction=60 
    -Dcom.sun.management.jmxremote -XX:SurvivorRatio=8 -XX:TargetSurvivorRatio=90 -XX:MaxTenuringThreshold=0 -XX:+UseCMSCompactAtFullCollection 
    -XX:CMSFullGCsBeforeCompaction=1 -Dsun.lang.ClassLoader.allowArraySyntax=true -XX:-DoEscapeAnalysis -Djsse.enableCBCProtection=false"
  5. Save and close the file.
  6. Restart the server.