Elapsed time went up from 1min to 22min after migrating from 10g to 11g
I just migrated one of my database from 10.2.0.2(Red hat Linux, 2 node RAC, sga= 1Gb) to 11.2.0.1 (red Hat Linux 2 Node RAC, SGA=7GB)
The timing for one of the specific query shoot up from 1min to 22 min.
Following is the query:
SELECT /*+ gather_plan_statistics */ docr.DRCONTENT
FROM WRPADMIN.T_DOCREPORT docr, WRPADMIN.t_document doc
WHERE doc.docid = docr.docid
AND 294325 = doc.rdocid
AND ( ( ( (EXISTS
(SELECT 'X'
FROM WRPADMIN.t_mastermap mstm1,
WRPADMIN.t_docdimmap docdim1
WHERE doc.docid = mstm1.docid
AND mstm1.dimlvlid = 2
AND mstm1.mstmapid = docdim1.mstmapid
AND docdim1.dimid IN (86541))))
OR (EXISTS
(SELECT 'X'
FROM WRPADMIN.t_mastermap mstm2,
WRPADMIN.t_docdimmap docdim2
WHERE doc.rdocid = mstm2.rdocid
AND mstm2.dimlvlid = 1
AND mstm2.mstmapid = docdim2.mstmapid
AND docdim2.dimid IN (28388)))))
ORDER BY doc.DOCIDThe select field (docr.DRCONTENT) is a CLOB column.
Following is the plan and statistics in 10g
Statistics
1 recursive calls
0 db block gets
675018 consistent gets
52225 physical reads
0 redo size
59486837 bytes sent via SQL*Net to client
27199426 bytes received via SQL*Net from client
103648 SQL*Net roundtrips to/from client
1 sorts (memory)
0 sorts (disk)
51823 rows processed
SQL>
Plan hash value: 129748299
| Id | Operation | Name | Starts | E-Rows | A-Rows | A-Time | Buffers | Reads | OMem | 1Mem | Used-Mem |
| 1 | SORT ORDER BY | | 1 | 50 | 51823 |00:00:14.72 | 627K| 5379 | 26M| 1873K| 23M (0)|
|* 2 | FILTER | | 1 | | 51823 |00:00:08.90 | 627K| 5379 | | | |
| 3 | TABLE ACCESS BY GLOBAL INDEX ROWID | T_DOCREPORT | 1 | 1 | 51823 |00:00:05.42 | 159K| 3773 | | | |
| 4 | NESTED LOOPS | | 1 | 50 | 103K|00:00:12.65 | 156K| 628 | | | |
| 5 | TABLE ACCESS BY GLOBAL INDEX ROWID | T_DOCUMENT | 1 | 50 | 51823 |00:00:00.15 | 481 | 481 | | | |
|* 6 | INDEX RANGE SCAN | RDOC2_INDEX | 1 | 514 | 51823 |00:00:00.09 | 245 | 245 | | | |
|* 7 | INDEX RANGE SCAN | DOCID9_INDEX | 51823 | 1 | 51823 |00:00:00.46 | 155K| 147 | | | |
|* 8 | TABLE ACCESS BY GLOBAL INDEX ROWID | T_DOCDIMMAP | 51823 | 1 | 0 |00:00:04.52 | 467K| 1140 | | | |
| 9 | NESTED LOOPS | | 51823 | 1 | 207K|00:00:03.48 | 415K| 479 | | | |
|* 10 | TABLE ACCESS BY GLOBAL INDEX ROWID | T_MASTERMAP | 51823 | 1 | 51823 |00:00:01.20 | 207K| 190 | | | |
|* 11 | INDEX RANGE SCAN | DOCID4_INDEX | 51823 | 1 | 51824 |00:00:00.41 | 155K| 146 | | | |
|* 12 | INDEX RANGE SCAN | MSTMAPID_INDEX | 51823 | 1 | 103K|00:00:00.43 | 207K| 289 | | | |
|* 13 | TABLE ACCESS BY GLOBAL INDEX ROWID | T_DOCDIMMAP | 1 | 1 | 1 |00:00:01.05 | 469 | 466 | | | |
| 14 | NESTED LOOPS | | 1 | 1 | 15 |00:00:14.62 | 468 | 465 | | | |
|* 15 | TABLE ACCESS BY GLOBAL INDEX ROWID| T_MASTERMAP | 1 | 1 | 1 |00:00:01.02 | 464 | 463 | | | |
|* 16 | INDEX RANGE SCAN | RDOCID3_INDEX | 1 | 629 | 44585 |00:00:00.29 | 198 | 198 | | | |
|* 17 | INDEX RANGE SCAN | MSTMAPID_INDEX | 1 | 1 | 14 |00:00:00.02 | 4 | 2 | | | |
Predicate Information (identified by operation id):
2 - filter(( IS NOT NULL OR IS NOT NULL))
6 - access("DOC"."RDOCID"=294325)
7 - access("DOC"."DOCID"="DOCR"."DOCID")
8 - filter("DOCDIM1"."DIMID"=86541)
10 - filter("MSTM1"."DIMLVLID"=2)
11 - access("MSTM1"."DOCID"=:B1)
12 - access("MSTM1"."MSTMAPID"="DOCDIM1"."MSTMAPID")
13 - filter("DOCDIM2"."DIMID"=28388)
15 - filter("MSTM2"."DIMLVLID"=1)
16 - access("MSTM2"."RDOCID"=:B1)
17 - access("MSTM2"."MSTMAPID"="DOCDIM2"."MSTMAPID")following is the plan in 11g:
Statistics
32 recursive calls
0 db block gets
20959179 consistent gets
105948 physical reads
348 redo size
37320945 bytes sent via SQL*Net to client
15110877 bytes received via SQL*Net from client
103648 SQL*Net roundtrips to/from client
3 sorts (memory)
0 sorts (disk)
51823 rows processed
SQL>
Plan hash value: 1013746825
| Id | Operation | Name | Starts | E-Rows | A-Rows | A-Time | Buffers | Reads | OMem | 1Mem | Used-Mem |
| 0 | SELECT STATEMENT | | 1 | | 51823 |00:01:10.08 | 20M| 2306 | | | |
| 1 | SORT ORDER BY | | 1 | 1 | 51823 |00:01:10.08 | 20M| 2306 | 9266K| 1184K| 8236K (0)|
|* 2 | FILTER | | 1 | | 51823 |00:21:41.79 | 20M| 2306 | | | |
| 3 | NESTED LOOPS | | 1 | | 51823 |00:00:01.95 | 8054 | 1156 | | | |
| 4 | NESTED LOOPS | | 1 | 335 | 51823 |00:00:00.99 | 4970 | 563 | | | |
| 5 | TABLE ACCESS BY GLOBAL INDEX ROWID | T_DOCUMENT | 1 | 335 | 51823 |00:00:00.38 | 402 | 401 | | | |
|* 6 | INDEX RANGE SCAN | RDOC2_INDEX | 1 | 335 | 51823 |00:00:00.17 | 148 | 147 | | | |
|* 7 | INDEX RANGE SCAN | DOCID9_INDEX | 51823 | 1 | 51823 |00:00:00.55 | 4568 | 162 | | | |
| 8 | TABLE ACCESS BY GLOBAL INDEX ROWID | T_DOCREPORT | 51823 | 1 | 51823 |00:00:00.94 | 3084 | 593 | | | |
| 9 | CONCATENATION | | 51823 | | 51823 |00:22:16.08 | 20M| 1150 | | | |
| 10 | NESTED LOOPS | | 51823 | | 0 |00:00:02.71 | 221K| 1150 | | | |
| 11 | NESTED LOOPS | | 51823 | 1 | 103K|00:00:01.19 | 169K| 480 | | | |
|* 12 | TABLE ACCESS BY GLOBAL INDEX ROWID| T_MASTERMAP | 51823 | 1 | 51823 |00:00:00.72 | 108K| 163 | | | |
|* 13 | INDEX RANGE SCAN | DOCID4_INDEX | 51823 | 1 | 51824 |00:00:00.52 | 56402 | 163 | | | |
|* 14 | INDEX RANGE SCAN | MSTMAPID_INDEX | 51823 | 2 | 103K|00:00:00.60 | 61061 | 317 | | | |
|* 15 | TABLE ACCESS BY GLOBAL INDEX ROWID | T_DOCDIMMAP | 103K| 1 | 0 |00:00:01.14 | 52584 | 670 | | | |
| 16 | NESTED LOOPS | | 51823 | | 51823 |00:22:13.19 | 20M| 0 | | | |
| 17 | NESTED LOOPS | | 51823 | 1 | 725K|00:22:12.31 | 20M| 0 | | | |
|* 18 | TABLE ACCESS BY GLOBAL INDEX ROWID| T_MASTERMAP | 51823 | 1 | 51823 |00:22:11.09 | 20M| 0 | | | |
|* 19 | INDEX RANGE SCAN | RDOCID3_INDEX | 51823 | 336 | 2310M|00:12:08.04 | 6477K| 0 | | | |
|* 20 | INDEX RANGE SCAN | MSTMAPID_INDEX | 51823 | 2 | 725K|00:00:00.83 | 51838 | 0 | | | |
|* 21 | TABLE ACCESS BY GLOBAL INDEX ROWID | T_DOCDIMMAP | 725K| 1 | 51823 |00:00:00.92 | 51823 | 0 | | | |
Predicate Information (identified by operation id):
2 - filter( IS NOT NULL)
6 - access("DOC"."RDOCID"=294325)
7 - access("DOC"."DOCID"="DOCR"."DOCID")
12 - filter("MSTM1"."DIMLVLID"=2)
13 - access("MSTM1"."DOCID"=:B1)
14 - access("MSTM1"."MSTMAPID"="DOCDIM1"."MSTMAPID")
15 - filter((INTERNAL_FUNCTION("DOCDIM1"."DIMID") AND (("DOCDIM1"."DIMID"=86541 AND "MSTM1"."DIMLVLID"=2 AND "MSTM1"."DOCID"=:B1) OR
("DOCDIM1"."DIMID"=28388 AND "MSTM1"."DIMLVLID"=1 AND "MSTM1"."RDOCID"=:B2))))
18 - filter(("MSTM1"."DIMLVLID"=1 AND (LNNVL("MSTM1"."DOCID"=:B1) OR LNNVL("MSTM1"."DIMLVLID"=2))))
19 - access("MSTM1"."RDOCID"=:B1)
20 - access("MSTM1"."MSTMAPID"="DOCDIM1"."MSTMAPID")
21 - filter((INTERNAL_FUNCTION("DOCDIM1"."DIMID") AND (("DOCDIM1"."DIMID"=86541 AND "MSTM1"."DIMLVLID"=2 AND "MSTM1"."DOCID"=:B1) OR
("DOCDIM1"."DIMID"=28388 AND "MSTM1"."DIMLVLID"=1 AND "MSTM1"."RDOCID"=:B2))))Calling all performance experts. Any ideas ??
Edited by: dm_ptldba on Oct 8, 2012 7:50 AM
If you check lines 2, 3, 8, and 13 in the 10g plan you will see that Oracle has operated your two EXISTS subqueries separately (there is a bug with multiple filter subqueries in that version that indents each subquery after the first one extra place, so the shape of the plan is a little deceptive). The statistics show that the second subquery only ran once because existence was almost always satistfied by the first.
In the 11g plan, lines 2, 3, and 9 show that the optimizer has transformed your TWO subqueries into a single subquery, then turned transformed the single subquery into a concatenation and this has, in effect, made it execute both subqueries for every row from the driving table - all the extra work appears from the redundant execution of the thing that was the second EXISTS subquery.
If you extract the OUTLINE from the execution plans (add 'outline' to the call to dbms_xplan as one of the format options) you may see some hint that shows the optimizer combining the two subqueries - if so then put in the "NO_xxx" hint to block it. Alternatively you could simply try adding the hint stop ALL cost-based query transformations /*+ no_query_transformation */
Regards
Jonathan Lewis
Similar Messages
-
Severe Time Drifting after Migration from 10.5.8 - Help!
Hey everyone, I'm hoping someone can help me out or shed some light on a very odd issue that came about this morning. I'm really having a hard time figuring out a fix.
I recently upgraded one of my old Mac mini servers to some new, (to me), hardware. The old server was a last-gen G4, and the new one is a late 2006 Intel.
The migration went totally fine, and all services are responding and working as expected. This server really isn't used for all that much, so I didn't anticipate any real issues in upgrading from 10.5.8 (PPC) to 10.6.7 (Intel). But after checking everything over this afternoon, I landed on a really weird issue.
I can literally watch the time progress slower on this server. Really. The seconds pass slower, and after about an hour, it will be up to five minutes behind all the other servers in my infrastruture. The server is setup to watch time.apple.com as it's NTP, and there's no change with another NTP server. I can grep the NTPd and it seems to be working fine. I've "started fresh" by removing ntp.conf and ntp.drift, rebooted, and had NTPd recreate them after setting new time and date preferences. That seems to have helped a *bit* but it's still persisting. Time zone information is correct. I've even turned off time sync altogether and it still persists, so it's got to be a local issue with the system.
Now, after some pondering, I believe I know what's causing the issue. The person I inherited the server from replaced the stock 1.5 Core Solo with a 1.66 Core Duo, which I've seen done plenty of times before, and never heard any real issues with. And I did physically check the upgrade, and everything seems to be perfect. The system sees both cores fine, and everything is stable. Except this very odd time/clock issue. This is the only root cause that I can possibly think of for it doing this.
And what's odd, is that if the time is wrong in the menu bar, and I go into the Time and Date prefpane, it instantly updates to the right time.
Now really, this isn't *that* big of a deal for this server. None of it's services rely on perfect time, (Kerberos and whatnot), but it's still rather annoying, especially for Time Machine backups. My main curiousity is if anyone knows how to increase the interval for NTP syncing with time.apple.com, so it'll check every hour or so, (I believe it checks every 12 by default. Correct me if I'm wrong).
TL;DR
After migrating from Leopard Server (PPC) to Snow Leopard Server (Intel), my system clock is running about five minutes slow per hour. Suspecting processor upgrade is to blame. How can I increase NTP syncing interval with time.apple.com?
Thanks in advance everyone!You can add/modify the minpoll and maxpoll values in ntp.conf. This should allow you to set the time poll and reset a bit more aggressively.
The Xeon chips have been notorious for time skew. I've not seen the same with CoreDuo and Core2Duo.
You may also just want to periodically stop and start the NTP process. This can be down using systemsetup command: systemsetup -setusingnetworktime on/off
In corporate environments with Windows time servers that reboot frequently, I tend to automate a script that stops network time, waits a few seconds, and then starts it again. This will force a sync.
Hope this helps. Oh, and by the way, time is critically importation to Kerberos authentication and authorization from the client. Next the DNS, time is the most common cause of access denial. Keep DNS and time healthy. -
Work book size increased by 4 times after migrating from BW3.5 to BI7
Hi Experts
work book size increased by 4 times after migrating from BW3.5 to BI7
our client runs the report using BI web report and exports to excel sheet.
she asks us to investigate why the size of the work book isincreased by 4 times after migrating from BW3.5 to BI7.
please let me know what you think.
thank you for reading this.
Regards
satishANY suggestion would be greatly appreciated
-
Mail "unexpectedly quits" after migration from snow leopard to new iMac running Mountain Lion
Mail "unexpectedly quits" after migration from snow leopard time machine files to new iMac running Mountain Lion. I can run connection doctor OK. But the activity window is blank. If you try to open message viewer window then mail program crashes. Would really like to get my old emails back as the old imac is totally dead. Thanks for any help.
Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
Step 1
Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left.
Enter the name of the crashed application or process in the Filter text field. Post the messages from the time of the last crash, if any — the text, please, not a screenshot.
When posting a log extract, be selective. In most cases, a few dozen lines are more than enough.
Please do not indiscriminately dump thousands of lines from the log into a message.
Important: Some private information, such as your name, may appear in the log. Edit it out by search-and-replace in a text editor before posting.
Step 2
Still in the Console window, look under User Diagnostic Reports for crash reports related to the process. The report name starts with the name of the crashed process, and ends with ".crash". Select the most recent report and post the entire contents — again, the text, not a screenshot. In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.) Please don’t post shutdownStall, spin, or hang logs — they're very long and not helpful. -
Increase in CPU Utilization after migration from APEX 3.1.2 to APEX 3.2
Has any noticed any increase in CPU Utilization after migrating from APEX 3.1.2 to APEX 3.2?
Thanks,
MarkHi Mark,
Take a look at some of the usage reports within APEX (sessions, page views etc) to get an overall feel for where the time is being consumed.
You'll also find it useful if you can run a statspack report (or AWR, ASH etc) during a busy period to be able to drill down into where that CPU is being spent.
There's no magic answers here unfortunately, you need to track it down to where the time is being spent before working back up to find out where best to tune it.
John.
Blog: http://jes.blogs.shellprompt.net
Work: http://www.apex-evangelists.com
Author of Pro Application Express: http://tinyurl.com/3gu7cd
REWARDS: Please remember to mark helpful or correct posts on the forum, not just for my answers but for everyone! -
Whether using Oracle after migrating from MySQL be easy or not?
Though oracle is tough secured one, I don't know exactly the complexity of using Oracle database. Using MySQL 4.1.22 in my website https://www.puntercalls.com/ . Though the site is based on providing share market tips, it deals with a huge amount of stock market data and in much more real time basis hand-to-hand with NSE and BSE info which means a tough security is the utmost demand of the time.
My question is whether using Oracle after migrating from MySQL be easy or not. You can check my site at https://www.puntercalls.com/ for different real time data updation parts.
Kind suggestions are greatly appreciated in advance!
Edited by: 968684 on Oct 31, 2012 7:04 AMHi,
As you are really asking about how to setup and use securioty features in an Oracle database it woul db ebetter to raise the question in this forum -
Forum: Database Security - General
Database Security - General
They will have more knowledge about Oracle security features and which it would be best for you to use.
Regards,
Mike -
I don't see my images on Photo after migration from iPhoto
i recently purchased an iMac, which uses Photo, and don't see my photos after migration from an older mac which has iPhoto. I see the event folders and the photo count but there's no actual image! Help.
Is it here?
http://www.imore.com/yes-camera-roll-gone-ios-8-heres-where-it-went-and-why -
Can only access emails through OWA after migration from exchange 2007 to 2013
can only access emails through OWA after migration from exchange 2007 to 2013, in other words unable to access mails through outlook or from other Applications services.
needed RCA ... plz help..Hi,
From your description, you can send and receive messages only when you use OWA after migration from Exchange 2007 to Exchange 2013. If I have misunderstood your concern, please let me know.
In your case, I recommend you create a new test mailbox in your Exchange 2013 and check if you can send and receive messages on Outlook. If yes, it is recommended to create a new profile to solve this issue.
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support -
After Migrating from 10g to 11g Geeting problems with Guided navigations.
After Migrating from 10g to 11g Geeting problems with Guided navigations and section navigations not working.
And we are getting the following error <<odbc driver returned an error (SQLExecDirectW)>> where we have used navigations.
In 10G we have Guided navigation Reports to display the Reports links and intermediate reports for conditionally displaying the Dashboard section(Reports) but after migrating to 11g Guided navigation reports and conditional reports are not working..
We know that in 11g section navigation replaced with conditions and Guided navigation replaced with action link.. but
do we need to recreate those reports in actions and condition or is there any work around avoid reworking.Hi Both,
Thanks for the reply ...
For Guided navigation we are getting like below error:
Odbc driver returned an error (SQLExecDirectW).
For Conditional dashboard section we are getting like below error:
"saw.aViewsToRefresh = [];saw.aViewsToRefresh['d:dashboard~p:1egt6il5utl0uu8n~s:3jsmgfs3c1r4tn7c~n:condition'] = true;saw.aViewsToRefresh['d:dashboard~p:1egt6il5utl0uu8n~s:nos5q43jvjmi643b~n:condition'] = true;" -
Report generation failed after migrated from 6i to 10g.
Hi All,
i have migrated the 6i application to 10g.
There was a report which was generated in .html format and saved to a remote server location.
Now after migration to 10g,when i run the report through the URL ,It is still generated on the same remote server location but the it is not showing in the application interface.
Please help....
Thanks,
DKHi, Mike,
user3211655 wrote:
Hi All,
We try to migrate a 8i database to 10g by using the exp and imp. All tables and data are already migrated by imp. During the imp, there are errors said the trigger compile with errors.
When login to the em to check, I found these 2 errors.
Line # = 2 Column # = 1 Error Text = PL/SQL: SQL Statement ignored
Line # = 2 Column # = 60 Error Text = PL/SQL: ORA-00942: table or view does not exist
My trigger is a very simple one:
BEGIN
Select TB_COUNTER_SEQ.NEXTVAL INTO :NEW.INCREMENT_NUM FROM DUAL;
END;
And I'm sure the "TB_COUNER_SEQ" is there.
Do I need to change anything on the trigger when migrating from 8i?
In fact, besides this trigger, all other trigger imp to this schema are having the same error. The schema in the 10g is a newly created one, is there any special right I need to create grant to this new user?Grant the necessary privileges on the tables (and any other objects used, like sequences) directly to the owner of the triggers. Privileges granted to a role don't count in AUTHID OWNER stored procedures; the privileges have to be granted to the owner of the stored procedure (or to PUBLIC).
It the error is occurring at position 60, then it looks like you don't have privileges on dual. Login as SYS and
GRANT SELECT ON dual TO PUBLIC;You may need synonyms (perhaps public synonyms) for the objects, too. -
Hotkey (Ctrl+B) is not working after migration from Forms 6i to 10g
Dear Gurus,
Need your help regarding the following problem:
After migrating from Forms 6i to 10g (Rel 2), Ctrl+B (used to list the blocks in a form) hotkey is not working anymore (all other hotkeys are working fine). I've checked my FMRWEB.RES and it contains an entry for Ctrl+B:
66 : 2 : "Ctrl+B" : 70 : "Block Menu"
Additional Information:
OS: AIX
NLS_LANG = UTF8
fmrweb_utf8.res also contains the same text for Ctrl+B as above.
I tried to reproduce it on my Windows Machine (with NLS_LANG set to AMERICAN_AMERICA.WE8ISO8859P1) and its not working as well. I don't have right to put move files on AIX server but i can try anything (on my local system) suggested by the Oracle gurus.
Best Regards,Dear Gerd,
"are you sure, that it is the hotkey"
Yes, i am dead sure. Since:
(1) It was working fine in forms 6i
(2) If you run a form and select Help => Keys, you will see Ctrl+B on the top of list
The problem is its not taking into account the keys which i am defining in the file (although i am following the same procedure detailed on metalink.oracle.com).
Regards -
NQS ERROR:14025 NO FACT TABLE EXISTS -after migrating from 10g to 11g
NQS ERROR:14025 NO FACT TABLE EXISTS AT THE REQUESTED LEVEL OF DETAIL in all the reports after migrating from 10g to 11g ...
then we applied the patch (One-off Patch for Bug: 11850704) for the error <<NQS ERROR:14025 NO FACT TABLE EXISTS AT THE REQUESTED LEVEL OF DETAIL>>
But after applying the above the above patch we are still getting the same error.
but in the above patch instructions file - Post deployment instructions to create the Variable
Post Install Instructions:
- To revert to the 10g navigator behavior for handling conforming dimensions,
you must set the following session variable via an init block in the RPD:
NO_FORCE_TO_DETAIL_BIN=1
The default value for the above variable is 0.
- Restart all servers (Admin Server and all Managed Server(s))
but we didn’t find the process to create the specified variable and Initialization block in the RPD
Can you please suggest us how to go further.
Our questions are:Hi
Refer the below thread.
obiee 11g non-conforming dimensions and nQSError 14025
Might be help you/
Thanks,
satya -
Cant find my iTunes library after migration from old PC to new Mac
Can't find my iTunes library after migration from old PC to new Mac?
Migration Assistant has transferred itunes content, but where is it on new iMac?
https://discussions.apple.com/thread/3358162?start=0&tstart=0 <<< click here for a possible answer. -
STP playback is erratic after migrating from 10.4.11 to 10.5.8
After migrating from 10.4.11 to 10.5.8
SoundTrack Pro playback is erratic,
i.e; audio stops and starts with a few small click noises.
Your suggestions will be mostly appreciated.Thanks for your reply.
STP version 2.0.2
Audio is straight out no interface and works fine besides erratic stop-start playback. -
ZCC Login failed after Migration from 11.3.1 FRU1 to 11.3.2
Hey,
System: 6 Primary Server Sless 11 SP3
LDAP: EDIR
Primary: 11.3.2
Sats: 11.3.1 FRU1
After Migration from 11.3.1 FRU1 to 11.3.2
i'll try to login in ZCC
Message ZCC
Error: Login Error: com.novell.zenworks.datamodel.exceptions.InternalD ataModelException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
See the ZENworks Control Center log file (zcc.log) for the full stack trace.
I tryed with default admin and see that the USERSource is not reachable.
I take a look in the configuration / usersource and there is an Error like: Unable to read contexts. One or more of your connections don't support non-SSL.
ZCC.log sayed
[javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints] [] [com.novell.zenworks.datamodel.exceptions.InternalD ataModelException] [ZENServer]
[DEBUG] [12/30/2014 09:54:02.417] [3547] [ZENServer] [72] [zenworks] [ZCC] [] [Form.java CSRF TOKEN:d1b804076c63e7393af1a72442ced4b5 for the PageId:authoritativeSourceDetails] [] [] [] [ZENServer]
[DEBUG] [12/30/2014 09:54:03.144] [3547] [ZENServer] [85] [zenworks] [ZCC] [] [QuickTask build tasks called in createChildControls, normal flow before ajax] [] [] [] [ZENServer]
[DEBUG] [12/30/2014 09:54:03.348] [3547] [ZENServer] [69] [zenworks] [ZCC] [] [com.novell.zenworks.datamodel.exceptions.InternalD ataModelException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
at com.novell.zenworks.datamodel.services.Certificate ManagerImpl.getCertificates(CertificateManagerImpl .java:179)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. validateCertificateExpiry(LDAPUtil.java:1162)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:774)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:559)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:386)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:359)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:325)
at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:311)
at com.novell.zenworks.core.web.internal.UserSourceSt atusAJAX.getImageData(UserSourceStatusAJAX.java:77 )
at com.novell.web.ajax.ImageAJAX.service(ImageAJAX.ja va:38)
at com.novell.web.ajax.AJAXDataHandler.service(AJAXDa taHandler.java:40)
at com.novell.web.AjaxServlet.serviceImpl(AjaxServlet .java:100)
at com.novell.web.AjaxServlet.service(AjaxServlet.jav a:74)
at com.novell.zenworks.fw.web.internal.ZENworksAjaxSe rvlet.service(ZENworksAjaxServlet.java:47)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:727)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:303)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:208)
at com.patchlink.sapphire.web.pages.vulnerability.ses sion.HibernateSessionFilter.doFilter(HibernateSess ionFilter.java:75)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:241)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:208)
at org.apache.catalina.core.StandardWrapperValve.invo ke(StandardWrapperValve.java:220)
at org.apache.catalina.core.StandardContextValve.invo ke(StandardContextValve.java:122)
at org.apache.catalina.authenticator.AuthenticatorBas e.invoke(AuthenticatorBase.java:501)
at org.apache.catalina.core.StandardHostValve.invoke( StandardHostValve.java:171)
at com.googlecode.psiprobe.Tomcat70AgentValve.invoke( Tomcat70AgentValve.java:39)
at org.apache.catalina.valves.ErrorReportValve.invoke (ErrorReportValve.java:103)
at org.apache.catalina.core.StandardEngineValve.invok e(StandardEngineValve.java:116)
at com.novell.zenworks.tomcat.ZENRequestValve.invoke( ZENRequestValve.java:1346)
at org.apache.catalina.connector.CoyoteAdapter.servic e(CoyoteAdapter.java:408)
at org.apache.coyote.http11.AbstractHttp11Processor.p rocess(AbstractHttp11Processor.java:1070)
at org.apache.coyote.AbstractProtocol$AbstractConnect ionHandler.process(AbstractProtocol.java:611)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProce ssor.run(JIoEndpoint.java:316)
at java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:615)
at org.apache.tomcat.util.threads.TaskThread$Wrapping Runnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:745)
Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
at sun.security.ssl.Alerts.getSSLException(Alerts.jav a:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl .java:1884)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:276)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:270)
at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1439)
at sun.security.ssl.ClientHandshaker.processMessage(C lientHandshaker.java:209)
at sun.security.ssl.Handshaker.processLoop(Handshaker .java:878)
at sun.security.ssl.Handshaker.process_record(Handsha ker.java:814)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocke tImpl.java:1016)
at sun.security.ssl.SSLSocketImpl.performInitialHands hake(SSLSocketImpl.java:1312)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1339)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1323)
at com.novell.zenworks.security.certificates.Certific ateUtility.getCertChain(CertificateUtility.java:12 1)
at com.novell.zenworks.datamodel.services.Certificate ManagerImpl.getCertificates(CertificateManagerImpl .java:175)
... 35 more
Caused by: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
at sun.security.ssl.AbstractTrustManagerWrapper.check AlgorithmConstraints(SSLContextImpl.java:946)
at sun.security.ssl.AbstractTrustManagerWrapper.check AdditionalTrust(SSLContextImpl.java:872)
at sun.security.ssl.AbstractTrustManagerWrapper.check ServerTrusted(SSLContextImpl.java:814)
at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1421)
SR has been created.
Any Tipps /Hints for me ?
Thank YouOriginally Posted by robpet
Should have said kind of the same problem...
That was sort of my gut feelings so I checked our certificates beforehand and they are using certs with sha1 fingerprint. But we are not using SSL - our connections are made using port 389. And the communication status is green.
But I cannot add SSL because it complains about "unable to obtain a valid certificate for SSL communication information. Please verify that the adress and port are correct and that the LDAP directory has been configured with a valid certificate.
So I cannot understand why users cannot authenticate with zenagent.
There's a TID about zcc login failures after 11.3 upgrade.
https://www.novell.com/support/kb/doc.php?id=7014716
We ran into the above.
Maybe you are looking for
-
I am getting the following error message, " The URL is not valid and cannot be loaded" when I try to go to firefox home. I uninstalled add-ons , uninstalled Firefox and then installed a fresh version. Still have the problem. Thanks for the help
-
Rmiregistry crashing Java HotSpot VM on SGI machine
Hello! I have created an application that uses RMI in Java to pass messages between one server and several clients. That is, the clients talk only to the server and not with each other. I've recently been tasked by my company to make this program wor
-
Unlocking OID User Through OIM
Hi all, I am testing an OID User Process task in OIM which can be run on a user's OIM account and unlock a locked user in OID However, I am getting the following error after executing the task: ERROR 11:54:51,375, RMICallHandler-113 XL_INTG.OID - ===
-
No completion tracking w/o quiz question in v.7?
Just noticed today that several courses we had created in 6, but updated in 7, no longer seem to count completers as "complete" in our LMS. These courses do not contain graded quizzes. In 6 we had set a % of slide views to indicate completion. I j
-
I have uninstalled Lightroom and need to re-install it on the same computer. I cannot find where to re-install it. The CC popup window says that it is installed and Up to date.