RE: ords/tomcat help

Running java -jar ords.war validate for your connection pool might help – it’ll confirm everything is there that needs to be there to service that db and/or APEX

From: Bill Ferguson <wbfergus_at_gmail.com> Sent: Wednesday, January 30, 2019 8:36 AM To: backseatdba_at_gmail.com
Cc: anthonycsanchez_at_gmail.com; oracle-l-freelist <oracle-l_at_freelists.org> Subject: Re: ords/tomcat help

Jeff,

I by no means am an expert on this "stuff", as there are so many different moving parts. But, I've also had my installation up and running for probably around 15 years or so, since like HTMLDB 3? My system sounds similar to yours, but I'm running on Windows Server 2012 R2, Tomcat 7, ORDS 3. I'll be starting another post with a new issue I've been tasked with implementing shortly, it deals with SAML 2.0 in this environment.

Anyway, some of these may be legacy id's from previous installs that never got removed, and I may have some security violations. But, perhaps this may get you to connect, and then others can chime in with what I may have incorrectly set.

In Oracle, I have 5 users that seem to have bearing on Apex and the web. They are:

Apex_050000 (this one is version dependent)

Apex_Listener

Apex_public_user

Apex_rest_public_user

ORDS_public_user

In my installation, all of them have the same password as what I used in the ORDS setup, and all 5 of the accounts are unlocked and not expired. With this, you should be able to at least connect correctly to Apex through your webserver. But, as I said, this configuration may not be properly secured either. Hopefully after you can establish a connection, then others can chime in with the proper combination of which accounts to lock, etc.

Bill Ferguson

On Fri, Sep 7, 2018 at 12:17 PM Jeff Chirco <HYPERLINK "mailto:backseatdba_at_gmail.com"backseatdba_at_gmail.com> wrote:

Thanks Anthony.  I tried that and I ended up with a different error.  So I decided to just delete all the apex_xx.xml files cause some of them were dated really old.   I then ran

$JAVA_HOME/bin/java -jar ords.war

It then walked me through setup and and recreated those xml files.  This time I was getting invalid password for apex|pu.  I tried your method for encrypting the file for that one but no luck. So I just put the actual password in the apex_pu.xml file.  I can't get it to re-encrypt the file.  However after I start ords I am not getting this message on the page.  Feels like I am getting closer

On Fri, Sep 7, 2018 at 10:19 AM anthony Sanchez <HYPERLINK "mailto:anthonycsanchez_at_gmail.com"anthonycsanchez_at_gmail.com> wrote:

Hi Jeff,

do you see this user getting locked out?  APEX_PUBLIC_USER?

have you tried re-encrypting your good working password for apex public user in apex.xml?

I think if you put an ! followed by your password and restart tomcat it will be reencrpyted.

for example if your working password is Password you would change this

<?xml version="1.0" encoding="UTF-8" standalone="no"?>

<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">

<properties>

<comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>

<entry key="db.password">_at_05D745EDD5A466F362FF08A22A072DB77A9E8D55EBED8029D9</entry>

<entry key="db.username">APEX_PUBLIC_USER</entry>

</properties>

to this

<?xml version="1.0" encoding="UTF-8" standalone="no"?>

<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">

<properties>

<comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>

<entry key="db.password">!Password</entry>

<entry key="db.username">APEX_PUBLIC_USER</entry>

</properties>

thanks,

Anthony

On Thu, Sep 6, 2018 at 3:10 PM Jeff Chirco <HYPERLINK "mailto:backseatdba_at_gmail.com"backseatdba_at_gmail.com> wrote:

Yep I manually logged into each apex user account with the same password. Still having same issue.  I am not getting errors about apex pu, al, or rt just this pool named |apex|

WARNING: The pool named: |apex|| is invalid and will be ignored: The username or password for the connection pool named apex, are invalid, expired, or the account is locked

Sep 06, 2018 2:07:17 PM

On Thu, Sep 6, 2018 at 1:58 PM Jeff Smith <HYPERLINK "mailto:jeff.d.smith_at_oracle.com"jeff.d.smith_at_oracle.com> wrote:

You could run the install again – but also make sure the apex public user is ALSO unlocked

From: Jeff Chirco <HYPERLINK "mailto:backseatdba_at_gmail.com"backseatdba_at_gmail.com> Sent: Thursday, September 6, 2018 4:25 PM To: Jeff Smith <HYPERLINK "mailto:jeff.d.smith_at_oracle.com"jeff.d.smith_at_oracle.com> Cc: Mark Bobak <HYPERLINK "mailto:mark_at_bobak.net"mark_at_bobak.net>; Stefan Knecht <HYPERLINK "mailto:knecht.stefan_at_gmail.com"knecht.stefan_at_gmail.com>; oracle-l-freelist <HYPERLINK "mailto:oracle-l_at_freelists.org"oracle-l_at_freelists.org> Subject: Re: ords/tomcat help

Hi Jeff,  Which apex user account.  I checked and APEX_PUBLIC_USER password is matching.

On Thu, Sep 6, 2018 at 12:57 PM Jeff Smith <HYPERLINK "mailto:jeff.d.smith_at_oracle.com"jeff.d.smith_at_oracle.com> wrote:

Well that error is a pretty big one.

ORDS can’t establish a connection pool to run your APEX app.

Change the apex user password in the database to match what you have in the ords config files or vice versa.

From: Jeff Chirco <HYPERLINK "mailto:backseatdba_at_gmail.com"backseatdba_at_gmail.com> Sent: Thursday, September 6, 2018 3:27 PM To: Mark Bobak <HYPERLINK "mailto:mark_at_bobak.net"mark_at_bobak.net> Cc: Stefan Knecht <HYPERLINK "mailto:knecht.stefan_at_gmail.com"knecht.stefan_at_gmail.com>; oracle-l-freelist <HYPERLINK "mailto:oracle-l_at_freelists.org"oracle-l_at_freelists.org> Subject: Re: ords/tomcat help

Apex 18.1

ORDS 18.2ZZZ Apacke Tomcat 9.0.10

This is the only warning I see in the logs

WARNING: The pool named: |apex|| is invalid and will be ignored: The username or password for the connection pool named apex, are invalid, expired, or the account is locked Sep 04, 2018 9:51:43 PM

I am running in standalone mode and I don't see any other errors.

On Thu, Sep 6, 2018 at 11:48 AM Mark J. Bobak <HYPERLINK "mailto:mark_at_bobak.net"mark_at_bobak.net> wrote:

Also, try turning ords.war in Standalone mode.

java -jar ords.war standalone 

It should be clear if you're missing any Oracle DBA users, or if you have the wrong password for any of them.

-Mark 

On Thu, Sep 6, 2018, 13:39 Stefan Knecht <HYPERLINK "mailto:knecht.stefan_at_gmail.com"knecht.stefan_at_gmail.com> wrote:

Restart ORDS after setting them to true, BTW.

On Fri, Sep 7, 2018 at 12:37 AM, Stefan Knecht <HYPERLINK "mailto:knecht.stefan_at_gmail.com"knecht.stefan_at_gmail.com> wrote:

Turn those two on in your defaults.xml in the ORDS installation directory:

<entry key="debug.debugger">false</entry>

<entry key="debug.printDebugToScreen">false</entry>

Then you should get more information.

On Thu, Sep 6, 2018 at 11:14 PM, Jeff Chirco <HYPERLINK "mailto:backseatdba_at_gmail.com"backseatdba_at_gmail.com> wrote:

I am working on setting up Tomcat/ORDS/APEX for the first time.  I have a Linux box with Tomcat installed. I followed Tim's notes for ORDS install

HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=https-3A__oracle-2Dbase.com_articles_misc_oracle-2Drest-2Ddata-2Dservices-2Dords-2Dinstallation-2Don-2Dtomcat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=KPj0MSF4snLbyTibImr6x9psDGcy6ymSAiQOqUnluOk&e="https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-installation-on-tomcat

But when I try to go the site I get the Oracle REST Data Services page but with a 404 Not Found.

I copied the APEX images to my /tomcat/webapps/i folder.  What is usually the cause of this?

Appreciate any help.

Thanks,

Jeff

-- 

//

zztat - The Next-Gen Oracle Performance Monitoring and Reaction Framework!

Visit us at HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e="zztat.net | _at_zztat_oracle | HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e="fb.me/zztat | HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e="zztat.net/blog/





 

-- 

//

zztat - The Next-Gen Oracle Performance Monitoring and Reaction Framework!

Visit us at HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e="zztat.net | _at_zztat_oracle | HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e="fb.me/zztat | HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e="zztat.net/blog/



-- 

-- Bill Ferguson


--
http://www.freelists.org/webpage/oracle-l