Quantcast
Channel: Oracle Trainings for Apps & Fusion DBA | RSS Feed
Viewing all 44 articles
Browse latest View live

Oracle Access Manager 11g is now certified with E-Business Suite (Apps) R12

$
0
0

.

If you are looking for Single Sign-On (SSO) solution with Oracle E-Business Suite R12 then you can now use Oracle Access Manager 11g .

 As of today (30 April 2011) there are three main Single Sign-On solution certified with EBusiness R12

  • Oracle Access Manager 11g (using OID 11g as user repository) – Integration via EBS Access Gate 1.1.0.0. 
    Follow metalink note “1309013.1  Integrating Oracle E-Business Suite with Oracle Access Manager 11g using Oracle E-Business Suite AccessGate”
  • Oracle Access Manager 10g (using OID 10g/11g as user repository) - Integration via EBS Access Gate 1.0.2.0
    Follow metalink note “975182.1  Integrating Oracle E-Business Suite with Oracle Access Manager 10g using Oracle E-Business Suite AccessGate”
  • Oracle AS 10g Single Single Sign-On (OSSO) – using OID 10g/11g as user repository and integration via mod_osso
    Follow metalink note “376811.1Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On”

Note: Oracle Internet Directory is mandatory for all three Single Sign-On solutions mentioned above.

I am going to cover OAM 11g integrationn with E-Business Suite in detail on this blog as well as in my book Oracle Identity and Access Manager 11g for Administrators . In mean time look for OAM 11g installation here , Oracle Internet Directory 11g installation here , steps on how to change OAM 11g’s Identity Store to Oracle Internet Directory here , and upgrading from OAM 11.1.1.3.0 to 11.1.1.3.2 here

Related Posts for Apps SSO/OID Integration


  1. 25 Things Apps DBA should know for Apps 11i/R12 Integration with OID/SSO
  2. Questions for Oracle Apps 11i & R12 Integration with 10g AS/SSO
  3. Oracle Single Sign-On Server for Apps DBA
  4. Clone Apps 11i/R12/12i integrated with SSO
  5. Notes/Docs to integrate Apps 11i with 10g AS Portal/OID/SSO
  6. Migrate Users to/from OID and Oracle Apps 11i/R12
  7. User created in Apps 11i/R12/12i not sync to OID
  8. Apps 11i/R12/12i Registration/Deregistration with OID/SSO : internals
  9. Error while running SSO registration on 11i : txkrun.pl -script=SetSSOReg
  10. How to Deregister SSO/OID from Oracle Apps 11i/R12/12i
  11. Error adding new User (11i) – unable to call fnd_ldap _wrapper .create_user
  12. Unable to call fnd_ldap_wrapper . create_user / update_user ORA-20001
  13. Oracle Access Manager 11g is now certified with E-Business Suite (Apps) R12
  14. Integrate Oracle Apps (E-Business Suite) R12 with Oracle Access Manager (OAM) 11g for SSO
  15. EBusiness Suite (Apps R12) integration with OAM 11g : inter component communication and Ports to open in FireWall
  16. 10g WebGate Installation with OAM 11g : Access Server ID, Port and WebGate ID
  17. EBS R12 integration with WebCenter – Error retrieving WSDL at URL OA_HTML/ portlets/ WSRPBaseService?WSDL
  18. Integrate E-Business Suite with Oracle WebCenter (11.1.1.5) using OID and OAM (11g) as SSO
  19. EBS R12 integrated with SSO (OAM/OSSO) prompting for username / password again : Your Oracle E-Business Suite account has not been linked
  20. EBS OAM integration : Logout should re-direct to different URL

Why should Oracle Apps (EBS) DBAs learn WebLogic Server ? Release 12.2 with FMW 11g

$
0
0

If you follow (if you don’t then you mustSteven Chan’s blog and have seen EBS Technology Stack Roadmap then it is clear that next version of Oracle Apps R12 i.e. 12.2 will come with Fusion Middleware 11g where WebLogic Server replaces 10g Application Server (10.1.2 Forms/Reports and 10.1.3 Web Tier are replaced by 11g Forms/Reports and 11g Web Tier resp.)

If you have not already started with WebLogic Server then here is list of things you should read for a start

1. WebLogic Domain, Admin Server, Managed Server and Cluster here

2. Install WebLogic Server using steps here and  here

3. Learn about JDBC in WebLogic using steps here and here

4. Configure OHS with WebLogic using steps mentioned  here 

5. Patching in WebLogic using BSU here and here 

6. Integrate OID as authentication provider in WebLogic using steps here and to know more about authentication providers click here 

If you need formal training in WebLogic server then check training from Focusthread

.

Above is list of thing I learned for Weblogic to start with, I would like to hear what other things you think are important to learn in WebLogic (leave them under comments here)

Integrate Oracle Apps (E-Business Suite) R12 with Oracle Access Manager (OAM) 11g for SSO

$
0
0

I discussed about support of EBS (Apps R12) integration with OAM 11g for Single Sing-on here, In this post I am going to cover high level steps to integrate Oracle Applications R12 with Oracle Access Manager 11g (for detailed analysis of EBS Access Gate, WebGate and what happens behind the scene including deploying Access Gate in High Availability check chapter 12 of my book OAM / OIM 11g for Administrators )
.

High Level Steps for Oracle Apps R12 integration with OAM 11g

1. Install Oracle Access Manager 11g R1 (11.1.1.3) , check steps here  (OIM or SOA are optional component and not required for this integration)

2. Apply Patch BP02 (10368022) to Oracle Access manager and bring OAM to 11.1.1.3.2 using steps mentioned here

3. Install OID 11.1.1.3 (or higher) as mentioned here  (If you are installing OID 11.1.1.4 or 11.1.1.5 then do not use same MW_HOME as used by OAM else enterprise manager (EM) will fail to start)

4. Change Primary Identity Storeof Oracle Access Manager from weblogic’s embedded LDAP server to Oracle Internet Directory (OID) as explained here

5. If you are on apps 12.1.1 then apply patch 8919489 & 9824524, for 12.0.6 apply patch 10220779 & 10257580, and for 12.1.2/12.1.3 apply patch 9454600

6.Install WebLogic server which will host E-Business Suite Access Gateand create weblogic domain (You can also use WebLogic Server used by OAM server). For steps on WebLogic Server Installation click here

7. Install OHS 11g server which will host webgate and also act as proxy server for WebLogic (via mod_wl_ohs), more on mod_wl_ohs here  (User will be redirected for authentication to this OHS server via profile option “Application Authenticate Agent” and  “Applications SSO Type“)

8. Create DBC file for machine hosting WebLogic server java oracle.apps.fnd.security.AdminDesktop <apps user>/<apps pwd> CREATE (If WebLogic server is hosted on same machine as R12 middle tier then you can use existing DBC file)

9. Download patch 10124068 (This patch contains Access Gate 1.1.0) on WebLogic Server machine and copy fndext.jar to weblogic’s $DOMAIN_HOME/lib directory and restart all servers running on weblogic domain.

10. Use ant -f txkEBSAuth.xml (xml file is part of 10124068) to deploy EBS Access Gate on weblogic domain created on step 6. This will deploy web application (war – Web Archive) and create JDBC in WebLogic server to connect to EBS database. (Web Application will contains login page OAMLogin.jsp)

11. Configure OHS (installed on step 7) to forward request to WebLogic server (insatlled on step 6) more steps to configure mod_wl_ohs here

12. Provision an Instance of 10g WebGate either using RREG or OAMConsole. For more information on RREG and registration using OAMConsole refer chapter 8 of my book OAM / OIM 11g for Adminsor for 11g WebGate here (You can use either 10g webgate or 11g webgate, 10g Webgate is recommended for EBS R12)

13. Install 10g or 11gWebgate(depending on instance created in step 12) with OHS server (created on step 7)

14. Verify Authentication Modules, Schemes, Policies, Application Domain, Public and Protected Resource as explained in MOS Note 1309013.1 . For more information on these components of OAM, refer chapter 6 of book OAM/OIM 11g for Admins

15. Configure Profile Option  “Application Authenticate Agent” & “Applications SSO Type” for EBS R12

16.Configure EBS-OID synchronization (OID to EBS, EBS to OID or both using option provisiontype)

$FND_TOP/bin/txkrun.pl \
-script=SetSSOReg \
-registerinstance=yes \

and

$FND_TOP/bin/txkrun.pl \
-script=SetSSOReg \
-registeroid=yes \

17. Configure Log Out for EBS

18. Test Login to EBS (using user/password in OID) and Logout
 

.

Related Posts for Apps SSO/OID Integration


  1. 25 Things Apps DBA should know for Apps 11i/R12 Integration with OID/SSO
  2. Questions for Oracle Apps 11i & R12 Integration with 10g AS/SSO
  3. Oracle Single Sign-On Server for Apps DBA
  4. Clone Apps 11i/R12/12i integrated with SSO
  5. Notes/Docs to integrate Apps 11i with 10g AS Portal/OID/SSO
  6. Migrate Users to/from OID and Oracle Apps 11i/R12
  7. User created in Apps 11i/R12/12i not sync to OID
  8. Apps 11i/R12/12i Registration/Deregistration with OID/SSO : internals
  9. Error while running SSO registration on 11i : txkrun.pl -script=SetSSOReg
  10. How to Deregister SSO/OID from Oracle Apps 11i/R12/12i
  11. Error adding new User (11i) – unable to call fnd_ldap _wrapper .create_user
  12. Unable to call fnd_ldap_wrapper . create_user / update_user ORA-20001
  13. Oracle Access Manager 11g is now certified with E-Business Suite (Apps) R12
  14. Integrate Oracle Apps (E-Business Suite) R12 with Oracle Access Manager (OAM) 11g for SSO
  15. EBusiness Suite (Apps R12) integration with OAM 11g : inter component communication and Ports to open in FireWall
  16. 10g WebGate Installation with OAM 11g : Access Server ID, Port and WebGate ID
  17. EBS R12 integration with WebCenter – Error retrieving WSDL at URL OA_HTML/ portlets/ WSRPBaseService?WSDL
  18. Integrate E-Business Suite with Oracle WebCenter (11.1.1.5) using OID and OAM (11g) as SSO
  19. EBS R12 integrated with SSO (OAM/OSSO) prompting for username / password again : Your Oracle E-Business Suite account has not been linked
  20. EBS OAM integration : Logout should re-direct to different URL

E-Business Suite Integrated with OAM 11g: User gets “An error occurred” when trying login page

$
0
0

Oracle E-Business Suite(R12) integration with OAM for SSO involves below high level steps:

1) Integrating E-Business Suite with OID for user provisioning

2) Integrating OAM with OID as Identity store for authentication

3) Previsioning webgate as agent with oam for request delegation

4) Access gate application deployment to act as channel between webgate and EBusiness suite

AccessGate is a Java application responsible for mapping a single sign-on user to an Oracle E-Business Suite user, and creating the Oracle E-Business Suite session for that user. This application is deployed to a WebLogic Server , and is separate from Oracle E-Business Suite.

When a user request for a protected E-Business Suite, he is presented with login page residing on access gate servers.Each time access to this access gate application is requested ,it make a connection with E-Business suite database.

If you wish to learn more about request flow of E-Business Suite Integration with OAM as SSO solution, check our book :EBS:R12- OID/OAM Integration eBook  HERE

Issue:-  Ebusiness integrated with SSO (OAM 11g) works for 3-4 hours  and after that for every new login request to E-Business suite,users gets “An error occurred ” blank page.

This error occurs at time of presenting OAMLogin.jsp to user.

Accessgate log file (You define LoginConfig.properties parameter at time of access gate deployment , this file will contain location of Access Gate log file , by default log file goes to, /tmp/fndauth<n>.log )  shows errors as:-

FINE: EBizHelper::getEBizInstance()- SANITY_CHECK_SQL attempt 2

Oct 25, 2011 12:58:32 PM oracle.apps.fnd.ext.common.server.EBizHelper getEBizInstance
SEVERE: Fatal error while SANITY_CHECK_SQL checking ==>
java.sql.SQLRecoverableException: Closed Connection
at
oracle.jdbc.driver.PhysicalConnection.prepareStatement(PhysicalConnection.java:4364)
at oracle.jdbc.driver.PhysicalConnection.prepareStatement(PhysicalConnection.java:4137)
at oracle.jdbc.OracleConnectionWrapper.prepareStatement(OracleConnectionWrapper.java:117)
at

Troubleshooting steps-

Check DB log files- No error reported

Check R12 Oacore log files- No errors related to oamlogin.jsp reported.

Enable Debug in Access gate datasources- shows:-

[weblogic.jdbc.wrapper.PreparedStatement_oracle_jdbc_driver_OraclePreparedStatementWrapper@1a7] executeQuery(unknown) throws: java.sql.SQLRecoverableException: IO Error: Connection reset
at oracle.jdbc.driver.T4CPreparedStatement.executeForRows(T4CPreparedStatement.java:1106)
oracle.jdbc.driver.OraclePreparedStatement.executeQuery(OraclePreparedStatement.java:3806).java:85)
at oracle.apps.fnd.ext.common.server.EBizHelper.getEBizInstance(Unknown Source)
at jsp_servlet.__oamlogin._jspService(__oamlogin.java:312)
at weblogic.servlet.jsp.JspBase.service(JspBase.java:34)
at Caused by: java.net.SocketException: Connection reset
at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:96)
at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
at oracle.net.ns.DataPacket.send(DataPacket.java:202)

Cause- Connections used from the JDBC pool need to be closed after usage by the application code. If close() is not called, connections are not freed and not available for reuse , hence, any new connection request will result in timeout, giving fndauth error to user as it cant reach oamlogin.jsp page.

Solution:-Edit Access Gate Data sources from console to set parameters as below:-

1.Increase value of  “Maximum Capacity” parameter as per number of concurrent sessions expected for application.
2. In the Advanced section, make the following changes (if not already set)

     a. Check the box “Test Connections On Reserve

     b. “Test Frequency” =<set value as per your environment requirement>

c. “Test Table Name” = SQL SELECT 1 FROM DUAL

3. Re-start the eBiz AccessGate Managed Servers and Admin Server to ensure the change takes effect

Explanation-

MaxCapacity parameter  allows enough concurrently active database connections as needed by the application.

If the data source is configured to test connections on reserve, when an application requests a database connection, WebLogic Server tests the connection, discovers that the connection is dead, and tries to replace it with a new connection to satisfy the request. Ordinarily, when the DBMS comes back online, the refresh process succeeds


Related Posts for OAM


  1. E-Business Suite Integrated with OAM 11g: User gets “An error occurred” when trying login page
  2. EBS R12 Integration with OAM 11g – HTTP 404 Error : /ssologin not found

How To : Modify OID Provisioning Profile on E-Business suite Apps Password Change

$
0
0

During E-Business Suite integration with OID ( Oracle Internet Directory) , a schema with apps role is used for creating the provisioning profile in OID.

OID use this user credentials to establish connection with E-Business Suite Database.

If you wish to learn more about request flow of E-Business Suite Integration with OID, check our book :EBS:R12- OID/OAM Integration eBook  HERE 

Issue:- After updating the APPS user password in the E-Business Suite, updates in OID were not been provisioned in E-Business Suite.

DIP server log files ($DOMAIN_HOME/servers/<ods_managed_server>/logs ) shows the following error:

wls_ods2-diagnostic.log:[2011-12-22T14:04:23.920+00:00] [wls_ods2] [ERROR] [DIP-20050] [oracle.dip.r12ebs_mfltest_E]  [userId: <anonymous>] [ecid: 0000JH_hQrM7m3D_z9k3yW1Ewm0b000002,0] [APP: DIP#11.1.1.2.0] connecting as : URL : jdbc:oracle:thin:@innowave12:1560:r12ebs , User : APPS

wls_ods2-diagnostic.log:[2011-12-22T14:04:23.920+00:00] [wls_ods2] [ERROR] [DIP-20052] [oracle.dip.r12ebs_mfltest_E]  [userId: <anonymous>] [ecid: 0000JH_hQrM7m3D_z9k3yW1Ewm0b000002,0] [APP: DIP#11.1.1.2.0] Exception on connecting to DB.[[

wls_ods2-diagnostic.log:[2011-12-22T14:04:23.921+00:00] [wls_ods2] [ERROR] [DIP-20274] [oracle.dip.r12ebs_mfltest_E] [userId: <anonymous>] [ecid: 0000JH_hQrM7m3D_z9k3yW1Ewm0b000002,0] [APP: DIP#11.1.1.2.0] Error occurs while initializing ProvAppToOIDSync.[[

wls_ods2-diagnostic.log:[2011-12-22T14:04:23.922+00:00] [wls_ods2] [ERROR] [DIP-10509] [oracle.dip.r12ebs_mfltest_E] [userId: <anonymous>] [ecid: 0000JH_hQrM7m3D_z9k3yW1Ewm0b000002,0] [APP: DIP#11.1.1.2.0] Error in executing provisioning profile.[[

The OID provisioning profile used by the E-Business suite contains the APPS username and password. If the APPS user password is changed on the E-Business suite, then it must be also be changed in the OID provisioning profile as well.

Troubleshooting:-

1) Check last update for the respective provisioning profile to ensure the provisioning is not happening because of user password change:-

Login OID Node

set environment

cd $ORACLE_HOME/bin

oidprovtool operation=STATUS \

ldap_host=<OID_Host_name> ldap_port=<OID_PORT> \

ldap_user="cn=orcladmin" \

application_dn="orclApplicationCommonName=<E_Business_apps_name>,cn=EBusiness,cn=Products,cn=OracleContext,dc=<OID_tree_structure>" \

example:-

oidprovtool operation=STATUS \

>ldap_host=innowave12.com ldap_port=3060 \

>ldap_user="cn=orcladmin"  \

> application_dn="orclApplicationCommonName=r12ebs,cn=EBusiness,cn=Products,cn=OracleContext,dc=innowave,dc=com"

You will be prompted for ldap user password and Interface connection information.

Interface Connection information here means --> <Apps_DB_host>:<Apps_DB_Port>:<Apps_SID>:<Apps_schema_user>:<New_apps_password>

Please enter the LDAP password:

Please enter the Interface connection information (Press Enter key for empty value):

orclODIPProfileProcessingStatus: Event Propagation Successful

orclODIPProfileLastProcessingTime: 20111215183417

orclODIPProfileLastSuccessfulProcessingTime: 20111215183417

orclLastAppliedChangeNumber: 707309

orclSubscriberDisable: 0

orclODIPProfileProcessingStatus: Event Propagation Successful

orclODIPProfileLastProcessingTime: 20111215183415

orclODIPProfileLastSuccessfulProcessingTime: 20111215183415

Dates clearly show that last change provisioned was on 15 Dec 2011

Solution:-Update the Oracle Internet Directory provisioning profile with the new APPS password. This can be done by running the Oracle Internet Directory oidprovtool command-line utility (For detail usage click Here )

oidprovtool operation=modify \

ldap_host=<OID Server hostname> ldap_port=<OID Server Port> \

ldap_user_dn="cn=orcladmin" ldap_user_password=<orcladmin Password> \

application_dn="<The LDAP distinguished name of the application>" \

interface_connect_info=<E-Business Suite connect info of the format, host:port:Sid:username:password>

Example Usage:-

oidprovtool operation=modify \

profile_mode=OUTBOUND profile_status=enabled \

ldap_host=innowave12 ldap_port=3060 \

ldap_user_dn="cn=orcladmin" \

application_dn="orclApplicationCommonName=r12ebs,cn=EBusiness,cn=Products,cn=OracleContext,dc=innowave,dc=com" \

interface_connect_info=innowave12:1521:r12ebs:apps:Welcome1

Bounce DIP managed servers from OID console

Again query for provisioning profile status and see the last processing time.

Example:-

[oid11g@innowave12.com bin]$ oidprovtool operation=STATUS \

>    ldap_host=innowave12 ldap_port=3060 \

>    ldap_user=”cn=orcladmin” \

>    application_dn=”orclApplicationCommonName=r12ebs,cn=EBusiness,cn=Products,cn=OracleContext,dc=innowave,dc=com”

Please enter the LDAP password:

Please enter the Interface connection information (Press Enter key for empty value):

Inbound profile status details:

———————————

orclODIPProfileLastAppliedAppEventID: 441081

orclODIPProfileProcessingStatus: Event Propagation Successful

orclODIPProfileLastProcessingTime: 20111222161734

orclODIPProfileLastSuccessfulProcessingTime: 20111222161734

Outbound profile status details:

———————————

orclLastAppliedChangeNumber: 795870

orclSubscriberDisable: 0

orclODIPProfileProcessingStatus: Event Propagation Successful

orclODIPProfileLastProcessingTime: 20111222161725

orclODIPProfileLastSuccessfulProcessingTime: 20111222161725

Check Last processing time should be today’s date timestamp when you performed this action.

To verify, create new user in OID and ensure the user get provisioned in E-Business Suide FND_USER.

Reference Documents:-

  • Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On [ID 376811.1]
  • How to Debug a DIP eBusiness Suite Provisioning Profile [ID 340501.1]

Oracle Identity User Reference 10g (10.1.4.0.1) Part Number B15998-01

Oracle EBS Integration with OIM (Identity Manager) : Things you should know

$
0
0

 

 

This post covers Oracle E-Business Suite (EBS or Apps) integration with Oracle Identity Manager (OIM) for User Provisioning and Reconciliation. OIM is Identity Management and Identity Provisioning/Reconciliation software from Oracle. OIM 11g Architecture & Administration is also covered in my book Oracle Identity and Access Manager for Administrators.

 

Here are key things you should know if you are planning to use OIM to provision accounts to EBS or reconcile users from EBS to OIM.
1. There are mainly three type of users in Oracle E-Business Suite

a) EBS Accounts – is an entry in FND_USER that represents an Oracle E-Business Suite Account. To login to E-Business Suite user must have record in FND_USER

b) HRMS / PERSON Record – Some applications in EBS (like iExpense) require user to have HRMS (Person) record. PERSON record can be of different type like Employee, Part-time worker, Contractor, etc. Person records are stored in table PER_ALL_PEOPLE_F

c) Customer/Vendor Record – Some applications in EBS (like iStore or iProcurement) require user to have TCA record (Trading Community Architecture) that are representative or employees of customers and vendors . TCA record is in stored in table HZ_PARTIES

2. OIM uses pre-built connectors to provision accounts or reconcile users with LDAP Servers, Databases, Operating Systems and Business Applications including Oracle E-Business Suite.

3. There are two type of OIM connector for EBS

a) Oracle e-Business Employee Reconciliation (ER) – In this integration Oracle E-Business Suite HRMS acts as an authoritative source (aka trusted source) for OIM. In this configuration (trusted source) of connector, person records are created and modified only on EBS HRMS. Information about these users is then reconciled in to OIM. This connector has a Reconciliation Process.

Note: You can NOT use EBS ER connector to provision accounts from OIM to EBS (FND_USER), if you need to provision accounts in EBS (FND_USER) from OIM then you should use EBS User Management (UM) connector.

b) Oracle e-Business User Management (UM) – In this integration Oracle E-Business Suite acts as managed resource (target resource) for OIM. Users in OIM can be provisioned to EBS. Using this connector, users created or modified directly on Oracle E-Business Suite can also be reconciled in to OIM.  There are two processes in this connector Reconciliation Process and Provisioning Process.


4. There are three versions of EBS-UM Connector
a) User Management (FND_USER)
b) User Management with HR Foundation (FND_USER & HRMS/PER)
c) User Management with TCA Foundation (FND_USER & TCA/HZ_PARTIES)

5. EBS-UM connector can be configured in any one or combination of

a) User Management : Use this to create FND_USER record (in EBS) for OIM User and to grant roles and responsibilities to this EBS Record (FND_USER).

b) User Management with HR Foundation :  Use this connector to create FND_USER record in EBS (same as User Management) but you can also create basic HRMS user in EBS and link record in HRMS with record in FND_USER (EMPLOYEE_ID column in FND_USER table is linked with PERSON_ID column of PER_ALL_PEOPLE_F table). Use this version of connector if you wish to create record in FND_USER (of EBS) and HRMS (of EBS) from OIM.

c) User Management with TCA Foundation : Use this connector to create  FND_USER record in EBS (same as User Management) but you can also create basic TCA person-type party record in EBS and link it with record in FND_USER (PERSON_PARTY_ID column in FND_USER table is linked with PARTY_ID column of HZ_PARTIES table). Use this version of connector if you wish to create record in FND_USER (of EBS) and TCA (of EBS) from OIM.

6. Documentation for connector

a) EBS User Management Connector installation & configuration document is available here

b) EBS Employee Reconciliation Connector installation & configuration document is available here

7. It is recommended NOT to configure Oracle e-Business Employee Reconciliation and Oracle e-Business User Management with HRMS (HRF or HR Foundation) both at same time.

 

To know more about OIM connector for Oracle E-Business Suite , leave comment below !

Related Posts for Identity Manager


  1. Oracle Identity Manager (User Provisioning – Thor)
  2. Installing Oracle Identity Manager (Thor Xellerate)
  3. Oracle Identity Manager 9.1 released
  4. Oracle Identity Manager (Thor Xellerate) Architecture
  5. Resource, Reconciliation, Provisioning and Connector in Oracle Identity Manager #OIM
  6. Oracle Identity Manager (OIM) Connector for Oracle Internet Directory (OID) : Architecture and Overview
  7. Step by Step Installation of OIM Design Console 9.1.0
  8. Error while running PurgeCache in OIM 11g : LoginException unable to find LoginModule class : WebLogic Full Clinet
  9. Integrate OIM 11g with OID using connector for Provisioning / Reconcilliation – Installation
  10. PurgeCache in OIM 11g : CategoryName
  11. OIM LDAP Sync : Overview and Key Points
  12. OIM 11g : How to export/import/delete Files from MDS
  13. Where are OAM details stored in OIM (account unlock, password reset)
  14. libOVD adapters in OIM LDAP Integration : LDAPsync – view and modify Adapter settings (bindDN and bindPassword)
  15. Error Starting OIM Design Console (xlclient.sh) on Linux java.lang. NoClassDefFoundError
  16. OIM 11g Challenge Questions (PCQ) for forgot password
  17. Oracle EBS Integration with OIM (Identity Manager) : Things you should know
  18. Users not synced from OID to OIM : Debug Scheduled Job
  19. OIM Connector for Microsoft : AD, Exchange, Windows, Password Management
  20. Connector Server for OIM connectors : .NET or JAVA
  21. OIM 11g Challenge Questions – Everything you must know
  22. OIM 11g How to add Challenge Questions
  23. OIM : Assign AD resource : An error occurred because the Adapters are not compiled : How to compile adapters in OIM
  24. OIM User Creation : An Error occurred while performing create user operation. Unable to get LDAP connection
  25. OIM – AD integration : Active Directory Group Lookup Recon failed with error Remote Framework Key is invalid
  26. Microsoft Active Directory (AD) to Oracle Identity Manager (OIM) Password Synchronization: Things you must know : Part I
  27. Provision resource “Microsoft Exchange” to user in OIM : Status remains in Provisioning : Part I
  28. Target Resource (or Managed Resource) vs Trusted Source (or Authoritative Source) Mode : OIM integration with applications (AD, OID, OVD, EBS, SAP, HR, LDAP)
  29. 500 Internal server accessing OIM application : com.bea. security.MicroSM. getInstance oracle.iam. platform. authz.impl
  30. Your account is locked. You can unlock your account by going to Forgot Password
  31. OIM 11g : How to find User and Manager details : USR table
  32. OIM 11g : User Detail/Attribute (Description) not visible in OIM User screen : EBS / OID / OIM integration
  33. OIM 11g: The add proxy operation for user XXXXX failed with following error oracle. bpel. services. workflow. client. workflowservieclientException javax.xml.ws.WebServiceException could not determine wsdl ports
  34. Oracle Identity Manager BP07 for 11gR1 PS1 11.1.1.5.7 (16097399) is now available – (Part of Identity Management SUite BP03 16209876)
  35. OIM 11g : SQL to List User’s Manager
  36. OIM integrated with OAM (SSO) showing OIM login screen : User Soft Locked

“oamDS”: ORA-28001: The Password Has Expired

$
0
0

Recently i come across an issue where R12 E-Business Users which was integrated with OAM 11g for SSO were not able to login.They were getting error message as shown below:

From first look of redirection URL in browser, it appears that it was crossing the OAM authentication process and it was the application which is throwing the error.
To verify, we check application.log and Apache. error log under $LOG_HOME/ora/10.1.3  but there were no error messages written.
We verified if  AppsLocal Login was working and the login was working.

Next  step was to check in E-Business Access gate log file, default location- /tmp/fndauth0.log on server where you deploy the E-Business Access gate. The log file shows below error

02-Jul-2012 11:04:02 oracle.apps.fnd.ext.common.server.FndSsoFilter doFilter
WARNING: FndSsoFilter::doFilter()– error encountered
Throwable occurred: oracle.apps.fnd.ext.common.server.FndSsoException: Unknown exception. Please contact your System Administrator.
Caused by: weblogic.jdbc.extensions.PoolLimitSQLException: weblogic.common.resourcepool.ResourceLimitException: No resources currently available in pool “VISR12″  to allocate to applications, please increase the size of the pool and retry..
at weblogic.jdbc.common.internal.JDBCUtil.wrapAndThrowResourceException(JDBCUtil.java:252)

The error complains about no resource available in connection pool of Weblogic  which means the problem was with JDBC datasources.
Next, check OAM Server output log file ,default location $DOMAIN_HOME/servers/oam_server1/logs/oam_server1.out . Log  file show below error:

<02-Jul-2012 11:05:34 o’clock BST> <Warning> <oracle.oam.foundation.access> <OAMSSA-04006> <Cannot get connection from data source.
weblogic.jdbc.extensions.PoolDisabledSQLException: weblogic.common.resourcepool.ResourceDisabledException: Pool oamDS is Suspended, cannot allocate resources to applications..
at weblogic.jdbc.extensions.PoolDisabledSQLException.<init>(PoolDisabledSQLException.java:11)

Which reflect problem is with OAM datasource  “OAMDS”
At this stage check DB which stores OAM schema is up and reachable from OAM node and check for errors in DB alert log file under $USER_DUMP_DEST location in database.

On restarting the datasource the oam server log file show below error:

Received exception while creating connection for pool “oamDS”: ORA-28001: the password has expired
02-Jul-2012 11:21:31 o’clock BST> <Warning> <oracle.oam.foundation.access> <OAMSSA-04006> <Cannot get connection from data source.
weblogic.jdbc.extensions.ConnectionDeadSQLException: weblogic.common.resourcepool.ResourceDeadException: 0:weblogic.common.ResourceException: Could not create pool connection. The DBMS driver exception was: ORA-28001: the password has expired
at weblogic.jdbc.common.internal.JDBCUtil.wrapAndThrowResourceException(JDBCUtil.java:250)

Login to DB which hold OAM schema and query for OAM schema as shown below:-

SQL> select USERNAME,ACCOUNT_STATUS,EXPIRY_DATE from dba_users where USERNAME  like ‘%OAM%’;

USERNAME      ACCOUNT_STATUS    EXPIRY_DATE
———————       ——————–           ———
OAM_IAU_VIEWER         OPEN
OAM_IAU                     OPEN
OAM_IAU_APPEND         OPEN
OAM_OAM                    EXPIRED         10-JUN-12

Reason:- With 11g database , Password_life_time in DEFAULT profile is set to 180days and PASSWORD_GRACE_TIME is set to 7 days.

Use below query to see your default profile:-
SELECT * FROM dba_profiles WHERE profile = ‘DEFAULT’ AND resource_type = ‘PASSWORD’;

PASSWORD_GRACE_TIME  parameter sets the number of days that a user has to change his or her password before it expires.
PASSWORD_LIFE_TIME  parameter sets the number of days the user can use his or her current password.

Alter these parameter value to Unlimited in DEFAULT profile as:-

SQL> ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED;

SQL> ALTER PROFILE DEFAULT LIMIT PASSWORD_GRACE_TIME  UNLIMITED;

Enable the user by resetting their passwords as

alter user <prefix>_oam identified by <password>;

EBS R12 Integration with OAM 11g – HTTP 404 Error : /ssologin not found

$
0
0

Recently we came across an issue while integrating EBS R12 with OAM 11g using 10g Webgate for one of our client. For detail step by step integration process please check our book  at  Oracle E-Business R12 integration with OID/OAM

On requesting the EBS URL , User was redirected to Authenticate Agent URL value  which is set as Profile option in EBS . This request was then intercepted by 10g Webgate on OHS and forwarded to OAM.
OAM after checking that  the requested resource is protected was suppose to apply the protected authentication policy and present the challenge page to User.
But instead of getting the Challenge page, user was experiencing HTTP 404 error:-

On enabling HTTP headers trace, it shows that on requesting /ssologin , OAM server responds back with 404 error:-

GET /ebsauth_visr12/ssologin HTTP/1.1
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

HTTP/1.1 302 Moved Temporarily

GET /oam/server/obrareq.cgi?wh%3Dvisr12_hostid %20wu%3D%2F ebsauth_visr12%2F ssologin %20wo%3D1%20rh%3D http%3A%2F%2F innowavexx .focusthread.com%20ru%3D%252Febsauth_visr1 2%252F ssologin HTTP/1.1
If-None-Match: “9696-8-4c626e271ac40″
Host: innowavexx.focusthread.com
Connection: Keep-Alive

HTTP/1.1 404 Not Found
Server: Oracle-Application-Server-11g
Content-Length: 188
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Under Oam diagnostic log file ( default location- $DOMAIN_HOME/servers/oam_server1/logs) , error was recorded as:-

oam_server1-diagnostic.log:[2012-08-01T11:16:24.338+01:00] [oam_server1] [TRACE] [] [oracle.oam.engine.policy] [tid: NioProcessor-1] [userId: <anonymous>] [ecid: 0000JZT1WPXBDCHMyufd6G1G5x0T000003,0] [APP: oam_server] [SRC_METHOD: fine] [SRC_CLASS: oracle.security.am.engines.common.adapters.OAMLoggerImpl] Called isResourceProtected () with resource : Resource Name: WebGateResource Type: HTTP URL: /ssologin RESULT DENY

Which clearly states that its trying to access /ssologin which is being denied by OAM and hence 404 error.

Reason - The issue was happening because of ‘DENY on Not Protected‘ flag on webgate agent registered with OAM.
The difference between 10g and 11g OAM is that in 11g, the default is that everything is protected once the webgate is installed (deny on protected is checked).
In 11g if you want a specific url to be not protected, you may need to create a public resource policy and protected via an anonymous auth scheme which will stop it from being protected.
In 10g the default behavior is to set the resource as allowed unless a specific policy is created for that resource.

If the ‘Deny On Not Protected’ flag is set in the Agent settings, HTTP-404 Not Found error occurs in the browser when the resource is accessed.

Solution – Uncheck the ‘DENY On Not Protected’ flag under oam console:-
1) Login to OAM Console http://oam_hostname:adminserver_port/oamconsole
2) System Configuration –>Access Manager Agents –> SSO Agents –> OAM Agents –> search for respective Agent
3)Uncheck ‘DENY on NOT Protected’
4)click Apply and Bounce the OHS of respective webgate

Related Posts for OAM


  1. E-Business Suite Integrated with OAM 11g: User gets “An error occurred” when trying login page
  2. EBS R12 Integration with OAM 11g – HTTP 404 Error : /ssologin not found

Weekend Batch – Online Oracle Apps DBA R12 Training commencing on 31st March 2013

$
0
0

Join now to reap the benefits of Online Oracle Apps DBA R12 Training which is constantly in great demand. This is a course tailor made for you keeping in mind the latest in the world of Oracle.

 

Please find the course details mentioned below:

 

Commencement Date : 31 March 2013


Training Schedule:
 31 March 2013 & 06, 07, 13, 14, 20, 21 April 2013


Training Duration :
7 Days


Timings :
1:00 Noon GMT | 9:00AM EST | 6:00AM PST | 8:00AM CST | 7:00AM MST | 6:30PM IST


Course Fee:
USD 799

 

Our Forte:

• Extensive Hands-on training

• Certified Oracle Apps Instructors with real-time experience

• Courses designed for the latest Oracle Apps versions

• Study material with presentations & lab exercises designed by industry experts

• Practice at your leisure 24/7 during the training

• Email support post training completion

 

Mode of Training :

Our trainings are conducted online using an interactive web-conferencing software which also has integrated VoIP. Participants will be able to view trainer’s desktop remotely & communicate with him at the same time. Trainer can also take control of your PC/Laptop in case you get stuck while performing exercises. For Audio, you need to have a headset (earphone & microphone)

 

For further information and registration email us at training @ focusthread . com  or contact us on Phone – US:+1 213-814-4243|UK:  +44(0) 20 7193 7426 |India: +91-22-64536768

Significance of APPLPTMP in Concurrent Processing

$
0
0

This is basic but very important with respect to working of concurrent requests.
Of late, one of our test instances experienced repeated issue in concurrent processing. Looking into concurrent log, i observed the below error and was clear that there was an issue with APPLPTMP (which was changed before which there wasn’t any issue faced).
ORA-20100: File filename.tmp creation for FND_FILE failed

Often these errors contain additional information appended to the end. For example:
ORA-20100: File l7921858.tmp creation for FND_FILE failed.
You will find more information on the cause of the error in request log. in Package CSI_ITEM_INSTANCE_PVT Procedure UPDATE_ITEM_INSTANCE
From error , It is clear that Concurrent manager is not able to access APPLPTMP Directory.
The error is essentially saying that the file system reported a problem during the write operation to the temporary directory. There can be a number of reasons for this, including:

  1.   The directory does not exist
  2.   The directory is full
  3.   The directory does not have appropriate write permissions
  4.   The UTL_FILE_DIR parameter is incorrect and is not pointing to the right directory
  5.   The $APPLPTMP parameter does not match the UTL_FILE_DIR parameter

The reason in our case was : we changed the APPLPTMP in context file to “/tmp/TST” and ran autoconfig but directory “/tmp/TST” didn’t exist physically on DB tier. Although UTL_FILE_DIR contained both old and new values, but it is recommended to have $APPLPTMP as first entry in UTL_FILE_DIR list of values.
Now, What is APPLPTMP and its Significance ? “APPLPTMP is a special directory used only for PLSQL temporary files. When a concurrent program uses the FND_FILE package, the concurrent manager uses APPLPTMP as the directory to which it writes temporary files. FND_FILE uses the UTL_FILE package, which can only write to directories specified in init.ora. Thus, APPLPTMP must be one of the directories listed in init.ora in order for FND_FILE to work.

The following steps provide general setup verifications for the temporary directory ::
Verify the temporary directory setup

a) Check the UTL_FILE_DIR settings of your system:
SELECT value FROM v$parameter WHERE name = ‘utl_file_dir’;
The first directory path defined in this parameter should be the temporary directory e.g. /tmp/TST

b) Ensure this directory physically exists and is not full

c) Verify that this directory has write permissions for the application user (applmgr) – change directory file permission to 777
e.g. chmod 777 /tmp/TST

d) Check the APPLPTMP variable value is the same as the first directory path defined in UTL_FILE_DIR
e.g. echo $APPLPTMP

How is APPLTMP different from APPLPTMP ?

APPLTMP does not need a utl_file_dir entry. It is a pointer to the the temporary directory used by the application, and is not referenced by the database. It is generally recommended that the location be the same simply to avoid any confusion that might be caused by multiple temporary file locations, but this is not a requirement, and you may certainly use different and non-shared locations for each host if you wish.

i.e you can have APPLTMP=’/tmp/TST’ (Apps Node) or ‘$INST_TOP/appltmp’ with Full permission.

Autoconfig establishes the “default” value for %s_applptmp% variable to be /tmp/TST”when osd=”UNIX”.
For %s_appltmp% however, the default value is = %s_temp%”…which is defined at context file creation….Usually, this defaults to $INST_TOP/temp.
Stand Alone R12 environments (with no modification to standard paths) define s_applptmp=/tmp/TST and s_appltmp=$INST_TOP/temp.

 

For more details on troubleshooting such a scenario , look into the below note:

Concurrent Processing – Troubleshooting Concurrent Request ORA-20100 errors in the request logs [ID 261693.1]

Oracle E-Business Suite 12.2 is finally available to Download & Install

$
0
0

 

 

Around 2 Years and 3 months back I wrote about why Oracle Apps DBA’s should learn WebLogic and changes planned in Oracle E-Business Suite 12.2

 

If you follow  Steven Chan’s blog then you must know by now that Oracle E-Business Suite 12.2 is now available to download & install from eDelivery

 

  • Oracle E-Business Suite 12.2 documentation is available at OTN
  • Oracle E-Business Suite 12.2 Installation Guide is available here
  • Oracle E-Business Suite 12.2 Concepts Guide here
If you are new to Oracle WebLogic Server then I highly recommend you reading WebLogic Domain , Admin & Managed Server

 

Stay tuned for installation, configuration and new features in Oracle Apps 12.2 !!

Install Oracle E-Business Suite 12.2 on Linux – Part I : Download, Stage & Start Oracle Apps 12.2 software installation

$
0
0

I discussed about availability of  Oracle E-Business Suite (Oracle Apps) version 12.2, in today’s post I am going to cover installation steps.

Installation is more or less similar to previous R12 version (with few additional screens for WebLogic Server).

 

Document you must read :

  • Oracle E-Business Suite 12.2 Installation Guide is available here
  • 1320300.1 Oracle E-Business Suite Release Notes, Release 12.2
  • 1376487.1  Oracle E-Business Suite Applications DBA (AD) Release Notes for Release 12.2.2

.

Oracle Apps (E-Business Suite) 12.2 installation steps 

1. Download software from eDelivery .

 

1.1 Download following zip files for Linux

V29764-01.zip V35231-01_4of5.zip V35806-01_1of3.zip V37515-01_1of6.zip V29856-01.zip V35231-01_5of5.zip V35806-01_2of3.zip V37515-01_2of6.zip V35215-01_1of3.zip V35802-01.zip V35806-01_3of3.zip V37515-01_3of6.zip V35215-01_2of3.zip V35803-01_1of3.zip V35807-01.zip V37515-01_4of6.zip V35215-01_3of3.zip V35803-01_2of3.zip V35808-01.zip V37515-01_5of6.zip V35230-01_1of2.zip V35803-01_3of3.zip V35809-01.zip V37515-01_6of6.zip V35230-01_2of2.zip V35804-01_1of2.zip V35810-01.zip V39615-01.zip V35231-01_1of5.zip V35804-01_2of2.zip V35811-01.zip V35231-01_2of5.zip V35805-01_1of2.zip V35812-01.zip V35231-01_3of5.zip V35805-01_2of2.zip V35813-01.zip

 

2. Setup staging area (You can either unzip all files downloaded earlier or follow below process)

2.1 unzip StratHere DVD (for Linux)

unzip V35215-01_1of3.zip

2.2 Start buildStage script

[R12.2_SOFTWARE]/startCD/Disk1/rapidwiz/bin

./buildStage.sh

2.3 select option 1 i.e. Create New Stage

2.3 Select Option 2 Linux x86-64

2.4 Please enter the directory containing the zipped installation media: [Enter directory location where all the zip files are downloaded]

/stage/oracle/r12/12.2/

You should see output like

__________
Unzipping V35810-01.zip
Unzipping V35803-01_3of3.zip
Unzipping V35231-01_5of5.zip

.
.
.

Verifying stage area…

Directory /stage/oracle/r12/12.2/TechInstallMedia is valid
Directory /stage/oracle/r12/12.2/TechPatches/DB is valid
Directory /stage/oracle/r12/12.2/TechPatches/MiddleTier is valid
Directory /stage/oracle/r12/12.2/EBSInstallMedia/AppDB is valid
Directory /stage/oracle/r12/12.2/EBSInstallMedia/Apps is valid
Directory /stage/oracle/r12/12.2/EBSInstallMedia/AS10.1.2 is valid
Directory /stage/oracle/r12/12.2/TechInstallMedia/database is valid
Directory /stage/oracle/r12/12.2/TechInstallMedia/ohs11116 is valid
Directory /stage/oracle/r12/12.2/TechInstallMedia/wls1036_generic is valid

__________

 

2.5 Staging Area should look like below

 

3. Create Operating System User depending on Single User or Multi User Installation :

You can do

a) Single -User  Installation : oracle where both Application Tier and Database Tier are owned by single user

b) Multi-User Installation : oracle & applmgr where Application Tier is owned by one user (applmgr) and Database Tier by another (oracle)

Note: I am doing multi-user installation and using applmgr & oracle both member of group dba

groupadd dba
useradd -g dba applmgr
useradd -g dba oracle

 

4. Start Installer from root user
cd $R12.2_SOFTWARE/startCD/Disk1/rapidwiz/
./rapidwiz

5. In Wizard Operation screen select : Install Oracle E-Business Suite Release 12.2.0

 

 

Remaining steps in next post !!

Install Oracle Apps (E-Business Suite) 12.2.x on Linux – Part II

$
0
0

I discussed about availability of  Oracle E-Business Suite (Oracle Apps) version 12.2, and pre-requisites and installation of Oracle E-Business Suite release 12.2.2

In this post I am going to cover configuration screens while installing/configuring Oracle Applications 12.2. Ensure that you have done all steps as mentioned in Part I

 

1. Start EBS 12.2.x Installer from root user as

cd $R12.2_SOFTWARE/startCD/Disk1/rapidwiz/

./rapidwiz

 

 

2. Select Port Pool : Select port pool for services as you used to do in previous versions 12.1.x or 11i

Note: Oracle Apps 12.2 uses dual file system . more on dual file system in 12.2 later.

 

3. Select Database Type

a) Fresh Database : Use this for production or where you don’t need vision environment.

b) Vision Database : Use this option if you need vision data in R12.

 

 

Note: Base directory (/d01/oracle/prod) mentioned above should already be created and owned by Database user (oracle:dba) defined above.

 

4. License Additional Products : If you need any additional products you can license it now .

Note: You can license addtional products after installation as well.

 

 

 

5. If you are planning to use multi-language (language other than american english) then recommendation is to select Databse character set as AL32UTF8

 

6. Provide Application Tier details

Note: Apps OS user (applmgr:dba) should be able to create directory under Base directory (/d01/oracle/prod) .

Note: I created application tier user applmgr and database tier user oracle using same group i.e. dba

 

 

More on dual file system i.e. File System 1 & File System 2 later.

7. Provide Application Tier & database user password .

Note: WLS Admin User is WebLogic Server Administrator user used to login to WebLogic Console . WebLogic Server is newly introduced in Oracle Apps 12.2

 

 

8. If you plan to deploy application tier on multiple nodes then click on Add Server button at bottom.

Note: I am doing single node installation i.e. Application Tier and Database Tier on single host/machine.

9. Installer will validate system configuration and if any check fails then click on ! next to check .

Note: In my case Port Availablity and File Space checks failed. After fixing failed check click on Retry button


a) Port Availaibity check : In my case port 8899 was in use

To Identify which process is using port 8899 in linux run “netstat -tulpn | grep [Port_no]“
[atul@innowave21 ~]$ netstat -tulpn | grep 8899
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
tcp 0 0 :::8899 :::* LISTEN 4536/java
In my case Process ID 4536 was using port 8899, stop the process using 8899 or use different port pool in previous screen. 

 

 

 

10. Click Next and then Install when all checks complete successfully.

 

 

11. After installation , access Application as http://host:port where port number is 8000+ port pool, as I use port pool 10 URL should be http://host:8010

 

 

ADOP : Online Patching in Oracle Apps (E-Business Suite) R12 12.2 : Apps DBA’s Must Read

$
0
0

Last month I discussed about Oracle Application 12.2 Installation, from this version ADPATCH is being replaced by ADOP (AD Online Patching) to support Online Patching (Patching while End Users are accessing Applications). This post covers, key points about Online Patching introduced in Oracle Applications 12.2

 

1. In Oracle Apps R 12.2 onwards all patching operations are online ( EBS system remains available to users during patching) unlike previous versions where system is unavailable during patching (Maintenance Mode)

2. Online Patching uses Edition Based Redefinition (EBR) at Database Layer and Multiple File System at Application Tier level

3. Edition Based Re-Definition provides two copies of Database object (schema) pre and post patch .

a) Run Edition of database objects : used by online users and is not changed by patching

b) Patch Edition of database objects : used by patching tool and do not affect the running application

Note: There is third edition (zero or more editions) called Old Edition – Patch Edition when prompted to Production i.e. new Run Edition, previous Run Edition is marked as Old Edition. Full Cleanup Operation (part of ADOP) removes Old Edition (More on Cleanup Operation later)

 

 

3. In Oracle Applications 12.2 there are two file system

a) FS1 : Production File System used by users

b) FS2 : Copy of production File System used by patching tools (adop : More on adop later)

Note: FS1 and FS2 can switch role i.e. FS2 will become production File system and FS1 will become File System for Patching at Cutover Phase of online patching (ADOP). More on various phases in AD Online Patching (adop) later.

Note: Third files system fs_ne stores data on filesystem like log, out, data import/export files

4. Patches are applied to copy of production environment (copy of code and NOT data) where as users access the original production environment (Patching applied is to file system and Patch Ediiton of database objects and not applicable to transactions tables/data in database)

5. Actual downtime during patching (ADOP) is to switch users from pre-patched copy to patched copy.

6. Online Patching Tool ADOP (AD Online Patching) now replaces adpatch in 12.2

7. Phases on ADOP (replacement of ADPATCH) are Prepare -> Apply -> Finalize -> Cutover -> Cleanup (more on these phases later)

8. Patching can be aborted any time before Cutover Phase (More on how to abort patching in ADOP later)

 

I highly recommend below two resources to understand AD Online Patching

 

Stay tuned for step by step patching in Oracle Applications 12.2

 

Related Posts for 12.2 New Features


  1. ADOP : Online Patching in Oracle Apps (E-Business Suite) R12 12.2 : Apps DBA’s Must Read

Exception in thread “main” java.lang.UnsatisfiedLinkError: /dbupgrade/stage/StageR122/startCD/Disk1/rapidwiz/jre/Linux_x64/1.6.0/lib/i386/xawt/libmawt.so: libXext.so.6: cannot open shared object file: No such file or directory

$
0
0

 

R12.2.2 Installation in Linux 6 (64 bit) environment.

Issue:

Exception in thread “main” java.lang.UnsatisfiedLinkError: /dbupgrade/stage/StageR122/startCD/Disk1/rapidwiz/jre/Linux_x64/1.6.0/lib/i386/xawt/libmawt.so: libXext.so.6: cannot open shared object file: No such file or directory

Solution

Primarily you need to install the following two RPMs in order to resolve the issue

(1)  libXi-1.3-3.el6.i686.rpm   (2)  libXtst-1.0.99.2-3.el6.i686.rpm

but prior to these, additionally also check the following:

libXext-1.3.1-2.el6.i686.rpm, libX11-1.5.0-4.el6.i686.rpm, libxcb-1.8.1-1.el6.i686.rpm, libXau-1.0.6-4.el6.i686.rpm and libxcb-1.8.1-1.el6.i686.rpm

 

 


Oracle Apps (R12) installation troubleshooting : RW-20003 Error Unzip Failed

$
0
0

I recently installed Oracle E-Business Suite (R12) for E-Business Suite Integration with OAM/OID for SSO training and installation failed with error RW-20003 Error Unzip Failed. This error is self explanatory that installation failed while unzipping a file but how do you know for which file unzip failed?

R12 installer writes log to various log files at each stage of installation (R12 installer first installs database and then application tier)

a) For Database Tier installation (when installation is less than 20%) : check logs at $ORCALE_HOME/appsutil/log/$CONTEXT_NAME/ where ORACLE_HOME is $ORACLE_BASE/db/tech_st/[11.x.x]

b) For Application Tier installation (when installation is greater than 20%) : depending on phase of application tier installation

$APPL_TOP/admin/$CONTEXT_NAME/log/
$INST_TOP/logs/<MMDDHHMM>.log
$INST_TOP/logs/ora/10.1.2/install/make_<MMDDHHMM>.log
$INST_TOP/logs/ora/10.1.3/install/make_<MMDDHHMM>.log
$INST_TOP/admin/log/

For list of other logs in R12 (prior to 12.2) click here

In my case error reported was in file /oracle/ apps/ r12/ PROD/ apps/ apps_st/ appl/ admin/ [PROD_demo]/ log/ installAppl.log with error

___

Unzip1063 – Start of native unzipping /stage/R1211/oraApps/Disk9/appl/stage/ar1006.zip at /oracle/apps/r12/PROD/apps/apps_st/appl/ar/12.0.0/
Retrying unzip for Unzip1063 – from /stage/R1211/oraApps/Disk9/appl/stage/ar1006.zip
Retrying unzip for Unzip1063 – from /stage/R1211/oraApps/Disk9/appl/stage/ar1006.zip

___

 

 Fix: Once you know zip file (Disk9 of oraApps software folder) then fix is to download this file again from eDelivery again.

Note: I had to re-install apps (by cleaning existing installation) after unzipping as retry failed.

 

 

 

 

To register for E-Business Suite (R12) integartion with OAM/OID for SSO (starting on 3rd May 2014) click here

EBS Integration with OIM : Employee Reconciliation : NumberFormatException: “BUSINESS_GROUP_ID”

$
0
0

This post is from our demo environment to configure Segregation of Duties (SoD) in EBS using GRC/OAACG/OIMContact Us if you are interested in demo of GRC/OAACG/OIM/EBS integration for SoD.

I discussed about Oracle EBS (R12/11i) integration with Oracle Identity Manager (OIM) here, and two type of connectors available for EBS integration are

a) EBS UM Connector : User Management to provisioning Accounts in EBS (FND_USER)

b) EBS ER Connector : Employee Reconciliation to create users in OIM from EBS EMployee record (PER_ALL_PEOPLE_F).

In this post I am going to share an issue I encountered in EBS-ER connector during reconciliation of Employee record from EBS to OIM.

For reconciliation of Employee Record from EBS to OIM, you run schedule job eBusiness Suite HRMS Trusted Reconciliation in OIM.

 

When I run this scheduled job I encountered error like

___

<Apr 10, 2014 11:24:03 PM BST> <Error> <OIMCP.EBSER> <BEA-000000> <================= Start Stack Trace =======================>
<Apr 10, 2014 11:24:03 PM BST> <Error> <OIMCP.EBSER> <BEA-000000> <oracle.iam.connectors.ebs.hrms.tasks.EmployeeReconciliationTask : execute>
<Apr 10, 2014 11:24:03 PM BST> <Error> <OIMCP.EBSER> <BEA-000000> <Query execution failed>
<Apr 10, 2014 11:24:03 PM BST> <Error> <OIMCP.EBSER> <BEA-000000> <Description : Failed to execute the query>
<Apr 10, 2014 11:24:03 PM BST> <Error> <OIMCP.EBSER> <BEA-000000> <oracle.iam.connectors.ebs.common.TargetOperationException: Failed to execute the query
at oracle.iam.connectors.ebs.common.dao.DBUtil.getFirstPage(Unknown Source)
at oracle.iam.platform.tx.OIMTransaction CallbackWithoutResult.process (OIMTransactionCallbackWithoutResult.java:9)
at oracle.iam.platform.tx.OIMTransactionCallback. doInTransaction(OIMTransactionCallback.java:13)
at org.springframework.transaction.support. TransactionTemplate.execute(TransactionTemplate.java:128)
at oracle.iam.platform.tx.OIMTransactionManager. execute(OIMTransactionManager.java:22)
ActionExecutorWrapper.execute(AbstractSubjectSecurity.java:228)
at oracle.security.jps.internal.jaas.CascadeActionExecutor$ SubjectPrivilegedAction.run(CascadeActionExecutor.java:68)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)

CascadeActionExecutor.execute(CascadeActionExecutor.java:50)

at oracle.security.jps.internal.jaas.AbstractSubjectSecurity

$ActionExecutorWrapper.execute(AbstractSubjectSecurity.java:228)
at Thor.API.Security.LoginHandler.Assertion

LoginSession.runAs(AssertionLoginSession.java:93)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:77)
Caused by: oracle.iam.connectors.ebs.common.TargetOperationException: Failed to get the paged records
at oracle.iam.connectors.ebs.common.dao.DBUtil.getPagedRecords(Unknown Source)
… 32 more
Caused by: oracle.iam.connectors.ebs.common.TargetOperationException: Invalid format of NUMBER value
at oracle.iam.connectors.ebs.common.dao.DBUtil.setNamedParameters(Unknown Source)
… 33 more
Caused by: java.lang.NumberFormatException: For input string: “BUSINESS_GROUP_ID”
at java.lang.NumberFormatException.forInputString(NumberFormatException.java:65)
… 34 more
>
<Apr 10, 2014 11:24:03 PM BST> <Error> <OIMCP.EBSER> <BEA-000000> <================= End Stack Trace =======================>

________

 

Import message in the whole error stack was Caused by: java.lang.NumberFormatException: For input string: “BUSINESS_GROUP_ID”

When reconciliation Job eBusiness Suite HRMS Trusted Reconciliation is run, it runs SQL query that fetches data from table PER_ALL_PEOPLE_F table of EBS and look for column BUSINESS_GROUP_ID 

Query : Table PER_ALL_PEOPLE_F (search for BUSINESS_GROUP_ID and CURRENT_EMPLOYEE_FLAG, EFFECTIVE_START_DATE)

 

Fix : Set lookup Lookup.EBS.HRMS.QueryFilters in OIM Design Console

Log into OIM Design Console -> Administration=>Lookup Definition and search for Lookup.EBS.HRMS.QueryFilters

Enter the following Values…

fromDate = 01-Jan-2012|Date|DD-Mon-YYYY
businessGroupID = 202|number
toDate = 12-Apr-2014|Date|DD-Mon-YYYY

Save the Changes

(Here 202 is BUSINESS_GROUP_ID from PER_ALL_PEOPLE_F table)

 

Run the schedule job eBusiness Suite HRMS Trusted Reconciliation this should now create users in OIM (from EBS Employee)

Contact Us if you are interested in demo of GRC/OAACG/OIM/EBS integration or just integration of OIM with Oracle EBS.

Related Posts for Identity Manager


  1. Oracle Identity Manager (User Provisioning – Thor)
  2. Installing Oracle Identity Manager (Thor Xellerate)
  3. Oracle Identity Manager 9.1 released
  4. Oracle Identity Manager (Thor Xellerate) Architecture
  5. Resource, Reconciliation, Provisioning and Connector in Oracle Identity Manager #OIM
  6. Oracle Identity Manager (OIM) Connector for Oracle Internet Directory (OID) : Architecture and Overview
  7. Step by Step Installation of OIM Design Console 9.1.0
  8. Error while running PurgeCache in OIM 11g : LoginException unable to find LoginModule class : WebLogic Full Clinet
  9. Integrate OIM 11g with OID using connector for Provisioning / Reconcilliation – Installation
  10. PurgeCache in OIM 11g : CategoryName
  11. OIM LDAP Sync : Overview and Key Points
  12. OIM 11g : How to export/import/delete Files from MDS
  13. Where are OAM details stored in OIM (account unlock, password reset)
  14. libOVD adapters in OIM LDAP Integration : LDAPsync – view and modify Adapter settings (bindDN and bindPassword)
  15. Error Starting OIM Design Console (xlclient.sh) on Linux java.lang. NoClassDefFoundError
  16. OIM 11g Challenge Questions (PCQ) for forgot password
  17. Oracle EBS Integration with OIM (Identity Manager) : Things you should know
  18. Users not synced from OID to OIM : Debug Scheduled Job
  19. OIM Connector for Microsoft : AD, Exchange, Windows, Password Management
  20. Connector Server for OIM connectors : .NET or JAVA
  21. OIM 11g Challenge Questions – Everything you must know
  22. OIM 11g How to add Challenge Questions
  23. OIM : Assign AD resource : An error occurred because the Adapters are not compiled : How to compile adapters in OIM
  24. OIM User Creation : An Error occurred while performing create user operation. Unable to get LDAP connection
  25. OIM – AD integration : Active Directory Group Lookup Recon failed with error Remote Framework Key is invalid
  26. Microsoft Active Directory (AD) to Oracle Identity Manager (OIM) Password Synchronization: Things you must know : Part I
  27. Provision resource “Microsoft Exchange” to user in OIM : Status remains in Provisioning : Part I
  28. Target Resource (or Managed Resource) vs Trusted Source (or Authoritative Source) Mode : OIM integration with applications (AD, OID, OVD, EBS, SAP, HR, LDAP)
  29. 500 Internal server accessing OIM application : com.bea. security.MicroSM. getInstance oracle.iam. platform. authz.impl
  30. Your account is locked. You can unlock your account by going to Forgot Password
  31. OIM 11g : How to find User and Manager details : USR table
  32. OIM 11g : User Detail/Attribute (Description) not visible in OIM User screen : EBS / OID / OIM integration
  33. OIM 11g: The add proxy operation for user XXXXX failed with following error oracle. bpel. services. workflow. client. workflowservieclientException javax.xml.ws.WebServiceException could not determine wsdl ports
  34. Oracle Identity Manager BP07 for 11gR1 PS1 11.1.1.5.7 (16097399) is now available – (Part of Identity Management SUite BP03 16209876)
  35. OIM 11g : SQL to List User’s Manager
  36. OIM integrated with OAM (SSO) showing OIM login screen : User Soft Locked
  37. OIM 11g: Beware if you are applying WebLogic patch !
  38. Help Me : Microsoft Active Directory Password Sync version and latest patch for Oracle Identity Manager 9.1.1.5
  39. Upgrade OIM connector for Microsoft Exchange to 11.1.1.6 Part I
  40. OIM Administrators : Is your OIM database Growing ? Do you purge enough ?
  41. EBS Integration with OIM : Employee Reconciliation : NumberFormatException: “BUSINESS_GROUP_ID”
  42. OIM EBS User Management : eBusiness UM Lookup Definition Reconciliation failed with Invalid Schedule Task Parameter

Oracle Upgrade – from R12.2.3 to R12.2.4

$
0
0

Last week, I performed ERP Upgrade from 12.2.3 to 12.2.4. I would like to share the document, which contains the steps performed, according to environment. This is just to give an idea, user must review the following documents and take environment specific action:

  • Oracle E-Business Suite Release 12.2.4 Readme (Doc ID 1617458.1)
  • Applyng the Latest AD and TXK Release Update Packs to Oracle E-Business Suite Release 12.2 (Doc ID 1617461.1)
  • DataInstall and HRGLOBAL Application: 12.2 Specifics (Doc ID 1469456.1)
  • Oracle E-Business Suite Release 12.2: Consolidated List of Patches and Technology Bug Fixes (Doc ID 1594274.1)

You may download the file using the URL: R12.2.3 Upgrade to R12.2.4

Learn Oracle Apps DBA (R12) with us:Training Starts on 8th of August

$
0
0
Everyone having a similar question in mind when they are freshers or are into the same field same domain for years together that which technology we should learn which should be innovative, long running, having some sort of creative touch, and my answer to all those Tech geeks or would be tech geeks is – Oracle Technologies. Oracle from last few years (will not go beyond that !!!) has developed in such a fast pace that you cannot ignore it.
When there are lots of development activities goes on and Go Live of the Projects, Testing then there is one Crucial member in the Company/Team who (usually gets ignore ;-)) manages all the environment and give optimise environment to perform all those things : Apps DBA.
Apps DBA is combination of Oracle DBA and Oracle Applications- Double Power. Apps DBA is the first entry towards the Big technology which oracle has developed. Oracle Application licenses are increasing every year and all these company are looking for Good Apps DBA who has understanding, knowledge and one of the most important Learning Attitude, to do experiment (of course not on PROD!!!).
Who can learn Apps DBA ?
Logically if I want to answer. Here is the list
  • All the Freshers, Newbies or may be who want to enter Oracle Applications Area.
  • Who is into Core DBA from years and want new technology to learn.
Apps DBA requirement is not only conceptual but practical as well. As much as you make your hands dirty your leaning grows many folds. When I was at your stage I always search for such institute or training which gives more practical stuff, real time scenarios but was not able to get it, keeping that in mind K21 Technologies is starting Apps DBA Training of R12 from 8th Aug-2015.
More Practical oriented, Dedicated instance to play around, mini projects, Support.
Apps DBA is a gateway to enter Oracle Technologies and you can move further with many feathers like Fusion Middleware ,Fusion Applications, SOA etc.
What topics I should learn to become Apps DBA
To start with you should start with Architecture, Installation, Patching, Cloning, changing Schema Password, backup & recovery. We cover this all including hands-on where you do all these using our step by step instructions on our Server.
Who ever wants to learn please get enrolled soon as seats are limited. K21 focus on Quality Training with Full Money back Guarantee (If you are not happy after 2 sessions then you can ask for Full Money Back )

For further details check

http://k21technologies.com/oracle-apps-dba-training

The post Learn Oracle Apps DBA (R12) with us:Training Starts on 8th of August appeared first on Oracle : Design, Implement & Maintain.

How to become/learn Oracle Apps DBA R12.2 : Part I

$
0
0

I started this blog 9 years back with first post as How to become Oracle Apps DBA (back then it was 11i) and with 225 comments, this is still the most common question I get in mail or on this blog.

We are starting our new batch for Oracle Apps DBA training (R12.2) from August 8, 2015 and first thing we cover is Architecture of Oracle E-Business Suite.  If you are learning (getting trained) on Oracle E-Business Suite on your own then first thing you should learn is Architecture of Oracle Apps.

As shown below Oracle E-Business suite is Three Tier Architecture

a) Database Tier : With Oracle Database where data resides
b) Application Tier : With Application & Web Server where business logic resides
c) Client Tier : browser based client from where end user access application

apps_architecture

 

Note: Till Oracle E-Business Suite R12.1 (prior versions include 12.0 & 11i), Application Tier uses 10g Application Server (or 9 for some versions of 11i). From Oracle E-Business Suite 12.2 onwards Application Tier is deployed on Oracle WebLogic Server as application Server.

 

applicationTierArchitecture

You can get more information on Architecture of Oracle E-Business Suite in Concepts Guide or learn it from our expert team by registering to Oracle Apps DBA Training (starting on 8th August) where Day1 covers

Architecture and File System
  • Architecture of R12.2
  • Changes in Oracle Apps from previous version
  • Requirement/Hardware Sizing Guidelines
  • File System Overview
  • Benefit of New Architecture
  • File System including Changes from previous version
Architecture and File System (Lab Activity)
  • Provide one working instance of R12.2 to the Trainee with Front end and backend access
  • Get comfortable with the Terminology/File system/Environment Variables
  • Understand the Architecture via Navigation

 

Get 200 USD off by registering before 20th July and use code A2OFF at time of checkout (We limit seats per batch to register early to avoid disappointment).

 

The post How to become/learn Oracle Apps DBA R12.2 : Part I appeared first on Oracle : Design, Implement & Maintain.

Viewing all 44 articles
Browse latest View live


Latest Images