OC4J_SECURITY preventing SSO to start

We have been wrestling with this problem for severa days now. We have an Oracle Portal 10.1.2.0.0 running in a virtual machine using Windows 2003. Last week, we restarted the virtual machine and were not able to log on to the SSO anymore. In the enterpise manager, the OC4J_SECURITY-component is down and can not be restarted. We tried using OPMN and eventuall DCM, but we get a time out every time.
The part below is a piece of the ssoServer.log file of the infrastructure subfolder sso. Does anybody know what the problem can be or which configuration file is addressed in this error?
Tue Dec 06 17:44:38 CET 2005 [ERROR] Orion Launcher SSO Server initialization failed. Check the DB availability and restart SSO Server
Tue Dec 06 17:44:38 CET 2005 [ERROR] Orion Launcher Initializing the encryption/decryption objects failed
oracle.security.sso.server.conf.ConfigurationException: Missing SSO server configuration
     at oracle.security.sso.server.conf.DatabaseConfigReader.init(DatabaseConfigReader.java:286)
     at oracle.security.sso.server.auth.AuthUtil.init(AuthUtil.java:177)
     at oracle.security.sso.server.ui.SSOLoginServlet.init(SSOLoginServlet.java:235)
     at javax.servlet.GenericServlet.init(GenericServlet.java:258)
     at com.evermind.server.http.HttpApplication.loadServlet(HttpApplication.java:2141)
     at com.evermind.server.http.HttpApplication.findServlet(HttpApplication.java:4582)
     at com.evermind.server.http.HttpApplication.initPreloadServlets(HttpApplication.java:4676)
     at com.evermind.server.http.HttpApplication.initDynamic(HttpApplication.java:820)
     at com.evermind.server.http.HttpApplication.<init>(HttpApplication.java:542)
     at com.evermind.server.Application.getHttpApplication(Application.java:889)
     at com.evermind.server.http.HttpServer.getHttpApplication(HttpServer.java:690)
     at com.evermind.server.http.HttpSite.initApplications(HttpSite.java:586)
     at com.evermind.server.http.HttpSite.setConfig(HttpSite.java:263)
     at com.evermind.server.http.HttpServer.setSites(HttpServer.java:261)
     at com.evermind.server.http.HttpServer.setConfig(HttpServer.java:162)
     at com.evermind.server.ApplicationServer.initializeHttp(ApplicationServer.java:2385)
     at com.evermind.server.ApplicationServer.setConfig(ApplicationServer.java:1542)
     at com.evermind.server.ApplicationServerLauncher.run(ApplicationServerLauncher.java:92)
     at java.lang.Thread.run(Thread.java:534)

I am facing the same issue - on RHEL 4, running 10gAS 10.1.2.
-- only additional info is that the problem started occuring after a failed run of
loadsdk.sql sql script from ssosdk.zip. Output is included below. Any ideas ?
This is from the ssosdk902.zip that comes along witht he install.
Oracle Database 10g Enterprise Edition Release 10.1.0.4.2 - Production
With the Partitioning, OLAP and Data Mining options
SQL> @loadsdk
Package created.
No errors.
Package body created.
No errors.
CREATE OR replace TYPE sec_enabler_config_type wrapped
ERROR at line 1:
ORA-02303: cannot drop or replace a type with type or table dependents
create table wwsec_enabler_config_info$ OF sec_enabler_config_type
ERROR at line 1:
ORA-00955: name is already used by an existing object
CREATE sequence wwsec_log_pk_seq increment BY 1
ERROR at line 1:
ORA-00955: name is already used by an existing object
CREATE sequence wwsec_rndm_seq increment BY 1
ERROR at line 1:
ORA-00955: name is already used by an existing object
CREATE TABLE wwsec_sso_log$ (
ERROR at line 1:
ORA-00955: name is already used by an existing object
create table wwsec_image_config$
ERROR at line 1:
ORA-00955: name is already used by an existing object
primary key(image_id) enable
ERROR at line 2:
ORA-02260: table can have only one primary key
insert into wwsec_image_config$ (image_id, image_blob)
ERROR at line 1:
ORA-00001: unique constraint (ORASSO.WWSEC_IMG_PKEY) violated
Procedure created.
No errors.
Package created.
No errors.
Package body created.
No errors.
Package created.
No errors.
Package created.
No errors.
Package body created.
No errors.
Package body created.
No errors.
Package created.
No errors.
Package body created.
No errors.
Package created.
No errors.
Package body created.
No errors.
SQL>

Similar Messages

  • Is there a way to prevent iTunes from starting up when connecting an iPad to my Macbook?

    Is there a way to prevent iTunes from starting up when connecting an iPad to my Macbook?  We use Apple Configurator and would love to be able to set up the MacBook to open Apple Configurator when we  plug in an iPad.

    When you connect the device open iTunes and select it from the sidebar. Click on the Summary tab in the main window. Uncheck the option to automatically connect to iTunes. You will find it in the collection of options near the lower part of the window.

  • Is there a way to prevent iTunes from starting up when I connect my iPad?

    Is there a way to prevent iTunes from starting up when I connect my iPad?  We use apple configurator and would prefer to have that open up, if possible.

    When you connect the device open iTunes and select it from the sidebar. Click on the Summary tab in the main window. Uncheck the option to automatically connect to iTunes. You will find it in the collection of options near the lower part of the window.

  • Hey there, whenever i try to start iTunes in my laptop amsg coming up saying : data execution prevention prevented iTunes from starting (Dep), would you Pls help me out.I have windows vista installed.

    hey there, whenever i try to start iTunes in my laptop amsg coming up saying : data execution prevention prevented iTunes from starting (Dep), would you Pls help me out.I have windows vista installed.

    No, i do not have quickTime player.
    I have tried to close dep off for iTunes but failed to do so as i got a msg that iTunes can't work without Dep in execution data prevention.

  • Prevent iChat from starting at login

    How do I prevent iChat from starting at login? I looked in my account login items and it is not listed there. I shut the app completely before shutting down the computer so it shouldn't be automatically be relauncing due to the "reopen windows" setting in Lion. Just can't figure it out. Any help would be appreciated.

    Hi,
    With iChat Open check the Window Menu about which windows are actually open
    The App should be Quit at the end rather than hitting the red blobs on the windows (this only closes/Hides the windows and does not Quit the app)
    Are you getting Off Line IMs when it starts up ?
    If this is the case it is a "feature" rather than a fault although you don't have a lot of control over it.
    In earlier versions the support app iChatAgent  "Listens" to the AIM Server in particular and will answer if an Off Line IM is sent.
    If iChat is closed down iChatAgent will launch it.
    In iChat 6 this is done by IMAgent (it does the same job for FaceTime if it's preferences are set to ON but the app is not launched)
    Most likely it is a window that belongs to iChat that is not getting closed.
    At the same time it may not be in view  (the Window Menu should give clues).
    It could be Off Line IMs
    9:47 PM      Monday; January 23, 2012
    Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
      iMac 2.5Ghz 5i 2011 (Lion 10.7.2)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
    "Limit the Logs to the Bits above Binary Images."  No, Seriously

  • HT1338 trying to download mountain lion OS, but whenever the net connection is broken it restarts from zero, how to prevent this and start downloading from the point it was disconnected

    trying to download mountain lion OS, but whenever the net connection is broken it restarts from zero, how to prevent this and start downloading from the point it was disconnected

    Disable anti virus software and try turning off the Firewall in System Preferences > Security & Privacy > Firewall.
    Quit then relaunch the App Store. From the menu bar click Store > Sign In
    Then click Store > Check for Unfinished Downloads

  • Snippet to start one an element and prevent another from starting

    I need help. I need a snippet to start one an element and prevent another from starting. they are at the same place in the timeline and need to be there for other elements. but right now when I click one the other plays also how do I stop one from playing when the other is clicked?

    I need it to show. its a header and a footer that move in and out. but they need to stay on the same timeline in order for the side controls that move in and out from the side. because when they play they move the header in and out. lol did you get that? Thanks for the comment.

  • Prevent iTunes from starting sync?

    I'm sure there must be a way to do this - my iPods are set to automatically begin syncing when connected, but I'd like to either stop it once started or prevent it from starting so I can change some of the options first. Is that possible?
    thanks.
    Sally

    You can use a keyboard command to prevent your iPod auto-syncing with iTunes. While connecting the iPod to the computer on Windows hold down the Shift + Ctrl keys together. This will stop the iPod from auto-syncing with iTunes and the iPod will appear in the source list. Wait until you are sure the iPod has mounted, and that it will not auto sync and then you can let the keys go. This may take between 20 to 30 seconds depending on your computer: iTunes - Keyboard Shortcuts for Windows

  • How do I prevent Skype from starting automatically on arch linux?

    there was point in the settigs "General" folder, but now i can't see it, so how should i prevent this from autostart?I don't use pulseaudio, so i have apulse - pulseaudio emulation tool to use skype without pulseaudio and have modified my skype shortcut to run with itWhen skype autostart - it doesn't use apulse so there is no sound and i have to restart it. thats annoyingAlso i don't use skype to much so i don't need it to autostart even if i had pulseaudioSo, how will i prevent it from autostart?

    I know this is an old post but this is a quite common and relevant topic with which I've spent sometime and would like to drop the solution, at least for Fedora 22 under KDE. In order to avoid skype to start at startup/login (which is quite annoying and a privacy invasion) I just deleted the file /etc/prelink.conf.d/skype.conf and that was it.(let's see if this post is up in the skype forum for long ?!)

  • I want to prevent MyDay from starting up when I switch on.  I have followed all instructions for doing this, but to no effect.  I have unlocked and relocked.

    I use an Macbook from 2006 with OS X 10.7.5
    MyDay starts up every time I switch on.  I don't use it, so want to remove it from the list of programs which start automatically.  I have followed all instructions for doing this, and have of course unlocked and relocked the relevant page in Systems Preferences, but the instruction never 'sticks', and MyDay still starts every time.  Anyone know what to do?

    Check StartupItems...
    Open a Finder window. From the Finder menu bar click Go > Go to Folder
    Type or copy paste the following:
    /Library/StartupItems
    Click Go. If you see any reference to MyDay, delete it. That does not delete the app Just keeps it from launching when you startup your Mac.
    Just to be sure, you checked System Preferences > Users & Groups > Login Items   ??
    Unlocking or locking the padlock icon only prevents other users from changing your preferences.

  • AD SSO Service Starts, But Client Not Performing SSO

    Hi.
    I hope someone can help me with this issue.
    I have a NAC environment in which NAM and NAS are operating in high availability mode. The NAS is in Out-of-band Virtual gateway mode, and I have configured AD-SSO.
    Users in local database (NAM) can authenticate as normally.
    My problem is that users can not authenticate via AD-SSO functionality.
    The AD-SSO service is up and running, but when a user tries to login into the domain (with the AD credentials), the attempt is unsuccessful and the user gets the NAC agent. For testing purposes, I have allowed data traffic from untrusted side (unauthenticated roll) to the DC domain to any port.
    Does any body can help me to find which my problem is?
    I have gotten the logs from the command “more /perfigo/access/tomcat/logs/nac_server.log”. I can not see any traffic to port 8910 (but there is traffic to port 8905). Besides, if someone knows where can I find documentation which helps to interpret the logs, I will thanks to share it with me.
    I am attaching a document with the details.
    I really appreciate your help.
    Regards.

    Hi Damaso,
    For your reference, here is the full procedure of how the CAS should authenticate the user with AD SSO:
    1. The user logs in to Windows and obtains a Ticket-Granting Ticket (TGT) from the kerberos Authentication Service on AD.
    [here the CAS is not involved]
    2. The Agent starts and the CAS instructs the Agent to get a kerberos Service Ticket (ST) for the SSO Service from the AD server.
    [here the CAS is involved]
    3. The user sends its Ticket-Granting Ticket (TGT) to request the Service Ticket (ST) from the kerberos Ticket-Granting Service (TGS) on AD.
    [here the CAS is not involved, as long as all the communications from/to AD are allowed for the unauthenticated role]
    This Service Ticket (ST) can be seen through the Microsoft Kerbtray.exe tool.
    4. The Agent sends the Service Ticket (ST) to the CAS for the user authentication and role mapping.
    [here the CAS is involved]
    The Kerbtray.exe tool allows us to display the Service Ticket (ST) obtained by the user from AD, that will then be sent by the Agent to the CAS.
    Could you confirm through Kerbtray whether the user is getting the right ST?
    http://www.microsoft.com/download/en/details.aspx?id=17657
    If a user does not have any Service Ticket (ST) at all there may be an issue with AD (considering the fact that the CAS is already allowing all the traffic to/from AD).
    The user may either be unable to send the Ticket-Granting Ticket (TGT) to AD, or it may be unable to obtain the Service Ticket (ST) from AD.
    The CAS during this phase is neither performing any actions nor blocking any traffic, since all the communications to/from AD are already fully open in the unauthenticated role.
    Regards,
    Fede
    If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

  • OC4J_SECURITY process will not start using opmnctl

    Using opmnctl startall:
    OID: status = Alive
    HTTP_Server: status = Alive
    OC4J: status = NONE
    Can someone please help me to trouble shoot the reason why I cannot start my OC4J_SECURITY process?
    -Gary

    Do you have access to MetaLink?
    If you do try note 431683.1 - OC4J_SECURITY Fails to Start Common Causes
    Check to see what the OC4J~OC4J_SECURITY~default_island~1 log file contains.

  • How do I prevent iPhoto from starting every time I connect to a camera card?

    Every time I put in a camera card iPhoto starts. Is there a way to prevent this short of deleting iPhoto from the applications?

    In the iphoto Preferences disable "connecting Camera opens" - set it to "No application".
    If that does not suffice, do the same in Image Capture:
    In Image Capture - with your camera card inserted- click the disclosure triangle in the lower left corner of the window to reveal the menu to set the preferences for the device:
    Then set the option to "Connectiong this ... opens"  to "No application"

  • NAC AD-SSO service started but client isn't doing SSO

    Hi All,
    We have NAC version 4.7(1) and we integrated it with Domain Controller on windows 2008. The integration is done and the service is started but the client (XP machine) access the domain without doing SSO then NAC Agent (Ver. 4.7.1.511) appears to start login with local DB only (there's no any other options rather than Local DB).
    All Ports are opened to DC and CAS is listening to port 8910.
    I attached some snapshots from NAM configuration.
    One more thing, sometimes this error appears on NAC Agent "Invalid switch configuration-OOB Error:OOB client 00:17:42:BE:F3:CB/172.20.10.20 not found. Please contact your network administrator." what does this error mean?? Although i can connect the same client machine to another port and it's working properly.
    Thanks in Advance,

    Hi Faisal,
    i have run the following "KTPASS.EXE -princ newadsso/[email protected] -mapuser newadsso -pass  PasswordText -out c:\newadsso.keytab -ptype KRB5_NT_PRINCIPAL -crypto All" and the output was
    Targeting domain controller: DC01.DOMAIN.COM
    Successfully mapped newadsso/domain.com to newadsso.
    Password succesfully set!
    Key created.
    Key created.
    Key created.
    Key created.
    Key created.
    Output keytab to c:\newadsso.keytab:
    Keytab version: 0x502
    keysize 53 newadsso/[email protected] ptype 1 (KRB5_NT_PRINCIPAL) vno 3 etype 0x
    1 (DES-CBC-CRC) keylength 8 (0x9be5c252a85d080b)
    keysize 53 newadsso/[email protected] ptype 1 (KRB5_NT_PRINCIPAL) vno 3 etype 0x
    3 (DES-CBC-MD5) keylength 8 (0x9be5c252a85d080b)
    keysize 61 newadsso/[email protected] ptype 1 (KRB5_NT_PRINCIPAL) vno 3 etype 0x
    17 (RC4-HMAC) keylength 16 (0x554e28e96389c80c975cc6f96b75fd92)
    keysize 77 newadsso/[email protected] ptype 1 (KRB5_NT_PRINCIPAL) vno 3 etype 0x
    12 (AES256-SHA1) keylength 32 (0xcfc491228d9864ab4a5a0424b78b0178a686a8e1aa4ad2e
    fa95890da6361006d)
    keysize 61 newadsso/[email protected] ptype 1 (KRB5_NT_PRINCIPAL) vno 3 etype 0x
    11 (AES128-SHA1) keylength 16 (0xcb99b6a0e424f312b5c804d5941b04d7)
    and when i enabled Agent-Based Windows Single Sign-On with Active Directory the following appeared:
    Error : Could not start the SSO service. Please check the configuration. although it was enabled and started with DesOnly Command!
    Thanks in advance.

  • Prevent Skype from starting automatically

    I need to prevent Skype for Android from starting automatically so it will not ring when a call comes in to my Skype-In number. Most of the time I want calls to my Skype-In number to ring on my Skype phone at home only.

    I know this is an old post but this is a quite common and relevant topic with which I've spent sometime and would like to drop the solution, at least for Fedora 22 under KDE. In order to avoid skype to start at startup/login (which is quite annoying and a privacy invasion) I just deleted the file /etc/prelink.conf.d/skype.conf and that was it.(let's see if this post is up in the skype forum for long ?!)

Maybe you are looking for