Thursday, September 14, 2017

IAU-5047: Problem in transferring audit record

Problem

You may receive these errors in the logs when starting up the OAM AdminServer:
####<Jun 28, 2017 7:35:08 PM GMT> <Error> <oracle.jps.common> <oamhost1.raastech.com> <AdminServer> <AuditLoaderRunner> <<WLS Kernel>> <> <0000LngIa0d3V805zzc9yW1PKkHg00000T> <1498678508558> <BEA-000000> <IAU:IAU-5047: Problem in transferring audit record from file:/u01/app/oracle/middleware/user_projects/domains/oamdomain/servers/AdminServer/logs/auditlogs/OAM/audit.log position:12,485 will retry in next cycle. caught exception oracle.security.audit.AuditException: javax.naming.NameNotFoundException: Unable to resolve 'jdbc.AuditDB'. Resolved 'jdbc'; remaining name 'AuditDB'
        at oracle.security.audit.ajl.loader.OracleRepository.createConnection(OracleRepository.java:131)
        at oracle.security.audit.ajl.loader.OracleRepository.<init>(OracleRepository.java:75)
        at oracle.security.audit.ajl.loader.JDBCLogWriter.reinit(JDBCLogWriter.java:68)
        at oracle.security.audit.ajl.loader.JDBCLogWriter.write(JDBCLogWriter.java:115)
        at oracle.security.audit.ajl.loader.AuditLoader.readMessages(AuditLoader.java:516)
        at oracle.security.audit.service.AuditLoaderManager.readMessages(AuditLoaderManager.java:324)
        at oracle.security.audit.service.AuditLoaderManager$Runner.run(AuditLoaderManager.java:410)
Caused by: javax.naming.NameNotFoundException: Unable to resolve 'jdbc.AuditDB'. Resolved 'jdbc'; remaining name 'AuditDB'
        at weblogic.jndi.internal.BasicNamingNode.newNameNotFoundException(BasicNamingNode.java:1148)
        at weblogic.jndi.internal.BasicNamingNode.lookupHere(BasicNamingNode.java:258)
        at weblogic.jndi.internal.ServerNamingNode.lookupHere(ServerNamingNode.java:182)
        at weblogic.jndi.internal.BasicNamingNode.lookup(BasicNamingNode.java:206)
        at weblogic.jndi.internal.BasicNamingNode.lookup(BasicNamingNode.java:220)
        at weblogic.jndi.internal.WLEventContextImpl.lookup(WLEventContextImpl.java:254)
        at weblogic.jndi.internal.WLContextImpl.lookup(WLContextImpl.java:412)
        at javax.naming.InitialContext.lookup(InitialContext.java:411)
        at oracle.security.audit.ajl.loader.OracleRepository.createConnection(OracleRepository.java:110)
        ... 6 more
>
####<Jun 28, 2017 7:35:08 PM GMT> <Error> <oracle.jps.common> <oamhost1.raastech.com> <AdminServer> <AuditLoaderRunner> <<WLS Kernel>> <> <0000LngIa0d3V805zzc9yW1PKkHg00000T> <1498678508558> <BEA-000000> <IAU:IAU-5048: Problem in transferring audit record to Audit Store null null. Please verify your Audit Store configuration>
Solution

1. Target the AuditDB datasource to the AdminServer.

Applicable Versions
  • Oracle Access Manager 11g

 

Tuesday, September 12, 2017

Getting "An unexpected error occurred" when deploying an OSB project

Problem:

When deploying an OSB project, you may get the following undescriptive error on the OSB Console:
An unexpected error occurred.
The following error would appear in the AdminServer.out file:
####<Mar 3, 2017 5:03:21 PM GMT> <Error> <netuix> <osbhost1> <AdminServer> <[ACTIVE] ExecuteThread: '39' for queue: 'weblogic.kernel.Default (self-tuning)'> <weblogic> <> <685ea1de428af539:-5fcff8e9:82f2515a61f:-8000-0000000000003938> <1488560601009> <BEA-423137> <There was an error loading the requested URI null.>

####<Mar 3, 2017 5:03:21 PM GMT> <Error> <netuix> <osbhost1> <AdminServer> <[ACTIVE] ExecuteThread: '39' for queue: 'weblogic.kernel.Default (self-tuning)'> <weblogic> <> <de428af5685ea139:-5fcff8e9:15a61f82f25:-8000-0000000000003938> <1488560601009> <BEA-423223> <There was an error while running a lifecycle stage :: Lifecycle: UIControl.render :: for the control :: null ::.
com.bea.netuix.nf.UIControlException: com.bea.portlet.adapter.scopedcontent.ActionLookupFailedException: java.lang.NoSuchMethodError: org.apache.commons.io.IOUtils.readFully(Ljava/io/InputStream;[B)V
        at com.bea.netuix.servlets.controls.content.NetuiContent.checkPreRenderExceptions(NetuiContent.java:404)
        at com.bea.netuix.servlets.controls.content.NetuiContent.beginRender(NetuiContent.java:343)
        at com.bea.netuix.nf.ControlLifecycle$7.visit(ControlLifecycle.java:485)
        at com.bea.netuix.nf.ControlTreeWalker.walkRecursiveRender(ControlTreeWalker.java:518)

Solution:

1. OSB JAR is missing the ExportInfo file.


Applicable Version:

  • Oracle Service Bus (OSB) 11g (11.1.1.9)


Monday, September 11, 2017

"The user account is locked or disabled" when logging in with Oracle Access Manager SSO

Problem

When trying to log in with SSO against Oracle Access Manager 11g, you see the error on the screen:

The user account is locked or disabled. Please contact the System Administrator.

Solution

Check all the following.

1. OID is down or the password for cn=orcladmin password in OAM needs updating.

2. Confirm that OID is running:
oracle@oamhost1:/home/oracle> ${MW_HOME}/asinst_1/bin/opmnctl status -l
3. Confirm that OAM can connect to OID.

a. Log in to the OAM Console.

b. Navigate to Configuration > User Identity Stores.

c. Edit OIDStore.

d. Click on "Test Connection".


Applicable Versions
  • Oracle Access Manager 11g

 

Wednesday, September 6, 2017

Getting "httpd.worker': double free or corruption" when starting up OHS

Problem

Starting up OHS fails.

This error appears in ${OHS_LOGS}/ohs1.log:
--------
17/06/17 02:37:46 Start process
--------
/u01/app/oracle/middleware/Oracle_WT1/ohs/bin/apachectl startssl: execing httpd
[Sat Jun 17 02:37:46 2017] [warn] Errors will be logged into /u01/app/oracle/middleware/Oracle_WT1/instances/obiee/diagnostics/logs/OHS/ohs1/ohs1.log
[Sat Jun 17 02:37:47 2017] [warn] Errors will be logged into /u01/app/oracle/middleware/Oracle_WT1/instances/obiee/diagnostics/logs/OHS/ohs1/ohs1.log
*** Error in `/u01/app/oracle/middleware/Oracle_WT1/ohs/bin/httpd.worker': double free or corruption (out): 0x0000000001821300 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x7c503)[0x7f3a1f9ab503]
/u01/app/oracle/middleware/Oracle_WT1/lib/libnnz11.so(nzumfree+0x64)[0x7f3a1f03aefa]
/u01/app/oracle/middleware/Oracle_WT1/lib/libnnz11.so(nztiFIC_Free_Identity_Contents+0x45)[0x7f3a1f06f2d3]
/u01/app/oracle/middleware/Oracle_WT1/lib/libnnz11.so(nztiDI_Destroy_Identity+0x3a)[0x7f3a1f06f268]
/u01/app/oracle/middleware/Oracle_WT1/lib/libnnz11.so(nztiFIL_Free_Identity_List+0x5a)[0x7f3a1f06f21a]
/u01/app/oracle/middleware/Oracle_WT1/lib/libnnz11.so(nztnFPC_Free_Persona_Contents+0x45)[0x7f3a1f072ec1]
If you comment out the ssl.conf line in httpd.conf, it starts up fine.


Solution

1. This was because the certificate chain was not complete in trust.jks.

For example, the identity cert was signed by a CA4, so the trust was missing the intermediate and root certs for that CA.

To import those certificates into the trust keystore:
keytool -import -alias PRODCA4 -file PRODCA4.crt -keystore /u01/app/oracle/middleware/keystore/trust.jks

keytool -import -alias PRODTreasury -file PRODTreasury.crt -keystore /u01/app/oracle/middleware/keystore/trust.jks
 
Applicable Versions
  • Oracle HTTP Server (OHS) 11g (11.1.1.9.0)

 

Wednesday, August 23, 2017

Find out what process is listening on what port

Do you want to know what process is listening on a particular port in Linux?

Using the lsof command you can confirm that a java process with a pid of 14202 is listening on port 7001:
oracle@soahost1:/home/oracle> lsof -i :7001 | grep LISTEN 
java  14202 oracle 1013u  IPv6 3652361843  0t0  TCP soahost1:afs3-callback (LISTEN)

Similarly, using the netstat command, you can confirm that the java process with a pid of 14202 is listening on port 7001:
oracle@soahost1:/home/oracle> netstat -anp | grep LISTEN | grep 7001
tcp   0  0 ::ffff:10.31.160.230:7001   :::*   LISTEN   14202/java



Thursday, August 17, 2017

Linux (process, search, size) command usage and examples

Process


View All Processes Hierarchically

ps -efaux

Shows Running Processes in Tree Format

pstree -p

Find the 20 Largest Processes (5th column)

ps -aux | sort -nk5 | grep -v USER | tail -20


Search



Search Recursively for Contents in a File

find . -type f | xargs grep "mytext"

Search Recursively for Contents in .java Files

find . -type f -name "*.java" | xargs grep "mytext"

Find All World Writable Files

find . -perm -2 ! -type l -ls

Search/Replace



Recursively Replace a String in .xml Files *dangerous*

find . -type f -name "*.xml" -exec sed -i "s%orabpel%orabpel2%" {} \;

Recursively Replace a String, but Exclude .class .jar. .zip Files *dangerous*

find . -type f \( ! -name "*.class" ! -name "*.jar" ! -name "*.zip" \) -exec sed -i "s%orabpel%orabpel2%" {} \;


Size



Directory Sizes

du -sm *

Find the 20 Largest Directories

du -S | sort -n | tail -20

Find Files > 100 MB

find . -size +100000k -exec du -h {} \;




 

Monday, August 7, 2017

WebGate 10g for Windows 2012 R2: "Could not read file" oblog config.xml

Problem

In the log file C:\NetPoint\Webgate\access\oblix\logs\oblog.log, you see this error:
2017/05/16@21:33:59.042000 2136 3108 INIT ERROR 0x000003B6 base\oblistrwutil.cpp:192 "Could not read file" filename^E:\NetPoint\Webgate\access//oblix/config/oblog_config.xml
Solution

1. Run these commands:
cd C:\NetPoint\Webgate\access\oblix\config\ 
cp oblog_config_wg.xml oblog_config.xml

Applicable Versions
  • Oracle WebGate 10g (Windows 32-bit)

 

Tuesday, August 1, 2017

Failed executing BamAdcServer.ping due to ServiceUnavailableException

Problem

Log in to the BAM Console at:
http://soahost1:9002/OracleBAM
Tried to log in to the BAM Console, and browser shows:
The BAM Server is unavailable.
These log entries show up in the bam_server1-diagnostic.log file during login:
[2017-03-10T13:10:13.846+00:00] [bam_server1] [TRACE:32] [] [oracle.bam.common.security] [tid: [ACTIVE].ExecuteThread: '47' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic] [ecid: 2913acc884e13d35:1da4e73c:15ab855a0ff:-8000-000000000000002b,0] [APP: oracle-bam#11.1.1] [SRC_CLASS: oracle.bam.common.security.authentication.WebAuthentication] [SRC_METHOD: authenticate] [60] Request: Scheme[http] AuthType[CLIENT_CERT,FORM] RemoteUser[weblogic] UserPrincipal[weblogic]
[2017-03-10T13:10:13.846+00:00] [bam_server1] [TRACE:32] [] [oracle.bam.common.security] [tid: [ACTIVE].ExecuteThread: '47' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic] [ecid: 2913acc884e13d35:1da4e73c:15ab855a0ff:-8000-000000000000002b,0] [APP: oracle-bam#11.1.1] [SRC_CLASS: oracle.bam.common.security.authentication.WebAuthentication] [SRC_METHOD: authenticate] [60] UserPrincipal: weblogic  
[2017-03-10T13:10:28.957+00:00] [bam_server1] [WARNING] [] [oracle.bam.common.remoting.BamEjbClient] [tid: [ACTIVE].ExecuteThread: '47' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic] [ecid: 2913acc884e13d35:1da4e73c:15ab855a0ff:-8000-000000000000002b,0] [APP: oracle-bam#11.1.1] [60] Failed executing BamAdcServer.ping due to ServiceUnavailableException. Configured retry count (3) has been exceeded. 
Solution

1. Wait for 15 minutes and try logging in again. It will work.
 
 
Applicable Versions
  • Oracle Business Activity Monitoring (BAM) 11g (11.1.1.9.0)

 

Saturday, July 29, 2017

WebGate 10g for Windows 2012 R2: "Could not read file" netlibmsg.xml

Problem

In this log file C:\NetPoint\Webgate\access\oblix\logs\oblog.log, you see the following:
2017/05/16@22:31:48.570000 1876 1521 INIT ERROR 0x000003B6 base\oblistrwutil.cpp:192 "Could not read file" filename^E:\NetPoint\Webgate\access//oblix/lang/en-us/netlibmsg.xml
Solution

1. No action needed. There is no adverse impact on WebGate functionality.

Applicable Versions
  • Oracle WebGate 10g (Windows 32-bit)

 

Friday, July 21, 2017

BAM-00404 Authentication failed

Problem

Getting the following error in the BAM logs:
[2017-04-12T21:27:03.699+00:00] [bam_server1] [WARNING] [] [oracle.bam.adc.security] [tid: [ACTIVE].ExecuteThread: '87' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic] [ecid: 5e3db6b798b0c5d6:-6f4d0d44:15b6408a2e3:-8000-00000000000019b7,0] [APP: oracle-bam#11.1.1]  [100] Exception occurred in method Authenticator.setUserContext([[
BamSubject:
    BAM USER ID:      0
    User:            
        Name:        weblogic
        Class:       weblogic.security.principal.WLSUserImpl
    Anonymous User:   null
    Application Role:
        Name:        Administrator
        Class:       oracle.security.jps.service.policystore.ApplicationRole
        GUID:        9630B38048C811E3BFF9A38AAABA83CB
        Application: oracle-bam#11.1.1
   Application Role:
        Name:        authenticated-role
        Class:       oracle.security.jps.internal.core.principals.JpsAuthenticatedRoleImpl
        GUID:        null
        Application: null
    Group:           
        Name:        Operators
        Class:       weblogic.security.principal.WLSGroupImpl
    Group:           
        Name:        Administrators
        Class:       weblogic.security.principal.WLSGroupImpl
    Group:           
        Name:        OracleSystemGroup
        Class:       weblogic.security.principal.WLSGroupImpl
    Group:           
        Name:        CrossDomainConnectors
        Class:       weblogic.security.principal.WLSGroupImpl
    Group:           
        Name:        AdminChannelUsers
        Class:       weblogic.security.principal.WLSGroupImpl
    Group:           
        Name:        AppTesters
        Class:       weblogic.security.principal.WLSGroupImpl
    Group:           
        Name:        Monitors
        Class:       weblogic.security.principal.WLSGroupImpl
    Group:           
        Name:        Deployers
        Class:       weblogic.security.principal.WLSGroupImpl)
Exception: oracle.bam.common.security.authentication.AuthenticationException: . User is marked inactive.
  at oracle.bam.adc.security.authentication.Authenticator.synchronizeUser(Authenticator.java:1194)
  at oracle.bam.adc.security.authentication.Authenticator.setUserContext(Authenticator.java:804)
  at oracle.bam.adc.kernel.server.DataStoreServer.setUserContext(DataStoreServer.java:475)
  at oracle.bam.adc.ejb.BamAdcServerBean.interceptor(BamAdcServerBean.java:261)
  at sun.reflect.GeneratedMethodAccessor995.invoke(Unknown Source)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
  at java.lang.reflect.Method.invoke(Method.java:606)
  at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
  at com.oracle.pitchfork.intercept.JeeInterceptorInterceptor.invoke(JeeInterceptorInterceptor.java:68)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.oracle.pitchfork.intercept.MethodInvocationInvocationContext.proceed(MethodInvocationInvocationContext.java:103)
  at oracle.security.jps.ee.ejb.JpsAbsInterceptor$1.run(JpsAbsInterceptor.java:135)
  at java.security.AccessController.doPrivileged(Native Method)
  at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)
  at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:464)
  at oracle.security.jps.ee.ejb.JpsAbsInterceptor.runJaasMode(JpsAbsInterceptor.java:122)
  at oracle.security.jps.ee.ejb.JpsAbsInterceptor.intercept(JpsAbsInterceptor.java:193)
  at oracle.security.jps.ee.ejb.JpsInterceptor.intercept(JpsInterceptor.java:113)
  at sun.reflect.GeneratedMethodAccessor992.invoke(Unknown Source)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
  at java.lang.reflect.Method.invoke(Method.java:606)
  at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
  at com.oracle.pitchfork.intercept.JeeInterceptorInterceptor.invoke(JeeInterceptorInterceptor.java:68)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.oracle.pitchfork.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:34)
  at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
  at com.oracle.pitchfork.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:42)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
  at com.sun.proxy.$Proxy249.ping(Unknown Source)
  at oracle.bam.adc.ejb.BamAdcServerBean_wf34ei_BamAdcServerRemoteImpl.__WL_invoke(Unknown Source)
  at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
  at oracle.bam.adc.ejb.BamAdcServerBean_wf34ei_BamAdcServerRemoteImpl.ping(Unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
  at java.lang.reflect.Method.invoke(Method.java:606)
  at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:89)
  at com.sun.proxy.$Proxy150.ping(Unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
  at java.lang.reflect.Method.invoke(Method.java:606)
  at oracle.bam.common.remoting.BamEjbClient.invoke(BamEjbClient.java:1546)
  at com.sun.proxy.$Proxy248.ping(Unknown Source)
  at oracle.bam.adc.api.client.BamAdcClient.ping(BamAdcClient.java:269)
  at oracle.bam.common.remoting.BamEjbClient.isADCServerAvailableForWebAppInit(BamEjbClient.java:1830)
  at oracle.bam.web.shared.WebPage.processRequest(WebPage.java:384)
  at oracle.bam.web.shared.WebPage.processRequest(WebPage.java:350)
  at jsp_servlet._19427.__startpage._jspService(__startpage.java:71)
  at weblogic.servlet.jsp.JspBase.service(JspBase.java:34)
  at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
  at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
  at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
  at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at oracle.bam.web.cache.ClientSideCache.doFilter(ClientSideCache.java:93)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at oracle.bam.web.filters.GZIPFilter.doFilter(GZIPFilter.java:97)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at oracle.bam.web.filters.ValidateBrowserSession.doFilter(ValidateBrowserSession.java:211)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at oracle.bam.web.redirect.Redirect.doFilter(Redirect.java:80)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at oracle.bam.web.filters.ValidateBrowserSupport.doFilter(ValidateBrowserSupport.java:138)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at oracle.bam.web.filters.CharsetFixupFilter.doFilter(CharsetFixupFilter.java:65)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:138)
  at java.security.AccessController.doPrivileged(Native Method)
  at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)
  at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:464)
  at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:121)
  at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:211)
  at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:138)
  at java.security.AccessController.doPrivileged(Native Method)
  at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)
  at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:464)
  at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:121)
  at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:211)
  at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
  at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3748)
  at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3714)
  at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
  at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
  at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2283)
  at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2182)
  at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1499)
  at weblogic.work.ExecuteThread.execute(ExecuteThread.java:263)
  at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)

]] 
Solution

1. Log in to the database as DEV_ORABAM.


2. Run the following query:
UPDATE dev_orabam.sysiteruser SET inactive = 0 WHERE username = 'weblogic'; 
COMMIT;
Applicable Versions
  • Oracle Business Activity Monitoring (BAM) 11g (11.1.1.9.0)

 

Getting "NZ Library Error: Unknown error" when starting up OHS

Problem

You may have received the following obscure error when trying to start up OHS. This error would repeat indefinitely in the ohs1.log file:
[2017-04-16T14:19:35.0074+00:00] [OHS] [ERROR:32] [] [core.c] [host_id: soahost1.raastech.com] [host_addr: 192.168.1.13] [pid: 10627] [tid: 139289152765702] [user: oracle] [VirtualHost: SOAHOST1:8898]  NZ Library Error: Unknown error 
Solution

1. Edit httpd.conf.

2. Add the following line at the bottom of the file. It must be the loopback address, and any available port:
Listen 127.0.0.1:9999

3. Restart OHS.

 
 
References
 
Applicable Versions
  • Oracle WebTier 11g (11.1.1.9.0)

 

Tuesday, July 18, 2017

Keytool usage and examples

List

keytool -list    -keystore cacerts

keytool -list -v -keystore cacerts

keytool -list -v -keystore raastech.jks -storepass changeit


Change Keystore Password

keytool -storepasswd -new changeit -keystore raastech.jks -storepass changeit


Import

keytool -import -trustcacerts -file CA.cer -alias ca -keystore cacerts

keytool -import -v -noprompt -trustcacerts -alias ca -file CA.cer -keystore trust.jks -storepass changeit


Import Keystore

keytool -importkeystore -srckeystore raastech.p12 -srcstoretype PKCS12 -destkeystore raastech.jks


Delete Alias from Keystore

keytool -delete -alias ca -keystore cacerts -storepass changeit



 

Sunday, July 16, 2017

Error while starting cluster: (Wrapped) java.io.IOException: Keystore was tampered with, or password was incorrect

Problem

Seeing the following in the log during startup of oam_server1:
[oam_server1] [ERROR] [] [Coherence] [tid: Logger@1725259747 3.7.1.1] [userId: ] [ecid: 0000Kcfv^DM7ECK6yVuXMG1KXY0q000002,0] [APP: oam_server#11.1.2.0.0] 2015-10-12 03:08:58.358/302741.698 Oracle Coherence GE 3.7.1.1 (thread=Configuration Store Observer, member=n/a): Error while starting cluster: (Wrapped) java.io.IOException: Keystore was tampered with, or password was incorrect.
Solution

The .cohstore.jks keystore file is corrupt and must be restored from backup.

If the password in the .cohstore.jks keystore file is corrupt, even though you may be able to get the password using a WLST command, it needs to be restored from backup.

1. Start the AdminServer.

2. Connect to Enterprise Manager (/em).

3. Locate the Domain in the left navigation panel.

4. Right click and select Security > Credentials.

5. Delete the credential Map key pair (OAM_STORE, coh).

6. Restart the AdminServer. This will re-create the Coherence Bootstrap artifact and reset the required password.

 
References
 
Applicable Versions
  • Oracle Access Manager 11g R2 PS2 (11.1.2.2.0)

 

Thursday, July 13, 2017

[Quick Tip] Jenkins: Skip the Wizard

If you are trying to setup Jenkins in an automated way you may setup the config files, but still get the setup screen despite not needing it.

You can simply add jenkins.install.runSetupWizard=false to the start up script and you're home free.

Enabling "Execution Tracing" and "Message Tracing" in OSB does not work

Problem

I enabled Execution Tracing and Message Tracing on an OSB proxy service, but nothing is appearing in the logs.


Solution

1. Navigate to Servers > osb_server1 > Logging.

2. Click on Advanced.

3. Set Minimum severity to Log to "DEBUG".

4. Set Log file : Severity Level to "DEBUG".

5. Save and Activate changes.



Applicable Versions
  • Oracle Service Bus (OSB) 11g (11.1.1.9.0)

 

Tuesday, July 4, 2017

OID/LDAP command usage and examples

Set Environment
export ORACLE_INSTANCE=/u01/app/oracle/middleware/asinst_1 
export ORACLE_HOME=/u01/app/oracle/middleware/Oracle_OID
Bind Admin
$ORACLE_HOME/bin/ldapbind -h oidhost -p 3060 -D cn=orcladmin -w welcome1

$ORACLE_HOME/bin/ldapbind -h oidhost -p 3060 -D "cn=orcladmin,cn=users,dc=raastech" -w welcome1
Bind User
$ORACLE_HOME/bin/ldapbind -h oidhost -p 3060 -D "cn=ahmed,cn=users,dc=raastech" -w welcome1
Bind on SSL Port
$ORACLE_HOME/bin/ldapbind -h oidhost -p 3131 -U 1 -D cn=orcladmin -w welcome1
Search
$ORACLE_HOME/bin/ldapsearch -h oidhost -p 3131 -U 1 -D cn=orcladmin -s sub "(objectclass=*)" -w welcome1
Add User
Create file: oid_add_user.ldif

dn: cn=ahmed,cn=users,dc=raastech
changetype: add
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
uid: ahmed
givenName: ahmed
sn: ahmed
cn: ahmed
mail: ahmed@ahmed.ahmed
userPassword: welcome1


$ORACLE_HOME/bin/ldapmodify -h oidhost -p 3060 -D cn=orcladmin -w welcome1 -f oid_add_user.ldif
Change Password
Create file: oid_update_password.ldif

dn: cn=ahmed,cn=users,dc=raastech
changetype: modify
replace: userPassword
userPassword: welcome1


$ORACLE_HOME/bin/ldapmodify -h oidhost -p 3060 -D cn=orcladmin -w welcome1 -f oid_update_password.ldif
Delete User
Create file: oid_delete_user.ldif

dn: cn=ahmed,cn=users,dc=raastech
changetype: delete

$ORACLE_HOME/bin/ldapmodify -h oidhost -p 3060 -D cn=orcladmin -w welcome1 -f oid_delete_user.ldif

 
Applicable Versions
  • Oracle Internet Directory (OID) 11g

 

WebLogic Routing Configuration in mod_wl_ohs.conf for OBIEE 11g

1. Edit this file:
/u01/app/oracle/middleware/Oracle_WT1/instances/obiee/config/OHS/ohs1/mod_wl_ohs.conf
2. Add these entries (modify hostnames accordingly):
<Location /analytics>
  SetHandler weblogic-handler
  WebLogicCluster obieehost1:9701,obieehost2:9701
  WLProxySSL ON
  WLProxySSLPassThrough ON
</Location>

<Location /xmlpserver>
  SetHandler weblogic-handler
  WebLogicCluster obieehost1:9701,obieehost2:9701
  WLProxySSL ON
  WLProxySSLPassThrough ON
</Location>
 
Applicable Versions
  • Oracle HTTP Server (OHS) 11g (11.1.1.9.0)
  • OBIEE 11g (11.1.1.9.0)

 

Monday, July 3, 2017

Convert a .p12 file to .pem

PEM files are fully encrypted. 

Openssl can turn a P12 file in a PEM file with both public and private keys using this command: 
openssl pkcs12 -in certinput.p12 -out certoutput.pem -nodes

References





Friday, June 30, 2017

[Quick Tip] Git: Intermediate versioning with the index.

If you use git on a daily basis then you're probably familiar with the typical:
git add somefile.txt
git commit
<Write your commit message>

One of the nice things has always been that you can do your commits locally before pushing it out to your remote repository (if you ever do that).  If you prefer expedience many people will skip the add step when they can by just using git commit -am "Commit Message". However sometimes when dealing with a non-trivial issue you may have many iterations that you can work with before what every you're doing is done. My typical method for this is to just commit and say WIP or work in progress. That way I can see where I know that the build might fail.

If I feel really motivated I may even go back to squash. However, let's say that you're not the type to commit until you have something fully working. Then I say you have a way. One of the nice features that I think many people overlook is the index. It sits in limbo between your working copy and the commit history. And it allows you to track your progress as you go along.


Wednesday, June 14, 2017

Getting "No exception handler was found for an application exception" when accessing BPM Worklist

Problem

The BPM Worklistapp used to come up, now it's not responding anymore. This is the URL we are accessing:
http://soahost1:8001/integration/worklistapp
This error keeps repeating indefinitely in soa_server1-diagnostic.log when trying to access the URL above:
[2017-03-09T04:22:28.948+00:00] [soa_server1] [ERROR] [ADFC-50018] [oracle.adfinternal.controller.application.AdfcExceptionHandler] [tid: [ACTIVE].ExecuteThread: '20' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 15cfa3f60e080317:21a68021:15ab1488662:-8000-0000000000006504,0] [APP: worklistapp] ADFc: No exception handler was found for an application exception.[[
com.sun.faces.mgbean.ManagedBeanCreationException: An error occurred performing resource injection on managed bean applicationPreferences
at com.sun.faces.mgbean.BeanBuilder.invokePostConstruct(BeanBuilder.java:229)
at com.sun.faces.mgbean.BeanBuilder.build(BeanBuilder.java:110)
at com.sun.faces.mgbean.BeanManager.createAndPush(BeanManager.java:406)

[2017-03-09T13:24:24.418+00:00] [soa_server1] [ERROR] [] [org.springframework.web.context.ContextLoader] [tid: [ACTIVE].ExecuteThread: '65' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: weblogic] [ecid: 40fc29145d7eb718:6df988fe:15ab33350ce:-8000-000000000000f3d3,0] [APP: soa-infra] Context initialization failed[[
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'bpmUserAuthenticationService' defined in URL [zip:/u01/app/oracle/middleware/Oracle_SOA1/soa/modules/oracle.bpm.runtime_11.1.1/oracle.bpm.bpm-services.implementation.jar!/oracle/bpm/services/config/spring-applicationContext.xml]: Cannot resolve reference to bean 'bpmUserAuthenticationServiceImplementation' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'bpmUserAuthenticationServiceImplementation' defined in URL [zip:/u01/app/oracle/middleware/Oracle_SOA1/soa/modules/oracle.bpm.runtime_11.1.1/oracle.bpm.bpm-services.implementation.jar!/oracle/bpm/services/config/spring-applicationContext.xml]: Initialization of bean failed; nested exception is org.springframework.beans.TypeMismatchException: Failed to convert property value of type [com.sun.proxy.$Proxy294 implementing oracle.bpel.services.workflow.verification.IVerificationService,org.springframework.aop.SpringProxy,org.springframework.aop.framework.Advised] to required type [oracle.bpel.services.workflow.verification.IVerificationService] for property 'verificationService'; nested exception is java.lang.IllegalArgumentException: Cannot convert value of type [com.sun.proxy.$Proxy294 implementing oracle.bpel.services.workflow.verification.IVerificationService,org.springframework.aop.SpringProxy,org.springframework.aop.framework.Advised] to required type [oracle.bpel.services.workflow.verification.IVerificationService] for property 'verificationService': no matching editors or conversion strategy found
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:104)

Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'bpmUserAuthenticationServiceImplementation' defined in URL [zip:/u01/app/oracle/middleware/Oracle_SOA1/soa/modules/oracle.bpm.runtime_11.1.1/oracle.bpm.bpm-services.implementation.jar!/oracle/bpm/services/config/spring-applicationContext.xml]: Initialization of bean failed; nested exception is org.springframework.beans.TypeMismatchException: Failed to convert property value of type [com.sun.proxy.$Proxy294 implementing oracle.bpel.services.workflow.verification.IVerificationService,org.springframework.aop.SpringProxy,org.springframework.aop.framework.Advised] to required type [oracle.bpel.services.workflow.verification.IVerificationService] for property 'verificationService'; nested exception is java.lang.IllegalArgumentException: Cannot convert value of type [com.sun.proxy.$Proxy294 implementing oracle.bpel.services.workflow.verification.IVerificationService,org.springframework.aop.SpringProxy,org.springframework.aop.framework.Advised] to required type [oracle.bpel.services.workflow.verification.IVerificationService] for property 'verificationService': no matching editors or conversion strategy found
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:480)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409)

Caused by: org.springframework.beans.TypeMismatchException: Failed to convert property value of type [com.sun.proxy.$Proxy294 implementing oracle.bpel.services.workflow.verificat
 Doing a wget showed the following:
oracle@soahost1:/tmp> wget http://soahost1:8001/integration/worklistapp
 --2017-03-09 12:52:13-- http://soahost1:8001/integration/worklistapp
 Resolving soahost1 (soahost1)... 192.168.0.10
 Connecting to soahost1 (soahost1)|192.168.0.10|:8001... connected.
 HTTP request sent, awaiting response... 302 Moved Temporarily
 Location: http://soahost1:8001/integration/worklistapp/ [following]

 --2017-03-09 12:52:13-- http://soahost1:8001/integration/worklistapp/
 Reusing existing connection to soahost1:8001.
 HTTP request sent, awaiting response... 302 Moved Temporarily
 Location: http://soahost1:8001/integration/worklistapp/faces/login.jspx [following]

 --2017-03-09 12:52:13-- http://soahost1:8001/integration/worklistapp/faces/login.jspx
 Reusing existing connection to soahost1:8001.
 HTTP request sent, awaiting response... 302 Moved Temporarily
 Location: http://soahost1:8001/integration/worklistapp/faces/login.jspx?_adf.ctrl-state=118tn4s5c5_4 [following]

 --2017-03-09 12:52:13-- http://soahost1:8001/integration/worklistapp/faces/login.jspx?_adf.ctrl-state=118tn4s5c5_4
 Reusing existing connection to soahost1:8001.
 HTTP request sent, awaiting response... 302 Moved Temporarily
 Location: http://soahost1:8001/integration/worklistapp/faces/helppages/errorPage.jspx [following]

 --2017-03-09 12:52:13-- http://soahost1:8001/integration/worklistapp/faces/helppages/errorPage.jspx
 Reusing existing connection to soahost1:8001.
 HTTP request sent, awaiting response... 302 Moved Temporarily
 Location: http://soahost1:8001/integration/worklistapp/faces/login.jspx [following]

 --2017-03-09 12:52:13-- http://soahost1:8001/integration/worklistapp/faces/login.jspx
 Reusing existing connection to soahost1:8001.
 HTTP request sent, awaiting response... 302 Moved Temporarily
 Location: http://soahost1:8001/integration/worklistapp/faces/login.jspx?_adf.ctrl-state=118tn4s5c5_8 [following]

 --2017-03-09 12:52:13-- http://soahost1:8001/integration/worklistapp/faces/login.jspx?_adf.ctrl-state=118tn4s5c5_8
 Reusing existing connection to soahost1:8001.
 HTTP request sent, awaiting response... 302 Moved Temporarily
 Location: http://soahost1:8001/integration/worklistapp/faces/helppages/errorPage.jspx [following]

 --2017-03-09 12:52:13-- http://soahost1:8001/integration/worklistapp/faces/helppages/errorPage.jspx
 Reusing existing connection to soahost1:8001.
 HTTP request sent, awaiting response... 302 Moved Temporarily
 Location: http://soahost1:8001/integration/worklistapp/faces/login.jspx [following]

 --2017-03-09 12:52:13-- http://soahost1:8001/integration/worklistapp/faces/login.jspx
 Reusing existing connection to soahost1:8001.
 HTTP request sent, awaiting response... 302 Moved Temporarily
 Location: http://soahost1:8001/integration/worklistapp/faces/login.jspx?_adf.ctrl-state=118tn4s5c5_12 [following]
We DISABLED the following setting on both "soa_server1" and "soa_server2" managed servers:
SSL Listen Port Enabled.
You will find that this is the SAME EXACT error described in this Oracle documentation troubleshooting guide in section B.2.3:
http://docs.oracle.com/cd/E25178_01/admin.1111/e10226/appx_trouble.htm
We increased the FacadeFinderBean "Transaction Timeout" on the WebLogic Console from 600 to 10000, but this did not help.


Solution

1. Log in to the EM Console

2. Expand WebLogic Domain

3. Right-click on soadomain

4. Navigate to Security > Credentials

5. Expand SOA

6. Edit the entry and modify the password to the keystore password


 
Applicable Versions
  • Oracle SOA Suite 11g (11.1.1.9.0)

 



Monday, June 12, 2017

Example using orapki

Here is a quick example demonstrating how to list the contents of the default Oracle Wallet in Oracle WebTier 12c using orapki.

Keep in mind the following:
  • The default wallet is auto-login enabled, so it is not necessary to use the -pwd option to include the password.
  • orapki requires Java, so make sure to set your Java environment appropriately.
  • In some products, the default password for the default wallet is "welcome".

-----

oracle@soahost1:/u01> export MW_HOME=/u01/app/oracle/products/fmw1221

oracle@soahost1:/u01> export JAVA_HOME=/u01/jdk1.8.0_102

oracle@soahost1:/u01> export PATH=$JAVA_HOME/bin:$PATH

oracle@soahost1:/u01> $MW_HOME/oracle_common/bin/orapki wallet display -wallet $MW_HOME/user_projects/domains/ohs_domain/config/fmwconfig/components/OHS/instances/ohs1/keystores/default -complete

Oracle PKI Tool : Version 12.2.1.1.0
Copyright (c) 2004, 2016, Oracle and/or its affiliates. All rights reserved.

Found Auto Login Only (ALO) wallet.
Option -pwd is not recognized and ignored.
Requested Certificates:
User Certificates:
Subject:        CN=localhost,OU=FOR TESTING ONLY,O=FOR TESTING ONLY
Issuer:         CN=localhost,OU=FOR TESTING ONLY,O=FOR TESTING ONLY
Serial Number:  00
Key Length      1024
MD5 digest:     80:81:B2:49:CC:1E:1A:3C:6B:C6:23:C5:DF:BF:C3:32
SHA digest:     80:3E:47:A3:6D:8C:78:D0:00:99:48:FA:C9:1D:E2:2F:F8:FE:B0:D1

Trusted Certificates:
Subject:        CN=localhost,OU=FOR TESTING ONLY,O=FOR TESTING ONLY
Issuer:         CN=localhost,OU=FOR TESTING ONLY,O=FOR TESTING ONLY
Serial Number:  00
Key Length      1024
MD5 digest:     80:81:B2:49:CC:1E:1A:3C:6B:C6:23:C5:DF:BF:C3:32
SHA digest:     80:3E:47:A3:6D:8C:78:D0:00:99:48:FA:C9:1D:E2:2F:F8:FE:B0:D1


References





Thursday, June 1, 2017

Getting OAM-02073 when WebGate agent communicates to Oracle Access Server 11.1.2.3

Problem

In this particular scenario, you are trying to single sign-on an OHS server against OAM 11g. The products currently installed are Oracle Access Manager 11.1.2.3.0 and Oracle HTTP Server 11.1.1.9 with Oracle WebGate 11.1.2.1.0 deployed to it.

When we start up OHS, this error keeps repeating every 20 seconds in ohs1.log:
[2017-02-28T22:00:51.0079+00:00] [OHS] [ERROR:32] [OHS-9999] [core.c] [client_id: ::1] [host_id: toadsprod555555.com] [host_addr: 192.168.1.12] [tid: 140187036239616] [user: oracle] [ecid: 000Fzzx0g00009Ya05IPtKHC04Fw00000a] [rid: 0] [VirtualHost: main] The Access Server has returned a fatal error with no detailed information.
This also shows up in oblog.log:
2017/02/28@21:59:51.00782 39099 39114 ACCESS_SDK ERROR 0x0000182D /ade/aime_ngamac_497961/ngamac/src/palantir/access_api/src/obresource_request.cpp:299 "The Access Server has returned a fatal error with no detailed information." raw_code^302  
2017/02/28@21:59:51.00789 39099 39114 ACCESS_GATE ERROR 0x0000151A /ade/aime_ngamac_497961/ngamac/src/palantir/webgate2/src/isprotected.cpp:296 "Failure to connect to Access Server" HTTPStatus^500 Error^The Access Server has returned a fatal error with no detailed information.  
2017/02/28@21:59:51.00793 39099 39114 WEB ERROR 0x0000151F /ade/aime_ngamac_497961/ngamac/src/palantir/commonlib/src/apache2_req_info.cpp:226 "WebGate Error Report" Message^The Access Server has returned a fatal error with no detailed information. ReqReq^HEAD /index.html HTTP/1.1 ReqProto^HTTP/1.1 ReqHost^toadsprod555555.com ReqStatLine^ ReqStatus^200 ReqRawUri^/index.html ReqUri^/index.html ReqFilename^/u01/app/oracle/middleware/Oracle_WT1/instances/ohs1/config/OHS/ohs1/htdocs/index.html ReqPath^ ReqArgs^ 
This is the error that appears in oam_server1.out managed server log:
<Feb 28, 2017 9:59:11 PM GMT> <Warning> <oracle.oam.controller> <OAM-02073> <Error while checking if the resource is protected or not. 
<Feb 28, 2017 9:59:11 PM GMT> <Error> <oracle.oam.proxy.oam> <OAM-04029> <Error in generating AMEvent. Details Event Response status is STATUS_FAIL for GET_AUTHN_SCHEME event. Error code OAM-02073 status fail isExcluded false 
<Feb 28, 2017 9:59:11 PM GMT> <Error> <oracle.oam.proxy.oam> <OAM-04020> <Exception encountered while processing the request message:
oracle.security.am.proxy.oam.requesthandler.OAMProxyException: Event Response status is STATUS_FAIL for GET_AUTHN_SCHEME event. Error code OAM-02073 status fail isExcluded false
at oracle.security.am.proxy.oam.requesthandler.NGProvider.checkProtected(NGProvider.java:4859)
at oracle.security.am.proxy.oam.requesthandler.NGProvider.getIsRescProtectedResponse(NGProvider.java:1481)
at oracle.security.am.proxy.oam.requesthandler.NGProvider.getResponse(NGProvider.java:385)
at oracle.security.am.proxy.oam.requesthandler.RequestHandler.handleRequest(RequestHandler.java:366)
at oracle.security.am.proxy.oam.requesthandler.RequestHandler.handleMessage(RequestHandler.java:170)
at oracle.security.am.proxy.oam.requesthandler.ControllerMessageBean.getResponseMessage(ControllerMessageBean.java:122)
at oracle.security.am.proxy.oam.requesthandler.ControllerMessageBean_eo7ylc_MDOImpl.__WL_invoke(Unknown Source)
at weblogic.ejb.container.internal.MDOMethodInvoker.invoke(MDOMethodInvoker.java:35)
at oracle.security.am.proxy.oam.requesthandler.ControllerMessageBean_eo7ylc_MDOImpl.getResponseMessage(Unknown Source)
at oracle.security.am.proxy.oam.mina.ObClientToProxyHandler.messageReceived(ObClientToProxyHandler.java:231)
at org.apache.mina.common.DefaultIoFilterChain$TailFilter.messageReceived(DefaultIoFilterChain.java:743)
at org.apache.mina.common.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:405)
at org.apache.mina.common.DefaultIoFilterChain.access$1200(DefaultIoFilterChain.java:40)
at org.apache.mina.common.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:823)
at org.apache.mina.common.IoFilterEvent.fire(IoFilterEvent.java:54)
at org.apache.mina.common.IoEvent.run(IoEvent.java:62)
at oracle.security.am.proxy.oam.mina.CommonJWorkImpl.run(CommonJWorkImpl.java:41)
at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:184)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:263)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
>
Solution

1. Check out these Oracle Support docs to see if it solves your problem:
  • Doc ID 1678095.1
  • Doc ID 1556223.1
  • Doc ID 1492637.1
  • Doc ID 1662513.1
2. If none of the solutions above works for you, then check out your Host Identifier configuration. You may have incorrectly deleted the row as shown in this screenshot:


Applicable Versions
  • Oracle Access Manager 11.1.2.3.0
  • Oracle HTTP Server 11.1.1.9
  • Oracle WebGate 11.1.2.1.0

 

Tuesday, May 30, 2017

Raastech @ BGOUG

Will you be attending BGOUG this June 2-4 in Pravets, Bulgaria? If so, then check out some of the presentations we'll be giving!



Title
Oracle Compute Cloud vs. Amazon Web Services EC2 – A Hands-On Showdown
Description
We walk through the end-to-end process of provisioning an Oracle Compute Cloud instance from scratch - adding storage, defining firewall rules, creating a private key, and connecting through VNC. Then we do the same thing with Amazon Web Services (AWS) EC2. Speed of provisioning is one of the benefits of the cloud, so let's embark on this live walkthrough together, see how easy it is to get up and running, and compare the IaaS offering from Oracle and Amazon.
Date
Sat, June 3, 2017
Time
12:30pm - 1:30pm
Presenter



Title
Developing Web Services from Scratch – For DBAs and Developers
Description
WSDL. XSD. SOAP. Namespaces. Port types. If these terms make little sense, this presentation is for you. By the end of this presentation, you will completely understand how to dissect and decipher a web service interface, understand key design patterns, and learn how to develop top-down and bottom-up web services in technologies such as Java and Oracle SOA Suite. Want to know how to expose a PL/SQL package as a web service? This technical presentation, one of my most popular, is intended for DBAs and database developers who want to know what it takes to design and create web services.
Date
Sat, June 3, 2017
Time
4:00pm - 5:00pm
Presenter





See you there!