Problems accessing Grid Console through firewall

I am trying to set up my Grid console to be accessible pubically. My Network admin add a entry to the CSS for a public IP and site oms.domain.com which points to http://host:7777/em. I have been unable to get this to work though. I can get to the console localy on 7777 and 4889 but not using this public address.
I tried to add a proxy server to the OMS for the oms.doamin.com on prot 80 but this does not seem to have any affect.
Anybody have any luck configuring the console like this?
Thanks,
Brian

Reinstall the OMS just so I can access it through a firewall? The oms.domain.com address is registered in the CSS and points to my hostname:7777/em why would I need to reinstall? I figured there was just a config file within Apache that I would need to update to tell Apache to allow connections from the public address. Seems overkill to reinstall everything. This OMS is monitoring a couple hundred targets at this point. Reconfiguring all that would be slightly painfull.
Any other suggestions?

Similar Messages

Unable to access grid console

have a 10.2.0.2 ac setup on 2 nodes running CENTOS 4.4
On the node2 i installed the OEM grid control 10.2.0 with the option "new database" [ emrep ] as the repository db
Once the installation was completed i cud access the the grid consle thru
http:/node2:4889/em
then thru the console i accidently shutdown the emrep database and i lost the connection to the console.
I started the emreb db thru cmd prompt,
started the em, $<oms10g>/bin/emctl start em
$<agent10g>/bin/emctl start agent
$<oms10g>/opmn/bin/opmnctl startall
$<oms10g>/opmn/bin/opmnctl status
ias-component | process-type | pid | status
DSA | DSA | N/A | Down
HTTP_Server | HTTP_Server | 18066 | Alive
LogLoader | logloaderd | N/A | Down
dcm-daemon | dcm-daemon | N/A | Down
OC4J | home | 18067 | Alive
OC4J | OC4J_EMPROV | 18068| Alive
OC4J | OC4J_EM | 18076 | Alive
WebCache | WebCache | 18078| Alive
WebCache | WebCacheAdmin | 18077| Alive
then i tried to access the console thru webpage and am getting
"503 service unavailable"
what am i supposed to do... ??
TIA,
Jj

1) stop all the opmn,agent and Login to database and change the sysman password by command
alter user sysman identified by <new_password> account unlock
2) Make a copy and change the following parameters in $ORACLE_HOME/sysman/config/emoms.properties
eml.mntr.emdRepPwd=newpassword
oracle.sysman.eml.mntr.emdRepPwdEncrypted=FALSE
3.) Make a copy and edit the $AGENT_HOME/sysman/emd/targets.xml file
with the newpassword and change ENCRYPTED from TRUE to FALSE.
The line to look for is
<Property NAME="password" "newpassword" ENCRYPTED"FALSE"/>
4) run the command from <OMSHOME>/bin
emctl config emkey -repos -force -sysman_pwd <sysman_pwd>
5) opmnctl startall
Please follow up offline for further discussion.

Problem accessing admin console

Hi,
I am new to oracle identity manger.I just installed the whole oim setup on linux machine.All worked fine and i was able to access admin console and was able to log into it.
But after installing wegate i am not able to access admin console though weblogic is starting fine.While starting weblogic using xlstartserver script i get get some exception like it cannot find some class for nexaweb something like that and it cannot load ejb module.Well i do not understand what is wrong.
Please help me.
thanks.

I've also been getting this error 100% of the time since subscribing our team to Creative Cloud earlier this week - so far the money's been wasted and have found no way to access adminconsole.adobe.com.
I can access creative.adobe.com just fine - but this is useless for me, as it is entirely personalised and contains no options or data that are related to the administration of my team account. I've called the support line, but was sadly unable to find anyone offering support - only sales advice!
Anybody able to shed any light on this whatsoever? All the Adobe Support I've been in touch with is entirely unable to assist with website problems - they just want to sell me the software that I already bought ; )

Problem accessing JWS webservice through BPEL

Hi,
I have designed a small BPEL file with which I am trying to access through the BPEL console/a java application. I am getting the following error: -
<detail>
<bea_fault:stacktrace xmlns:bea_fault="http://www.bea.com/servers/wls70/webservice/fault/1.0.0" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">weblogic.wsee.codec.CodecException: Unable to find xml element for parameter: office
     at weblogic.wsee.codec.soap11.SoapDecoder.checkNullElement(SoapDecoder.java:378)
     at weblogic.wsee.codec.soap11.SoapDecoder.decodeParams(SoapDecoder.java:285)
     at weblogic.wsee.codec.soap11.SoapDecoder.decodeParts(SoapDecoder.java:172)
     at weblogic.wsee.codec.soap11.SoapDecoder.decode(SoapDecoder.java:125)
     at weblogic.wsee.codec.soap11.SoapCodec.decode(SoapCodec.java:180)
     at weblogic.wsee.ws.dispatch.server.CodecHandler.decode(CodecHandler.java:139)
     at weblogic.wsee.ws.dispatch.server.CodecHandler.handleRequest(CodecHandler.java:40)
     at weblogic.wsee.handler.HandlerIterator.handleRequest(HandlerIterator.java:141)
     at weblogic.wsee.ws.dispatch.server.ServerDispatcher.dispatch(ServerDispatcher.java:114)
     at weblogic.wsee.ws.WsSkel.invoke(WsSkel.java:80)
     at weblogic.wsee.server.servlet.SoapProcessor.handlePost(SoapProcessor.java:66)
     at weblogic.wsee.server.servlet.SoapProcessor.process(SoapProcessor.java:44)
     at weblogic.wsee.server.servlet.BaseWSServlet$AuthorizedInvoke.run(BaseWSServlet.java:285)
     at weblogic.wsee.server.servlet.BaseWSServlet.service(BaseWSServlet.java:169)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3498)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(Unknown Source)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2180)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2086)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
</bea_fault:stacktrace>
</detail>
I have set the transaction-timeout accordingly in the following files: -
1) domain.xml
2) orion-ejb-jar.xml
3) transaction-manager.xml
Following is the excerpt from the service: - [I am using JWS annotations]
@WebService
@WLHttpTransport(portName="ResponsibleOfficeSoapPort", serviceUri = "ResponsibleOfficeService")
@WSDL(exposed=true)
@SOAPBinding(parameterStyle=SOAPBinding.ParameterStyle.WRAPPED)
public class ResponsibleOffice {
     @WebMethod
     public void addResponsibility(String office, String airline, String pRecordLocator) {
          Responsibility aResponsibility = new Responsibility();
          aResponsibility.setResponsibleOffice(office);
          aResponsibility.setResponsibleAirline(airline);
          Customer cus = new Customer();
          cus.setRecordLocator(pRecordLocator);
          cus.setReponsibility(aResponsibility);
          ResponsibilityHelper.persist(cus);
Following the BPEL file: -
<?xml version = "1.0" encoding = "UTF-8" ?>

<process name="TestBPEL" targetNamespace="http://xmlns.oracle.com/TestBPEL"
xmlns="http://schemas.xmlsoap.org/ws/2003/03/business-process/"
xmlns:bpws="http://schemas.xmlsoap.org/ws/2003/03/business-process/"
xmlns:xp20="http://www.oracle.com/XSL/Transform/java/oracle.tip.pc.services.functions.Xpath20"
xmlns:ns1="http://com/aaaa/webservices"
xmlns:ldap="http://schemas.oracle.com/xpath/extension/ldap"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:ns3="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:ns2="java:com.aaaa.entities"
xmlns:bpelx="http://schemas.oracle.com/bpel/extension"
xmlns:client="http://xmlns.oracle.com/TestBPEL"
xmlns:ora="http://schemas.oracle.com/xpath/extension"
xmlns:orcl="http://www.oracle.com/XSL/Transform/java/oracle.tip.pc.services.functions.ExtFunc">

<partnerLinks>

<partnerLink name="client" partnerLinkType="client:TestBPEL"
myRole="TestBPELProvider"/>
<partnerLink name="ResponsibleOfficeServiceDefinitions"
partnerLinkType="ns1:ResponsibleOffice_PL"
partnerRole="ResponsibleOffice_Role"/>
</partnerLinks>

<variables>

<variable name="inputVariable" messageType="client:TestBPELRequestMessage"/>

<variable name="outputVariable"
messageType="client:TestBPELResponseMessage"/>
<variable name="Invoke_1_addResponsibility_InputVariable"
messageType="ns1:addResponsibility"/>
<variable name="Invoke_1_addResponsibility_OutputVariable"
messageType="ns1:addResponsibilityResponse"/>
</variables>

<sequence name="main">

<receive name="receiveInput" partnerLink="client" portType="client:TestBPEL"
operation="process" variable="inputVariable" createInstance="yes"/>

<invoke name="Invoke_1" partnerLink="ResponsibleOfficeServiceDefinitions"
portType="ns1:ResponsibleOffice" operation="addResponsibility"
inputVariable="Invoke_1_addResponsibility_InputVariable"
outputVariable="Invoke_1_addResponsibility_OutputVariable"/>
<assign name="Assign_1">
<bpelx:append>
<bpelx:from variable="outputVariable" part="payload"
query="/client:TestBPELProcessResponse"/>
<bpelx:to variable="Invoke_1_addResponsibility_OutputVariable"
part="parameters" query="/ns1:addResponsibilityResponse"/>
</bpelx:append>
</assign>
<reply name="replyOutput" partnerLink="client" portType="client:TestBPEL"
operation="process" variable="outputVariable"/>
</sequence>
</process>
[Info: - The Webservice is running on Weblogic 11]
Can someone please help on this?
Thanks.

Your webservice seems to be throwing the error:
Unable to find xml element for parameter: officeLooking at your BPEL process, you are assigning nothing to the inputVariable of your Invoke block, Invoke_1_addResponsibility_InputVariable. This means you are not sending any value in the office XML element.
<sequence name="main">

<receive name="receiveInput" partnerLink="client" portType="client:TestBPEL"
operation="process" variable="inputVariable" createInstance="yes"/>

<*invoke* name="Invoke_1" partnerLink="ResponsibleOfficeServiceDefinitions"
portType="ns1:ResponsibleOffice" operation="addResponsibility"
inputVariable="Invoke_1_addResponsibility_InputVariable"
outputVariable="Invoke_1_addResponsibility_OutputVariable"/>
You'll want to assign something to the variable before you invoke the servie. Otherwise, you just get the same result every time you run it.
When you do run your process from the BPEL console, you can look on the Flow tab for that instance. Doubleclick on the INVOKE block, and you will see the XML that got sent to your web service.
Andy

Problems Accessing iPhoto Journals through Facebook iOS apps

Anyone else having troubles accessing published iPhoto Journals through iOS Facebook apps (on both iPad and iPhone)? Clicking a link to a Journal while within the Facebook app redirects you to Apple's iPhoto information page instead of the published journal. If you open up mobile Safari and click on the same link from the Facebook mobile page, it will bring up the Journal just fine. Not sure if this is an Apple/iCloud issue or a Facebook app issue.

I see the same thing. Since the link works in Safari mobile, Safari on Mac OS X and Firefox it would seem to be a Facebook app problem. Since the journals are pretty new, Facebook probably needs to update their app so it handles the URL correctly.
-Doug

Can fat-client directly access Oracle DB through firewall?

My java application(thin driver) can not access Oracle9i DB behind a firewall, even if the firewall open the port 1521 of the DB server.
The application is C/S architecture.
How can I config the DBserver or firewall to resovle the problem?
Or, it can not work in C/S mode?

See Re: Remote connectivity behind a firewall

SunMC console through firewall

Our firewall sits between our SunMC server/agents and our Windows PCs (SunMC console gui) I'd like to control what ports the SunMC server talks to the console on so that I don't have to have all ports open in our firewall.
Has anyone changed what ports the server uses to talk to the consoles on? It looks like they are all high ports and it would be nice if I can define a range of ports. I can see in the docs how to configure what ports the agent talks to the servers on, but wasn't able to find th same info for the server <--> console portion.
Thanks,
Karen

Hi Karen,
Unless things have changed, the Java RMI communication between the Server and Console uses unbound (dynamic) ports, and there is no option to restrict them to a certain range.
Do you need all the functionality of the standard Java Console? Many organizations use the full Console to setup SunMC, then use the web interface through a browser for day-2-day viewing. The web server is part of the standard free SunMC 3.5 distribution, requires no additional license, and uses a single http/https port... which you should easily be able configure your firewall to accept.
I recommend giving the web interface a try to see if it meets your needs. If not, then you may need to look into some sort of tunneling/VPN solution. You could even use a free X Server on your Windows box (i.e. Cygwin) to run the Java Console off of your SunMC Server, but that may be a bit slow.
Regards,
Mike
Standard disclaimer: I am an employee of Halcyon (www.HalcyonInc.com)

Tunneling vs. Web Service to access EJB's through firewall

I need to be able to access EJB's from a client application when the server is
behind a firewall. Seems like I have two options:
1) Use WebLogic's built-in http-tunneling support.
2) Use WebLogic to generate a web service for each bean and then modify the client
application to use the generated SOAP stubs instead of having direct EJB references.
Now I know either option will result in slower performance as compared to direct
EJB references, but I'm not sure which is worse. Has BEA done any comparison
of the two approaches to know which one is expected to perform better than the
other? Any guidence someone can provide is greatly appreciated.
thanks,
Dan

Rob Woollen <[email protected]> wrote:
It depends :>
If performance is your primary concern that it would be best to
benchmark both. I suspect the performance difference will greatly
depend on what types you are marshalling.Yep, I was curious about the same thing and tried some benchmarking - depending
on what was marshalled, or course, SOAP performance hit vs binary protocol was
not as bad as i expected it to be.
However, a web service client would offer some nice advantages. Your
client application would be a lot more flexible.But there will be some functionality loss over RMI.
-- Rob
Dan Branley wrote:
I need to be able to access EJB's from a client application when the server is
behind a firewall. Seems like I have two options:
1) Use WebLogic's built-in http-tunneling support.
2) Use WebLogic to generate a web service for each bean and then modify the client
application to use the generated SOAP stubs instead of having direct EJB references.
Now I know either option will result in slower performance as compared to direct
EJB references, but I'm not sure which is worse. Has BEA done any comparison
of the two approaches to know which one is expected to perform better than the
other? Any guidence someone can provide is greatly appreciated.
thanks,
Dan
Dimitri

Problem accessing management consol

I lost my ability to access my management consol and now can't log into it.
I can still access my StoreCenter px2-300d as a network drive, but when I put in the url 192.168.x.x(internal to my network) my web browser says it cannot find the device. My router still sees the device and gives me the url#. I did a reset. I also downloaded the Lenovo software which supposedly allows me to access it and set it up.
I don't know what happened. Did a file become corrupt?
How do I troubleshoot it?
Thanks in advance for any suggestions.

Hi a2scotty,
There could be many issues causing this to happen. I would recommend backing up your data from the device as soon as possible before proceeding to troubleshoot the device.
Just to clarify, can you access the web management console from the Storage Manager software? Or do you not have access only from the web browser? You may need to update your web browser or try a different browser.
Please reboot the device if you have not done so already.
How long did you hold the reset button for? First try holding the reset for four seconds. If it does not reboot, try 15 seconds. If it still does not respond try 30 seconds or longer until the device reboots.
You could also try connecting the device directly to your computer with an ethernet crossover cable.
Instructions to Direct Connect to NAS:
Unplug the NAS from the router
Unplug the pc from the router (if the pc is wireless, disable wireless)
Using Ethernet Cable, plug the NAS directly into the pc with no other devices attached.
Restart the NAS and wait for it to boot COMPLETELY 100%
The NAS will request an address from the PC which will be an APIPA address (this is a 169. address)
Open up your Start Menu and type in CMD in the search bar and select the CMD program.
Type in "arp -a" in the cmd prompt
The first time you use the arp -a in a cmd prompt, it gives you the 169.x.x.x address of "The PC"
You may have to arp -a twice to get the NAS address.
The second time you use the arp -a I will get another APIPA address in the 169.x.x.x address
Take the new address and use it in the web browser just like normal to access the device.
Have questions and need answers?
Search the database for answers to FAQ's, software/driver downloads, tutorials, news, features and more!
LenovoEMC Support & Downloads
LenovoEMC North America Support Contact Page

I can not access the switch through the console (solved)

Hello,
I'm having a problem.
I can not access the switch through the console. The web interface is working properly.
Model: SRW224g4
Below some pictures.
The HyperTerminal settings
error:
If anyone can help me?
Thank you and excuse the bad English.

Hello Rumenigue,
It looks to me like you are using a console cable. The reason you usually see them the other way around is because with a console cable the RJ-45 end goes into the device (an ethernet jack labeled console) whereas on this switch the console port is serial itself.
Usually the serial end of the cable you have plugs into a USB to serial adapter (because most computers today don't have serial ports anymore) and that USB connection goes into your PC, creating the virtual COM port you need in HyperTerminal.
So if you get a USB to Serial adapter you could plug that from USB to the console port, or if you computer has a serial port of its own just connect a serial cable directly from the PC to the switch, then use HyperTerminal with the settings recommended above by Tom.
Hope I have helped,
Christopher Ebert
Network Support Engineer - Cisco Small Business Support Center

Problem with accessing Transaction iViews through ITS

Hi,
I am trying to access Transaction iViews through ITS, we are getting sap easy access menu instead of transaction which we had given during the configuration. Recently we have upgraded ITS 6.20 to Patch level 19. Before applying patch everything was working fine.
Anyone please help me in solving this problem as it is very urgent.
Thanks,
Susan.

hi all
thanks for the hints. But last but no least we found the the problem. it was an flag in the config file of the its.
regards
pascal

Grid console SSL access

I would like to access grid control console using https instead of http. When I look at portlist.ini it says it should be available at port 8250 (Oracle HTTP Server SSL port = 8250
, Web Cache HTTP Listen (SSL) port = 8250). When I try access the application on this port the browser errors out saying unable to connect. I checked on the Management service machine using netstat. There is nothing listening on port 8250. Has anybody out there configured grid control console to use https.
PS: This is not about securing the management agent to management service communication. emctl secure agent/oms, etc. etc. I know about that and I have done it.

Yes it works using https. That is a good start. I was looking into it on Friday but lost my train of thoughts when I got pulled into something. I am not a middleware expert, but know enough to get myself into trouble. Comparing the http and https apache setup it looks like grid control application is configured correctly for ssl on port 1159 (like http on 4889). Apache listen port seems to be configured correctly for both SSL and non-SSL (4444, 7778). I see only entries for only 1352 (customized 7777 to 1352 during install using static port feature) in webcache.xml - no 8250. So I guess webcache is not setup for SSL. How do I set up webcache for grid control SSL?
Thanks. As such I can just use SSL on port 1159 without web cache. I have a team of about 15 to 20 people who can use grid control. Do you think it would significantly increase load on the OMS box if I by pass web cache. It is a 8 way/16GB hpux box, but has several other infrastructure apps. Right now has 50% CPU utilization and 80% memory utilization.

Problems accessing Time Capsule on windows Vista

I have an iMac running Leopard and a laptop running Vista Home Edition. I'm having some problems accessing Time Capsule from the Vista machine. everytime I click to access the drive, a message appears in the menu bar of the window that says (not responding). I've tried leaving it. I've even changed my entire wireless network to bypass the original g router (belkin) to use TC, so I now have TC as my router, Belkin just setup as a wired broadband modem but I still get the same problem. The mac seems fine, although I have had quite a few issues with drop outs.
both machines have the latest version of Airport Utility and Bonjour.
The laptop is a recent purchase to replace a dead XP machine, this worked fine and I managed to get stuff backed up just before it died, thankgod.
Any help appreciated.

No problem seeing Time Capsule with iMac, Dell desktop XP Home, Dell notebook XP Pro, and Fusion with XP Pro. All installed according to the installation guide. Installed AirPort Utility on all machines and updated firmware to 7.3.1. To see the other machines, make sure file sharing is on. Firewall on the PCs may need to be turned off. The printer plugged into the USB port also worked with all the XP systems and the iMac with a few missing features on iMac (I am assuming different driver issues). BTW, logging onto the created network and accessing the Time Capsule HD are separate. If you've entered different passwords for the HD and wireless networking when setting up Time Capsule initially (which I did through the iMac first), you'll need to enter them separately with the XP machines. You could also try resetting Time Capsule. Seems to work for others.

Remote Access Management Console - configuration issue with Network Location Server

2012 Std R2
The remote Access management console operation status shows all green except for network location server .
Error: There is no response from the network location server URL. DirectAccess connectivity might not work as expected, and DirectAccess clients located inside the corporate network might not be able to reach internal resources.
Resolution listed as:
1. Configure the network location server on a server that is highly available to clients on the internal network.
2. If the network location server is running on the Remote Access server, ensure that IIS is running, and that the URL is available.
The remote access server is located on this server. IIS is running. What URL: show I be looking at?
Any other thoughts so I can get remote access working.
l also am getting a remote access error for IPV6, could this be a cause:
RoutingDomainID- {00000000-0000-0000-0000-000000000000}: Unable to add the interface {D37062B2-A3E0-4496-A459-9E0BBCE5423C} with the Router Manager for the IPV6 protocol. The following error occurred: Cannot complete this function.
John Lenz

Hi John,
please follow the steps to reinstall TCP/IP stack.
1.Restart your PC into Safe Mode with Networking.
2.
Edit your registry. Delete the following keys:
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/Winsock
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/Winsock2
3.
Open the nettcpip.inf file in your %winroot%/inf folder
(%winroot% is usually c:/windows).
Find the [MS_TCPIP.PrimaryInstall] section. Change the Characteristics value from 0xA0 to 0x80.
Open the properties of the network connection you want to fix. In the General tab, click on the Install button. Click on the Have Disk button, and point the location to %winroot%/inf. After that select TCP/IP (not version 6).
4.
Now you would notice that you can uninstall TCP/IP!
Do that, then restart the PC.
Go back to your network connection, and install TCP/IP again as per the above. After another reboot, you should be up and running.
I also noted that the XP network repair tool may yank out the ISA 2004 firewall client stuff. Just run the firewall clinet repair or install it again to fix that problem after you did your reboot. Before you do this kind of crazy stuff.
5.
This along with a TCP/IP reset using the netsh command:
netsh int ip reset resetlog.txt
wish you have a nice thanksgiving too
Regards,
Mike
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

CSM through Firewall

Is there any specific configuration to be made in the CSM or Checkpoint/PIX Firewall to allow clients access the CSM virtual IP through the Checkpoint/PIX Firewall??
I am having problem connecting thru' the checkpoint firewall to the CSM virtual IP (all ports in firewall are open, no restrictions)......but it works just fine when not going thru' the firewall.

Do you have a PIX or a Checkpoint firewall. IF PIX, look at the logs in debugging mode and see what is being denied.

Problems accessing Grid Console through firewall

Similar Messages

Maybe you are looking for