Initial Access to Portal 3.0 failing

I have IAS installed, Apache is running but I can't get into the Portal S/W.
I've successfully connected to the DB from sql+ from that Oracle home, so connectivity works.
I did run the Portal config assistant as part of the installation with no obvious errors.
Now I get this when I try to bring up the Portal.
I've tried the Portal DAD, Login server and gateway addresses with much the same result.
THe only odditity I can see is a line later on that says "HTTP_COOKIE=test_dad....." This was the name I used for an earlier failed attempt. I can't find this cookie anywhere or I'd delete it.
Ideas ?
No DAD configuration Found
DAD name:
PROCEDURE : portal30_sso.wwsso_app_admin.ls_login
URL : http://ian:80/pls/sso_dad/portal30_sso.wwsso_app_admin.ls_login

In working on this I think it isn't using the correct tnsnames address.
It appears to be attempting a bequeath connect with SID=orcl.
I have no idea where it is getting this from. THe config utility runs fine and gets to the database ?
This is very confusing

Similar Messages

Problems in Changing LDAP (AD) Initial Password from Portal

Hello ,
We are using EP 7.01 SP 05 with Microsoft AD as our user data store (flat structure).
For newly created users on AD, we are wanting them to be able to change their initial passwords from portal (on their first logon).
SSL is set up between EP and AD.
The user we are using to access LDAP has write privileges.
We are using a standard configuration file (writeable version) (dataSourceConfiguration_ads_writeable_db.xml)
We are able to modify users from User Administration console (including password change) without any problem.
However, there are two problems we are facing:
1. If the flag "User must change password at first logon" is set on AD/LDAP, then on Portal the user is not getting prompted for changing password - and User authentication failed
2. If the flag "User must change password at first logon" is NOT set on AD/LDAP, then - User is getting prompted to change the password" - however password change is not going through successfully - Error says - "Missing".
From logs I can see the following error:
#1.5#0050568767DE006B0000000700005D7C00048EC433D5B0FC#1282873241046#com.sap.security.core.persistence#sap.com/irj#com.sap.security.core.persistence.[cf=com.sap.security.core.persistence.datasource.imp.LDAPPersistence][md=changePassword][cl=64495]#Guest#0#SAP J2EE Engine JTA Transaction : [044ffffffd35700451]#n/a##19ae55e0b17c11dfb0d00050568767de#SAPEngine_Application_Thread[impl:3]_23##0#0#Error##Java###Can not change password
[EXCEPTION]
{0}#1#javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 19 - 0000052D: AtrErr: DSID-03190F00, \#1:
0: 0000052D: DSID-03190F00, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 9005a (unicodePwd)
]; remaining name 'cn=portal test'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3010)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2943)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2749)
at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1449)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes(ComponentDirContext.java:255)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(PartialCompositeDirContext.java:172)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(PartialCompositeDirContext.java:161)
Can any one pls suggest what is this error about and what I am missing.
Thanks ,
Shanti

Hello All,
Thank you for your time and valuable replies.
I got rid of the "Missing" error and now I am one step away from the solution.
Now I am at a stage where: (for a user with initial password on LDAP)
1. In AD if "User needs to change password on next logon" flag is NOT set - user can successfully logon to portal. (without being prompted for password change)
2. In AD if "User needs to change password on next logon" flag is set - then user cannot logon to portal - I get User authentication failed error.
I have went through a lot of discussions around this topic on SDN and different SAP Notes. I have tried to maintain UME Security policy as close as possible to LDAP (I cannot make it exactly same due to some differences in LDAP and UME).
However, when and administrator can change passwords from UME successfully without any problem - it means that:
- Security policy is being met
- Service user used to communicate to LDAP has all the required access
The only missing piece of the puzzle is how to enable the users to be able to change their passwords (with initial or expired passwords).
According to Note 865399 - the default value for The property ume.ldap.access.set_pwd is TRUE.
Also the property ume.ldap.access.pwd.via.usercontext can only be TRUE when ume.ldap.access.set_pwd is set to FALSE.
So, I have tried setting the following without any success:
<ume.ldap.access.pwd.via.usercontext>true</ume.ldap.access.pwd.via.usercontext>
<ume.ldap.access.set_pwd>false</ume.ldap.access.set_pwd>
Thanks,
Shanti

Using Multiple Domain Names to Access Our Portal

We operate one domain corp.company.com but all internal intranet web servers get assigned the address inside.ZZZ. The inside.ZZZ is on our IE exclusion list but company.com is not. Adding company.com seems to be a miserable task so we are looking at adding an alias so our users can access the server at the new inside.ZZZ url. We have DNS pointing the URL to the right server and that seems to be working properly.
Something within the application is redirecting the page to gnwhepdev.corp. company .com (our servers domain address) after the initial login. Since *.corp. company .com is not in the exclusion list, it is considered an outside address and rerouted. We are trying to find some way to pass the alias within the application itself so that we dont need *.corp. company .com in the exclusion list and we can point users to the inside.ZZZ url.
Our team researched this issue and found documentation that supported the use of multiple domain names to access a Enterprise Portal. The documentation that we found is below:
How ToConfigure the J2EE Engine Deployment Descriptor (Version 1.00 July 2004)
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d0eb8120-b66c-2910-5795-894f384fc054
Particularly on page 13-15 in the documentation it talks about enabling the portal via multiple domain names (Section 3.7: Using Multiple Domain Names to Access the Portal). Also, the documentation says the following:
You must have sever proxy servers, each with a different domain name. You then activate the filter mechanism and configure it to work with several proxy servers
We have several questions about the possiblities of being able to set this up and whether it would require another server where Web Dispatcher would need to be installed for this configuration to work properly. Can someone please provide some insight into what needs to be configured and answer the question about the Web Dispatcher? Also, if Web Dispatcher is required, what steps need to be done to configure? If Web Dispatcher is not needed, what will we need to do apart from that to set this up for our Enterprise Portal system?

It is but you have to use masking......
http://iwebfaq.org/site/iWeb_Domains.html

How do I access the portal "builder"?

It seems like I am successfully logging in as the orcladmin user via the Login link off of the portal home page (/pls/portal/portal.home), because there is no error upon logging in and I can access the OID admin pages. However, I can't seem to figure out how I get to the pages that will allow me to build portal pages, etc. All I see is the "Home", "Community" , "Refresh","Login" and "Help" buttons on the top navigator. Is there a url that I can type in to access the portal builder pages?
I am quite certain that I am logging in properly because after my initial login, when I click the Login link, it does not take me to the login page, just leaves me where I am at.
Upon my initial login, should'nt I be forwarded to the portal admin page or something??
Any help would be appreciated.

once you login, click on the "corporate documents" tab.
a link to the "builder" should show up in the top right.
clicking on that gets you what you want. (there is then a link to navigator on the top right of that page...if you want to work on pages).

Accessing custom Portal service from a java application

We have a custom portal service that connects to BW using xmla. How do you access this portal service from a java application. Not from web dynpro, jsp or servlet but from the java code.
Can we use the INITIAL_CONTEXT_FACTORY to get access to the portal service.
Thank You
D.K

Now I tried the following:
I've added the prtapi.jar and the service's jar to the additional-lib folder and added the appropriate entries to library.txt and reference.txt.
Now I can obtain now the PortalRuntime, but this is not initialized.
Has anybody a solution for this problem? Help would be high appreciated!
Regards,
Matthias

Starting and accessing the portal

I am a fresh newbie. Just installed the App Server and Portal in Enterprise System 5 on Windows as binary. Started the App Server and the Admin console.
Now how to I access the Portal? Does the Portal need to be started? I couldn't locate this information in the documentation or in the Forums.

Found another piece of documentation :
Sun Java Enterprise System 5 Installation Guide for Microsoft Windows
In this document, it says :
Starting and Stopping Portal Server
The Portal Serverstartup and shutdown mechanisms are part of the startup and shutdown mechanisms for the web container, either Web Server or an application server. Portal Server depends on Directory Server, Access Manager or Access Manager SDK, and a web container.
To Start the Portal Server
1.
Start the Directory Server instance.
JavaES5-Install-Dir\DSEE\ds6\bin\dsadm.exe start DSInstancePath
2.
Start the Cacao Server instance.
JavaES5-Install-Dir\share\cacao_2\bin\cacaoadm.bat start
Wait for some time to ensure that the Cacao Server is started.
3.
(Optional) Verify the Cacao Server status.
JavaES5-Install-Dir\share\cacao_2\bin\cacaoadm.bat status
Cacao Server status is displayed in the following format:
default instance is DISABLED at system startup.
Current retries count : 0/4
Processes:
3780
Uptime: 0 day(s), 0:8
4.
Start the Derby Server instance.
JavaES5-Install-Dir\share\ant\bin\ant.bat -buildfile PortalServer-base\lib\derby.xml -propertyfile PortalServer-base\config\PSConfig.properties start-instance
Note �
If the Derby Server is not started then the Wiki and community samples will fail.
5.
Start the web container, which can be Web Server or Application Server.
Note �
If both Access Manager and Portal Server are deployed on the same web container, starting web container brings up both Access Manager and Portal Server by default.
1.
To Start the Application Server, type:
JavaES5-Install-Dir\appserver\bin\asadmin.bat start-domain user adminUserName password adminPassword deployedDomain

How to restrict access to portal based on entitlements.

Hi,
I am working on weblogic 8.1 portal project. i want to restrict the user to access
the portal based on the entitlements. However when user try to login he is seeing
Weblogic Error 403 forbidden page. How to display custom error page, instead of
weblogic default error page.
How to programatically check whether user has access to portal or not based on
entitlements.
Please give me code.
regards,
-chada-

Chada,
The 403 is by design. If you want to place a page in front of one or more
portal desktops and only show links to desktops the current user is entitled
to, review the attachment.
-Phil
"Chada" <[email protected]> wrote in message
news:3fcd6969$[email protected]..
>
Hi,
I am working on weblogic 8.1 portal project. i want to restrict the userto access
the portal based on the entitlements. However when user try to login he isseeing
Weblogic Error 403 forbidden page. How to display custom error page,instead of
weblogic default error page.
How to programatically check whether user has access to portal or notbased on
entitlements.
Please give me code.
regards,
-chada-[login.zip]

Can't access to Portal Admin Console.

Hi all,
I'm working with WLP 10.2. I've created the ear-file (using maven) and deployed it on server (with Unix-system). The current application works well.
My current task is a creation portal in streaming mode. Unfortunately I can't access to Portal Admin console for resolving task. I always retrieve "Error 404 (Not found)".
As I know the admin-tools.war is responsible for Portal Admin Console. I've checked admin-tools.war is running on server (with status "Active").
I'm using the next path for running Portal Admin Console: {serverhost:port}/{context root of admin-tools}/portal.portal.
Maybe, Should I set up(correct) application.xml or weblogic.xml?
Please let me know if you have any ideas.
Thanks,
Yuriy

I think your URL is wrong, try with the following...
http://{server:port}/{name_your_ear}Admin/portal.portal
name_your_ear= The name of your Enterprise Application.
For example,
http://localhost:7001/DemosEarAdmin/portal.portal
I hope this helps

Internet Access to Portal located in DMZ

I've seen questions on the forum regarding gaing Internet access to the Oracle Portal located in the DMZ. This answer does not resolve the issue of having multple DADs to access your portal like abc.com and xyz.com. For that see note:162044.1 on metalink. http://metalink.oracle.com.
If you registered a domain name e.g. abc.com and have the portal up and running in the DMZ. Your local network should be accessing the portal just fine. Your computer name for example is portal. The URL translates into http://portal.abc.com. You opened the ports in the DMZ to allow access and wonder why you get partial portal pages, no login, etc. It's becase users can't resolve the DNS entry for portal.abc.com. Call your ISP and get an "A Record" entry. After a few hours and propogation of the A Record, users on the Internet can successfuly access your site. This A Record should be free.
Good luck
Kellan

Hi,
You've to open the ITS for internet for accessing things from Portal too. As I've told you in previous post, the request goes directly to ITS server (http://itsserver.com/scripts..) and not as (http://myportal.com/scripts..). The idea of having it via Portal will be to mask the URL of ITS , which will not be visible (except for time you click on iview which will display in status bar). In any case, you can directly acces ITS as what you've told, however you give the proxy.
Regards,
Siva
P.S: Award points if you find this useful.

How to access Sap portal login user in ejb web service

Hi,
I wnt to access SAP Portal login user in my ejb application which resides on the same server.
I am using following code
try {
     IUser user =null;                         IWDClientUser wdUser = WDClientUser.getCurrentUser();
                              user = wdUser.getSAPUser();
                         } catch (WDUMException e) {
                              // TODO Auto-generated catch block
                              e.printStackTrace();
Some additional jar files are required for this?
The same code works fine with webDynpro but not with ejb.
Thanks in advance
Best regards,
Nilesh

Thanks for reply.
I have already added com.sap.security.api in my EJB module project classpath. How to add the same in EJB application Project (application-j2ee-engine.xml)?
Best regards,
Nilesh

How to access a Portal User Info from a J2EE application?

Hi,
I have deployed a j2ee application in portal and its running fine.
from that application i need to assign some roles to some users.i have the user id.
so my doubt is can i access the portal user info from this j2ee application?i have some servlets in the j2ee application....can i get the portal user info from this servlet?
plz help me
regards,
Visweswar

Hi,
Please check out this to get the portal user information from Java -
WdClientUser class/Interface to aciehve this.
Please check out these links on the same -
WDClientUser.getClientUser IUser
help needed
Regards
Lekha

Accessing multiple portals at the same time?

Is it possible to access multiple portals at the same time?
For example, what I want to achieve is different properties (layout,
portlets, look & feel) for different groups of users accessing the same
portal. The Associated Groups part on the Portal admin page is not
fulfilling our requirements. So we decided to have different portals for
different groups of users, all working through one portal, and accessing
their custom portals. Is this achievable?
What we are thinking is: put the common functionality in the repository
portal directory, and the custom portlets/jsps in the group-specific portal
directories. This way we can customize portal behavior for different groups
of users. Is this achievable?
Thanks.
Amit

You have to user respective DRILL commands present in WAD to configure the drill operations on multiple characteristics...

Urgent: cannot access the portal home page because of problems language

I have installed Oracle 9iAS, including infrastructure with language FRENCH_FRANCE.WE8ISO8859P15 and portal and wireless type I dont have problem for access to http://machine:1810 and http://machine:7779 in French.
But when I access this url: http://machine:7779/pls/portal, there is a error : java.io.IOException:
Unsupported character encoding: "ISO-8859-15"
at oracle.webdb.page.BaseContentRequest.getResponseJavaEncoding(Unknown Source)
at oracle.webdb.page.BaseContentRequest.getReader(Unknown Source)
at oracle.webdb.page.PageBuilder.getMetaData(Unknown Source)
at oracle.webdb.page.PageBuilder.process(Unknown Source)
at oracle.webdb.page.ParallelServlet.doGet(Unknown Source)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:244)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:336)
at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:59)
at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:283)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:523)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:269)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:735)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:151)
at com.evermind.util.ThreadPoolThread.run(ThreadPoolThread.java:64)
When I install infrastructure, I select FRENCH_FRANCE.WE8ISO8859P15. I check in sql*plus in the v$NLS_PARAMETERS and NLS_LANGUAGE is FRENCH, NLS_TERRITORY is FRANCE, NLS_DATE_LANGUAGE is FRENCH and NLS_CHARACTERSET is WE8ISO8859P15. It seems all well.
But I check in the Windows registry, I find that NLS_LANG is FRENCH_FRANCE.WE8MSWIN1252 under under HKEY_LOCAL_MACHINE/SOFTWARE/ORACLE/HOME1 and HKEY_LOCAL_MACHINE/SOFTWARE/ORACLE/HOME2. Then I correct in FRENCH_FRANCE.WE8ISO8859P15 in the Windows registry.
Also I check in EM web_site in
To check the DAD settings, in my EM Console, I go to Http Server/PLSQL Properties/DAD status. I correct NLS Language with FRENCH_FRANCE.WE8ISO8859P15.
Also I correct langinst.cmd under OH/portal/admin/plsql to replace WE8MSWIN1252 with WE8ISO8859P15
case f:
setenv NLS_LANG FRENCH_FRANCE.WE8ISO8859P15
breaksw
case frc:
setenv NLS_LANG FRENCH_FRANCE. WE8ISO8859P15
breaksw
All that I do is not useful for access the portal home page, thers is always the error java.io.IOException: Unsupported character encoding: "ISO-8859-15"
I dont have problem in language English. My page portal is running well in a another machine where I install Oracle9iAS in English, but I have always problem in the machine where I install Oracle9iAS in French.
I find there are lots of this problem in this forum, but there isnt a answer. So thanks for anyone to resolve this problem.

Hello Michael,
Thanks for your help !
I think that the problem is in the PlsqlNLSLanguage. But I couldnt check it now with the version French WE8ISO8859P15, because today Ive installed oracle902 AS with WE8MSWIN1252 and it functions well. I find the PlsqlNLSLanguage in my $ORACLE_HOME_INFRA/Apache/mod_plsql/conf/dads.conf is FRENCH_FRANCE.WE8MSWIN1252
, and in my $ORACLE_HOME/Apache/mod_plsql/conf/dads.conf is AMERICAN_AMERICA.WE8MSWIN1252. But I dont understand why it doesnt create the languages problem.
I will try again in another machine with WE8ISO8859P15.

Not able to access the portal on the network - (RedHat Enterprise Linux 5).

Friends,
I have installed the portal(7.1) on a linux(RHEL 5) box.I am able to access the portal locally and everything looks fine.
However when I try accessing the portal on the network...I get "page cannot be displayed" as if the server is not listning on 8080.
when I do "GET http://rexportal.davita.corp:8080" I get ........
500 Can't connect to rexportal.davita.corp:8080 (connect: No route to host)
what does this mean?
other info:
1) I have disbaled the firewall by setting SELinux to disabled.
2)I am able to traceroute to the m/c
3) can ftp and SSH
4) When I do "GET http://rexportal.davita.corp" I see a apache server page.It means apache server is accessible at port 80 on the network.
Can you plz help me resolve this issue.what can prevent my server not being accesible across the network
Thanks!!
Deepak.

I was able to resolve this.! basically It was a firewall issue.
To help othere here is what I found.
I had disabled the SELinux utility which should have basically disabled the firewall service but It didnt stop it.
You can check If the firewall is running with following command on redhat linux.
service iptables status
If it is enabled ,you can either stop it by
/etc/init.d/iptables stop (not recommended -- for security)
or
you can add a entry for the port you want to enable by modifying the file
/etc/sysconfig/iptables
Hope it might be helpful !
Thanks,
Deepak.

Use ip address to access the portal

If there any way to access a portal through ip address instead of fully qualified domain name. I need to access the portal in my office through an external ip address in a router. The port forewarding force an ip address even I define a hostname for my router.

Hi Wing ,
yes you can , but some pieces of the portal depend on full hostname resolution ( for domain security) . So Single Sign On to backends will not work properly (if at all) plus Javascript will act funnily in your browser (depending on the settings ).
Also you need to make sure any content in an Iview that is displayed in an Iframe is domain-name resolvable to your browser (e.g. other non-portal hosts ) .
Much better to go through a Reverse Proxy in the DMZ ..see various posts in the Implementation forum .
Regards
Daniel

Initial Access to Portal 3.0 failing

Similar Messages

Maybe you are looking for