Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

Steel-Belted Radius on Solaris unable to connect to MS SQL with JDBC

0

0

Article ID: KB21830 KB Last Updated: 04 Mar 2017Version: 3.0
Summary:
This article describes the issue of SBR running on Solaris being unable to connect to MS SQL with the JDBC driver. This due to the disabled encryption algorithms in the Solaris JRE. 
Symptoms:
Connecting to a MS SQL server, SBR reports that the connection failed and does not connect. A packet capture shows that the TNS pre login transaction fails.
Solution:
Sun Microsystems has disabled some encryption algorithms for performance reasons.  Out of these, the RSA methods are what Microsoft uses for their encryption in the TNS pre login transaction. You can enable these methods by editing the java.security file, to disable the sun.security.pkcs11.SunPKCS11 provider. 

Open the java.security file in the JRE directory.

<radiusdirectory>/jre/lib/security/java.security
View the provider list, comment out the first provider in the list, and renumber the others so that it looks like the following:
#security.provider.1=sun.security.pkcs11.SunPKCS11 $ /lib/security/sunpkcs11-solaris.cfg
security.provider.1=sun.security.provider.Sun
security.provider.2=sun.security.rsa.SunRsaSign
security.provider.3=com.sun.net.ssl.internal.ssl.Provider
security.provider.4=com.sun.crypto.provider.SunJCE
security.provider.5=sun.security.jgss.SunProvider
security.provider.6=com.sun.security.sasl.Provider



Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search