IAS 10.1.2-how to configure different oc4j listen to different virtualhost?

Hi
I have requirement,
we have oracle portal based web site that can be used by outside users over the internet.
And then we have are deploying few new apps/webservices/ear files on a oc4j called core_ws. These web services should not be accessed outside.
I have created a virtaul host in apache on a different port(7799) which was not exposed to public world.
But, how to configure core_ws to inform Apache to listen on only port 7799 but not on port 80?
I tried a diffent route to attack the problem(as mentioned below) which managmenet did not like:
created location directive, worked in dev but not in production as there ISA sitting front of apache.
We could apply filter on the URLs of these web services in ISA but my director did not like the idea as each time there is additional web service we have mess with it.
So, he prefers running these web services on a different port that will not have access to public.
Appreciate your help if have acheived the same earlier.

By your description, it sounds like you want to do what is in this My Oracle Support document:
How To Create Virtual Host Specific OC4J Applications (Doc ID 389819.1)
https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=389819.1
(requires login)
You said you were using 10.1.2, so that will work, its a method of creating separate virtualhosts and using rewrites to direct to error pages if an incorrect request is made. For 10.1.3, but there is a dynamic method which is a better approach.
...Ken

Similar Messages

How to configure Wave picks according to different timeslots ?

Hi experts,
I have requirement for my customer that He was picking for Outbound Delivery manually, Now he wants to pick according to different time slots by different waves.
So I am looking for an experts help to configure wavepick for my customer.
Regards,
Shaktiprasad Dash

Hi Shaktiprasad Dash
SPRO -Logistics execution -> Shipping -> picking -> wave picks -> Here you can define the time slots for wave picks and
use this time slot in VL35 for wave picks.
Please maintain the wavepick profile for the warehouse number
KInd regards,
Ramana

Looking up EJBs at different OC4J instances

Hi there,
I´m facing a little weird problem for looking up EJBs deployed at remote OC4J instancias. That is, my application runs at an OC4J instance at host A while some external components, needed by my application, run at an OC4J instance at host B.
Host A runs OC4J version 10.1.3.2 while host B runs OC4J version 10.1.3.3. When I try to lookup some EJB I get the following exception:
Caused by: java.io.InvalidClassException: oracle.oc4j.sql.spi.ManagedConnectionFactoryImpl; local class incompatible: stream classdesc serialVersionUID = -7010736017799296921, local class serialVersionUID = 5036353448034635021
It seems that the serialVersionUID field was not overriden in the class ManagedConnectionFactoryImpl, so each OC4J version has a ManagedConnectionFactoryImpl class with a distinct serial version.
Well, how do I turn around this? Is this a limitation of OC4J that I should cope with (not being able to exchange data through components deployed at different OC4J versions)?
Regards,
Loreno

There are some days since this thread was created. Does the miss of an answer means that it is no possible to exchange data through EJBs deployed at different OC4J instancies, with different versions?

How to configure 3 different members under a single Month column

Hi SAP Gurus,
My client requirement is to show the report in following format, where under a Month column 3 different columns having
1) Quantity (Number of unit ) of a product,
2) its rate (Amount per unit), and
3) Total (amount)    will appear in a single report.
   I have Month as a Time Dim, while Qty, Rate and Total are members of account dim.
Que: How to configure such scenario in a single report?
Jan.2011
Product Category:            Qty (Input)   Rate (Input)   Total (Output)
Product 1
Product 2
Product 3
Product 4
Group1
     Where: Total = Qty X Rate
Thanks and Regards,
SouarbhD

Hi,
Use an EVDRE to create your input schedule. You need to have one row with products and 2 columns with time and account. Choose the memberset options as per the requirement. For the accounts, is total calculated with a dimension formula? If yes, then you just need to enter the values for quantity and rate and send the data. The total will be calculated by the system and will be displayed automatically.
Hope this helps.

How to configure different listener for each database in 11gR2 RAC

Hi Friends,
Current Prod Setup :
11gR2 (11.2..0.2) RAC on RHEL 5.5 with 3 SCAN Listeners on default 1521 port.
Having 4 databases which are using SCAN-IP and listening on default port only.
As per policy, we have to create separate listeners (on different port) for each database.
like,
DB1 - 1522
DB2 - 1523
DB3 - 1524
DB4 - 1525
Even If I configure 4 listeners using NETCA, how my failover & load balancing will happen using SCAN & Newly Created Listeners ???
Thanks in advance..
Regards,
Manish

Hi,
I tried on 11gR2 TEST RAC Server to have different listener with different port (1529) for SCAN & Node Listener & tested failover, load-balancing which was successful.
[oracle@ravish5 admin]$ cat listener.ora
LISTENER_A=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_A)))) # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER_A=ON # line added by Agent
[oracle@ravish5 admin]$ ps -ef | grep lsnr
oracle 1985 1 0 00:46 ? 00:00:00 /11g_crs/11.2.0.2/product/home/bin/tnslsnr LISTENER -inherit
oracle 1988 1 0 00:46 ? 00:00:00 /11g_database/11.2.0.2/product/home_1/bin/tnslsnr LISTENER_A -inherit
oracle 2928 1 0 01:00 ? 00:00:00 /11g_crs/11.2.0.2/product/home/bin/tnslsnr LISTENER_SCAN1 -inherit
[oracle@ravish5 admin]$ lsnrctl status LISTENER_A
LSNRCTL for Linux: Version 11.2.0.2.0 - Production on 02-MAY-2012 03:19:35
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_A)))
STATUS of the LISTENER
Alias LISTENER_A
Version TNSLSNR for Linux: Version 11.2.0.2.0 - Production
Start Date 02-MAY-2012 00:46:42
Uptime 0 days 2 hr. 32 min. 54 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /11g_database/11.2.0.2/product/home_1/network/admin/listener.ora
Listener Log File /11g_database/11.2.0.2/diag/tnslsnr/ravish5/listener_a/alert/log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=LISTENER_A)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.3.5)(PORT=1529)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.3.16)(PORT=1529)))
Services Summary...
Service "TEST" has 1 instance(s).
Instance "TEST2", status READY, has 1 handler(s) for this service...
Service "TESTXDB" has 1 instance(s).
Instance "TEST2", status READY, has 1 handler(s) for this service...
Service "srvc_test.clover.com" has 1 instance(s).
Instance "TEST2", status READY, has 1 handler(s) for this service...
The command completed successfully
SQL> show parameter listen
NAME TYPE VALUE
listener_networks string
local_listener string (DESCRIPTION=(ADDRESS_LIST=(AD
DRESS=(PROTOCOL=TCP)(HOST=192.
168.3.16)(PORT=1529))))
remote_listener string ravish-scan:1529
SQL> exit
Disconnected from Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production
With the Partitioning, Real Application Clusters, Automatic Storage Management, OLAP,
Data Mining and Real Application Testing options
[oracle@ravish5 admin]$ srvctl config scan_listener
SCAN Listener LISTENER_SCAN1 exists. Port: TCP:1521,1529
[oracle@ravish5 admin]$ srvctl config scan
SCAN name: ravish-scan, Network: 1/192.168.3.0/255.255.255.0/eth0
SCAN VIP name: scan1, IP: /ravish-scan.clover.com/192.168.3.22
[oracle@ravish5 admin]$ srvctl config listener
Name: LISTENER
Network: 1, Owner: oracle
Home: <CRS home>
End points: TCP:1521
Name: LISTENER_A
Network: 1, Owner: oracle
Home: /11g_database/11.2.0.2/product/home_1
End points: TCP:1529
[oracle@ravish5 admin]$ srvctl config service -d TEST -s srvc_test.clover.com
Service name: srvc_test.clover.com
Service is enabled
Server pool: TEST_srvc_test.clover.com
Cardinality: 2
Disconnect: false
Service role: PRIMARY
Management policy: AUTOMATIC
DTP transaction: false
AQ HA notifications: true
Failover type: SELECT
Failover method: BASIC
TAF failover retries: 0
TAF failover delay: 0
Connection Load Balancing Goal: LONG
Runtime Load Balancing Goal: NONE
TAF policy specification: BASIC
Edition:
Preferred instances: TEST1,TEST2
Available instances:
TEST_NEW =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = ravish-scan.clover.com)(PORT = 1529))
(LOAD_BALANCE = yes)
(FAILOVER = ON)
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = srvc_test.clover.com)
(FAILOVER_MODE =
(TYPE = SELECT)
(METHOD = BASIC)
Actually different ports for different databases are required to have separation of duties. Once Firewall enabled betwen Client & DB Server only privileged users would have access to particular database.
Regards,
Manish

How to configure a scenario which posts same file to different directories

How to configure a scenario which posts same file to different directories of a receiving system?
Consider an Idoc to file scenario where I have to post same file to two different directories but logical receiver system has to be same.

Hi,
You can try out like this: Using multiple receiver interfaces you can send it to multiple directories with the help of enhanced interface determination/conditions and with the help of multiple receiver communication channels.
Another option is to copy the file from one target directory into another directory with the help of Unix script by executing the same from the OS command level.
One more option is to create a Java Server Proxy and inside the proxy, you can write java code to FTP into different locations.
Hope this helps,
Regards,
Moorthy

How do I configure my iPhone to show different colours for my two calendars both from separate email accounts, both Exchange.

How do I configure my iPhone to show different colours for my two calendars both from separate email accounts, both Exchange.

It does so by default... what's the issue?

How to configure SMTP on a different port?

Hi All,
We have just moved one of our BO servers to a cloud based environment and the exchange server in our new environment uses a different port instead of the default port 25.
Though we have configured all job servers in CMC to use the new port the error message we get when we schedule a report still indicates we are using port 25. Is there like a conifuration file or xml where we need to update this? If not, is there any other way to configure email destination on a different port?
We are using BO XI 3.1 SP3, MySQL repositiry, Tomcat server.
Error message we get:
server error. [Error initializing SMTP server. Return code: [TCP send failed.]. Reason: [X.Y.Z.A:25].]: [CrystalEnterprise.Smtp]
Thanks in advance...
Thanks,
Hari...

Thanks for the reply. Here is my situation explained.
We have a few WebI reports that need to be scheduled as Excel and PDF on a regular basis[weekly] to few users. These schedules work fine in our test environment where the Mail server is configured on port 25. However in our production enviornment , Mail server is configured on a different port. What I can confirm is that the port is open and if I try emailing through command prompt, I can connect the exchange server and send emails.
I have changed the setting on all Job servers [Adaptive Job Server, CrystalReports Job Server, DeskI Job Server, Destinaton Job Server, LOV Job Server, Program Job Server and Publication Job server], but still the email schedules fail and I am confused because the failure message [as in my first post] says it failed over port 25. Where is it still picking up Port 25 from though I have changed the confiuration on all Job servers?
Any guidance will be greatly appreciated.

How to configure Hyper V VM replication between 2 different sites (located geographically at 2 different cities)

Hi all,
I would like to know how to replicate VM's between 2 different sites which are entirely located at different parts of the cities and also
they are on different domains. Both Servers are running HyperV 2012 R2 Standard. As initial phase I have copied the VM's files (.vhd and other config files) from Site A to Site B.
In this case, can any one please guide me on how to achieve this replication between 2 different sites.
A quick response is much appreciated...
Thanks in advance.

Hi Sir,
I would suggest you to build a site-to-site VPN to achieve this .
Also you need to create a domain trust for two domain , as it has been deployed by other people :
https://social.technet.microsoft.com/Forums/windowsserver/en-US/65c0f0a8-e287-48d8-84d5-76320e454703/hyperv-replica-issue-in-multi-domain-environment?forum=winserverhyperv
Best Regards,
Elton Ji
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] .

How to configure oracle listener profile for multiple oracle database

Hi,
I am going to install solution manager system in the same server of ERP EHP4 on Windows. Both DB are oracle.
I'd like to know how to configure listener in this kind of envirnmonent.
a. use two listener and different ports
b. use same listener but different ports
c. use same listener and same port
Which is the correct mothed?
And, after installation, there seem three set of profiles of listten, one for ERP, one for SLM, and the other for OS?(%windir%system32), which one is functional?
Please advise.
Thanks a lot.
Regards,
Alex

Hi,
standard installation is creating new configs for listener for each instance.
I would recommend to use one listener per each instance.
YOU CAN NOT HAVE one port number for two differnet systems!
If you want to use one listener than you must adapt tnsnames.ora, listener.ora and ensure that both systems will use different port numbers.
For example PORT= 15<system number>
Peter

How to configure multiple IP addresses on one NIC?

Hi,
I just installed a OVM Server in version 3.2.1 and the according VMManager. Now i wanted to try to configure the Server/Server Pool. Now i come across a problem, which was already a big problem in OVM 2 while configuring the Networks.
All our OVM Servers have three NICs in them. One is for VMs and Management, the others are for connection to our SAN (Dell PowerVault MD 3220i). My problem is, that due to the network setup, the two NICs for storage need two IP addresses in two different networks each. This shouldn't be a problem, because usually in linux all you have to do is configure something like eth1:1. I remember having huge trouble configuring it in our OVM 2 cluster up to the point where I had to write a shell script to configure the second IP.
Anyways, I have configured two of the storage networks on eth1 and eth2 of the VM Server. Now i cannot configure any more IP addresses, because eth1 and eth2 are not available anymore for configuration in a third network. I really hoped that it would be possible in OVM 3 to configure multiple IP addresses. And probably it is only my lack of knowledge of how to configure it.
So any advice is well appreciated.
Thanks!
Regards,
Marek Hubatka

You should be able to do this by using "VLAN Groups".
http://docs.oracle.com/cd/E35328_01/E35332/E35332.pdf
Check out the VLAN groups section. You must great the VLAN groups before you can assign them to interfaces.

How can I use different calendars associated with different emails to see appointments separately?

I have 3 emails accounts on my Blackberry curve. I want to use different calendars for different type of reminders/appointments. How can I do that? In calendar I pressed menu key and then clicked on select calendar, choose one email address (email 1) then entered an alarm but now if I go to a different calendar associated with different email ( email 2), it also shows me that alarm which I entered in email 1 calendar. Thanks for help

Don't have LV handy to open the old code, but I did read through the thread you referenced. It sounds like the example configured 2 counters to create the variable-freq finite pulse train and configured a 3rd counter to count the # steps generated as verification. That 3rd counter would be a problem for you as there is no internal timing signal connection between your 2 USB devices. You would need to run a physical wire connection and change some of the config code to match. Alternately, you could just delete all the code associated with the 3rd counter for now because it isn't strictly necessary.
Further advice/questions: Are you planning on a pure sine wave of frequency such that you oscillate with both positive and negative velocity (example: varying from -1000 to +1000 Hz clockwise)? Or is there a nominal average frequency with a small sine wave superimposed (example: nominal of 1000 Hz clockwise, variation of +/- 50 Hz)?
I *think* you may be dealing with more of a continuous pulsetrain situation, which is actually much simpler. You would only need 1 counter/timer, though you would still perform the freq changes in a timed loop which uses the pulsetrain as its timing source. You'd just need to keep track of your total elapsed time so you could figure out the right sinusoidal freq value at the moment you're ready to update it.
Another subtlety to watch out for if you're oscillating about 0 velocity -- don't try to create a frequency that is lower than the rate at which you need to update. Also, with steppers you may have mechanical stability issues at low freqs like 10's to low 100's of Hz. These kinds of things may need to be managed as special cases which force you to deviate from a "pure" sine wave.
-Kevin P.

How to configure sync with my local ftp server?

I have used XMarks since now because it hallow me to synchronize my bookmarks with my local server. Now XMarks don't work anymore because it's not more possible to synchronize the passwords.
Any other alternative imposes to use an external server and I don't want to use an external server. My data must remain on my machine it's absolutely excluded that i use an external unknown server for this.
The only solution must be a free solution (a real free solution) and the firefox synchronization seems to me the best/only one.
But I've not found how to configure it to use my own server.
So how to do it, where are the options to the synchronizer to give my own ftp server or whatever other server it needs?

iAS 6.0 sp4 officially does only support iPlanet Directory Server 5.0 sp1 and 4.13.
For more details visit: http://docs.iplanet.com/docs/manuals/ias/60/sp4/ig/prep.htm#42084
I guess, you can specify the directory server during the time of installation.
Thanks,
Rakesh.

Don't know which technology to utilize or how to configure ASA5505

I have an ASA5505. Currently, it is using static NAT on several ports to forward traffic to several devices inside my network. It is a pain not only to configure but from the end user side.
The issue I am having is the applicatoins I am using to access the devices become a mess with dual configurations, one for when I am connected to the internal network and one for when I am away from the office and accessing from the internet. For example, I have 2 Cisco VC240 IP Cameras behind the ASA5505. One is set use port 9091 and the other 9092. When I am inside the office, I access them via http://10.1.2.215:9091 and http://10.1.2.216:9092. But when I am away from the office, I have to have another configuration in an Android app to use them, http://external_ASA_IP:9091 and 9092 and then NAT 9091 to the object for Camera1 and 9092 for Camera2. This is only one scenario. I also have a UC320W that I would like to put an IP phone at home and it sounds like AnyConnect is the only way to do this.
It sounds like to me that if I use some type of VPN, I can access the same devices using the same IP whether internal or external with the external connection using the VPN to tunnel the IP to the local network. There seems to be quite a few ways to do this with an ASA 5505.
AnyConnect seems like the way to go but after reading Cisco documentation, it requires your Android device to be root'd if it is not a particular Samsung model. If I understand correctly, root'ing your phone voids the warranty. I know it is common practice but would think Cisco would have a better solution as I am sure Cisco would not want another manufacturer telling their customers to void the warranty on their Cisco equipment in order to get it to work.
I believe I can just use IPSEC and use the native VPN of the Android OS and also tunnel L2TP as the Android supports IPSEC-PSK/L2TP or IPSEC-CRT/L2TP. But will either of these will support the IP phone to the UC320W?
A friend also told me to use NginX to proxy URL's so the URL http://www.fqdn.com/camera1 gets proxy'd to the internal IP of Camera1 and http://www.fqdn.com/camera2 gets proxy'd to Camera2. He says I should be able to store a cookie on the phone and let the phone authenticate to the camera and if the phone cannot, the proxy can authenticate internally to the IP camera over SSL.
I don't know anymore, I am so confused and just want to simplify my life as I am just a small business with me and a couple other employees but I have full-time job and it is not IT/Network Technician, it is only CTO/CEO/CIO/CFO. I don't have hours upon hours to set this up and test and I don't have hours upon hours to manage it. I just need to simplify this and have so that it is a set-it-and-forget-it for 6 months to 1 year and re-evaluate or update. So, if someone suggests IPSEC, I would not know how to configure anyway and you should expect another post. The same for AnyConnect or any of the other suggestions.
Thanks in advance for any advice.

Hi!
1. Set Calculation Mode property of ITEM_5 to Formula.
Formula property:
nvl(:Block_Name.ITEM_1, 0) + nvl(:Block_Name.ITEM_2, 0) + nvl(:Block_Name.ITEM_3, 0) + nvl(:Block_Name.ITEM_4, 0)
OR
Function_Name(Param_1,... Param_N);
Have in view of, that the ITEM_5 data will not be saved in DataBase.
2. When-Validate-Item trigger is usfull when is necessary to store calculated item data in DataBase.
Rename you Post-Query trigger to When-Validate-Item.
Modify trigger: Store calculation result in the variable.
(Don't forget to round variable value!)
Then compare it with ITEM_5. If they are different - :ITEM_5 := var_name.
I prefer the first method.

How to configure sso with SSL step by step

Purpose
In this document, you can learn how to configure SSO with SSL. After user have certificate installed in browser, he can login without input username and password.
Overview
In this document we will demonstrate:
1.     How to configure OHS support SSL
2.     How to Register SSO with SSL
3.     Configure SSO for certificates
Prerequisites
Before start this document, you should have:
1.     Oracle AS 10g infrastructure installed (10.1.2)
2.     OCA installed
Note:
1.     “When you install Oracle infrastructure, please make sure you have select OCA.
2.     How Certificate-Enabled Authentication Works:
a.     The user tries to access a partner application.
b.     The partner application redirects the user to the single sign-on server for authentication. As part of this redirection, the browser sends the user's certificate to the login URL of the server (2a). If it is able to verify the certificate, the server returns the user to the requested application.
c.     The application delivers content. Users whose browsers are configured to prompt for a certificate-store password may only have to present this password once, depending upon how their browser is configured. If they log out and then attempt to access a partner application, the browser passes their certificate to the single sign-on server automatically. This means that they never really log out. To effectively log out, they must close the browser.
Enable SSL on the Single Sign-On Middle Tier
The following steps involve configuring the Oracle HTTP Server. Perform them on the single sign-on middle tier. In doing so, keep the following in mind:
l     You must configure SSL on the computer where the single sign-on middle tier is running.
l     You are configuring one-way SSL.
l     You may enable SSL for simple network encryption; PKI authentication is not required. Note though that you must use a valid wallet and server certificate. The default wallet location is ORACLE_HOME/Apache/Apache/conf/ssl.wlt/default.
1.     Back up the opmn.xml file, found at ORACLE_HOME/opmn/conf
2.     In opmn.xml, change the value for the start-mode parameter to ssl-enabled. This parameter appears in boldface in the xml tag immediately following.
<ias-component id="HTTP_Server">
<process-type id="HTTP_Server" module-id="OHS">
<module-data>
<category id="start-parameters">
<data id="start-mode" value="ssl-enabled"/>
</category>
</module-data>
<process-set id="HTTP_Server" numprocs="1"/>
</process-type>
</ias-component>
3.     Update the distributed cluster management database with the change: ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct opmn
4.     Reload the modified opmn configuration file:
ORACLE_HOME/opmn/bin/opmnctl reload
5.     Keep a non-SSL port active. The External Applications portlet communicates with the single sign-on server over a non-SSL port. The HTTP port is enabled by default. If you have not disabled the port, this step requires no action.
6.     Apply the rule mod_rewrite to SSL configuration. This step involves modifying the ssl.conf file on the middle-tier computer. The file is at ORACLE_HOME/Apache/Apache/conf. Back up the file before editing it.
Because the Oracle HTTP Server has to be available over both HTTP and HTTPS, the SSL host must be configured as a virtual host. Add the lines that follow to the SSL Virtual Hosts section of ssl.conf if they are not already there. These lines ensure that the single sign-on login module in OC4J_SECURITY is invoked when a user logs in to the SSL host.
<VirtualHost ssl_host:port>
RewriteEngine on
RewriteOptions inherit
</VirtualHost>
Save and close the file.
7.     Update the distributed cluster management database with the changes:
ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct ohs
8.     Restart the Oracle HTTP Server:
ORACLE_HOME/opmn/bin/opmnctl stopproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl startproc process-type=HTTP_Server
9.     Verify that you have enabled the single sign-on middle tier for SSL by trying to access the OracleAS welcome page, using the format https://host:ssl_port.
Reconfigure the Identity Management Infrastructure Database
Change all references of http in single sign-on URLs to https within the identity management infrastructure database. When you change single sign-on URLs in the database, you must also change these URLs in the targets.xml file on the single sign-on middle tier. targets.xml is the configuration file for the various "targets" that Oracle Enterprise Manager monitors. One of these targets is OracleAS Single Sign-On.
1.     Change Single Sign-On URLs
Run the ssocfg script, taking care to enter the command on the computer where the single sign-on middle tier is located. Use the following syntax:
UNIX:
$ORACLE_HOME/sso/bin/ssocfg.sh protocol host ssl_port
Windows:
%ORACLE_HOME%\sso\bin\ssocfg.bat protocol host ssl_port
In this case, protocol is https. (To change back to HTTP, use http.) The parameter host is the host name, or server name, of the Oracle HTTP listener for the single sign-on server.
Here is an example:
ssocfg.sh https login.acme.com 4443
2. Restart OC4J_SECURITY instance and verify the configuration
To determine the correct port number, examine the ssl.conf file. Port 4443 is the port number that the OracleAS installer assigns during installation.
If you run ssocfg successfully, the script returns a status 0. To confirm that you were successful, restart the OC4J_SECURITY instance:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Then try logging in to the single sign-on server at its SSL address:
https://host:ssl_port/pls/orasso/
     3. Back up the file targets.xml:
cp ORACLE_HOME/sysman/emd/targets.xml ORACLE_HOME/sysman/emd/targets.xml.backup
4. Open the file and find the target type oracle_sso_server. Within this target type, locate and edit the three attributes that you passed to ssocfg:
·     HTTPMachine—the server host name
·     HTTPPort—the server port number
·     HTTPProtocol—the server protocol
If, for example, you run ssocfg like this:
ORACLE_HOME/sso/bin/ssocfg.sh http sso.mydomain.com:4443
Update the three attributes this way:
<Property NAME="HTTPMachine" VALUE="sso.mydomain.com"/>
<Property NAME="HTTPPort" VALUE="4443"/>
<Property NAME="HTTPProtocol" VALUE="HTTPS"/>
5.Save and close the file.
6.     Reload the OracleAS console:
     ORACLE_HOME/bin/emctl reload
7. Issue these two commands:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Registering mod_osso
1.     This command sequence that follows shows a mod_osso instance being reregistered with the single sign-on server.
$ORACLE_HOME/sso/bin/ssoreg.sh
     -oracle_home_path $ORACLE_HOME
     -config_mod_osso TRUE
     -mod_osso_url https://myhost.mydomain.com:4443
2.     Restarting the Oracle HTTP Server
After running ssoreg, restart the Oracle HTTP Server:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
Configuring the Single Sign-On System for Certificates
1.     Configure policy.properties with the Default Authentication Plugin
Update the DefaultAuthLevel section of the policy.properties file with the correct authentication level for certificate sign-on. This file is at ORACLE_HOME/sso/conf. Set the default authentication level to this value:
DefaultAuthLevel = MediumHighSecurity
Then, in the Authentication plugins section, pair this authentication level with the default authentication plugin:
MediumHighSecurity_AuthPlugin = oracle.security.sso.server.auth.SSOX509CertAuth
2.     Restart the Single Sign-On Middle Tier
After configuring the server, restart the middle tier:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Bringing the SSO Users to OCA User Certificate Request URL
The OCA server reduces the administrative and maintenance cost of provisioning a user certificate. The OCA server achieves this by authenticating users by using OracleAS SSO server authentication. All users who have an Oracle AS SSO server account can directly get a certificate by using the OCA user interface. This reduces the time normoally requidred to provision a certificate by a certificate authority.
The URL for the SSO certificate Request is:
https://<Oracle_HTTP_host>:<oca_ssl_port>/oca/sso_oca_link
You can configure OCA to provide the user certificate request interface URL to SSO server for display whenever SSO is not using a sertificate to authenticate a user. After the OracleAS SSO server authenticates a user, it then display the OCA screen enabling that user to request a certificate.
To link the OCA server to OracleAS SSO server, use the following command:
ocactl linksso
opmnctl stoproc type=oc4j instancename=oca
opmnctl startproc type=oc4j instancename=oca
You also can use ocactl unlinksso to unlink the OCA to SSO.

I have read the SSO admin guide, and performed the steps for enabling SSL on the SSO, and followed the steps to configure mod_osso with virtual host on port 4443 as mentioned in the admin guide.
The case now is that when I call my form (which is developed by forms developer suite 10g and deployed on the forms server which is SSO enabled) , it calls the SSO module on port 7777 using http (the default behaviour).
on a URL that looks like this :
http://myhostname:7777/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
and gives the error :
( Forbidden
You don't have permisission to access /sso/auth on this server at port 7777)
when I manually change the URL to :
https://myhostname:4443/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
the SSO works correctly.
The question is :
How can I change this default behaviour and make it call SSO on port 4443 using https instead ?
Any ideas ?
Thanks in advance

IAS 10.1.2-how to configure different oc4j listen to different virtualhost?

Similar Messages

Maybe you are looking for