OAM admin server startup: Received fatal alert: certificate_unknown

We were doing OAM 11gR2ps2 to OAM 11gr2Ps3. We also upgraded JDK as part of this upgrade.After that we got errors while starting admin server.

<Feb 23, 2017 6:12:44 AM CST> <Warning> <Coherence> <BEA-000000> <2017-02-23 06:12:44.515/188.594 Oracle Coherence GE 3.7.1.13 <Warning> (thread=PacketListener1, member=n/a): TcpDatagramSocket{bind=ServerSocket[addr=/x.y.z,localport=9097]}, exception regarding peer host-sid-hostname.com/x.y.z.:9095, General SSLEngine problem; Certificates does not conform to algorithm constraints>
<Feb 23, 2017 6:12:44 AM CST> <Warning> <Coherence> <BEA-000000> <2017-02-23 06:12:44.515/188.594 Oracle Coherence GE 3.7.1.13 <Warning> (thread=PacketListener1, member=1): TcpDatagramSocket{bind=ServerSocket[addr=/x.y.z,localport=9095]}, exception regarding peer /x.y.z:31657, Received fatal alert: certificate_unknown>

Since we upgraded Java from  java version "1.7.0_67"   to java version "1.7.0_121".We had to do few additional steps.

As per oracle the cause is "The SSL MD5withRSA support is deprecated as of JDK 1.7 release 95. So the old key/certificate stores when used with later JDK version (ex: 7u101) user started seeing the above reported error."


Solution:
copy old cacerts from old JDK-HOME/jre/lib/security directory to the new JDK-HOME/jre/lib/security directory.

ORA-01917: user or role 'ODS' does not exist

Faced some issue while running OID 11.1.19 RCU.

Error:oracle.sysman.assistants.rcu.backend.action.AbstractAction::handleNonIgnorableError: Received Non-Ignorable Error: ORA-01917: user or role 'ODS' does not exist

This seems to be related to to password verify function.We did give complex passwords.

Cause :Password policy was set. PASSWORD_VERIFY_FUNCTION is not set to NULL which causes the user creation to fail.

Fix:     alter profile default limit PASSWORD_VERIFY_FUNCTION null;

It fixed the issue and was able to proceed with RCU.

displayTrustedInputConfig() shows not available at wlst

 OAM 11.1.1.7 was patched with  BP07 patch.after that we saw below error.

wls:/oam_domain/serverConfig>
wls:/oam_domain/serverConfig> displayTrustedInputConfig()
Traceback (innermost last):
  File "<console>", line 1, in ?
  File "/stage/fmw/112/iam_112/common/wlst/Oam.py", line 681, in displayTrustedInputConfig
AttributeError: 'module' object has no attribute 'displayTrustedInputConfig'

Fix: Its a known issue.

1. Backup all .class files under OAM ORACLE_HOME/common/script_handlers

2.Removed the class files from  OAM ORACLE_HOME/common/script_handlers

For example:

Oam_common$py.class
 OamInternal_handler$py.class

2. Restart both Admin and OAM servers

3.Now it should work.

ESB 10.1.3.1/10.1.3.5

 Some customer wanted to setup 10.1.3.5 despite it being out of support.Their 3rd party application only worked on this.So , we had no choice to agree to set this up.We faced issues like our OEL was 5.+ and database was 11gr2. The 10.1.3.5 is certified for 10g database and OEL 4+. We had to work around it to make it work.The product support didnot help much as its not supported any longer.

For using 11g database with SOA 10.1.3.5 i followed,

https://blogs.oracle.com/reynolds/entry/using_11g_database_with_soa_su


The only way to ignore OEL check was to run the installer with,

runInstaller -ignoreSysprereqs 

Then came the surprises on issues after issues on simple install.I will list them out as i couldnot find any documentation in oracle support or blog on internet

1)When i login to 10.1.3.5 or 10.1.3.1 ESB, after sometime it throws .

<EXEC_CONTEXT_ID><UNIQUE_ID>129.155.176.252:60028:1463664374863:0</UNIQUE_ID><SEQ>0</SEQ></EXEC_CONTEXT_ID>
  </CORRELATION_DATA>
  <PAYLOAD>
    <MSG_TEXT>ESB bootstrap: Unknown error occured in constructor of ESB resource adapter</MSG_TEXT>
    <SUPPL_DETAIL><![CDATA[oracle.tip.esb.model.repository.exception.RepositoryException: Unable to get connection to Repository
Ensure repository is accessible
        at oracle.tip.esb.model.repository.database.DatabaseRepository.getConnection(Unknown Source)
        at oracle.tip.esb.model.repository.database.DatabaseRepository.getESBParameters(Unknown Source)
        at oracle.tip.esb.server.bootstrap.ESBBaseResourceAdapter.<init>(Unknown Source)

I reinstalled so many times due to this, total waste of time.When i checked log.xml , i found that it was filled with ORA-01017: invalid username/password; logon denied

This was baffling as user /password login worked fine.Then i realized this was 11g database so i need to make password sensitivity false!

Just run this on the database.

ALTER SYSTEM SET SEC_CASE_SENSITIVE_LOGON = FALSE;

This fixed the repository error!!

2) Orbpel issue.

redeploy:
redeploy-bpel-apps:
     [echo] == Applying BPEL patch in primary instance "oc4j_soa" ==
redeploy-orabpel:
     [copy] Copying 1 file to /sid/ias/product/1013/bpel/system/services/lib
     [copy] Copying 1 file to /sid/ias/product/1013/bpel/system/services/lib
     [copy] Copying 1 file to /sid/ias/product/1013/bpel/system/services/lib      [jar] Updating jar: /sid/ias/product/1013/bpel/system/services/lib/orabpel.ear     [echo] Re-deploying orabpel ...
     [echo] Running: java -jar /sid/ias/product/1013/j2ee/home/admin_client.jar deployer:oc4j:opmn://hostname:11722/oc4j_soa oc4jadmin [oc4jadmin-password] -redeploy -keepsettings -bindAllWebApps default-web-site -file /sid/ias/product/1013/bpel/system/services/lib/orabpel.ear -deploymentName orabpel
     [echo]       
     [java] Redeploy error: Redeploy failed: Unable to redeploy Application: orabpel does not exist!

I again tried reinstall, notes etc..it was of no use.Then i manually deployed it and did a retry on installer.It worked!




Below command can be used to deploy Orabpel.Export java_home etc..




java -jar /sid/ias/product/1013/j2ee/home/admin_client.jar deployer:oc4j:opmn://hostname:11722/oc4j_soa oc4jadmin [oc4jadmin-password] -deploy   -file /sid/ias/product/1013/bpel/system/services/lib/orabpel.ear -deploymentName orabpel -bindAllWebApps




3) Rulehelp issue.



[echo] Running: java -jar /apps/oasprd/product/AS10gR3_BPEL/j2ee/home/admin_client.jar deployer:oc4j:opmn://oa1-iprd-21:6055/BPEL_OC4J_COE oc4jadmin [oc4jadmin-password] -redeploy -keepsettings -bindAllWebApps default-web-site -file /apps/oasprd/product/AS10gR3_BPEL/rules/webapps/rulehelp.ear -deploymentName rulehelp
[echo] 

[java] Redeploy error: Redeploy failed: Unable to redeploy Application: rulehelp does not exist!

As a work around comment out, in $ORACLE_HOME/bpel/system/services/install/ant-tasks/redeploy.xml, the line 'redeploy-app file "${oracle.home}/rules/webapps/rulehelp.ear" deploymentname='rulehelp'

Acording to bug 9097350 'rulehelp.ear' file is not a vital component that will prevent the install from working. This file only provides online help for the Rules Editor UI, and if needed the .ear file can be deployed at a later date either (i) manually or (ii) using EM to deploy. 




4) There was in issue with one off patch with 10.1.3.5 installer,

To run in silent mode, OPatch requires a response file for Oracle Configuration Manager (OCM).
Run /dwwy8o/ias/product/asmt_1013/OPatch/ocm/bin/emocmrsp to generate an OCM response file. The generated response file can be reused on different platforms and in multiple OPatch silent installs.

To regenerate an OCM response file, rerun  /sid/ias/product/1013/OPatch/ocm/bin/emocmrsp.

Solution:

I just ran below command and did a retry on the installer,


 $ORACLE_HOME/ccr/bin/setupCCR -s -d

** Installing base package **
Deploying core - Version 10.3.0.1.0
Deploying engines - Version 10.2.7.1.0
Deploying metricdata - Version 10.2.4.0.3
Deploying scripts - Version 10.3.0.1.0

Oracle Configuration Manager has been configured in disconnected mode. If the
target ORACLE_HOME is running a database, please refer to the
"Post-installation Database Configuration" section of the OCM Installation
and Administration Guide
(http://www.oracle.com/technology/documentation/ocm.html) to complete the
installation.

View configuration data reports and access valuable configuration best
practices by going to MetaLink.
$

WebCenter Enterprise Capture Console or Client, Error 404

After installing capture 11.1.1.9 on a windows machine, after installing i get 404 error when i access url or rather try to login.

Solution was from a oracle document, but seems like we need to retarget capture application.

Un-target and re-target the Capture deployment to the Capture Server:

1. Log into the Weblogic Server Console.

2. Click Deployments in the Domain Structure list.

3. Select Capture.

4. Check Capture.

5. Click Change Deployments.

6. Uncheck the Capture_Server (or cluster) check box.

7. Click Yes. This will save the un-target for the Capture deployment to the Capture Server.

8. Check Capture from the list of deployments again.

9. Select Change Targets.

10. Check the Capture_Server (or cluster) check box

11. Click Yes.