DevOps SRE Blog

We got below error while configuring collocate OHS in weblogic domain without a database (restricted JRF): The Oracle HTTP Server (Collocated) [ohs] template could not be selected because of the following: CFGFWK-64079: Template conflict. The selection requires templates which conflicts with the current domain: Oracle Enterprise Manager : 12.2.1.3.0; Oracle JRF : 12.2.1.3.0; Common Infrastructure Engineering Runtime : 12.2.1; Oracle OPSS Metadata for JRF : 12.2.1.3; Oracle JRF : 12.2.1.3.0 CFGFWK-64071: Template conflict. The selection conflicts with templates already present in the domain: Oracle Restricted JRF : 12.2.1.3.0. Solution to this problem is to select  Oracle HTTP Server Restricted JRF  instead of Oracle HTTP Server (Collocated) as shown in below picture: If you are not aware of what is a Restriced JRF mode, here is snippet from oracle documentation: The Weblogic Server Domain in Restricted-JRF mode is similar in architecture and functionality to Weblogic Server Do...

Oracle REST data services is a Java based application that makes Oracle DB REST enabled. ORDS can be run as a standalone application or can be deployed on application servers: weblogic, Tomcat and GlassFish. We installed ORDS 20.3 without APEX on Weblogic. Thanks to my colleagues Shubham and Rohit in helping me setup it. Here are the steps: Download ORDS from  Oracle Site Copy and unzip installable on installation machine. Create ORDS user in database, say ords_admin. Execute ords_installer_privileges.sql by passing ords admin user as input. This file is located under “installer” directory of the downloaded ords. This script provides all necessary permission for the admin user. Go to dir where unzipped installable is present: For example, cd /u01/software/ords-20.3 Run below command. Responses to installer prompt are highlighted in bold java -jar ords.war install advanced [oracle@mymachine ords-20.3]$ java -jar ords.war install advanced Specify the database connection type to use....

Weblogic Enterprise edition and weblogic suite by default use OPSS (not mandatory) for storing security related information. OPSS can use either file system and database for storing security information. By default it uses DB for storing OPSS information. We are managing a weblogic 12.2.1.3.0 based application in which except development environment all other environments are not using opss hence no DB is used. Dev environment was initially configured to use db based OPSS. As it costs resources we thought of removing OPSS and DB. We raised support ticket with Oracle and Oracle engineer suggested that it would not possible to remove OPSS altogether but can be changed from DB based to file based. We thought it is an optimal solution instead of building domain again. Here are the steps followed to convert from db to file based opss Shutdown complete domain. Apply One-off Patch for OPSS – Patch 26522518 for 12.2.1.3.0: reassociateSecurityStore from DB to file Start servers. Execute followi...

Weblogic uses database for storing security information. For example, OPSS platform and KSS stores use database for storing data. There may be cases where we want to avoid additional license and hardware costs by avoiding database if application doesn’t demand a database. Installation steps and installables are same for domains with and without database only product templates selection defers. Select restricted JRFs instead of regular ones as shown below:

Like EBS or Siebel weblogic or SOA envs also can be cloned. But rarely people use this approach (me too until recently). We have weblogic domain without any database (Restricted-JRF mode), so cloning was comparatively easy. Recently I got opportunity to explore below cloning options: Clone whole VM and replace hostname and ip address using sed. Clone VM and use Oracle supplied chghost.sh utility to change app tier and DB tier hostname and ip address. Using Oracle standard Test to a Production Environment approach. First approach is very quick. We need to run couple of sed commands to bring environment up and running. But this is not Oracle supported approach. Well test this before using it. I ran below commands after VM clone to change source host to target host. Go to domain home. If you have separate admin and managed server domains, you need to repeat these steps: cd $DOMAIN_HOME Run below commands to get all files with reference host name: grep -lR “your Hostname” * > hostnameRe...

I have been working on standalone ohs domains till recently. But recently I have installed collocated weblogic/ohs domain. Added few url routes in mod_wl_ohs.conf present in staging area ($ DOMAIN_HOME /config/fmwconfig/components/OHS/ componentName ) and as usual restarted ohs server to pick the changes. But I was not able to reach newly added application urls. Verified if these values were reflected in Run-time directory ($ DOMAIN_HOME /config/fmwconfig/components/OHS/instances/ componentName ). The new routes were missing. Upon checking OHS documentation, I came to know that, in collocated domain, changes will not be moved from staging to Run-Time directory unless admin server is restarted or changes are done through Fusion Middleware Control or WLST. I restarted admin server (to replicate to runtime dir) and restarted ohs server (to pickup new config). This solved our problem. Caution : Oracle recommends to stop admin server before making manual changes to configuration. Reference:...

  We recently deployed a Java application. After deployment it went into prepared state and we had to start it. But app was visible under deployments ->Configuration tab but not under control tab. As a quick fix, we thought of restarting managed server. But it didn’t work. So, we tried to start the application using wlst and got “ Operation cannot be performed until the server is restarted. ” as shown below: $FMW_HOME/oracle_common/common/bin/wlst.sh Initializing WebLogic Scripting Tool (WLST) ... wls:/offline> connect('weblogic','welcome1','t3://MyHost:7001') Successfully connected to Admin Server "AdminServer" that belongs to domain "My_Domain". wls:/My_Domain/serverConfig/> startApplication('MyApp') Starting application MyApp. <Nov 17, 2020 7:18:33 AM GMT> <Info> <J2EE Deployment SPI> <BEA-260121> <Initiating start operation for application, MyApp [archive: null], to PWBMS .> weblogic.manag...

  I was experimenting with Oracle Cloud Infrastructure (OCI) with free tier account. I have created an VM and tried to login using public ip of the VM using private ssh key. But recevied below error: No supported authentication methods available (server sent: publickey,gssapi-keyex,gssapi-with-mic) After reading OCI documentation, found that OCI by default has some policies that disable access to VMs. Issue resolved after creating new policy with following entries (Menu -> Identity -> Policies -> Create Policy -> Fill all fields -> Click on Customize (Advanced): Allow group Administrators to inspect users in tenancy Allow group Administrators to inspect users in tenancy Allow group Administrators to inspect groups in tenancy Allow group Administrators to inspect groups in tenancy Allow group Administrators to use users in tenancy where target.group.name != 'Administrators' Allow group Administrators to use users in tenancy where target.group.name != 'Admin...

  We have Oracle Enterprise Command Center integrated with Oracle E-Business suite. EBS accepts traffic on https (offloaded at loadbalancer) and recently the SSL certificate got expired. We decided to use self-signed certificate instead of certificate from popular CAs to save few bucks. After changing certificate at EBS load balancer we started receiving below error from ECC: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1916) at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:305) at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:299) at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1577) at sun.security.ssl.ClientHandshaker.processMessage(Clie...

Recently we built a collocated Oracle http Server (12.2.1.4.0) (OHS) server for POC purposes (This issue occurs in standalone ohs too). After configuring domain, I have started ohs server from em console. I verified that ohs processes were running by using ps -ef | grep ohs command. Satisfied with outcome I called it a day. Next day, I sshed into the machine, to my surprise there was no ohs process running. This time started ohs from command line using startComponent.sh. ohs server started, I was able to open ohs home page but not admin and em consoles. ohs processes were gone again after some time. I tried to start it from em console and wlst script as well. But end result is same. Meanwhile, I observed a pattern that OHS processes are getting stopped after approximately 2 mins. As this a POC machine, we got single CPU VM. I thought due to limited cpu, startup process is taking time and eventually getting timed out. So I ran below command to find if there is any startup timeout with v...