OTM - Oracle Application DBA

Transcription

OTM - Oracle Application DBA
Oracle Transportation Management (OTM) installation
on OEL 5.2 (64 bit)
High Level Steps
1. Go to edelivery.oracle.com, enter your information and login.
2. Select E-Business Suite in dropdown
3. Scroll Down to Oracle Transportation Management
4. Download OTM and Weblogic Server
5. Download RDBMS 11gR2 Server and Client from Oracle Technology Network
6. Install 11gR2 Database and create a blank database
7. Install Weblogic Server
8. Install OTM
9. Execute the file $OTM_HOME/install/gc3env.sh
10. Go to $OTM_HOME/glog/oracle/script8 and edit a file called create_all.sql modify the line
which reads:
41 SELECT DECODE(UPPER(nvl('&&4','Y')),'Y','./import_content.sh','N','imp
ort_content.cmd') ws_content_import
Change ./import_content.sh to . ./import_content.sh
If you don't do this, this script fails. This issue is documented in My Oracle Support Articles:
Installation or Oracle Transportation Management 6.0 on Solaris [ID 974412.1]
Cannot Log on to a new OTM 6.0 Installation [ID 975529.1]
Softwares Required
Ø
Ø
Ø
Ø
Ø
Ø
Ø
Ø
OEL 5.2 (64 bit)
Database 64 bit - linux.x64_11gR2_database_1of2.zip + linux.x64_11gR2_database_2of2.zip
jdk-6u21-linux-i586-rpm.bin
p6890831_111070_Linux-x86-64.zip
linux.x64_11gR1_client.zip
jaxen-1.1.1.zip
wls1031_generic.jar
p9541396_61_Generic.zip
Ø
Ø
Ø
Ø
jakarta-taglibs-standard-1.1.2.zip
openmap-4.5.4.zip
wsdl4j-bin-1.4.zip
jaxen-1.1.1.zip
OTM Application Server location (Weblogic) - /d01/oracle/otm/otm
OTM Web Server location - /d01/oracle/otm/otmweb
Note : The locations may be different in the screen shots but above are correct
1> Install Oracle Database 11g R2 – linux1
2> Install 11g client
OTM=
(DESCRIPTION=
(ADDRESS=(PROTOCOL=tcp)(HOST=linux1.oracle.com)(PORT=1521))
(CONNECT_DATA=
(SID=OTM)
)
)
3> Install JDK
su - root
./jdk-6u20-linux-x64-rpm.bin
4> Install Weblogic 11g
su - otmuser
5> Install Application Server – OTM
Select app Server
6> Install OTM - Web Server
Select Web Server
OTM
The following files MUST be installed prior to starting Oracle Transportation Management:
1. Download the following file into a temporary directory:
a. http://archive.apache.org/dist/jakarta/taglibs/standard/binaries/jakarta-taglibs-standard-1.1.2.zip
2. Unzip jakarta-taglibs-standard-1.1.2.zip using a Zip utility such as WinZip and locate the following files:
a. jakarta-taglibs-standard-1.1.2/lib/jstl.jar
b. jakarta-taglibs-standard-1.1.2/lib/standard.jar
Copy them to the following directories on BOTH the Web & App servers:
export OTM=/d01/oracle/otm/otm
export OTMWEB=/d01/oracle/otm/otmweb
cd /d01/oracle/OTM_SOFTWARE/jakarta/jakarta-taglibs-standard-1.1.2/lib
cp jstl.jar $OTM/glog/gc3webapp/WEB-INF/lib
cp standard.jar $OTM/glog/gc3webapp/WEB-INF/lib
cp jstl.jar $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
cp standard.jar $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
cp jstl.jar $OTMWEB/glog/gc3webapp/WEB-INF/lib
cp standard.jar $OTMWEB/glog/gc3webapp/WEB-INF/lib
cp jstl.jar $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty
cp standard.jar $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty
ls
ls
ls
ls
$OTM/glog/gc3webapp/WEB-INF/lib
$OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
$OTMWEB/glog/gc3webapp/WEB-INF/lib
$OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty
where $OTM is the root directory where Oracle Transportation Management was installed.
3. On Linux, Solaris, HP-UX and AIX, change the permissions on the files (in BOTH directories) to -rwxr-xrx on both the Web & App servers:
$ chmod 755 jstl.jar standard.jar
cd $OTM/glog/gc3webapp/WEB-INF/lib
chmod 755 jstl.jar standard.jar
cd $OTMWEB/glog/gc3webapp/WEB-INF/lib
chmod 755 jstl.jar standard.jar
cd $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
chmod 755 jstl.jar standard.jar
cd $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty
chmod 755 jstl.jar standard.jar
4. On Linux, Solaris, HP-UX and AIX, change the owner of the files (in BOTH directories) to the user used
to install Oracle Transportation Management (e.g. otm61) on both the Web & App servers:
$ chown oraotm jstl.jar standard.jar
---------------------------------------------------------------------Note: Under certain conditions, clients have experienced a performance issue using the above libraries.
A change was proposed to the open source project by a third party that has not yet been incorporated
into the project, and our experience has shown that performance has been much better using these
patched libraries. If you experience this performance issue and wish to install these non-standard files,
do the following:
1.
Rename the following files on the Web server:
$OTM/glog/gc3webapp/WEB-INF/lib/standard.jar => standard.jar.orig
$OTM/glog/gc3webapp/WEB-INF/lib/3rdparty/standard.jar => standard.jar.orig
$OTM/glog/gc3webapp/WEB-INF/lib/3rdparty/saxpath.jar => saxpath.jar.orig (*)
$OTM/glog/gc3webapp/WEB-INF/lib/3rdparty/jaxen-full.jar => jaxen-full.jar.orig (*)
cd $OTM/glog/gc3webapp/WEB-INF/lib
mv standard.jar standard.jar.orig
cd $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
mv standard.jar standard.jar.orig
#cd $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
#mv saxpath.jar saxpath.jar.orig
#cd $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
#mv jaxen-full.jar jaxen-full.jar.orig
where $OTM is the root directory where Oracle Transportation Management was installed.
(*) these files will not exist on newer Oracle Transportation Management installations
2. Download the following file into a temporary directory:
a. http://flavio.tordini.org/download/standard-1.1.2-patched-jaxen-1.1.jar
Note: If your browser downloads this as a .zip file, do NOT unzip it; simply rename it as directed in the
next step.
3. Rename the file to standard.jar and copy it to the following directories on the Web server only:
$OTM/glog/gc3webapp/WEB-INF/lib
$OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
cd $s
cp standard.jar $OTM/glog/gc3webapp/WEB-INF/lib
cp standard.jar $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
cp standard.jar $OTMWEB/glog/gc3webapp/WEB-INF/lib
cp standard.jar $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty
where $OTM is the root directory where Oracle Transportation Management was installed.
4. Download the following file into a temporary directory:
a. http://dist.codehaus.org/jaxen/distributions/jaxen-1.1.1.zip
5. Unzip jaxen-1.1.1.zip using a Zip utility such as WinZip and locate the following files:
a. jaxen-1.1.1/jaxen-1.1.1.jar
6. Rename the file to jaxen-full.jar and copy it to the following directory on the Web server only:
cd $s/jaxen/jaxen-1.1.1
cp jaxen-full.jar $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
cp jaxen-full.jar $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty
where $OTM is the root directory where Oracle Transportation Management was installed.
7. On Linux, Solaris, HP-UX and AIX, change the permissions on the files (in BOTH directories) to -rwxr-xrx on the Web server:
$ chmod 755 standard.jar jaxen-full.jar
cd $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
chmod 755 standard.jar jaxen-full.jar
cd $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty
chmod 755 standard.jar jaxen-full.jar
8. On Linux, Solaris, HP-UX and AIX, change the owner of the files (in BOTH directories) to the user used
to install Oracle Transportation Management (e.g. otm61) on the Web server:
$ chown otm61 standard.jar jaxen-full.jar
======================================================================
To install WSDL4J:
1. Download the following file into a temporary directory:
a. http://prdownloads.sourceforge.net/wsdl4j/wsdl4j-bin-1.4.zip?download
2. Unzip wsdl4j-bin-1.4.zip using a Zip utility such as WinZip and locate the following file:
a. wsdl4j-1_4/lib/wsdl4j.jar
Copy it to the following directory on BOTH the Web & App servers:
cd $s/wsdl4j-bin-1.4/wsdl4j-1_4/lib
cp wsdl4j.jar $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
cp wsdl4j.jar $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty
chmod 755 $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty/wsdl4j.jar
chmod 755 $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty/wsdl4j.jar
where $OTM is the root directory where Oracle Transportation Management was installed.
3. On Linux, Solaris, HP-UX and AIX, change the permissions on the file to -rwxr-xr-x on both the Web &
App servers:
$ chmod 755 wsdl4j.jar
4. On Linux, Solaris, HP-UX and AIX, change the owner of the file to the user used to install Oracle
Transportation Management (e.g. otm61) on both the Web & App servers:
$ chown otm61 wsdl4j.jar
======================================================================
To install OpenMap:
1. Download the following file into a temporary directory:
a. http://openmap.bbn.com/src/openmap-4.5.4.zip
2.
Unzip openmap-4.5.4.zip using a Zip utility such as WinZip and locate the following file:
a. openmap-4.5.4/lib/openmap.jar
cd $s/openmap/openmap-4.5.4/lib
cp openmap.jar $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
cp openmap.jar $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty
chmod 755 $OTM/glog/gc3webapp/WEB-INF/lib/3rdparty/openmap.jar
chmod 755 $OTMWEB/glog/gc3webapp/WEB-INF/lib/3rdparty/openmap.jar
Copy it to the following directory on BOTH the Web & App servers:
$OTM/glog/gc3webapp/WEB-INF/lib/3rdparty
where $OTM is the root directory where Oracle Transportation Management was installed.
3. On Linux, Solaris, HP-UX and AIX, change the permissions on the file to -rwxr-xr-x on both the Web &
App servers:
$ chmod 755 openmap.jar
4. On Linux, Solaris, HP-UX and AIX, change the owner of the file to the user used to install Oracle
Transportation Management (e.g. otm61) on both the Web & App servers:
$ chown otm61 openmap.jar
cd /d01/oracle/otm/otm
mkdir docs
cd /d01/oracle/OTM_SOFTWARE/OTM
cp -R docs.zip /d01/oracle/otm/otm/docs/
cd /d01/oracle/otm/otm/docs/
unzip docs.zip &
cd /d01/oracle/otm/otmweb
mkdir docs
cd /d01/oracle/OTM_SOFTWARE/OTM
cp -R docs.zip /d01/oracle/otm/otmweb/docs/
cd /d01/oracle/otm/otmweb/docs/
unzip docs.zip &
n Create the below tablespaces
Modify the below scripts - $OTM/glog/oracle/script8
create_tablespaces.sql
CREATE TABLESPACE USERS
DATAFILE '/d02/oracle/PROD/db/apps_st/data/users01.dbf' SIZE 5242880 REUSE
AUTOEXTEND ON NEXT 160
MAXSIZE 34359721984
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE EXAMPLE
DATAFILE '/d02/oracle/PROD/db/apps_st/data/example01.dbf' SIZE 104857600
REUSE
AUTOEXTEND ON NEXT 80
MAXSIZE 34359721984
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE DATA
DATAFILE '/d02/oracle/PROD/db/apps_st/data/data01.dbf' SIZE 209715200
REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE ARCHIVE
DATAFILE '/d02/oracle/PROD/db/apps_st/data/archive01.dbf' SIZE 104857600
REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 106496
ONLINE;
CREATE TABLESPACE BPL_DAY1
DATAFILE '/d02/oracle/PROD/db/apps_st/data/bpl_day1.dbf' SIZE 1048576
REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE BPL_DAY2
DATAFILE '/d02/oracle/PROD/db/apps_st/data/bpl_day2.dbf' SIZE 1048576
REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE BPL_DAY3
DATAFILE '/d02/oracle/PROD/db/apps_st/data/bpl_day3.dbf' SIZE 1048576
REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE BPL_DAY4
DATAFILE '/d02/oracle/PROD/db/apps_st/data/bpl_day4.dbf' SIZE 1048576
REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE BPL_DAY5
DATAFILE '/d02/oracle/PROD/db/apps_st/data/bpl_day5.dbf' SIZE 1048576
REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE BPL_DAY6
DATAFILE '/d02/oracle/PROD/db/apps_st/data/bpl_day6.dbf' SIZE 1048576
REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE BPL_DAY7
DATAFILE '/d02/oracle/PROD/db/apps_st/data/bpl_day7.dbf' SIZE 1048576
REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE PART_1
DATAFILE '/d02/oracle/PROD/db/apps_st/data/part_1.dbf' SIZE 1048576 REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE PART_2
DATAFILE '/d02/oracle/PROD/db/apps_st/data/part_2.dbf' SIZE 1048576 REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE PART_3
DATAFILE '/d02/oracle/PROD/db/apps_st/data/part_3.dbf' SIZE 1048576 REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE PART_4
DATAFILE '/d02/oracle/PROD/db/apps_st/data/part_4.dbf' SIZE 1048576 REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE INDX
DATAFILE '/d02/oracle/PROD/db/apps_st/data/indx01.dbf' SIZE 524288000
REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE LOB1
DATAFILE '/d02/oracle/PROD/db/apps_st/data/lob01.dbf' SIZE 524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE LOB2
DATAFILE '/d02/oracle/PROD/db/apps_st/data/lob02.dbf' SIZE 524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE LOB3
DATAFILE '/d02/oracle/PROD/db/apps_st/data/lob03.dbf' SIZE 524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE LOB4
DATAFILE '/d02/oracle/PROD/db/apps_st/data/lob04.dbf' SIZE 524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE LOB5
DATAFILE '/d02/oracle/PROD/db/apps_st/data/lob05.dbf' SIZE 524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE LOB6
DATAFILE '/d02/oracle/PROD/db/apps_st/data/lob06.dbf' SIZE 524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE LOB7
DATAFILE '/d02/oracle/PROD/db/apps_st/data/lob07.dbf' SIZE 524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE REPORT
DATAFILE '/d02/oracle/PROD/db/apps_st/data/report01.dbf' SIZE 524288000
REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE REPORTINDX
DATAFILE '/d02/oracle/PROD/db/apps_st/data/reportindx01.dbf' SIZE
524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE PART_5
DATAFILE '/d02/oracle/PROD/db/apps_st/data/part_5.dbf' SIZE 1048576 REUSE
AUTOEXTEND ON NEXT 12800
MAXSIZE 2097152000
EXTENT MANAGEMENT LOCAL
UNIFORM SIZE 204800
ONLINE;
CREATE TABLESPACE MSG_PART_TBS1
DATAFILE '/d02/oracle/PROD/db/apps_st/data/MSG_PART_TBS1.dbf' SIZE
524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
CREATE TABLESPACE MSG_LOB_TBS1
DATAFILE '/d02/oracle/PROD/db/apps_st/data/MSG_LOB_TBS1.dbf' SIZE
524288000 REUSE
EXTENT MANAGEMENT LOCAL
AUTOALLOCATE
ONLINE;
cd /d01/oracle/otm/otm/install
. ./gc3env.sh
cat > drop.sql
drop user globalreportuser cascade;
drop user archive cascade;
drop user glogdba cascade;
drop user reportowner cascade;
drop user glogowner cascade;
drop user glogdev cascade;
drop user glogload cascade;
drop user globalreportuser cascade;
drop profile gc3user cascade;
n Make the below change
cd /d01/oracle/OTM/OTM61/glog/oracle/script8
Go to $OTM_HOME/glog/oracle/script8 and edit a file called create_all.sql modify the line
which reads:
41 SELECT DECODE(UPPER(nvl('&&4','Y')),'Y','./import_content.sh','N','imp
ort_content.cmd') ws_content_import
Change ./import_content.sh to . ./import_content.sh
sqlplus system/manager@otm
n Drop the above users
@drop.sql
cd /d01/oracle/otm/otm/glog/oracle/script8
n Create users
@create_glog_users.sql
n Crete OTM data and packages
@create_all.sql
n Apply patch - p9541396_61_Generic.zip
java -jar otm611-weblogic.jar
Enter Connection ID for database (blank means does not exist): prod
Enter GLOGOWNER password (blank means does not exist): GLOGOWNER
Enter REPORTOWNER password (blank means does not exist): REPORTOWNER
Enter the ARCHIVE password where archiving is stored (blank means does not exist): ARCHIVE
Enter the GLOGOWNER password where archiving is stored (blank means does not exist):
GLOGOWNER
Enter the connection id where archiving is stored (blank means does not exist): prod
Is this a Unix machine (ie. runs .sh rather than .cmd scripts)? (Y/N : Y) : Y
Enter connect ID for ROD database (blank means does not exist):
Enter GLOGOWNER password for ROD database (blank means does not exist):
Enter connection ID for FTI database (blank means does not exist):
Enter HDOWNER password (blank means does not exist):
Enter GLOGOWNER password for FTI database (blank means does not exist):
sqlplus /nolog @run_patch.sql
-
start OTM Instance:
1. startup database and listener
2. on otm, startup otm application services
a. as root, /etc/init.d/otmapp61 start
b. tail -f /d01/oracle/OTM_INST/otm/logs/weblogic/console.log.0 and wait for it to change state to
“RUNNING”
3. on otm, startup otm web services
a. as root, /etc/init.d/otmweb61 start
b. tail -f /d01/oracle/OTM_INST/otmweb/logs/tomcat/console.log.0 and wait for it to show
“INFO: Server startup”
http://otm.oracle.com
userid=GUEST.ADMIN
pwd=CHANGEME
Open firefox browser
http://www.otmfaq.com/forums/f23/create
http://www.otmfaq.com/forums/f23/create-otm-5-5-db-need-sys-privileges-285/
http://www.otmfaq.com/forums/f21/vpd
http://www.otmfaq.com/forums/f21/vpd-set_user-throws-exception-insufficient-privileges
privileges-2279/
Cannot login OTM after migrating to version 5.5 or changing GUEST.ADMIN password from the default value
of CHANGEME (Doc ID 422201.1)
Modified Date LabelModified Modified Date
Date07-JAN-2010
Document Type LabelType Document TypePROBLEM
Type
In this Document
Symptoms
Cause
Solution
Applies to:
Oracle Transportation Management - Version: 5.5
Information in this document applies to any platform.
Checked for relevance on 07-Jan-2010
2010
Symptoms
-- Problem Statement:
OTM Users migrating to OTM 5.5 may report the following error is being generated when they ttry and
log into the system. The same error will be generated if the GUEST.ADMIN password is changed from
the default value of CHANGEME.
javax.security.auth.login.LoginException: javax.security.auth.login.LoginException:
java.lang.SecurityException: User: GUEST.ADMIN, failed to be authenticated.
javax.security.auth.login.LoginException: javax.security.auth.login.LoginException:
java.lang.SecurityException: User: GUEST.ADMIN, failed to be authenticated.
at glog.database.security.jaas.ClientLoginModuleImpl
glog.database.security.jaas.ClientLoginModuleImpl.login(ClientLoginModuleImpl.java:50)
.login(ClientLoginModuleImpl.java:50)
at
jrockit.reflect.VirtualNativeMethodInvoker.invoke(Ljava.lang.Object;[Ljava.lang.Object;)Ljava.lang.Obje
ct;(Unknown Source)
at java.lang.reflect.Method.invoke(Ljava.lang.Object;[Ljava.lang.Object;I)Ljava.lang.Objec
java.lang.reflect.Method.invoke(Ljava.lang.Object;[Ljava.lang.Object;I)Ljava.lang.Object;(Unknown
Source)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)
at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)
ity.auth.login.LoginContext.invokeModule(LoginContext.java:607)
at
at
at
at
at
at
at
at
at
at
at
at
at
at
at
at
at
at
at
at
javax.security.auth.login.LoginContext.login(LoginContext.java:534)
glog.database.security.jaas.AuthenticationContext.login(AuthenticationContext.java:95)
glog.util.remote.NamingDirectory.(NamingDirectory.java:783)
glog.util.remote.NamingDirectory.get(NamingDirectory.java:199)
glog.util.remote.NamingDirectory.getForGuest(NamingDirectory.java:307)
glog.util.remote.NamingDirectory.get(NamingDirectory.java:115)
glog.util.remote.NamingDirectory.get(NamingDirectory.java:126)
glog.util.remote.SessionBeanHomeInvoker.(SessionBeanHomeInvoker.java:26)
glog.util.remote.NamingDirectory.get(NamingDirectory.java:170)
glog.util.remote.NamingDirectory.get(NamingDirectory.java:225)
glog.util.remote.NamingDirectory.getForSystem(NamingDirectory.java:283)
glog.util.remote.NamingDirectory.getForSystem(NamingDirectory.java:316)
glog.util.remote.NamingDirectory.getForSystem(NamingDirectory.java:320)
glog.util.uom.UOMLoader.loadFromServer(UOMLoader.java:92)
glog.webserver.util.BaseServlet.service(BaseServlet.java:585)
javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
glog.webserver.screenlayout.ClientSessionTracker.doFilter(ClientSessionTracker.java:54)
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
Similar errors may be noted in the console logs for tomcat and weblogic.
From the Tomcat console log:
INFO | jvm 1 | 2007/10/10 09:55:48 | javax.security.auth.login.LoginException:
javax.security.auth.login.LoginException: java.lang.SecurityException: User: GUEST.ADMIN, failed to be
authenticated.
INFO | jvm 1 | 2007/10/10 09:55:48 |
INFO | jvm 1 | 2007/10/10 09:55:48 | javax.security.auth.login.LoginException:
javax.security.auth.login.LoginException: java.lang.SecurityException: User: GUEST.ADMIN, failed to be
authenticated.
INFO | jvm 1 | 2007/10/10 09:55:48 | at
glog.database.security.jaas.ClientLoginModuleImpl.login(ClientLoginModuleImpl.java:50)
INFO | jvm 1 | 2007/10/10 09:55:48 | at
jrockit.reflect.VirtualNativeMethodInvoker.invoke(Ljava.lang.Object;[Ljava.lang.Object;)Ljava.lang.Obje
ct;(Unknown Source)
INFO | jvm 1 | 2007/10/10 09:55:48 | at
java.lang.reflect.Method.invoke(Ljava.lang.Object;[Ljava.lang.Object;I)Ljava.lang.Object;(Unknown
Source)
INFO | jvm 1 | 2007/10/10 09:55:48 | at
javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)
From the weblogic console log:
INFO | jvm 1 | 2007/10/10 10:01:01 | <Oct 10, 2007 10:01:01 AM EDT> <Critical> <Security> <BEA090403> <Authentication for user GUEST.ADMIN denied>
INFO | jvm 1 | 2007/10/10 10:01:01 | javax.security.auth.login.LoginException:
javax.security.auth.login.LoginException: java.lang.SecurityException: 090403
INFO | jvm 1 | 2007/10/10 10:01:01 |
INFO | jvm 1 | 2007/10/10 10:01:01 | javax.security.auth.login.LoginException:
javax.security.auth.login.LoginException: java.lang.SecurityException: 090403
INFO | jvm 1 | 2007/10/10 10:01:01 | at
glog.database.security.jaas.ClientLoginModuleImpl.login(ClientLoginModuleImpl.java:50)
INFO | jvm 1 | 2007/10/10 10:01:01 | at
jrockit.reflect.VirtualNativeMethodInvoker.invoke(Ljava.lang.Object;[Ljava.lang.Object;)Ljava.lang.Obje
ct;(Unknown Source)
INFO | jvm 1 | 2007/10/10 10:01:01 | at
java.lang.reflect.Method.invoke(Ljava.lang.Object;[Ljava.lang.Object;I)Ljava.lang.Object;(Unknown
Source)
Cause
Within the OTM application we use the GUEST.ADMIN user to validate access to the system in order to
generate the initial login screen. The system uses the default password of CHANGEME to do this initial
authentication, so if the password for GUEST.ADMIN is anything other than CHANGEME the errors
mentioned above will be generated. In order to allow clients the flexibility to change the GUEST.ADMIN
password an additional entry can be added into the tomcat.conf to use the correct password.
-DGuestEncodedPassword=<base64 encrypted value>
Solution
-- To implement the solution, please execute the following steps::
In order to determine the correct value for the encrypted value you need to run the following
command:
java glog.util.appclass.Base64Encoding <new GUEST.ADMIN password>
So if your new GUEST.ADMIN password was PASSWORD you would type in the following:
java glog.util.appclass.Base64Encoding PASSWORD
and the system would return the following value:
UEFTU1dPUkQ=
NOTE: This is not the same value that would be stored in the GL_USER's GL_PASSWORD field since the
GL_USER table has standard encryption enabled and tomcat is using Base64 encryption.
Within the tomcat.conf the following line needs to be added in the Java Additional Parameters section
wrapper.java.additional.< next available line number>=-DGuestEncodedPassword=UEFTU1dPUkQ=
So if you had the following configuration in your tomcat.conf
# Java Additional Parameters
wrapper.java.additional.1=-jrockit
wrapper.java.additional.2=-Xms768m
wrapper.java.additional.3=-Xmx768m
wrapper.java.additional.4=-Xgcprio:pausetime
wrapper.java.additional.5=-Xverbose:memory
wrapper.java.additional.6=-Xnoclassgc
wrapper.java.additional.7=-DGC3EncodedPassword=Q0hBTkdFTUU=
wrapper.java.additional.8=-Dglog.properties=glog.tomcat.properties
wrapper.java.additional.9=-Dglog.home=%GLOG_HOME%/glog/config
wrapper.java.additional.10=-Duser.home=%GLOG_HOME%/glog/config
wrapper.java.additional.11=-Djava.io.tmpdir=%GLOG_HOME%/temp
wrapper.java.additional.12=-Djava.awt.headless=true
wrapper.java.additional.13=Djava.security.auth.login.config=%GLOG_HOME%/glog/config/gc3_jaas.config
wrapper.java.additional.14=-Dweblogic.ThreadPoolSize=15
wrapper.java.additional.15=-Djava.endorsed.dirs=%GLOG_HOME%/tomcat/common/endorsed
wrapper.java.additional.16=-Dcatalina.base=%GLOG_HOME%/tomcat
wrapper.java.additional.17=-Dcatalina.home=%GLOG_HOME%/tomcat
You would add line 18 to the config and the resulting section would look like this:
# Java Additional Parameters
wrapper.java.additional.1=-jrockit
wrapper.java.additional.2=-Xms768m
wrapper.java.additional.3=-Xmx768m
wrapper.java.additional.4=-Xgcprio:pausetime
wrapper.java.additional.5=-Xverbose:memory
wrapper.java.additional.6=-Xnoclassgc
wrapper.java.additional.7=-DGC3EncodedPassword=Q0hBTkdFTUU=
wrapper.java.additional.8=-Dglog.properties=glog.tomcat.properties
wrapper.java.additional.9=-Dglog.home=%GLOG_HOME%/glog/config
wrapper.java.additional.10=-Duser.home=%GLOG_HOME%/glog/config
wrapper.java.additional.11=-Djava.io.tmpdir=%GLOG_HOME%/temp
wrapper.java.additional.12=-Djava.awt.headless=true
wrapper.java.additional.13=Djava.security.auth.login.config=%GLOG_HOME%/glog/config/gc3_jaas.config
wrapper.java.additional.14=-Dweblogic.ThreadPoolSize=15
wrapper.java.additional.15=-Djava.endorsed.dirs=%GLOG_HOME%/tomcat/common/endorsed
wrapper.java.additional.16=-Dcatalina.base=%GLOG_HOME%/tomcat
wrapper.java.additional.17=-Dcatalina.home=%GLOG_HOME%/tomcat
wrapper.java.additional.18=-DGuestEncodedPassword=UEFTU1dPUkQ=
Once this is done, the web and application servers need to be re-started for the changes to take effect
Problems and solutions
<BEA-090403> <Authentication for user system denied>
INFO | 2010/10/27 20:50:36 | <Oct 27, 2010 8:50:36 PM IST> <Critical> <WebLogicS
erver> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.Security
InitializationException: Authentication for user system denied
INFO | 2010/10/27 20:50:36 | weblogic.security.SecurityInitializationException:
Its better to drop and recreate the schema
[email protected]
@create_glog_uesrs.sql
@create_all.sql
Reference : Oracle® Transportation Management
Administration Guide
Release 6.1 Part No. E16550-03