Skip navigation.

APPS Blogs

Oracle Unified Method 5 Essentials

Oracle e-Business Suite - Tue, 2012-05-15 08:10

Oracle Unified Method 5 Essentials (1Z0-568) exam tests partners who are skilled in Oracle’s all inclusive methodology. The certification covers the core features the Oracle Unified Method suite, including but not limited to, Focus Areas, Use Cases, and Requirements Gathering. The certification proves a baseline of the consultant’s knowledge and allows the implementation team to work as a cohesive team from day 1. The exam targets the intermediate-level implementation team member. Up to date training and field experience are recommended.

Oracle Unified Method 5 Certified Implementation Specialist, The Oracle Unified Method Certified Implementation Specialist Certification identifies professionals who are skilled in Oracle’s all inclusive methodology. The certification covers the core features the Oracle Unified Method suite, including but not limited to, Focus Areas, Uses Cases, and Requirements Gathering. The certification proves a baseline of the consultant’s knowledge and allows the implementation team to work as a cohesive team from day 1. Up-to-date training and field experience are highly recommended.

This certification is available to all candidates but is geared toward members of the Oracle Partner Network who are focused on selling and implementing this technology. OPN Members earning this certification will be recognized as OPN Certified Specialists, which helps their companies qualify for the Oracle Unified Method Specialization.

http://www.oracle.com/partners/en/knowledge-zone/applications/oum-exam-426119.html


Categories: APPS Blogs

Oracle Fusion Applications (FA) 11g R1 PS3 (11.1.4) is now available

Online Apps DBA - Mon, 2012-05-14 16:09


 

 

Last week Oracle released Fusion Applications (FA) 11g R1 Update 3 (11.1.4). I am going to cover new features in FA version 11.1.4 for Administrators in my upcoming posts .

  • For now download Oracle Fusion Apps 11.1.4 from eDelivery
  • Documentation of Fusion Apps 11.1.4 is available here

 

Contact Us If you are looking for Fusion Applications InstallationImplementation or Training.

Previous in series Related Posts for Fusion Apps
  1. Oracle Fusion Applications Overview
  2. Oracle Fusion Application for Apps DBAs – Concepts
  3. Install Oracle Fusion Applications in 10 Steps
  4. Oracle Fusion Applications : Provisioning Framework Overview
  5. Oracle Fusion Applications : Provisioning Framework Installation
  6. Provision Transaction Database for Oracle Fusion Applications
  7. Create Fusion Applications Schema using RCU : fusion & otbi
  8. Fusion Application 11.1.1.5.1 is now available
  9. Fusion Apps Installation : Database Provisioning Failed during listener start
  10. Fusion Applications : 128 GB memory and 500 GB Disk space : Are you ready
  11. Fusion Applications 11.1.1.5.1 Part I – Install Identity and Access Management (OID/OAM/OIM) 11g
  12. Fusion Applications 11.1.1.5.1 Installation Part II – Configure Oracle Internet Directory
  13. Fusion Applications 11.1.1.5.1 Installation Part III – Configure Policy and Identity Store
  14. Fusion Applications 11.1.1.5.1 Installation Part IV – Extend WebLogic Domain to include OIM/OAM and configure OIM
  15. Fusion Applications 11.1.1.5.1 Installation Part V – Integrate OIM with OAM
  16. Oracle Fusion Application 11.1.3 is now available
  17. Oracle Fusion Applications 11.1.3 Installation Experience
  18. FA Installation Error : runProvisioning-preverify FAPROV-00298 make sure password FUSION_RUNTIME schema password is valid
  19. FA Installation Error 2 – List of failed Validation in OIM OAM_Validation: Cannot perform OAM Validation as null
  20. Identity & Access Management configuration for Oracle Fusion Applications – Part I
  21. Oracle FA Installation Error 3: private-preverify-free-space The file system only has 190113 MB, but 204800 MB is needed
  22. Oracle Fusion Applications (FA) 11g R1 PS3 (11.1.4) is now available
Categories: APPS Blogs

Oracle #WebLogic Server 12c : SE vs EE vs Suite License Options

Online Apps DBA - Sat, 2012-05-12 03:43


In this post I am going to cover License Options available with Oracle WebLogic 12c , Contact Us If you are looking for any help on WebLogic Licenses.

 

WebLogic Server 12c is available in three licensing offering (with additional management packs) – WebLogic Standard Edition (SE), Enterprise Edition (EE), and WebLogic Suite

  • a) WebLogic SE : Non clustered version of WebLogic Server + Web Tier + Java SE + TopLink Persistence Engine + Application Development Framework (ADF)
  • b) WebLogic EE : everything in WebLogic SE + WebLogic Clustering + advanced Java SE + JRockit Real Time + Diagnostic Pack/AD4J (Application Diagnostics for Java) + Virtual Assembly Builder
  • c) WebLogic Suite : everything in WebLogic EE + Coherence EE + Active GridLink for RAC + JRockit Realtime + iAS EE (Oracle Forms/Reports/Discoverer/Portal)

With all the three licenses above, you can add two additional products for Management and Provisioning (with additional price)

  • d) WebLogic Server Management Pack EE : includes Application Performance Management, Business Transaction Management, Configuration Management, Service Level Management, Lifecycle Management
  • e) Cloud Management Pack for Fusion Middleware (FMW) : Template Provisioning, Metering/Chargeback for business users, Virtual Assembly Deployment, Cloud Setup

With WebLogic EE & WebLogic Suite, you can add additional product Exalogic Elastic Cloud Software (if you are using Exalogic ) (with additional price)

  • f) Exalogic Elastic Cloud : Exalogic Optimization

With WebLogic Suite, you can add additional product coherence for distributed data service platform (with additional price)

  • g) WebLogic Coherence Grid Edition : Coherence Grid Edition
Previous in series Related Posts for Learn WebLogic with Us
  1. Oracle WebLogic Installation Steps
  2. Domain , Administration & Managed Server, Cluster in Oracle WebLogic
  3. Create Domain in Oracle WebLogic
  4. Oracle WebLogic Server – Startup/Shutdown
  5. Oracle WebLogic Server 10g R3 10.3 is out now
  6. Deploy Application on Oracle WebLogic Server
  7. Cluster Architecture : Oracle WebLogic Server
  8. Start WebLogic Server on Linux on port 80, 443 <= 1024
  9. JDBC (Java DataBase Connectivity ) in Oracle WebLogic – Overview
  10. WebLogic Server JDBC for Database connection : Step by Step
  11. Security in Oracle WebLogic : Realm, Security Provider, Authentication, Authorization, Users
  12. Deploy ADF application to Oracle WebLogic Server
  13. Node Manager in Oracle WebLogic Server
  14. Configure Oracle HTTP Server infront of Oracle WebLogic Server mod_wl_ohs
  15. How to install weblogic server on 64 bit O.S. (Linux /Solaris) ?
  16. Oracle WebLogic Login Issue : Password is not correct (Password Lock Policy)
  17. Oracle WebLogic Server : Node Manager in nutshell
  18. Certification : 1Z0-108 Oracle WebLogic Server 10g System Administrator Certified Expert
  19. How to integrate WebLogic with Oracle Internet Directory for Login : Authentication
  20. opatch, adpatch and now “smart update” (BSU) to apply weblogic patches
  21. Disater Recovery documentation for Oracle WebLogic Server 11g (Fusion Middleware)
  22. Authentication Providers in #WebLogic – Oracle Access Manager Identity Assertion for Single Sign-On and OAM Authenticator
  23. Error while starting WebLogic Server : java.lang.NumberFormatException: null
  24. #WebLogic startup prompting from username password : boot.properties
  25. BEA-000286 : Failed to invoke startup class “JRF Startup Class” oracle.jrf.wls.JRFStartup
  26. WebLogic Kerberos (SSO) Authentication Issue : Error 401 Forbidden : No Configuration was registered that can handle the configuration named com. sun. security. jgss. krb5. accept
  27. How to reset Lost Oracle WebLogic Password for Fusion Middleware Applications
  28. Oracle WebLogic Server Certification : 1Z0-108 Practice Question and Dumps
  29. WebLogic Startup fails with Unable to obtain lock on Server may already be running
  30. Oracle Weblogic 12c Launch : Attend online on 1 Dec 2011
  31. Oracle WebLogic 12c (12.1.1) is now available to download
  32. How to Install WebLogic 12C (12.1.1) on Mac
  33. Oracle #WebLogic Server 12c : SE vs EE vs Suite License Options
Categories: APPS Blogs

Potential Supplier Registration and Bank Definition

Oracle e-Business Suite - Fri, 2012-05-11 23:47

While potential Supplier Registration in R12.1.x, when supplier wants to create a new Bank, Branch or Bank Account system gives error “Bank Does not exist”.

This will problem will happen if Supplier selects “Account is used for Foreign Payments”

This issue can be resolved by Applying Patch “11058802:R12.IBY.B”. This is not documented on metalink in any published note


Categories: APPS Blogs

Hardware Components Failures — Survey Results

Alex Gorbachev - Thu, 2012-05-10 07:14
When preparing for the the IOUG Collaborate 12 deep dive on deploying Oracle Databases for high Availability, I wanted to provide some feedback on what hardware components are failing most frequently and which ones are less frequently. I believe I have reasonably good idea about that but I thought that providing some more objective data [...]
Categories: APPS Blogs

Supplier Search results in ‘No results found’

Oracle e-Business Suite - Wed, 2012-05-09 23:18

While Searching Supplier using Payable Manager or any other responsibility in R12.1.X results into ‘No Results Found’ though supplier is already defined in system.

This is because POS: SM: Enable Data Security for Supplier” profile option value. Value should be NO at site level. In case if  you wish to use this feature the refer to Oracle Supplier Management Implementation and Administration Guide


Categories: APPS Blogs

Storage Replication for Oracle Database and Licensing

Alex Gorbachev - Wed, 2012-05-09 16:30
While doing my high availability deep dive at Collaborate 12 few weeks ago, I stated that storage replication qualifies for the cold failover licensing rules (see slide #128). During collaborate I spoke to one person at Oracle who definitely knows the rules. Simon Haslam also reached out to me by email pointing out that things [...]
Categories: APPS Blogs

Something about Supply Chain Management Operations Strategy

Oracle e-Business Suite - Wed, 2012-05-09 06:10

Following are Supply chain Management operations Strategies

Make to stock is the best strategy for standardized products that sell in high volume. Larger production batches keep manufacturing costs down, and having these products in inventory means that customer demand can be met quickly.

Make to order is the preferred strategy for customized products or products with infrequent demand. Companies following this strategy produce a shippable product only with a customer order in hand. This keeps inventory levels low while allowing for a wide range of product options.

Configure to order is a hybrid strategy in which a product is partially completed to a generic level and then finished when an order is received. This is the preferred strategy when there are many variations of the end product and you want to achieve low finished-goods inventory and shorter customer lead times than make to order can deliver.

Engineer to order, which shares many of the characteristics of make to order, is used in industries where complex products and services are created to unique customer specifications

Strategy When to Choose This Strategy Benefits Make to stock For standardized products selling in high volume Low manufacturing costs; meeting customer demands quickly Configure to order For products requiring many variations Customization; reduced inventory; improved service levels Make to order For customized products or products with infrequent demand Low inventory levels; wide range of product options; simplified planning Engineer to order For complex products that meet unique customer needs Enables response to specific customer requirements

Now days I am reading a book “STRATEGIC SUPPLY CHAIN MANAGEMENT “ written by SHOSHANAH COHEN & JOSEPH ROUSSEL above is extract from that


Categories: APPS Blogs

Compiling Forms in Oracle Apps R12 : APP-WSH-231210 ORA-04062 WSH_DELIVERY_DETAILS_INV

Online Apps DBA - Tue, 2012-05-08 19:56


.

Last week for our Order Management training while checking transaction status in Order Management (Responsibility Order Management Super User, Vision Operations (USA) : Navigation : Shipping >> Transaction) trainees faced error APP-WSH-231210 An unexpected Error Occurred for Line .. The Error is ORA-04062 signature of package APPS.WSH_DELIVERY_DETAILS_INV has been changes

Looking at error message it is clear that fix is to compile invalid database objects and recompile form. Fix is well explained in My Oracle Support Note # 1315451.1 Shipping Transactions Form Errors: APP-WSH-231210, ORA-04062 which is to

a) Apply patch 8294645 (For EBS 12.1)
b) Drop package APPS.WSH_DELIVERY_DETAILS_INV
c) Create package spec and body by running  $WSH_TOP/patch/115/sql/@WSHDDICS.pls & @WSHDDICB.pls
d) Finally compile forms WSHSTREF.fmb, WSHFSTRX.fmb, WSHQSSUI.fmb

 

What this note doesn’t cover is how to compile forms and if you are not familiar with how to compile forms in EBS R12 then compiling forms is task in itself.

.

File with fmb extension is source form file where as file with fmx extension is compiled form . fmb’s in Oracle E-Business Suite (11i or R12) are stored in AU_TOP/forms/<US> directory where are fmx’s are stored in <PRODUCT_TOP>/forms/<US> directory (for example compiled forms related to WSH products should be in $WSH_TOP/forms/<US> directory )

 

To compile form in R12 (to convert fmb to fmx)

  • Set environment file on apps tier R12_BASE/ apps/ apps_st/ appl/ APPS<sid>_<hostname>.env
  • export FORMS_PATH and add AU_TOP/forms/US in FORMS_PATH like
    export FORMS_PATH=$FORMS_PATH:$AU_TOP/forms/US
  • Change to form compilation executable directory (10.1.2 Oracle Home in R12)
    cd $ORACLE_HOME/bin
  • Compile three forms using frmcmp_batch.sh|bat as./frmcmp_batch.sh module=$AU_TOP/forms/US/WSHSTREF.fmb userid=APPS/apps output_file=$WSH_TOP/forms/US/WSHSTREF.fmx module_type=form
  • Repeat this for WSHQSSUI.fmb and WSHFSTRX.fmb

Note: Ensure that timestamp changes for above three fmx in $WSH_TOP/forms/US/

Note: If you get error like “ORA-12154: TNS:could not resolve the connect identifier specified” during forms compilation, check My Oracle Support Note 431324.1

Note: If you get error like “Compiling package body INVENTORY_CONTROLS…Compilation error on package body INVENTORY_CONTROLS:PL/SQL ERROR 49 at line 867, column 5 bad bind variable ‘parameter.wms_installed‘” make sure that FORMS_PATH includes $AU_TOP/forms/US

 

References/Related

  • R12.1: Shipping Transactions Form Errors: APP-WSH-231210, ORA-04062 [ID 1315451.1]
  • 1085928.1 – R12: How to Compile a Form in Release 12
  • 431324.1 R12: Manual Forms compilation In R12 fails With: FRM-91500: Unable to start/complete the build
Previous in series Next in seriesRelated Posts for Apps R12
  1. Oracle Apps R12 Forms : Servlet or Socket
  2. Release Update Pack for Oracle Applications R12
  3. Difference between Oracle Apps 11i and R12 (Technical)
  4. Unified APPL_TOP : Changed Feature in Oracle Apps R12
  5. Oracle R12/12i log file (Patch, Clone, Startup/Shutdown)
  6. Upgrade Oracle Apps 11i to R12/12i (12.0.4) – Key Points
  7. Oracle Apps Release 12.1 , Guess official release date ?
  8. Oracle 12.0.6 R12 RUP6 is Out now
  9. Application Tier Services in Oracle Apps R12
  10. Why should Oracle Apps (EBS) DBAs learn WebLogic Server ? Release 12.2 with FMW 11g
  11. Compiling Forms in Oracle Apps R12 : APP-WSH-231210 ORA-04062 WSH_DELIVERY_DETAILS_INV
  12. How to compile Apps Schema (invalid objects) in R12 ?
Categories: APPS Blogs

How Do You Moderate LinkedIn Discussion Forums?

Alex Gorbachev - Tue, 2012-05-08 15:08
These are my personal rules that I’ve been following moderating the public forums on LinkedIn. I’ve posted on that topic in the discussion on IOUG Exadata SIG forum. As I’m passing RAC SIG group to the next folks on the board (I’m the RAC SIG president until end of August) I needed to hand over [...]
Categories: APPS Blogs

Weekday Batch of Online Oracle Weblogic Administrator Training commencing from 14th May 2012

Online Apps DBA - Tue, 2012-05-08 04:21


We are glad to announce the new Weekday batch of Oracle Weblogic Administrator  Training starting 14th May 2012.

Why this training is necessary:

This course trains system administrators and data center personnel on techniques for installing, configuring, deploying, and securing distributed, clustered applications and systems deployed on Oracle WebLogic Server. This training focuses on techniques for building high-availabilit,clustered configurations to ensure maximum application uptime. Methods for hardening the implementation to provide reliable security are also emphasized.

For course Content: Click Here

Course Fee:  USD 499

Training schedule: [Monday to Thursday (US) and  Tuesday to Friday (GMT)]

Timings : Click Here

Training Schedule : 18 Days

Payment Details: Click Here

Our Forte

  •   Customized and flexible training packages
  •   Customized course contents as per your implementation needs
  •   Extremely competitive prices
  •   Extensive Hands-on training
  •   Certified Oracle Apps Instructors with real-time experience
  •   Courses designed for the latest Oracle Apps versions
  •   Study material with presentations & lab exercises designed by industry experts
  •   Practice at your leisure 24/7 during the training
  •   Email support post training completion

Mode of training:

Our trainings are conducted online using an interactive web-conferencing software which also has integrated VoIP. Participants will be able to view trainer’s desktop remotely & communicate with him at the same time. Trainer can also take control of your PC/Laptop in case you get stuck while performing exercises. For Audio, you need to have a headset (earphone & microphone).

To view the Training Testimonials – Click Here

For any queries send an email at training @ focusthread . com

Categories: APPS Blogs

Weekend Online Oracle R12 Apps DBA Training commencing from 13th May 2012

Online Apps DBA - Tue, 2012-05-08 04:07


We are glad to announce the new batch of Oracle Apps DBA R12 Training starting 13th May 2012.

Why this training is necessary:

Our online course gives you an exposure to Oracle Applications which enhances job prospects. Oracle Apps DBA’s are paid higher and face lesser competition in the job market as compared to Core DBA’s. We will see a growth in the requirement of Apps DBA’s thanks to Oracle’s Acquisition of Siebel, Peoplesoft, JDEdward and launch of Fusion Applications.

For course Content: Click Here

Course Fee:  USD 799

Training schedule:- 13, 19, 20, 26, 27 May 02 & 03 June 2012

Timings : 1:00PM GMT | 9:00AM EST | 6:00AM PST | 8:00AM CST | 7:00AM MST | 6:30PM IST

Training Duration:  7 Days

Payment Details: Click Here

Our Forte

  •   Customized and flexible training packages
  •   Customized course contents as per your implementation needs
  •   Extremely competitive prices
  •   Extensive Hands-on training
  •   Certified Oracle Apps Instructors with real-time experience
  •   Courses designed for the latest Oracle Apps versions
  •   Study material with presentations & lab exercises designed by industry experts
  •   Practice at your leisure 24/7 during the training
  •   Email support post training completion

Mode of training:

Our trainings are conducted online using an interactive web-conferencing software which also has integrated VoIP. Participants will be able to view trainer’s desktop remotely & communicate with him at the same time. Trainer can also take control of your PC/Laptop in case you get stuck while performing exercises. For Audio, you need to have a headset (earphone & microphone).

To view the Training Testimonials – Click Here

For any queries send an email at training @ focusthread . com

Categories: APPS Blogs

Exporting and importing of policies in OAM 11g

Online Apps DBA - Fri, 2012-05-04 08:28


 

This post talks about the command used to export and importing of OAM 11g policies. OAM 11g provides this functionality through WLST scripting tool. This is the only possible approach to automatically export all policies from OAM 11g. The below steps are appropriate in linux env for exporting policies.

  1. Goto $ORACLE_HOME/common/bin.
  2. Run ./wlst.sh
  3. connect(‘weblogic’,'password’,'t3://weblogic_host:port’)
  4. exportPolicy(pathTempOAMPolicyFile,’/app/shared/home/tmweb/Oracle/Middleware_Dev2/oam_policies.xml’)

Refer the below screenshot for the output.

For importing policies into target OAM environment, follow the below steps:

  1. Goto $ORACLE_HOME/common/bin.
  2. Run ./wlst.sh
  3. connect(‘weblogic’,'password’,'t3://weblogic_host:port’)
  4. importPolicy(pathTempOAMPolicyFile,’/app/shared/home/tmweb/Oracle/Middleware_Dev2/oam_policies.xml’)

The exported policies xml file (oam_policies.xml in this case) contains the below data:

  1. Authentication schemes
  2. Host Identifiers
  3. Application domains: Resources, Authentication/Authorization policies etc.,

Hope this post helps.

Categories: APPS Blogs

How to set and get session attributes in OAM 11g

Online Apps DBA - Fri, 2012-05-04 06:06


Session & session attributes are newly introduced in OAM 11g. OAM 11g maintains a session at server side the sessionIds are managed by Session Management Engine SME. How to retrieve session IDs from OAM server are explained in post. So this post will give a sample code snippet to set and retrieve session attributes from session.

OAM session ID is around 20 characters and will be of the format d331ab34-2e17-4c5c-8ba1-a7cdf695150c. Session IDs can also be seen in OAM database schema by using sql command select * from oam_session;

The above sql command output will have results similar as shown below.

SESSIONID
——————————————————————————–
USERID
——————————————————————————–
IDENTITY_DOMAIN
——————————————————————————–
SESSION_INDEX
——————————————————————————–
CREATE_TIME
—————————————————————————
LAST_ACCESS_TIME
—————————————————————————
LAST_UPDATE_TIME
—————————————————————————
EXPIRY_TIME
4c2cdff7-0cbf-4723-aaab-489c06366d96
LN-Admin
NewOVDStore
-3226491390739477568
04-MAY-12 03.28.39.124000 AM
04-MAY-12 03.28.39.124000 AM
04-MAY-12 03.28.41.536000 AM
04-MAY-12 11.28.39.124000 AM

So it is merely easy to identify the session ID associated with which user IDs. The same behavior can also be seen in OAM console in Session Management section.

So the below snippet can be used to set and retrieve the session attributes from session.

Hashtable credentials = new Hashtable ();
credentials.put(“userid”, user_login);
credentials.put(“password”, user_passwd);
try{
AccessClient ac=null;
ResourceRequest req ;
ac = AccessClient.createDefaultInstance(Location,AccessClient.CompatibilityMode.OAM_10G);
req = new ResourceRequest(protocol, resource,method_way);
System.out.println(“Location–>”+Location);
UserSession session = new UserSession(req,credentials);
String sessionToken=session.getSessionToken();
System.out.println(sessionToken);
Set set=session.getSessionIds(user_login);

Iterator it = set.iterator();

String sessionID = “”;

while (it.hasNext()){

sessionID = it.next();

}
System.out.println(“Sessionattr—>”+set);

Hashtable sessionAttributes= new Hashtable ();
sessionAttributes.put(“userid”, “mahendra”);
sessionAttributes.put(“mobile”, “999123412″);

sessionAttributes.put(“email”, “mahendra@abcd.com”);

UserSession.setSessionAttributes(sessionID, sessionAttributes);

Hashtable sessionAttrs = UserSession.getSessionAttributes(sessionID);

System.out.println(“userid from session Attributes ===>”+sessionAttrs.get(“userid”));
System.out.println(“mobile from session Attributes ===>”+sessionAttrs.get(“mobile”));
System.out.println(“email from session Attributes ===>”+sessionAttrs.get(“email”));

}catch(Exception e){}

In OAM 11g user can have multiple sessions and based on this, the attributes can be retrieved in a loop.

Categories: APPS Blogs

Username based authentication using OAM 11g

Online Apps DBA - Fri, 2012-05-04 05:46


I have worked on a OAM 11g requirement that needs to do authentication based on only username. There is a OOTB authentication scheme available in OAM 11g called LDAPNoPasswordValidationScheme. This authentication scheme uses the Authentication module LDAPNoPasswordAuthModule and that in turn points to Embedded Weblogic identity store by default.

I have to perform all this authentication using OAM 11g API. So I have created a dummy resource to test this. Pointed the LDAPNoPasswordAuthModule to OVD identity store as we are using OVD.

Used the below code snippet to test this and it worked fine.

ResourceRequest req  = new ResourceRequest(“http”, “http://host:port/dummy”,”GET”);

Hashtable credentials = new Hashtable();
credentials.put(“userid”, “mahendra”);

session = new UserSession(req,credentials);

String sessionToken=session.getSessionToken();

The Resource http://host:port/dummy is protected using LDAPNoPasswordValidationScheme and thus session token is created with just username.

 

Categories: APPS Blogs

How to read session Ids of a user from OAM 11g

Online Apps DBA - Fri, 2012-05-04 05:35


We are extensively using OAM 11g API in our project out of which there is a requirement to set session attributes for a OAM user session.

Session attributes is a concept newly introduced in OAM 11g (not there in 10g). So once OAM session is created we can retrieve the session Ids by using the API method getSessionIds of UserSession class (package is oracle.security.am.asdk). This class is available in oamasdk-api-11.1.1.5.0.jar.

We are using Embedded Weblogic as System and default store. The concepts of these stores are well explained in this post.

While trying to retrieve the session IDs for a user using the below code snippet.

Hashtable<String,String> credentials = new Hashtable<String,String>();
credentials.put(“userid”, user_login);
credentials.put(“password”, user_passwd);
try{
AccessClient ac=null;
ResourceRequest req ;
ac = AccessClient.createDefaultInstance(Location,AccessClient.CompatibilityMode.OAM_10G);
req = new ResourceRequest(protocol, resource,method_way);
System.out.println(“Location–>”+Location);
UserSession session = new UserSession(req,credentials);
String sessionId=session.getSessionToken();
System.out.println(sessionId);
Set set=session.getSessionIds(user_login);
System.out.println(“Sessionattr—>”+set);

}catch(Exception e){}

 

We are getting the below exception while executing the above code snippet:

“oracle.security.am.asdk.OperationNotPermittedException: OAMAGENT-02005: Operation not permitted on this server.”

I can read the OAM sessions from the database by logging into DB as OAM DB schema user.

select * from oam_session;

I have found that there is a bug related to session IDs 12972630. Fix for bug# 12972630 will return session ids of a user in the specified user identity stores. Right now only sessions with default store are returned.

Well, the following statement is extracted from OAM documentation for default store:

Default Store: Used by Oracle Security Token Service, and for migration purposes when patching.

So the fix for bug is to use the user identity store as default store to retrieve the session IDs from OAM server. I can’t exactly make out the reason for bug fix and default store purpose.

Anyhow,  I am using OVD as user identity store for OAM authentication. So I have flagged the OVD identity store as Default store and then I am able to retrieve the session IDs from OAM server.

Categories: APPS Blogs

How to read OAM ObSSOCookie through java script

Online Apps DBA - Fri, 2012-05-04 04:57


We have a shindig application protected by OAM 11g using an Apache 10g WebGate. Please refer my previous post on how to protect Apache Shindig application using OAM 11g.

It is very common to pass on user attributes in authorization actions as headers or cookies. However we have a requirement to get the ObSSOCookie that was created by OAM after authentication.

Well, there are cons of reading the OAM cookie and not advicable too – we will take this topic in some other post.

We have written simple java script logic to read the cookies from headers and except OAM cookie all other cookies are fetchable. So I have used the following solution to overcome this:

  1. Login to OAM console.
  2. Goto OAM Agents, click on Form Based authentication scheme. We are using Form login.
  3. Specify the parameter ssoCookie=disablehttponly in Challenge Parameter as shown below.
  4. Apply the changes.

By default the OAM 10g or 11g secures the OAM cookie in authentication scheme – hence the value for parameter is set as ssoCookie=httponly by default. This means OAM does not allow to read the OAM cookie using java script which is ideal in secured environment. In less secure environment, it is set to ssoCookie=disablehttponly.

Then we are able to read the OAM Cookies from the headers using java script.

Categories: APPS Blogs

How to protect Apache Shindig application using Oracle Access Manager 11g

Online Apps DBA - Fri, 2012-05-04 04:44


Apache shindig is one of the famous gadget applications used accross various social sites. The technology used in the backend for this shindig application is XML/JS/CSS/HTML. The front end application page will be html and gadgets are available in the format of XML embedded in html.

The shindig application URL looks like http://host:port/ShindigApp/index.htm. The Shindig application is deployed in Tomcat front ended by Apache Server. We installed a OAM 10g WebGate on Apache server and protected the above URL. Upon accessing the application it is redirecting to page where it shows “404 page not found”. It is imperative that in OAM 11g, webgates have DenyOnNotProtected value set to true by default there by all unprotected URLs will be denied with access.

So I have used headers tool to find more specifics.

The Apache Shindig application calls js URL internally while loading the application. The URL looks like

../gadgets/js/shindig-container?:rpc.js?c=1&amp;debug=1

The Shindig is loading the rpc.js which is not present in the shindig application – so I can’t make it out where exactly it is picking up. Upon googling I found that this is normal behavior of shindig while loading gadgets.

So I have specified this URL as resource and save the resource. Since the URL has ../ the policy manager got corrupted and console was showing null entries for all policies.

I am petrified with this. Atlast we have recovered the policy manager back to working state by some sql scripts – this is a topic for another day.

So the choice to unprotecting shindig URLs is faded out. So I have tried setting DenyOnNotProtected flag to false and reconfigured webgate and I am able to access the OAM protected shindig application well.

Hope this is useful.

Categories: APPS Blogs

You have encountered an unexpected error. Please contact the System Administrator for assistance.

Online Apps DBA - Thu, 2012-05-03 23:48


Hi All,

 

In today post I am going to cover Oracle Ebiz applications login issue.

Problem Description:

SSO Environment: Oracle application single sign on server 10.1.4.3 (HTTP, OC4J, and OID), OAM10g, OAS 10g and OIM 9.2 services existing in two nodes and it’s clustered. DB is in RAC mode.

Oracle Ebiz Environment: It’s a multi node environment (12.1.3 unified APPL TOP) with forms, Application listener, web services and (concurrent) Report server existing in two nodes and it’s clustered. DB is in RAC mode.

Two weeks back we have fixed OSSO_OEBS integration issue. For more information click here.

 

We have noticed an error when continuously login into OEBS application more than 5 to 10 times in same browser without close.

 

The ERROR which we have seen is

Error Page
You have encountered an unexpected error. Please contact the System Administrator for assistance.

 

Later we find the root cause for this issue, the users does not have the proper responsibilities and self service session needs to function correctly.

 

When users are not created in the E-Business suite, then the users will not have any responsibilities defined. The recommended solution is currently for you to use the normal eBiz System Administration screens to update specific users with their specific responsibilities, however we have implement a custom process to achieve the same.

 

Following metalink helped us to assign role to user in OEBS:

11i: How To Assign A Default Responsibility To New Users Provisioned From Oid? (Doc ID 431721.1)

 

We have applied following workaround

============

1.            Log into the E-Business suite as the SYSADMIN user and choose Security: User > Define

2.            Query the respective user

3.            Add the “Preferences SSWA” responsibility

4.            Add all other responsibilities required by this user.

5.            Close all browser sessions

6.            Re-test the login

 

We are able to login/logout into Oracle Ebiz applications without errors and warnings with users. Applications are working fine after 5-6 login & logout attempts…

 

I hope this post will help you. Thanks. :)

 

Categories: APPS Blogs

I’ve been cheating on my Blog

David Haimes - Wed, 2012-05-02 22:56

I have been spending time writing on another blog, it’s nothing you did, it’s about me.  I was drawn in by the star studded list of other guest bloggers such as Steve Miranda, Terrance Wampler and Steve Boese and I couldn’t resist when the offer was there to guest write on the Oracle Applications Blog.  Now that is out in the open I feel better, I mean you were all going to find out eventually but I wanted you to hear it from me.  I have to confess I was nervous at first but I was encouraged to be myself and then it was much easier.  My first draft was kicked back at me and I was asked to make it more personal, when I read the first draft again I realized it was like a marketing release, I wasn’t speaking in my own ‘voice’.  So I reworked an example I used here a while ago and I felt got my point across and it’s now a very personal post, drawing on my love of toast in the mornings and relating it to embedded BI.  So I would strongly recommend pointing your RSS readers at the Oracle Applications Blog.


Categories: APPS Blogs