Monday, August 24, 2020

Log file locations in Oracle Apps 11i/R12

Log file locations in Oracle Apps 11i/R12

++++++++++++++++++++++++++++++++++++++

                                Database Tier Logs are

Alert Log File location:

$ORACLE_HOME/admin/$CONTEXT_NAME/bdump/alert_$SID.log

 

                                     Trace file location:

$ORACLE_HOME/admin/SID_Hostname/udump

 

                                         Application Tier Logs

Start/Stop script log files location:

$COMMON_TOP/admin/log/CONTEXT_NAME/ 

 

                                       OPMN log file location

$ORACLE_HOME/opmn/logs/ipm.log


                                   Apache, Jserv, JVM log files locations:

$IAS_ORACLE_HOME/Apache/Apache/logs/ssl_engine_log

$IAS_ORACLE_HOME/Apache/Apache/logs/ssl_request_log

$IAS_ORACLE_HOME/Apache/Apache/logs/access_log

$IAS_ORACLE_HOME/Apache/Apache/logs/error_log

$IAS_ORACLE_HOME/Apache/JServ/logs

 

                                      Concurrent log file location:

$APPL_TOP/admin/PROD/log or $APPLLOG/$APPLCSF 

                                           Patch log file location:

$APPL_TOP/admin/PROD/log

                                          Worker Log file location:

$APPL_TOP/admin/PROD/log

 

                                          AutoConfig log files location:

Application Tier:

$APPL_TOP/admin/SID_Hostname/log//DDMMTime/adconfig.log

 

Database Tier:

$ORACLE_HOME/appsutil/log/SID_Hostname/DDMMTime/adconfig.log

 

                                              Error log file location:

Application Tier:

$APPL_TOP/admin/PROD/log

 

Database Tier :

$ORACLE_HOME/appsutil/log/SID_Hostname


=========================


In Oracle Applications R12, the log files are located in $LOG_HOME (which translates to $INST_TOP/logs)

Below list of log file locations could be helpful for you:

                                  Concurrent Request logs files

$LOG_HOME/appl/conc – > location for concurrent requests log and out files

$LOG_HOME/appl/admin – > location for mid tier startup scripts log files

 

Apache Logs (10.1.3 Oracle Home which is equivalent to iAS Oracle Home – Apache, OC4J and OPMN)

$LOG_HOME/ora/10.1.3/Apache – > Location for Apache Error and Access log files

$LOG_HOME/ora/10.1.3/j2ee – > location for j2ee related log files

$LOG_HOME/ora/10.1.3/opmn – > location for opmn related log files

 

Forms & Reports related logs (10.1.2 Oracle home which is equivalent to 806 Oracle Home)

$LOG_HOME/ora/10.1.2/forms

$LOG_HOME/ora/10.1.2/reports

 

Startup/Shutdown Log files location:

$INST_TOP/apps/$CONTEXT_NAME/logs/appl/admin/log

 

Patch log files location:

$APPL_TOP/admin/$SID/log/ 

 

                      Clone and AutoConfig log files location in Oracle E-Business Suite Release 12 

 

                                               Logs for the adpreclone.pl are located: 

On the database tier: 

RDBMS $ORACLE_HOME/appsutil/log/< context >/StageDBTier_< timestamp >.log 

 

On the application tier: 

$INST_TOP/admin/log/StageAppsTier_< timestamp >.log 

Thanks.

Sunday, August 23, 2020

ORA-06502: PL/SQL: numeric or value error: character to number conversion error 11i forms.


Dear Folks,

We have come across this issue in one of our EBS client runs on 11i version and  when we tried to open any forms eventually failing with below error immediately.

ORA-06502: PL/SQL: numeric or value error: character to number conversion error

So, we got to know the actual issue when we directly accessed the forms.

https://ebsprod.kalicut-sensors.com/dev60cgi/f60cgi

We logged into using SYSADMIN and selected one of the responsibilities and below pop-pop window appeared. .

 

Hence, we pull off the package "FND_TIMEZONES and looked for line 42 & 55 as shown in above screenshot and identified  it throws error at below code.

function get_client_timezone_code return varchar2 is

begin

  return get_code(fnd_profile.VALUE ('CLIENT_TIMEZONE_ID'));

 end;

=======

So, precisely, it was issue with the "CLIENT_TIMEZONE_ID".

Since, we aren't having forms at this time, We looked when this profile got changed

Some one who had happened to be use apps password got to change the profile option value from backend (DB).

Below query we shows us "The profiles has changed recently for SYSADMIN"

column profile format a40

column value format a20

column level format a15

column app format a20

column resp format a20

column user format a20

select substr(fpo.user_profile_option_name,1,60) profile,

substr(fpov.profile_option_value,1,75) value,

fpov.profile_option_id,

decode(fpov.level_id,10001,

'SITE',10002,

'APPLICATION',10003,

'RESPONSIBILITY',

10004,'USER',10005,'SERVER')"level",

fa.application_short_name app,

substr(fr.responsibility_name,1,20)"responsibility",

substr(fu.user_name,1,10)"user"

from fnd_profile_option_values fpov,

fnd_profile_options_vl fpo,

fnd_application fa,

fnd_responsibility_vl fr,

fnd_user fu,

fnd_logins fl

where fpo.profile_option_id=fpov.profile_option_id

and fa.application_id(+)=fpov.level_value

and fr.application_id(+)=fpov.level_value_application_id

and fr.responsibility_id(+)=fpov.level_value

and fu.user_id(+)=fpov.level_value

and fl.login_id(+) = fpov.LAST_UPDATE_LOGIN

and fpo.user_profile_option_name in('Client Timezone') and fu.USER_NAME='SYSADMIN';


So, some one wrongly updated the value of this profile for SYSADMIN user.

PROFILE                 VALUE        PROFILE_OPTION_ID level      APP

---------------------------------------- -------------------- ----------------- --------------- --------------------

responsibility                        user

------------------------------------------------------------ --------------------

Client Timezone             '                 3773 USER      FND

                               SYSADMIN

It shows above value  -- Colon ('). It shouldn't be this value.

Hence, we compare this profile with other non-prod instances and it was showed EMTPY value.

As soon as we updated above profile value to correct value. We were able to open forms.

Command we used - It changes profile option value at user level.
++++++++++++++
declare
retval boolean;
cursor cur is select * from fnd_user where user_name= 'SYSADMIN';
begin
for rec in cur
loop
dbms_output.put_line ( rec.user_name );
retval:=fnd_profile.save('CLIENT_TIMEZONE_ID','','USER',rec.user_id);
end loop;
end;

Thanks.

APP-FND-01926: The custom event WHEN-LOGON-CHANGED raised unhandled exception - 11i EBS forms

 Dear Folks,

We have come across this issue in one of our EBS client runs on 11i version and  when we tried to open any forms eventually failing with below error immediately.

ORA-06502: PL/SQL: numeric or value error: character to number conversion error

So, we got to know the actual issue when we directly accessed the forms.

https://ebsprod.kalicut-sensors.com/dev60cgi/f60cgi

We logged into using SYSADMIN and selected one of the responsibilities and below pop-pop window appeared. .

 

Hence, we pull off the package "FND_TIMEZONES and looked for line 42 & 55 as shown in above screenshot and identified  it throws error at below code.

function get_client_timezone_code return varchar2 is

begin

  return get_code(fnd_profile.VALUE ('CLIENT_TIMEZONE_ID'));

 end;

=======

So, precisely, it was issue with the "CLIENT_TIMEZONE_ID".

Since, we aren't having forms at this time, We looked when this profile got changed

Some one who had happened to be use apps password got to change the profile option value from backend (DB).

Below query we shows us "The profiles has changed recently for SYSADMIN"

column profile format a40

column value format a20

column level format a15

column app format a20

column resp format a20

column user format a20

select substr(fpo.user_profile_option_name,1,60) profile,

substr(fpov.profile_option_value,1,75) value,

fpov.profile_option_id,

decode(fpov.level_id,10001,

'SITE',10002,

'APPLICATION',10003,

'RESPONSIBILITY',

10004,'USER',10005,'SERVER')"level",

fa.application_short_name app,

substr(fr.responsibility_name,1,20)"responsibility",

substr(fu.user_name,1,10)"user"

from fnd_profile_option_values fpov,

fnd_profile_options_vl fpo,

fnd_application fa,

fnd_responsibility_vl fr,

fnd_user fu,

fnd_logins fl

where fpo.profile_option_id=fpov.profile_option_id

and fa.application_id(+)=fpov.level_value

and fr.application_id(+)=fpov.level_value_application_id

and fr.responsibility_id(+)=fpov.level_value

and fu.user_id(+)=fpov.level_value

and fl.login_id(+) = fpov.LAST_UPDATE_LOGIN

and fpo.user_profile_option_name in('Client Timezone') and fu.USER_NAME='SYSADMIN';


So, some one wrongly updated the value of this profile for SYSADMIN user.

PROFILE                 VALUE        PROFILE_OPTION_ID level      APP

---------------------------------------- -------------------- ----------------- --------------- --------------------

responsibility                        user

------------------------------------------------------------ --------------------

Client Timezone             '                 3773 USER      FND

                               SYSADMIN

It shows above value  -- Colon ('). It shouldn't be this value.

Hence, we compare this profile with other non-prod instances and it was showed EMTPY value.

As soon as we updated above profile value to correct value. We were able to open forms.

Command we used - It changes profile option value at user level.
++++++++++++++
declare
retval boolean;
cursor cur is select * from fnd_user where user_name= 'SYSADMIN';
begin
for rec in cur
loop
dbms_output.put_line ( rec.user_name );
retval:=fnd_profile.save('CLIENT_TIMEZONE_ID','','USER',rec.user_id);
end loop;
end;

Thanks.
Sreeharsha.

Monday, August 17, 2020

"The jurisdiction policy files are not signed by the expected signer! " - Autoconfig

 Dear Folks,

We came across strange issue with autoconfig which we never faced so far. I will explain this in a simple manner which could be understandable.

Issue - Autoconfig run.

Error - 

Caused by: java.lang.SecurityException: The jurisdiction policy files are not signed by the expected signer! (Policy files are specific per major JDK release.Ensure the correct version is installed.)

    at javax.crypto.JarVerifier.verifyPolicySigned(JarVerifier.java:328)

    at javax.crypto.JceSecurity.loadPolicies(JceSecurity.java:378)

    at javax.crypto.JceSecurity.setupJurisdictionPolicies(JceSecurity.java:323)

    at javax.crypto.JceSecurity.access$000(JceSecurity.java:50)

    at javax.crypto.JceSecurity$1.run(JceSecurity.java:82)

    at java.security.AccessController.doPrivileged(Native Method)

    at javax.crypto.JceSecurity.<clinit>(JceSecurity.java:80)

    ... 19 more

ERROR: Context Value Management Failed.

Terminate.

Fix : - Download Jurisdiction Policy Files Download. 

Link -    https://www.oracle.com/java/technologies/javase-jce-all-downloads.html

We are using JDK 7 version, so we have downloaded UnlimitedJCEPolicyJDK7.zip

If you are using other version JDK8 or JDK6- u can download from above link.

Download zip file into $OA_JRE_TOP/jdk/jre/lib/security after taking backup of existing files.

/u01/app/******//EBGTS/apps/tech_st/10.1.3/appsutil/jdk/jre/lib/security.

Unzip create following files. Once done, Run the autoconfig. It would successfully executes.

US_export_policy.jar

local_policy.jar

Thanks.

Thursday, August 6, 2020

Connection server SSL set credentials failed in OPMN log files

 Dear Folks,

I would like to bring this to your notice about below error. It was one we struggled recently in 12.2 environment.    - Follow ML - 2555355.1

Issue - Connection server SSL set credentials failed  found in OPMN log files  (12.2 Environment).


Reason - (OPMN) and Oracle HTTP Server (OHS) failing to start, as default wallets earlier generated by Oracle Fusion Middleware contain self-signed certificates using MD5withRSA alogrithm.

After applying the OSS patch (O27047184 (initially released July 2019) or its successor Patch 30332467 released in July 2020) , the use of certificates signed by MD5withRSA will fail to work. This is due to the Fusion Middleware (FMW) security library no longer accepting the usage of certificates signed by MD5withRSA and requiring a signature algorithm using SHA256withRSA or better.

Hence we will need to create a empty wallet and add acceptable self-signed certificate using SHA256withRSA algorthm.

Steps to over come above issue after apply the OSS patch and inorder to work OPMN and OHS.

-----------------------------------

1 ) Source Run file system & webtier home

EBSapps.env run

. $FMW_HOME/SetWebtier.env

2) alias orapki=$FMW_HOME/oracle_common/bin/orapki

3)cd $HOME

mkdir Wallet

cd Wallet

Create empty wallet -   orapki wallet create -wallet ./ -auto_login_only

add self-signed certificate  to wallet -   orapki wallet add -wallet . -dn "CN=FMWSmallCircleOfTrust" -asym_alg RSA -keysize 2048 -sign_alg sha256 -self_signed -validity 3652 -auto_login_only

orapki wallet display -wallet .    - It should display like below.

Oracle PKI Tool : Version 11.1.1.9.0

Copyright (c) 2004, 2015, Oracle and/or its affiliates. All rights reserved.

Requested Certificates:

User Certificates:

Subject:        CN=FMWSmallCircleOfTrust

Subject:        CN=*.flyjacksonville.com,OU=IT,O=Jacksonville Aviati

4) grep -i s_ohs_instance $CONTEXT_FILE  -- note it down

5) cd $FMW_HOME/webtier/instances/EBS_web_OHS1   ( EBS_web_OHS1  is  the s_ohs_instance  variables  in CONTEX_FILE).

-bash-4.1$ find . -name cwallet.sso | fgrep -v /webgate/

./config/OHS/EBS_web/keystores/default/cwallet.sso

./config/OHS/EBS_web/proxy-wallet/cwallet.sso

./config/OPMN/opmn/wallet/cwallet.sso

6) Take the backup of defaul wallet in above locations.

cd $FMW_HOME/webtier/instances/EBS_web_OHS1/config/OHS/EBS_web/keystores/default

-bash-4.1$ cp cwallet.sso.lck cwallet.sso.lck_bkp

-bash-4.1$ cp cwallet.sso cwallet.sso_bkp

cd $FMW_HOME/webtier/instances/EBS_web_OHS1/config/OHS/EBS_web/proxy-wallet

-bash-4.1$ cp cwallet.sso.lck cwallet.sso.lck_bkp

-bash-4.1$ cp cwallet.sso cwallet.sso_bkp

-bash-4.1$

cd $FMW_HOME/webtier/instances/EBS_web_OHS1/config/OPMN/opmn/wallet

-bash-4.1$ cp cwallet.sso.lck cwallet.sso.lck_bkp

-bash-4.1$ cp cwallet.sso cwallet.sso_bkp

7)  Copy the new SHA-256 signed wallet to all default wallet locations

cd $FMW_HOME/webtier/instances/EBS_web_OHS1

-bash-4.1$ cp ~/home/**/Wallet/cwallet.sso ./config/OHS/EBS_web/keystores/default/cwallet.sso

-bash-4.1$ cp ~/home/**/Wallet/cwallet.sso ./config/OPMN/opmn/wallet/cwallet.sso

-bash-4.1$ cp ~/home/**/Wallet/cwallet.sso ./config/OHS/EBS_web/proxy-wallet/cwallet.sso

8) Obtain the host, port, and user name variables for WLS Admin from CONTEXT_FILE

aPort=$( tr < $CONTEXT_FILE '<>' ' ' | awk '/""s_wls_adminport""/ {print $(NF-1)}' )

-bash-4.1$ echo $aPort

7036

aUser=$( tr < $CONTEXT_FILE '<>' ' ' | awk '/""s_wls_admin_user""/ {print $(NF-1)}' )

-bash-4.1$ echo $aUser

weblogic

iName=$(tr < $CONTEXT_FILE '<>' ' ' | awk '/""s_ohs_instance""/ {print $(NF-1)}' )

-bash-4.1$ echo $iName

EBS_web_OHS1

9) Start Admin server

10) Re-register OHS using the following commands

cd $FMW_HOME/webtier/instances/$iName/bin

 ./opmnctl unregisterinstance -adminHost $aHost -adminPort $aPort -adminUsername $aUser -instanceName $iName

 ./opmnctl registerinstance -adminHost $aHost -adminPort $aPort -adminUsername $aUser

11) Start The application services and check opmn is up and have login page.

12) Then bring down the application services.

13) Apply OPMN patch 23716938  patch ( this patch should be applied to ensure that new self-signed wallets generated).

If you don't apply this  patch, FS_CLONE will eventually failed and it throws error when it is configuring the OHSfor patch file system.So be aware of this patch.

I could have mention this patch at first. But as i want you to aware the impact of this patch not apply.

Error from clone log file ( It is shown while patch file system OHS configuration in FS_CLONE).

==============

Loc - /u01/app/****/KKIT/fs1/inst/apps/*******/admin/log/clone/ohsT2PApply


Caused by: java.lang.Exception: Unable to start opmnserver of the instance /u01/app/****/KKIT/fs1/FMW_Home/webtier/instances/EBS_web_OHS1 . Check opmn log.


    at oracle.as.clone.provisioning.implementations.ASInstanceProvImpl.startInstance(ASInstanceProvImpl.java:380)


    at oracle.as.clone.provisioning.implementations.ASInstanceProvImpl.createInstanceAndStart(ASInstanceProvImpl.java:160)


    at oracle.as.clone.util.ASInstanceUtil.createStartAndregisterASInstance(ASInstanceUtil.java:318)


    ... 10 more


Caused by: oracle.as.management.opmn.optic.OpticException: Error in starting opmn server


Operation aborted because of a system call failure or internal error


From opmn logs


=========


2020-07-31T21:11:23-04:00] [opmn] [TRACE:32] [] [internal] ORACLE_HOME: /u01/app/****/KKIT/fs1/FMW_Home/webtier


[2020-07-31T21:11:23-04:00] [opmn] [TRACE:32] [] [internal] ORACLE_INSTANCE: /u01/app/****/KKIT/fs1/FMW_Home/webtier/instances/EBS_web_OHS1


[2020-07-31T21:11:23-04:00] [opmn] [ERROR:1] [] [ons-secure] Connection server SSL set credentials failed (43084)


[2020-07-31T21:11:23-04:00] [opmn] [ERROR:1] [222] [ons-secure] SSL initialization failed


Thanks.