OAM Webgate 10.1.4.2 BP7 installation on RHEL5 2.6.18-92.el5 x86_64 ?

Hello,
Is it possible to install OAM Webgate 10.1.4.2.0 Bundle Patch 7 on Linux RHEL5 X86_64 (2.6.12-92.el5 x86_64 ?.
If yes what is the procedure to follow?
The “Oracle Identity Management 10g Release 3 (10.1.4.x) Certification Matrix .xls” claims it’s certified but we are not able to complete the installation.
During the first installation with the 10.1.4.0.1 media (Oracle_Access_Manager10_1_4_0_1_linux_APACHE2_Webgate) the installer said it was unable to configure the WebGate … So we continue anyway apply the Oracle_Access_Manager_10_1_4_2_0_Patch_linux_APACHE2_WebGate patch set and after the Oracle_Access_Manager_10_1_4_2_0_BP07_Patch_linux_APACHE2_WebGate bundle patch.
After patches application we tried to launch oblix/tools/start_configureWegate but we had a “cannot open shared object file” on libnsl.so.1..
Commenting the “export LD_ASSUME_KERNEL=2.4.19” allows the tools to be launched but after generating the certificate (simple mode) it stays stuck on “Preparing to connect to Access Server. Please wait”…
Best regards,
EDIT:
After a long time waiting on "Preparing to connect to Access Server. Please wait" the configureWebGate finally returned: "Access Server you specified ins currently down. Pleas check your Access Server"
Well looking at the Diagnostics in System management console shows the corresponding Access Server up ...
So I'm afraid it is not possible to make Webgate working on RHEL5 x86_64 :(
If someone makes it work please tell me !
Edited by: Laurent_ch1258 on May 22, 2009 4:09 PM

Hello,
Thanks Pramod for your advice,
You were right the first issue was due to a clock difference (I didn't figure out the NTP synchronisation was broken with our RHEL5 64bit test VM)
Well after correctly configuring clock synchronization with NTP, I run the configurewebgate and successfully configure it :)
Anyway after configuring my Apache (64bits) to handle the webgage I received the following error when starting it:
../oblix/apps/webgate/bin/webgatessl.so: wrong ELF class: ELFCLASS32
--> webgate.so / webgatessl.so are compiled with 32bits libs
I tried several time the installation and I'm sure I provided the 64bits libgcc_s.so.1 and libstdc++.so.5 during the initial install... but even before applying the patchs an ldd on webgate.so / webgatessl.so shows they are linked to the 32 bits libs...
I browse metalink to see if there is a dedicated 64bits patch for BP7 or BP8... but I found nothing
So I'm still not able to make it works on a RHEL5 64 bits... so I do not see why it is certified in oracle_access_manager_certification_10.1.4_r3_matrix.xls in webgate sheet.
I will open a call and let you know...
Best regards,

Similar Messages

OAM Webgate installation on APache with multiple Virtual hosts?

Hi I have customer who is having One Single APache web server and having two different applications configured as different Virutal hosts in the single server.
requirement is , Each application should be protected by OAM Webgate and each application have seperate session configurations. So, How can we handle this ..
I am thinking to install webgate for each application virutal Host to fulfill this requirement but i am worrying about the Webgate installation since both applications on single Apache server and single httpd.conf file.
Really appreciated if anyone suggest me the approach of how to fulfil this requirement.
-Srini
Edited by: user567398 on Jun 17, 2011 3:00 PM

Hi Srini,
You can use a single WebGate - in the "Preferred HTTP Host" setting for the WebGate in the Access System Console, specify SERVER_NAME. OAM will then use the name of the Virtual Host (as returned by Apache) when evaluating policies, and you can have different policies by having different Host Identifiers for the two (or more) virtual hosts.
Regards,
Colin

OAM webgate for OHS1.3

Hi All,
I am installing OAM 10.1.4.3 on linux box. I want to install webgate on OHS1.3, where can I find the dowloand link for OHS1.3.
Please reply soon, its very urgent.

Hi,
As far as I know OAM 10.1.4.3 is compatibile with previous webgates supporting backward compatibility.
So you can find OAM webgate for OHS 1.3 in this location http://download.oracle.com/otn/linux/ias/101401/as_linux_x86_access_manager_101401_disk1.cpio
You can find other disks in http://www.oracle.com/technology/software/products/ias/htdocs/101401.html
Check the Readme file and get that specific disk for OHS 1.3 webgate installer.
Check this link for certification http://www.oracle.com/technology/software/products/ias/files/oracle%20fusion%20middleware%2011gr1%20(11%201%201%201%200)%20certification%20matrix.xls
If this is not working, access the http://www.oracle.com/technology/software/products/ias/files/fusion_certification.html and click on System Requirements and Supported Platforms for Oracle Fusion Middleware 11gR1 .
-Mahendra.

OAM Webgate needed

Hi All
I have an OHS server 10.1.3.4 on Aix 5.3 64-bit OS and looking for an OAM webgate to be used with this webserver. Please let me know if you have done this before.
Thanks

Hi,
1) Login to Oracle Edelivery: https://edelivery.oracle.com
2) Select Product Name as : Oracle Fusion Middleware
Platform: IBM AIX on Power Systems (64-bit)
3) Select Oracle Fusion Middleware Identity Management 11g R2 Media Pack
4) Download Oracle Access Manager WebGates 11.1.2.0.0
It must be generic(applicable for all types servers)
Regards,
Chinni

OAM-webgate IIS redirect

Hi,
We need to setup a redirect on IIS during maintenance work so that anybody accessing our OAM protected website will redirect to a static banner page, which will display a custom message.
When we try to configure it, we found out that OAM intercept the request first and after authentication it redirects to the static banner page.
Is there a way via which we can change the order of invocation of OAM-webgate after IIS redirect ? thanks

Do you mean that you have an authN success redirect that works but then the user can try to go where they want?
If so, try a authZ rule that captures everyone for everything and sends them to the banner page. You might try setting up a rule with timing conditions so that you can configure it ahead of time and have it kick in just for your work window.
Of course this all presumes that it is not your OAM system itself that is the subject of the outage...
Mark

Error in Webgate 11g (OAM, Webgate, WebTier)

Hi,
I'm setting up the WebGate in Webtier 11g, linux platform, I created a WebGate instance, configured and registered in OAM 11g 11.1.1.5.0
But the following error occurs in OHS
Message from syslogd@ at Sat Feb 25 15:37:13 2012 ...
wlroam15 Oblix: 2012/02/25@17:37:13.17372 7085 7104 ACCESS_GATE FATAL 0x00001520 /ade/aime_h0025/ngamac/src/palantir/webgate2/s rc/apache2entry_web_gate.cpp:591 "Exception thrown during WebGate initialization"
Can anyone help me
Thank

Hi,
I would usually expect an additional error message giving more information (maybe "Unable to contact any Access Servers" or some other message). But basic things to check are:
- ensure that the artefacts (ObAccessClient.xml, cwallet.sso if not Open mode) created during Agent registration are copied to the correct location in the WebGate installation directory;
- if using Simple or Cert mode operation, ensure that the certificate files are also in the correct location, and that the correct transport security has been specified in the Agent definiton in the oamconsole.
Regards,
Colin
Edited by: ColinPurdon on Feb 28, 2012 3:19 PM

OAM Webgate - webgate agent point to multiple Access Servers?

I am trying to find out if it is possible to have a single webgate agent on OHS server point to more than one OAM server.
We have multiple OAM servers (not clustered) behind a load balancer. When I set up an agent for the OHS server, I copy the cwallet.sso and ObAccessClient.xml from, for example, OAM server 1. The OAM servers are all setup the same.
It seems the cwallet.sso is tied directly to that OAM server, and if I try to point the OHS to server 2, I get errors. I change the ObAccessClient.xml to the url specified in the load balancer.
Is it possible to have one set of files (cwallet.cco and ObAccessClient.xml) that would work on different OAM servers?
thanks in advance.
Mark

In that case, the default behaviour is that a WebGate cannot connect to an OAM server in a different installation (different to the one it is registered in).
However, this functionality is available in a Multi-Data Centre architecture, details of which can be found here: Using Multi-Data Centers - 11g Release 2 (11.1.2.2)
I think this may meet your requirements?
Regards,
Colin

OAM - Webgate error

Hi Guys,
We are facing a very weird problem in our setup. Our environment includes OHS 11.1.1.6 BP03 with webgate 11.1.2.0.2. The Access Manager is 11.1.2.0.0. The requests between webgate and access server (i.e. protected resources accessed via OHS) works fine for few times. But after 4-5 requests we can see that new request got failed with the status that 'Webgate is unable to contact any Access Server,. Following string is getting recorded in OHS logs
[ecid: 004qTwWqkB87q2D5NBL6ie0002i30001DD] [rid: 0] [VirtualHost: main] apache2_req_info.cpp:221: The WebGate plug-in is unable to contact any Access Servers.
AFter this failure the requests agains started working fine (i.e. connections seems restored between webgate and access server). Can anyone please help me what could be wrong in our configuration? There is no error in OAM logs
Regards,
Amit Bansal

Hi,
We're seeing this exact error/log with a "new" accessgate, so I was wondering if you could clarify exactly what is the problem and what is the resolution? Are you saying that the webgate is not sending the hostname that's in the ObAccessClient.xml, but, rather, sending the physical IP or hostname of the server that is hosting the webgate/accessgate?
Also, is this happening with specific versions of webgate/accessgate, because we haven't run across this until this one instance.
Thanks,
Jim

OAM Webgate Ip validation problem caused by load balancer...

Hi all,
In my topology, i have 5 webgates on 5 OHS web servers running in reverse proxy mode . Those web servers are behind load balancer. Since load balancer is working in proxy mode, all requests seems to be coming from load balancer vip and this prevents ip validation at webgate side . Does anybody think that it is possible to solve this issue without changing load balancer configuration..
Regards,

Hi,
Randat, how can i reconfigure ip validation against x-forwarded-for? A custom authz plugin, or only a configuration change ? I'll keep on searching on this solution, but if you can share your solution , it'll be appriciated..
Ambarishmitra, i want to use ip validation but since all requests are coming from single ip i can't distinguish client ip's, that's my problem..
Thank you both,
Regards..

OAM Webgates Browser Dependent?

Hi,
I am getting a recurring error while accessing a web resource with a particular browser. I'm using Safari5.0.5 on Mac OS.
The authentication of web resource is successful but fails to download a particular file after authentication.
This problem is existing only with some users who are successfully authenticated.
I cannot reproduce this error in every Safari Browser.
There is no authentication failure when the user access the resource. The policies looks fine.
I'm doubting, if the webgates have anything to do with it.
Are webgates browser dependent.
I have checked the installed Webgate component browser compatibility and it looks fine.
Any inputs ????

Try setting the following parameters in webgate configuration in admin console:
CachePragmaHeader public
CacheControlHeader public
Hope it helps.

How to install and configure Oracle Trafic Director and OAM webgate ( Doc ID 1906445.1 )

Anybody knew, why i can not access this document? I am in the middle of project implementation, and Oracle support direct me to this document, but for some reason, can not find it.

Ok so I went and copied the image directory to both WLS servers in the correct directory that was dictated when creating the image war (i.war). Seems to work.
Thx,
Russ

Post install package installation on RHEL5

Hi,
Can I have some advise please.
When I installed Oracle's RHEL5 Linux OS I failed to select quite a lot of packages that I needed (like Apache for example.)
I've been double clicking on the RPM packages and getting lots of dependacy errors and searching though the other CD's trying to find the dependencies and of course running into more dependancy problems.
I am not yet in a position to buy the support agreement as I just want to get the server working!
So my question is - Is there any easy way to do post install package upgrades/installs or should I just reinstall the OS?
I didn't have these problems with RHEL4 so any help would be appreciated. If I have to reinstall thats OK, I'm just getting nowhere fast at the moment.
Kind regards,
James
ps I tried copying all the RPMS to the server and running createrepo but that didn't help either and of course, simple packages (with no dependents like sendmail-cf worked fine)

Hi,
Well rather then complaining I just went ahead and manually resolved all my dependencies.
To make this convenient I copied all RPM's to the server and issue rpm -ivh enough times till I found all dependencies.
Issues arose when the required rpm wasn't identified by it's rpm filename but a quick search on Google identified the rpm to which the SO belonged.
As an example installing 'squirrelmail' took about 15 rpm runs until successful. Whilst this doesn't compare well with 1 yum run :-) it really didn't take very long.
Kind Regards,
James

Installation of Application Server SOA Suite on EL5

Is there a way to install the SOA Suite 10.1.3.1 on EL5 or a cookbook for that

The EL5 is not refer to in the SOA Suite Installation Guide.
May be some trouble.

Webgate installation - not able to find .cgi file in bin directory

Hi friends,
I am trying to install webgate on ohs server (after webpass installation). But as told in installation document for webgate, we need to configure the webgate by giving relative path to dll or cgi file in bin directory.
But when I tried to search .cgi file in bin directory, there is no cgi file there, there is only webgate.dll file.
Please tell me what exactly is the issue I am facing here?
Thanks in Advance,
Amit

Hi,
Let me know which document you are following. While installing webgate, we need to provide the path configuration file of webserver. In your case, it is httd.conf.
Regards
GK Goalla

Is it possible to make OAM not using localhost.localdomian

Have OAM on vm installation 11.1.1.3 and WG 11.1.1.3 over the web tier
It's using http://www.localhost.localdomain:14100/oam/server/obrareq.cgi?encquery%3DSrMv6TO...
Is there anyway to reconfigure it so it will use DNS name for the host?
Thanks!

Can you telnet into 5575 from the remote host?
can't open connectionCan you telnet into 14100 from the localhost?
can't open connection after i removed localhost as an allias for idmhostI'm assuming you were able to register the OAM WebGate successfully. Does the WebGate redirect to the idmhost as configured?
yes it was working welll without a DNS

OAM Webgate 10.1.4.2 BP7 installation on RHEL5 2.6.18-92.el5 x86_64 ?

Similar Messages

Maybe you are looking for