SSL-Config: Oc4J does not reload keystore/truststore at runTime

Hi all, i have a little question about the SSL-Config into OC4J.
I have a webApp bound to a secure web site that requires mutual-authentication. If I add at run-time (without stopping OC4J) a trusted entry (a CA) to the keystore the secure-web-site is related to, OC4J does not "reload" the keystore with the new entry. Thus, i have to restart the OC4J to be able to accept SSLconnection that are authenticated by means of that new CA. The qeustion is: Does it exist a conifguration that has to be performed to reload at run-time a keystore in OC4J or it's necessary to restart OC4J each time a new entry to a keystore mapped for a given secure-web-site is added?
I hope someone can give me a tip,
Best Regards

Hi I tried this with latest 10.1.3 Developer Preview 4 and it worked great and I could start OC4J standalone in https mode. Can you please download the latest version of OC4J 10.1.3 DP4 stand-alone and try in there ? The OC4J version embedded with JDev 10.1.3 Preview is pretty old and there have been many bugs fixed since then
http://www.oracle.com/technology/tech/java/oc4j/index.html
-Debu

Similar Messages

  • Java APM Agent initialization failed: SEAgent.config.xml does not have a valid event sender configured

    Today I tried to configure JAVA APM on a CentOS 6.4 server with tomcat6 installed through the normal RPM package. Adding this server to SCOM was no problem and it shows itself as a 'Deep Monitored Configuration'. The last part of enabling
    JAVA APM fails. I have followed the following process:
    1. Imported the JAVA APM MP's
    2. Extracted the JAVA APM Files
    3. Copied those files to my CentOS server
    4. Added the JAVA_OPTS to my tomcat configuration file
    5. Restarted Tomcat
    When I look for the log file which needs to be created through the installation of the APM agent it cannot be find. When I look into my Catalina.out file I see the following errors:
    Mar 05, 2014 7:05:16 PM com.microsoft.ManagementServices.APMAgent.Log.SystemLogger error
    SEVERE: Java APM Agent initialization failed: SEAgent.config.xml does not have a valid event sender configured
    com.microsoft.ManagementServices.APMAgent.Exception.ApmException: SEAgent.config.xml does not have a valid event sender configured
            at com.microsoft.ManagementServices.APMAgent.AgentThreadManager.<init>(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.AgentThreadManager.<init>(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.Agent.Monitor.AgentContext.<init>(Unknown Source)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:525)
            at com.microsoft.ManagementServices.APMAgent.Agent.Startup.AgentContextLoader.loadContext(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.Agent.Startup.Agent.premain(Unknown Source)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
            at java.lang.reflect.Method.invoke(Method.java:601)
            at sun.instrument.InstrumentationImpl.loadClassAndStartAgent(InstrumentationImpl.java:382)
            at sun.instrument.InstrumentationImpl.loadClassAndCallPremain(InstrumentationImpl.java:397)
    Caused by: java.lang.reflect.InvocationTargetException
            at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:525)
            ... 15 more
    Caused by: com.microsoft.ManagementServices.APMAgent.Exception.ApmException: Error registering MBean: com.microsoft.ManagementServices.APMAgent:type=COUNTER
            at com.microsoft.ManagementServices.APMAgent.EventSender.MBeanEventLog.registerMetricMBeans(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.EventSender.MBeanEventLog.<init>(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.EventSender.MBeanEventLog.<init>(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.AgentThreadManager.<init>(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.AgentThreadManager.<init>(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.Agent.Monitor.AgentContext.<init>(Unknown Source)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:525)
            at com.microsoft.ManagementServices.APMAgent.Agent.Startup.AgentContextLoader.loadContext(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.Agent.Startup.Agent.premain(Unknown Source)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
            at java.lang.reflect.Method.invoke(Method.java:601)
            at sun.instrument.InstrumentationImpl.loadClassAndStartAgent(InstrumentationImpl.java:382)
            at sun.instrument.InstrumentationImpl.loadClassAndCallPremain(InstrumentationImpl.java:397)
    Caused by: java.lang.reflect.InvocationTargetException
            at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:525)
            ... 15 more
    Caused by: com.microsoft.ManagementServices.APMAgent.Exception.ApmException: Error registering MBean: com.microsoft.ManagementServices.APMAgent:type=COUNTER
            at com.microsoft.ManagementServices.APMAgent.EventSender.MBeanEventLog.registerMetricMBeans(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.EventSender.MBeanEventLog.<init>(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.EventSender.MBeanEventLog.<init>(Unknown Source)
            ... 19 more
    Mar 05, 2014 7:05:16 PM com.microsoft.ManagementServices.APMAgent.Log.SystemLogger info
    INFO: Java APM Agent loading failed (Build: 1.10.100.15, Label: NotFromLabel, BuildDate: 20131112)
    java.lang.reflect.InvocationTargetException
            at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
            at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
            at java.lang.reflect.Constructor.newInstance(Constructor.java:525)
            at com.microsoft.ManagementServices.APMAgent.Agent.Startup.AgentContextLoader.loadContext(Unknown Source)
            at com.microsoft.ManagementServices.APMAgent.Agent.Startup.Agent.premain(Unknown Source)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
            at java.lang.reflect.Method.invoke(Method.java:601)
            at sun.instrument.InstrumentationImpl.loadClassAndStartAgent(InstrumentationImpl.java:382)
            at sun.instrument.InstrumentationImpl.loadClassAndCallPremain(InstrumentationImpl.java:397)
    Caused by: java.lang.InstantiationException: Monitor initialization failed: SEAgent.config.xml does not have a valid event sender configured
            at com.microsoft.ManagementServices.APMAgent.Agent.Monitor.AgentContext.<init>(Unknown Source)
            ... 12 more
    Does anyone have seen this error before? Can someone help me with this one?
    Thnx,

    I'm running tomcat on a CentOS release 6.4 (Final) server. I installed Tomcat 6 through an RPM from the CentOS sources. I have installed Apache Tomcat/6.0.24 wit JVM version 1.7.0_09-icedtea-mockbuild_2013_01_16_18_52-b00, the JVM Vendor is Oracle Corporation.
    My tomcat configuration needs to be done in '/etc/tomcat6/tomcat6.conf'
    I installed the APM Agent in the path '/opt/apm/' with the rights  40755 (root/root). The files have the following rights:
    -rw-rw-r-- 1 root tomcat  32046 Mar  3 15:38 apm_facade.jar
    -rw-rw-r-- 1 root tomcat 244819 Mar  3 15:38 apm_monitor.jar
    -rw-rw-r-- 1 root tomcat  38110 Mar  3 15:38 apm_producers.jar
    -rw-rw-r-- 1 root tomcat 207006 Mar  3 15:38 asm-all-3.3.1.jar
    -rw-rw-r-- 1 root tomcat   4157 Mar  3 15:38 ASM_Third_Party_Notices.txt
    -rw-rw-r-- 1 root tomcat 241368 Mar  3 15:38 DispatcherStub.dll
    -rw-rw-r-- 1 root tomcat  36880 Mar  3 15:38 pmonitor.config.xml
    -rw-rw-r-- 1 root tomcat   2625 Mar  3 15:38 SEAgent.config.xml
    -rw-rw-r-- 1 root tomcat    830 Mar  5 15:19 Starter.properties
    The above rights are equal to the /etc/tomcat6 directory with the tomcat configuration files.
    In the tomcat6.conf I have added the following entries:
    #Microsoft SCOM APM
    JAVA_OPTS="${JAVA_OPTS} -Djava.library.path=/opt/apm"
    JAVA_OPTS="${JAVA_OPTS} -javaagent:/opt/apm/apm_facade.jar -Xbootclasspath/p:/opt/apm/apm_producers.jar -Xbootclasspath/p:/opt/apm/apm_facade.jar"
    When I look into the running tomcat process I see the following:
    tomcat   17401     1  0 Mar05 ?        00:00:39 /usr/lib/jvm/jre/bin/java -Djava.library.path=/opt/apm -javaagent:/opt/apm/apm_facade.jar -Xbootclasspath/p:/opt/apm/apm_producers.jar -Xbootclasspath/p:/opt/apm/apm_facade.jar
    -Djavax.sql.DataSource.Factory=org.apache.commons.dbcp.BasicDataSourceFactory -Djava.library.path=/opt/apm -javaagent:/opt/apm/apm_facade.jar -Xbootclasspath/p:/opt/apm/apm_producers.jar -Xbootclasspath/p:/opt/apm/apm_facade.jar -Djavax.sql.DataSource.Factory=org.apache.commons.dbcp.BasicDataSourceFactory
    -classpath :/usr/share/tomcat6/bin/bootstrap.jar:/usr/share/tomcat6/bin/tomcat-juli.jar:/usr/share/java/commons-daemon.jar -Dcatalina.base=/usr/share/tomcat6 -Dcatalina.home=/usr/share/tomcat6 -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/cache/tomcat6/temp
    -Djava.util.logging.config.file=/usr/share/tomcat6/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager org.apache.catalina.startup.Bootstrap start
    My Starter.Properties looks like this:
    # Jars to load by inner classloader.
    # Use semicolons to separate the JAR entries
    ClassPath=apm_monitor.jar;asm-all-3.3.1.jar;apm_producers.jar
    # Path to pmonitor.config
    MonitorConfigFileName=pmonitor.config.xml
    # Path to SEAgent.config
    AgentConfigFileName=SEAgent.config.xml
    # Log file name
    # Example for full-path location:
    #                  LogFileName=c:\\tracelog\\apm-java-agent.log
    # Example for relative path (to agent jar files):
    #                  LogFileName=apm-java-agent.log
    LogFileName=apm-java-agent.log
    # Log level (SEVERE, WARNING, INFO, CONFIG, FINE, FINER, FINEST)
    # A level of FINER or FINEST may expose Personally identifiable
    # information (PII) in the log file.  The levels below INFO are
    # intended for debugging and diagnostic use only.
    LogLevel=FINEST
    The 'apm-java-agent.log' is not created on the system. The only logging is done in the catalina.out. When restarting tomcat I see the following entries in te log file:
    INFO: Initializing Java APM Agent (Build: 1.10.100.15, Label: NotFromLabel, BuildDate: 20131112)
    Mar 06, 2014 9:35:21 AM com.microsoft.ManagementServices.APMAgent.Log.SystemLogger info
    INFO: Java APM Agent loading succeeded (Build: 1.10.100.15, Label: NotFromLabel, BuildDate: 20131112)
    Mar 06, 2014 9:35:21 AM com.microsoft.ManagementServices.APMAgent.Log.SystemLogger info
    INFO: Initializing Java APM Agent (Build: 1.10.100.15, Label: NotFromLabel, BuildDate: 20131112)
    Mar 06, 2014 9:35:21 AM com.microsoft.ManagementServices.APMAgent.Log.SystemLogger warning
    WARNING: Failed registering the COUNTER MBean
    Mar 06, 2014 9:35:21 AM com.microsoft.ManagementServices.APMAgent.Log.SystemLogger error
    SEVERE: Java APM Agent initialization failed: SEAgent.config.xml does not have a valid event sender configured
    Mar 06, 2014 9:35:21 AM com.microsoft.ManagementServices.APMAgent.Log.SystemLogger info
    INFO: Java APM Agent loading failed (Build: 1.10.100.15, Label: NotFromLabel, BuildDate: 20131112)
    Hope this gives your some more background around my problem, I double checked the permissions..

  • SSL client default does not exist

    Hi,
    I had newly installed XI system on one of our server.
    when i am creating RFC destination INTEGRATION_DIRECTORY_HMI, i am getting the following error on logon /security tab.
    "<b>SSL client default does not exist"</b>
    and it is not even permitting to go furthur!
    any suggestions will be appreciated highly.
    Thanks,
    Ravi

    Hi Ravi
    Check if your SSL provider is running.
    Go to visual admin--instanceservernodeservices----SSL provider.Start the SSL service and check for the configuration.
    Follow the same steps for the dispatcher node.
    Go to visual admin--instancedispatchernodeservices----SSL provider

  • Getting Error: Config file does not have IDStore WLS Administrator Username

    I am configuring OIM/OAM in HA mode following the EDG:
    - Enterprise Deployment Guide for Oracle Identity Management
    - 11g Release 1 (11.1.1.5)
    I am at step
    - 10.4.5 Creating Users and Groups for Oracle WebLogic Server
    I am executing this command:
    - idmConfigTool.sh -prepareIDStore mode=WLS input_file=wls.props
    Where wls.props has these values:
    IDSTORE_HOST: admin.mycompany.com
    IDSTORE_PORT: 389
    IDSTORE_BINDDN: cn=orcladmin
    IDSTORE_USERNAMEATTRIBUTE: cn
    IDSTORE_LOGINATTRIBUTE: uid
    IDSTORE_USERSEARCHBASE: cn=Users,dc=mycompany,dc=com
    IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=mycompany,dc=com
    IDSTORE_SEARCHBASE: dc=lispa,dc=local
    POLICYSTORE_SHARES_IDSTORE: true
    and I am getting this error:
    Config file does not have IDStore WLS Administrator Username
    Any idea why ?

    I have added to the property files:
    IDSTORE_SYSTEMIDBASE : cn=systemids,dc=mycompany,dc=com
    But its not solving the issue.
    Here is the log:
    Jun 3, 2013 10:01:55 AM oracle.idm.automation.util.Util setLogger
    WARNING: Logger initialized in warning mode
    Jun 3, 2013 10:01:59 AM oracle.idm.automation.impl.oid.handlers.OIDIntegrationHandler validateInputParams
    SEVERE: Config file does not have IDStore WLS Administrator Username
    Please advise on how to resolve this issue

  • \OPatch\docs\etc\config\inventory" does not exist.

    Dear One,
    I have up-graded my Database 11.2.0.1 to 11.2.0.3.while applying the OPatch below error is coming...
    The specified path is not an interim Patch shiphome
    Meta-data files are missing from the patch area
    Patch location = F:\app\Administrator\product\11.2.0\dbhome_2\OPatch
    Details = PatchObject constructor: Input file "F:\app\Administrator\product\11
    .2.0\dbhome_2\OPatch\etc\config\actions" or "F:\app\Administrator\product\11.2.0
    \dbhome_2\OPatch\etc\config\inventory" does not exist.
    ApplySession::process() cannot load PatchObject: PatchObject constructor: Input
    file "F:\app\Administrator\product\11.2.0\dbhome_2\OPatch\etc\config\actions" or
    "F:\app\Administrator\product\11.2.0\dbhome_2\OPatch\etc\config\inventory" does
    not exist.
    OPatch failed: PatchObject constructor: Input file "F:\app\Administrator\product
    \11.2.0\dbhome_2\OPatch\etc\config\actions" or "F:\app\Administrator\product\11.
    2.0\dbhome_2\OPatch\etc\config\inventory" does not exist.
    Locker::release()
    Log file location: F:\app\Administrator\product\11.2.0\dbhome_2\cfgtoollogs\opat
    ch\opatch2013-01-19_14-56-18PM_1.log
    Cleaning up the directory : "F:\app\Administrator\product\11.2.0\dbhome_2\.patch
    _storage\patch_unzip"...
    OPatch failed with error code = 73
    So,pls suggest me anyone how can i proceed the OPatch apply.........

    you don't use optach to upgrade your database , Please Read the below Document That describe usage of Optach
    http://docs.oracle.com/cd/B19306_01/em.102/b16227/oui8_opatch.htm
    You Must have patch Number : 10404530 which can be downloaded from https://support.oracle.com
    Similar thread
    Upgrade 11.2.0.1 to 11.2.0.3

  • After IOS6 installed om Iph4S my battery does not reload anymore or at least slightly.

    IOS6 installed on my Iphone4S this weekend and since then the battery does not reload anymore. Just for a split of a second it reloads, it stops and again for a second it reloads. Does not come any further than approx. 5% in total.
    Additional problem: I cannot synchronize my phone either anymore stating unknown error: OxE8000084
    Who can help me plse????

    StevesIpod wrote:
    I see that the Charge Capacity varies by 8x which probably means that there's an issue with the battery; however, I just swapped batteries yesterday night with a buddy that has a fully functioning macbook, with the original battery, and the same issue occurred.
    Are you saying that the battery from your friend showed the same low 'Full Charge Capacity (mAh) as yours?  What does it show in his MBP?
    Also, can you test your charger on his MBP and his charger on your MBP.
    I also purchased the replacement online from a reputable source for a fraction of apple's usual cost. They also don't have a reputation for selling fakes like a lot of online stores do so I didn't see an issue of receiving a malfunctioning battery.
    The quality of the battery remains to be determined.
    Ciao.

  • My iCloud email does not work. Getting error message that i need to uncheck SSL . This does not work. Help

    icloud Email does not work. When running Connection doctor it indicates I must check or uncheck SSL. This has not fixed the problem

    iCloud email addresses (@mac.com, @me.com and @icloud.com) require SSL. Is your address an iCloud address or someone else?

  • Webcal and webmail where Calendar and Mail use SSL but Web does not

    I have Lion Serer 10.7.3 up and running. I have the same SSL cert in use for calendar, address book, and email, but not for web service. Calendar is running great via iCal.app and on iOS.
    1.  Trying to access the webcal at http://myserver.com/webcal returns a page saying "Calendar service is turned off. You can turn it on by using the Server app on the server." Accessing webcal via https://myserver.com/webcal fails when it redirects for authentication - the resulting page, gives me an apache 404 error that /auth could not be found - the url it is trying to reach is: https://myserver.com/auth?redirect=https://myserver.com/webcal/
    There is a bit of a hack for this that I have discovered - I change the url to eliminate the https on the url, but leave it on the redirect:
    http://myserver.com/auth?redirect=https://myserver.com/webcal/
    I can then authenticate and get into the calendar and it works as expected from there.
    2. Trying to access webmail via https://myserver/webmail fails with a page saying "Mail is turned off..." But it all works fine using the non-ssl connection.
    If I turn off all certs, then it works fine. If I turn on all certs, it works fine. But turning on SSL for my website is not an option - it's a blog that does not need the extra overhead (and my certs are self-signed, making them look nefarious to most web browsers). 
    So, I am looking for suggestions on how to obtain access to webcal where the calendar server (and address book server) are using an ssl certificate but the web service is not.
    Does anyone have suggestions on how to make this work appropriately, where the webcal and webmail are served on SSL protected connections and the Web Service uses an unencrypted, non-SSL connection?

    bump.
    Anyone? It seems this question has been asked a couple of different times and in a couple of different ways (including here: https://discussions.apple.com/message/16100639#16100639).
    Thanks for your help!

  • Dual wan failover config: failback does not always work as expected for existing LAN traffic flows

    I have an 881 router configured with 2 dhcp WAN connections.  I am trying to configure failure detection of the primary connection (I do not really care about the secondary at this time).
    I have an ip sla/track configured to monitor the primary WAN connection, and if it stops passing traffic it removes that route, passing all traffic out the second WAN connection.  When the first connection is restored it should restore the route and everything should pass through the first connection again.  This works for all my tests except one.  If I start a ping stream from a client "ping 8.8.8.8 -t" and disconnect the primary connection it will lose a few packets but then use the secondary connection in about 15 seconds.  After restoring the primary connection all new traffic will use the primary connection, but the ping stream will then stop working (fails over, but not back).  If I stop the ping stream for a time (not sure how long is required, but my test was over a minute) it will then use the primary connection like all other new traffic.  A stop of a few seconds is not enough, and even opening up a second command prompt to ping the same target also does not work (pinging new targets works as desired).  It is as if something is caching the route/session/whatever and it has to have a window of no traffic before expiring/relearning the route.  This means any sustained traffic to the original target will not work until it is stopped for a certain time to let "something" age out.
    I need to know if there is a way to "flush the cache" (or whatever) during fail-back to force the primary route to be used after fail-back, or something else that will have the same effect.  My suspicion is that the second route gets "preferred" because the first is removed by the sla, and when the sla returns the route to the list the existing traffic flow is not aware of the route list change, using the last known good route (which now does not pass traffic).  The Issue here is that it takes a length of time for the now bad route to get flushed, which is greater than I want to have.
    config (edited):
    interface FastEthernet3
     description Backup ISP
     switchport access vlan 800
     no ip address
    interface FastEthernet4
     description Primary ISP
     ip dhcp client route track 100
     ip address dhcp
     ip nat outside
     ip virtual-reassembly in
     duplex auto
     speed auto
     crypto ipsec client ezvpn EZVPN-to-1941
    interface Vlan800
     description Backup ISP
     ip address dhcp
     ip nat outside
     ip virtual-reassembly in
    track 100 list boolean or
     object 101
     object 102
    track 101 ip sla 10 reachability
    track 102 ip sla 20 reachability
    ip sla 10
     icmp-echo 4.2.2.2 source-interface FastEthernet4
     threshold 1000
     timeout 1500
     frequency 5
    ip sla schedule 10 life forever start-time now
    ip sla 20
     icmp-echo 208.67.222.222 source-interface FastEthernet4
     threshold 1000
     timeout 1500
     frequency 5
    ip sla schedule 20 life forever start-time now
    ip route 4.2.2.2 255.255.255.255 FastEthernet4 permanent
    ip route 10.1.2.0 255.255.255.0 <1941 wan ip removed>
    ip route <1941 wan ip removed> 255.255.255.255 FastEthernet4 permanent
    ip route 208.67.222.222 255.255.255.255 FastEthernet4 permanent
    ip route 0.0.0.0 0.0.0.0 Vlan800 dhcp 254
    ip route 0.0.0.0 0.0.0.0 FastEthernet4 dhcp
    Observation: the last 2 routes appear in the order shown above.  Even though the vlan800 route has a higher administrative cost it is in front of the FA4 route, could this be contributing to the issue?  Is there a way to ensure the FA4 route is always listed before vlan800 at all times?

    I have an 881 router configured with 2 dhcp WAN connections.  I am trying to configure failure detection of the primary connection (I do not really care about the secondary at this time).
    I have an ip sla/track configured to monitor the primary WAN connection, and if it stops passing traffic it removes that route, passing all traffic out the second WAN connection.  When the first connection is restored it should restore the route and everything should pass through the first connection again.  This works for all my tests except one.  If I start a ping stream from a client "ping 8.8.8.8 -t" and disconnect the primary connection it will lose a few packets but then use the secondary connection in about 15 seconds.  After restoring the primary connection all new traffic will use the primary connection, but the ping stream will then stop working (fails over, but not back).  If I stop the ping stream for a time (not sure how long is required, but my test was over a minute) it will then use the primary connection like all other new traffic.  A stop of a few seconds is not enough, and even opening up a second command prompt to ping the same target also does not work (pinging new targets works as desired).  It is as if something is caching the route/session/whatever and it has to have a window of no traffic before expiring/relearning the route.  This means any sustained traffic to the original target will not work until it is stopped for a certain time to let "something" age out.
    I need to know if there is a way to "flush the cache" (or whatever) during fail-back to force the primary route to be used after fail-back, or something else that will have the same effect.  My suspicion is that the second route gets "preferred" because the first is removed by the sla, and when the sla returns the route to the list the existing traffic flow is not aware of the route list change, using the last known good route (which now does not pass traffic).  The Issue here is that it takes a length of time for the now bad route to get flushed, which is greater than I want to have.
    config (edited):
    interface FastEthernet3
     description Backup ISP
     switchport access vlan 800
     no ip address
    interface FastEthernet4
     description Primary ISP
     ip dhcp client route track 100
     ip address dhcp
     ip nat outside
     ip virtual-reassembly in
     duplex auto
     speed auto
     crypto ipsec client ezvpn EZVPN-to-1941
    interface Vlan800
     description Backup ISP
     ip address dhcp
     ip nat outside
     ip virtual-reassembly in
    track 100 list boolean or
     object 101
     object 102
    track 101 ip sla 10 reachability
    track 102 ip sla 20 reachability
    ip sla 10
     icmp-echo 4.2.2.2 source-interface FastEthernet4
     threshold 1000
     timeout 1500
     frequency 5
    ip sla schedule 10 life forever start-time now
    ip sla 20
     icmp-echo 208.67.222.222 source-interface FastEthernet4
     threshold 1000
     timeout 1500
     frequency 5
    ip sla schedule 20 life forever start-time now
    ip route 4.2.2.2 255.255.255.255 FastEthernet4 permanent
    ip route 10.1.2.0 255.255.255.0 <1941 wan ip removed>
    ip route <1941 wan ip removed> 255.255.255.255 FastEthernet4 permanent
    ip route 208.67.222.222 255.255.255.255 FastEthernet4 permanent
    ip route 0.0.0.0 0.0.0.0 Vlan800 dhcp 254
    ip route 0.0.0.0 0.0.0.0 FastEthernet4 dhcp
    Observation: the last 2 routes appear in the order shown above.  Even though the vlan800 route has a higher administrative cost it is in front of the FA4 route, could this be contributing to the issue?  Is there a way to ensure the FA4 route is always listed before vlan800 at all times?

  • Last RoboHelp HTML v9 Workspace (formerly called Environment) does not reload next time RH9 loads

    Hey all, thanks in advance for any info you can provide.  All the RoboHelp references below relate to us using the respective version of RoboHelp HTML, and on my XP SP3 pc.
    I have worked with RH7, RH8, and now RH9, but RH9 is not behaving the same as the others as it relates to Workspace (formerly called Environment in prior RoboHelp versions).  In the other versions, the last screen arrangement/Workspace always reloaded the next time you loaded RH, but with RH9, it doesn't. 
    The previous “environment”, now called “Workspace” (upper right corner) does not remain what it looked like when you last closed it, the next time you open Robo.  It resets to some weird default EVERY time, instead of looking like the last time you closed it…even though it shows you with a checkmark that it did load it (but it didn’t!)!
    My Mini-work around is, I clicked “Workspace” (upper right corner) and loaded my environment file (mark.rhs), which loads the screens the way I want them, then did a SAVE to one I called “default” and since it shows you the last two you opened, each time I load Robo, I take turns loading them…no biggie, but it just saves some time so you can choose between YOUR two named files that do the same thing screen rearranging.
    Is this a known issue in Robo9?  Is there a fix?  I have uninstalled/reinstalled many times for other reasons, but this issue has always been present, even installing the latest patches.  Thanks in advance for any feedback.

    to Peter Grainge:  Sorry for any confusion...as you state, I expect to see the same exact workspace I left when I last closed RoboHelp and if I reload my workspace/environment and all looks well, I expect to see that same screen placement the next time RH loads...but that does not always happen.
    I did what you suggested and closed several of the extraneous Pods that appeared, closed RH, and it did save those settings...BUT I then loaded my saved workspace, closed RH, and the settings were not saved as the same funky screen placement appeared.  After checking, it is not the RH defaulted workspace, but actually my saved workspace plus the "See Also", "Review Pane", and Resource Manager" Pods, which I do not use.  So, as a test, I closed those 3 Pods and resaved over one of my saved workspace files.  I now get a much better percentage of the screens being what I expect each time I load RH, but for some reason, there are times that I reload my saved workspace, exit RH, and the next time I load RH, that funky screen placement is present again.  I had an environment issue with RH8, as it could never save the windows the way I needed them, and I had to move them each tim...maybe it was due to migrating from the previous version and it using the migrated/modified .rhs file...or multiple versions installed...who knows?  ;->
    Thanks for your reply!

  • Loading config file does not remove prior configuration?

    After factory defaulting the Cisco 2504 WLC, I go to through the wizard for initial config then log into the web interface and download my 'full' config file to the controller. After the reboot I upload the config file to my PC and compare it to the original file, but it does not  match.
    Any ideas what could be causing this?

    Follow these guidelines when working with configuration files:
     Any CLI with an invalid value is filtered out and set to default by the XML validation engine. Validation occurs during bootup. A configuration may be rejected if the validation fails. A configuration may fail if you have an invalid CLI. For example, if you have a CLI where you try to configure a WLAN without adding appropriate commands to add the WLAN.
     A configuration may be rejected if the dependencies are not addressed. For example, if you try to configure dependent parameters without using the add command. The XML validation may succeed but the configuration download infrastructure will immediately reject the configuration with no validation errors.
     An invalid configuration can be verified by using the show invalid-config command. The show invalid-config command reports the configuration that is rejected by the controller either as part of download process or by XML validation infrastructure.

  • OC4J does not start - OVM manager

    Hi
    Just finished installing OVM MANAGER. Oracle database sits on a different box.
    cat oc4j.log
    2012-03-01-03-30-08-AM
    Installing the oc4j package (rpm) ...
    Preparing... ##################################################
    oc4j ##################################################
    Done
    Starting OC4J ...Starting OC4J from /opt/oc4j/j2ee/home ...
    12/03/01 03:33:55 Exception in thread "OC4J Launcher" java.lang.NoClassDefFoundError
    12/03/01 03:33:55      at com.evermind.server.jms.XMLJMSServerConfig.postInit(XMLJMSServerConfig.java:497)
    12/03/01 03:33:55      at com.evermind.xml.XMLConfig.init(XMLConfig.java:206)
    12/03/01 03:33:55      at com.evermind.xml.XMLConfig.init(XMLConfig.java:113)
    12/03/01 03:33:55      at com.evermind.server.jms.XMLJMSServerConfig.init(XMLJMSServerConfig.java:113)
    12/03/01 03:33:55      at com.evermind.server.XMLApplicationServerConfig.getJMSServerConfig(XMLApplicationServerConfig.java:404)
    12/03/01 03:33:55      at com.evermind.server.ApplicationServer.initializeJMS(ApplicationServer.java:2417)
    12/03/01 03:33:55      at com.evermind.server.ApplicationServer.setConfig(ApplicationServer.java:989)
    12/03/01 03:33:55      at com.evermind.server.ApplicationServerLauncher.run(ApplicationServerLauncher.java:131)
    12/03/01 03:33:55      at java.lang.Thread.run(Thread.java:595)
    Failed.
    Please check the log in /var/log/ovm-manager/oc4j.log
    What can I do to start this service?
    lsb_release -a
    LSB Version:     :core-3.1-ia32:core-3.1-noarch:graphics-3.1-ia32:graphics-3.1-noarch
    Distributor ID:     OracleVMserver
    Description:     Oracle VM server release 2.2.2
    Release:     2.2.2
    Codename:     n/a

    Hi,
    You can start oc4j with the following command:
    $ oc4j -start
    Note: you must set ORACLE_HOME, JAVA_HOME and PATH environment variable before issueing this command.
    BoL,
    Sundar K

  • Extension Builder does not reload extension in Safari

    I am running Yosemite 10.10.1 with Safari 8.0.2
    I am trying to make a simple extension (a "Hello World" example at this point). It works, but once I change the settings held within the Info.plist file I need to restart Safari in order for it to refresh the changes. All other changes seem to be propagating just fine when I hit the "reload" or the "install" button on the Extension builder.
    Any ideas if this is the expected behaviour?
    Thanks,
    Atanas

    I have the exact same behaviour but any changes made within the extension builder are not reloaded. Uninstall or Reload doesn't change anything I have to quit Safari. This is really annoying...

  • Komp does not have a component "SERVICE_PARAM2"- Runtime error in VA01

    When Creating a Sales order(Standard order typeu201D ORu201D and standard pricing procedure u201C) using VA01, System is giving following dump.
    "The current ABAP Program "SAPFV45P" had to be terminated because it has come across a statement that unfortunately cannot be executed.
    The following Syntax error occured in Program "SAPLV61A" in include "RV63A630" in line 9:
    The data object "komp" does not have a component called "SERVICE_PARAM2". "
    On analyzing the include "RV63A630" mentioned, the following error message is seen.
    u201CNo field KOMP-SERVICE_PARAM2 exists in the latest version of KOMP in the ABAP/4 Dictionary.u201D
    Can anyone suggest any possible solutions ?

    "The data object "KOMP" does not have a component called "TRI_OBJ_TYPE".
    You may check any of the following notes
    a)  339726
    b)  601986
    c)  783962
    d)  798902
    e)  1007550
    If the above notes are of no use, then what I would suggest you is that you post this issue in ABAP forum so that you will get swift response.
    thanks
    G. Lakshmipathi

  • Integration Process does not appear in ID or Runtime Cache

    I created an Integration process and it has not appeared as an available service in the Integration Directory when createing a receiver determination. It also does not appear in the runtime cache.
    Last week I created a different IP and that exists in both places. Between that time and now we migrated the SLD from one machine to another; I don't know if this will have an affect, but all messages interfaces created today appear in the Integration Directory, so there is a communication path at least.
    Can anybody advise how to proceed?

    Hi
    You should import the IP from IR to ID.
    In ID Goto Objects tab, here expand Service without party, you got the IP, from here you right click mouse>new>give some name and import your created IP in the IR.
    Then you get the IP in the ID.

Maybe you are looking for

  • How well does the MacBook do with streaming video?

    I'm thinking about getting a MacBook - the main use would be to hook it up to my HDTV and watch streaming video, etc. Other than that, it'd be used lightly - no gaming, just browsing the internet, email, and possibly word processing. I've checked a l

  • Is it/shouldn't it be possible to order postcards with full image on both sides?

    Is it/shouldn't it be possible to order postcards with full image on both sides?

  • Display settings issue

    Ok so this is my problem. I own a macbook pro and I hooked it up to a 20in flatscreen tv. I have recently bought a wireless mouse and keyboard from apple and I want to close the lid on my mac while it is still connected to the tv and running. I cant

  • Persistent password plea

    I'm running Windows XP, using Linksys wireless router BEFW11S4, ver.2 I want to use the router's wireless capabilities, including use of a WEP. I can access the Setup page, entering with a password, but when I try to Apply my settings, the program in

  • Best practices in Queue table maintenance

    Hi Fellow AQ Users, I am looking to hear from the community about best practices in queue table maintenance. I have been mining through metalink about various Oracle recommendations and putting together a set of recommendations as a starting point fo