Arjan's Oracle knowledge

signing self signed certificates

2011-08-17T14:25:00.001+02:00

sites:

http://www.g-loaded.eu/2005/11/10/be-your-own-ca/
http://www.eclectica.ca/howto/ssl-cert-howto.php

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

ubunut tips for myself

2011-05-26T13:38:00.002+02:00

disable firewall:

ufw disable

log on to another linux server it takes a very long time before the password question:

change /etc/ssh/ssh_config

uncomment:

GSSAPIAuthentication no

X forwarding

ssh -XY user@machine

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Purge data ESB/WSM

2011-03-31T12:33:00.001+02:00

How to purge ESB instance data? [ID 453357.1]
How To Delete / Purge Non-Operational Data from the OWSM Schema / Database ? [ID 815974.1]

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Query size rman backups

2011-03-28T13:27:00.000+02:00

set linesize 200 heading off
set heading on pagesize 200

column status format a10
column COMMAND_ID for a12
column time_taken_display format a10;
column input_bytes_display format a12;
column output_bytes_display format a12;
column output_bytes_per_sec_display format a10;
column ses_key format 9999999
column ses_recid format 9999999
column device_type format a10
column OutBytesPerSec for a13

SELECT b.session_key ses_key,
b.session_recid ses_recid,
b.session_stamp,
b.command_id,
b.input_type,
b.status,
to_char(b.start_time,'DD-MM-YY HH24:MI') "Start Time",
b.time_taken_display,
b.output_device_type device_type,
b.input_bytes_display,
b.output_bytes_display,
b.output_bytes_per_sec_display "OutBytesPerSec"
FROM v$rman_backup_job_details b
WHERE b.start_time > (SYSDATE - &)
ORDER BY b.start_time desc;

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Oracle ESB: No WebService Provider is registered at this URL

2011-03-16T15:56:00.003+01:00

Error when webservice is clicked in esb control

No WebService Provider is registered at this URL

During startup ESB:

java.sql.SQLException: ORA-24067: exceeded maximum number of subscribers for queue
ORAESB.ESB_CONTROL

solution:

CREATE OR REPLACE PROCEDURE create_queue (qname VARCHAR2)
AS
qtablename VARCHAR2(110) := qname;

BEGIN

BEGIN
dbms_aqadm.stop_queue (queue_name => qname);
EXCEPTION
WHEN OTHERS THEN
null;
END;

BEGIN
dbms_aqadm.drop_queue (queue_name => qname);
EXCEPTION
WHEN OTHERS THEN
null;
END;

BEGIN
dbms_aqadm.drop_queue_table (Queue_table => qtablename);
EXCEPTION
WHEN OTHERS THEN
null;
END;

dbms_aqadm.create_queue_table(Queue_table => qtablename,
Queue_payload_type => 'SYS.AQ$_JMS_TEXT_MESSAGE',
multiple_consumers => true,
compatible => '8.1');
dbms_aqadm.create_queue (Queue_name => qname,
Queue_table => qtablename);
dbms_aqadm.start_queue(qname);
END;
/

BEGIN
create_queue('ESB_CONTROL');
END;
/

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Deployment BPEL process fails with revision error

2011-02-09T07:57:00.004+01:00

During automatic ant deployment this error is shown:


Embedded error: The following error occurred while executing this line:
/oracle/opleveringen/obm/1.1.0.0/code/opm-integration/scripts/ant/bpel/common-build.xml:82: A problem occured while connecting to server "soatier2.test.ta-twd.rotterdam.nl" using port "80": bpel_CancelBasket_1.0.0-SNAPSHOT.jar failed to deploy. Exception message is:  Error deploying BPEL suitcase.
An error occurred while attempting to deploy the BPEL suitcase file "/appl/oracle/soa_cl_10.1.3/bpel/domains/OnlineBetaalModule/tmp/bpel_10725323.tmp"; the exception reported is: Process bpel://localhost/OnlineBetaalModule/CancelBasket~1.0.0-SNAPSHOT/ is being re-deployed to a Production Server with same revision number.Please modify the revision for the process.

In the BPELAdmin tab server the field productionServer is true, when this is changed to false and the soa container is restarted the deployment succeeds. After the deployment change it to true again and restart again.
Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

All contexts in Oracle Application server with opmnctl

2011-01-05T13:53:00.000+01:00

opmnctl status -app -l | awk -F"|" '{ print $7 }'

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

JMX monitoring OC4J JVM

2010-12-09T09:25:00.002+01:00

To monitor the JVM with jconsole or an external profiler the opmn.xml settings of the container should be changed:

This properties must be added:

-Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=9900 -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false"

Restart the container and now you can connect on the url:

service:jmx:rmi:///jndi/rmi://[HOSTNAME]:9900/jmxrmi

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Multiple java processes when using webgate

2010-11-26T07:21:00.002+01:00

If you use an webgate version which needs the parameter you will see 50 processes or more on linux for the JVM. When you change the webgate to a version which uses NTPD this problem is solved.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Invalid Access SDK Path. -Djava.library.path must point to {SDK_HOME}/oblix/lib.

2010-11-26T07:15:00.002+01:00

There are a couple of reasons for this error. You can try the following things to solve it.

- configureAccessGate (check the file ../AccessServerSDK/oblix/lib/ObAccessClient.xml)

- cp AccessServerSDK/oblix/lib/jobaccess.jar to $ORACLE_HOME/j2ee/home/lib/ext

- in the LD_LIBRARY_PATH in opmn.xml file, please remove the trailing slash "/" from the patch "/AccessServerSDK/oblix/lib/

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Determine OAS (10.1.3) version

2010-11-03T13:43:00.002+01:00


$ORACLE_HOME/OPatch/opatch lsinventory -detail

Get version Oracle Containers for J2EE


cd $ORACLE_HOME/j2ee/home
java -jar oc4j.jar -version

Output:
Oracle Containers for J2EE 10g (10.1.3.5.0) (build 090727.2000.36696)

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

SOA BPEL (10.1.3.x) Identity service: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: Connection timed out

2010-09-15T11:21:00.001+02:00

The reason for this error:
"java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: Connection timed out:"
was that an proxy server was configured on the oc4j_soa container in opmn.xml

BPEL Console gave this error:
The following exception occured while processing this request:
Io exception: The Network Adapter could not establish the connection

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Delete of bpel domain on SOA 10.1.3.4 is not complete

2010-09-01T07:47:00.002+02:00

When a BPEL domain is delete from the BPELAdmin there are still records left in de dehydration database. These entries can be deleted:

Logon on the dehydration store database as ORABPEL

Check which domains are active:
select domain_ref from domain;

Delete all other domains:

delete suitcase_bin where domain_ref not in (select domain_ref from domain);
delete audit_details where domain_ref not in (select domain_ref from domain);
delete audit_trail where domain_ref not in (select domain_ref from domain);
delete cube_instance where domain_ref not in (select domain_ref from domain);
delete cube_scope where domain_ref not in (select domain_ref from domain);
delete dlv_message where domain_ref not in (select domain_ref from domain);
delete dlv_subscription where domain_ref not in (select domain_ref from domain);
delete document_ci_ref where domain_ref not in (select domain_ref from domain);
delete document_dlv_msg_ref where domain_ref not in (select domain_ref from domain);
delete domain_properties where domain_ref not in (select domain_ref from domain);
delete invoke_message where domain_ref not in (select domain_ref from domain);
delete process where domain_ref not in (select domain_ref from domain);
delete process_default where domain_ref not in (select domain_ref from domain);
delete process_descriptor where domain_ref not in (select domain_ref from domain);
delete process_log where domain_ref not in (select domain_ref from domain);
delete wi_fault where domain_ref not in (select domain_ref from domain);
delete work_item where domain_ref not in (select domain_ref from domain);
delete xml_document where domain_ref not in (select domain_ref from domain);
delete wftask where domainid='[NOT EXISTING DOMAINS]';
delete wftaskhistory where domainid='[NOT EXISTING DOMAINS]';
delete wftaskmetadata where domainid='[NOT EXISTING DOMAINS]';
delete wftask where domainid='[NOT EXISTING DOMAINS]';

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Oracle OMS agent: Rediscover targets

2010-07-21T13:05:00.001+02:00

In the AGENT_HOME execute agentca -d

$ORACLE_HOME/bin/agentca -d

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

A problem occured while connecting to server "hostname" using port "80": java.security.AccessControlException: access denied (com.collaxa.security.Dom

2010-07-15T10:08:00.003+02:00

In our environment the appications hw_services/orabpel and deploy_service in the oc4j_soa container are integrated with the OID. After change the password of oc4jadmin we got problems with the automatic deployment of BPEL Processes. See the stack trace below.

We found out that the following line: was missing in the $ORACLE_HOME/j2ee/oc4j_soa/application_deployments/deploy_service/orion-application.xml.


BUILD FAILED
/oracle/opleveringen/DDSAddressAdapter/1.2/1.1/DeploymentMijnLoket/build.xml:170: The following error occurred while executing this line:
/oracle/opleveringen/DDSAddressAdapter/1.2/1.1/DeploymentMijnLoket/build.xml:127: The following error occurred while executing this line:
/oracle/opleveringen/DDSAddressAdapter/1.2/1.1/DeploymentMijnLoket/build.xml:102: The following error occurred while executing this line:
/oracle/opleveringen/DDSAddressAdapter/1.2/1.1/JDeveloper/DDSAdapter/DDSAddressService/bpel/build.xml:89: A problem occured while connecting to server "hostname" using port "80": java.security.AccessControlException: access denied (com.collaxa.security.DomainPermission XXXX read)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
at java.security.AccessController.checkPermission(AccessController.java:427)
at com.collaxa.security.OC4JSecurityService.checkAccess(OC4JSecurityService.java:16)
at com.collaxa.security.SecurityService.checkDomainAccess(SecurityService.java:26)
at com.collaxa.cube.fe.util.ServletUtils.getLocatorWithoutUrlRewrite(ServletUtils.java:77)
at _deployHttpClientProcess._jspService(_deployHttpClientProcess.java:332)
at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:59)
at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:473)
at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:594)
at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:518)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
at oracle.security.jazn.oc4j.JAZNFilter$1.run(JAZNFilter.java:400)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:414)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:644)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:391)
at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:908)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:458)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
at oracle.oc4j.network.ServerSocketAcceptHandler.procClientSocket(ServerSocketAcceptHandler.java:234)
at oracle.oc4j.network.ServerSocketAcceptHandler.access$700(ServerSocketAcceptHandler.java:29)
at oracle.oc4j.network.ServerSocketAcceptHandler$AcceptHandlerHorse.run(ServerSocketAcceptHandler.java:879)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
at java.lang.Thread.run(Thread.java:595)

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Error during deployment war: Incompatible argument to function

2010-07-08T13:13:00.002+02:00

After we changed the JDK of the OC4J container from 1.5 to 1.6 we had problems deploying applications.


BUILD FAILED
build.xml:115: Deploy error: Operation failed with error:
(class: xx/xx/xxx , method: YyyyyY signature: (Ljava/util/Map;)RRR/rrr/RRR;) Incompatible argument to function

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Apache Address already in use: make_sock: could not bind to port xxxx

2010-06-10T08:38:00.003+02:00

Error in the Apache error.log

Apache Address already in use: make_sock: could not bind to port xxxx

Find the process which is using the port:
netstat -tulpn| grep :xxxxx

Kill the process:

kill -9 httpd

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

ESB Console: no systems. Error in log.xml: WSDL parsing failed : WSDL Parsing Failed: Connection timed out

2010-05-05T12:25:00.003+02:00

In the metalink note: 467440.1 a possible solution is provided but in our case this was not working. We had a big application which was using Oracle BPEL en Oracle ESB. In the new release the Oracle ESB was replaced by another ESB (mule) but the old ESB systems were still deployed in the Oracle ESB. The ESB Console was not able to retrieve the ESB systems anymore, so everything was empty in the screen. The only error in log.xml in $ORACLE_HOME/j2ee/oc4j_soa/log/oc4j/.../log.xml was


WSDL parsing failed :WSDL Parsing Failed: Connection timed out

We did an undeploy of the esb system with ant and this solved the problem.

This is how we did the undeployment:

build.xml:


<?xml version="1.0" encoding="windows-1252" ?>
<project name="deploy" default="undeploy-esb">

  <property file="build.properties"/>

  <import file="../etc/ESBMetadataMigrationTaskdefs.xml"/>
  <target name="undeploy-esb">

      <undeployESBEntities
            esbMetadataServerHostname="[HOSTNAME]"
            esbMetadataServerPort="[PORT]"
            userName="oc4jadmin"
            password="[PASSWORD]">
         <system guid="[ESBSYSTEM GUID]"/>
      </undeployESBEntities>

  </target>

</project>

[ESBSYSTEM GUID] can be found in de dehydration store of the SOA suite:

select name, guid from oraesb.wf_systems;

You need some extra files to make ant work, these files can be found in $ORACLE_HOME/integration/esb/deployment there is an zip file: documentation.zip. In this zip file the files you need are there.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Oracle Application Server 10.1.2.3: oidldapd process, high load on server

2010-04-21T20:07:00.004+02:00

On the production environment of the customer there was a problem that the servers sometimes did not respond on anything anymore. The oidldapd process was consuming 100% CPU and the load on the servers was very high (100+). The only thing we could do was an hard reboot of the server.

We solved this issue bij tuning the OID. We replaced the default index by a bitmap index:


To recreate the ei_attrstore index perform the following steps: 

a.  Use sqlplus to connect to the OID database as user "ods" or connect as system and set the schema to ods, e.g. 

$ sqlplus system/ 
SQL> alter session set current_schema=ods; 

b.  Drop the existing ei_attrstore index: 

SQL> drop index ei_attrstore; 

c.  Recreate the ei_attrstore index: 

SQL> create bitmap index ei_attrstore on ds_attrstore(entryid, attrname) tablespace olts_attrstore nologging compute statistics; 

SQL> alter index ei_attrstore noparallel;

And we changed the configset0


$ORACLE_HOME/bin/ldapmodify -h [SERVERNAME] -p [PORT] -D cn=orcladmin -w [PASSWORD] -v <<EOF
dn: cn=configset0,cn=osdldapd,cn=subconfigsubentry
changetype: modify
replace: orclmaxcc
orclmaxcc: 10
-
replace: orclserverproces
orclserverprocs: 2
EOF

After these changes the oidldapd did not have the strange behavior anymore.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Oracle Application Server 10.1.3 / JDBC connections based on tnsnames.ora

2010-04-20T13:53:00.005+02:00

The customer wants to use DataGuard as backend for the applications that are hosted on the Oracle Application Server 10.1.3. To implement this solution it is necessary to configure the JDBC connections with the tnsnames.ora, because with this solution it is possible to put more databases (on different servers) in one JDBC connection.

Oracle has an java program to check if this connection is working:


// -- begin : cut here : ThinTnsnames.java -- cut there
import java.sql.*;
import oracle.jdbc.pool.*;

public class ThinTnsnames {
  // private static OracleConnection connection = null;
  static String sql = null;

  public static void main(String[] args) {
    String entry_name = args [0];
    String userId = args [1];
    String password = args [2];
    test (entry_name, userId, password);
  }

  public static void test (String entry_name, String userId, String password) {
    Connection pconnection = null;
    try {
      String l_url = "jdbc:oracle:thin:@" + entry_name;
      System.out.println( " Connection string = " + l_url );

      OracleDataSource ods = new OracleDataSource();
      ods.setUser(userId);
      ods.setPassword(password);
      ods.setURL(l_url);
      pconnection = ods.getConnection ();
      version (pconnection );
    }
    catch(SQLException e) {
      e.printStackTrace();
    }
    finally {
      try {
        if (pconnection != null )pconnection .close();
      }
      catch(Exception e) {
        e.printStackTrace();
      }
    }
  }

  public static void version (Connection pconnection) {
    try {
      DatabaseMetaData dmd = pconnection.getMetaData();
      System.out.println("DriverVersion: ["+dmd.getDriverVersion()+"]");
      System.out.println("DriverMajorVersion: ["+dmd.getDriverMajorVersion()+"]");
      System.out.println("DriverMinorVersion: ["+dmd.getDriverMinorVersion()+"]");
      System.out.println("DriverName: ["+dmd.getDriverName()+"]");
      System.out.println("URL: ["+dmd.getURL()+"]");
      System.out.println("UserName: ["+dmd.getUserName()+"]");
      System.out.println(dmd.getDatabaseProductName() );
      System.out.println(dmd.getDatabaseProductVersion() );

      String ver;
      ver = System.getProperty("java.version");
      System.out.println("The JDK version is " + ver);
    }
    catch(SQLException e) {
      e.printStackTrace();
    }

  }
}

// --end : cut here : ThinTnsnames.java -- cut there

compile the program:
javac -classpath ojdbc14.jar:. ThinTnsnames.java

Execute the program:
java -Doracle.net.tns_admin=$ORACLE_HOME/network/admin -classpath .:ojdbc14.jar ThinTnsnames [DATABASE] [USER] [PASSWORD]

Output:


 Connection string = jdbc:oracle:thin:@[DATABASE]
Exception in thread "main" java.lang.ArrayIndexOutOfBoundsException: 221
        at oracle.net.nl.NVTokens.parseTokens(Unknown Source)
        at oracle.net.nl.NVFactory.createNVPair(Unknown Source)
        at oracle.net.nl.NLParamParser.addNLPListElement(Unknown Source)
        at oracle.net.nl.NLParamParser.initializeNlpa(Unknown Source)
        at oracle.net.nl.NLParamParser.(Unknown Source)
        at oracle.net.resolver.TNSNamesNamingAdapter.loadFile(Unknown Source)
        at oracle.net.resolver.TNSNamesNamingAdapter.checkAndReload(Unknown Source)
        at oracle.net.resolver.TNSNamesNamingAdapter.resolve(Unknown Source)
        at oracle.net.resolver.NameResolver.resolveName(Unknown Source)
        at oracle.net.resolver.AddrResolution.resolveAndExecute(Unknown Source)
        at oracle.net.ns.NSProtocol.establishConnection(Unknown Source)
        at oracle.net.ns.NSProtocol.connect(Unknown Source)
        at oracle.jdbc.driver.T4CConnection.connect(T4CConnection.java:858)
        at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:268)
        at oracle.jdbc.driver.PhysicalConnection.(PhysicalConnection.java:441)
        at oracle.jdbc.driver.T4CConnection.(T4CConnection.java:165)
        at oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension.java:35)
        at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:801)
        at oracle.jdbc.pool.OracleDataSource.getPhysicalConnection(OracleDataSource.java:297)
        at oracle.jdbc.pool.OracleDataSource.getConnection(OracleDataSource.java:221)
        at oracle.jdbc.pool.OracleDataSource.getConnection(OracleDataSource.java:165)
        at ThinTnsnames.test(ThinTnsnames.java:26)
        at ThinTnsnames.main(ThinTnsnames.java:13)

I could not find the problem for this issue. But after logging an SR on metalink the problem was the tnsnames.ora file.

We had one database entry in the tnsnames.ora:

[DATABASE] =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = [SERVERNAME] l)(PORT = 1521)))
(CONNECT_DATA = (SERVICE_NAME = [DATABASE] )(SERVER = DEDICATED)))

But this entry was not correct.

We changed the tnsnames.ora:

[DATABASE] =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = [SERVERNAME] )(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = [DATABASE])
)
)

And now execute the program:

java -Doracle.net.tns_admin=$ORACLE_HOME/network/admin -classpath .:ojdbc14.jar ThinTnsnames [DATABASE] [USER] [PASSWORD]

Connection string = jdbc:oracle:thin:@[DATABASE]
DriverVersion: [10.2.0.4.0]
DriverMajorVersion: [10]
DriverMinorVersion: [2]
DriverName: [Oracle JDBC driver]
URL: [jdbc:oracle:thin:@[database]]
UserName: [USER]
Oracle
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
The JDK version is 1.5.0_06

If this program is working it is also possible to make a JDBC connection in enterprise managers like this:
jdbc:oracle:thin:@[DATABASE]

In the start parameters of the OC4J container there should be an extra option:
-Doracle.net.tns_admin=[TNSNAMES LOCATION]

Note:
It is also possible to configure the JDBC connection like an tnsnames.ora entry in the enterprise manager:

jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(failover=on)(ADDRESS=(PROTOCOL=TCP)(HOST=[SERVERNAME1])(PORT=1521))(address=(protocol=tcp)(host=[SERVERNAME2])(port=1521)))(CONNECT_DATA=(SERVICE_NAME=[DATABASE])))

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Upgrade Default JDK to new version Oracle Application Server 10.1.3

2010-03-26T12:46:00.002+01:00

Metalink note: 396096.1]

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

upgrade 10.1.2.x to 10.1.2.3: Oracle Internet Directory Patch Configuration Assistant fails

2010-03-10T09:55:00.002+01:00

When I upgraded the infra 10.1.2.x to 10.1.2.3 I got an failed on Oracle Internet Directory Patch Configuration Assistant. I found out that in the $ORACLE_HOME/ldap/log/patchca.log there was an error:


Wed Mar 10 09:51:41 CET 2010OID PatchCA started..
Check if OID is configured.
oracle.sysman.assistants.util.NetAPIException: TNS-04404: no error
  caused by: oracle.net.config.ConfigException: TNS-04414: File error
  caused by: TNS-04612: Null RHS for "oaiinfra"
        at oracle.sysman.assistants.util.NetworkUtils.getNetServiceNameValue(NetworkUtils.java:2241)
        at oracle.ldap.oidinstall.OIDPatchCA.run(OIDPatchCA.java:255)
        at oracle.ldap.oidinstall.OIDPatchCA.main(OIDPatchCA.java:443)

After some investigation I found out that the tnsnames.ora was not correct. We changed this an now everything is working.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Make Access Server debug log (oblog.log) more readable

2010-02-26T07:06:00.002+01:00

After CPU patch OC4J containers will not start anymore

2010-02-04T14:37:00.002+01:00

We applied a CPU patch an Oracle Infrastructure 10.1.2.3 and after that the OC4J containers did not start anymore.

In de $ORACLE_HOME/ldap/log/oidldapd01.log the following error:


Bind failed on communication endpoint (13)

With an opmnctl status the OID seems to be up.

When this problem occurs you need to execute root.sh.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

The requested resource could not be mapped to a policy domain in the Policy database. Check if the corresponding directory service is up

2010-02-03T08:17:00.002+01:00

In the browser we got an 401 Unauthorized error when we tried to start an application behind Oracle Access manager.

In the log.xml in $ORACLE_HOME/j2ee/[OC4J_CONTAINER]/log/[OC4J_CONTAINER/oc4j/ the error:


[CoreIDLoginModule]: Could not authentication user using ObSSOCookie token. Exception: [CoreIDLoginModule]: Could not fetch groups from Access Server. Exception: The requested resource could not be mapped to a policy domain in the Policy database. Check if the corresponding directory service is up.

In the SDK log directory $SDK_HOME/oblix/logs


2010/01/29@07:24:43.738335      7278    7278    ACCESS_SDK      ERROR   0x00001830      /usr/abuild/Oblix/10142hf/palantir/access_api/src/obresource_request.cpp:715  "The requested resource could not be mapped to a policy domain in the Policy database. Check if the corresponding directory service is up."   raw_code^305

I forgot to create the policy for /myresourceurl in the policy manager.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

java.lang.OutOfMemoryError: PermGen space

2010-01-20T15:26:00.002+01:00

Nice blog post about Perm Gen

http://oraclebpelindepth.blogspot.com/2009/04/javalangoutofmemoryerror-permgen-space.html
http://www.freshblurbs.com/explaining-java-lang-outofmemoryerror-permgen-space

Install WebGate 10.1.4.2.3 on Apache2 RHEL 5.x 64bit

2010-01-14T08:53:00.002+01:00

Download the WebGate software from:
http://download.oracle.com/otn/linux/ias/101401/oam_int_linux_v8_cd1.zip

Login with putty on the server:
su - root

mkdir -p $WEBGATE_HOME/gcc

cp /lib64/libgcc_s.so.1 /appl/oracle/access_10.1.4/gcc/
cp /usr/lib64/libstdc++.so.5 /appl/oracle/access_10.1.4/gcc/

unzip oam_int_linux_v8_cd1.zip

./Oracle_Access_Manager10_1_4_2_3_linux64_APACHE22_WebGate

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Identity Service Authentication failure.

2010-01-13T10:34:00.002+01:00

We had an problem in de $ORACLE_HOME/opmn/logs/soa_group....log


<2010-01-13 10:19:05,694> <ERROR> <ari.collaxa.cube.services> <PCException::<init>> Identity Service Authentication failure.
<2010-01-13 10:19:05,695> <ERROR> <ari.collaxa.cube.services> <PCException::<init>> Identity Service Authentication failure.
<2010-01-13 10:19:05,695> <ERROR> <ari.collaxa.cube.services> <PCException::<init>> Check the error stack and fix the cause of the error. Contact oracle support if error is not fixable.

Our SOA is integrated with the OID.

The problem was that the account of the oc4jadmin was locked out in the OID.

This can be tested by starting oidadmin and try to login with cn=oc4jadmin, cn=users, dc=oracle, dc=com.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Tuning Oracle Access Manager

2010-01-08T08:04:00.000+01:00

Metalink:

https://support.oracle.com/CSP/main/article?cmd=show&id=404902.1&type=NOT

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

ESB cluster: both ESBDT instances up.

2009-11-26T13:06:00.003+01:00

In the documentation of the clustering is described that the opmn.xml must be changed.

The oc4j_esbdt container should look like:


<process-type id="OC4J_ESBDT" module-id="OC4J" service-failover="1" status="enabled">

And the numprocs entry should be removed:


<process-set id="default_group"/>

This change will still make it possible to have two esbdt applications live at the same time.

There must be made another change:
service-weight="value" should be added athe the process-type.


<process-type id="OC4J_ESBDT" module-id="OC4J" service-failover="1" service-weight="100" status="enabled">

The instances that run the actual service-failover processes are selected based upon the configured (or default) service-weight value. Instances with higher weights are selected over instances with lower weights.

The expected behavior is that upon startup (opmnctl startall) both ESB-DT instances will startup; however after a very short period of time the OPMN will shutdown the less weighted instance and it will keep running only the higher weighted one.

See metalink note: 733536.1

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

ESB-DT: org.apache.slide.webdav.WebdavServlet - ERROR - org.apache.slide.webdav.WebdavException: Internal Server Error

2009-11-24T14:23:00.002+01:00

The error: "org.apache.slide.webdav.WebdavServlet - ERROR - org.apache.slide.webdav.WebdavException: Internal Server Error" somethings is shown in the log file of the ESB-DT (design time) by deployment of Large ESB systems. On metalink we found the error: note: 863024.1


09/11/24 12:59:35 24 Nov 2009 12:59:35 - org.apache.slide.webdav.WebdavServlet - ERROR - org.apache.slide.webdav.WebdavException: Internal Server Error
09/11/24 12:59:35 org.apache.slide.webdav.WebdavException: Internal Server Error
09/11/24 12:59:35       at org.apache.slide.webdav.method.AbstractWebdavMethod.run(AbstractWebdavMethod.java:424)
09/11/24 12:59:35       at org.apache.slide.webdav.WebdavServlet.service(WebdavServlet.java:155)
09/11/24 12:59:35       at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
09/11/24 12:59:35       at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
09/11/24 12:59:35       at oracle.security.jazn.oc4j.JAZNFilter$1.run(JAZNFilter.java:400)
09/11/24 12:59:35       at java.security.AccessController.doPrivileged(Native Method)
09/11/24 12:59:35       at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
09/11/24 12:59:35       at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:414)
09/11/24 12:59:35       at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:623)
09/11/24 12:59:35       at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:370)
09/11/24 12:59:35       at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:871)
09/11/24 12:59:35       at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:453)
09/11/24 12:59:35       at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
09/11/24 12:59:35       at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
09/11/24 12:59:35       at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
09/11/24 12:59:35       at oracle.oc4j.network.ServerSocketAcceptHandler.procClientSocket(ServerSocketAcceptHandler.java:234)
09/11/24 12:59:35       at oracle.oc4j.network.ServerSocketAcceptHandler.access$700(ServerSocketAcceptHandler.java:29)
09/11/24 12:59:35       at oracle.oc4j.network.ServerSocketAcceptHandler$AcceptHandlerHorse.run(ServerSocketAcceptHandler.java:879)
09/11/24 12:59:35       at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
09/11/24 12:59:35       at java.lang.Thread.run(Thread.java:595)

Solution:

1) In httpd.conf set timeout to 3600
2) $ORACLE_HOME/j2ee//config/transaction-manager.xml

set transaction-timeout="3600"
3) Restart SOA suite.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

An unhandled exception has been thrown in the ESB system. The exception reported is: "".

2009-11-19T08:03:00.002+01:00

When the error An unhandled exception has been thrown in the ESB system. The exception reported is: "". occures by deployment of the ESB. It can be a problem in the source of the ESB / BPEL.

In our situation the SOAP Services and the ESB were not in sync, that gave the problems. So the source of the ESB and BPEL is changed, that solved the problem.


DeployESBSuitcase:
log4j:WARN No appenders could be found for logger (org.apache.commons.httpclient.params.DefaultHttpParams).
log4j:WARN Please initialize the log4j system properly.
Deployment Attempt Response :

   Entity Deployment Failed
   
      
         An unhandled exception has been thrown in the ESB system. The exception reported is: "".
         
      
   



Deployment Failed ...Unhandled Exception
java.lang.Exception: Deployment attempt failed, please review deployment attempt response above
        at oracle.tip.esb.client.anttasks.DeploymentHelper.deploy(DeploymentHelper.java:112)
        at oracle.tip.esb.client.anttasks.DeploymentHelper.deploy(DeploymentHelper.java:159)
        at oracle.tip.esb.client.anttasks.DeployESBSuitcaseTask.execute(DeployESBSuitcaseTask.java:510)
        at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
        at org.apache.tools.ant.Task.perform(Task.java:364)
        at org.apache.tools.ant.Target.execute(Target.java:341)
        at org.apache.tools.ant.Target.performTasks(Target.java:369)
        at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1216)
        at org.apache.tools.ant.helper.SingleCheckExecutor.executeTargets(SingleCheckExecutor.java:37)
        at org.apache.tools.ant.Project.executeTargets(Project.java:1068)
        at org.apache.tools.ant.taskdefs.Ant.execute(Ant.java:382)
        at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
        at org.apache.tools.ant.Task.perform(Task.java:364)
        at org.apache.tools.ant.Target.execute(Target.java:341)
        at org.apache.maven.plugin.antrun.AbstractAntMojo.executeTasks(AbstractAntMojo.java:108)
        at org.apache.maven.plugin.antrun.AntRunMojo.execute(AntRunMojo.java:83)
        at org.apache.maven.plugin.DefaultPluginManager.executeMojo(DefaultPluginManager.java:451)
        at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeGoals(DefaultLifecycleExecutor.java:558)
        at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeGoalWithLifecycle(DefaultLifecycleExecutor.java:499)
        at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeGoal(DefaultLifecycleExecutor.java:478)
        at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeGoalAndHandleFailures(DefaultLifecycleExecutor.java:330)
        at org.apache.maven.lifecycle.DefaultLifecycleExecutor.executeTaskSegments(DefaultLifecycleExecutor.java:291)
        at org.apache.maven.lifecycle.DefaultLifecycleExecutor.execute(DefaultLifecycleExecutor.java:142)
        at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:336)
        at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:129)
        at org.apache.maven.cli.MavenCli.main(MavenCli.java:287)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.codehaus.classworlds.Launcher.launchEnhanced(Launcher.java:315)
        at org.codehaus.classworlds.Launcher.launch(Launcher.java:255)
        at org.codehaus.classworlds.Launcher.mainWithExitCode(Launcher.java:430)
        at org.codehaus.classworlds.Launcher.main(Launcher.java:375)

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Identity service cannot get roles in realm "{0}". BPEL identity service fails

2009-11-11T09:14:00.003+01:00

We had problems while invoking the service getGrantees on /integration/services/IdentityService/identity.


Identity service cannot get roles in realm "{0}".
Error occurs while getting roles in realm "[REALM]".
Check the error stack and fix the cause of the error. Contact oracle support if error is not fixable.

After we did a new configure on both instances in the cluster:
$ORACLE_HOME/bpel/system/services/install/ant-tasks
./configure_oid.sh orcladmin [password] [port] false [realm] seedRequiredUsers oc4jadmin [password] oc4j_soa

And we checked the differences between the $ORACLE_HOME/j2ee/oc4j_soa/config/system-jazn-data.xml and $ORACLE_HOME/j2ee/home/config/system-jazn-data.xml. And changed some of the lines.

Another reason can be that the jazn.xml in the $ORACLE_HOME/j2ee/oc4j_soa/config/jazn.xml is not correct. This file should automaticaly be changed by changing the security provider in em, sometimes this fails. You can change the security provider to the original value and after that back to the OID in em and look in $ORACLE_HOME/j2ee/home/config/jazn.xml. The contents should be changed with the correct values for your OID.

Everything worked again.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Form-Based Authentication for J2EE application, Netpoint/Oblix/CoreId/Oracle Access Manager, logon second time does not work

2009-11-11T08:08:00.003+01:00

A customer of mine was using form based authetication with Oracle Access Manager. When the users logged in for the first time through the login.html screen everyting was ok. But when they logged out and tried to login again the form was not working anymore.

We used the logout.html code from the installation directory of the webgate. After some investigation we found out that the problem was that the registration of the webgates and access gates had different values for the cookie settings.

Primary HTTP Cookie Domain [hostname]
Preferred HTTP Host [virtual hostname]

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

SOA 10.1.3.x: SOAP Endpoint URI returns 404 error

2009-10-02T12:58:00.003+02:00

When the SOAP Endpoint URI returns an 404 error a possible solution can be: metalink note: 741792.1

1. Backup and edit $ORACLE_HOME/j2ee//config/default-web-site.xml
2. Change the ohs-routing value from false to true:

ohs-routing="true" />

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.

Apache error_log: mod_oc4j: request to OC4J [hostname]:[port] failed: Connect failed

2009-08-14T10:15:00.004+02:00

I found out that the error below was caused by wrong configuration of the security provider of the application opm-public. When we changed jazn.xml in $ORACLE_HOME/j2ee/[oc4j_container]/config directory with the correct settings and that solved this problem.


[Thu Aug 13 16:09:08 2009] [error] [client 10.8.192.155] [ecid: 1250172548:10.9.8.44:23073:0:7,0] mod_oc4j: Failed to find a failover oc4j process for session request for destination: application://opm-public (no island or jgroup).
[Thu Aug 13 16:09:08 2009] [error] [client [ip_address]] [ecid: 1250172548:10.9.8.44:23073:0:7,0] mod_oc4j: request to OC4J [hostname]:[port] failed: Connect failed



Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.



Automatic BPEL deployment with ant error: A problem occured while connecting to server II
2009-08-11T16:25:00.005+02:00
The following error can occur:

Embedded error: The following error occurred while executing this line:
[INSTALL_DIR]/ant/bpel/common-build.xml:84: A problem occured while connecting to server "[hostname]" using port "[port]": java.security.AccessControlException: access denied (com.collaxa.security.DomainPermission HetRotterdamseHuwelijk read)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
at java.security.AccessController.checkPermission(AccessController.java:427)
at com.collaxa.security.OC4JSecurityService.checkAccess(OC4JSecurityService.java:16)
at com.collaxa.security.SecurityService.checkDomainAccess(SecurityService.java:26)
at com.collaxa.cube.fe.util.ServletUtils.getLocatorWithoutUrlRewrite(ServletUtils.java:76)
at _deployHttpClientProcess._jspService(_deployHttpClientProcess.java:332)
at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:59)
at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:462)
at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:594)
at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:518)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
at oracle.security.jazn.oc4j.JAZNFilter$1.run(JAZNFilter.java:400)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:414)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:623)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:370)
at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:871)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:453)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
at oracle.oc4j.network.ServerSocketAcceptHandler.procClientSocket(ServerSocketAcceptHandler.java:234)
at oracle.oc4j.network.ServerSocketAcceptHandler.access$700(ServerSocketAcceptHandler.java:29)
at oracle.oc4j.network.ServerSocketAcceptHandler$AcceptHandlerHorse.run(ServerSocketAcceptHandler.java:879)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
at java.lang.Thread.run(Thread.java:595)


This can be solved by change the orion-application.xml in the deploy_services application.

$ORACLE_HOME/j2ee/oc4j_soa/application-deployments/deploy_service/orion-application.xml and $ORACLE_HOME/j2ee/oc4j_soa/applications/deploy_service/META-INF/orion-application.xml



        <jazn provider="XML" jaas-mode="doAsPrivileged" />


Replace by:


        <jazn provider="LDAP" jaas-mode="doAsPrivileged" />


Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Automatic BPEL deployment with ant error: A problem occured while connecting to server
2009-08-10T14:12:00.006+02:00
Our BPEL deployments with ant were always succesfull but after an while it was not working anymore during the deployment of an BPEL process we got the error as shown below:


[INFO] ------------------------------------------------------------------------
[ERROR] BUILD ERROR
[INFO] ------------------------------------------------------------------------
[INFO] Error executing ant tasks

Embedded error: The following error occurred while executing this line:
[INSTALL_DIR]/common-build.xml:82: A problem occured while connecting to server "[host]" using port "[port]":


Deployment of an BPEL process by placing it in the $ORACLE_HOME/bpel/domains/[BPEL_DOMAIN]/deploy was successfull.

After we enabled the verbose option I noticed which url is used to deploy the BPEL process http://hostname:port/integration/services/deploy/deployHttpClientProcess.jsp . The application used is deploy_services in the oc4j_soa container. When the url is executed in an browser an popup is shown on which you should log on. But we got an other error:


Authorization Required
This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.


This error was caused by an change in the file $ORACLE_HOME/Apache/Apache/conf/mod_oc4j.conf. A while ago we put an line in this config file:


  Oc4jUseOHSErrors on


After we removed Oc4jUseOHSErrors on. Everything worked like it supposed to.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


High Available Oracle Access Manager with BIG-F5
2009-08-05T08:00:00.001+02:00
High Available Oracle Access Manager with BIG-F5

http://www.f5.com/pdf/deployment-guides/f5-oracle-oam-dg.pdf

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Find the orasso password
2009-07-29T16:29:00.001+02:00
With the following command the ORASSO database user password can be obtained:

ldapsearch -D cn=orcladmin -w [ORCLADMIN PASSWORD] -p [LDAP_PORT] \
           -h [LDAP_URL] -b "cn=IAS,cn=Products,cn=OracleContext" \
           -s sub -v OrclresourceName=ORASSO | grep \
           orclpasswordattribute


Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Ldap_Search: DSA Is Unwilling To Perform
2009-07-29T16:01:00.004+02:00
Today I wanted to make an shell script that checks if an attribute of an user in the OID had a specific value. I tried to make an ldapsearch statement but it failed with the error:

DSA Is Unwilling To Perform
ldap_search: additional info: Function Not Implemented


I found out that it is not possible to search on an uncataloged (unindexed) attribute.

This can be fixed by:

Create an index on the attribute used in the search using catalog.

For this example:
$ORACLE_HOME/ldap/bin/catalog connect="[ORACLE_SID_METADATA REPOSITORY]" add=true attribute="[SEARCH ATTRIBUTE]"

Output:
This tool can only be executed if you know database user password for OID
Enter OID Password ::

Password of het orcladmin user should be entered now!



Restart the OID server.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


SOA suite clustering FAQ document (feb 2009)
2009-07-23T15:28:00.001+02:00
http://www.oracle.com/technology/tech/soa/pdf/oracle-soa-suite-ha-faq.pdf

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


An unhandled exception has been thrown in the ESB system. The exception reported is: "java.io.IOException: Delete failed
2009-07-15T10:40:00.006+02:00
When the following error occurs, it is possible to reset the oraesb schema in the database. The reset.sh is not recommended on a production system. First we had this problem on some development machines, we did a reset of the oraesb schema, this solved our issue. 

But when we had this problem on production we first tried this:

Metalink note: 863024.1. The note describes another problem but it also helped us with the delete failed error.


[deployESBProjects] Deployment Attempt Response :
[deployESBProjects] 
[deployESBProjects]    
[deployESBProjects]       An unhandled exception has been thrown in the ESB system. The exception reported is: "java.io.IOException: Delete failed
[deployESBProjects]     at oracle.tip.esb.server.bootstrap.ESBBaseResourceAdapter.createIOException(ESBBaseResourceAdapter.java:630)
[deployESBProjects]     at oracle.tip.esb.server.bootstrap.ESBBaseResourceAdapter.access$200(ESBBaseResourceAdapter.java:130)
[deployESBProjects]     at oracle.tip.esb.server.bootstrap.ESBBaseResourceAdapter$2.delete(ESBBaseResourceAdapter.java:550)
[deployESBProjects]     at oracle.tip.esb.lifecycle.AuxiliaryFileHandler.deleteProject(AuxiliaryFileHandler.java:555)
[deployESBProjects]     at oracle.tip.esb.console.XMLConsoleManagerImpl.cleanSlideRepositoryForProject(XMLConsoleManagerImpl.java:2364)
[deployESBProjects]     at oracle.tip.esb.console.XMLConsoleManagerImpl.commit(XMLConsoleManagerImpl.java:2405)
[deployESBProjects]     at oracle.tip.esb.configuration.deployment.JDevDeploymentManager.deploy(JDevDeploymentManager.java:226)
[deployESBProjects]     at oracle.tip.esb.configuration.deployment.DeploymentServlet.doPost(DeploymentServlet.java:120)
[deployESBProjects]     at javax.servlet.http.HttpServlet.service(HttpServlet.java:763)
[deployESBProjects]     at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
[deployESBProjects]     at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
[deployESBProjects]     at oracle.security.jazn.oc4j.JAZNFilter$1.run(JAZNFilter.java:400)
[deployESBProjects]     at java.security.AccessController.doPrivileged(Native Method)
[deployESBProjects]     at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
[deployESBProjects]     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:414)
[deployESBProjects]     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:623)
[deployESBProjects]     at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:370)
[deployESBProjects]     at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:871)
[deployESBProjects]     at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:453)
[deployESBProjects]     at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
[deployESBProjects]     at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
[deployESBProjects]     at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
[deployESBProjects]     at oracle.oc4j.network.ServerSocketAcceptHandler.procClientSocket(ServerSocketAcceptHandler.java:234)
[deployESBProjects]     at oracle.oc4j.network.ServerSocketAcceptHandler.access$700(ServerSocketAcceptHandler.java:29)
[deployESBProjects]     at oracle.oc4j.network.ServerSocketAcceptHandler$AcceptHandlerHorse.run(ServerSocketAcceptHandler.java:879)
[deployESBProjects]     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
[deployESBProjects]     at java.lang.Thread.run(Thread.java:595)
[deployESBProjects] Caused by: Service org.apache.slide.store.impl.rdbms.J2EEStore@1966d52 access error : ORA-02292: integrity constraint (ORAESB.SYS_C005694) violated - child record found


[deployESBProjects]     at org.apache.slide.macro.MacroImpl.delete(MacroImpl.java:522)
[deployESBProjects]     at org.apache.slide.macro.MacroImpl.delete(MacroImpl.java:482)
[deployESBProjects]     at org.apache.slide.macro.MacroImpl.delete(MacroImpl.java:463)
[deployESBProjects]     at oracle.tip.esb.server.bootstrap.slide.DeleteFolder.delete(DeleteFolder.java:76)
[deployESBProjects]     at oracle.tip.esb.server.bootstrap.slide.DeleteFolder.executeRequest(DeleteFolder.java:58)
[deployESBProjects]     at oracle.tip.esb.server.bootstrap.slide.AbstractSlideMethod.execute(AbstractSlideMethod.java:142)
[deployESBProjects]     at oracle.tip.esb.server.bootstrap.slide.SlideHandler.delete(SlideHandler.java:153)
[deployESBProjects]     at oracle.tip.esb.server.bootstrap.ESBBaseResourceAdapter$2.delete(ESBBaseResourceAdapter.java:548)
[deployESBProjects]     ... 24 more
[deployESBProjects] ".
[deployESBProjects]       
[deployESBProjects]    
[deployESBProjects]    
[deployESBProjects] 




Two timers need to be extended in order to make the registration successful.  It is assumed here that the HTTP server being used is the Oracle HTTP Server.

(1)  At the HTTP Server that is hosting the ESB Designtime container edit the following file:

$ORACLE_HOME/Apache/Apache/conf/httpd.conf

(2)  Change the value of "Timeout" to a higher value, e.g. from:

Timeout 300

to:

Timeout 3600

A value of 3600 (seconds) is high enough to cover most cases, but it could be possible that a higher value may be needed.

(3)  Restart the HTTP server to make the change affective.

(4)  At the ESB Designtime container edit the following file:

$ORACLE_HOME/j2ee//config/transaction-manager.xml

(5)  Change the value or transaction-timeout to a higher value, e.g. from:

transaction-timeout="30"
 
to:

transaction-timeout="3600"
In most cases this timeout should match that of the value set at the HTTP Server.

(6)  Restart the SOA server or ESB Designtime container to make the change affective.

(7)  Retry the large ESB project registration.


If this solution does not work you can try the reset.sh.

Before executing the command read the whole post!!!!! Otherwise your ESB can be corrupted.

With the following command you can clean up your oraesb schema:

cd $ORACLE_HOME/integration/esb/bin
./reset.sh -DDB_URL=jdbc:oracle:thin:@//db_host:db_port/sid -DDB_USER=oraesb -DDB_PASSWORD=oraesb


WATCH OUT when using this on SOA 10.1.3.4 MLR 8

It looks like the database schema of oraesb is corrupted after the reset.sh script. In our case the ESB deployments failed after this. I ran the sql script form the latest patch again and now everything seems fine.

During deployment this error can occur:


[deployESBProjects] Deployment Attempt Response :
[deployESBProjects] 
[deployESBProjects]    Entity Deployment Failed
[deployESBProjects]    
[deployESBProjects]       
[deployESBProjects]          Failed to create Service "ProcesServic                                                                                                                                                             e".
[deployESBProjects]          Ensure that the (a) Repository is available. (                                                                                                                                                             b) The Connection information for the Repository is Valid. Verify the detailed c                                                                                                                                                             ause of error if available. Contact Oracle Support if error not fixable.
[deployESBProjects]       
[deployESBProjects]    
[deployESBProjects] 


There is also another problem the BPELSystem in the ESB is gone.
Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Howto Configuring Canon MP620 on ubuntu
2009-07-06T15:00:00.003+02:00
Today I found a site about configuring a Canon MP620 printer on ubuntu.

https://help.ubuntu.com/community/HardwareSupportComponentsPrintersCanonPrintersCanonMP620

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Oracle Application Server 10.1.3 Associate OID with OC4J instance
2009-06-24T16:38:00.004+02:00
In the EM console of the Oracle Application Server you can connect an OID to an OC4J instance by doing the following:

Click on an oc4j instance - Click on link Administration: Under security you will find Identity Management.

This text is shown:

You can associate an installed Oracle Internet Directory with this OC4J instance. You can then choose to use this Oracle Internet Directory for runtime authentication and authorization for deployed applications.


I assumed that this means that you can associate multiple OID's to different OC4J instances but this is not true. When you change the OID here, it wil change the OID for all OC4J instances on this application server.

When you want to user different OID's for different applications you should put this in the orion-application.xml file of the application.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Login Error with error message, Form-Based Authentication for Netpoint/Oblix/CoreId/Oracle Access Manager
2009-06-24T16:02:00.003+02:00
When the login of Form-Based Authentication fails because the username/password combination is not correct. The default behavior is the serve the login html page. 

But you want to give an error on this page. This can be achieved by putting an Redirection URL with an parameter in the link like this:
/login.jsp?LoginError=True 

This should be done in the policy manager:
Default rules - Authentication Rule - Actions - Authentication Failure - Redirection URL.

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Oracle HTTP Server Version Information Not visable in Error pages
2009-06-12T08:34:00.008+02:00
Default the users can see which Application Server is used to serve the pages, for security reasons this is not desirable. 

These messages can be removed by setting Signature Off in the httpd.conf instead of Signature On.

Signature On:

Forbidden
You don't have permission to access /pls/orasso on this server.
  _____  

Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server Server at sso.someserver.com Port 443



Signature Off


Forbidden
You don't have permission to access /pls/orasso on this server.



But now the signature is still in the HTTP Headers. This can be disabled by adding the line:

ServerTokens Prod

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Integrate Oracle BPEL (10.1.3.4) with OID (10.1.4.2)
2009-06-11T15:33:00.005+02:00
When I tried to change the security provider in the AS console the following error occured in the browser:
  

Error
 
An error occurred while attempting to change the Oracle Internet Directory associated with this instance. Please ensure that the OID instance is indeed up and that the connect information provided is correct before retrying.
Error invoking method: associateOC4JWithOID on MBean: oc4j:j2eeType=Security,name=SecurityProvider,J2EEApplication=default,J2EEServer=standalone
Error invoking method: associateOC4JWithOID on MBean: oc4j:j2eeType=Security,name=SecurityProvider,J2EEApplication=default,J2EEServer=standalone


I ignored this error and continued with the configuration described in http://download-uk.oracle.com/docs/cd/B31017_01/integrate.1013/b28982/service_config.htm#BABIBGFF with the chapter: 2.1.3.2 Task 2: Perform Configuration Procedures.

Error during executing of configure_oid.sh

bpel-grant-privileges:
     [echo] Granting Server privileges to BPMSystemAdmin role...
     [java] User [oc4jadmin] does not exist in system.

BUILD FAILED
$ORACLE_HOME/bpel/system/services/install/ant-tasks/oid-config.xml:235: Java returned: 255


To find the real reason for this problem you can create an new oc4j container put the logging on FINEST and try to change the security provider.

In the container logging in $ORACLE_HOME/opmn/logs/default_group~[CONTAINER_NAME]~default_group~1.log the following error:


changetype: add
objectclass: top
objectclass: person
objectclass: inetorgperson
objectclass: organizationalperson
objectclass: orcluser
objectclass: orcluserv2
orclactivestartdate: 20090611000000z
sn: oc4jadmin
cn: oc4jadmin
uid: oc4jadmin
mail: oc4jadmin
description: OC4J administrator user
displayname: OC4J administrator
userpassword: [PASSWORD]
 [LDAP: error code 19 - Password Policy Error :9003: GSL_PWDMINLENGTH_EXCP :Your Password must be at least 8 characters long.
]
        at oracle.security.jazn.util.AssociateOID.uploadDefaultOIDData(AssociateOID.java:471)
        at oracle.security.jazn.util.AssociateOID.configure(AssociateOID.java:267)
        at oracle.security.jazn.jmx.SecurityProvider.associateOC4JWithOID(SecurityProvider.java:694)
        at oracle.oc4j.admin.management.mbeans.SecurityProviderManager.associateOC4JWithOID(SecurityProviderManager.java:1493)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at sun.reflect.misc.Trampoline.invoke(MethodUtil.java:36)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at sun.reflect.misc.MethodUtil.invoke(MethodUtil.java:239)
        at javax.management.modelmbean.RequiredModelMBean.invokeMethod(RequiredModelMBean.java:1071)
        at javax.management.modelmbean.RequiredModelMBean.invoke(RequiredModelMBean.java:953)
        at oracle.oc4j.admin.jmx.server.mbeans.model.DefaultModelMBeanImpl.invoke(DefaultModelMBeanImpl.java:700)
        at com.sun.jmx.mbeanserver.DynamicMetaDataImpl.invoke(DynamicMetaDataImpl.java:213)
        at com.sun.jmx.mbeanserver.MetaDataImpl.invoke(MetaDataImpl.java:220)
        at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:815)
        at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:784)
        at oracle.oc4j.admin.jmx.server.state.ApplicationStateFilterMBeanServer.invoke(ApplicationStateFilterMBeanServer.java:572)
        at oracle.oc4j.admin.jmx.ejb.MBeanServerEjbBean.invoke(MBeanServerEjbBean.java:365)
        ... 24 more
Caused by: oracle.ldap.util.UtilException: NamingException encountered during loading of file:  $ORACLE_HOME/j2ee/home/jazn/install/oidConfigForOc4j.sbsdn: cn=oc4jadmin,cn=users,dc=test,dc=com



Than I realised that I changed the password policy in the Oracle Internet Directory. This was the reason for the problem. My policy was that the password should be 8 characters long instead of 5.

When I changed this back to the default policy everything worked ok!

Reference:
Metalink: 398855.1
Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Get version Oracle BPEL
2009-06-11T13:08:00.002+02:00
It is not so easy to determine the version of the Oracle BPEL application but I found an note on metalink: 419711.1

In order to find the versions, we have multiple ways for some components:

1. BPEL Process Manager:

We can find the version of BPEL Process Manager from front-end as well as back-end:

a) Finding the version from front-end:

Login to BPEL Console and we find the version on the BPEL Console on the right-hand bottom. The version of BPEL Console is same as BPEL version.

b) Finding the version from back-end:

Execute the obversion.sh located at $ORACLE_HOME/bpel/bin directory. ORACLE_HOME is the location where the SOA Suite is installed.

2. BPEL Repository:

During various stages of installation or upgradation of the BPEL Process Manager or in the process of applying patches to BPEL Process Manager, the Metadata repository would also be upgraded. The version of Metadata version is 2.0.2 or 2.0.3 in 10.1.2.x versions of BPEL Process Manager. The SOA Suite 10.1.3.1.0 version of BPEL Process Manager comes with 2.0.4 version of Metadata repository.

However, some patches would be run against the Metadata repository and we might need to know the versions of the Metadata repository. In such cases, we can use the following SQL to know the version:

SQL> conn orabpel/orabpel;

SQL> SELECT guid FROM version_server;

Reference:
metalink note: 419711.1

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


invalid policy configuration Netpoint/Oblix/CoreId/Oracle Access Manager
2009-05-27T13:38:00.006+02:00
If you made a mistake during the configuration of a policy in the policy manager and you locked yourself out of the system it is possible to undo this in the LDAP Directory. 
Use an LDAP browser/editor (for example: LDAP browser) to find the entry: 
realm
+-o=oblix
+---obapp=PSC
+-----obname=OBAutoSSO_XXXXXXX (find the one you last changed, normally the last created is added at the bottom)

Change the value of the attribute: obenabled from enabled to disabled. Restart the Access Manager and after that it should be possible to log in.
  
Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Unsuccessfull/incomplete product setup: Howto: restart product setup of Identity Server/Policy Manager, Netpoint/Oblix/CoreId/Oracle Access Manager
2009-05-27T13:16:00.006+02:00
If something goes wrong (Empty browser window, no response) during the product setup of the Identity Server/Policy Manager in the browser it is possible to restart the product setup by changing the setup.xml of the product. Set the status Value to incomplete instead of done and you can start over with the product setup.

Location of setup.xml:
WebPass: $WEBPASS_HOME/access/oblix/config
Identity server: $IDENTITY_HOME/identity/oblix/config

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


wsrp oc4j container on Oracle AS 10.1.3.4 + wsrp-samples.ear
2009-05-19T21:41:00.009+02:00
How to install wsrp in an OC4J container on Oracle AS 10.1.3.4 and deploy wsrp-samples.ear and test if everything works in Oracle AS portal 10.1.4.

Download the wsrp sources from metalink: Patch number: 7356288
WSRP-PREDEPLOY.JAR IS DUPLICATING ENTRIES FOR THE SPRING CONTEXT LOADER

Download wsrp-samples.ear application: 
http://download.oracle.com/otndocs/tech/webcenter/files/pdksoftware.zip


createinstance -instanceName oc4j_wsrp -groupname default


Output:

Creating OC4J instance "oc4j_wsrp"...
Set OC4J administrator password for "oc4j_wsrp" (password text will not be displayed as it is entered):
Enter password:
Confirm password:
A new OC4J instance "oc4j_wsrp" is created in the group "default".


Do not start the container!!!!!!

Install the wsrp in the oc4j container

java -jar portlet-server-install-v1.jar $ORACLE_HOME/j2ee/oc4j_wsrp


Output:

File "$ORACLE_HOME/j2ee/oc4j_wsrp/config/global-web-application.xml" modified successfully
File "$ORACLE_HOME/j2ee/oc4j_wsrp/config/server.xml" modified successfully
Beginning install of libraries to "$ORACLE_HOME/j2ee/oc4j_wsrp/applib"
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/commons-logging.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/dom4j.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/jaxrpc-api.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/jaxrpc-ri-patched.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/namespace.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/ptlshare.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/relaxngDatatype.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/saaj-api.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/saaj-ri.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/wsrp-common.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/wsrp-container.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/xml.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/xmlmesg.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/xmlparserv2.jar"...
Extracting "$ORACLE_HOME/j2ee/oc4j_wsrp/applib/xsdlib.jar"...
Installing "$ORACLE_HOME/j2ee/home/jsp/lib/taglib/oracle-portlet-tags.jar"...
Install Complete


Start the oc4j container.

wsrp can work with an file based preference store or with an database as preference store. In this example we will user the file based option which is default.

Before we can deploy the wsrp-samples.ear we have to change the file $ORACLE_HOME/j2ee/oc4j_wsrp/config/server.xml import a jar. Under <shared-library name="oracle.wsrp" version="1.0"> add <import-shared-library name="oracle.ws.jaxrpc"/>.

Now unzip the downloaded pdk pdksoftware.zip.

Search for the wsrp-samples.ear (directory: pdk/portlet-container)

Deploy the ear file from the command line:

java -jar admin_client.jar deployer:oc4j:[HOSTNAME]:[OPMN_REQUEST_PORT] oc4jadmin [PASSWORD] -deploy -file wsrp-samples.ear -deploymentName sampleapp -bindAllWebApps  


If everything is ok there should be a servlet:
http://[HOSTNAME]:[PORT]/portletapp/info

Now the provider can be registerd in portal with the WSDL:
http://[HOSTNAME]:[PORT]/portletapp/portlets?WSDL

If you want to make your application wsrp ready the following should be done to "infect" your ear file with the Oracle stuff:


java -jar wsrp-predeploy.jar  


Refer:
http://download.oracle.com/docs/cd/B32110_01/webcenter.1013/b31074/jpsdg_java_intro.htm#BHCCCFID

Metalink note: 341922.1


Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Warning: View created with compilation errors.
2009-05-19T19:46:00.001+02:00
During compilation of view I got the following error:

Warning: View created with compilation errors.

Show err gives No Errors.
SQL> SQL> show err
No errors.

With the following select statement it is possible to find the error:

select text from dba_errors where name = '[OBJECT_NAME]' and owner = '[OBJECT_OWNER]';

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Object id argument passed to DBMS_UTILITY.INVALIDATE is not legal
2009-05-19T19:45:00.000+02:00
When executing the DBMS_UTILITY.COMPILE_SCHEMA procedure, the following errors are given:

ERROR at line 1:
ORA-20000:
ORA-06512: at "SYS.DBMS_UTILITY", line 347
ORA-24237: object id argument passed to DBMS_UTILITY.INVALIDATE is not legal
ORA-06512: at line 1

To check whether SYS has the required privileges, run the following query connected as SYS:

SQL> select username, privilege from user_sys_privs order by privilege;

If SYS does not have the following privileges, then grant them to SYS directly:

grant CREATE ANY DIMENSION to sys;
grant CREATE ANY EVALUATION CONTEXT to sys;
grant CREATE ANY INDEX to sys;
grant CREATE ANY INDEXTYPE to sys;
grant CREATE ANY LIBRARY to sys;
grant CREATE ANY MATERIALIZED VIEW to sys;
grant CREATE ANY OPERATOR to sys;
grant CREATE ANY PROCEDURE to sys;
grant CREATE ANY RULE to sys;
grant CREATE ANY RULE SET to sys;
grant CREATE ANY SYNONYM to sys;
grant CREATE ANY TRIGGER to sys;
grant CREATE ANY TYPE to sys;
grant CREATE ANY VIEW to sys;

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


IdentityXML change password sample XML, Netpoint/Oblix/CoreId/Oracle Access Manager
2009-05-08T17:06:00.005+02:00
With this XML sample it is possible to change the password of an user!


<?xml version="1.0"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas-xmlsoap.org/soap/envelope/"
xmlns:oblix="http://www.oblix.com">
<SOAP-ENV:Body>
<oblix:authentication xmlns:oblix="http://www.oblix.com" type="basic">
<oblix:login>orcladmin</oblix:login>
<oblix:password>[PASSWORD]</oblix:password>
</oblix:authentication>
<oblix:request application="userservcenter" function="modifyUser"> <oblix:params>
<oblix:param name="uid">cn=[USERNAME],cn=users,dc=test,dc=com
</oblix:param>
<oblix:param name="attrName_1">userPassword</oblix:param>
<oblix:param name="attrValue_1">[NEW_PASSWORD]</oblix:param>
<oblix:param name="attrValue_1_confirm">[NEW_PASSWORD]</oblix:param>
<oblix:param name="attrValue_1_old">[OLD_PASSWORD]</oblix:param>
<oblix:param name="attrOperation_1">REPLACE</oblix:param>
<oblix:param name="noOfFields">1</oblix:param>
</oblix:params>
</oblix:request>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>


Refer:
http://www.oracle.com/technology/sample_code/products/id_mgmt/accmgr/id_developer.pdf

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


IdentityXML example, Netpoint/Oblix/CoreId/Oracle Access Manager
2009-05-07T10:55:00.013+02:00
In the project I was working on there was a question to find out how users could change their password without using the GUI of the identity server. An Oracle Sales Consultant pointed me to IdentityXML as a possible solution for this problem. Together with a colleague (JAVA consultant) of IT-eye, Ron Weverwijk we found out how this works.

This blog is a simple description how IdentityXML works and we used the Oracle documentation which you can find at the end of this blog.

In the documentation there is an sample JAVA program which we used:


/**
 * This is a very simple SOAP example of how to invoke Oracle Access Manager
 * through SOAP.
 *
 * This program will make a soap request (send the request in soap.xml)
 * to the argument hostname:port/oblix/apps/corpdir/bin/corpdir.cgi
 *
 * Requirements:
 * *** ObSoapClient, a complete http client library from innovation, is
 *     required to run this test.  The software is free, and licensed under the
 *     GNU Lesser General Public License.
 *     HTTPClient is available at http://www.innovation.ch/java/HTTPClient
 *     This program has been tested with HTTPClient Version 0.3-2
 *
 * To run:
 * *** java ObSoapClient [-h hostname] [-p port] [-f inputfile] [-u oblixurl]
 *
 */

import java.net.URL;
import java.io.IOException;
import java.io.FileReader;
import java.io.BufferedReader;
import HTTPClient.CookieModule;
import HTTPClient.HTTPConnection;
import HTTPClient.HTTPResponse;
import HTTPClient.ModuleException;
import HTTPClient.NVPair;

public class ObSoapClient
{
        static String hostname = "sunlight.oracle.com";
        static String filename = "soap.xml";
        static int port = 80;
        static String oburl = "/identity/oblix/apps/userservcenter/bin/userservcenter.cgi";

        public static void collectArgs(String args[])
        {
                for (int i = 0; i < args.length; i++) {
                        if (args[i].equals("-h") && args.length >= i+1)
                                hostname = args[i+1];
                        else if (args[i].equals("-f") && args.length >= i+1)
                                filename = args[i+1];
                        else if (args[i].equals("-p") && args.length >= i+1)
                                port = Integer.parseInt(args[i+1]);
                        else if (args[i].equals("-u") && args.length >= i+1)
                                oburl = args[i+1];
                        else if (args[i].equals("-h") || args[i].equals("-help")) {
                                System.out.println("Usage: java ObSoapClient [-h hostname] [-p port] [-f filename] [-u oblixurl] \n");
                        }
                }
        }

        /**
   * Read from soap.xml in current directory and return as string.
         */
        public static String getRequestFromFile()
        {
                StringBuffer data = new StringBuffer();
                try {
                        BufferedReader reader = new BufferedReader(new FileReader(filename));

                        for (String line = reader.readLine(); line != null;
                                line = reader.readLine()) {
                                data.append(line);
                                data.append("\r\n");
                        }
                } catch (Exception e) {
                        System.out.println(e.toString());
                }
                return data.toString();
        }

        public static void main(String args[]) throws Exception
        {
                try {
                        CookieModule.setCookiePolicyHandler(null);

                        // initiate connection
                        collectArgs(args);
                        HTTPConnection con = new HTTPConnection(hostname, port);

                        // collect response
                        NVPair header[] = new NVPair[1];
                        header[0] = new NVPair("Content-Type", "text/xml");
                        HTTPResponse rsp =
                                con.Post(oburl,
                                getRequestFromFile(),
                                header);

                        // get status and act accordingly
                        if (rsp.getStatusCode() >= 300) {
                                System.err.println("Received Error: "+rsp.getReasonLine());
                                System.err.println(new String(rsp.getData()));
                        } else
                                System.out.println(new String(rsp.getData()));
                } catch (IOException ioe) {
                        System.err.println(ioe.toString());
                } catch (ModuleException me) {
                        System.err.println("Error handling request: " + me.getMessage());
                } catch (Exception e) {
                        System.out.println(e.toString());
                }
        }

}

/*
        NVPair form_data[] = new NVPair[2];

        form_data[0] = new NVPair("login", "J.Smith");
        form_data[1] = new NVPair("password", "J.Smith");
//      form_data[2] = new NVPair("uid",
//              "cn=John Smith,ou=Corporate,o=Company,c=US");
//      form_data[3] = new NVPair("program", "personPage");
//      form_data[4] = new NVPair("tab_id", "Employees");

//      HTTPResponse rsp = con.Post("/oblix/apps/corpdir/bin/corpdir.cgi", form_data);

*/



This program needs a jar file http_client.jar this file can be found in a $ORACLE_HOME of an Oracle Application Server in the directory $ORACLE_HOME/j2ee/home/lib.

First this program needs to be compiled (We used a Linux client)
cd $HOME
mkdir IdentityXML
cd IdentityXML
cp $ORACLE_HOME/j2ee/home/lib/http_client.jar .
vi ObSoapClient.java 

Fill this file with the code example.

Compile the java file:

javac -classpath .:http_client.jar ObSoapClient.java


Now you have an ObSoapClient.class file.

All you need to test if it works is an example SOAP messages which can be found in the identity server directory. In this directory are examples of messages which can be used.

$IDENTITY_HOME/identity/oblix/unsupported/integsvcs

For this example we will query the OID for the attribute sn of an user in the OID. 
The example used is: um_view.xml

To keep it simple we chosed to use orcladmin as the user in the authentication part of the message. But if you want to use another username a workflow should be created in the identity server which gives the user the privilege to view attributes of other users.

Create an file soap.xml with and fill this with:


<?xml version="1.0"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas-xmlsoap.org/soap/envelope/"
                   xmlns:oblix="http://www.oblix.com">
<SOAP-ENV:Body>
     <oblix:authentication xmlns:oblix="http://www.oblix.com" type="basic">
          <oblix:login>orcladmin</oblix:login>
          <oblix:password>[PASSWORD]</oblix:password>
     </oblix:authentication>
     <oblix:request function="view">
          <oblix:params>
               <oblix:param name="uid">cn=[USER_NAME],cn=users,dc=test,dc=com</oblix:param>
               <oblix:param name="attrName">sn</oblix:param>
          </oblix:params>
     </oblix:request>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>


Now execute the java program:


java -classpath http_client.jar:. ObSoapClient -f soap.xml -h [HOSTNAME] -p [HTTP_PORT] -u /identity/oblix/apps/userservcenter/bin/userservcenter.cgi


Output of the program:

<?xml version="1.0" encoding="utf-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<Oblix xmlns:oblix="http://www.oblix.com/" xmlns="http://www.oblix.com/" oblang="en-us">
<ObProfile>
<ObPanel obname="defaultPanel" obpanelId="20090504T03484759854" obpanelClass="inetorgperson">
<ObAttribute obattrName="sn">
<ObDisplay obdisplayName="Last Name" obdisplayType="textS" obname="sn" obmode="view" obcanRequest="false" obrequired="false">
<ObTextS>
<ObValue>[LASTNAME]</ObValue>
</ObTextS>
</ObDisplay>
</ObAttribute>
</ObPanel>
<ObHeaderPanel></ObHeaderPanel>
<ObRequestInfo>158720928</ObRequestInfo>
<ObScripts>
<ObScript obname="../../../lang/en-us/msgctlg.js"></ObScript>
<ObScript obname="../../../lang/shared/i18n.js"></ObScript>
<ObScript obname="../../../lang/shared/nsiesetup.js"></ObScript>
<ObScript obname="../../../lang/shared/misc.js"></ObScript>
<ObScript obname="../../../lang/shared/miscsc.js"></ObScript>
<ObScript obname="../../../lang/shared/horizontalprofile.js"></ObScript>
<ObScript obname="../../../lang/shared/userservcenter.js"></ObScript>
</ObScripts>
<ObForm obname="profileForm" obmethod="post" obaction="userservcenter.cgi?tab_id=Employees&uid=cn%3D[USERNAME]%2Ccn%3Dusers%2Cdc%3Dtest%2Cdc%3Dcom%2C">
<ObInput obtype="hidden" obname="program" obvalue="view"></ObInput>
<ObInput obtype="hidden" obname="visiblePanel"></ObInput>
</ObForm>
<ObDisplay obdisplayName="ObTextMessage" obdisplayType="textS" obname="ObTextMessage" obmode="view" obcanRequest="false" obrequired="false">
<ObTextS>
<ObTextMessage></ObTextMessage>
</ObTextS>
</ObDisplay>
<ObTextMessage></ObTextMessage>
<ObSelectorInfoForm>
<ObForm obname=""></ObForm>
</ObSelectorInfoForm>
<ObButton obaction="initiateDeactivateUser"></ObButton>
<ObButton obaction="userreactivate"></ObButton>
<ObButton obaction="wfTicketDelete"></ObButton>
<ObButton obaction="userModify" obimageUrl="NAVmodify" obmouseOver="Modify this profile." obhref="../../userservcenter/bin/userservcenter.cgi?program=modify&tab_id=Employees&uid=cn%3D[USERNAME]%2Ccn%3Dusers%2Cdc%3Dtest%2Cdc%3Dcom"></ObButton>
<ObStatus>0</ObStatus>
</ObProfile>
<ObStatus>0</ObStatus>
</Oblix>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>


Refer:
http://download.oracle.com/docs/cd/B28196_01/idmanage.1014/b25346/idxmlows.htm

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Oracle XE change HTTP and FTP Port
2009-04-23T11:47:00.005+02:00
Login on SQL*Plus with the system user:


SQL*Plus: Release 10.2.0.1.0 - Production on Thu Apr 23 11:40:05 2009

Copyright (c) 1982, 2005, Oracle.  All rights reserved.

SQL> conn system/[PASSWORD]
Connected.
SQL> select dbms_xdb.gethttpport as "HTTP-Port"
            , dbms_xdb.getftpport as "FTP-Port" from dual;

HTTP-Port   FTP-Port
---------- ----------
     8080          0

SQL> begin
  2  dbms_xdb.sethttpport('8585');
  3  end;
  4  /

PL/SQL procedure successfully completed.

SQL> select dbms_xdb.gethttpport as "HTTP-Port"
            , dbms_xdb.getftpport as "FTP-Port" from dual;

HTTP-Port   FTP-Port
---------- ----------
     8585          0


Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Install java SDK on linux
2009-04-23T10:20:00.002+02:00
Download the bin file from the java website:
http://java.sun.com/products/archive/

Install the package as root:

su - root

Change the execute rights:

chmod 700 jdk_*.bin

Execute the bin:

./jdk_*.bin

Java will be installed in /usr/java/

export JAVA_HOME=/usr/java/jdk...
export PATH=$JAVA_HOME/bin:$PATH

Now you can check if everthing is ok by:
which java
java -version

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


ORA-39165: Schema TMP was not found and ORA-31655: no data or metadata objects selected for job
2009-04-22T16:37:00.002+02:00
These errors can occur if the user exists and owns objects but when there are no records in any of the tables.

Error:

expdp system/[PASSWORD]@[ORACLE_SID] directory=[EXPORT_DIR] logfile=[LOG_FILE].log content=DATA_ONLY dumpfile=[DUMP_FILE].dmp schemas=[TMP] 

Export: Release 11.1.0.6.0 - Production on Wednesday, 22 April, 2009 16:26:37

Copyright (c) 2003, 2007, Oracle.  All rights reserved.

Connected to: Oracle Database 11g Release 11.1.0.6.0 - Production
Starting "SYSTEM"."SYS_EXPORT_SCHEMA_01":  system/********@[ORACLE_SID] directory=[EXPORT_DIR] logfile=[LOG_FILE].log content=DATA_ONLY dumpfile=[DUMP_FILE].dmp schemas=[TMP]
Estimate in progress using BLOCKS method...
Processing object type SCHEMA_EXPORT/TABLE/TABLE_DATA
Total estimation using BLOCKS method: 0 KB
ORA-39165: Schema [TMP] was not found.
ORA-31655: no data or metadata objects selected for job
Job "SYSTEM"."SYS_EXPORT_SCHEMA_01" completed with 2 error(s) at 16:26:41


Solution:
Remove the DATA_ONLY option, only the METADATA will be exported!!

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Manual installation ultrasearch in Oracle database
2009-04-20T16:00:00.005+02:00
Manual installation of database component ultrasearch in an Oracle database:

set echo on
spool ultrasearch.log
@$ORACLE_HOME/ultrasearch/admin/wk0setup.sql [ORACLE_HOME] "" SYS [PASSWORD SYS] "as sysdba" wksys SYSAUX TEMP "" "FALSE" DATABASE "" [ORACLE_HOME]/jdbc/lib/classes12.zip [ORACLE_HOME]/jlib/orai18n.jar [ORACLE_HOME]/jdk/bin/java /appl/oracle/db_10.2.0.4.0/ctx/bin/ctxhx [DB_HOSTNAME]:[DB_PORT]:[DB_SID] [DB_HOSTNAME]:[DB_PORT]:[DB_SID] [ORACLE_HOME]
spool off
exit


Check if the option is installed:

select comp_name, version, status from dba_registry
where COMP_ID='WK';


Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Register database by listener
2009-04-20T15:36:00.002+02:00
When you want to register an database to an listener you can do this like this:


sqlplus / as sysdba
alter system register


Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Redhat Linux IP configuration eth0
2009-04-16T16:48:00.003+02:00
Find the file ifcfg-eth0 normally in the directory /etc/sysconfig/network-scripts/

If an static ip address is used it should look something like:


DEVICE=eth0
BOOTPROTO=none
ONBOOT=yes
NETWORK=10.0.1.0
NETMASK=255.255.255.0
IPADDR=10.0.1.27
USERCTL=no


When DHCP is used it should look like:

DEVICE=eth0
BOOTPROTO=dhcp
ONBOOT=yes


After the ifcfg-eth0 file is changed the network must be restarted this can be done with the following command:

service network restart

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Share host folders on Virtual Linux machine
2009-04-16T15:54:00.004+02:00
In VMWare Workstation select the properties of the Virtual Machine and click on options. You can see an Shared Folders property. Enable this option and choose a folder on your host which you want to share. 

VMWare tools need to be installed for this feature.

Now restart your virtual machine.

When the virtual machine is started you can access the shared folder in the directory /mnt/hgfs/[NAME OF THE SHARE]

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Split vmware files (vmdk) files in smaller chunks
2009-04-16T09:21:00.005+02:00
There is an application availible that makes it possible to split up files VMware vmdk files in smaller parts (this is part of vmware workstation vmware-diskmanager.exe). There is also een gui build for this: the application can be found on:

http://vmxbuilder.com/vmware-diskmanager-gui

If you want to change the name of the master vmdk file than you also need to change the vmx file. (Do not forget to copy the vmx file to the directory where the split up files are placed).

Change the entry:
scsi0:0.fileName = "NEW NAME.vmdk"

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Install VMWare tools on a linux VM
2009-04-16T09:13:00.003+02:00
First you select the option VM > Install VMWare Tools... in VMWare workstation. Than an virtual CD is mounted in your Virtual linux machine (/media/VMware_Tools). If this does not happen you should mount the cdrom manually: mount /media/cdrom. This can give an failure but this is error can be ignored.

execute the rpm file:

rpm -ivh VMwareTools-*.rpm


After the rpm is installed the configure perl script can be executed:

cd /usr/bin/
./vmware-config-tools.pl


Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Install Oracle XE on Linux and configure database XE
2009-04-14T20:52:00.003+02:00
Download the rpm from the Oracle Website:
http://www.oracle.com/technology/software/products/database/xe/htdocs/102xelinsoft.html

Execute the RPM

rpm -ihv oracle-xe-univ-10.2.0.1-1.0.i386.rpm


Configure the database

su - root
cd /etc/init.d
./oracle-xe configure


Refer:
http://www.oracle.com/technology/software/products/database/xe/files/install.102/b25144/toc.htm

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Documentation, Netpoint/Oblix/CoreId/Oracle Access Manager
2009-04-10T09:47:00.008+02:00
Documentation Library Oracle Access Manager:
http://download-uk.oracle.com/docs/cd/B28196_01/index.htm

Oracle® Application Server Best Practices Guide
http://download-uk.oracle.com/docs/cd/B28196_01/core.1014/b31762/accessmgr.htm

Oracle® Access Manager Access Administration Guide
http://download-uk.oracle.com/docs/cd/B28196_01/idmanage.1014/b25990/v2config.htm#BHADBAGE

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


Integration BPEL / OID 10.1.4 Migration of LDIF data failed. Not all the entries are successfully
2009-04-09T15:28:00.020+02:00
In the document: http://download-uk.oracle.com/docs/cd/B31017_01/integrate.1013/b28982/service_config.htm#BABIBGFF is mentioned how the integration between BPEL and OID can be configured. But when this is done with OID version 10.1.4 some problems occur:

Migration of LDIF data failed. Not all the entries are successfully.
If the script configure_oid.sh is executed like this:

(Pay attention on a production system choose the option seedRequiredUsers instead of SeedAllUsers, otherwise all test users are in the OID)


cd $ORACLE_HOME/bpel/system/services/install/ant-tasks
./configure_oid.sh orcladmin <PASSWORD> 389 false us seedRequiredUsers oc4jadmin <PASSWORD> oc4j_soa
Buildfile: oid-config.xml

config-oid:
     [echo] Configuring OID...
    [mkdir] Created dir: $ORACLE_HOME/ldap/install
     [java] Install Configuration
     [java] Install Type: ConfigureOID
     [java] Oracle Home: $ORACLE_HOME
     [java] JDK Home: $ORACLE_HOME/jdk
     [java] Proxy Required: false
     [java] Database Vendor: oracle
     [java] OID Host: ${oid.host}
     [java] OID Port: 389
     [java] OID Realm: us
     [java] OID Seed: seedRequiredUsers
     [java] Admin User: orcladmin

     [java] ***************************************************************
     [java] Trying to obtain OID specific details from configuration files.
     [java] Warning: You would encounter problems if you have not associated your instance with an OID.
     [java] ***************************************************************
     [java] OID Host is: ldap.test.nl
     [java] OID Port is: 389
     [java] Seeding users/roles in OID realm : us...
     [java] Buildfile: bpminstall.xml

     [java] seed-oid:

     [java] init:

     [java] seed-oid:
     [java] Seeding system users/roles into OID ...
     [java] Migration of LDIF data failed. Not all the entries are successfully migrated
     [java] Seeding demo users/roles into OID ...
     [java] Migration of LDIF data failed. Not all the entries are successfully migrated

     [java] BUILD SUCCESSFUL
     [java] Total time: 5 seconds
     [java] Exit: 0
     [java] Configuring BPEL identity service configuration file ...
     [java] Adding jaas-mode attribute to hw_services orion-application.xml
     [java] Adding jaas-mode attribute to orabpel orion-application.xml

bpel-grant-privileges:
     [echo] Granting Server privileges to BPMSystemAdmin role...
     [echo] Granting Domain privileges to BPMDefaultDomainAdmin role...

all:

BUILD SUCCESSFUL
Total time: 11 seconds
Done


After some investigation I noticed that the ldif script that is inserted in the OID is in the directory: $ORACLE_HOME/bpel/system/services/config/ldap.

Then I tried to insert the users with the ldapadd commando an error occured:

ldapadd -h ldap.test.nl -p 389 -D cn=orcladmin -w <PASSWORD> -f system-oid_xxx.ldif
adding new entry cn=bpeladmin,cn=users, dc=us,dc=test,dc=nl
ldap_add: Constraint violation
ldap_add: additional info: Password Policy Error :9004: GSL_PWDNUMERIC_EXCP :Your Password must contain at least 1 numeric characters.


The conclusion is that there is een password policy in the OID, when this policy is changed the ldapadd works like a charm.

Change the policy in the OID:
start oidadmin > login with orcladmin > Password Policy Management > cn=pwdPolicies, cn=Common, cn=Product, cn=OracleContext > Password Policy for Realm dc=us,dc=test,dc=nl > tab Password Syntax

Change Number of Numeric Characters: 0



or you can change all passwords in the *.ldif file. But then the ant script is not working only because the ldif file is generated during the ant script.

The ldapadd command is working after the change in de oid and also when the passwords are changed: 


ldapadd -h ldap.test.nl -p 389 -D cn=orcladmin -w <PASSWORD> -f system-oid_xxxx.ldif
adding new entry cn=bpeladmin,cn=users, dc=us,dc=test,dc=nl
adding new entry cn=default,cn=users, dc=us,dc=test,dc=nl
adding new entry cn=guest,cn=users, dc=us,dc=test,dc=nl
modifying entry cn=BPMSystemAdmin,cn=Groups, dc=us,dc=test,dc=nl
modifying entry cn=BPMDefaultDomainAdmin,cn=Groups, dc=us,dc=test,dc=nl
modifying entry cn=BPMWorkflowAdmin,cn=Groups, dc=us,dc=test,dc=nl
modifying entry cn=BPMWorkflowReassign,cn=Groups, dc=us,dc=test,dc=nl
modifying entry cn=BPMWorkflowSuspend,cn=Groups, dc=us,dc=test,dc=nl
modifying entry cn=BPMWorkflowViewHistory,cn=Groups, dc=us,dc=test,dc=nl
modifying entry cn=rule-administrators,cn=Groups, dc=us,dc=test,dc=nl
modifying entry cn=BPMAnalyst,cn=Groups, dc=us,dc=test,dc=nl
modifying entry cn=BPMPublic,cn=Groups, dc=us,dc=test,dc=nl


Now also the configure_oid.sh works like it supposed to. But when you use this script you must change all passwords because default the passwords are CHANGE_ME. The passwords are defined in the file: $ORACLE_HOME/bpel/system/services/config/ldap/system-oid.sbs. 

You can verifiy everything is working fine by invoking the BPEL identity service:
http://<hostname>:<port>/integration/services/IdentityService/identity?operation=lookupUser

If the execution of this request results in this error:


Identity Service cannot find user. Error occurs while getting user "[USER]" in realm "jazn.com" Verify that user "[USER]" exits in realm "jazn.com". Contact oracle support if error is not fixable.


Adjust the file $ORACLE_HOME/j2ee/oc4j_soa/config/jazn.xml.


Line : provider="XML" location="./system-jazn-data.xml" default-realm="jazn.com" 


Line : 

provider="LDAP" location="ldap://test.nl:389" default-realm="us"


Change the $ORACLE_HOME/j2ee/oc4j_soa/config/jazn.xml the same as $ORACLE_HOME/j2ee/home/config/jazn.xml


There is another problem in the integration of BPEL and OID. 
Hint : LOGON TO THE BPEL ADMIN CONSOLE FAILS - INSUFFICIENT PRIVILEGES / NO DOMAIN

There are two OC4J homes in the environment ($ORACLE_HOME/j2ee/home and $ORACLE_HOME/j2ee/oc4j_soa).
OC4J instance is associated with OID through EM.

This modifies the $ORACLE_HOME/j2ee/home/config/jazn.xml. However, it does not modify the $ORACLE_HOME/j2ee/oc4j_soa/config/jazn.xml file correctly.

$ORACLE_HOME/j2ee/oc4j_soa/config/jazn.xml 


Line : provider="XML" location="./system-jazn-data.xml" default-realm="jazn.com" 


Line : 

provider="LDAP" location="ldap://test.nl:389" default-realm="us"


Change the $ORACLE_HOME/j2ee/oc4j_soa/config/jazn.xml the same as $ORACLE_HOME/j2ee/home/config/jazn.xml

Refers: 
http://download-uk.oracle.com/docs/cd/B31017_01/integrate.1013/b28982/service_config.htm#BABIBGFF


Oracle HTTP Server on port under 1024 on Linux
2009-04-09T12:29:00.005+02:00
Execute the following commands as the root user


cd $ORACLE_HOME/Apache/Apache/bin/

chown root .apachectl
chmod 6750 .apachectl


Pay attention to the dots in front of the apachectl!!!!!!!!!!!!!!!!!


"Address already in use: make_sock: could not bind to address 127.0.0.1 port 7200", Netpoint/Oblix/CoreId/Oracle Access Manager
2009-04-07T20:01:00.005+02:00
When in the error log of the HTTP_Server ($ORACLE_HOME/Apache/Apache/logs/error_log.xxxxx) this error occures:


[Thu Mar 12 16:16:18 2009] [crit] (98)Address already in use: make_sock: could not bind to address 127.0.0.1 port 7200


Some processes of the HTTP_Server are still running and need to be killed.


"*** glibc detected *** realloc(): invalid size: 0x081a61f8 ***", Netpoint/Oblix/CoreId/Oracle Access Manager
2009-04-07T19:54:00.005+02:00
After the installation of the Access Server component of Oracle Access Manager the HTTP_Server needs to be restarted.

It is possible that the following error occures:

[Mon Feb 16 14:42:44 2009] [warn] pid file $ORACLE_HOME/Apache/Apache/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
*** glibc detected *** realloc(): invalid size: 0x081a61f8 ***


This can be solved by changing the httpd.conf file:
exclude two modules:


#LoadModule perl_module libexec/libperl.so
#LoadModule php4_module libexec/libphp4.so



Invalid Credentials Error OAM After Applying 10.1.4.3 Patchset to OID
2009-04-07T19:44:00.003+02:00
After applying patchset 10.1.4.3 to the OID, Login to Oracle Access Manager (OAM) access server/identity server/ policy manager fails with invalid credentials.

Applying OID 10.1.4.3 patchset modifies the OID attribute orclinmemfiltprocess. The new value is not correct and causes the described problem.

Execute the following query in the OID

For OID 10.1.4.3


$ORACLE_HOME/bin/ldapmodify –h <OID_HOST> -p <OID_PORT> –D cn=orcladmin –w <PASSWORD> -v <EOF 
dn: cn=dsaconfig,cn=configsets,cn=oracle internet directory 
changetype: modify 
replace: orclinmemfiltprocess 
orclinmemfiltprocess:(|(!(obuseraccountcontrol=*))(obuseraccountcontrol=activated)) 
orclinmemfiltprocess:(|(obuseraccountcontrol=activated)(!(obuseraccountcontrol=*))) 
orclinmemfiltprocess:(obapp=groupservcenter)(!(obdynamicparticipantsset=*)) 
orclinmemfiltprocess:(objectclass=oblixworkflowinstance) 
orclinmemfiltprocess:(objectclass=inetorgperson) 
orclinmemfiltprocess:(objectclass=oblixorgperson) 
orclinmemfiltprocess:(objectclass=oblixworkflowstepinstance) 
EOF


Refers: metalink note: 558040.1


Migration has failed. Please try to manually run the migration program by invoking
2009-04-07T19:33:00.004+02:00
Error during text based Installation of the Dutch Language Pack for Identity server on RedHat Linux

./Oracle_Access_Manager10_1_4_0_1_NL_linux_LP_Identity_System

Migrating language...


Migration has failed. Please try to manually run the migration program by
invoking
$ORACLE_ACCESS_MANAGER/identity/oblix/tools/migration_tools/start_obmigratenp
-c LP -f ERROR: could not read property fromMigrationVersion for bean
dsInfoInputbecause the following error occurred:
java.lang.NullPointerExceptionERROR: could not read property
fromFirstMinorVersion for bean dsInfoInputbecause the following error occurred:
java.lang.NullPointerException -t 1014 -s "ERROR: could not read property
destination for bean backupOblixDirBeanbecause the following error occurred:
java.lang.NullPointerException" -d "/appl/oracle/ident_10.1.4/identity" -i
"$ORACLE_ACCESS_MANAGER/identity".


Made an SR by Oracle Support and the solution to this problem is starting the installation with the -gui option.


Form-Based Authentication Single Sign On for Oracle SOA suite 10.1.3.x ESB console, Netpoint/Oblix/CoreId/Oracle Access Manager
2009-04-06T20:11:00.005+02:00
1. Configure ESB console with OAM

see my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application)

All the files that need to be changed are located in $ORACLE_HOME/j2ee/oc4j_soa/* 

1.1 system-jazn-config.xml
Change the system-jazn-config.xml see Chapter 3.5 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application

The application name should be: esb

1.2 orion-application.xml
Change the orion-application.xml files in both directories: (applications and application-deployments) see Chapter 3.3 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application.

Replace this code: 

<jazn provider="XML" location="../../config/system-jazn-data.xml" default-realm="jazn.com" jaas-mode="doAsPrivileged" />


By this code:


<jazn provider="XML" default-realm="jazn.com" jaas-mode="doAsPrivileged">
   <jazn-web-app auth-method="COREIDSSO"/>
</jazn>


1.3 web.xml
Change the web.xml see Chapter 3.1 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application.

Location:
/appl/oracle/soa_10.1.3/j2ee/oc4j_soa/applications/esb-dt/esb_console/WEB-INF

In the web.xml the following code must be replaced:


    <login-config>
                <auth-method>FORM</auth-method>
                <form-login-config>
                        <form-login-page>/login.jsp</form-login-page>
                        <form-error-page>/login_error.jsp</form-error-page>
                </form-login-config>
  </login-config>


Replace by:


    <login-config>
        <realm-name>ascontrol</realm-name>
    </login-config>


1.4 opmn.xml
Change the opmn.xml see Chapter 2.1 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application.

1.5 Policy Domain
Configure a policy domain for /em see Chapter 3.4 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application.

The only difference is that /esb needs to be protected instead of: /callerInfo/callerInfoB


Form-Based Authentication Single Sign On for Oracle SOA suite 10.1.3.x asconsole, Netpoint/Oblix/CoreId/Oracle Access Manager
2009-04-06T10:24:00.023+02:00
I will explain how SSO / OAM / Oracle SOA suite 10.1.3 asconsole can be configured.

1. Configure asconsole with OAM /em
First I will configure the asconsole, this is very easy. Before you can start configuring you need to create the user and groups in the OID this can be achieved with a trick. 

1.1 Add User and Groups in the OID
Log in on the asconsole of the SOA suite with the oc4jadmin user:

http://hostname:port/em
Click on the home container > tab Administration > Identity Management

Fill in the OID settings of your OID, then automaticly the users and groups are added to the OID.

After this it is easy (see my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application)

All the files that need to be changed are located in the directory: $ORACLE_HOME/j2ee/home/*

1.2 system-jazn-config.xml
Change the system-jazn-config.xml see Chapter 3.5 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application

The application name should be: asconsole

1.3 orion-application.xml
Change the orion-application.xml files in both directories: (applications and application-deployments) see Chapter 3.3 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application.

Replace this code: 


    <!-- %BEGINGOVERNSSO%

    <jazn provider="XML">
        <jazn-web-app auth-method="CUSTOM_AUTH"/>
    </jazn>

    %ENDGOVERNSSO% -->


By the following code:


<jazn provider="XML" default-realm="jazn.com" jaas-mode="doAsPrivileged">
   <jazn-web-app auth-method="COREIDSSO"/>
</jazn>


1.3 web.xml
Change the web.xml see Chapter 3.1 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application.

In the web.xml the following code must be replaced:


  <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>ascontrol</realm-name>
    <form-login-config>
      <form-login-page>/console/logon</form-login-page>
      <form-error-page>/logon_failed.html</form-error-page>
    </form-login-config>
  </login-config>


Replace by:


    <login-config>
        <realm-name>ascontrol</realm-name>
        <auth-method>BASIC</auth-method>
    </login-config>


1.4 opmn.xml
Change the opmn.xml see Chapter 2.1 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application.

1.5 Policy Domain
Configure a policy domain for /em see Chapter 3.4 of my post CoreId/Oracle Access Manager Form-Based Authentication for J2EE application.

The only difference is that /em needs to be protected instead of: /callerInfo/callerInfoB


Invoking ESB Service From BPEL Fails With Error "exception on JaxRpc invoke: HTTP transport error: javax.xml.soap.SOAPException"
2009-04-03T15:15:00.002+02:00
When the ESB service is called in an BPEL process and the next error occurs (Oracle ESB 10.1.3.x):

Invoking ESB Service From BPEL Fails With Error "exception on JaxRpc invoke: HTTP transport error: javax.xml.soap.SOAPException"

Metalink note: 427452.1

There are two options to resolve this issue: 

Option 1: Configure the virtualhost and port number for a particular ESB system where services got registered. 

1. Click the ESB system then configure Virtual host and Port number, 
   Set Virtual host to ESB Runtime Server's hostname 
   Set Port to ESB Runtime Server's http listening port 
2. Apply the change 

Option 2: Use ESB bindings to invoke ESB services. 
1. Login to ESB console, and click the Routing Service which BPEL is attempting to invoke. 
2. Go to "Definition" tab, and uncheck "Can be invoked from an external service" 
3. Click apply. 
4. Go to BPEL Console and clear the WSDL Cache.
5. Restart SOA suite


RedHat linux monitor network traffic from and to an host
2009-03-27T15:50:00.005+01:00
Interessed in what is sent over the network to an host from an progam use tcpdump:


/usr/sbin/tcpdump src host IP_ADDRESS_HOST or dst host IP_ADDRESS_HOST


IP_ADDRESS_HOST is the address of the host to which the requests are sent.


Form-Based Authentication for J2EE application, Netpoint/Oblix/CoreId/Oracle Access Manager
2009-03-25T14:04:00.099+01:00
This blog describes the steps which are needed to configure OAM/CoreId 10.1.4.2 with a sample J2EE application with Form-Based Authentication on Oracle Application Server 10.1.3 (Oracle HTTP Server 1.x)

Download the sample application callerInfo from the Oracle Website http://www.oracle.com/technology/sample_code/tech/java/codesnippet/security/jaznldap/JAZNLDAP.zip.

Install Oracle Access Manager components.

Install an Oracle Application Server for example 10.1.3.1 (Oracle HTTP Server 1.x/Apache 1.3.x)

Install WebGate 10.1.4.2 BP03 (THIS IS VERY IMPORTANT, there are some important bug fixes in BP03 WebGate see metalink note: 736372.1 for version / patchsets)

Install AccessGate 10.1.4.2 BP06 (THIS IS VERY IMPORTANT, there are some important bug fixes in BP06 AccessGate see metalink note: 736372.1 for version / patchsets)

Create an OC4J container and deploy the callerInfo.ear file.

Create users en groups in the OID:
http://www.oracle.com/technology/sample_code/tech/java/codesnippet/security/jaznldap/UsingDAS.html

1. Configure Oracle Access Manager
1. Configure Oracle Access Manager Form-Based Authentication
2. Configure Oracle Access Manager Basic Authentication
3. Configure the Resource Type
4. Protect the Action URL

1.1 Configure Oracle Access Manager Form-Based Authentication
For Single Sign-On functionality, a form-based authentication scheme must protect the resources.

1.1.1 Create a Login Form
The login form can be a very simple HTML page with an FORM in the page
- The action of the form can be an bogus link (in this example /oam/access/test.html) but this must be the same as in the authentication scheme which is created later on.
- The userid and password can be chosen freely but these will also be used in the authentication sheme.

login1.html


<HTML>
<HEAD>
</HEAD>
<body>
<center>
<h1>User Login</h1>
<br>
<br>
<form name="myForm" action="/oam/access/test.html" method="post">
Username: <input type="text" name="userid" width="20"><br />
Password: <input type="password" name="password" width="20"><br />
<input type="submit" value="OK">
</form>
</body>
<html>


This login1.html file can be placed in $ORACLE_HOME/Apache/Apache/htdocs/public.

1.1.2 Define Form-Based Authentication in Policy Manager

Go to the Access Manager GUI: http://hostname:port/access/oblix and click the Access System Console link, login with the administrator account.

Access System Console > Access System Configuration > Authentication Management



Click button Add to create an Form Based Authentication.

Fill in the entries like this: 
(pay attention: 

Name:                  COREidSSOform (choose freely)
Description:           COREid SSO Form Based (choose freely)
Level:                 1 
Challenge Method:      Form 
Challenge Parameter:   form: /public/login1.html (see the location in step 1.1.1)
                       creds: userid password (use the same variable names as in the login1.html in step 1.1.1)
                       action: /oam/access/test.html (use the same action as in the login1.html in step 1.1.1)
                       passthrough: No 
SSL Required:          No 
Challenge Redirect Enabled: Yes



1.1.3 Configure the credential_mapping Plug-In for Form-Based Authentication

Now you have to configure the credential_mapping plugin_in for form-based authentication.

Click on tab plugin and click the button add.

First configure the credential_mapping (this is important, if password is the first plugin it will not work) select the plugin in the drop down box.

For Plugin Parameters:

obMappingBase="cn=users,dc=us,dc=oracle,dc=com",obMappingFilter="(&(&
(objectclass=inetorgperson)(uid=%userid%))(|(!
(obuseraccountcontrol=*)) (obuseraccountcontrol=ACTIVATED)))"


The value for uid must match the variable specified for user name in the login1.html form and in the creds part of the Form Based Authentication.

This also corresponds to the value of the coreid.name.attribute option in the Oracle Access Manager login module configuration in OC4J.

1.1.4 Configure the validate_password Plug-In for Form-Based Authentication

Now configure the validate_password plug-in select validate_password in the drop down box.

The Plugin Parameters:

obCredentialPassword="password"


The value for obCredentialPassword must match the variable specified for password in the login1.html form and in the creds part of the Form Based Authentication.

This also corresponds to the value of the coreid.password.attribute option in the Oracle Access Manager login module configuration.



1.1.5 Create Host Identifier
Access System Configuration > Host Identifiers

Click Add

Name:                  Hostname
Description:           (Choose freely)
Hostname variations:   hostname:port
                       ip address:port



1.2 Configure Oracle Access Manager Basic Authentication

You must configure the Oracle Access Manager basic authentication scheme, which must not be password protected (only credential_mapping plug-in). This scheme will protect two resources
- A URL assouciated with resource type (myresourcetype). The Oracle Access Manager 
  login module will use this URL to communicate to the Access Server through the 
  Access Manager SDK.
- The Action URL in the login1.html (/oam/access/test.html) page. This is so submitted form requests can be 
  intercepted by WebGate in order to enforce rules for submitted credentials.

However the application itself must be protected by form-based authentication (steps 1.1.1 and 1.1.2)
            
1.2.1 Define Basic Authentication in Policy Manager
Go to the Access Manager GUI: http://hostname:port/access/oblix and click the Access System Console link, login with the administrator account.

Access System Console > Access System Configuration > Authentication Management



Click button Add to create Basic Authentication.

Fill in the entries like this: 
(pay attention: 

Name:                  COREidSSONoPwd (choose freely)
Description:           Authentication without Password (choose freely)
Level:                 1 
Challenge Method:      Basic 
Challenge Parameter:   realm:NetPoint Basic Over LDAP
SSL Required:          No 
Challenge Redirect
Enabled:               Yes



1.2.2 Configure the credential_mapping Plug-In for Basic Authentication
Now you have to configure the credential_mapping plugin_in for form-based authentication.

Click on tab plugin and click the button add.

First configure the credential_mapping (this is important, if password is the first plugin it will not work) select the plugin in the drop down box.

For Plugin Parameters:

obMappingBase="cn=users,dc=us,dc=oracle,dc=com",obMappingFilter="(&(&
(objectclass=inetorgperson)(uid=%userid%))(|(!
(obuseraccountcontrol=*)) (obuseraccountcontrol=ACTIVATED)))"


The value for uid must match the variable specified for user name in the login1.html form and in the creds part of the Form Based Authentication.

This also corresponds to the value of the coreid.name.attribute option in the Oracle Access Manager login module configuration.



1.3 Configure the Resource Type

In Oracle Access Manager, a resource type describes the kind of resource to be protected, including its associated operations. Operations associated with a resource are tied to its type. You must configure an Oracle Access Manager resource type for your resource, and then protect your resource type, action URL, and application.

The Oracle Access Manager login module will need information for the resource type, as will be noted. OC4J uses the resource type to retrieve user information based on the Oracle Access Manager ObSSOCookie or the user name, using APIs of the Access Manager SDK.

1.3.1 Configure the Name and Operation of the Resource Type

Access System Console > Access System Configuration > Common Information Configuration > Resource Type Definitions

On the page that lists all resource types, choose to add a new resource type.



Make entries such as the following to define a new resource type:

Resource Name:        myresourcetype (choose freely)
Display Name:         myresourcetype (choose freely)
Resource Matching:    Case Insensitive 
Resource Operation:   MYRESOURCEOPERATRION (choose freely)

You can choose any names for the resource type and resource operation, but you must use the same names for the coreid.resource.type and coreid.resource.operation option values in the Oracle Access Manager login module configuration.

1.3.2 Configure and Protect the URL of the Configured Resource Type

After authentication, OC4J requires access to the user's roles in order to check for authorization. To enable this, you must set up an Oracle Access Manager "return action" that allows Oracle Access Manager to return the appropriate roles to OC4J for the user after successful authentication.

To set up the return action in Oracle Access Manager, navigate as follows:

Policy Manager > Create Policy Domain



Policy Manager > My Policy Domains > myresourcetype > tab Resources

Create Resource for myresource type 

Click button Add


Resource Type:      myresourcetype (step 3.1)
Host Identifiers:   hostname (step 1.5)
URL Prefix:         /myresourceurl (choose freely)
Description:        (choose freely)
Button Save

The URL prefix must start with a "/" and is the designated URL of the resource type. This must match the value of the coreid.resource.name option in the Oracle Access Manager login module configuration.

1.3.3 Configure the Return Action Attributes

After authentication, OC4J requires access to the user's roles in order to check for authorization. To enable this, you must set up an Oracle Access Manager "return action" that allows Oracle Access Manager to return the appropriate roles to OC4J for the user after successful authentication.

To set up the return action in Oracle Access Manager, navigate as follows:

Policy Manager > My Policy Domains > MyResourceType > Authorization Rules tab 

Click button Add

Name:                      MyResourceType (choose freely)
Description          (choose freely)
Enabled          Yes
Allow takes precedence     No

Click button Save



Under the Authorization Success tab section, add the following entries (continuing the preceding example using myresourcetype):

Return Type:      myresourcetype
Return Name:      myresourcetype
Return Attribute: ObMyGroups



1.4 Protect the Action URL

Create Resource for http type action url (/oam/access/test.html)

Policy Manager > My Policy Domains > myresourcetype > tab Resources

Create Resource for myresource type 

Click button Add

Resource Type        http
Host Identifiers  hostname (step 1.5)
URL Prefix       /oam/access/test.html action URL in login1.html 
Description             (choose freely)



IMPORTANT:
Do not forget to enable the policy:
My Policy Domains > MyResourceType > General

Click modify
Set Enable to Yes and click save.


Overview:


2. Configure OC4J with the Access Manager SDK
After that the SDK is installed the SDK needs be registered against the Access Server and the already installed WebGate. Pay attention the order of configuring is important. First the Access Server then the WebGate. 

Configure SDK against Access Server:

Go to the directory 
cd SDK_HOME/AccessServerSDK/oblix/tools/configureAccessGate


./configureAccessGate -i /SDK_HOME/AccessServerSDK/ -t AccessGate -w NAME_WEBGATE -m open -S -P PASSWORD -h ACCESS_SERVER_HOSTNAME -p ACCESS_SERVER_PORT -a ACCESS_SERVER_NAME


Output:

Preparing to connect to Access Server.  Please wait.
AccessGate installed Successfully.


Configure SDK against WebGate:


./configureAccessGate -i /SDK_HOME/AccessServerSDK/ -t AccessGate -w SDK_NAME -m open -S -P PASSWORD -h HOSTNAME_WEBGATE -p ACCESS_SERVER_PORT -a ACCESS_SERVER_NAME


Output:

Preparing to connect to Access Server.  Please wait.

AccessGate installed Successfully.


2.1 Configure the Access Manager SDK to Each OC4J Instance
You will need Oracle Access Manager SDK, one installation for each OC4J instance, on the same system as OC4J. The Access Manager SDK is required by OC4J at runtime to communicate with Access Server. OC4J must be given the Access Manager SDK location during startup (through the java.library.path property), so that it can initialize the SDK. Note this initialization occurs only if at least one application is using Oracle Access Manager as the security provider.

2.1.1 Copy jobaccess 
Copy the Oracle Access Manager file jobaccess.jar from the Access Manager SDK to the OC4J path. You will find this file in the SDK_HOME/AccessServerSDK/oblix/lib directory. Create the directory ORACLE_HOME/j2ee/home/lib/ext (if it does not already exist) and copy the jobaccess.jar to that directory.

2.2 Configure the Access Manager SDK Library Path for Each OC4J Instance

Configuring opmn.xml for Oracle Access Manager

Where OC4J is managed by OPMN, add settings to opmn.xml for Oracle HTTP Server and OC4J, as follows, when you use Oracle Access Manager:

1. Set the LD_ASSUME_KERNEL environment variable to the value "2.4.19".
2. Set the LD_LIBRARY_PATH environment variable to point to the AccessServerSDK library path.
3. Add the AccessServerSDK library path to java.library.path as a start parameter.

Then restart the OC4J instances.

Following is an opmn.xml example for the OC4J home instance. Repeat these settings for the OC4J_SOA instance and any other OC4J instances as appropriate:

<ias-component id="OC4J">
   <process-type id="oc4j_callerinfo" module-id="OC4J" status="enabled">
      <environment>
         <variable id="LD_ASSUME_KERNEL" value="2.4.19"/>
         <variable id="LD_LIBRARY_PATH"
                value="/SDK_HOME/AccessServerSDK/oblix/lib" append="true"/>
      </environment>
      <module-data>
         <category id="start-parameters">
            <data id="java-options" value="-server ...
                  -Djava.library.path=/SDK_HOME/AccessServerSDK/oblix/lib
                  ... />
         </category>
         ...
      </module-data>
      ...
   </process-type>
   ...
</ias-component>

3. Configure the CallerInfo Application

3.1 Protect the Application URL's in web.xml
The first step in protecting your application is to protect appropriate URLs or URL prefixes through settings in the web.xml file, using standard J2EE features.

These are the same URLs that you will you protect through Oracle Access Manager.

And add the following code:

    <login-config>
        <auth-method>BASIC</auth-method>
    </login-config>


3.2 Settings for Application Deployment
In Oracle Application Server 10.1.3.x implementations, Application Server Control does not yet support Oracle Access Manager as a security provider. When you deploy your application using the Application Server Control Console, choose the file-based provider. This will be overridden through the configuration steps documented in this blog.

3.3 Configure Oracle Access Manager SSO in orion-application.xml
To use Oracle Access Manager Single Sign-On as the authentication method for Web applications, set the auth-method attribute to "COREIDSSO" in the  element in the OC4J orion-application.xml files ($ORACLE_HOME/j2ee/CONTAINER_NAME/applications and in $ORACLE_HOME/j2ee/CONTAINER_NAME/application-deployments). You can do this as either a pre-deployment step (packaged in the EAR file) or a post-deployment step.


<jazn provider="XML" default-realm="jazn.com" jaas-mode="doAsPrivileged">
   <jazn-web-app auth-method="COREIDSSO"/>
</jazn>


You also need to add the mapping between de application role and the OID group:


<!-- mapping for realm "jazn.com" -->
<security-role-mapping name="sr_manager">
     <group name="managers" />
</security-role-mapping>
<security-role-mapping name="sr_developer">
    <group name="developers" />
</security-role-mapping>


3.4 Protect the Application URL's in Oracle Access Manager

Policy Manager > Create Policy Domain 
Name       : callerInfoB
Description: callerInfoB

Click button save



Tab Resources

Resource Type         http
Host Identifiers  hostname
URL Prefix       /callerInfo/callerInfoB
Description       caller info B (choose freely) 

Click button Save


Tab Authorisation Rules > SubTab General

Name                Everyone (choose freely)
Description       Everyone (choose freely)
Enabled       Yes
Allow takes precedence  No

Click Save



Tab Authorisation Rules > SubTab Allow Access

Role                    Any one
Click Save



Tab Default Rules > SubTab Authentication Rule > SubSubTab General

Name:                   Form Login
Description:            Form Login
Authentication Scheme:  COREidSSOform



Tab Default Rules > SubTab Authorization Expression > SubSubTab Expression

Select Authorization Rule:     Everyone 
Click button Add > Click button Save



IMPORTANT:
Do not forget to enable the policy:
My Policy Domains > CallerInfoB > General

Click modify
Set Enable to Yes and click save.



3.5 Configure the Oracle Access Manager Login Module

For a Web application, the OC4J implementation to support Oracle Access Manager requires the login module CoreIDLoginModule, supplied by Oracle. The following template shows the general form of the configuration, in the system-jazn-data.xml file.

$ORACLE_HOME/j2ee/CONTAINER_NAME/config/system-jazn-data.xml


<application>
  <name>callerinfo</name>
    <login-modules>
      <login-module>
         <class>oracle.security.jazn.login.module.coreid.CoreIDLoginModule</class>
           <control-flag>required</control-flag>
             <options>
               <option>
                 <name>coreid.password.attribute</name>
                 <value>password</value>
               </option>
               <option>
                 <name>coreid.name.attribute</name>
                 <value>userid</value>
               </option>
               <option>
                 <name>addAllRoles</name>
                 <value>true</value>
               </option>
               <option>
                 <name>coreid.resource.operation</name>
                 <value>MYRESOURCEOPERATION</value>
               </option>
               <option>
                 <name>coreid.resource.type</name>
                 <value>myresourcetype</value>
               </option>
               <option>
                 <name>coreid.resource.name</name>
                 <value>/myresourceurl</value>
               </option>
               </options>
            </login-module>
        </login-modules>
    </application>


3.6 Test the application

WebGate will intercept this request and will check the authentication scheme for this URL. The configuration shown earlier in this chapter will result in the user being prompted with the login.html login form from "Create a Login Form". Then the following sequence will take place:

1. WebGate will capture the user name and password from the login form and communicate to Access Server.
2. Access Server will communicate to Oracle Internet Directory (or other LDAP repository that you use).
3. After the user is authenticated, the Oracle Access Manager SSO token will be returned to WebGate.
4. WebGate will set the ObSSOCookie and pass the cookie and other HTTP headers to mod_oc4j, which will route the request to the appropriate OC4J instance.
5. OC4J will take the cookie and validate it, or retrieve roles for the user associated with this cookie from Access Server using the Access Manager SDK configured on OC4J.

http://hostname:port/callerInfo

Application:


Click on the link for managers: callerInfoB

Login screen (login1.html):

Login as manager/password


Application shows roles:


Refers:
http://download.oracle.com/docs/cd/B31017_01/web.1013/b28957/coreid.htm#BJEBJCCF

Did this post help you in any way can you please leave a comment? This will motivate me writing more posts.


WebGate version and patches, Netpoint/Oblix/CoreId/Oracle Access Manager
2009-03-23T15:08:00.005+01:00
It is possible to retrieve the version and patches for Oracle Access Manager components: 

For Access Server:
Login on the web interface:
http://hostname:portnumber/access/oblix

Click on Access System Console link, log in with an administrator user, click on the about link in the upper right corner and then on the button View System Info.

For WebGate
Look in the directory $ACCESS_INSTALL_DIR/access/oblix/config there is an file npXX_wg.txt. In this file there is an Release entry with the patch number.


Command line deployment war file on Oracle Application Server 10.1.2
2009-03-23T14:52:00.004+01:00
It is possible to deploy an war or ear file from the command line with an Oracle Application server 10.1.2.

Deploy war file:

$ORACLE_HOME/dcm/bin/dcmctl deployApplication -f filename.war -a "application name" -co oc4j_container -rc /contextroot


Deploy ear file:

$ORACLE_HOME/dcm/bin/dcmctl deployApplication -f filename.ear -a "application name" -co oc4j_container


The application will not be visible in the em console. An restart of the em console solves the problem.

emctl stop iasconsole
emctl start iasconsole


ErrorDocument not working for Oracle HTTP Server with OC4J
2009-03-20T17:04:00.006+01:00
When an application is deployed in an OC4J container sometimes ugly error messages are thrown in the browser (401 Unauthorised). Normally these messages can be formatted in $ORACLE_HOME/Apache/Apache/conf/httpd.conf with the ErrorDocument feature. But there is a bug in Oracle HTTP Server. This can be solved by adding the following line in $ORACLE_HOME/Apache/Apache/conf/mod_oc4j.conf


<IfModule mod_oc4j.c>
  Oc4jUseOHSErrors on
</IfModule>


And in httpd.conf:


ErrorDocument 401 "You are not authorised to view this page.


Metalink note: 560358.1


Display cookie in an Browser session
2009-03-19T16:56:00.002+01:00
It is possible to view the cookie in an browser. 

Type in the Address field: 

javascript:alert(document.cookie)



Obtain OHS version for Oracle Application Server
2009-03-19T10:01:00.004+01:00
Metalink Note 260449.1 describes how to obtain the OHS version of an Oracle Application Server.


$ORACLE_BASE/oraInventory/Components/oracle.apache.apache/directory-with-version



bulkdelete OID entry with child leaves
2009-03-11T18:15:00.003+01:00
There is a script bulkdelete which can be used in the Oracle Application Server Infrastructure $ORACLE_HOME/ldap/bin

execute:

bulkdelete connect=ORACLE_SID basedn="search base"

Search base is de entry which must be delete.


OWSM manual installation
2009-02-17T12:06:00.005+01:00
Create Database user orawsm:
$INSTALL_DIR/install/soa_schemas/irca/sql/owsm

sqlplus / as sysdba
@createuser.sql  
@loaddata.sql

$ORACLE_HOME/owsm/bin/coresv.properties 

cd $ORACLE_HOME/owsm/bin
wsmadmin.sh dataloadConfigure
wsmadmin.sh dataload

$ORACLE_HOME/owsm/bin/wsmadmin.sh deploy coreman
$ORACLE_HOME/owsm/bin/wsmadmin.sh deploy gateway
$ORACLE_HOME/owsm/bin/wsmadmin.sh deploy policymanager
$ORACLE_HOME/owsm/bin/wsmadmin.sh deploy control


SSO Server Inactivity Timeout Configuration
2009-02-04T09:40:00.005+01:00
SSO Server Inactivity Timeout Configuration can be achieved by running an sql script in the metadata repository:

Go to the directory:
$ORACLE_HOME/sso/admin/plsql/sso

Open an SQL*Plus session as the orasso user (password can be found in oidadmin)
sqlplus orasso

Execute the sql script:
@ssogito.sql

Enter an domain for the cookie
Enter an inactivity_period


SQL> @ssogito.sql
=============================================
SSO Server Inactivity Timeout Configuration
=============================================
Timeout          : ENABLED
Cookie name      : OSSO_USER_CTX
Cookie domain    :
Inactivity period: xx minutes
Encryption key   : xxxxxxxxxxxxxxxxxx
Note: timeout cookie domain will be defaulted
to the SSO Server hostname
-------------------------------------------
To disable timeout set inactivity period
to 0, (zero)
Press return key twice if you do not want
to change timeout configuration.

PL/SQL procedure successfully completed.

Enter value for timeout_cookie_domain: .xxxx.xx
Enter value for inactivity_period: xx
Timeout                  : ENABLED
New timeout cookie domain: .xxxx.xx
New inactivity period    : xx minutes

PL/SQL procedure successfully completed.

No errors.


Restart HTTP_SERVER en OC4J_SECURITY 

opmnctl restartproc process-type=HTTP_Server
opmnctl restartproc process-type=OC4J_SECURITY


In the portal the mod_osso.conf has to be changed:
OssoIdleTimeout off change to OsseIdleTimeout on.

Restart HTTP_SERVER

opmnctl restartproc process-type=HTTP_Server


-


Import private key and certificate in Java keystore
2009-02-04T09:13:00.004+01:00
It is not possible to import an existing private key for which an certificate is already made. But with the description on this website http://www.agentbob.info/agentbob/79-AB.html it is possible to do this.

An summary of the contents:

Convert key and certificate to PEM with openssl

openssl pkcs8 -topk8 -nocrypt -in key.pem -inform PEM -out key.der -outform DER
openssl x509 -in cert.pem -inform PEM -out cert.der -outform DER


With an java program ImportKey it is possible to create an new keystore with the private key in it. (java 1.5):

Set the classpath to the directory where ImportKey is placed.


java ImportKey key.der cert.der
Using keystore-file : /home/user/keystore.ImportKey
One certificate, no chain.
Key and certificate stored.
Alias:importkey  Password:importkey


This program creates an keystore named: /home/user/keystore.ImportKey. Now everything can be changed using the keytool:

1. Rename keystore: with an mv or an cp
2. Change password keystore: 

keytool -keystore  –storepasswd 
Enter keystore password:  
New keystore password: 
Re-enter new keystore password: 


3. Change password certificate: 

keytool -keypasswd -keypass importkey -new  -alias importkey -keystore 


4. Change alias importkey

keytool -keystore  -keyclone -alias importkey -dest 
Enter keystore password:  
Enter key password for 
        (RETURN if same as for )


5. Delete old alias:

keytool -keystore  -delete -alias importkey


Java code ImportKey program:


import java.security.*;
import java.io.IOException;
import java.io.InputStream;
import java.io.FileInputStream;
import java.io.DataInputStream;
import java.io.ByteArrayInputStream;
import java.io.FileOutputStream;
import java.security.spec.*;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;
import java.util.Collection;
import java.util.Iterator;

/**
 * ImportKey.java
 *
 * This class imports a key and a certificate into a keystore
 * ($home/keystore.ImportKey). If the keystore is
 * already present, it is simply deleted. Both the key and the
 * certificate file must be in DER-format. The key must be
 * encoded with PKCS#8-format. The certificate must be
 * encoded in X.509-format.

 *
 * Key format:

 * openssl pkcs8 -topk8 -nocrypt -in YOUR.KEY -out YOUR.KEY.der
 * -outform der

 * Format of the certificate:

 * openssl x509 -in YOUR.CERT -out YOUR.CERT.der -outform
 * der

 * Import key and certificate:

 * java comu.ImportKey YOUR.KEY.der YOUR.CERT.der


 *
 * Caution: the old keystore.ImportKey-file is
 * deleted and replaced with a keystore only containing YOUR.KEY
 * and YOUR.CERT. The keystore and the key has no password; 
 * they can be set by the keytool -keypasswd-command for setting
 * the key password, and the keytool -storepasswd-command to set
 * the keystore password.
 * 
The key and the certificate is stored under the alias
 * importkey; to change this, use keytool -keyclone.
 *
 * Created: Fri Apr 13 18:15:07 2001
 * Updated: Fri Apr 19 11:03:00 2002
 *
 * @author Joachim Karrer, Jens Carlberg
 * @version 1.1
 **/
public class ImportKey  {
    
    /**
     * 
Creates an InputStream from a file, and fills it with the complete
     * file. Thus, available() on the returned InputStream will return the
     * full number of bytes the file contains

     * @param fname The filename
     * @return The filled InputStream
     * @exception IOException, if the Streams couldn't be created.
     **/
    private static InputStream fullStream ( String fname ) throws IOException {
        FileInputStream fis = new FileInputStream(fname);
        DataInputStream dis = new DataInputStream(fis);
        byte[] bytes = new byte[dis.available()];
        dis.readFully(bytes);
        ByteArrayInputStream bais = new ByteArrayInputStream(bytes);
        return bais;
    }
        
    /**
     * Takes two file names for a key and the certificate for the key, 
     * and imports those into a keystore. Optionally it takes an alias
     * for the key.
     * 
The first argument is the filename for the key. The key should be
     * in PKCS8-format.
     * 
The second argument is the filename for the certificate for the key.
     * 
If a third argument is given it is used as the alias. If missing,
     * the key is imported with the alias importkey
     * 
The name of the keystore file can be controlled by setting
     * the keystore property (java -Dkeystore=mykeystore). If no name
     * is given, the file is named keystore.ImportKey
     * and placed in your home directory.
     * @param args [0] Name of the key file, [1] Name of the certificate file
     * [2] Alias for the key.
     **/
    public static void main ( String args[]) {
        
        // change this if you want another password by default
        String keypass = "importkey";
        
        // change this if you want another alias by default
        String defaultalias = "importkey";

        // change this if you want another keystorefile by default
        String keystorename = System.getProperty("keystore");

        if (keystorename == null)
            keystorename = System.getProperty("user.home")+
                System.getProperty("file.separator")+
                "keystore.ImportKey"; // especially this ;-)


        // parsing command line input
        String keyfile = "";
        String certfile = "";
        if (args.length < 2 || args.length>3) {
            System.out.println("Usage: java comu.ImportKey keyfile certfile [alias]");
            System.exit(0);
        } else {
            keyfile = args[0];
            certfile = args[1];
            if (args.length>2)
                defaultalias = args[2];
        }

        try {
            // initializing and clearing keystore 
            KeyStore ks = KeyStore.getInstance("JKS", "SUN");
            ks.load( null , keypass.toCharArray());
            System.out.println("Using keystore-file : "+keystorename);
            ks.store(new FileOutputStream ( keystorename  ),
                    keypass.toCharArray());
            ks.load(new FileInputStream ( keystorename ),
                    keypass.toCharArray());

            // loading Key
            InputStream fl = fullStream (keyfile);
            byte[] key = new byte[fl.available()];
            KeyFactory kf = KeyFactory.getInstance("RSA");
            fl.read ( key, 0, fl.available() );
            fl.close();
            PKCS8EncodedKeySpec keysp = new PKCS8EncodedKeySpec ( key );
            PrivateKey ff = kf.generatePrivate (keysp);

            // loading CertificateChain
            CertificateFactory cf = CertificateFactory.getInstance("X.509");
            InputStream certstream = fullStream (certfile);

            Collection c = cf.generateCertificates(certstream) ;
            Certificate[] certs = new Certificate[c.toArray().length];

            if (c.size() == 1) {
                certstream = fullStream (certfile);
                System.out.println("One certificate, no chain.");
                Certificate cert = cf.generateCertificate(certstream) ;
                certs[0] = cert;
            } else {
                System.out.println("Certificate chain length: "+c.size());
                certs = (Certificate[])c.toArray();
            }

            // storing keystore
            ks.setKeyEntry(defaultalias, ff, 
                           keypass.toCharArray(),
                           certs );
            System.out.println ("Key and certificate stored.");
            System.out.println ("Alias:"+defaultalias+"  Password:"+keypass);
            ks.store(new FileOutputStream ( keystorename ),
                     keypass.toCharArray());
        } catch (Exception ex) {
            ex.printStackTrace();
        }
    }

}// KeyStore



Create OC4J Groups and Containers from command line.
2008-11-21T15:23:00.008+01:00
Create OC4J Groups and Containers from command line.

$ORACLE_HOME/bin/createinstance –instanceName oc4j_foo -groupName foo_group
$ORACLE_HOME/bin/createinstance –instanceName BLUE –groupName COLORS


Script:
Create OC4J containers / OC4J Groups:
#!/bin/sh
if [ $# != 3 ];
then
  echo "Start op: $0   "
  echo "If there is no group create the container for the default group."
  exit 1
fi

export ENV=${1}
export OC4J_CONTAINER=${2}
export OC4J_GROUP=${3}

. ~/${ENV}
$ORACLE_HOME/bin/createinstance -instanceName ${OC4J_CONTAINER} -groupName ${OC4J_GROUP}

opmnctl startproc process-type=${OC4J_CONTAINER}

exit 0

Links:
http://www.oracle.com/technology/tech/java/oc4j/1013/whitepapers/OC4J-FAQ-MGT-10131.pdf


Change oc4jadmin password
2008-11-21T15:17:00.003+01:00
Change the password for the oc4jadmin user:

The j2ee/home/jazn.jar utility can be used to change the password for the oc4jadmin user from the command line.
cd j2ee/home
java –jar jazn.jar –setpassword jazn.com oc4jadmin  


The password change can be immediately verified using jazn.jar
java -jar jazn.jar -checkpasswd jazn.com oc4jadmin -pw 


Unsuccessful verification of user/password pair.
java -jar jazn.jar -checkpasswd jazn.com oc4jadmin -pw 

Successful verification of user/password pair.


Shell scripts with admin.jar
2008-11-21T14:54:00.012+01:00
I created an check uri shell script to test if the URI is correct:
#!/bin/sh
if [ $# != 2 ];
then
  echo "Start: $0  "
  echo "Single instance: (deployer:oc4j:opmn://HOSTNAME:OPMN_REQUEST_PORT/OC4J_CONTAINER)"
  echo "Cluster: (deployer:cluster:opmn://HOSTNAME:OPMN_REQUEST_PORT/OC4J_CONTAINER)"
  exit 1
fi

export URI=${1}
export PASSWORD=${2}


echo " ... checking the URI ..."
$JAVA_HOME/bin/java -Djava.util.logging.config.file=logging.properties -jar  $ORACLE_HOME/j2ee/home/admin_client.jar ${URI} oc4jadmin ${PASSWORD} -validateURI
exit 0


Add Shared Libraries:
#!/bin/sh
if [ $# != 6 ];
then
  echo "Start op: $0      "
  echo "Example: "
  echo "Single instance uri    : deployer:oc4j:opmn://HOSTNAME:PORT/CONTAINER_NAME"
  echo "Cluster uri            : deployer:cluster:opmn://HOSTNAME:PORT/CONTAINER_NAME"
  echo "Library sources        : 'path/source1.jar path/source2.jar'"
  exit 1
fi

export ENV=${1}
export URI=${2}
export PASSWORD=${3}
export LIBRARY_NAME=${4}
export LIBRARY_VERSION=${5}
export LIBRARY_SOURCE=${6}

. ~/${ENV}

check_uri ${ENV} ${URI} ${PASSWORD}
if [ $? == 0 ];
then
  $JAVA_HOME/bin/java -Djava.util.logging.config.file=logging.properties -jar $ORACLE_HOME/j2ee/home/admin_client.jar ${URI} oc4jadmin ${PASSWORD} -publishSharedLibrary -name ${LIBRARY_NAME} -version ${LIBRARY_VERSION} -installCodeSources ${LIBRARY_SOURCE}
fi

exit 0


Script to create datasources/connection pools:
#!/bin/sh
if [ $# != 8 ];
then
  echo "Start op: $0        "
  echo "Example: "
  echo "Single instance uri    : deployer:oc4j:opmn://HOSTNAME:PORT/CONTAINER_NAME"
  echo "Cluster uri            : deployer:cluster:opmn://HOSTNAME:PORT/CONTAINER_NAME"
  echo "Database connect string: DATABASE_HOSTNAME:PORT:ORACLE_SID"
  exit 1
fi

export ENV=${1}
export URI=${2}
export PASSWORD=${3}
export CONNECTION_POOL=${4}
export DATASOURCE=${5}
export DB=${6}
export DB_USER=${7}
export DB_PASSWORD=${8}


. ~/${ENV}

check_uri ${ENV} ${URI} ${PASSWORD}
if [ $? == 0 ];
then
  echo " ...create connection pool ${CONNECTION_POOL} ..."
  $JAVA_HOME/bin/java -Djava.util.logging.config.file=logging.properties -jar $ORACLE_HOME/j2ee/home/admin_client.jar ${URI} oc4jadmin ${PASSWORD}  -addDataSourceConnectionPool -name ${CONNECTION_POOL} -factoryClass oracle.jdbc.pool.OracleDataSource -dbUser ${DB_USER} -dbPassword ${DB_PASSWORD} -url jdbc:oracle:thin:@${DB}

  echo " ...create managed data source ${DATASOURCE} ..."
  $JAVA_HOME/bin/java -Djava.util.logging.config.file=logging.properties -jar $ORACLE_HOME/j2ee/home/admin_client.jar ${URI} oc4jadmin ${PASSWORD}  -addManagedDataSource -name ${DATASOURCE} -jndiLocation jdbc/${CONNECTION_POOL} -connectionPoolName ${CONNECTION_POOL}

  echo " ... Test managed data source ${DATASOURCE} ..."
  $JAVA_HOME/bin/java -Djava.util.logging.config.file=logging.properties -jar $ORACLE_HOME/j2ee/home/admin_client.jar ${URI} oc4jadmin ${PASSWORD}  -testDataSourceConnectionPool -name ${CONNECTION_POOL} -sqlStatement "select * from dual"
fi

exit 0



Check if OID is accessible from database
2008-11-20T14:38:00.002+01:00
With this SQL script it is possible to check if the OID is accessible from the database server:
set serverout on
DECLARE
retval PLS_INTEGER;
my_session DBMS_LDAP.session;
BEGIN
my_session := DBMS_LDAP.init('HOSTNAME','PORT');
retval := DBMS_LDAP.open_ssl(my_session, null, null, 1);
dbms_output.put_line('open_ssl returns: '|| to_char(retval));
retval := DBMS_LDAP.simple_bind_s(my_session,'cn=orcladmin','');
dbms_output.put_line('simple_bind_s returns: '|| to_char(retval));
retval := DBMS_LDAP.unbind_s(my_session);
dbms_output.put_line('unbind_s returns: '|| to_char(retval));
END;
/



Unlock account orcladmin
2008-11-18T09:30:00.005+01:00
Unlock the orcladmin account when it is locked:
LDAP: ERROR CODE 49 - PASSWORD POLICY ERROR :9000: GSL_PWDEXPIRED_EXCP 
cd $ORACLE_HOME/bin
./oidpasswd connect={METADATAREPOSITORY SID} unlock_su_acct=true

Output:
OID DB user password:
OID super user account unlocked successfully.

This unlocks the OID Super User account, cn=orcladmin ONLY. Do not confuse this account
with the default realm administrator "cn=orcladmin,cn=users,dc=xxxxx,dc=yyyyy". They are 
two separate accounts. After resetting the orcladmin super user account, you will still 
not be able to login to SSO using the orcladmin account until you perform the next step.
 



Shell script to clean up log files Oracle Application Server
2008-11-17T10:13:00.007+01:00
This is an example of a shell script to clean up log files in an Oracle Application Server. Use at your own risk :)

#!/bin/sh
#################################################################
# Author   : Arjan Goos                                         #
# Date     : 03-06-2008                                         #
#                                                               #
# Purpose  : Clean log files Oracle Application Server          #
#                                                               #
# History  :                                                    #
# --------------------------------------------------------------#
# Date         |Author      |Description                        #
# --------------------------------------------------------------#
# 03-06-2008   |Arjan Goos  |Creation                           #
#                                                               #
#################################################################
SCRIPT=`basename $0`
SCRIPT_PATH="/oracle/scripts/as/clean_log"
HOST_NAME=`hostname`

DATE=`date "+%d-%m-%y"`
STATUS_FILE=$SCRIPT_PATH/log/status-${SCRIPT}_${HOST_NAME}_${DATE}.txt

MAILADRES="test@test.nl"
DU_TOTAL=0

mail_logfile()
{
 mail -s "Clean log files $HOST_NAME - Oracle home: $ORACLE_HOME - ( $DATE )" $MAILADRES < $STATUS_FILE
}

disk_usages_dir()
{
  DUH=`du -hc | grep -i total | awk -F"total" '{ print $1 }'`
  DIR=`pwd`
}

disk_usages_home()
{
  DU_HOME=`du -c | grep -i total | awk -F"total" '{ print $1 }'`
  DU_HOME=`expr $DU_HOME / 1024`
}

clean_apache()
{
  echo "            Start Clean Up Apache logging"                   >> $STATUS_FILE
  echo ""                                                            >> $STATUS_FILE
  cd $ORACLE_HOME/Apache/Apache/logs
  disk_usages_dir
  echo "                Disk Usages in $DIR before $SCRIPT: $DUH."   >> $STATUS_FILE
  FILE="*_log.*"
  echo "                These log files are removed:"                >> $STATUS_FILE
  for LOG_FILE in `find ./ -name "$FILE" -mtime +"$TIME" -print 2>&1`
  do
    echo "                $LOG_FILE"                                 >> $STATUS_FILE
    rm $LOG_FILE
  done
  disk_usages_dir
  echo "                Disk Usages in $DIR after $SCRIPT:  $DUH."   >> $STATUS_FILE
  echo ""                                                            >> $STATUS_FILE
  echo "            Ready Clean Up Apache logging"                   >> $STATUS_FILE
  echo ""                                                            >> $STATUS_FILE
}

clean_application_server_control()
{
  echo "            Start Clean Up Application Server Control"       >> $STATUS_FILE
  echo ""                                                            >> $STATUS_FILE
  cd $ORACLE_HOME/opmn/logs                                          >> $STATUS_FILE
  disk_usages_dir
  echo "                Disk Usages in $DIR before $SCRIPT: $DUH."   >> $STATUS_FILE
  # Rotate log files
  FILE="*.log*"
  rotate_files
  # Delete old rotated log files
  delete_files
  disk_usages_dir
  echo "                Disk Usages in $DIR after $SCRIPT:  $DUH."   >> $STATUS_FILE
  echo ""                                                            >> $STATUS_FILE
  echo "            Ready Clean Up Application Server Control"       >> $STATUS_FILE
  echo ""                                                            >> $STATUS_FILE
}

clean_oc4j_instances()
{
  echo "            Start Clean Up OC4J Instances"                   >> $STATUS_FILE
  echo ""                                                            >> $STATUS_FILE
  cd $ORACLE_HOME/j2ee                                               >> $STATUS_FILE
  # Get all oc4j_instances from the opmn.xml
  for OC4J_INSTANCE in `grep -i module-id=\"OC4J\" $ORACLE_HOME/opmn/conf/opmn.xml | awk -F'<process-type id=' '{ print $2 }' | awk -F" " '{ print $1 }' | sed 's/\"//g'`
  do
    echo "              Start OC4J_CONTAINER: $OC4J_INSTANCE."       >> $STATUS_FILE
    cd $OC4J_INSTANCE/log
    disk_usages_dir
    echo "                Disk Usages in $DIR before $SCRIPT: $DUH." >> $STATUS_FILE
    # Rotate log files
    FILE="*.log"
    rotate_files
    # Delete old rotated log files
    delete_files
    disk_usages_dir
    echo "                Disk Usages in $DIR after $SCRIPT:  $DUH." >> $STATUS_FILE
    cd - > /dev/null
    echo "              Ready OC4J_CONTAINER: $OC4J_INSTANCE."       >> $STATUS_FILE
    echo ""                                                          >> $STATUS_FILE
  done
  echo ""                                                            >> $STATUS_FILE
  echo "            Ready Clean Up OC4J Instances"                   >> $STATUS_FILE
  echo ""                                                            >> $STATUS_FILE
}

clean_webcache()
{
  if [ -d $ORACLE_HOME/webcache/log ];
  then
    echo "          Start Clean Up WebCache"                         >> $STATUS_FILE
    echo ""                                                          >> $STATUS_FILE
    cd $ORACLE_HOME/webcache/log                                     >> $STATUS_FILE
    disk_usages_dir
    echo "              Disk Usages in $DIR before $SCRIPT: $DUH."   >> $STATUS_FILE
    # Rotate log files
    FILE="*_log"
    rotate_files
    # Delete old rotated log files
    delete_files
    disk_usages_dir
    echo "              Disk Usages in $DIR after $SCRIPT:  $DUH."   >> $STATUS_FILE
    echo ""                                                          >> $STATUS_FILE
    echo "          Ready Clean Up WebCache"                         >> $STATUS_FILE
    echo ""                                                          >> $STATUS_FILE
  fi
}

rotate_files()
{
  #This function rotates the log files when the file is bigger than $ROTATE_SIZE
  echo "                These files are rotated: " >> $STATUS_FILE
  for LOG_FILE in `find ./ -name "$FILE" -size +"$ROTATE_SIZE" -print | grep -v "archive" 2>&1`
  do
    #echo "cp $LOG_FILE $LOG_FILE.archive.$DATE"
    echo "                $LOG_FILE to $LOG_FILE.archive.$DATE"      >> $STATUS_FILE
    cp $LOG_FILE $LOG_FILE.archive.$DATE
    cp /dev/null $LOG_FILE
  done
  echo ""                                                            >> $STATUS_FILE
}

delete_files()
{
  #This function removes the rotated log files when the file is older than $TIME
  FILE="*.archive.*"
  echo "                These archive files are removed:"            >> $STATUS_FILE
  for LOG_FILE in `find ./ -name "$FILE" -mtime +"$TIME" -print 2>&1`
  do
    echo "                   $LOG_FILE"                              >> $STATUS_FILE
    rm $LOG_FILE
  done
  echo "" >> $STATUS_FILE
}

find_large_log_files()
{
  cd $ORACLE_HOME
  echo ""                                                                                                                         >> $STATUS_FILE
  echo "             Overview big remaining log files (manual action required):"                                                  >> $STATUS_FILE
  echo ""
  echo "             These *.log files are in the $ORACLE_HOME with a size larger than $ROTATE_SIZE and older than $TIME day(s)." >> $STATUS_FILE
  find ./ -name "*log*" -size +"2048k" -mtime +"$TIME" -exec ls -lh {} \; | awk '{ print "             " $9 "  size: " $5 }'      >> $STATUS_FILE
  echo ""                                                                                                                         >> $STATUS_FILE
}
cd $SCRIPT_PATH
#MAIN
if [ $# != 1 ];
then
  echo "Start op: $0 <files older than DATE>"
  exit 1
fi

#ORACLE_HOME=$1
TIME=$1
#Files bigger than 2 Mb are rotated
ROTATE_SIZE="2048k"
#ROTATE_SIZE="10k"

clear
echo "Start of the $SCRIPT on `date`: $HOST_NAME."       >> $STATUS_FILE
echo ""                                                  >> $STATUS_FILE

for ORACLE_HOME in `cat /etc/oratab | grep -v "^#" | grep -v "^agent" | awk -F":" '{ print $2 }'`
do
  if [ -n ${ORACLE_HOME} ];
  then
    echo "    Start Oracle Home: $ORACLE_HOME."          >> $STATUS_FILE
    cd $ORACLE_HOME
    disk_usages_home
    echo ""                                              >> $STATUS_FILE
    ### MAIN PROG
    ### Apache log
    clean_apache
    ### Application Server Control logs
    clean_application_server_control
    ### OC4J instances
    clean_oc4j_instances
    ### Webcache
    clean_webcache
    #TO_DO
    #application specific logging
    find_large_log_files
    echo ""                                              >> $STATUS_FILE
    echo "        Total Disk Usage $ORACLE_HOME before $SCRIPT    : $DU_HOME MB."  >> $STATUS_FILE
    DU_HOME_START=$DU_HOME
    disk_usages_home
    DU_HOME_STOP=$DU_HOME
    echo "        Total Disk Usage $ORACLE_HOME after $SCRIPT     : $DU_HOME MB."  >> $STATUS_FILE
    echo ""                                             >> $STATUS_FILE
    echo "        Total Cleared Disk Space $ORACLE_HOME by $SCRIPT:    `expr $DU_HOME_START - $DU_HOME_STOP` MB." >> $STATUS_FILE
    echo ""                                             >> $STATUS_FILE
    echo "    Ready Oracle Home: $ORACLE_HOME."         >> $STATUS_FILE
    echo ""                                             >> $STATUS_FILE
    echo ""                                             >> $STATUS_FILE
  fi
done

echo ""                                                 >> $STATUS_FILE
echo "Ready of the $SCRIPT on `date`"                   >> $STATUS_FILE
echo ""                                                 >> $STATUS_FILE
echo ""                                                 >> $STATUS_FILE
mail_logfile
exit 0



Error in BPELAdmin and BPELConsole
2008-11-17T08:58:00.004+01:00
An error occures when you try to access the BPELAdmin or BPELConsole: 
http://HOSTNAME:PORT/BPELConsole/default/index.jsp and 

Error:
[java.lang.NoSuchMethodException]
com.collaxa.cube.ejb.impl.FinderBean.tryLookupInstanceByReferenceId(java.lang.String, com.oracle.bpel.client.auth.DomainAuth)
http://HOSTNAME:PORT/BPELAdmin/domains.jsp

Error:
com.collaxa.cube.ejb.impl.FinderBean.tryLookupInstanceByReferenceId

On Oracle Metalink this error is solved: note: 471035.1
There has been a problem with the orabpel.ear file in some environments. The issue
can be verified by checking the size of the orabpel.ear files in the the following locations

$ORACLE_HOME/bpel/system/services/lib

and

$ORACLE_HOME/j2ee/oc4j_soa/applications 

If only one of them is of size 2530260 bytes, then you have hit upon the cause for this issue in your environment.

Solution
Copy the orabpel.ear from $ORACLE_HOME/bpel/system/services/lib (the one that is of size 2530260 bytes) to the location
$ORACLE_HOME/j2ee/oc4j_soa/applications (to replace the one that is not 2530260 bytes) and restart.


Designtime cache has not been initialized
2008-11-17T08:19:00.005+01:00
This is a generic error in the ESB Control GUI.

More information about this error can be found in the logging of the OC4J container in which the esb-dt application is deployed (default: $ORACLE_HOME/opmn/logs/default_group~oc4j_soa~default_group~1.log) or in the log.xml of the application esb-dt (default: $ORACLE_HOME/j2ee/oc4j_soa/log/oc4j_soa_default_group_1/oc4j/log.xml).

Reason 1:
The connection to the database can not be made:
Warning: Unable to set up connection factory for a resource adapter in esb-rt: Error creating a ResourceAdapter implementation class. Error creating a JavaBean of class 'oracle.tip.esb.server.bootstrap.RuntimeResourceAdapter: javax.resource.spi.ResourceAdapterInternalException: java.lang.RuntimeException: failed to get ESB_HOME: java.lang.NullPointerException

Check your datasources in the Application Server Control

Reason 2:
The dehydration store tables are not filled with the correct data. If an virtual hostname is used check if the hostname is accessible on the correct port number. 
There are several checks which can be executed:
ping hostname
telnet hostname port
nslookup ip address

There are two tables which must be checked: ORAESB.ESB_PARAMETERS and ORAESB.WF_AGENTS. I created an sql query that can be used:
set feedback off;
set heading off;
set pages 0;
set linesize 500;
select 'param_name: '||param_name, 'param_value: '||param_value from esb_parameter;
select 'queue_name: '||queue_name, 'name: '||name, 'tcf_jndi: '||tcf_jndi from wf_agents;
exit;
This should be the output:param_name: PROP_NAME_MONITOR_TOPIC_JNDI
param_value: ESBTopics/Topics/ESB_MONITOR

param_name: PROP_NAME_ERROR_XATCF_JNDI
param_value: OracleOJMS/XATCF

param_name: PROP_NAME_ERROR_RETRY_JNDI
param_value: ESBTopics/Topics/ESB_ERROR_RETRY

param_name: DT_OC4J_HTTP_PORT
param_value: VIRTUAL PORT NUMBER

param_name: PROP_NAME_CONTROL_TCF_JNDI
param_value: OracleOJMS/XATCF

param_name: PROP_NAME_DEFERRED_TOPIC_JNDI
param_value: ESBTopics/Topics/ESB_JAVA_DEFERRED

param_name: PROP_NAME_MONITOR_TCF_JNDI
param_value: OracleOJMS/TCF

param_name: PROP_NAME_ERROR_TOPIC_JNDI
param_value: ESBTopics/Topics/ESB_ERROR

param_name: PROP_NAME_INITIAL_CONTEXT_FACTORY
param_value: com.evermind.server.rmi.RMIInitialContextFactory

param_name: PROP_NAME_ERROR_TCF_JNDI
param_value: OracleOJMS/TCF

param_name: ACT_ID_RANGE
param_value: 400

param_name: PROP_NAME_CONTROL_TOPIC_JNDI
param_value: ESBTopics/Topics/ESB_CONTROL

param_name: PROP_NAME_DEFERRED_TCF_JNDI
param_value: OracleOJMS/TCF

param_name: DT_OC4J_HOST
param_value: VIRTUAL HOSTNAME

param_name: PROP_NAME_DEFERRED_XATCF_JNDI
param_value: OracleOJMS/XATCF

param_name: PROP_NAME_ERROR_RETRY_TCF_JNDI
param_value: OracleOJMS/XATCF

SQL> queue_name: ESBTopics/Topics/ESB_JAVA_DEFERRED
name: ESBTopics/Topics/ESB_JAVA_DEFERRED
tcf_jndi: OracleOJMS/XATCF

queue_name: ESBTopics/Topics/ESB_JAVA_DEFERRED
name: ESBTopics/Topics/ESB_JAVA_DEFERRED
tcf_jndi: OracleOJMS/XATCF


Reason 3:
Apache.commons.logging must be removed from the orion-application.xml

In the file: $ORACLE_HOME/j2ee/oc4j_soa/application-deployments/esb-dt/orion-application.xml and in the file $ORACLE_HOME/j2ee/oc4j_soa/applications/esb-dt/META-INF/orion-application.xml a line must be added:
<remove-inherited name="apache.commons.logging"/>
 After this change the container must be restarted. opmnctl restartproc process-type=oc4j_soa



Rename system0 ESB system
2008-11-17T08:09:00.003+01:00
When you create an ESB system in the GUI ESB Controle this system has the default name system0. This can be changed by clicking on this name.




Export/Import Portal
2008-11-14T13:05:00.019+01:00
Export Existing Portal Page Groups:
First an export must be prepared in GUI of Portal, click on one of the login links to login with the portal user:
http://{HOSTNAME}:{PORT}/portal/page/portal

Click on the link navigator:

Click on the link export of every page group you want to export. In my case Export_portal_test

If this is the first page group you want to export you can make a new export set, if this is not the first page group you can add the page group to an existing page group.
Click on the next button:

Choose if you want to export extern objects, if you want this, select the objects and click the button Add to transportset.
When this is the only page group you want to export you can click the button Export Now. If you want to export more page groups you can save the export set for later use (button Save For Later).

Now you see a screen with a link to the log file of the process making the export ready. This export fills a couple of tables with information about your page groups. An script is generated that can be used to make a database export of these tables.

Copy the contents of this script to file on a linux server and make this file executable chmod 700 exp_portal.sh

Now we can make an export of the portal tables which contain the page group export information. The Oracle SID is the database which hosts the portal metadata repository. First set the environment variables of the database:
. oraenv
ORACLE_SID = [oracle] ? [type the ORACLE SID]
./exp_portal.sh -mode export -s portal -p xxxxxxx -c $ORACLE_SID -d portal_dump.dmp

The portal password can be found in the OID. This script creates an database dump file: portal_dump.dmp. This file can be imported in another portal metadata repository database.

Import Portal Page Groups:
Copy the export script (created by portal) and the dump file which is created during execution of the export script to the database server which hosts the portal metadata repository where the page group should be imported to.

Execute the script to import the database dump in the other metadata repository like this: . oraenv
ORACLE_SID = [oracle] ? [type the ORACLE SID]
./exp_portal.sh -mode import -s portal -p xxxxxx -pu portal -pp yyyyy -company none -c $ORACLE_SID -d portal_dump.dmp

The first password (xxxxxx) is for the portal user in the database, the second password (yyyyy)is from the portal user this password is given during installation of the Portal Application Server (same as orcladmin). 

Now we can process the page group export in the portal. Log in on the portal builder click on one of the login links to login with the portal user:
http://{HOSTNAME}:{PORT}/portal/page/portal

Click on the tab Administer:

Now you can Browse Transport Sets in the portlet: Export/Import Transport Set there is a small button next to the import button:

Select the transport set you want to import and click on the button Import.

It is also possible to do it with a shell script: $ORACLE_HOME/portal/admin/plsql/wwu/opeasst.csh


For more information:
http://download-uk.oracle.com/docs/cd/B10464_05/portal.904/b13675/cg_imex.htm#i1022009

metalink note: 306785.1


Change default password bpeladmin: Oracle BPELAdmin (10.1.3.3)
2008-11-14T12:10:00.009+01:00
Go to the Application Server Enterprise manager and login with oc4jadmin user. Click on  the container where the orabpel application is deployed in my case oc4j_soa:

Click on the Administration link:

Click on the “Go To” icon behind Security Providers:

Click on the button Instance Level Security:

Click on the link Realms and on the link under users:

Click on the link bpeladmin:

Change the passwords and click on the Apply button:



Change default password admin OWSM: Oracle Web Service Manager (10.1.3.3):
2008-11-14T11:20:00.010+01:00
There is no GUI availible to change passwords of the Oracle Web Service Manager
Change the file manageUserGroups.properties first make a copy:
cd $ORACLE_HOME/owsm/bin
cp manageUserGroups.properties manageUserGroups.properties.org
vi manageUserGroups.properties

Contents of the file:

#============== Recommendation =======================
#Since all passwords property values, db_password, user_password
#are in clear text, for security reason, we recommend those values
#be deleted right after the use of command-line user/group management
#tool (manageusergroups.xml) and not be kept in this file.

#============== Provide your Database Connection Properties below
# Sample DB Connection Values
#db_url=jdbc:oracle:thin:@//{HOSTNAME_DATABASE}:{PORT}/{ORACLE_SID}
#db_driver=oracle.jdbc.driver.OracleDriver
#db_user=ORAWSM
#db_password=xxxxxxxxxxxxxxxxxxxxxxxx

db_url=jdbc:oracle:thin:@//{HOSTNAME_DATABASE}:{PORT}/{ORACLE_SID}
db_driver=oracle.jdbc.driver.OracleDriver
db_user=ORAWSM
db_password=xxxxxxxxxxxxxxxxxxxxxxxx

#============== User Parameters
# Sample User Values
#user_id=ctang
#user_name=Administrator
#user_password=mypasswrod
#user_email=admin@admin.com

#user_id=
#user_name=
#user_password=
#user_email=

user_id=admin
user_name=admin user
user_password={PASSWORD}
user_email=wsmadmin@xxxx.xxx

group_id=su1-grp
group_desc=super user group

#============== Group Parameters
# Sample Group Values
#group_id=IT-INFR
#group_desc=IT Infrastructure

#group_id=
#group_desc=

Change the {PASSWORD} value with the new password.

Remove the old admin user and the group to which the user belongs

cd $ORACLE_HOME/owsm/bin
./wsmadmin.sh manageUserGroups deleteUserGroup

Output:

Buildfile: $ORACLE_HOME/owsm/bin/../scripts/manageusergroups.xml
set-classpath-oracle:
     [echo] Setting Oracle Classpath

manage-del-user-group:
     [java] SUCCESS : Mapping between user "admin" and Group "su1-grp" successfully deleted from database.

BUILD SUCCESSFUL
Total time: 1 second

Delete the user:

./wsmadmin.sh manageUserGroups deleteUser

Output:

Buildfile: $ORACLE_HOME/owsm/bin/../scripts/manageusergroups.xml

set-classpath-oracle:
     [echo] Setting Oracle Classpath

manage-del-user:
     [java] SUCCESS : User "admin" successfully deleted from database.

BUILD SUCCESSFUL
Total time: 1 second

Create new user:
cd $ORACLE_HOME/owsm/bin
./wsmadmin.sh manageUserGroups addUser

Output:

Buildfile: $ORACLE_HOME/owsm/bin/../scripts/manageusergroups.xml

set-classpath-oracle:
     [echo] Setting Oracle Classpath

manage-add-user:
     [java] SUCCESS : User "admin" successfully added into database.

BUILD SUCCESSFUL
Total time: 1 second

Create an usergroup and add the admin user to this group.
./wsmadmin.sh manageUserGroups addUserGroup

Output:

Buildfile: $ORACLE_HOME/owsm/bin/../scripts/manageusergroups.xml

set-classpath-oracle:
     [echo] Setting Oracle Classpath

manage-add-user-group:
     [java] SUCCESS : Mapping between user "admin" and group "su1-grp" successfully added into the database.

BUILD SUCCESSFUL
Total time: 1 second

For more information Metalink note: 428513.1


Change Database Name and ID
2008-11-14T09:43:00.007+01:00
Changing the DBID and Database Name is possible since version 9.2.0.

The following steps describe how to change the DBID of a database. Optionally, you can change the database name as well.
1. Ensure that you have a recoverable whole database backup.
2. Ensure that the target database is mounted but not open, and that it was shut down consistently prior to mounting. 
For example:
SHUTDOWN IMMEDIATE;
STARTUP MOUNT;

3. Invoke the DBNEWID utility on the command line, specifying a valid user with the SYSDBA privilege. 
For example:
nid TARGET=SYS/oracle@test_db

To change the database name in addition to the DBID, specify the DBNAME parameter. This example changes the name to test_db2:
nid TARGET=SYS/oracle@test DBNAME=test_db2

The DBNEWID utility performs validations in the headers of the datafiles and control files before attempting I/O to the files. If validation is successful, then DBNEWID prompts you to confirm the operation (unless you specify a log file, in which case it does not prompt), changes the DBID for each datafile (including offline normal and read-only datafiles), and then exits. The database is left mounted but is not yet usable. 
For example:
DBNEWID: Release 9.2.0.1.0
(c) Copyright 2002 Oracle Corporation.  All rights reserved.
Connected to database TEST_DB (DBID=3942195360)
Control Files in database:
/oracle/dbs/cf1.f
/oracle/dbs/cf2.f
Change database id of database SOLARIS? (Y/[N]) => y
   Proceeding with operation
   Datafile oracle/dbs/tbs_01.f - changed
   Datafile /oracle/dbs/tbs_02.f - changed
   Datafile /oracle/dbs/tbs_11.f - changed
   Datafile /oracle/dbs/tbs_12.f - changed
   Datafile /oracle/dbs/tbs_21.f - changed
New DBID for database TEST_DB is 3942196782.
All previous backups and archived redo logs for this database are unusable
Proceed to shutdown database and open with RESETLOGS option.
 DBNEWID - Database changed.

If validation is not successful, then DBNEWID terminates and leaves the target database intact. You can open the database, fix the error, and then either resume the DBNEWID operation or continue using the database without changing its DBID.
 
4. After DBNEWID successfully changes the DBID, shut down the database:

SHUTDOWN IMMEDIATE;

5. Mount the database. For example:
STARTUP MOUNT

6. Open the database in RESETLOGS mode and resume normal use. For example:
ALTER DATABASE OPEN RESETLOGS;

Make a new database backup. Because you reset the online redo logs, the old backups and archived logs are no longer usable in the current incarnation of the database.

Changing Only the Database Name

The following steps describe how to change the database name without changing the DBID.
1. Ensure that you have a recoverable whole database backup.
2. Ensure that the target database is mounted but not open, and that it was shut down
consistently prior to mounting. For example:
SHUTDOWN IMMEDIATE;
STARTUP MOUNT;

3. Invoke the utility on the command line, specifying a valid user with the SYSDBA privilege. You must specify both the DBNAME and SETNAME parameters. This example changes the name to test_db2:
nid TARGET=SYS/oracle@test_db DBNAME=test_db2 SETNAME=YES

DBNEWID performs validations in the headers of the control files (not the datafiles) before attempting I/O to the files. If validation is successful, then DBNEWID prompts for confirmation, changes the database name in the control files, and exits. After DBNEWID completes successfully, the database is left mounted but is not yet usable.
DBNEWID: Release 9.2.0.1.0
(c) Copyright 2002 Oracle Corporation.  All rights reserved.
Connected to database TEST_DB (DBID=3942196782)
Control Files in database:
/oracle/dbs/cf1.f
/oracle/dbs/cf2.f
Change database name of database TEST_DB to TEST_DB2? (Y/[N]) => Y

Proceeding with operation


Database name changed from TEST_DB to TEST_DB2 - database needs to be shutdown.

Modify parameter file and generate a new password file before restarting.
DBNEWID - Successfully changed database name

If validation is not successful, then DBNEWID terminates and leaves the target  database intact. You can open the database, fix the error, and then either resume the DBNEWID operation or continue using the database without changing the database name.
4. Shut down the database. For example:
SHUTDOWN IMMEDIATE;

5. Set the DB_NAME initialization parameter in the initialization parameter file to the new database name.
6. Create a new password file.
7. Start up the database and resume normal use. For example:
STARTUP;

Reference: http://download.oracle.com/docs/cd/B10500_01/server.920/a96652/ch14.htm