OCA and Access ODBC Problem
When I attempt to connect to Microsoft Access: C:\>plus80 admin/maxtest@odbc:maxjet
I get the following error. Please help!
SQL*Plus: Release 8.0.6.0.0 - Production on Fri Oct 13 09:51:24 2000
(c) Copyright 1999 Oracle Corporation. All rights reserved.
ORA-00022: invalid session id; access denied
ORA-00022: invalid session id; access denied
ORA-00022: invalid session id; access denied
Error accessing PRODUCT_USER_PROFILE
Warning: Product user profile information not loaded!
You may need to run PUPBLD.SQL as SYSTEM
Server not available or version too low for this feature
ORA-00022: invalid session id; access denied
Connected to:
Oracle Open Client Adapter for ODBC 6.0.5.29.0
ACCESS 04.00.0000
null
Hi,
in case you update Access Connection, you must already have also following updates installed:
- Power Management driver
- Power Manager
-Hotkey utility
- System interface driver
- Wifi driver <for AC 5.x it must be 13.x version>
<all of course with the latest version>
Once this all is installed, you can install AC .
Let me know, if you have also the latest version of the above driver/updates on the system prior to the installation of AC .In case not, just remove AC, install the above mentioned updates and then install AC 5.x
Chers
Similar Messages
-
I am trying to use Oracle Forms 6 to connect to an Access Database and an AS400 system.
Being some what new to Oracle I have no idea how to overcome this problem, when trying to connect to an ODBC data source through SQL *Plus:
ORA-00022: invalid session id; access denied
ORA-00022: invalid session id; access denied
ORA-00022: invalid session id; access denied
Error accessing PRODUCT_USER_PROFILE
Warning: Product user profile information not loaded!
You may need to run PUPBLD.SQL as SYSTEM
Server not available or version too low for this feature
ORA-00022: invalid session id; access denied
Connected to:
Oracle Open Client Adapter for ODBC 6.0.5.29.0
ACCESS 03.50.0000
Although it does connect via SQL *Plus, connecting with Oracle forms is a different matter! Form Builder brings up possibly the most unhelpful error message I have ever seen, it alerts me the following: F!G!G or sometimes simply: !G though sometimes it alerts random 'E's and 8's occasionally. Form builder then crashes and will not allow me to even connect to my Oracle Database. I have done everything by the book (oracle white paper oca_info.pdf) so I have no idea why this problem could be occuring.
Any help you could give me would be gratefully recieved, well to be honest it would be a god send! If I dont overcome this problem I will manually have to transfer thousands of records! Thank you in advance
Kind Regards
Richard ClaytonHi !
Do you know where can I find the OCA-6.0.5.35.0 version or higher ?
I downloaded the Oracle Forms&Reports 6i from Oracle site and even now (January 2003) it still includes in the package the OCA-6.0.5.29.0 which has a bug when accessing ODBC data sources.
Thanks in advance ! -
My Macbook Pro running Snow Leopard, had hard drive failure so I had to borrow a friends similar machine to access my iPhoto library ( 523 GB) on a 1TB drive after editing the photos and after exporting one folder of images the program quit and then asked me to repair which I tried hung up at 99% and would not open the event thumbnails . I have tried everything even trying to transfer the particular event from that library to a new library using iphoto manager just so I can export my project and send but still no success as it is telling me that it is getting no info from the library, I changed permissions on the drive ..still no success . I restarted Iphoto and it took hours to show the images but all events thumnails said "0" and it shows all the event cover photos as a gray photo with a palm tree in it or something . I tried rebuilding again this morning and the new library says "0" photos and a library size of 7.3 mb
I got my own Macbook 17in back yesterday and downloaded Mountain Lion to my machine and Iphoto 9.3
I tried to open the library which is 523 GB of images that used to work fine before getting an error message saying it needed to be repaired. I tried opening it with Iphoto 9.3 via I photo manager which told be that there were inconsistencies in the library and it needed to be repaired I chose that option and it is now the following day still "rebuilding thumbnails" since last night . This is a huge problem I have missed project deadlines and my income is severely affected by this situation of not being able to access my work. What can I do to fix this, access my files and export my overdue project at this point ?Terence I find it surprising that you would say use Iphoto Manager after saying that I used it to rebuild using it took me to 99% of the way and just hung. I even spent my $20 and got the latest version 3.8.3 which was supposed to remedy these issues. See below my email to Fat Cat software the makers of Iphoto Manager:
"Email to Fat Cat Software : Re Iphoto problems:
My Macbook Pro running Snow Leopard, had hard drive failure so I had to borrow a friends similar machine to access my iPhoto library ( 523 GB) on a 1TB drive
after editing the photos and after exporting one folder of images the program quit and the asked me to repair which i tried …it hung up at 99% and would not open the event thumbnails .I have tried everything trying to transfer the particular event from the library to a new library using Iphoto Manager just so I can work on my project but still no success as IPLM is telling me that it is getting no info from the library, I changed permissions on the drive ..still no success .
I opened it using IPLM and it took hours to show the images but all events said "0" and it shows all the event cover photos as a gray photo with a palm tree in it or something . I tried rebuilding again this morning and the new library says "0" photos and a library size of 7.3 mb . There
really seems to be a serious problem with Iphoto 9.3 as it
asks you to rebuild or repair the library then IPLM stops at 99% leaving
the thumbnails
unviewable and just hangs up after that or wont open and there the problems start.
Please advise and give me some viable options on this issue."
Its days later and the support at Fat Cat software emailed me asking a question and are apparently just as floored as I am with this malfunction ..I hope they are working feverishly to address this as my conclusion and solution is as follows :
Using the older version of Iphoto Library Manager when my machine asked me to upgrade and rebuild instead of the first aid function in Iphoto 9.3 did not help but actually corrupted my library and downloading the latest version did not help remedy it either. What I should have done and am now doing is using the Iphoto first Aid function in Mountain Lion and Iphoto 9.3 using option command to rebuild the entire library. So far it is working with no hangups ...it is now rebuilding image version number 6715 and counting with 33000+ images to go ..if this solution really rebuilds then that is the ONLY way to go with this issue which has cost me a lot of time and money in missed deadlines , lost income and lost business . Iphoto and Iphoto Library manager are normally great in what their purposes are and in ease of use and function but whenawry with compatibility in version software issues arise things go terribly awry and the tedious painstaking fixes available that go for days on end just do not cut it. -
I am trying to access my Template on Proxibid's Auctioneer website and the Firefox screen goes away, showing me my wallpaper, then it comes back and says Firefox is not responding, then it suddenly displays a full screen of HTML. I spoke with Proxibid - they suggest I undo the latest update, as this problem began after that update. I need to know how to do that.
IE works on the Proxibid site, but I REALLY don't want to use it...Purplehiddledog wrote:
I do backup with iCloud. I can't wait until the new iMac is available so that I can once again have my files in more than 1 location without needing to rely solely on the cloud.
I also rely on iTunes and my MacBook and Time Machine as well as backing up to iCloud. I know many users know have gone totally PC free, but I chose to use iCloud merely as my third backup.
I assume that the restore would result in my ability to open Pages and Numbers and fix the problem with deleting apps, but this would also mean that if my Numbers documents still exist solely within the app and are just not on iCloud for some reason that they would be gone forever. Is that right?
In a word, yes. In a little more detail.... When you restore from an iCloud backup, you must erase the device and start all over again. There is no other way to access the backup in iCloud without erasing the device. Consequently, you are starting all over again. Therefore, it would also be my assumption that Pages and Numbers will work again and that the deleting apps issues would be fixed as well.
If the documents are not in the backup, and you do not have a backup elsewhere, the documents could be gone forever. -
I've downloaded iTunes 10.5 onto my iPod Touch, no problems but I've now got a constant error message on my laptop everytime I switch it on and access the internet. The message is "The procedure entry point xmlTextReaderConstName could not be located in the dynamic link library libxml2.dll"
This is the 2nd time this has happened. Last time iTunes Support called and we ran through a load of checks to no avail. The only option was to delete iTunes completely off my laptop and go for a new download of it. Can anybody tell me how to do it - didn't write it down last time, silly me, never thought it would happen again. Also sent an email to iTunes Support - waiting for a response.Maybe:
"Waiting for changes to be applied": Apple Support Communities
Also I requested that your email address be deleted. Personal responses are not given in this forum -
I just bought a brand new iPhone 5s and a huge problem is that when i try to sync my music to my iPhone 5s, under the music tab it says that i can only access my music via iCloud. is there anyway to sync your music from your computer?????
The ! sign before the song means that the actual song is no longer on your computer and/or iTunes library.
-
Hi,
i have the same problem?
Trying to log in with my user id and password at iocbc but was not able to access.
Problem message shown : Applet not initialised or may not be supported. Please refresh the page or check the browser setting
Anyone can advise?You need to install Java for your Mac OS version, and/or make sure it's enabled in the Java Preferences application and your browser's preferences.
-
I have a MacBook Air with OS X and am having trouble accessing the ADT Pulse Home Security System cameras. The mobile (iPhone and iPad) apps allow access no problem, but I can't get a picture on the MacBook. Have tried Safari and Firefox browsers. Anyone have any ideas? Thanks.
From a Catherine to Katherine -- Had the exact same problem!! I had to enable Java twice - both in Safari and then on the MacBookAir itself.
-
I upgraded to 10.10.1 today and the brightness dimmed on my mac monitor - I've checked both display and accessability and dont see a problem. My second monitor which is not a mac monitor is bright still.
Try resetting the PRAM and SMC
Intel-based Macs: Resetting the System Management Controller (SMC)
About NVRAM and PRAM -
MacBook Pro is operating more and more slowly in opening and closing, opening and closing programs and accessing and closing from mobile broadband. Is there a solution to this problem?
Did you try rebooting?
-
My Ipad has stopped picking up my wireless internet at home. I tried my laptop and have no problem getting it to operate. I checked the settings and it has my wireless router name checked but I cant open any thing that has an internet connection involved. Any ideas?
Try some very basic things first.
Turn WiFi off and on again on the iPad.
Reboot your router - unplug it from the power source for about 20 seconds or so and then plug it back in.
Restart your iPad. Restart the iPad by holding down on the sleep button until the red slider appears and then slide to shut off. To power up hold the sleep button until the Apple logo appears and let go of the button.
Reset your iPad. Reset the iPad by holding down on the sleep and home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. -
Making labview 2014 and Access 2013 db working correctly
Hi all,
i'm trying to gain access to a database created by Access 2013 from Labview 2014. Since we dont want to buy the NI toolkit i thought to use the old LabSQL library. Has anyone tried to do the same thing or give me some hints about it?
Actually i have tryed to run the example shipped with LabSQL but i received an error:
Exception occured in Microsoft OLE DB Provider for ODBC Drivers: [Microsoft][Driver Manager ODBC] Nome origine dati non trovato e driver predefinito non specificato. in ADO Connection Open.vi->Example - Fetch a Table.vi
Reading the README file of the LabSQL i found this:
2. As with any database application on Windows, you'll need to create a DSN (Data Source Name) in the ODBC control panel. This DSN is used in your LabVIEW application to connect to the appropriate database. If you want to set up the example database, do the following:
a.Go to your Windows Control Panels, and open "ODBC Data Sources"
b.Click on the "System DSN" tab
c.Click on the "Add..." button.
d. From the list of drivers, choose "Microsoft Access Driver"
e.At the dialog box, type in "myDB" for the Data Source Name. Then click on "Select..." button, and find the file "Sample Database.mdb" included with the LabSQL examples. Leave everything else as it is, and hit OK.
f. Close the ODBC control panel
g. Test the connection by running one of the examples provided.
My problem is that i can't find the driver named "Microsoft Access Driver" so i can't continue through the points of the instructions. I only found "SQL Server" and "SQL Server Native Client 11.0" but if i select one of this the dialog box that appear later is different from the one described in the README instructions...You can certainly access the database without the toolkit. There are drivers that I posted on the forum and I have a small complete application on my blog -- you can even download the code from my SVN repository.
In terms of you specific problem, you don't need a DSN. What you need is something called a "connection string". Also, don't waste your time with ODBC. The built-in ADO drivers are easier to use. Again, check my posts for details -- I did a 3-part series on database connectivity.
Mike...
Certified Professional Instructor
Certified LabVIEW Architect
LabVIEW Champion
"... after all, He's not a tame lion..."
Be thinking ahead and mark your dance card for NI Week 2015 now: TS 6139 - Object Oriented First Steps -
Access ODBC Driver not appearing in Create New Data Source List
When I run C:\Windows\SysWOW64\odbcad32.exe the Access driver is not showing up as an option. I'm running Windows 7 professional and Access 2013. I'm guessing the driver is on my machine and is either not registered or the registry
has the wrong location. I have looked under HKEY_LOCAL_MACHINE>ODBC>ODBCINST.INI and see no references to an Access driver in any subfolders.
I think I need the name of the driver .dll and where it needs to be registered to fix the problem.
Any ideas?
Thanks,
JoeHi Joe,
According to your description, after you run C:\Windows\SysWOW64\odbcad32.exe, Access driver is not displayed when you expand HKEY_LOCAL_MACHINE>ODBC>ODBCINST.INI node.
The issue is caused by wrong path of odbccad32, please make sure that you are using Administrator account or you have administrative privileges, then refer to the following steps:
Go to Control Panel.
Click Administrative Tools.
Right-click Data Sources(ODBC) to open Properties dialog box.
In Target text box, type %windir%\syswow64\odbcad32.exe
In Start in text box, type %windir%\syswow64, then click OK to save the settings.
If you have any more questions, please feel free to ask.
Thanks,
Wendy Fu -
I installed Oracle 8.1.7 first then 9.2.0, but encountered some problems while using ODBC to access remote database. I need two entries in Windows ODBC setting (using ODBC in Oracle9Home) to access two remote SID, one is working but the other isn't. My application calls the entries in Windows ODBC configuration to access DB, so the failed ODBC entry caused DB access failure.
I really don't know where I made mistake, I can use SQL*Plus to access the two SID (supposed to mean my tnsname settings are correct) and in ODBC setting, the Test Connection is also OK. I am curious why one works but the other not. If they both don't work not suprised me much. is anyone here has ever experienced such situation please advice me, appreciation in advanceIf you have two Oracle Home's, and you have not set the TNS_ADMIN environemnt variable to point at a single tnsnames.ora file, you have two tnsnames.ora files on your machine. One tnsnames file will be used by the applications in the 8.1.7 Oracle home, the other tnsnames file will be used by the 9.2 Oracle home. I would wager that the tnsnames file in the 8.1.7 Oracle home has both of the TNS aliases, while the 9.2 Oracle home does not.
You can either add the other alias to the 9.2 tnsnames file or you can create a TNS_ADMIN environment variable that points to a single tnsnames file.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC -
UWC/CE 6.3 and Access Manager 7.1 SSO sometimes fails (seems like a bug)
PREAMBULA: I started writing this post thinking that our AM SSO setup was at fault in some step. As I was gathering data, checking the doc-links and config files and finally sniffed the servers for HTTP dialogs, I grew pretty sure there's a bug in UWC/CE, AM SDK or Web Server Policy Agent, whatever implements the AM SSO session checking.
In short, as written below, our "sunmail" server can POST a broken cookie to AM server, if the cookie originally contained a "plus" character. The "plus" is replaced by a "space", invalidating the session check. As we know, "+" is often used in URLs to "escape" the space character. Perhaps some URL cleanup routine backfired here. I have double-checked, it is not the reverse proxy on "psam" breaking things. It is "sunmail" (UWC/CE or Policy Agent, don't know for certain) supplying the broken request. On the few occasions when the AM cookie contains no "plus" characters, the SSO works like a charm (also checked by a sniffer). Whenever there is a "plus", it breaks.
Is there some known bug or workaround that matches this description?
Nevertheless, for completeness' sake I kept the description of our setup. Maybe it's at fault after all :)
We have an installation of JCS5 with the latest patches as of early July 2008. And as the subject implies, we have problems with AM SSO in UWC/CE web-interface. I have reported them before, then they seemed fixed (not occuring for several tests in a row), but as time has shown, something wrong is still there.
So I'll try to go into deeper detail now, as we've may have overlooked some nuance... Then again, as my sniffer research below shows, this may be an engine bug and these setup details are irrelevant.
Our setup is split into several Solaris 10 full-root zones hosted on several servers, some of the components are enroute to HA (perhaps we made some mistakes on this part of the way?)
So, we have the following software stack:
1) two MMR Directory Servers (DSEE 6.3 = DSEE 6.2 from JCS5 + 125278-07__DSEE_6.3__x86x64 + 125277-07__DSEE_6.3__x86_sol9 patches) working in zones on two different servers. Except for one time when a manually forced ZFS rollback corrupted one of the server instances, no problems here.
2) two zones with Directory Proxy Servers (6.3, exact versions as above) running at port 389 provide the clients with an illusion that they have a stable Directory Server, even if one of the actual servers is currently rebooting ;)
These DPS zones are hosted on two different servers as well and are primarily used by LDAP clients (JCS components) running in other zones on the same respective servers.
3) A zone with Sun Web Server 7.0U1 and Access Manager 7.1 (+ 126357-01__AM71_x86 patch) and Delegated Admin 6.4-4.01 (from JCS5 + 121582-18__COMMCLI64__x86 patch).
At the moment there is one such zone (named "cos-psam-01.domain.ru" in the logs below), but we expect(-ed) it to become two similar zones as per AM HA setup.
Zones listed in (1-3) use private IP numbers, they belong in our internal DMZ.
Zones listed in (4-5) below use public (routed) IP numbers, they belong in our external DMZ.
4) A zone with Sun Web Server 7.0U1 used primarily as a reverse-proxy server (optionally with a load-balancer libpassthrough.so plugin) successfully used for other hosted projects. One of its configurations now passes connections from an externally routed IP address published as "psam.domain.ru" to "cos-psam-01.domain.ru", per AM HA setup, so HTTP clients believe they work with an Access Manager instance. This zone has a backend interface with a private IP address to communicate with the actual AM instance.
In AM configuration (both LDAP and file-based) we have configured a site ID with the publicly known name and mentioned both names (psam and cos-psam-01) in organization's realm/dns aliases.
5) A zone with the rest of the Sun Java Communications Suite 5, as in Messaging Server 6.3 (6.3-6.03 64-bit: ci-5.0-1.03_solx86_x64__Messaging_Server_6.3-2 + patch 126480-09__MSG63__x86-64), UWC/CE 6.3 (from JCS5 + 122794-17__UWC63-4.01_core__x86), Instant Messaging 7.2 (from JCS5 + 118790-29__IM72__x86-1 + 118787-28__IM72__x86-2), Calendar Server 6.3 (from JCS5 + 121658-28__iCS63__x86). The web-components (UWC/CE, IM, /httpbind) are deployed in a Sun Web Server 7.0U1 as well.
This zone is named "sunmail.domain.ru" and has a routed IP address for direct external access to its servicess.
The AM SDK part is also patched (126357-01__AM71_x86); it points to the load-balancer name ("psam.domain.ru") as an actual AM server.
# imsimta version
Sun Java(tm) System Messaging Server 6.3-6.03 (built Mar 14 2008; 64bit)
libimta.so 6.3-6.03 (built 17:15:08, Mar 14 2008; 64bit)
SunOS sunmail 5.10 Generic_127112-07 i86pc i386 i86pc
While setting up this server set we tried to use AM SSO as the user login method, but it works unreliably.
"Unreliably" means that while most of the time entering a correct uid and password in Access Manager login page ("http://psam.domain.ru/amserver/UI/Login") does redirect a user back to "http://sunmail.domain.ru/uwc/auth" along with a new cookie, and the user is redirected again to his or her mailbox, sometimes the user receives the UWC/CE login page. Entering the same uid and password here does log him in, but it breaks the whole point of SSO and only increases the end-user routine required to log in :\
We have also seen the "missing mail tab" problem - if the users point the browser to any hostname different from "sunmail.domain.ru" (i.e. www.mail.domain.ru which is equivalent in DNS), they have only the Address book, Calendar and Options tabs; no webmail. So far this is resolved by Policy Agent forcing The One name of the server.
Here's the configuration we did specifically for AM SSO:
1) in AMConfig.properties of "sunmail" and "cos-psam-01" we set up
com.iplanet.am.cookie.encode=false
am.encryption.pwd=<the same value>
all hostname-related parameters point to "psam.domain.ru"
2) in AMConfig.properties of "cos-psam-01" a number of FQDN equivalence entries are added (so it does not redirect to a server hostname unknown to visitors):
com.sun.identity.server.fqdnMap[publicname-or-ip]=psam.domain.ru
com.sun.identity.server.fqdnMap[cos-psam-01.domain.ru]=cos-psam-01.domain.ru
3) in "msg.conf" on "sunmail" (entries added via configutil):
local.webmail.sso.amcookiename = iPlanetDirectoryPro
local.webmail.sso.amnamingurl = http://psam.domain.ru:80/amserver/namingservice
local.webmail.sso.singlesignoff = yes
local.webmail.sso.uwcenabled = 1
service.http.ipsecurity = no
(perhaps some more options are required? Looking for confirmation about: local.webmail.sso.uwclogouturl local.webmail.sso.uwccontexturi local.webmail.sso.uwchome service.http.allowadminproxy )
4) Configured Web Policy Agent for Sun Web Server, so that users without an AM session are required to get one. Set up per [http://msg.wikidoc.info/index.php/AM_redirection_using_Policy_Agent], except that com.sun.am.policy.agents.config.notenforced_list points to the many names our server can go known by.
5) Updated the logout URL in /opt/SUNWuwc/webmail/main.js:
--- main.js.orig Sat Jan 26 07:52:09 2008
+++ main.js Mon Jul 21 01:06:29 2008
@@ -667,7 +667,8 @@
function cleanup() {
if(laurel)
- top.window.location = getUWCHost() + "/base/UWCMain?op=logout"
+// top.window.location = getUWCHost() + "/base/UWCMain?op=logout"
+ top.window.location = "http://sunmail.domain.ru:80/base/UWCMain?op=logout"
else
exec('logout', '', 'exit()')
@@ -1707,7 +1708,8 @@
if(lg) {
url = document.location.href
url = url.substr(0,url.indexOf('webmail'))
- uwcurl = url + 'base/UWCMain?op=logout'
+// uwcurl = url + 'base/UWCMain?op=logout'
+ uwcurl = "http://sunmail.domain.ru:80/base/UWCMain?op=logout"
exit()
}6) Calendar SSO - per docs...
According to ngrep sniffing,
1) the browser goes to "http://sunmail.domain.ru/uwc/auth" without any cookies
2) receives a redirect and goes to "http://psam.domain.ru/amserver/UI/Login?gotoOnFail=http://sunmail.domain.ru:80/uwc&goto=http%3A%2F%2Fsunmail.domain.ru%3A80%2Fuwc%2Fauth"; sends no cookies either.
3) The first response from the "psam" server (as redirected from "cos-psam-01") sets a few cookies while rendering the login page:
Set-cookie: JSESSIONID=7EF8F2810D2071CA03CFEAE9972735B2; Path=/
Set-cookie: AMAuthCookie=AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1+xTqH7C3I=@AAJTSQACMDI=#; Domain=.domain.ru; Path=/
Set-cookie: amlbcookie=02; Domain=.domain.ru; Path=/
4) The browser requests the login page resources (javascripts, images, etc) using these cookies, as in this header line:
Cookie: JSESSIONID=7EF8F2810D2071CA03CFEAE9972735B2; AMAuthCookie=AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1+xTqH7C3I=@AAJTSQACMDI=#; amlbcookie=02
5) The browser POSTs the login request to "/amserver/UI/Login" and receives a redirection to http://sunmail.domain.ru:80/uwc/auth
Set-cookie: iPlanetDirectoryPro=AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1+xTqH7C3I=@AAJTSQACMDI=#; Domain=.domain.ru; Path=/
Set-cookie: AMAuthCookie=LOGOUT; Domain=.domain.ru; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/
6) The browser requests "http://sunmail.domain.ru/uwc/auth" using the newly set cookie (looks like the old one to me though):
Cookie: amlbcookie=02; iPlanetDirectoryPro=AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1+xTqH7C3I=@AAJTSQACMDI=#
7) The "sunmail" web-server checks the AM session validity with the same "psam.domain.ru". It sends a series of POSTs to /amserver/namingservice:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<RequestSet vers="1.0" svcid="com.iplanet.am.naming" reqid="685">
<Request><![CDATA[
<NamingRequest vers="1.0" reqid="324" sessid="AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1+xTqH7C3I=@AAJTSQACMDI=#">
<GetNamingProfile>
</GetNamingProfile>
</NamingRequest>]]>
</Request>
</RequestSet>(receives a large XML list of different Access Manager configuration parameters and URLs)
...then a double-request to /amserver/sessionservice:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<RequestSet vers="1.0" svcid="Session" reqid="686">
<Request><![CDATA[
<SessionRequest vers="1.0" reqid="678">
<GetSession reset="true">
<SessionID>AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1+xTqH7C3I=@AAJTSQACMDI=#</SessionID>
</GetSession>
</SessionRequest>]]>
</Request>
<Request><![CDATA[
<SessionRequest vers="1.0" reqid="679">
<AddSessionListener>
<URL>http://sunmail.domain.ru:80/UpdateAgentCacheServlet?shortcircuit=false</URL>
<SessionID>AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1+xTqH7C3I=@AAJTSQACMDI=#</SessionID>
</AddSessionListener>
</SessionRequest>]]>
</Request>
</RequestSet>As a result it receives an XML with a lot of user-specific information (the username, LDAP DN, preferred locale, auth module used, etc.)
!!!*** Now, the problem part ***!!!
8) And then "sunmail" POSTs a broken cookie to "psam" (note the space in mid-text, where the "plus" sign was previously). As we know, "+" is often used in URLs to "escape" the space character. Perhaps some URL cleanup routine backfired here.
I have double-checked, it is not the reverse proxy on "psam" breaking things. It is "sunmail" (UWC/CE or Policy Agent, don't know for certain) supplying the broken request. I looked over the large XML responses to the two previous requests, whenever they mention the session cookie value, the "plus" is there.
For the most detail I can provide, I'll even paste the whole HTTP packet:
POST /amserver/sessionservice HTTP/1.1
Proxy-agent: Sun-Java-System-Web-Server/7.0
Cookie: iPlanetDirectoryPro=AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1 xTqH7C3I=@AAJTSQACMDI=#;amlbcookie=null
Content-type: text/xml;charset=UTF-8
Content-length: 336
Cache-control: no-cache
Pragma: no-cache
User-agent: Java/1.5.0_09
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Host: cos-psam-01.domain.ru
Client-ip: 194.xxx.xxx.xxx
Via: 1.1 https-weblb.domain.ru
Connection: keep-alive
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<RequestSet vers="1.0" svcid="session" reqid="258">
<Request><![CDATA[<SessionRequest vers="1.0" reqid="254">
<GetSession reset="true">
<SessionID>AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1 xTqH7C3I=@AAJTSQACMDI=#</SessionID>
</GetSession>
</SessionRequest>]]></Request>
</RequestSet> The server's error response is apparent:
HTTP/1.1 200 OK
Server: Sun-Java-System-Web-Server/7.0
Date: Thu, 31 Jul 2008 05:49:50 GMT
Content-type: text/html
Transfer-encoding: chunked
19b
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ResponseSet vers="1.0" svcid="session" reqid="258">
<Response><![CDATA[<SessionResponse vers="1.0" reqid="254">
<GetSession>
<Exception>AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1 xTqH7C3I=@AAJTSQACMDI=# Invalid session ID
AQIC5wM2LY4SfcwuT2ASCrsfO78nXdceEHXeH1 xTqH7C3I=@AAJTSQACMDI=#</Exception>
</GetSession>
</SessionResponse>]]></Response>
</ResponseSet>On the few occasions when the AM cookie contains no "plus" characters, the SSO works like a charm (also checked by a sniffer). Whenever there is a "plus", it breaks.
For reference, here's a working final request-response (one with a good cookie, as received by the load-balancer web-server). Request looks a bit different:
POST /amserver/sessionservice HTTP/1.1
Cookie: iPlanetDirectoryPro=AQIC5wM2LY4Sfcy/5sEzVmuq9z1ggdHOkBDgVFAwfhqvn4U=@AAJTSQACMDI=#;amlbcookie=null
Content-Type: text/xml;charset=UTF-8
Content-Length: 379
Cache-Control: no-cache
Pragma: no-cache
User-Agent: Java/1.5.0_09
Host: psam.domain.ru
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<RequestSet vers="1.0" svcid="session" reqid="281">
<Request><![CDATA[<SessionRequest vers="1.0" reqid="277">
<SetProperty>
<SessionID>AQIC5wM2LY4Sfcy/5sEzVmuq9z1ggdHOkBDgVFAwfhqvn4U=@AAJTSQACMDI=#</SessionID>
<Property name="uwcstatus" value="active"></Property>
</SetProperty>
</SessionRequest>]]></Request>
</RequestSet> ...and the response is OK:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ResponseSet vers="1.0" svcid="session" reqid="281">
<Response><![CDATA[<SessionResponse vers="1.0" reqid="277">
<SetProperty>
<OK></OK>
</SetProperty>
</SessionResponse>]]></Response>
</ResponseSet>There have been a few reports of the same behaviour with other customers - specifically with the handling of the encoding of "+" characters to " ". It relates to how cookie encoding/decoding is performed (as you have already observed).
The solution for these customers was the following:
=> AM server/client side:
Ensure that com.iplanet.am.cookie.encode=false in AMConfig.properties and AMAgent.properties on all systems.
=> AM client (UWC) side:
- Set <property name="encodeCookies" value="false"/> in /var/opt/SUNWuwc/WEB-INF/sun-web.xml. This will prevent UWC from trying to urldecode the cookie it receives and therefore stops it turning the + into a space e.g.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE sun-web-app PUBLIC '-//Sun Microsystems, Inc.//DTD Sun ONE Application Server 7.0 Servlet 2.3//EN' 'file:///net/wajra.india.sun.com/export/share/dtd/sun-web-app_2_3-1.dtd'>
<sun-web-app>
<property name="encodeCookies" value="false"/>
<session-config>
<session-manager/>
</session-config>
<jsp-config/>
<property name="allowLinking" value="true" />
</sun-web-app>Regards,
Shane.
Maybe you are looking for
-
How do I install a plug in? I am trying to install and it says download error.
i cannot download any plug ins. i am trying to download a plug-in that will let me record video from a web page. but any plug-in a choose says download error.
-
Hi! Kindly help me on this one. I created an integration model for the master data (material, plant, atp) and activated it. i set up the master data change to immediate transfer. I tested it and it worked. then i created a IM for the transactional
-
Application custom expiration date
I have a iOS project (deployed as Adhoc) with requirements / restrictions: 1."custom expiration date" : app wouldn't launch after period of time after installation. The requirement "custom expiration date" like usual provision profile, but instead of
-
Hello everyone. I have a table (A) that stores point locations (X,Y) and contains the following fields: ID NUMBER(10,0) No 1 CD_CODIGO_EMA VARCHAR2(10 BYTE) Yes 2 TX_NOMBRE_EMA VARCHAR2(50 BYTE) Yes 3 CD_PROVINCIA_EMA NUMBER(5,0) Yes 4 CD_MUNICIPIO_E
-
I want to Check in XML Files that have been created with an editor and validated against a DTD. Here my Question: Is it possible to tell the SimpleXMLParser to ignore the <!DOCTYPE ... Reference, since it isn't able to validate against the DTD that i