Orion-web.xml access-mask not working

Hi, I am trying to restrict access to a specific application via the orion-web.xml descriptor. This would be OC4J in OAS 10.1.3.4.
I have done this in the GUI by using the "Advanced Deployment Plan Editing -> Edit Deployment Plan" option. I thought this would be safer than editing the files by hand. The application deploys successfully, and in orion-web.xml of my deployed application, this translates into:
<orion-web-app
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/orion-web-10_0.xsd"
        deployment-version="10.1.3.4.0"
        deployment-time="1241707803607"
        jsp-cache-directory="./persistence"
        jsp-cache-tlds="standard"
        jsp-taglib-locations=""
        temporary-directory="./temp"
        context-root="MyApp"
schema-major-version="10" schema-minor-version="0" >
        <access-mask default="deny">
                <ip-access ip="127.0.0.1" mode="allow" netmask="255.255.255.255" />
                <ip-access ip="192.168.0.100" mode="allow" netmask="255.255.255.255" />
                <ip-access ip="192.168.0.101" mode="allow" netmask="255.255.255.255" />
        </access-mask>
        
        <resource-ref-mapping name="jdbc/myDB" location="jdbc/myDB" />
        <web-app>
        </web-app>
</orion-web-app>This looks OK to my eyes, but unfortunately it doesn't restrict any access at all. I have restarted the specific application, and I have also restarted the entire OC4J. No access is restricted; I can pull up the application from any IP address. My intention was to restrict access only to the 2 IP addresses (and localhost by IP) listed above.
I have reviewed multiple metalink articles on this topic:
Note 438493.1 - How to Restrict access for EM Database Control only from Specific Hosts / IPs
Note 178665.1 - How to Restrict Access to OC4J to Specific Hosts or IP Addresses
Note 311137.1 - How to restrict access to EM website based on IP Addresses/Domain Names
None of them seem to indicate that I have done anything wrong.
If anyone has any feedback on this topic, identifies a problem with my config, or has knowledge of a product bug, please respond to this thread.
Many thanks in advance for your feedback.

were you able to resolve this?

Similar Messages

10.1.3 - OEM Deployment generating invalid orion-web.xml

Hi,
I've playing around with OracleASjms resource adapters, JMS Connector, etc - with some good results. I noticed that one of my test applications, when deployed (via OEM) gets an orion-web.xml which is not according to the XML schema and am wondering whether this is designed behavior.
In my servlet I'm using some logical names for javax.jms.ConnectionFactory and javax.jms.Destination, which I specify in the web.xml. Deploying the ear file I get the change to resolve environment references to 'physical' JNDI locations. I map the logical javax.jms.ConnectionFactory to an OracleASjms resource adapter connection factory (which in turn is pointing to an JMS ConnectionFactory) and the javax.jms.Destination I map to an OracleASjms Administered resource.
The applications deploys and works fine, however I have a question with respect to the orion-web.xml that Oracle is generating based. More specifically I see (<....> are replaced with actual values):
   <message-destination-ref-mapping
         name="<logical name>"
         location="<OracleAsjms/Administerered Object>"/>The element message-destination-ref-mapping isn't declared in the XML schema for orion-web.xml, but still it works, how come?

http://www.oracle.com/technology/oracleas/schema/index .html
http://www.oracle.com/technology/oracleas/schema/orion-web-10_0.xsd
Thanks, jvissers. It seems that orion-web-10_0.xsd is outdated. It is probably that it was posted for the 10.1.3 preview. When the 10.1.3 production release is available, at least that schema is not updated. Hmm, all things that are changing but kept at different places are just very susceptible to inconsistency. Hmm, OracleAs team should probably make automated tests to make sure that they are in sync. (I am just thinking loudly). Let me try to communicate to someone who can further take care of this matter of outdated schemas. Thanks again, jvissers.
Where did you look?Inside my oc4j installation! oc4j will not go to the web to download the oc4j-specific schemas in case of need. The orion-web-10_0.xsd is at OC4J_HOME/j2ee/home/lib/schemas.jar!META-INF/orion-web-10_0.xsd. That is where I looked. So the orion-web.xml generated by OEM is indeed valid.

FORMAUTH Filter in orion-web.xml ignored

I am trying to use a JAAS Custom Login Module with a customized logon.jsp (and Struts). So I defined a FORMAUTH Filter in orion-web.xml to intercept the logon.
However, Oracle 10g 10.1.3.2 did not deploy it. Why? How can I fix this problem?
===========================================================
Deployed Application:
{ORACLE_10_1_3_2_HOME}\j2ee\home\application-deployments\{APPLICATION}\{APPLICATION_WAR}\orion-web.xml contained:
<?xml version="1.0"?>
<orion-web-app
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/orion-web-10_0.xsd"
     deployment-version="10.1.3.1.0"
     deployment-time="1189531757046"
     development="true"
     jsp-cache-directory="./persistence"
     jsp-cache-tlds="standard"
     simple-jsp-mapping="false"
     temporary-directory="./temp"
     servlet-webdir="/servlet"
     context-root="visit"
schema-major-version="10" schema-minor-version="0" >
     <web-app-class-loader search-local-classes-first="true" include-war-manifest-class-path="true" />
     <web-app>
     </web-app>
</orion-web-app>
===========================================================
BUT: APPLICATION.EAR structure:
APPLICATION_WAR\WEB-INF\orion-web.xml contained:
<?xml version="1.0"?>
<!DOCTYPE orion-web-app PUBLIC "-//ORACLE//DTD OC4J Web Application 9.04//EN" "http://xmlns.oracle.com/ias/dtds/orion-web-9_04.dtd">
<orion-web-app
     deployment-version="10.1.3.1.0"
     temporary-directory="./temp"
     internationalize-resources="false"
     default-mime-type="application/octet-stream"
     jsp-cache-directory="./persistence"
     servlet-webdir="/servlet"
     development="true">
          <web-app-class-loader search-local-classes-first="true" include-war-manifest-class-path="true" />
<web-app>
<filter>
<filter-name>AuthenicationFilter</filter-name>
<filter-class>gov.dhs.visit.filter.AuthenicationFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>AuthenicationFilter</filter-name>
<dispatcher>FORMAUTH</dispatcher>
<url-pattern>*.do</url-pattern>
</filter-mapping>
</web-app>
</orion-web-app>

I've used this before, and it worked fine. The only difference I can see is that you have a url-pattern element in the filter-mapping config.
In the short term, try removing that and see if it then works.
-steve-

Making sure setting ojsp-init tags-reuse from orion-web.xml is used

I'm facing a problem with the following setting in my application's orion-web.xml:
<ojsp-init tags-reuse="compiletime-with-release"/>
previously, we had this setting in global-web-application.xml, but we would like to specify it per application, to get rid of the OC4J post-installation step to manually add the following lines:
<init-param>
<param-name>tags_reuse_default</param-name>
<param-value>compiletime_with_release</param-value>
</init-param>
However, the latter works, and the former doesn't seem to have any effect whatsoever. But as far as I can see, the orion-web.xml is correctly following the XSD:
<?xml version="1.0"?>
<orion-web-app
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/orion-web-10_0.xsd"      deployment-version="10.1.3.3.0"
     deployment-time="1198148775354"
     jsp-cache-directory="./persistence"
     jsp-cache-tlds="standard"
     jsp-taglib-locations=""
     temporary-directory="./temp"
     servlet-webdir="/servlet/"
     context-root="/messagecontrol"
schema-major-version="10" schema-minor-version="0" >
     
     <ojsp-init tags-reuse="compiletime-with-release"/>
</orion-web-app>
http://www.oracle.com/technology/oracleas/schema/orion-web-10_0.xsd
Am I missing something here? Do we need to do something specific to make sure the ojsp-init values are actually used? The documentation seems to indicate that the two settings are equivalent:
http://download.oracle.com/docs/cd/B32110_01/web.1013/b28961/devconfig.htm#BHCFICDA
Any help would be appreciated.
Jaap

Update:
In the meantime I've logged a SR for this. The settings "none" and "compiletime" do work and behave the same as their global-web-application.xml counterparts. It's just the "compiletime-with-release" that does not work as expected.

Alternate Access Mapping not working for Zone : Intranet

One of our client want to set Alternate Access Mappint (intranet) with url "intranet.theirDomain.com" with local IP address.
is it possible?
subsequest to my previous question (
http://social.technet.microsoft.com/Forums/sharepoint/en-US/3f39711e-301a-40e8-aa7a-855fa2c268b1/alternate-access-mapping-not-working?forum=sharepointadmin )
I want to ask one more question
Can we configure "intranet.theirDomain.com" with local IP address for any other zone?
or
If there is ".com" within the url then it can't be configured for InTRAnet?
Thanks
S H A J A N

The names for the zones don't matter. You could use the 'extranet' zone for another intranet name if you wanted, the names are just to make it a bit more friendly for beginners.
What you describe sounds routine, you create a web application with a name, then use an AAM to allow users to access it with a more friendly name. Frequently you end up creating
http://intranet.domain.com and
http://intranet as an AAM, or vice versa.
You can use .com for an intranet site, you would need to add the site as an A Host record in your DNS server so that traffic is sent to your internal server rather than out into the wider world.

XML Data Button Not working when Exported onto BusinessObjectEnterprise

I have an XML data button on a dashboard. It works fine in preview and on web. It does not work if it is exported onto Business Object server using XCelsius' Export to BusinessObjectEnterprise.
In the InfoView, I double click on the flash file, the flash files opens as expected, but when XML Data button is clicked, no new data seem to come in...
If I export as Adobe file, and then post it onto the server, and view it using Info View, the XML data button works just fine.
Please advise.

Hi All,
Even I have similar requirement.
Any work around is appreciable.
Thanks
Vinod

Add virtual directory to orion-web.xml file of embedded OC4J instance

I'd like to add a virtual directory to the orion-web.xml file of the embedded OC4J application which comes with JDeveloper (version 10.1.3.3.0.4157). Every time I run my application however, a new orion-web.xml file is created which overwrites the orion-web.xml file with my virtual directory. The orion-web.xml is located in the <JDev_Home>\jdev\system\oracle.j2ee.10.1.3.41.57\embedded-oc4j\application-deployments\current-workspace-app\<app Name> directory.
Does anybody know a solution to this problem?
Regards,
Matthieu

hi there,
i have the same problem, all the configuration files are included in the EAR file, like application.xml,...
but the orion-web.xml is not included.
I dont have that option that you mencioned File->New->Deployment Descriptiors -> web...for oc4j...
I can create a EAR, WAR or JAR in File->New->Deployment Profiles.
I need the orion-web.xml to define the MIME types the servlet can return, is it really needed?
regards,
Laura

JDev 10.1.3 Preview Create orion-web.xml Problem

When I use JDev 10.1.3 to create an orion-web.xml file, it generates something like this:
<?xml version = '1.0' encoding = 'windows-1252'?>
<orion-web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/orion-web-10_0.xsd" schema-major-version="10" schema-minor-version="0" servlet-webdir="/servlet/"/>
Shouldn't it create something without the closing "/>" marker on the <orion-web-app> line?
9.0.5 did something like:
<orion-web-app servlet-webdir="/servlet/">
</orion-web-app>

If the orion-web-app element does not have sub-elements
<orion-web-app servlet-webdir="/servlet/"/>
is equivalent to
<orion-web-app servlet-webdir="/servlet/">
</orion-web-app>

Orion-web.xml -- web-app-class-loader

Hi all, I posted this in the jDeveloper section and someone suggested that I ask you guys what the importance of the orion-web.xml file is. Currently my files looks like ...
<?xml version = '1.0' encoding = 'windows-1252'?>
<!DOCTYPE orion-web-app PUBLIC "-//Evermind//DTD Orion Web Application 2.3//EN" "http://xmlns.oracle.com/ias/dtds/orion-web.dtd">
<orion-web-app servlet-webdir="/servlet/">
</orion-web-app>
But it keeps adding the line that I mention below...
I have a system that consists of multiple projects. When I deploy all projects they all work fine except for one. We discovered that this is due to the following line in the orion-web.xml file in that project ....
<web-app-class-loader search-local-classes-first="true"/>
I removed that line and everything is now fine. However, whenever I open up the application in jDev is puts that line back (even if I don't make changes).
Is there a setting somewhere that is forcing this line to be put there and, if so, why? And how do I switch it off?
Thanks,
Russell

Hey Steve,
I must admit that this post confused me a bit.
I can find no deployment plan editor. We have a WAR Deployment Profile, an EAR Deployment Profile and an EJB JAR Deplyment Profile.
I use the debug functionality (using the embedded OC4J) to test the application locally during development and then deply the EAR Deployment Profile to an EAR file which then gets deployed using an Application Server.
Further to this I have tried deleting the file (from everywhere), changing the EAR Deployment Properties and even changing the code within the ORION-WEB.XML to say <web-app-class-loader search-local-classes-first="false"/> all to no avail.
If I remove the file completed, it add its back when I reopen the project. If I change it to false, it changes it back to True.
Very confused I must admit.
Thanks,
Russell

Orion-web.xml and resource-env-ref-mapping correct usage

What happened to resource-env-ref-mapping element in orion-web.xml? I have a 9.0.4.1 server running several .EAR files containing web applications using this attribute to configure JMS related items. But when deploying the .EAR to newer versions (9.0.5.2) of the server this attribute doesn't appear to be valid any longer?
Here it is in the 9.0.4 documentation:
http://strogoff.unex.es/oradoc/form_y_report_10g/web.904/b10322/apdx_a.htm
Any help would be appreciated?

I should have been more clear about the issue. The error only occurs when running inside the embedded OC4J container of JDeveloper 10.1.2 build 1913. The error does NOT occur in JDeveloper 9.0.3. The application also runs fine when deployed to a 10.1.2 Enterprise application server. The error only occurs in JDeveloper.
The following error occurs when validating my orion-web.xml file. The entry is:
orion-web.xml:
<orion-web-app>
<resource-ref-mapping name="jms/mQueueConnectionFactory" location="jms/matchingQueueConnectionFactory"/>
<resource-env-ref-mapping name="jms/mQueue" location="jms/matchingQueue"/>
</orion-web-app>
web.xml
<resource-env-ref>
<resource-env-ref-name>jms/mQueue</resource-env-ref-name>
<resource-env-ref-type>javax.jms.Queue</resource-env-ref-type>
</resource-env-ref>
java.lang.IllegalArgumentException: Unrecognized parent-elem combination: interface oracle.jdeveloper.xml.oc4j.war.OrionWebApp - resource-env-ref-mapping
     at oracle.javatools.xml.bind.XMLBinding.throwUnrecognizedElem(XMLBinding.java:127)
     at oracle.jdeveloper.xml.j2ee.war.WebAppBinding.elem2intImpl(WebAppBinding.java:637)
     at oracle.javatools.xml.bind.XMLBinding.elem2int(XMLBinding.java:104)
     at oracle.javatools.xml.bind.XMLBinding.insertBetween(XMLBinding.java:88)
     at oracle.javatools.xml.bind.BindingContext.insertNewElement(BindingContext.java:121)
     at oracle.javatools.xml.bind.BindingContext.insertElem(BindingContext.java:95)
     at oracle.javatools.xml.bind.BindingContext.setElement(BindingContext.java:71)
     at oracle.javatools.xml.bind.SetImpl.callSetterForUniqueElem(SetImpl.java:66)
     at oracle.javatools.xml.bind.SetImpl.callSetter(SetImpl.java:57)
     at oracle.javatools.xml.bind.SetImpl.invoke(SetImpl.java:26)
     at oracle.javatools.xml.bind.ElementProxy.invoke(ElementProxy.java:35)
     at $Proxy10.setWebApp(Unknown Source)
     at oracle.jdevimpl.runner.oc4j.Oc4jWorkspaceConfig.ensureLocalPageReposRootIsSet(Oc4jWorkspaceConfig.java:633)
     at oracle.jdevimpl.runner.oc4j.Oc4jWorkspaceConfig.transmogrifyConfigFiles(Oc4jWorkspaceConfig.java:269)
     at oracle.jdevimpl.runner.oc4j.Oc4jWorkspaceConfig.configureAll(Oc4jWorkspaceConfig.java:114)
     at oracle.jdevimpl.runner.oc4j.Oc4jStarter.preStart(Oc4jStarter.java:618)
     at oracle.jdevimpl.runner.oc4j.Oc4jStarter.start(Oc4jStarter.java:268)
     at oracle.ide.runner.RunProcess.startTarget(RunProcess.java:756)
     at oracle.jdeveloper.runner.JRunProcess.startTarget(JRunProcess.java:461)
     at oracle.ide.runner.RunProcess$2.run(RunProcess.java:699)
     at java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:178)
     at java.awt.EventQueue.dispatchEvent(EventQueue.java:454)
     at java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:201)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:151)
     at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:145)
     at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:137)
     at java.awt.EventDispatchThread.run(EventDispatchThread.java:100)

Orion-web.xml

What is the siginificanc of orion-web.xml file with respect to 9iAS? It seems to be like a configuration file. But I would like to know where it comes into picture and what role it plays with forms9i/9ias.
Thanks in advance
Sheba

Sheba,
you use this file to define classpath settings and virtual mappings for a Web deployment context, like /forms90.
For example: defining
<virtual-directory virtual-path="/img" real-path="D:\appImages/myImages" />
in the forms deployment context to access images on the Web will make them accessible through
http:// server :Port/forms90/img/<image name>
The virtual directory is created under the context root of the deployment owning the orion-web.xml file
Frank

Hi,my name is Hemanth.Im using ipod touch and my ipod is not detecting in itunes but detecting in my computer.Im using windows7 os.I tried the troubleshooting process given in web but still it not working please help me.

Hi,my name is Hemanth.Im using ipod touch and my ipod is not detecting in itunes but detecting in my computer.Im using windows7 os.I tried the troubleshooting process given in web but still it not working please help me.

Did you try everything here:
iOS: Device not recognized in iTunes for Windows
Then try a different computer to help determine if yo have an IPod or computer problem.

Mask not working correctly?

Hi every one!
I have this problem with my mask not working properly, i have an image, and it has an red fruit sitting on a table,
i have to make the picture sepia using an adjustment layer ( my lecturer says it MUST be done that way)
but leaving the fruit as red as possible. So when i do this i MUST use the layer mask provided by the
adjustment layer, but what is happening is the orange is going a very faded red ( but not quite sepia), the table BG does go sepia..
so its KIND OF working but not really.
Cheers
Bunny Face

Check your mask by OPTION CLICKING on the mask icon on the specific layer. This will show you a greyscale mask. BLACK hides, WHITE REVEALS. SO obviously grey does half of each! So if you dont want the apple to be affected by the layer mask you must paint it BLACK in the mask of that adjustment layer.

(three-way color corrector) secondary color correction masks not working?

Hi I'm using PP 2014 on Yosemite. Anyone notice (three-way color corrector) secondary color correction masks not working?

strange. same stats here but im getting intermittent.... sometimes i can use the mask and the effect is only limited to the masked area. most of the time the masked area is ignored and the effect is applied to the whole image

About the element, 'expiration-setting' in the orion-web.xml

orion-web.dtd says

<!ELEMENT expiration-setting (#PCDATA)>
<!ATTLIST expiration-setting expires CDATA #IMPLIED
url-pattern CDATA #IMPLIED
>
I thought this element will help for tuning.
My question is,
if there is a frequently accessed images, and url-pattern is "http://image.myserver.com", i assumed the syntax like the following,
<expiration-setting expire="?" url-pattern="http://image.myserver.com">
but i don't know what's the meaning of the attribute value 'expire'? And big or small one in my situation? and Basically does it work in the oc4j server?
null

See
Oracle® Application Server Performance Guide
*10g Release 2 (10.1.2)*
*6.6 Improving Servlet Performance in Oracle Application Server*
Here is an example:
--- snip ---
<PRE>
<orion-web-app
deployment-version="2.0.0.0"
jsp-cache-directory="./persistence"
temporary-directory="./temp"
servlet-webdir="/servlet/">

<session-tracking cookies="disabled"/>
<expiration-setting expires="86400" url-pattern="*.jar"/>
<expiration-setting expires="never" url-pattern="*.gif"/>
</orion-web-app>
</PRE>
--- snap ---

Orion-web.xml access-mask not working

Similar Messages

Maybe you are looking for