Problems with SSL using Apache proxy

I'm trying to use Apache+mod_ssl+openssl on linux RedHat 6.2 and mod_wl_ssl from WLS 5.1+SP5. Setting PathTrim in httpd.conf I'm able to send http request
to WebLogic Cluster located on outside machines. However, https requests don't work and I receive the following messages in httpd's error_log
[Fri Sep 1 13:44:01 2000] [notice] Apache/1.3.12 (Unix) mod_ssl/2.6.6 OpenSSL/0.9.5a configured -- resuming normal operations
[Fri Sep 1 13:44:28 2000] [notice] child pid 12329 exit signal Segmentation fault (11) Do you receive the same message in error_log
Any help you can provide will be appreciated.
Enrico

My client (Netscape browser) are making SSL connection to Apache.
I would use SSL3 from client to Apache then read the client certificate from
WebLogic (in back-end) servlet to check the user's attribute from ldap
server. Could you tell me if there is some example of keeping client
certificate from front-end web server to WebLogic servlet?
Thanks,
Enrico
Michael Girdley <[email protected]> wrote in message
[email protected]..
>
>
You're making SSL connections from Apache to WebLogic? Or your clientsare
making SSL connections to Apache?
Thanks,
Michael
Michael Girdley
BEA Systems Inc
"enrico notariale" <[email protected]> wrote in message
news:39b5fa6f$[email protected]..
I'm trying to use Apache+mod_ssl+openssl on linux RedHat 6.2 andmod_wl_ssl from WLS 5.1+SP5. Setting PathTrim in httpd.conf I'm able tosend
http request
to WebLogic Cluster located on outside machines. However, https
requests
don't work and I receive the following messages in httpd's error_log
[Fri Sep 1 13:44:01 2000] [notice] Apache/1.3.12 (Unix) mod_ssl/2.6.6OpenSSL/0.9.5a configured -- resuming normal operations
[Fri Sep 1 13:44:28 2000] [notice] child pid 12329 exit signalSegmentation fault (11) Do you receive the same message in error_log
Any help you can provide will be appreciated.
Enrico

Similar Messages

  • Getting error "Problem with SSL Certificate" but I'm connecting to my private server without SSL

    I wanted to create a PDF from a subtree at a website. The first problem was that Acrobat Pro (11.0.7) wouldn't spider it (probably because there was a robot.txt file there) so I had to use SiteSucker to pull the pages down to my Mac.
    Then I discovered that Acrobat Pro can't handle file:/// URLs so that was no good either
    So then I copied all the pages to a folder on my Linux server where I use a non-standard port (86) for http connection as a minor security precaution.
    When I tried to access that from Acrobat Pro, it bitched about a problem with SSL Certificate but gave me no option to do anything about it. More relevantly, all the files were accessible using http protocol, not https so there shouldn't have been any need to deal with SSL certificates at all
    I had to temporarily enable port 80 on my apache server at which point it's now pulling all the files in and hopefully converting them.
    A) We're at version 11 ---- these kinds of issues should have been fixed years ago
    B) While you're at it, fix the stupid UI issue where the download dialog disappears completely if Acrobat Pro doesn't have the focus. On a long download, I'd like to be able to see progress while working on other stuff. Acrobat Pro is not the center of the universe!

    Interesting point 2, I am working on a Mac plugin at the moment. It does not hide its dialogs when switching to a different app. I consider this a bug and will fix it so the dialog disappears. I hadn't considered the question of progress but there is a very strong reason to do this on the Mac.
    My tests seem to show that
    (a) to get a dialog to sit above PDF documents all the time, it must be on a higher "level".
    (b) if a dialog is at a higher level, this is a global setting.
    So, if the dialog is not hidden when switching all, it will typically sit on top of the other app's document windows. This would not be popular, as the end user, unless they have mountains of screen space and choose to use it that way, must either close or move the dialog when switching app, then bring the dialog back.  So, because Acrobat Pro is not the centre of the universe, it will hide dialogs (or rather, the Mac will, as it's a standard option when creating a window).

  • To save time, could I get away with just using ProRes Proxy?

    Might be a dumb question.  But please play along with me...
    I've been battling with FCP-X since it first came out.  Beach balls, crashes, failed auto saves, you name it.  Sluggishness is my middle name.  But I think it might be because I'm trying to force too much quality through my older, less powerful machines and my little firewire 400 hard drive.  All three of my Mac are 3-4 years old, all are from the old "Core 2 Duo" era (not quad core processors), and are all maxed out at 4GB of RAM.  While I've read that many people are having performance problems with FCP-X even on brand spankin' new suped-up Mac Pros with lots more horsepower than I'm running, I've long thought that my machines and their lack of power by today's standards may be at the heart of my sluggishness problem, especially given that most of the material I work with is shot in 1080 HD.  (I've never actually tested it in FCP-X, but I'm assuming that things would speed along more like I've been used to in the past if I would just do everything in Standard Definition 480, but that ain't gonna happen.)
    Like many, I shoot most everything in 1080 HD (usually 24p, sometimes 30), unless I'm occasionally shooting 720 HD at 60i for later slowing down to slo-mo.
    Here's my question:  Most everything I edit is for web delivery, and 99 percent of it is for my own use (not clients).  Mostly podcast-like stuff, although occasionally I'll create something for my business website.  Most of what I do is talking head type stuff, not a lot of motion (except for the 720/60i slo-mo stuff, which usually has some motion, which is why I shoot it at 60i for slowing down).  Most of what I shoot is green screen talking heads, intended to be keyed in front of some innocuous background like some of the generators in FCP-X.  I want it to look good.  Even great.  But given the limitations of power on my machines, I also don't want to invest an eternity in rendering and processing time.  The work I'm doing with video just isn't that important.  It's mostly for grins.
    Until last night, I had been working exclusively in ProRes422 (aka "Optimized").  But last night I shot some footage and imported it into FCP-X, encoding it ONLY in ProRes Proxy.  And frankly, I couldn't discern any difference.  It looked every bit as good as the 422 stuff I'd shot before.  There was absolutely no difference to my naked eye.  That said, the footage I shot last night to test this out was not shot in front of the green screen (I'll test that out today or tonight), so maybe the Proxy footage won't key as well.  (I've been stunned at how good the keyer is in FCP-X, but up to this point I've only been keying ProRes422 footage, not Proxy.)  But really, based on just eyeballing the footage, I couldn't tell the difference between the Proxy footage and all the other footage I'd shot previously that had been imported and converted to "Optimized" ProRes422.
    I'm not looking to deliver anything for broadcast television (if I were, I'd for sure use 422).  I'm not doing any feature film type stuff.  My video work consists mainly of stuff just for me, for my own personal amusement (and for the amusement of anyone who might watch it on the web).  It's intended for YouTube, Vimeo, or occasionally (in smaller dimensions than 1920x1080) for deployment on my company website.  Mostly, it's just me doing podcast-type stuff.  Occasionally I'll shoot and edit something for church, or for friends.  I like to think the production values of my stuff tend to be higher than, say, the footage Aunt Delores shot at Uncle Ralph's birthday party (okay, A LOT higher than that!).  But my stuff isn't going to air on "Good Morning Flatbush" either (unless, on the off chance it should happen to go viral).
    So let me make my question as clear as possible:  Could I not get away with just using ProRes Proxy throughout my entire work flow, end to end, never switching over to ProRes 422 even when exporting?  Honestly, it has taken hours just to render the keyed green screen footage on a 15 minute video, and just the other night, it took the better part of 4 hours (after it was already rendered) to export a 15 minute ProRes422 sequence to YouTube (and then the darn thing timed out, essentially wasting all my time).  I'd rather just stay in Proxy the whole way through if doing so would streamline my workflow without compromising too much quality in the "look" of the video.  Based on my very limited use of Proxy (just testing it out last night for the first time), I couldn't tell the difference.  Maybe for web deployment, Proxy is all I really need.
    Have any of you just stayed in Proxy the whole way through, never switching to 422 even when exporting?  Might this be an acceptable work flow for some of us, especially those of us on older, less powerful machines?  Is this a viable solution?  Do any of you work this way?  What's your level of satisfaction?
    Thoughts?

    A lot of what I'm shooting is being shot on a Canon XA-10.  Some (and certainly all of the 720 footage, but some of the 1080) is shot on a 7D.  And still more is shot on either an iPhone 4S, or even on a Flip Ultra (720p, 30fps).
    Most is shot on the XA-10.
    What I'm trying to avoid is the excessive render times (doesn't the ProRes 422 footage have to render as well?), and the ridiculously long times it takes to export.  Would all that not be reduced significantly by sticking to Proxy the whole way?  And what would the trade-off be?  I mean, I honestly can't see any discernible difference.  Maybe I will when I try to pull a decent key.  (Haven't gotten that far yet in my Proxy experimentation.)
    Of course, editing in Proxy and outputting using 422 requires that FCP-X encode to BOTH when importing, right?  Doesn't that add yet another bit of time to the overall process?
    I'm trying to streamline, and to reduce the overall amount of time I'm spending doing this stuff.

  • Problem with BAPI_CUSTOMER_CREATEFROMDATA1 using JCo on IDES

    sorry, wrong board - i opened a new post
    Problem with BAPI_CUSTOMER_CREATEFROMDATA1 using JCo on IDES
    Hello everyone,
    we are working on a student project and would like to create customers (debtors) in an SAP IDES system.
    Using the ref-customer to copy from, and some personal-data below, we get the error message
    'Internal error: External no.assignment for reference customer/customer'
    We also tried with BAPI_CUSTOMER_GETINTNUMBER, and ACCOUNTGROUP ZINT (New Internet Customer, others won't work?). But CREATEFROMDATA1 takes no CustomerNo created this way, nor it wants to create one 'internal'?
    Any suggestions? Thanks a lot for your help,
    Greetings,
    Tobias Schmidbauer
              inParams = function.getImportParameterList().getStructure(
                   "PI_COPYREFERENCE");
              inParams.setValue("0000001000", "REF_CUSTMR");
              inParams.setValue("1000", "SALESORG");
              inParams.setValue("10", "DISTR_CHAN");
              inParams.setValue("00", "DIVISION");
              inParams =function.getImportParameterList().getStructure(
                   "PI_PERSONALDATA");
              inParams.setValue("Simpson", "LASTNAME");
              inParams.setValue("Homer", "FIRSTNAME");
              inParams.setValue("Jay","MIDDLENAME");
              inParams.setValue("Springfield", "CITY");
              inParams.setValue("DE", "LANGU_P");
              inParams.setValue("DE", "LANGUP_ISO");
              inParams.setValue("DE", "COUNTRY");
              inParams.setValue("EUR", "CURRENCY");
              inParams.setValue("12345", "POSTL_COD1");
    Message was edited by: Tobias Schmidbauer

    Hello Brian,
    Thanks for your pointer. Actually The customer's reference number i was providing in the PI_COPYREFERENCE structure was a sold-to party customer and it uses external customer number assignment. When i used "New Internet Customer" (that doesnt use external assignment by default) as customer's account group, the customer was created successfully and assigned customer number was returned.
    I want to ask now how could we give a customer number in the BAPI as i am unable to find any such column in any of the tables. (Customer number is an "out" parameter so it can only return the number of created customer). Secondly, how to chnage the external assignment property of a particular account group (like sold-to party). i.e, how could we change the account group configurations through SAP GUI??
    - Umair

  • TS3899 iPad mail account says problem with 'ssl settings' - can you help me?

    iPad mail account says problem with 'ssl settings' - can you help me?

    The 4Gs hardware, only 256 MB of RAM, prohibits updating beyond 6.1.6.
    Starting when iOS 7 was released, Apple now allows downloading the last compatible version of some apps (iOS 4.2.1 and later only)
    App Store: Downloading Older Versions of Apps on iOS - Apple Club
    App Store: Install the latest compatible version of an app
    You first have to download the non-compatible version on your computer. Then when you try to purchase the version on your iPod you will be offered a compatible version if one exists.

  • Problem with SSL weblogic plug in and Apache

    We're using mod_wl_22.so with Apache, and after some problems with the mod failing on startup it is now working. We can access the weblogic SSL page fine directly on port 16101 with no warning, when we try via the proxy we get a failure of server Apache bride --------------------------------------------------------------------------------
    No backend server available for connection: timed out after 10 seconds or idempotent set to OFF. And in the wl_proxy.log there is a message that I think relates to the trustedcertfile in our http.conf file. We have a root certificate in pem format as the trustedcertfile.
    ================New Request: [GET /irm_desktop HTTP/1.1] =================
    Thu Jan 27 21:52:15 2011 <258812961651354> INFO: SSL is configured
    Thu Jan 27 21:52:15 2011 <258812961651354> INFO: SSL configured successfully
    Thu Jan 27 21:52:15 2011 <258812961651354> Using Uri /irm_desktop
    Thu Jan 27 21:52:15 2011 <258812961651354> After trimming path: '/irm_desktop'
    Thu Jan 27 21:52:15 2011 <258812961651354> The final request string is '/irm_desktop'
    Thu Jan 27 21:52:15 2011 <258812961651354> SEARCHING id=[sealedinfo-prod:16101] from current ID=[sealedinfo-prod:16101]
    Thu Jan 27 21:52:15 2011 <258812961651354> The two ids matched
    Thu Jan 27 21:52:15 2011 <258812961651354> @@@FOUND...id=[sealedinfo-prod:16101], server_name=[uat.sealedinfo.com], server_port=[443]
    Thu Jan 27 21:52:15 2011 <258812961651354> attempt #0 out of a max of 5
    Thu Jan 27 21:52:15 2011 <258812961651354> Trying a pooled connection for '10.10.10.10/16101/16101'
    Thu Jan 27 21:52:15 2011 <258812961651354> getPooledConn: No more connections in the pool for Host[10.10.10.10] Port[16101] SecurePort[16101]
    Thu Jan 27 21:52:15 2011 <258812961651354> general list: trying connect to '10.10.10.10'/16101/16101 at line 2658 for '/irm_desktop'
    Thu Jan 27 21:52:15 2011 <258812961651354> New SSL URL: match = 0 oid = 22
    Thu Jan 27 21:52:15 2011 <258812961651354> Connect returns -1, and error no set to 10035, msg 'Unknown error'
    Thu Jan 27 21:52:15 2011 <258812961651354> EINPROGRESS in connect() - selecting
    Thu Jan 27 21:52:15 2011 <258812961651354> Setting peerID for new SSL connection
    Thu Jan 27 21:52:15 2011 <258812961651354> 0a0a 0a0a e53e 0000 .....>..
    Thu Jan 27 21:52:15 2011 <258812961651354> Local Port of the socket is 63867
    Thu Jan 27 21:52:15 2011 <258812961651354> Remote Host 10.10.10.10 Remote Port 16101
    Thu Jan 27 21:52:15 2011 <258812961651354> general list: created a new connection to '10.10.10.10'/16101 for '/irm_desktop', Local port:63867
    Thu Jan 27 21:52:15 2011 <258812961648171> WARN: GetSessionCallback: No session match found
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: SSL certificate chain validation failed: 3015
    Thu Jan 27 21:52:16 2011 <258812961651354> trusted certs = 0
    Thu Jan 27 21:52:16 2011 <258812961651354> dumping cert chain
    Thu Jan 27 21:52:16 2011 <258812961651354> commonName is uat.sealedinfo.com
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: DeleteSessionCallback: No match found!!
    Thu Jan 27 21:52:16 2011 <258812961651354> ERROR: SSLWrite failed
    Thu Jan 27 21:52:16 2011 <258812961651354> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> Marking 10.10.10.10:16101 as bad
    Thu Jan 27 21:52:16 2011 <258812961651354> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0,  line 794 of ../nsapi/URL.cpp]: at line 3094
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Closing SSL context
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Error after SSLClose, socket may already have been closed by peer
    Thu Jan 27 21:52:16 2011 <258812961651354> Failing over after WRITE_ERROR_TO_SERVER exception in sendRequest()
    Thu Jan 27 21:52:16 2011 <258812961651354> attempt #1 out of a max of 5
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: trying connect to '10.10.10.10'/16101/16101 at line 2658 for '/irm_desktop'
    Thu Jan 27 21:52:16 2011 <258812961651354> New SSL URL: match = 0 oid = 22
    Thu Jan 27 21:52:16 2011 <258812961651354> Connect returns -1, and error no set to 10035, msg 'Unknown error'
    Thu Jan 27 21:52:16 2011 <258812961651354> EINPROGRESS in connect() - selecting
    Thu Jan 27 21:52:16 2011 <258812961651354> Setting peerID for new SSL connection
    Thu Jan 27 21:52:16 2011 <258812961651354> 0a0a 0a0a e53e 0000 .....>..
    Thu Jan 27 21:52:16 2011 <258812961651354> Local Port of the socket is 63868
    Thu Jan 27 21:52:16 2011 <258812961651354> Remote Host 10.10.10.10 Remote Port 16101
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: created a new connection to '10.10.10.10'/16101 for '/irm_desktop', Local port:63868
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: GetSessionCallback: No session match found
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: SSL certificate chain validation failed: 3015
    Thu Jan 27 21:52:16 2011 <258812961651354> trusted certs = 0
    Thu Jan 27 21:52:16 2011 <258812961651354> dumping cert chain
    Thu Jan 27 21:52:16 2011 <258812961651354> commonName is uat.sealedinfo.com
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: DeleteSessionCallback: No match found!!
    Thu Jan 27 21:52:16 2011 <258812961651354> ERROR: SSLWrite failed
    Thu Jan 27 21:52:16 2011 <258812961651354> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> Marking 10.10.10.10:16101 as bad
    Thu Jan 27 21:52:16 2011 <258812961651354> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0,  line 794 of ../nsapi/URL.cpp]: at line 3094
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Closing SSL context
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Error after SSLClose, socket may already have been closed by peer
    Thu Jan 27 21:52:16 2011 <258812961651354> Failing over after WRITE_ERROR_TO_SERVER exception in sendRequest()
    Thu Jan 27 21:52:16 2011 <258812961651354> attempt #2 out of a max of 5
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: trying connect to '10.10.10.10'/16101/16101 at line 2658 for '/irm_desktop'
    Thu Jan 27 21:52:16 2011 <258812961651354> New SSL URL: match = 0 oid = 22
    Thu Jan 27 21:52:16 2011 <258812961651354> Connect returns -1, and error no set to 10035, msg 'Unknown error'
    Thu Jan 27 21:52:16 2011 <258812961651354> EINPROGRESS in connect() - selecting
    Thu Jan 27 21:52:16 2011 <258812961651354> Setting peerID for new SSL connection
    Thu Jan 27 21:52:16 2011 <258812961651354> 0a0a 0a0a e53e 0000 .....>..
    Thu Jan 27 21:52:16 2011 <258812961651354> Local Port of the socket is 63869
    Thu Jan 27 21:52:16 2011 <258812961651354> Remote Host 10.10.10.10 Remote Port 16101
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: created a new connection to '10.10.10.10'/16101 for '/irm_desktop', Local port:63869
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: GetSessionCallback: No session match found
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: SSL certificate chain validation failed: 3015
    Thu Jan 27 21:52:16 2011 <258812961651354> trusted certs = 0
    Thu Jan 27 21:52:16 2011 <258812961651354> dumping cert chain
    Thu Jan 27 21:52:16 2011 <258812961651354> commonName is uat.sealedinfo.com
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: DeleteSessionCallback: No match found!!
    Thu Jan 27 21:52:16 2011 <258812961651354> ERROR: SSLWrite failed
    Thu Jan 27 21:52:16 2011 <258812961651354> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> Marking 10.10.10.10:16101 as bad
    Thu Jan 27 21:52:16 2011 <258812961651354> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0,  line 794 of ../nsapi/URL.cpp]: at line 3094
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Closing SSL context
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Error after SSLClose, socket may already have been closed by peer
    Thu Jan 27 21:52:16 2011 <258812961651354> Failing over after WRITE_ERROR_TO_SERVER exception in sendRequest()
    Thu Jan 27 21:52:16 2011 <258812961651354> attempt #3 out of a max of 5
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: trying connect to '10.10.10.10'/16101/16101 at line 2658 for '/irm_desktop'
    Thu Jan 27 21:52:16 2011 <258812961651354> New SSL URL: match = 0 oid = 22
    Thu Jan 27 21:52:16 2011 <258812961651354> Connect returns -1, and error no set to 10035, msg 'Unknown error'
    Thu Jan 27 21:52:16 2011 <258812961651354> EINPROGRESS in connect() - selecting
    Thu Jan 27 21:52:16 2011 <258812961651354> Setting peerID for new SSL connection
    Thu Jan 27 21:52:16 2011 <258812961651354> 0a0a 0a0a e53e 0000 .....>..
    Thu Jan 27 21:52:16 2011 <258812961651354> Local Port of the socket is 63870
    Thu Jan 27 21:52:16 2011 <258812961651354> Remote Host 10.10.10.10 Remote Port 16101
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: created a new connection to '10.10.10.10'/16101 for '/irm_desktop', Local port:63870
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: GetSessionCallback: No session match found
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: SSL certificate chain validation failed: 3015
    Thu Jan 27 21:52:16 2011 <258812961651354> trusted certs = 0
    Thu Jan 27 21:52:16 2011 <258812961651354> dumping cert chain
    Thu Jan 27 21:52:16 2011 <258812961651354> commonName is uat.sealedinfo.com
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: DeleteSessionCallback: No match found!!
    Thu Jan 27 21:52:16 2011 <258812961651354> ERROR: SSLWrite failed
    Thu Jan 27 21:52:16 2011 <258812961651354> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> Marking 10.10.10.10:16101 as bad
    Thu Jan 27 21:52:16 2011 <258812961651354> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0,  line 794 of ../nsapi/URL.cpp]: at line 3094
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Closing SSL context
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Error after SSLClose, socket may already have been closed by peer
    Thu Jan 27 21:52:16 2011 <258812961651354> Failing over after WRITE_ERROR_TO_SERVER exception in sendRequest()
    Thu Jan 27 21:52:16 2011 <258812961651354> attempt #4 out of a max of 5
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: trying connect to '10.10.10.10'/16101/16101 at line 2658 for '/irm_desktop'
    Thu Jan 27 21:52:16 2011 <258812961651354> New SSL URL: match = 0 oid = 22
    Thu Jan 27 21:52:16 2011 <258812961651354> Connect returns -1, and error no set to 10035, msg 'Unknown error'
    Thu Jan 27 21:52:16 2011 <258812961651354> EINPROGRESS in connect() - selecting
    Thu Jan 27 21:52:16 2011 <258812961651354> Setting peerID for new SSL connection
    Thu Jan 27 21:52:16 2011 <258812961651354> 0a0a 0a0a e53e 0000 .....>..
    Thu Jan 27 21:52:16 2011 <258812961651354> Local Port of the socket is 63871
    Thu Jan 27 21:52:16 2011 <258812961651354> Remote Host 10.10.10.10 Remote Port 16101
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: created a new connection to '10.10.10.10'/16101 for '/irm_desktop', Local port:63871
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: GetSessionCallback: No session match found
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: SSL certificate chain validation failed: 3015
    Thu Jan 27 21:52:16 2011 <258812961651354> trusted certs = 0
    Thu Jan 27 21:52:16 2011 <258812961651354> dumping cert chain
    Thu Jan 27 21:52:16 2011 <258812961651354> commonName is uat.sealedinfo.com
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: DeleteSessionCallback: No match found!!
    Thu Jan 27 21:52:16 2011 <258812961651354> ERROR: SSLWrite failed
    Thu Jan 27 21:52:16 2011 <258812961651354> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> Marking 10.10.10.10:16101 as bad
    Thu Jan 27 21:52:16 2011 <258812961651354> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0,  line 794 of ../nsapi/URL.cpp]: at line 3094
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Closing SSL context
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Error after SSLClose, socket may already have been closed by peer
    Thu Jan 27 21:52:16 2011 <258812961651354> Failing over after WRITE_ERROR_TO_SERVER exception in sendRequest()
    Thu Jan 27 21:52:16 2011 <258812961651354> attempt #5 out of a max of 5
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: trying connect to '10.10.10.10'/16101/16101 at line 2658 for '/irm_desktop'
    Thu Jan 27 21:52:16 2011 <258812961651354> New SSL URL: match = 0 oid = 22
    Thu Jan 27 21:52:16 2011 <258812961651354> Connect returns -1, and error no set to 10035, msg 'Unknown error'
    Thu Jan 27 21:52:16 2011 <258812961651354> EINPROGRESS in connect() - selecting
    Thu Jan 27 21:52:16 2011 <258812961651354> Setting peerID for new SSL connection
    Thu Jan 27 21:52:16 2011 <258812961651354> 0a0a 0a0a e53e 0000 .....>..
    Thu Jan 27 21:52:16 2011 <258812961651354> Local Port of the socket is 63872
    Thu Jan 27 21:52:16 2011 <258812961651354> Remote Host 10.10.10.10 Remote Port 16101
    Thu Jan 27 21:52:16 2011 <258812961651354> general list: created a new connection to '10.10.10.10'/16101 for '/irm_desktop', Local port:63872
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: GetSessionCallback: No session match found
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: SSL certificate chain validation failed: 3015
    Thu Jan 27 21:52:16 2011 <258812961651354> trusted certs = 0
    Thu Jan 27 21:52:16 2011 <258812961651354> dumping cert chain
    Thu Jan 27 21:52:16 2011 <258812961651354> commonName is uat.sealedinfo.com
    Thu Jan 27 21:52:16 2011 <258812961648171> WARN: DeleteSessionCallback: No match found!!
    Thu Jan 27 21:52:16 2011 <258812961651354> ERROR: SSLWrite failed
    Thu Jan 27 21:52:16 2011 <258812961651354> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
    Thu Jan 27 21:52:16 2011 <258812961651354> Marking 10.10.10.10:16101 as bad
    Thu Jan 27 21:52:16 2011 <258812961651354> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0,  line 794 of ../nsapi/URL.cpp]: at line 3094
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Closing SSL context
    Thu Jan 27 21:52:16 2011 <258812961651354> INFO: Error after SSLClose, socket may already have been closed by peer
    Thu Jan 27 21:52:16 2011 <258812961651354> Failing over after WRITE_ERROR_TO_SERVER exception in sendRequest()
    Thu Jan 27 21:52:16 2011 <258812961651354> request [irm_desktop] did NOT process successfully..................

    I see that it is six months ago that I first posted this. Nothing has changed. When I use affixa to create a message with an attachment from my gmail account in firefox, the message is created in drafts, but the gmail window is closed and I have to re-open it. Not critical, but annoying.
    Now there is a plug-in on the affixa site that is supposed to be designed for Firefox, and which affixa support claims should take care of this. And I've downloaded it twice. When you download it and open it, it says that it will be installed when Firefox restarts, and gives you a button to restart Firefox. But after you click that button and firefox disappears and re-appears, the affixa plug-in is NOT in the plugin list.
    Please, somebody, HELP.

  • Strange problem with SSL Sockets using more than 10 Clients

    Hi
    I�m using Jsse ( JDK 1.4.2_06 ). I have coded a Client/Server Applikation acting over SSLSockets or over unsecured Sockets. If I use unsecured Sockets everthing works fine, but if I use SSLSockets for the Connection and about 20 Clients, the Clients often can�t connect to the Server and the following Exception was thrown:
    java.net.ConnectException: Connection refused: connect
    Could it be that there is some strange problem with SSLServerSockets relating to this phenomenon?
    If I use only a few Clients the Exception occurs never or only sometimes.
    Has anyboby an idea what is happaning there?
    Regards Chrisli

    Hi
    From the description of your scenario, you have coded your own server side of the application. I would advise that you consider moving your application to run under Tomcat framework and test if you still get the same exception.

  • Problem with SSL

    I have created a java application that communicates with a Server via HTTPS.
    I use both jdk and jre 1.5
    I know this has somthing to do with Certificates and Storing them
    But i dont know exactly what to do.
    Can Som1 pls help me
    javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
         at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150)
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1518)
         at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:174)
         at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:168)
         at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:848)
         at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:106)
         at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
         at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:433)
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:818)
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1030)
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:622)
         at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
         at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
         at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
         at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(HttpConnection.java:827)
         at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1975)
         at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:993)
         at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:397)
         at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
         at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)
         at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:324)
         at lk.informatics.infopro.connector.command.AptiloHTTPCommand.httpPost(AptiloHTTPCommand.java:106)
         at lk.informatics.infopro.connector.command.AptiloHTTPCommand.performTask(AptiloHTTPCommand.java:134)
         at lk.informatics.infopro.connector.SimpleRMIImpl.performTask(SimpleRMIImpl.java:112)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:585)
         at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:294)
         at sun.rmi.transport.Transport$1.run(Transport.java:153)
         at java.security.AccessController.doPrivileged(Native Method)
         at sun.rmi.transport.Transport.serviceCall(Transport.java:149)
         at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:466)
         at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:707)
         at java.lang.Thread.run(Thread.java:595)
    Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
         at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:221)
         at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:145)
         at sun.security.validator.Validator.validate(Validator.java:203)
         at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:172)
         at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(SSLContextImpl.java:320)
         at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:841)
         ... 30 more
    Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
         at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:236)
         at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:194)
         at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:216)
         ... 35 more

    The problem that i had was that my application was unable to find a valid certificate that proved that the site can be trusted.
    What you need to do is to tell the application that the site can be trusted and point it to a certificate that proves the site that you want to communicate with is a valid one.
    If the application cannot find a proper certificate then it results in a failed SSL handshake.
    What you must do is save the certificate provided by the site you wish to communicate and point the application to it. Done in 3 steps
    1.     Save the certificate provided by the end site on the as a .cer file
         eg:- theSite.cer
         This can be done via IE or Mozilla (Has not been tested with Mozilla yet)
    To do this open the site on your browser, When the browser asks if you
    wish to accept the certificate provided by the site view the certificate and
    save it.
    2.     Create a keyStore and add the saved certificate to it. Use the java "keytool" command in the command prompt to achive this
         keytool -import -alias ALIAS -file CERTIFICATE.cer -keystore KEY_STORE_NAME
         eg:-
         keytool -import -alias test -file theSite.cer -keystore TS
    3.     In you application make sure that you specify where to look for the Trusted Key Store in.
         System.setProperty("javax.net.ssl.trustStore", "TRUST_STORE_NAME");
         System.setProperty("javax.net.ssl.trustStorePassword", "TRUST_STORE_PASSWORD");
         eg:-
         System.setProperty("javax.net.ssl.trustStore", "C:\\Key_Store\\TS");
         System.setProperty("javax.net.ssl.trustStorePassword", "XXX");
         ALT: you can also specify the above values on the java execution command as
    -Djavax.net.ssl.trustStore=C:\Key_Store\TS -Djavax.net.ssl.trustStorePassword=XXX
    -Djavax.net.debug=all
    Can be used to view all debug information.
    Simply put we save the sites certificate in step 1. create a new KeyStore and and save the certificate in it in step 2 and show the application where to look for the valid certificate by pointing it to the proper keyStore in step 3.
    Note that you can save multiple certificates on the same keyStore.
    If you have any problems with this let me know

  • Problems with IE w/ Apache bridge

    We're recently switched over from IIS as our front end web server to Apache
    1.3.12. On our login page for one of our site using IE 4.x / 5.x, we've
    noticed this to be extremely slow (about 45 seconds) just to login. Once
    you login to the site, the site is very fast. However, this is not the case
    with Netscape (4.x/5.x). Netscape works fine all of the time and is very
    fast with Apache.
    Is there a known bug with IE?
    All our login page does is pass username & password parameters to the
    weblogic server.
    This site doesn't have any problems with Netscape, going directly to the WLS
    on the specified port, or when we used IIS. The only time this shows up is
    when a user would login. Once they're in, they're flying!
    This is only IE related. Is there some sort of odd setting in IE to hold up
    a form like this?
    Our config looks like this:
    Web server: Linux 7.0; Apache 1.3.12 + apache-linux-bridge-sp5
    Weblogic Server: Windows 2000, WLS 5.1, sp5
    Database
    Has anyone seen this before?

    Thanks for the help everyone, but BEA sent us a beta-version of the new
    proxy for Apache on LINUX. This fixed the problem, and should be fixed in
    the next service pack.
    "mreiche" <[email protected]> wrote in message
    news:3a19ee1e$[email protected]..
    >
    See this article - we found a similar problem due to a sendRedirect() andfixed it by using a jsp:forward
    instead.
    http://newsgroups.bea.com/cgi-bin/dnewsweb?cmd=article&group=weblogic.develo
    per.interest.jsp&item=3835&utag=
    >
    Mike Reiche
    "Charlie Crook" <[email protected]> wrote:
    Is the delay in loading your login page within the browser, or after the
    user submits it?
    Does the page contain IIS extensions ( which are no longer needed )?
    "Mike Kendzierski" <[email protected]> wrote in message
    news:3a120fa3$[email protected]..
    We're recently switched over from IIS as our front end web server toApache
    1.3.12. On our login page for one of our site using IE 4.x / 5.x,
    we've
    noticed this to be extremely slow (about 45 seconds) just to login.Once
    you login to the site, the site is very fast. However, this is not thecase
    with Netscape (4.x/5.x). Netscape works fine all of the time and is
    very
    fast with Apache.
    Is there a known bug with IE?
    All our login page does is pass username & password parameters to the
    weblogic server.
    This site doesn't have any problems with Netscape, going directly tothe
    WLS
    on the specified port, or when we used IIS. The only time this shows
    up
    is
    when a user would login. Once they're in, they're flying!
    This is only IE related. Is there some sort of odd setting in IE to
    hold
    up
    a form like this?
    Our config looks like this:
    Web server: Linux 7.0; Apache 1.3.12 + apache-linux-bridge-sp5
    Weblogic Server: Windows 2000, WLS 5.1, sp5
    Database
    Has anyone seen this before?

  • Problem with SSL Activated on SSO Login

    Hi Guys,
    One of my applications has recently hit a few problems when SSL was activated on several environments. My application requires you to login using a SSO username and password before you can use the application. Before SSL was implemented, when you pressed the main menu button the page would redirect to the login server and the SSO login would remember your details and log you in again and then take you to the 1st page with a new session id. However, with SSL implemented, when the main menu button is pressed it redirects you to the login server but this time it asks you to enter your username and password. This is a problem as every time authentication is required on my application, it will keep telling you to login even if you have already done so before.
    For extra information, the main menu button (which is a navigation bar entry) redirects you to a piece of javascript which is used to take you back to the 1st page depending on what page you are on.
    I am also using the latest version of APEX.
    Any help is much appreciated as I am not sure where to go with this problem.
    Also is it a problem with the SSL setup or my application?
    Thanks
    -Mark

    I have tried to pass the cookie through the URL to the login server but this does nothing.I can't imagine what you mean by that or what exactly you did.
    it just takes me to the login page and resets the session id after i have logged in again!What do you mean by "reset"?
    How can I make cookies be accepted by SSL?Have you constructed an experiment to prove that this is the problem?
    Is there something i can put in the application itself?Definitely not.
    Scott

  • Problem with inbuilt Solaris Apache Web Server v 2.0.58

    Hi,
    Set-up:
    We are working on a custom application which works with the inbuilt Apache Web Server on the Sun Solaris platform. Here are the details of the versions of the various components involved:
    Apache Web Server: Version 2.0.58
    Platform: SunOS 5.10 Generic_127111-03
    Our application is in the form of a shared library(.so binary) which is loaded into the Apache Web Server by mentioning the following directive in the Apache Web Server's configuration file (httpd.conf).
    LoadModule at_module "/var/apache2/logs/sample/sample.so"
    where, sample.so is our application's binary
    and at_module is the name of the module.
    httpd.conf file has been attached for your reference.
    Attachments:
    httpd.conf - Apache Web Server's configuration file.
    sample-apache.cpp - Sample program which is showing the problem.
    httpd.h - Apache Software Foundation's file which contains the structure "request_rec" that represents the current request.
    Problem summary:
    For each request to the Apache Web server, the server maintains a table of type "apr_table_t" which contains the header environment from the request. There is a structure "request_rec" maintained in the httpd.h file:
    /** A structure that represents the current request */
    struct request_rec {
    /** The pool associated with the request */
    apr_pool_t *pool;
    /** Request method (eg. GET, HEAD, POST, etc.) */
    const char *method;
    /** MIME header environment from the request */
    apr_table_t *headers_in;
    In our case, when we try to retrieve the address of "headers_in", we get a NULL Value. Please refer to the attached "sample-apache.cpp" program. In this program, inside the access_checker() method, we try to retrieve the address of "headers_in" and get that as NULL:
    extern "C" int access_checker(request_rec *r)
         FILE * fp;
         fp = fopen("/var/apache2/logs/sample.txt", "a");
         fprintf(fp, "\n r->headers_in = %u, r->method = %s", r->headers_in, r->method);
         fclose(fp);
         return OK;
    Here is the output of the sample program after accessing the main page of the Web server:
    r->headers_in = 0, r->method = GET
    r->headers_in = 0, r->method = GET
    r->headers_in = 0, r->method = GET
    Though we are able to retrieve one member of the structure request_rec (method), we are not able to retrieve the address of the other member (headers_in).
    Observation:
    We made an interesting observation that when we used the same sample program with the inbuilt Apache 2.0.52 Web Server on Solaris, we were able to successfully retrieve the address of headers_in. Here are the details of the set-up which is working fine:
    Apache Web Server: Version 2.0.52
    Platform : SunOS 5.10 Generic_118822-30
    Thus, there is something different which has happened between the Sun's Solaris Apache Web Server's versions 2.0.52 and 2.0.58 which is making it unable to retrieve the address of the request headers (headers_in).
    I am requesting someone to kindly shed light on this difference and let us know if we need to change the way of retrieving the request headers for Solaris Apache 2.0.58.
    Thanks,
    Atul.

    The only way you can achieve it is by running the web server to listen on port 80
    Please change the port in your httpd.conf file for the webserver and restart it.
    If any other processes are running/using on port 80 on that machine, then please stop them, otherwise you will not be able to achieve your requirement.
    Arun

  • Problem with Consuming ABAP Server Proxy WSDL in InfoPath

    Tried to design a InfoPath (MS Office 2003) form from a WSDL file of a web service generated from an ABAP Server Proxy in a NW2004s SP10 system.  InfoPath rejected this WSDL with error “InfoPath cannot use the selected Web service method for receiving data because the method does not provide valid XML data”.  Tried other WSDL files from other web services from ABAP Proxy with InfoPath, all got rejected.
    Validated the WSDL file with XMLSPY, no error.  Tried to import the WSDL into XI 3.0, no error.  Also tried the WSDL in .NET C#, also worked fine.  It seemed only InfoPath does not like this WSDL from ABAP Proxy. 
    Created a similar web service in XI 3.0 and InfoPath had no problem with its WSDL.  Then I compared the two WSDL files.  There are differences.  After try and error on changing the differences, I have nailed down to the XML tag that caused the problem.  Please see the extracted WSDL line attached at the end.  In the XI 3.0 generated WSDL the wsdl:message and the wsdl:part have the same name.  In the ABAP Proxy generated WSDL the wsdl:part has the name “Parameters” which is different from the wsdl:message.  After I copied the wsdl:message name to the wsdl:part name, InfoPath accepted the WSDL file without any problem.
    I know the fix but I like to find out the root cause.  Is this a known issue?  Did we miss some configuration setting that’s causing this issue?  Any help will be much appreciated.
    WSDL from NW2004s SP10 ABAP Proxy
    <wsdl:message name="RegionR3GetList_Req_MT">
        <wsdl:part name="Parameters" element="tns:RegionR3GetList_Req_MT"/>
    </wsdl:message>
    <wsdl:message name="RegionR3GetList_Resp_MT">
        <wsdl:part name=" Parameters" element="tns:RegionR3GetList_Resp_MT"/>
    </wsdl:message>
    WSDL from XI 3.0 Interface
    <wsdl:message name="RegionR3GetList_Req_MT">
        <wsdl:part name="RegionR3GetList_Req_MT" element="tns:RegionR3GetList_Req_MT"/>
    </wsdl:message>
    <wsdl:message name="RegionR3GetList_Resp_MT">
        <wsdl:part name="RegionR3GetList_Resp_MT" element="tns:RegionR3GetList_Resp_MT"/>
    </wsdl:message>

    Anne Tarnoruder has pointed out to me that her SDN article "Consuming SAP Enterprise Services in a Microsoft Office InfoPath Form" has described the the cause and workaround of this issue on page 9.  I am extracting it below and mark this thread as answered.  Thanks to Anne but not sure how I can award point to her.
    Currently SAP supports only the Document style of WSDL, and not the Microsoft-specific RPC style, which causes a problem when consuming SAP services in the Microsoft environment. In this example, you need to apply a workaround that involves a minor correction of locally-stored WSDL files:
    a. In the Project Explorer toolbar, click the Show all files icon and expand the Web reference folder.
    b. For each Web reference in the project, perform the following steps:
    c. Open the WSDL file, replace all instances of <wsdl:part name="parameters" with <wsdl:part name="parameter" (remove the s in parameters) and save the file.
    d. Right-click the Reference.map file and choose Run Custom Tool to invoke a utility that generates code for XML Web services. This recreates the local proxy.

  • Having a problem with creating/using a primary key on a view

    I have a problem with a primary key on a view
    I created the view and primary key as follows:
    CREATE OR REPLACE FORCE VIEW "MDD"."ROCK_LU" ("DESCRIPTION",
         UNIQUE ("DESCRIPTION") RELY DISABLE,
         CONSTRAINT "ROCK_LU_PK" PRIMARY KEY ("DESCRIPTION") RELY DISABLE) AS
    SELECT DESCRIPTION
    FROM MRMC_LU
    WHERE ROCK = 'T';
    The view with the primary key appears to have been created as there were no error messages. (The above was from the sql tab in sql developer.)
    When I try to create the foreign key on my mdd_hr table - I get an error
    /* hr_name - foreign key */
    ALTER TABLE mdd_hr add CONSTRAINT hr_name_fk FOREIGN KEY (hr_name) REFERENCES rock_lu(description);
    Error report:
    SQL Error: ORA-02270: no matching unique or primary key for this column-list.
    When I lookup the index in sql developer, rock_lu_pk is not there.
    All my other foreign keys work - but I don't understand what I am doing wrong with this one. Please help.
    glenn
    Background - as to why I want to use a view as a lookup table.
    The MRMC_LU table that the view is created from is structured like:
    DESCRIPTION - MINERAL - ROCK - MODIFIER - COMMODITY
    ANHYDRITE - T - T - T
    APLITE - T - - T
    GRAPHITE - T - - - T
    GREYWACKE - - T
    DESCRIPTION is a list of all names of minerals, rocks, modifiers and commodities. T is entered in each valid field. Often a description name is used for both a mineral and a rock or a mineral and a commodity or any other combination. Because this database is just starting up, it was more efficient to create one table that could be updated (and thereby automatically update the MINERAL_LU, ROCK_LU, MODIFIER_LY, COMMODITY_LU views) rather than create and maintain four separate but similar tables. A primary key cannot be generated for the MRMC_LU table as there are nulls in each column
    except DESCRIPTION.
    Perhaps there is a smarter way to do this?

    http://download-uk.oracle.com/docs/cd/B10501_01/server.920/a96540/statements_85a.htm#2065512
    You can specify constraints on views and object views. You define the constraint at the view level using the out_of_line_constraint clause. You define the constraint as part of column or attribute specification using the inline_constraint clause after the appropriate alias.
    Oracle does not enforce view constraints. However, operations on views are subject to the integrity constraints defined on the underlying base tables. This means that you can enforce constraints on views through constraints on base tables.
    Restrictions on View Constraints
    View constraints are a subset of table constraints and are subject to the following restrictions:
    You can specify only unique, primary key, and foreign key constraints on views. However, you can define the view using the WITH CHECK OPTION clause, which is equivalent to specifying a check constraint for the view.
    Because view constraints are not enforced directly, you cannot specify INITIALLY DEFERRED or DEFERRABLE.
    View constraints are supported only in DISABLE NOVALIDATE mode. You must specify the keywords DISABLE NOVALIDATE when you declare the view constraint, and you cannot specify any other mode.
    You cannot specify the using_index_clause, the exceptions_clause clause, or the ON DELETE clause of the references_clause.
    You cannot define view constraints on attributes of an object column.
    Rgds.

  • Loading problem with mod_osso on Apache 2.2.11

    Hi,
    Has anyone ever tried to configure Oracle SSO with a generic Apache server (version 2.2.11 to be exactly) using mod_osso successfully?
    Icopied a mod_osso.so file from OAS 10.1.3 version to my Apache server location that was running in Red Hat Linux environment.
    As I tried to start up the apache I got following undefined symbol error.
    httpd: Syntax error on line 71 of /usr/local/apache/conf/httpd.conf: Syntax error on line 2 of /usr/local/apache/conf/mod_osso.conf: Cannot load /usr/local/apache-2.2.11/modules/mod_osso.so into server: /user/local/apache-2.2.11/modules/mod_osso.so: undefined symbol: ap_configtestonly
    I found the following forum thread with reports on different issues, but no specific solution that is related to above error.
    Does mod_osso work with generic Apache
    From google search, the library symbol ap_configtestonly may be referred to older version of apache library function. I wonder if Apache server that I am using is not compatible with the version mod_osso.so or this is simply not supported to do this type of set up?
    Any pointers on this is great appreciated.
    Thanks in advance for your help,
    James

    Please follow up in the PHP forum http://www.oracle.com/technology/forums/php.html
    But first, check http://wiki.oracle.com/page/PHP+Oracle+FAQ and http://blogs.oracle.com/opal/2010/06/using_php_oci8_with_32-bit_php.html and http://www.oracle.com/technetwork/topics/php/underground-php-oracle-manual-098250.html

  • Problem with sendRedirect using relative URL in WebLogic 5.1 with SP7 & 8

    I patched to SP 7 (and also 8), and the request.sendRedirect() with relative
              URL failed. The browser simply displayed "404 - Page not found".
              This problem only happens in a cluster environment attached to a web server.
              SP6 or earlier does not have such problem.
              I noticed that the latest SP always formats the URL and returns it as a full
              absolute URL to the browser. The problem is it uses the Weblogic Server host
              URL where the request is processed (not the Web Server host URL) which is
              not visible to the internet.
              Is it possibly a bug in SP?
              

    I patched to SP 7 (and also 8), and the request.sendRedirect() with relative
              URL failed. The browser simply displayed "404 - Page not found".
              This problem only happens in a cluster environment attached to a web server.
              SP6 or earlier does not have such problem.
              I noticed that the latest SP always formats the URL and returns it as a full
              absolute URL to the browser. The problem is it uses the Weblogic Server host
              URL where the request is processed (not the Web Server host URL) which is
              not visible to the internet.
              Is it possibly a bug in SP?
              

Maybe you are looking for

  • Uninstalle​d MediaSmart TV, Now I can't reinstall it, Please help

    Hello, I have a HP HDX X18T-1100 CTO. My TV audio was out of sync, so I did an update for the TV. Then error messages for the TV kept coming up, so I decided to uninstall the MediaSmart TV from the control panel and reinstall it using the HP drivers.

  • FDM Database error

    Hi, While trying to create a new application in FDM, I receive the below error: create database permission denied in database 'master'. Line=Create Database[Hyperplan_fdm] Please let me know where is the issue. Any help would be greatly appreciated.

  • Activity Cost

    Hi All,          I have create a production order.In this order i have maintain activity type in routing. But The problem is when I go to cost itemization in the order activity cost show in 1/2 price. WHY?          In KP26 i have maintain fixed price

  • Transaction iView Theme

    Hi I have publinshed a SAP Transactional iView in the Portal as a SAP Transaction HTML iView .. SAP ECC 6.0, SAP EP 7.0 This works fine but the only issue is that it displays with the default SAP Theme .. Is it possible that this transactional iView

  • Blackberry Download Manager..i​s this a real program?

    Downloaded Blackberry Download Manager on to my Mac.  It seems to be working but, then again, I can't tell because it does nothing. I 'synched' the phone but that's it.  The software said that it completed the synch but , So?  Synched to what, to wh