Problems Oracle 9iDB and ASO Configuration for Cybersafe

Oracle 9iDB installation on Solaris with ASO option
Objective
My objective is to configure Oracle 9iDB, Release 9.0.1 ASO on Solaris for external authentication using Cybersafe ActiveTRUST, which is a Kerberos, based authentication product.
Question
Getting ORA-12641: Authentication Service failed to initialize when trying to connect to Oracle 9iDB using sqlplus from a Oracle 9i Client machine, when ASO is configured for Cybersafe authentication on both Oracle 9iDB and Oracle 9i client
Can anyone help me setup Oracle 9iDB and Oracle 9i client for ASO using Cybersafe Authentication?
Environment
1. I have a Solaris box as my Oracle 9iDB server
2. I have an NT Server as my Authentication server and Oracle 9i Client.
Installation Procedure
I installed as per the steps given in the doc, Oracle Advanced Security Administrators Guide, Release 9.0.1
Authentication Server / Oracle Client setup (NT Server)
I installed on the NT Server the following
1. CyberSafe ActiveTRUST 4.0 Security Server on the NT Server, which acts as an Authentication server.
2. CyberSafe ActiveTRUST 4.0 Security Client
3. Cybersafe Application Security Toolkit (GSS runtime libraries) as needed by Oracle ASO setup procedures.
4. Oracle 9i Client, custom installations with ASO option.
Oracle 9iDB Server Setup (Solaris Server)
I installed on the Solaris Server the following
1. CyberSafe ActiveTRUST 4.0 Security Client
2. Cybersafe Application Security Toolkit (GSS runtime libraries)
3. Oracle 9iDB server, custom installation, with ASO option selected.
Installation of all the above components is successful.
Note: Installation of Oracle 9iDB server with ASO option never prompted me to choose a Authentication mechanism like Cybersafe, or Kerberos or Radius etc..,
Note: Oracle 8.1.7 DB installation on NT actually prompted for Authentication mechanism selection.
ASO Configuration:
I configured ASO on the Oracle server and client side as mentioned in chapter 5 of Oracle Advanced Security Administrators Guide, Release 9.0.1
I created an external user in Oracle, [email protected] as mentioned in http://download-uk.oracle.com/otndoc/oracle9i/901_doc/network.901/a90150/1004747
I configured the NT server, Oracle 9i client for ASO using Net8 Assistant and I have the sqlnet.ora file.
ASO Problems:
Once I have configured both Oracle 9i client and 9iDB server for ASO, I am not able to log in to the database using sqlplus /@cybr.
It returns with an error ORA-12641, saying Authentication Services Failed to Initialize.
I could not get much help from questions posted on metalink on ORA-12641.
It looks like Solaris 9iDB could not recognize cybersafe even though, Cybersafe is listed as one of the installed adapters, when I ran # $ORACLE_HOME/bin/adapters. From this, it looks like Cybersafe adapter is linked to ASO.
Oracle Server is not able to initialize authentication services and call the authentication server at all.
Can anyone help me setup Oracle 9iDB and Oracle 9i client for ASO using Cybersafe Authentication?

The problem has been resolved after providing cn=orcladmin instead of orcladmin for the OID user admin user. Now the overall sso solution is working fine with ADF applications.
Regards,
S R Prasad

Similar Messages

Define Tabs and Process Configuration for Template (HAP_TA_CONF)

I am currently building a new appraisal template for my client and I have configured the process timeline in the development system via the IMG node Define Tabs and Process Configuration for Template (transaction code HAP_TAB_CONF).
Does anyone know how to transport the tabs and process configuration through the system landscape?
We are on SAP ECC 6.0 Enhancement Pack 4

Hi Sushil,
I have used the report RHMOVE30 as you recommended and it worked perfectly in one run. I did not have to create custom relationships. I simply selected all the Process Item (VH) objects for my appraisal template and ran the report.
Many thanks for your help. It has saved me having to configure the tabs and process timeline in each client.
Janet

Define Tabs and Process Configuration for Template

Hi All
I would like to give the local HR the ability to define Tabs and Process Configuration for Template
The only way I can find to create these definitions is using SPRO and I don't want to give HR users SPRO
Is there a transaction which will allow the HR users to define Tabs and Process Configuration for Template?
Thanks
Maya

You can try this URL:
http://server.domain:port/sap/bc/webdynpro/sap/hap_configuration?WDCONFIGURATIONID=HAP_AC_TAB_CONF
Just change server, domain and port to match your SAP instance.

Appraisal- "Define Tabs and Process Configuration for template"

Hi Experts,
I am looking for implementation of Flexible template. However, I am unable to do so because "Define Tabs and Process Configuration for template" config node is not available even though we have activated business functions HCM_OSA_CL_1 and HCM_OSA_CL_2. We are in EHP 5 SPlevel 44.
Please help.

1. Check with Business Function CA_HAP_CI_1 ..first go through the documentation of the Business Function.
2.Check with BC Sets is activated or not through tcode SCPR20PR...If it not activated then activate with Tcode SCPR20..
BC Sets for HR
EA-HR-MENU
EA-HR-AKH
EA-HR-IMG
Mohan

Problem in setting up XCM Configuration for Local Server

Hi
I have installed Local J2ee engine on my computer and have deployed E Commerce B2B B2C sca packages.
I am trying to complete the XCM configuration for my Local Engine. For below 4 links, I have done the configuration, creation of JCO, Shop, etc is done and have tested the JCO, the test is successful. JCOs are pointing to ECC 6.0 which is development server and on development server the XCM configuration is working fine.
http://<host>:<port>/b2b/admin/xcm/init.do
http://<host>:<port>/b2c/admin/xcm/init.do
http://<host>:<port>/isauseradm/admin/xcm/init.do
http://<host>:<port>/shopadmin/admin/xcm/init.do
But below 2 links are not working and I am getting "Page can not be displayed" error.
http://<host>:<port>/isauseradm/init.do
http://<host>:<port>/shopadmin/init.do
I need to created 2 shops in http://<host>:<port>/shopadmin/init.do but since the page is not displaying I am not able to proceed and hence when I try to login to b2b b2c application
http://<host>:<port>/b2b/init.do and http://<host>:<port>/b2c/ init.do , I am getting an error
"The shoplist read from buffer is empty",
I think this error can be resolved by creating 2 shops in http://<host>:<port>/shopadmin/init.do, but
http://<host>:<port>/shopadmin/init.do itself in not displaying.
Please can you help.
Thanks
Edited by: Neha Bhatia on Jun 4, 2009 10:31 PM

Hi
I checked the mentioned Patch Levels, everything seems to be fine.
After I did few changes in JCOs and checked the XCM configuration throughly shopadmin URL (http://<host>:<port>/shopadmin/shopadmin/init.do) has started working.
Now I have maintained 2 shops and can see the B2B and B2C web portals fine.
But as soon as I select any material, it is giving error saying error in XCM configuration related to IPC.
could you pleaase help me out with this?
Also, as soon as I click on the B2B Login link, it dumps.
And useradmin URL http://<host>:<port>/isauseradm/useradmin/init.do is still giving "Page can not be displayed",
These problems are related to XCM configuration, but not sure where exactly and which configuration is missing. please can you suggest ? Any XCM configuration related document will also be helpful.
Regards,
Neha

Dynamic userid and password configuration for spring DAO

Hi,
I have a requirement, For security reasons database username and password are changed every 15 days. and the username and password will be exposed via a webservice.
Now my query is how to configure the username and password dynamically in our project.
We are using JDBCTemplate to access datasource and execute queries.
Please help how to approach this problem.
Thanks,
Ashwin.

user10079988 wrote:
For security reasons database username and password are changed every 15 days. and the username and password will be exposed via a webservice. So "for security reasons" there is a webservice that publishes the login credentials to your database? That doesn't sound too smart to me.
How is that webservice secured?

Installing Oracle 10G and SQL Developer for Windows 7 Home Premium

Hi Folks,
I need your helping me in getting the correct Database installed for my Windows 7 .
Can you please help me out in sending me the correct url for Oracle 10G Database & SQL Developer URL
So i can install both and get on with it...
Thanks ,
satish.p

user4789048 wrote:
Hi Folks,
I need your helping me in getting the correct Database installed for my Windows 7 .
Can you please help me out in sending me the correct url for Oracle 10G Database & SQL Developer URL
So i can install both and get on with it...
Thanks ,
satish.pWith the caveat (as already pointed out by Srini in this thread) that no Oracle product has ever been certified on any "home" edition of any version of Oracle ...
If I were looking to download any product, I'd start by going to that company's web site (like, www.oracle.com) and look for a tab or link called "download". I'll bet if you did that, you'd find all sorts of goodies.
But, again, since you are dealing with a "home" edition of Windows, you'll need to start by installing a virtual machine product -- VM Ware's "VMworkstation" or "VMplayer", or Oracle's VirtualBox. Then you can create a virtual machine running a supported OS. Oracle's own Linux (derived from Red Hat Linux) is also free.

Oracle Forms and Reports 10gR2 for Windows Server 2008 (64bit)

Hi!
I need to install Oracle Forms and Reports 10gR2 in a windows server 2008 64 bit machine. But I cannot find the installer of it. Is there a way to do it?
Thanks...

I need to install Oracle Forms and Reports 10gR2 in a windows server 2008 64 bit machine.Be aware that Oracle Forms and Reports 10gR2 (AS 10.1.2.0.2) is not certified for windows server 2008, as from Oracle Certification Matrices

When will Oracle 10g and 11g PSU for July (quarter) be available?

I've searched Oracle site and result shows Critical Patch Updates (CPU) page only that has release dates: Critical Patch Updates and Security Alerts.
Are the dates applicable to PSU as well?

Typically the dates are applicable to PSUs as well - but not necessarily. Pl see Section 3 in this MOS Doc
Patch Set Updates for Oracle Products [ID 854428.1]
HTH
Srini

Foriegn Trade and CIN configuration for SD

Hi all,
Can anybody please send me step by step procedures regarding
1. Foriegn trade configuration in SD Module wrt India.
2. CIN configuration in SD Module.
Regards,
Khan

You require to do thenecessay configuration for Foreign Trade Data:
IMG --> Sales and Distribution --> Foreign Trade/Customs --> Basic Data for Foreign Trade --> (Do the necessary configuration here)
In most probability, it will not default, but it is required to be maintained in Invoice (based on configuration)
Regards,
Rajesh Banka
Reward points if helpful.

Component and application configuration for RPLM_QIMT_NOTIF_MAIN_COMP

Hi folks,
I've been enhancing a used component RPLM_QIMT_NOTIF_COMP as part of RPLM_QIMT_NOTIF_MAIN_COMP and I now need to configure the display output for a new application, but it doesn't work??
I have configured components and used components of a completely bespoke application and all works correctly, but when I configure the enhanced standard components RPLM_QIMT_NOTIF_MAIN_COMP & RPLM_QIMT_NOTIF_COMP the changes don't take effect???
Am I missing something? Is there something else I need to do to enable the configuration for standard (enhanced) webdynpro components?
Many thanks,
Drew

Hi Drew,
You have to explicitly load the component configuration using the following:
data: l_personalization    type ref to if_wd_personalization,
        l_current_controller type ref to if_wd_controller,
l_config type wdy_config_key.
l_current_controller ?= wd_this->wd_get_api( ).
l_personalization = l_current_controller->get_personalization_manager( ).
      l_config-config_id = 'ZCOMPCONF'.
      l_config-config_type = '00'.
      call method l_personalization->load_config_by_key
        exporting
          config_key            = l_config.
Hopefully this will do the trick !

Mac Pro and disk configuration for DV

I have a MacPro with a 2 500gb and a 250gb internal disks. OSX is installed on one of the 500gb drives, I have the other 500 for data, like finalcut content, and the 250 for bootcamp (windows xp). I also have a 500gb WD mybook premium that I use for time machine.
I would like to add some more space dedicated to video.
I was thinking about was a WD mybook studio pro II 1TB using a stripe set. Here is where it gets messy in my opinion. Should I use FW800, or should I use eSata?
My next problem: I have 1TB of space on a nice fast raid0, but no redundancy. What should I do now? I can get another 1TB mybook (fw400) and do nightly backups, but with what? I would like to use time machine, but from what I read, you can only use 1 disk with it. I could use the software that comes on the mybook to do the backup, looks like it would work, but not all that pretty.
What I was thinking, get a 1TB fw drive and use it for time machine and back up the 500gb OS drive, and the 500gb data drive. I could get another 1tb drive and backup the mybook studio pro II nightly. That way I will never loose more than 1 days work.
The other thing I was thinking was use 2 mybook studio pro 2's and do a software raid1 and mirror them. So i would basicly have a raid 0+1 (mirrored stripeset). the stripes would be hardware raid, and the mirror would be software. From what I hear, software raid doesnt perform that well. Also, what interfaces would I use. I only have 1 fw800 port on the back, and would rather not plug 1 in the back, and 1 in the front. and it would be bad to use 1 fw800 and 1 fw400.
just trying to get the best balance between performace, reliability, and cost.
Any help would be great!
Thanks!
Brian

I would go easy on WD MyBook. Why the fondness for vendor? check out threads and reports on hard drives like MacIntouch.
http://www.macintouch.com/readerreports/harddrives/topic3970.html#d20aug2008
Put to rest the idea of mirroring. One drive today can saturate FW800. Mirrors are not as useful as backup and its built-in? Another: Apple dropped 0+1 for good reason in Leopard. But you heard software RAID...? Apple RAID is fine, done right.
Invest in a single 4-channel PCIe SATA controller and then you can use SATA drives, and do more than all these other FW drives, cables, all of which run on the single FW bus. Load your 500GB drives there and replace with newer drives (OS X, scratch, data).
If/when you need faster or better drives:
http://www.barefeats.com/harper14.html
http://eshop.macsales.com/item/Western%20Digital/WD6400AAKS/
TB drives: http://www.barefeats.com/hard94.html
Add WinClone and/or Windows backup software to backup to one of your existing FW drives, may as well use them for something.
TimeMachine will by default backup all drives. I don't like that. You can have multiple TM sets, nothing to stop you. Definitely don't rely on one backup set or strategy. Definitely use SuperDuper to keep working backups of your system too. You can backup to sparse disk images.
You have PCI Express to add disk controllers, you don't need to rely on USB or Firewire. And if you want to add FW/USB, less trouble and better Mac support with Oxford based OWC Mercury cases.
http://www.macsales.com/firewire/

Performance Mgmt - Define tabs and process configuration for templates

Hi,
I would like to utlize the feature of process/phase/step configuration for appraisals by the Web Dynpro configuration for tab and process. I choose the "Process Configuration" tab, enter my appraisal template and period, and click "Start Selection". A warning is displayed "No process defined for <my appraisal template>". Clicking on "Add" and no matter what I did, I don't seem to be able to maintain any process/phase/step into the "Configure Available Elements for Process" table. What is the pre-requisite to maintain and configure the Process/Phase/Step(s) ?
How do I maintain the in preparation, in planning etc statuses in here, I created templates using SAP defined templates for ex: templates for performance feedback etc., statuses are maintained in there by default.
Can you please suggest anything?
Thanks
Murthy

>
Munna wrote:
> Hi,
>
> I would like to utlize the feature of process/phase/step configuration for appraisals by the Web Dynpro configuration for tab and process. I choose the "Process Configuration" tab, enter my appraisal template and period, and click "Start Selection". A warning is displayed "No process defined for <my appraisal template>". Clicking on "Add" and no matter what I did, I don't seem to be able to maintain any process/phase/step into the "Configure Available Elements for Process" table. What is the pre-requisite to maintain and configure the Process/Phase/Step(s) ?
>
> How do I maintain the in preparation, in planning etc statuses in here, I created templates using SAP defined templates for ex: templates for performance feedback etc., statuses are maintained in there by default.
>
> Can you please suggest anything?
>
> Thanks
> Murthy
Hi Munny, I am experiencing the same condition. I have released my template and when I go thru the IMG to the 'Define Tabs & Process Configuration' selection I get the browser screen for setting up the tabs and process. I click on the Process tab and see the screen but the New and Delete buttons are not active (grey'ed out). I toggled my review template (cancelled release and re-released) to see if it changed the symptoms but it did not.
All - are there other conditions that must be met before setting up the Process steps vis the IMG ? I have all of the Status/substatus config complete and it shows up in the right side, but I cannot add anything to the left side to define the process.
Chris Thomas
Duke University

Need to understand basics of Oracle RAC and Grid technology, for training

I need to understand Oracle RAC and Grid infrastructure, from a manager's / training perspective.
I see links here and here, so a couple questions:
- what's the basic difference from a layman's (e.g., a manager's) perspective ?
- What training options are available for a generic 11g DBA to learn this new technology ? I've seen this course from an Oracle partner ("Course:Oracle 11g: RAC and Grid Infrastructure Administration Accelerated Release 2"), for a boat load of money, for 5 days I think. So we're looking for something a little more reasonable (and accessible), e.g., books, online, etc.

Wm Peck 1958 wrote:
I need to understand Oracle RAC and Grid infrastructure, from a manager's / training perspective.
I see links here and here, so a couple questions:
- what's the basic difference from a layman's (e.g., a manager's) perspective ?
- What training options are available for a generic 11g DBA to learn this new technology ? I've seen this course from an Oracle partner ("Course:Oracle 11g: RAC and Grid Infrastructure Administration Accelerated Release 2"), for a boat load of money, for 5 days I think. So we're looking for something a little more reasonable (and accessible), e.g., books, online, etc.
For a very basic definition, RAC is technology that is used by the database and GI is the infrastructure that makes RAC work. In a forum reply, that's probably all what can be said about both. For a very lengthy answer, you should read the links that you have quoted.
For #2, the course that you are looking at is called Accelerated as it combines two courses in a single week training-RAC(4) and GI(3). So it's a 7 day curriculum that one would be doing in a 5 day course and that should justify its cost. But let me say, it's a really really good course. But on the other side, it can be quite overwhelming for someone who doesn't know about these technologies already. So I shall suggest that you send your team to each course individually and probably after doing some homework . They can start reading the following books,
Pro Oracle Database 11g RAC on Linux
https://www.mheducation.co.in/html/9781259004063.html
And this doc link,
Oracle Database Online Documentation 11g Release 2 (11.2)
Aman....

SSL and Credentials configuration for webas

Hi..
I got a doubt in SSL certificate configuration.When i need to configure a JAVA engine for activating SSL.I would create .CSR and get signed from Trust center which inturn gives three certificate root,intermediate and original certificate and so we can configure the JAVA URL as https://<hostname>:<port no>:500001/...
Now the same can also can be configured for ABAP WEBAS engine.my doubt is as per note : 510007,SAP has said to generate .PSE file and SSL configuration which will work in 443 port and HTTPS port as in SMICM transaction
But I have two instances running on single host.I have already configured HTTPS 443 for one instance say for ABAP webas.And If i need to configure for another instance, can i change the HTTPS port as per my requirement ????,because 443 has been assigned to another instance (earlier) .And Can i generate PSE file from that new port and get the certificate installed that is obtained from Trust center ???
Expecting you Ideas and solution for this scenario..
Thanks
Gopalakrishnan M

Hello Gopalakrishnan,
To specify the https port of ABAP, you can use paramenter
icm/server_port_<X> as PROT=HTTPS,PORT=<port>
I think the default port for http is like below
icm/server_port_0 as PROT=HTTP,PORT=80<instance_number>
Then you can just specify icm/server_port_1 for https.
Good luck,
Victor

Problems Oracle 9iDB and ASO Configuration for Cybersafe

Similar Messages

Maybe you are looking for