11g Fusion Middleware through reverse proxy..?

Hi All,
We are using 11g Discoverer in our environment, our client is having a reverse proxy server .Now my question is..
How to configure 11g Discoverer to use existing reverse proxy server...?
please help with any documents ,links or suggestions...!!!!
Thanks
RB

Reports 11.1.1.3 doesn't work correctly behind reverse proxy:
Oracle Reports 11g gives the machine hostname instead of the proxy hostname in rwservlet/showjobs.
Oracle Fusion Middleware 11g 11.1.1.3 Forms & Reports on Solaris 10 64 bit.
http://machinename:9002/reports/rwservket/getjobs
returns Job Name URLs such as
http://machinename:9002/reports/rwservket/getjobid5?server=rep_wls_reports_machinename_asinst_1
more asinst_1/config/OHS/ohs1/moduleconf/reports_ohs.conf
#mod_weblogic related entry
#<IfModule mod_weblogic.c>
<Location /reports>
SetHandler weblogic-handler
WebLogicHost machinename
WebLogicPort 9002
</Location>
#</IfModule>
http://machinename/reports/rwservket/getjobs
returns Job Name URLs such as
http://machinename/reports/rwservket/getjobid5?server=rep_wls_reports_machinename_asinst_1
Now I place machinename behind a proxy server proxyname.
http://proxyname/reports/rwservket/getjobs
returns Job Name URLs such as
http://machinename/reports/rwservket/getjobid5?server=rep_wls_reports_machinename_asinst_1
instead of the correct URL
http://proxyname/reports/rwservket/getjobid5?server=rep_wls_reports_machinename_asinst_1
The above is only one problem, there are many others that I have found.
Ken

Similar Messages

What is the diffrence between 10gAS and 11g fusion middleware?

hi,
i want to know about, we have installed R12.1.1 on test server . we have installed 10gAS and the database is 11g for form and reports in another server. but our management want's oracle 11g fusion middleware on it.
what is right decision should i suppose to take.
and also please say why should i go with 10AS why not 11g fusion middleware.
thank you
kamal abbasi

Those letters simply indicate the region where the MacBook will be sold.
LL = North America
LZ = Chile, Paraguay, Uruguay.
http://www.jbfaq.com/article.asp?id=63

Oracle 11G fusion middleware weblogic server

Can anyone help me to know all about oracle 11G fusion middleware weblogic server.
Please provide me soft stdy material links.
prompt reply really appriciated.
Regards
Piku

http://download.oracle.com/docs/cd/E17904_01/index.htm

How to Change IP Address in an Oracle 11g Fusion middleware environments

Hi,
We are changing server IP address. Not sure if I need to update any configuration files etc for the new IP address of the host. Can you please help on this
We have following 11g Fusion middleware comonents installed on the server:
Weblogic 10.3.3
SOA Suite 11.1.1.3.0
BPM 11.1.1.3.0
BAM 11.1.1.3.0
WebCenter 11.1.1.3.0
OHS 11.1.1.3.0

>
I've a two node RAC working fine. I want to do an experiment and want to chang the VIP and private IP adresses. I canged the IP addresses in /etc/hosts files on bothe nodes and re-configured the eth1 with new IP addresses. I rebooted the nodes. When I try to start crs, I get error:
>
If you change your VIP to a different subnet, then you have to change your Public IP to the same subnet as well (vice versa)..
You may not have to change your Private IPs (let's say 10.10.10.x) because these are your interconnect addresses and are "private" to the RAC nodes...
You can read on the following Metalink Notes:
>
How to Change Interconnect/Public Interface IP or Subnet in Oracle Clusterware
Doc ID: 283684.1
Modifying the VIP or VIP Hostname of a 10g or 11g Oracle Clusterware Node
Doc ID: 276434.1
Considerations when Changing the Database Server Name or IP
Doc ID: 734559.1
Preparing For Changing the IP Addresses Of Oracle Database Servers
Doc ID: 363609.1
The Sqlnet Files That Need To Be Changed/Checked During Ip Address Change Of Database Server
Doc ID: 274476.1
>
Also check my notes about it.. http://karlarao.tiddlyspot.com/#%5B%5BRAC%20Change%20IP%20-%2010gR2%5D%5D
- Karl Arao
http://karlarao.wordpress.com
Edited by: Karl Arao on Apr 14, 2010 2:03 PM

Oracle 11g Fusion Middleware (11.1.1.3.0) Report Configuration Issue

Oracle 11g Fusion Middleware (11.1.1.3.0) Report Configuration Issue
=============================================
Hi All,
I have installed Oracle 11g Fusion Middleware (11.1.1.3.0) on Oracle Linux 5 and getting some issues while configuring. What's happening is that when I run my report, it looks for the library attached to it. If I define the REPORTS_PATH in reports.sh, it works fine.
What I want to achieve is to push reports to use REPORTS_PATH environment variable from rwserver.conf instead of reports.sh
Someone told me to remove the REPORTS_PATH from reports.sh and add the REPORTS_PATH from reports.sh to a default.env in rwserver.conf, but it didn't worked.
What I know about the report server stuff in 11g Fusion Middleware is that it consists of two different servers (Standalone and In Process). Our application runs report using SRW.RUN_REPORT which basically use In Process report server setting in rwserver.conf to run the report.
The heirarchy in which reports try to look for the REPORTS_PATH is
1) REPORTS.sh
2) rwserver.conf
3) Settings as per Oracle Enterprise Manager Configuration Settings.
My standalone report server name is ReportsServer_hostname_asinst_F and the In Process Server name is rep_wls_reports_hostname_asinst_frd. When I define rep_wls_reports_hostname_asinst_frd (In process Report Server Name) for the server name parameter, I do not get any results for the report run using srw.run_report. Also I can't see the reason behind the report executed because of the following issue
http://hostname:8888/reports/rwservlet/showjobs?server=rep_wls_reports_hostname_asinst_frd
REP-51019: System user authentication is missing.
** the Singlesignon in rwservlet.properties is defined as no
But when I define ReportsServer_hostname_asinst_F (Standalone Report Server Name) as server parameter and ran the report using srw.run_report, I get result with the REPORTS_PATH defined in reports.sh not using rwserver.conf file.
http://hostname:8888/reports/rwservlet/showjobs?server=ReportsServer_hostname_asinst_F
(which shows the report just run).
Can someone who did Report Server configuration using ENV files (changing rwserver.conf), pls. send me the screenshots. Want to make sure if I am changing the correct files under correct location.
Pls. feel free to ask me questions related to the environment set up.
Thanks

Your question belongs in {forum:id=84}
John

WebDynpro applications not working through Reverse Proxy

Hi All,
I have configured a Reverse Proxy using apache 2.2.4 and when i access my Portal (NW04s EP 7.0 SPS08) through reverse proxy i'm not able to display any webdynpro application (e.g. Identity Management). I'm getting Page can not be displayed. I think reverse proxy is not able to convert the request into absolute URLs.
If someone had the same problem,please let me know.
Regards
Vaib

I resolved the problem on my own by adding webdynpro directive to the httpd.conf.
Thanx
Vaib

B2B-51075 Missing signer certificate receiving AS2 through reverse proxy

We are setting up AS2 communication through B2B on 11.1.1.6.7, Our reverse proxy configuration in the DMZ looks as shown:
<Location /b2b/httpReceiver>
WebLogicHost internalsoa.domain
   WebLogicPort 8001
   WLLogFile /dmz/logs/wl-proxy.log
   SetHandler weblogic-handler
</Location>
https://externaledi.domain/b2b/httpReceiver
-Dhttp.proxySet=true -Dhttp.proxyHost=externaledi.domain -Dhttp.proxyPort=443
When I go to the externally available URL, I receive the B2B Server is ready to accept HTTP messages from the Trading Partner message.
In the TRACE:32 logging, I see:
[2014-01-10T09:20:30.551-08:00] [soa_server1] [TRACE] [] [oracle.soa.b2b.engine] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: c8ec097869f74d35:75fef00f:14379dde17a:-8000-0000000000080c34,0] [SRC_CLASS: oracle.tip.b2b.system.DiagnosticService] [APP: soa-infra] [SRC_METHOD: synchedLog_J] Utility:getAllCertsFromWallet:Loaded Certs 5
[2014-01-10T09:20:30.553-08:00] [soa_server1] [ERROR] [] [oracle.soa.b2b.engine] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: c8ec097869f74d35:75fef00f:14379dde17a:-8000-0000000000080c34,0] [APP: soa-infra] java.lang.NullPointerException[[
        at oracle.tip.b2b.packaging.SmimeSecureMessaging.verify(SmimeSecureMessaging.java:834)
        at oracle.tip.b2b.packaging.mime.MimePackaging.processSignedMultipartMessage(MimePackaging.java:1080)
        at oracle.tip.b2b.packaging.mime.MimePackaging.processMultipartMessage(MimePackaging.java:908)
        at oracle.tip.b2b.packaging.mime.MimePackaging.processMessageContent(MimePackaging.java:865)
        at oracle.tip.b2b.packaging.mime.MimePackaging.doUnpack(MimePackaging.java:780)
        at oracle.tip.b2b.packaging.mime.MimePackaging.unpack(MimePackaging.java:670)
        at oracle.tip.b2b.engine.Engine.processIncomingMessageImpl(Engine.java:1888)
        at oracle.tip.b2b.engine.Engine.processIncomingMessage(Engine.java:1654)
        at oracle.tip.b2b.transport.InterfaceListener.onMessageLocal(InterfaceListener.java:412)
        at oracle.tip.b2b.transport.InterfaceListener.onMessage(InterfaceListener.java:220)
        at oracle.tip.b2b.transport.basic.TransportServlet.doPost(TransportServlet.java:754)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
        at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
        at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
        at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
        at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
        at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
        at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
        at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
        at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
        at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
        at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
        at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
java.lang.NullPointerException
        at oracle.tip.b2b.packaging.SmimeSecureMessaging.verify(SmimeSecureMessaging.java:834)
        at oracle.tip.b2b.packaging.mime.MimePackaging.processSignedMultipartMessage(MimePackaging.java:1080)
        at oracle.tip.b2b.packaging.mime.MimePackaging.processMultipartMessage(MimePackaging.java:908)
        at oracle.tip.b2b.packaging.mime.MimePackaging.processMessageContent(MimePackaging.java:865)
        at oracle.tip.b2b.packaging.mime.MimePackaging.doUnpack(MimePackaging.java:780)
        at oracle.tip.b2b.packaging.mime.MimePackaging.unpack(MimePackaging.java:670)
        at oracle.tip.b2b.engine.Engine.processIncomingMessageImpl(Engine.java:1888)
        at oracle.tip.b2b.engine.Engine.processIncomingMessage(Engine.java:1654)
        at oracle.tip.b2b.transport.InterfaceListener.onMessageLocal(InterfaceListener.java:412)
        at oracle.tip.b2b.transport.InterfaceListener.onMessage(InterfaceListener.java:220)
        at oracle.tip.b2b.transport.basic.TransportServlet.doPost(TransportServlet.java:754)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
        at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
        at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
        at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
        at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
        at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
        at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
        at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
        at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
        at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
        at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
        at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
[2014-01-10T09:20:30.553-08:00] [soa_server1] [TRACE] [] [oracle.soa.b2b.engine] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: c8ec097869f74d35:75fef00f:14379dde17a:-8000-0000000000080c34,0] [SRC_CLASS: oracle.tip.b2b.system.DiagnosticService] [APP: soa-infra] [SRC_METHOD: synchedLog_J] MimePackaging:processSignedMultipartMessage:Signature Verification failed
[2014-01-10T09:20:30.585-08:00] [soa_server1] [TRACE] [] [oracle.soa.b2b.engine] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: c8ec097869f74d35:75fef00f:14379dde17a:-8000-0000000000080c34,0] [SRC_CLASS: oracle.tip.b2b.system.DiagnosticService] [APP: soa-infra] [SRC_METHOD: synchedLog_J] Notification: notifyApp: payload = <Exception xmlns="http://integration.oracle.com/B2B/Exception" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">[[
<correlationId>null</correlationId>
<b2bMessageId>0A0A117A1437D2B5D520000017198417</b2bMessageId>
<errorCode>B2B-51075</errorCode>
<errorText>
<![CDATA[Missing signer certificate.
]]>
We used the following notes to guide the configuration:
http://blog.darwin-it.nl/2012/11/b2b11g-with-apache-20-as-forward-proxy.html
http://anuj-dwivedi.blogspot.sg/2010/10/enabling-ssl-on-oracle-b2b-11g.html
Has anyone gotten AS2 communication to work through a reverse proxy? We are not picking up any agreements or senders in the B2BConsole reports.
Thanks,
-Michael

It turns out the trading partner provided the incorrect certificate. Once they sent a new certificate (must be the one they use for signing), everything worked.

Access Mac Mini Server (profile management) through reverse proxy

Hi,
Newbie in Mac's world and yet trying to make it more complicated as it is.
As we recently (last month) decided to equip our sales force with iPads, they were configured through Apple Configurator tool running on a dedicated Mac Mini Mountain Lion.
Now, I'd be keen in moving this configuration to the Profile Manager, part of the OSx Server plugin. So far so good.
Problem is the following : another web server is already on the LAN using both 80 and 443 ports. So all incoming traffic on those ports was routed to this other server. As Mac Mini Server default http/s ports may not be altered, I installed a reverse proxy server (Oracle VM - Ubuntu 12.04LTS - pound), configured to deal differently traffic on those ports according to the domain name (host) of the web request (header). Each 'local' server has been allocated a domain name. Just to be clear, traffic is now routed by the WAN/LAN router, for those ports, towards the reverse proxy, configured to reroute the traffic to the correct destination.
So far so good, it works like a charm, except... as soon as we enter https protocol on Mac Mini Server Profile Manager.
Access from an iDevice to the Mac Mini Server Profile Manager login page is fine, but as soon as password is confirmed, safari is pending and finally a message 'An internal serer error occured. Please try later again' appears.
Looking to both reverse proxy system log and Mac Mini profilemanager.log files to trace the problem, the following lines are produced at this particular moment :
reverse proxy system.log
Jan 15 14:44:03 reverseproxy pound: 91.... GET /devicemanagement/console/apple_theme_v2/en/da56af0a69e733b259dac3991419fa928b4 94a56/resources/images/sprites/me_controls.png HTTP/1.1 - HTTP/1.1 200 OK
Jan 15 14:44:03 reverseproxy pound: 91.... GET /auth?redirect=http://osxsrv.fiks.net/devicemanagement/api/authentication/callback HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
Jan 15 14:44:04 reverseproxy pound: 91.... GET /devicemanagement/api/authentication/callback?auth_token=336952DE-BDDE-4390-82F 7-8475B79FB2D3 HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 can't read header
Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 response error read from 192.168....:443/GET /profilemanager/ HTTP/1.1: Success (0.007 secs)
Jan 15 14:44:08 reverseproxy pound: 91.... POST /devicemanagement/api/magic/get_updated HTTP/1.1 - HTTP/1.1 200 OK
OSx Server profilemanager.log
Jan 15 14:44:05 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]Jan 15 14:44:05 osxsrv ProfileManager[1749] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]
Jan 15 14:44:06 osxsrv ProfileManager[1748] <Info>: Completed in 492ms (View: 0, DB: 6) | 200 OK [http://osxsrv.../magic/do_magic]
Jan 15 14:44:06 osxsrv ProfileManager[1749] <Info>: Completed in 687ms (View: 0, DB: 5) | 200 OK [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Completed in 4ms (View: 1, DB: 14) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Completed in 45ms (View: 1, DB: 43) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Completed in 55ms (View: 0, DB: 1) | 403 Forbidden [http://osxsrv..../magic/do_magic]
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Processing AuthenticationController#callback (for 91.... at 2013-01-15 14:44:08) [GET]
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Redirected to https://osxsrv..../profilemanager/
Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Completed in 149ms (DB: 5) | 302 Found [http://osxsrv..../authentication/callback?auth_token=[FILTERED]]
I guess the '302 Found' is causing or explaining the problem.
I agree this might not be a Mac issue, so I still knock your doors hoping some of you could at least give a hint for what to search for !
If the pound configuration file is of interest, just ask, but this is pretty trivial, saying basically listen these protocols (http/https) on these ports (80/443) and according to Header content (check destination host) and reroute packet to LAN device (with given LAN IP address).
As the default port(s) of the Mac Mini Web Services may not be altered (so far I know), I guess I am stuck using 80 and 443 anyway.
Maybe should I invest time in changing my other apache server ports to some more exotic 8080 or 88 or whatever so Mac Mini Server Profile Manager default ports 80 and 443 are maintained and can be easily and directly rerouted to my Mac server without any reverse proxy along the way.
Thanks in advance for your help
Alx

HI All,
i'm also using reverse proxy technique to publish my server to the internet. The ip is used by twice domains. The problem is by using the profile manager
after login it redirects the url to the Local Area network addresse instead to the domain.
How to configure this on OS X Server and the Profile Manager Service?
Kind Regards
Oemer

X.509 client certificate not working through Reverse proxy

Dear expert,
We are working on fiori infrastructure. Our current scope is to enable X.509 authentication for both internet and intranet. However, the intranet scenario for X.509 authentication is working fine but internet is not, we got error message of "Base64 decoding of certificate failed". For landscape, the only difference between internet and intranet is we have apache reverse proxy in DMZ. We are using gateway as fron-end server, business suite and HANA in the back-end.
As X.509 authentication works fine under intranet scenario, we assume that the configuration for X.509 for both front-end and back-end are correct. With that assumption, the issue would exist in reverse proxy. We are using apache 2.4.7 with openssl 1.0.1e, but we have upgraded the openssl to the latest version 1.0.1h for SSL certificate generation. Below are the apache configuration for X.509.
Listen 1081
<VirtualHost *:1081>
SSLEngine on
SSLCertificateFile "D:/Apache24/conf/server.cer"
SSLCertificateKeyFile "D:/Apache24/conf/server.key"
SSLCertificateChainFile "D:/Apache24/conf/server-ca.cer"
SSLCACertificateFile "D:/Apache24/conf/client-ca.cer"
SSLVerifyClient optional
SSLVerifyDepth 10
SSLProxyEngine On
SSLProxyCACertificateFile "D:/Apache24/conf/internal-ca.cer"
SSLProxyMachineCertificateFile "D:/Apache24/conf/server.pem"
AllowEncodedSlashes On
ProxyPreserveHost on
RequestHeader unset Accept-Encoding
<Proxy *>
     AddDefaultCharset Off
     SSLRequireSSL
     Order deny,allow
     Allow from all
</Proxy>
RequestHeader set ClientProtocol https
RequestHeader set x-sap-webdisp-ap HTTPS=1081
RequestHeader set SSL_CLIENT_CERT ""
RequestHeader set SSL_CLIENT_S_DN ""
RequestHeader set SSL_CLIENT_I_DN ""
RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s"
RequestHeader set SSL_CLIENT_S_DN "%{SSL_CLIENT_S_DN}s"
RequestHeader set SSL_CLIENT_I_DN "%{SSL_CLIENT_I_DN}s"
ProxyPass / https://ldcinxd.wdf.sap.corp:1081/ nocanon Keepalive=on
proxyPassReverse / https://ldcinxd.wdf.sap.corp:1081/
We are out of mind on how to resolve this issue. Please kindly help if you have any idea on it.
thanks,
Best regards,
Xian' an

Hi Samuli,
Really thanks for your reply.
Yes, we have tried your suggestion above in the apache configure file above, but when testing the HANA service, we got error message "Certificate could not be authenticated".
Yes, web dispatcher makes the X.509 authentication much easier as under intranet scenario, no DMZ between browser and web dispatcher. Client certificate pass through web dispatcher directly and it works perfectly this way. Not sure why it doesn' t work through apache reverse proxy.
Best regards,
Xian' an

ITS through Reverse Proxy : Only POST method doesn't work

Hi all,
We are using an Apache Reverse Proxy infront of our Portal and ITS Server
and using https.
Reverse Proxy : 443 > ITS:8443
We have rewrite rules for /sap and /scripts (ITS) /irj (portal) in the
Reverse Proxy .
We have set the following variables through the wgate-config URL of the
ITS server (SetHeader) :
HTTPS on
HTTP_HOST proxy_server:443
All ITS Iviews that use GET mehod display correctly .
However all ITS Iviews that use POST create an Apache Proxy Error.
We believe this is due to HTTP_CONTENT_LENGTH not being set in the ITS .
Do we set this value the same way?
Are there any other ITS settings that would cause this error for POSTS in
a Reverse Proxy ?
Regards
Daniel

There is a way around this (thanks to apple for responding to my bug submission) but it's slow. Test to see if the glyphCode created is greater than zero or not:
final FontRenderContext fontRenderContext = new FontRenderContext(null, false, false);
char[] array = new char[1];
array[0] = (char) intvalueofchar;
GlyphVector glyphVector = glyphFont.createGlyphVector(fontRenderContext, array);
int glyphCode = glyphVector.getGlyphCode(0);
boolean validchar = (glyphCode > 0);I only need to do this on the mac; on windows it does the right thing without this. If anyone has any suggestions for speeding it up (I already have it running in a thread), that'd be great - but thought I'd post it here for anyone else who might run into the same problem some day.

Applet does not load using java 1.5 through reverse proxy with certific...

Hi,
we have the following problem:
When using java 1.5 in our browser, our applet does not load. Using java 1.4.2 it works. It also works using java 1.5.0 using another reverse proxy.
The differences between the 2 reverse proxies (one works, one works not) we use is that the one through which the applet does not load has a certificate installed that is not for its hostname. Can this be the reason the applet does not load? Where can I find information about the sandbox of java 1.5.0 concerning these issues. Are there any docs of the security restrictions imposed by java 1.5.0 sandbox?
Greetings,
Tim

Ok,
the solution to this specific problem was a misconfigured reverse dns lookup.
Greets,
Tim

Error running SOA 11g Fusion Middleware Configuration Wizard

Hi,
I'm running Oracle Fusion Middleware Configuration Wizard ./config.sh after a new&fresh installation of SOA 11.1.1.3.0 on standalone laptop with linux CentOS in order to create a soa_domain on WLS. All steps & tests_connections to the database rcu/soa schemas are OK, but conf wizard freezes (java 99% CPU) at the end of the procedure, when saving the domain.
Any hint is welcomed.
log:
2010-05-06 02:01:52,657 INFO [WizardController] com.oracle.cie.domain.AbstractTemplate - Setting symbol for component oracle.as.soa.top version 11.1.1.2.0 to oracle.as.soa.top_11.1.1.2.0_SOA_ORACLE_HOME
2010-05-06 02:01:52,721 INFO [WizardController] com.oracle.cie.domain.AbstractTemplate - Setting symbol for component oracle.sdp.messaging version 11.1.1.2.0 to oracle.sdp.messaging_11.1.1.2.0_SOA_ORACLE_HOME
2010-05-06 02:01:52,972 INFO [WizardController] com.oracle.cie.domain.AbstractTemplate - Setting symbol for component oracle.sdp.messaging version 11.1.1.2.0 to oracle.sdp.messaging_11.1.1.2.0_SOA_ORACLE_HOME
2010-05-06 02:01:53,061 INFO [WizardController] com.oracle.cie.domain.AbstractTemplate - Adding top-level component reference: oracle.as.common.top version 11.1.1.2.0
2010-05-06 02:01:53,061 INFO [WizardController] com.oracle.cie.domain.AbstractTemplate - Setting symbol for component oracle.as.common.top version 11.1.1.2.0 to oracle.as.common.top_11.1.1.2.0_oracle_common_ORACLE_HOME
2010-05-06 02:01:53,137 INFO [WizardController] com.oracle.cie.domain.AbstractTemplate - Setting symbol for component oracle.integration.soainfra version 11.1.1.2.0 to oracle.integration.soainfra_11.1.1.2.0_SOA_ORACLE_HOME
2010-05-06 02:01:53,419 WARN [WizardController] com.oracle.cie.domain.aspect.XBeanConfigAspect - Unable to locate property:Target on type:class com.oracle.cie.domain.xml.configxb.impl.MachineTypeImpl
2010-05-06 02:01:53,428 WARN [WizardController] com.oracle.cie.domain.aspect.XBeanConfigAspect - Unable to locate property:Target on type:class com.oracle.cie.domain.xml.configxb.impl.ServerTypeImpl
2010-05-06 02:04:11,585 INFO [WizardController] com.oracle.cie.domain.DomainChecker - ListenPort internal Validation result= [null]
2010-05-06 02:04:11,588 INFO [WizardController] com.oracle.cie.domain.DomainChecker - ListenPort external Validation result= [null]
thx,
Mihai

I understood that 11.1.1.3 installs over 11.1.1.2. I download 11.1.1.3, runInstaller of 11.1.1.3 on the same SOA_HOME as 11.1.1.2 and installer finished without errors. I'am not aware if other "things" should be installed/configured. It seems that WizzardController didn't change the version of what it writes in its logs.
(that pb with the config.sh - create domain - was present also in my 11.1.1.2 installation; that is the reason I installed the upgrade to 11.1.1.3 - just to try to resolve somehow this issue).
thanks,
Mihai

Controls_ie5.js file not completely downloadable through reverse proxy

Hi,
We have EP6.0 SP11 implemented in our production and we have setup Apache as reverse proxy server.
With RP, url for portal is http://salesportal.company.com/irj
Internal URL would be http://mirag.company.com:50000/irj
We have set rewriting rule in Apache and proxy filter in portal web.xml.
System was working perfectly with SP09 with Reverse Proxy. Last week i upgraded the sytem to SP11 and after that i seem to get lot of error message refering to java script controls_ie5.js.
Problem is, when I login to portal with RP url it get java script error at lower left cornor of IE. But if I login with internal URL, I do not get any JS error and the server works seamless. We could find out that we are not able to download controls_ie5.js file using RP URL. Only partial file is getting downloaded to IE Temp. Internet Files folder.
Any help is appreciated. Thanks.
best regards,
Vishnu

Don't use the reverse proxy filter - it is deprecated for NW04 in favor of the http provider service (of the dispatcher) parameter "ProxyMappings". See help.sap.com for more details on ProxyMappings.
Do an http trace of the request for the .js, also check your compression, keep-alive, and chunking settings in your VisAdmin to see if something got out of whack on the upgrade.
Nick

Oracle 11g Fusion Middleware Control, CGICMD.DAT

Finally, I have Weblogic and Oracle 11g Forms and Reports up and running. Now, I would like to create a Mapping Key in the CGICMD.DAT file, so that all the login information will not show up in the URL when I run a report. Can someone please tell me how to do this through the Middleware Control console? I do know that i have to go through the MBeans System to find "CgicmdConfigMXBean" but it seems like trying to find a needle in a haystack. Also, is there a specific format when creating a Mapping Key? would like to include the path, userid information for connection to the reports.
thank you,
steven

Your question belongs in {forum:id=84}
John

Data control Jdeveloper 11g Fusion middleware Failed to execute a SAAJ inte

hi
I want to my webcenter Application to make webservice dataControl with external application(BPEL/Jd Edwards) consuming the WSDL url.
I have created DataControl consuming a WSDl URL which is deployed on Server instance within the Firewall of my organisation. & I am able to browse that WSDl URL in browser of my system.
When I use this WSDL URL in Jdeveloper making the DataControl and after that a JSF page and dragging input and output to two different JSF page and doing the appropriate mapping on JSF pages....
I gives this error:
Jan 6, 2010 12:20:02 PM oracle.adf.model.connection.webservice.impl.WebServiceConnectionMessages debugExecuteFailure
SEVERE: Failed to execute a SAAJ interaction.
javax.xml.ws.WebServiceException: javax.xml.soap.SOAPException: javax.xml.soap.SOAPException: Bad response: 407 Proxy Authentication Required ( Access is denied. )
at oracle.j2ee.ws.client.jaxws.DispatchImpl.invoke(DispatchImpl.java:741)
at oracle.j2ee.ws.client.jaxws.OracleDispatchImpl.synchronousInvocationWithRetry(OracleDispatchImpl.java:226)
Workaround:
I have set proxy setting
I have excluded this url and its IP (Fixed) from proxy (Exception)
Restarted the Jdev but same error persist.
I ahve tried this procedure with BPEL as well as Jd Edwards WSDL

I have this same problem, anyone have any ideas?

11g Fusion Middleware through reverse proxy..?

Similar Messages

Maybe you are looking for