OAM-webgate IIS redirect

Hi,
We need to setup a redirect on IIS during maintenance work so that anybody accessing our OAM protected website will redirect to a static banner page, which will display a custom message.
When we try to configure it, we found out that OAM intercept the request first and after authentication it redirects to the static banner page.
Is there a way via which we can change the order of invocation of OAM-webgate after IIS redirect ? thanks

Do you mean that you have an authN success redirect that works but then the user can try to go where they want?
If so, try a authZ rule that captures everyone for everything and sends them to the banner page. You might try setting up a rule with timing conditions so that you can configure it ahead of time and have it kick in just for your work window.
Of course this all presumes that it is not your OAM system itself that is the subject of the outage...
Mark

Similar Messages

OAM Webgate 10.1.4.2 BP7 installation on RHEL5 2.6.18-92.el5 x86_64 ?

Hello,
Is it possible to install OAM Webgate 10.1.4.2.0 Bundle Patch 7 on Linux RHEL5 X86_64 (2.6.12-92.el5 x86_64 ?.
If yes what is the procedure to follow?
The “Oracle Identity Management 10g Release 3 (10.1.4.x) Certification Matrix .xls” claims it’s certified but we are not able to complete the installation.
During the first installation with the 10.1.4.0.1 media (Oracle_Access_Manager10_1_4_0_1_linux_APACHE2_Webgate) the installer said it was unable to configure the WebGate … So we continue anyway apply the Oracle_Access_Manager_10_1_4_2_0_Patch_linux_APACHE2_WebGate patch set and after the Oracle_Access_Manager_10_1_4_2_0_BP07_Patch_linux_APACHE2_WebGate bundle patch.
After patches application we tried to launch oblix/tools/start_configureWegate but we had a “cannot open shared object file” on libnsl.so.1..
Commenting the “export LD_ASSUME_KERNEL=2.4.19” allows the tools to be launched but after generating the certificate (simple mode) it stays stuck on “Preparing to connect to Access Server. Please wait”…
Best regards,
EDIT:
After a long time waiting on "Preparing to connect to Access Server. Please wait" the configureWebGate finally returned: "Access Server you specified ins currently down. Pleas check your Access Server"
Well looking at the Diagnostics in System management console shows the corresponding Access Server up ...
So I'm afraid it is not possible to make Webgate working on RHEL5 x86_64 :(
If someone makes it work please tell me !
Edited by: Laurent_ch1258 on May 22, 2009 4:09 PM

Hello,
Thanks Pramod for your advice,
You were right the first issue was due to a clock difference (I didn't figure out the NTP synchronisation was broken with our RHEL5 64bit test VM)
Well after correctly configuring clock synchronization with NTP, I run the configurewebgate and successfully configure it :)
Anyway after configuring my Apache (64bits) to handle the webgage I received the following error when starting it:
../oblix/apps/webgate/bin/webgatessl.so: wrong ELF class: ELFCLASS32
--> webgate.so / webgatessl.so are compiled with 32bits libs
I tried several time the installation and I'm sure I provided the 64bits libgcc_s.so.1 and libstdc++.so.5 during the initial install... but even before applying the patchs an ldd on webgate.so / webgatessl.so shows they are linked to the 32 bits libs...
I browse metalink to see if there is a dedicated 64bits patch for BP7 or BP8... but I found nothing
So I'm still not able to make it works on a RHEL5 64 bits... so I do not see why it is certified in oracle_access_manager_certification_10.1.4_r3_matrix.xls in webgate sheet.
I will open a call and let you know...
Best regards,

OAM Webgate needed

Hi All
I have an OHS server 10.1.3.4 on Aix 5.3 64-bit OS and looking for an OAM webgate to be used with this webserver. Please let me know if you have done this before.
Thanks

Hi,
1) Login to Oracle Edelivery: https://edelivery.oracle.com
2) Select Product Name as : Oracle Fusion Middleware
Platform: IBM AIX on Power Systems (64-bit)
3) Select Oracle Fusion Middleware Identity Management 11g R2 Media Pack
4) Download Oracle Access Manager WebGates 11.1.2.0.0
It must be generic(applicable for all types servers)
Regards,
Chinni

Strange IIS redirect issues... leads to /jakarta/isapi_redirect.dll

This is quite strange... the majority of my IIS redirects are working, but this one for some reason is odd.
www.myserver.com leads to www.mynewserver.com no problem... works as it should.
www.myserver.com/about leads to www.mynewserver.com/about ... again, works as it should.
however, this is weird.
www.myserver.com/main.cfm leads to www.mynewserver.com/jakarta/isapi_redirect.dll
I'm trying to figure out why, how can I fix this so that
www.myserver.com/main.cfm leads to www.mynewserver.com/main.cfm

Maybe my instance of this might help clarify: I was working off of the following stack overflow link's accepted answer and also got the jakarta/isapi_redirect.dll issue. (I'm working with Windows Server 2012, IIS 8.5, and CF 11).
IIS HTTP to HTTPS relative redirect - Stack Overflow
After some "change setting, restart sites, test, change setting back and change different setting, restart sites, test" combinations, I found that this combination worked: (It actually matches what Erik99 said to do, but I didn't understand I only needed to change a single application pool.)
Real site (HTTPS binding only, actually contains code and virtual directories)
Application pool's Advanced Settings > Enable 32-Bit Applications : False
Http_Redirect site (HTTP binding only, is a blank shell of a folder with no directories)
Application pool's Advanced Settings > Enable 32-Bit Applications : True

OAM Webgate installation on APache with multiple Virtual hosts?

Hi I have customer who is having One Single APache web server and having two different applications configured as different Virutal hosts in the single server.
requirement is , Each application should be protected by OAM Webgate and each application have seperate session configurations. So, How can we handle this ..
I am thinking to install webgate for each application virutal Host to fulfill this requirement but i am worrying about the Webgate installation since both applications on single Apache server and single httpd.conf file.
Really appreciated if anyone suggest me the approach of how to fulfil this requirement.
-Srini
Edited by: user567398 on Jun 17, 2011 3:00 PM

Hi Srini,
You can use a single WebGate - in the "Preferred HTTP Host" setting for the WebGate in the Access System Console, specify SERVER_NAME. OAM will then use the name of the Virtual Host (as returned by Apache) when evaluating policies, and you can have different policies by having different Host Identifiers for the two (or more) virtual hosts.
Regards,
Colin

OAM webgate for OHS1.3

Hi All,
I am installing OAM 10.1.4.3 on linux box. I want to install webgate on OHS1.3, where can I find the dowloand link for OHS1.3.
Please reply soon, its very urgent.

Hi,
As far as I know OAM 10.1.4.3 is compatibile with previous webgates supporting backward compatibility.
So you can find OAM webgate for OHS 1.3 in this location http://download.oracle.com/otn/linux/ias/101401/as_linux_x86_access_manager_101401_disk1.cpio
You can find other disks in http://www.oracle.com/technology/software/products/ias/htdocs/101401.html
Check the Readme file and get that specific disk for OHS 1.3 webgate installer.
Check this link for certification http://www.oracle.com/technology/software/products/ias/files/oracle%20fusion%20middleware%2011gr1%20(11%201%201%201%200)%20certification%20matrix.xls
If this is not working, access the http://www.oracle.com/technology/software/products/ias/files/fusion_certification.html and click on System Requirements and Supported Platforms for Oracle Fusion Middleware 11gR1 .
-Mahendra.

Error in Webgate 11g (OAM, Webgate, WebTier)

Hi,
I'm setting up the WebGate in Webtier 11g, linux platform, I created a WebGate instance, configured and registered in OAM 11g 11.1.1.5.0
But the following error occurs in OHS
Message from syslogd@ at Sat Feb 25 15:37:13 2012 ...
wlroam15 Oblix: 2012/02/25@17:37:13.17372 7085 7104 ACCESS_GATE FATAL 0x00001520 /ade/aime_h0025/ngamac/src/palantir/webgate2/s rc/apache2entry_web_gate.cpp:591 "Exception thrown during WebGate initialization"
Can anyone help me
Thank

Hi,
I would usually expect an additional error message giving more information (maybe "Unable to contact any Access Servers" or some other message). But basic things to check are:
- ensure that the artefacts (ObAccessClient.xml, cwallet.sso if not Open mode) created during Agent registration are copied to the correct location in the WebGate installation directory;
- if using Simple or Cert mode operation, ensure that the certificate files are also in the correct location, and that the correct transport security has been specified in the Agent definiton in the oamconsole.
Regards,
Colin
Edited by: ColinPurdon on Feb 28, 2012 3:19 PM

OAM Webgate - webgate agent point to multiple Access Servers?

I am trying to find out if it is possible to have a single webgate agent on OHS server point to more than one OAM server.
We have multiple OAM servers (not clustered) behind a load balancer. When I set up an agent for the OHS server, I copy the cwallet.sso and ObAccessClient.xml from, for example, OAM server 1. The OAM servers are all setup the same.
It seems the cwallet.sso is tied directly to that OAM server, and if I try to point the OHS to server 2, I get errors. I change the ObAccessClient.xml to the url specified in the load balancer.
Is it possible to have one set of files (cwallet.cco and ObAccessClient.xml) that would work on different OAM servers?
thanks in advance.
Mark

In that case, the default behaviour is that a WebGate cannot connect to an OAM server in a different installation (different to the one it is registered in).
However, this functionality is available in a Multi-Data Centre architecture, details of which can be found here: Using Multi-Data Centers - 11g Release 2 (11.1.2.2)
I think this may meet your requirements?
Regards,
Colin

Exchange 2010 IIS Redirect not working

Hi, this is our first time posting. Our http to https redirects in IIS seem to not want to work. Our setup before this happened consisted of the default website redirecting to "https://webmail.lsgnet.com/owa". This worked perfectly until the
installation of our new certificate. We have tried both the standard http redirect option under default website as well as a rule in the URL rewrite module. neither seem to want to work for redirecting to https. The HTTP redirect seems to *want* to work as
when its enabled, it successfully points "https://webmail.lsgnet.com" to https://webmail.lsgnet.com/owa". however it will not do the same for http (worked previously this way with old cert.) We attempted to disable the http redirect and instead
use the URL rewrite module following the instructions here: http://www.jppinto.com/2010/03/automatically-redirect-http-requests-to-https-on-iis7-using-url-rewrite-2-0/ but that doesn't work period. Bindings have been removed and re-added multiple times. Any
help would be greatly appreciated as we have scoured google and cannot find any solutions to this nor reasons why. Thanks much.

Hi,
From your description, I recommend you verify the following thing for troubleshooting:
Open IIS Manager, click Default Web Site -> OWA -> SSL Settings, please make sure "Require SSL" option is unchecked.
What's more, here is a thread for your reference.
Exchange 2010 http://domain.com/owa redirect to
https://domain.com/owa
http://social.technet.microsoft.com/Forums/en-US/7326eebc-3162-4366-84a4-ba23755686e5/exchange-2010-httpdomaincomowa-redirect-to-httpsdomaincomowa?forum=exchange2010
Hope it helps.
Best regards,
Amy
Amy Wang
TechNet Community Support

JRun4 Updater 6 - IIS redirect hotfix installation

I'm having problems installing the "IIS 6.0 redirect response
truncation" hot fix provided on this page:
http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=5c9389c8
This is what is confusing me:
The download file is a zip file and
the instructions don't indicate where this should go or be
extracted to.
The zip file consists of directories
and I don't want to extract these to the wrong directory. Also, the
instructions only recommend backing up one file (wsconfig.jar).
Surely if I was going to replace multiple files/directories they
would recommend backing up the whole directory?
The zip file doesn't actually contain
wsconfig.jar but the install statement names this file. (plus
instructions say to back up this file). Shouldn't wsconfig.jar be
included in the zip file?
And (as expected) when I run the upgrade statement (step 4)
the installation fails with errors.
Any assistance would be appreciated.

hi mueller
sorry to intrupt you in you thread. but i have one problem. i
have installed coldfusion 6.1 with butilt in server on my machine.
and when i tried to execute on my machine using
http://xxx.xxx.0.20:8500 it
display me root directory of coldfusion. here xxx.xxx.0.20 is my
machine ip address. but when i tried to run it from other machines
which are in network it gives me error "could not find server"
can you help me out what is the problem? its urgent pls help
me out to solve this problem
thanks in advance

OAM - Webgate error

Hi Guys,
We are facing a very weird problem in our setup. Our environment includes OHS 11.1.1.6 BP03 with webgate 11.1.2.0.2. The Access Manager is 11.1.2.0.0. The requests between webgate and access server (i.e. protected resources accessed via OHS) works fine for few times. But after 4-5 requests we can see that new request got failed with the status that 'Webgate is unable to contact any Access Server,. Following string is getting recorded in OHS logs
[ecid: 004qTwWqkB87q2D5NBL6ie0002i30001DD] [rid: 0] [VirtualHost: main] apache2_req_info.cpp:221: The WebGate plug-in is unable to contact any Access Servers.
AFter this failure the requests agains started working fine (i.e. connections seems restored between webgate and access server). Can anyone please help me what could be wrong in our configuration? There is no error in OAM logs
Regards,
Amit Bansal

Hi,
We're seeing this exact error/log with a "new" accessgate, so I was wondering if you could clarify exactly what is the problem and what is the resolution? Are you saying that the webgate is not sending the hostname that's in the ObAccessClient.xml, but, rather, sending the physical IP or hostname of the server that is hosting the webgate/accessgate?
Also, is this happening with specific versions of webgate/accessgate, because we haven't run across this until this one instance.
Thanks,
Jim

OAM Webgate Ip validation problem caused by load balancer...

Hi all,
In my topology, i have 5 webgates on 5 OHS web servers running in reverse proxy mode . Those web servers are behind load balancer. Since load balancer is working in proxy mode, all requests seems to be coming from load balancer vip and this prevents ip validation at webgate side . Does anybody think that it is possible to solve this issue without changing load balancer configuration..
Regards,

Hi,
Randat, how can i reconfigure ip validation against x-forwarded-for? A custom authz plugin, or only a configuration change ? I'll keep on searching on this solution, but if you can share your solution , it'll be appriciated..
Ambarishmitra, i want to use ip validation but since all requests are coming from single ip i can't distinguish client ip's, that's my problem..
Thank you both,
Regards..

IIS Redirect to Web Logic Server

I have a web server Machine A dedicated to provide static web pages on port 80. I have weblogic server 7.0 sp 4 installed on Machine B. The web applications are deployed on port 8200. If a user comes with a port number 8200 on the URL. I want to redirect him to Machine B which runs the web logic server. How do i configure Machine A to redirect the request to Machine B.? Any Ideas?

normally you do this with iisproxy.
You can proxy by path, i.e if they type in
http://myserver.com/proxythispath/
or you can proxy by extension: i.e.
http://myserver.com/proxythisextension.jsp
refer to this: http://e-docs.bea.com/wls/docs70/plugins/isapi.html
"Chandra" <[email protected]> wrote in message
news:401834eb$[email protected]..
I have a web server Machine A dedicated to provide static web pages onport 80. I have weblogic server 7.0 sp 4 installed on Machine B. The web
applications are deployed on port 8200. If a user comes with a port number
8200 on the URL. I want to redirect him to Machine B which runs the web
logic server. How do i configure Machine A to redirect the request to
Machine B.? Any Ideas?

OAM Webgates Browser Dependent?

Hi,
I am getting a recurring error while accessing a web resource with a particular browser. I'm using Safari5.0.5 on Mac OS.
The authentication of web resource is successful but fails to download a particular file after authentication.
This problem is existing only with some users who are successfully authenticated.
I cannot reproduce this error in every Safari Browser.
There is no authentication failure when the user access the resource. The policies looks fine.
I'm doubting, if the webgates have anything to do with it.
Are webgates browser dependent.
I have checked the installed Webgate component browser compatibility and it looks fine.
Any inputs ????

Try setting the following parameters in webgate configuration in admin console:
CachePragmaHeader public
CacheControlHeader public
Hope it helps.

How to install and configure Oracle Trafic Director and OAM webgate ( Doc ID 1906445.1 )

Anybody knew, why i can not access this document? I am in the middle of project implementation, and Oracle support direct me to this document, but for some reason, can not find it.

Ok so I went and copied the image directory to both WLS servers in the correct directory that was dictated when creating the image war (i.war). Seems to work.
Thx,
Russ

OAM-webgate IIS redirect

Similar Messages

Maybe you are looking for