存档

文章标签 ‘加密’,文章数:2

遇到两例isql登录ASE报Client password encryption fails.的错误,先总结一下。

主要原因可能有:

1、操作系统不被支持;

2、sybase环境变量不正确;

case 1:

在SUSE 10 x64 上安装了ASE 15.7 ESD#7的32位的客户端,使用isql连接的时候,报: Client password encryption fails(客户端密码加密失败)

通过查询sybase官方的版本与平台支持信息

ID Product Prod
Version
Prod
Word Size
OS Version Status
1436 Adaptive Server Enterprise 15.0 64-bit SuSE SLES 10 (AMD64/EM64T) Certified
     
General Notes:    ASE15.7 release does NOT support SLES10. Due to recent changes in glibc, the environment variable LD_POINTER_GUARD should be set to 1 for ASE to function properly. This variable should be set before starting any ASE binary. Note that there is known bug with the configuration step of the ASE installer. Please use "srvbuild" or "srvbuildres" to configure devices. This bug will be fixed in a future release of ASE. ASE15.5 ESD5.2 can't install on SUSE10SP2 Work-round: Replace sylapi with 32bit and change to 32bit JRE. ASE 15.5 support SUSE10: kernel-smp-2.6.16.21-0.8 glibc-2.4-31.2 ASE CE 15.5 support SUSE10.1: kernel-smp-2.6.16.46-0.12 glibc-2.4-31.30 e2fsprogs-1.38-25.21 libaio-0.3.104-14.2 libgcc-3.3.3-43.41 libstdc++-3.3.3-44.41 compat-libstdc++-5.0.7-22.2
Minimum Product Level :    ASE 15.0.2 ESD#1
ASE15.5 GA to ASE15.5 ESD5.1
ASE15.7 release does NOT support SLES10.
Minimum Required OS Level :    ASE15.7 release does NOT support SLES10. ASE15.7 requires SLES 11.0 as minOS.

For ASE15.0.2 and higher to ASE15.5 ESD5.1:
SuSE 10

kernel-smp-2.6.16.21-0.8
glibc-2.4-31.2
glibc-devel-2.4-31.2

再查看ASE 15.7的最低支持平台,看到:

今天在测试sybase服务器上配置encryption加密功能,测试一下数据加密的新特性。

sp_configure "enable encrypted columns",1

go

之后errorlog中显示:

======================================================================

00:00000:00026:2010/01/18 11:09:51.56 kernel  SySAM: Checked out license for 1 ASE_ENCRYPTION (2009.1231/permanent/19B3 47BC 0B7E 8DC3).
00:00000:00026:2010/01/18 11:09:51.56 kernel  Checked out license ASE_ENCRYPTION
00:00000:00026:2010/01/18 11:09:51.67 kernel  SySAM: Failed to obtain 2 license(s) for ASE_ENCRYPTION feature from license file(s) or server(s).
00:00000:00026:2010/01/18 11:09:51.67 kernel  SySAM: ASE requires 2 'per-CPU' licenses for use on this machine but only 1 could be obtained. Check whether additional licenses are available at the Sybase Product Download Center; or check whether the licensing terms allow you to partition the machine so that ASE can only use 1 CPU(s).
00:00000:00026:2010/01/18 11:09:51.67 kernel  SySAM: License feature name:  ASE_ENCRYPTION
00:00000:00026:2010/01/18 11:09:51.67 kernel  SySAM: License search path:   D:\sybase\\SYSAM-2_0\licenses\SYBASE_ASE_DE.lic
00:00000:00026:2010/01/18 11:09:51.67 kernel  SySAM: FLEXnet Licensing error:-73,125
00:00000:00026:2010/01/18 11:09:51.67 kernel  SySAM: For further information, refer to the Sybase Software Asset Management website at http://www.sybase.com/sysam
00:00000:00026:2010/01/18 11:09:51.73 server  Configuration file 'D:\sybase\TEST.cfg' has been written and the previous version has been renamed to 'D:\sybase/TEST.057'.
00:00000:00026:2010/01/18 11:09:51.73 server  The configuration option 'enable encrypted columns' has been changed by 'sa' from '0' to '1'.

======================================================================

重启了一下sybase服务器,就启动不起来了。

errorlog如下:

0:00000:00000:2010/01/18 15:11:26.37 kernel  SySAM: Using licenses from: D:\sybase\\SYSAM-2_0\licenses
00:00000:00000:2010/01/18 15:11:27.31 kernel  SySAM: Checked out license for 1 ASE_CORE (2009.1231/permanent/19B3 47BC 0B7E 8DC3).
00:00000:00000:2010/01/18 15:11:27.31 kernel  This product is licensed to: ASE Developer Edition - For Development and Test use only
00:00000:00000:2010/01/18 15:11:27.31 kernel  Checked out license ASE_CORE
00:00000:00000:2010/01/18 15:11:27.31 kernel  Adaptive Server Enterprise (Developer Edition)
00:00000:00000:2010/01/18 15:11:27.48 kernel  Using config area from primary master device.
00:00000:00000:2010/01/18 15:11:27.53 kernel  Warning: Using default file 'D:\sybase\TEST.cfg' since a configuration file was not specified. Specify a configuration file name in the RUNSERVER file to avoid this message.
00:00000:00000:2010/01/18 15:11:27.53 server  Illegal value '1' specified for configuration option 'max online engines'. The legal values are between '2' and '2'.
00:00000:00000:2010/01/18 15:11:27.53 server  The value specified for configuration option 'max online engines' '1' cannot be less than the sum of the configuration options 'number of engines at startup' and 'max online Q engines'. The current sum is '2'.
00:00000:00000:2010/01/18 15:11:27.53 server  'max online engines' has been modified from '1' to '2' by the verification routine.
00:00000:00000:2010/01/18 15:11:27.56 kernel  SySAM: Checked out license for 1 ASE_PARTITIONS (2009.1231/permanent/19B3 47BC 0B7E 8DC3).
00:00000:00000:2010/01/18 15:11:27.56 kernel  Checked out license ASE_PARTITIONS
00:00000:00000:2010/01/18 15:11:27.59 kernel  SySAM: Checked out license for 1 ASE_ENCRYPTION (2009.1231/permanent/19B3 47BC 0B7E 8DC3).
00:00000:00000:2010/01/18 15:11:27.59 kernel  Checked out license ASE_ENCRYPTION
00:00000:00000:2010/01/18 15:11:27.59 server  The value of the 'max memory' parameter (39936) defined in the configuration file is not high enough to set the other parameter values specified in the configuration file. 'max memory' should be greater than the 'total logical memory' '41568'.

======================================================================

暂时忽略number of engines at startup 和 max online engines 这两个参数不一致的情况。因为我的本是双核cpu。

关于内存配置,我没有调整max memory,在.cfg文件中一致都是DEFAULT。现在启动的时候报内存39936不够用,需要41568bytes内存。说明sybase中的 encryption选项是需要消耗一定的内存的, 另外用加密这个选项不知道对性能的影响有多大。想想每次写入数据库设备的数据都要在内存中进行加密处理了之后才写入磁盘。这给处理器有增加了负担。对性能的影响待以后有时间体会一下。

————————————————————————————————————
——— 本文为andkylee个人原创,请在尊重作者劳动成果的前提下进行转载;
——— 转载务必注明原始出处 : http://www.dbainfo.net
——— 关键字: ASE 15.0.3 加密 内存 encryption memory
————————————————————————————————————