Sun PKCS#11 provider ignores the PIN while loading keystore in Windows JRE

We are using smart card based login in our GUI application. We use active client for Card reader. We are using sun PKCS#11 provider to read certificate from the CARD. In the code we are passing PIN while loading the keystore. It seems the pin is getting ignored and we get active client pin dialog.
PS: In linux JRE the pin passed while loading keystore is working properly.
Below is the code snippet that i used for testing.
public static void  main(String arg[]) throws Exception
       try
         //Create our certificates from our CAC Card
        String configName = "card.config";
         Provider p = new sun.security.pkcs11.SunPKCS11(configName);
         Security.addProvider(p);
         char[] pin = { '1', '2', '3', '4', '5', '6' };
         KeyStore cac = null;
         cac = KeyStore.getInstance("PKCS11");
         cac.load(null, pin);
         showInfoAboutCAC(cac);
      catch(Exception ex)
         ex.printStackTrace();
         System.exit(0);
   public static void showInfoAboutCAC(KeyStore ks) throws KeyStoreException, CertificateException, FileNotFoundException, IOException
      Enumeration<String> aliases = ks.aliases();
       int count = 0;
      while (aliases.hasMoreElements()) 
         String alias = aliases.nextElement();
         X509Certificate[] cchain = (X509Certificate[]) ks.getCertificateChain(alias);
         if (cchain != null){
         System.out.println("Certificate Chain for : " + alias);
         for (int i = 0; i < cchain.length; i ++)
            System.out.println(i + " SubjectDN: " + cchain.getSubjectDN());
System.out.println(i + " IssuerDN: " + cchain[i].getIssuerDN());
content of card.config is
name = myConfig
library = C:\\WINDOWS\\system32\\acpkcs211.dll
Alternative we can see the same behaviour if we run the following command
keytool -keystore NONE -storetype PKCS11 -providerClass sun.security.pkcs11.SunPKCS11 -providerArg "E:\work1\card.config" -list
This command will ask ping in the command line and again active client PIN diaolog will be prompted.
Please let me know if this a bug in Sun PKCS#11 provider in Windows and is there any work around to fix the issue.
Enviornmnet Details::
OS Win XP sp3
Java version "1.6.0_17"
Active client library version :
P11 Library:
Name:  acpkcs211.dll
Version: 4-0-0-12
Thanks in advanced
Ruhul                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           

The program is just to simulate the issue. I understand that user have to pass the pin. In our GUI we have our own dialog to get the pin from user and pass it to the PKCS#11 provider that uses the pin while loading the keystore.
cac.load(null, pin); // the pin passed in load method is not used at all
My problem here is even after the proper pin is supplied by the user the active client PIN dialog is prompted. Whereas in LInux JRE this works fine.
We have a command line application where active client dialog popup is not acceptable. We need to get the PIN from user as command argument and load the keystore.
Please let me know if this clarifies the confusion.
Thanks,
Ruhul

Similar Messages

  • How to remove carraige return from the field while loading external table

    I am facing an issue of not getting rid of carraige returns present in the fileds of the source .csv file while loading the records into external table.
    I had tried using LRTRIM, but it does not help.
    The error I am getting is:
    KUP-04021: field formatting error for field POPULATION_DESCRIPTION
    KUP-04037: terminator not found
    I am pasting one record out of the .csv file which is causing this error as below:
    "Business Card Accounts
    ",123,7 BizCard - Gamers,Control,"Business Card Accounts
    ",75270,75271
    You can see the carraige return in the 1st field as well as 5th field. Filed are separated by commas & eclosed by double quotes.
    Could anybody help on this please?

    Can you copy the file to an external table only version, and then dos2unix it?
    Alternatively, you can use the ACCESS PARAMETERS area in your external table definition to set that your RECORDS DELIMITED BY carriage returns, instead of the default.
    Check out the example here http://www.psoug.org/reference/externaltab.html

  • Starting Firefox in Private mode from the pinned ico in taskbar causes Windows Explorer to crash.

    Starting Firefox in Private mode from the pinned icon in taskbar (right click, choose "New Private Window") causes Windows Explorer to crash almost everytime, but not always. Very odd.
    Didn´t happen with previous versions of Firefox.
    Firefox 22.0, Win 7 Ultimate with all updates applied.

    Hello Paul,
    That's a very odd behavior indeed. All I can think of is that an add-on is confused and makes Firefox crash. The Reset Firefox feature can fix many issues by restoring Firefox to its factory default state while saving your essential information. Note: ''This will cause you to lose any Extensions, Open websites, and some Preferences.''
    To Reset Firefox do the following:
    #Go to Firefox > Help > Troubleshooting Information.
    #Click the "Reset Firefox" button.
    #Firefox will close and reset. After Firefox is done, it will show a window with the information that is imported. Click Finish.
    #Firefox will open with all factory defaults applied.
    Further information can be found in the [[Reset Firefox – easily fix most problems]] article.
    Did this fix your problems? Please report back to us!
    Thank you.

  • How do I make Firefox ignore the "Use High Contrast" option in Windows?

    I am taking care of a Windows XP machine which is running in "High Contrast Mode" for accessibility reasons. This display mode is enabled via the Control Panel of Windows (Accessibility Options, Display, Use High Contrast) and it has major impact on how Firefox display web pages. What I want to do is make Firefox ''ignore'' this operating system option, so web pages will be rendered "normally", but keep Windows in High Contrast Mode.
    Is there any way I can make Firefox ignore this setting? I.e. run Windows in High Contrast Mode, but not Firefox?
    A similar questions has been discussed here:
    http://support.mozilla.com/en-US/kb/Website%20colors%20are%20wrong
    However, I don't want to disable High Contrast for Windows and the whole machine, just for Firefox.
    Thanks in advance
    Bounder of Adventure

    John,
    thanks for your comments. The computer is mainly used by a visually impaired person. She doesn't do much web surfing though and doesn't really need a high contrast web browser. If however a colleague wants to help her maintain the machine or quickly wants to look up something on the web for her, then it would be great if it was possible to access web pages "unfiltered", in their regular look and feel, as designed by the web author. In fact, the High Contrast Mode significantly changes the way web pages look, and sometimes screen elements needed for navigation etc. are suppressed or rendered invisible. (This, of course, is often related to poor web design, like graphical buttons or links with the actual label as a background image or without an ALT attribute, but unfortunately, vast parts of the web are not really "accessible", so accessibility will remain an issue for the browser as well.)
    Creating a separate user account certainly is an option, especially for shared machines, but it makes it more complicated to quickly jump in and give her a hand. That's why separate user accounts are not really popular here; instead, Opera was installed which does not adhere to the OS setting and therefore grants a neutral view to all web pages.
    Actually, when I started investigating on that issue, I was quite surprised that there was no option for this in Firefox, not even in "about:config". After all, Firefox obviously queries the OS for the Contrast setting and then chooses to render the page this or that way, so I thought they certainly implemented a flag or something to change the behavior. It seems however there is no such flag, is there? This distinction seems to be entirely hard-wired.
    I am not sure if this is the place for change requests, but if somebody stumbles upon this question, is there any chance to make this setting open to the public? Something like an option "accessibility.useoscontrastsetting" or so? This might also facilitate it to develop an add-on for on-demand switching between the two modes, and web designers could check more easily how their work looks for those with poor eyesight.
    Greetings,
    Bounder of Adventure

  • WHY Gnome ignores the nvidia-settings --load-config ...?

    ftp://download.nvidia.com/XFree86/Linux … overridden
    "If you believe that your desktop environment is overriding settings that you configured in nvidia-settings, some possible solutions are:
        1. Use the display configuration tools provided as part of the desktop environment (e.g. gnome-control-center display, gnome-display-properties, kcmshell4 display, unity-control-center display, xfce4-display-settings) to configure your displays, instead of the nvidia-settings control panel or the xrandr command line tool. Setting your desired configuration using the desktop environment’s tools should cause that configuration to be the one which is restored when the desktop environment overrides the existing configuration from nvidia-settings. If you are not sure which tools your desktop environment uses for display configuration, you may be able to discover them by navigating any available system menus for “Display” or “Monitor” control panels.
        2. For settings loaded from ~/.nvidia-settings-rc which have been overridden, run nvidia-settings --load-config-only as needed to reload the settings from ~/.nvidia-settings-rc.
        3. Disable any features your desktop environment may have for managing displays. (Note: this may disable other features, such as display configuration tools that are integrated into the desktop.)
        4. Use a different desktop environment which does not actively manage display configuration, or do not use any desktop environment at all…"
    It’s very frustrating for me. The driver is good and efficient, but you can not permanently set of personal values of brightness, contrast and gamma.
    It is there a chance to Gnome offered brightness and contrast controls integrated with gnome-tweak-tool or with any other tool?
    https://wiki.archlinux.org/index.php/NV … a-settings
    I found a lot of instructions "how to", but not met with confirmation: IT WORKS.

    The 2 value is the default value by the way. If you start your X-session without your nvidia command, you will see it:
    nvidia-settings -q all | grep 'Pixmap'
    I don't know how it will work out for others, but the 0 value feels the best for me, and generally the lower the value the better. (thus, 4 seems the worst)
    I tried to experiment with the "PixmapCacheRoundSizeKB" attribute as well, but didn't notice any improvement, and it was kind of a letdown.
    Oh, and firefox seems way too sluggish to even try to make it smoother, google-chrome ftw.
    Anyway, I think the thread gets derailed with this discussion, maybe it would be better to start a new one in a different subforum and talk about the possible nvidia settings.
    edit. Ok, I just discovered that 0 value messes up my fonts in some applications. I think I'll stick with the default value.
    Last edited by T.J.S. (2012-11-18 22:35:37)

  • Getting the error while loading the master data

    Hi
    i have tried to delete the master data using right click and delete master data, but still there are data.
    Now i am trying to load this master data again then i am getting the message "0 from 50033 records"
    and data load got failed with error message "master data/text of 0vendor already deleted "
    and due  to this i could not able to load my other infoprovider (which have 0 vendor).
    can any body help me, it very urgent...
    thanks and regards
    Anupam

    Hi Raju,
            I assume there are no routines written in the update rules and also you ae directly loading the data from R/3 ( not from any ODS). If that is the case then it could be that, the data maintained in R/3 has overlapping time intervals (since  time dependency of attributes is involved). Check your PSA if the same profit center has time intervals which over lap. In that case, you need to get this fixed in R/3. If there are no overlapping time intervals, you can simply increase the error tolerance limit in your info-package and repeat the load.
    Hope this helps you.
    Thanks & Regards,
    Nithin Reddy.

  • How to Ignore the errors while exporting

    Hi ,
    i am trying to import a dump using imp command. Out of 10000 user objects, 5000 objects has got imported successfully. Meanwhile because of a LAN failure, import was not able to continue. And again i tried with import the same. System is trying to import each and every row in table, and the log file is populated with all unique constraint errors. Is there a way to suppress these errors or else the best way is to drop all objects and import again. This is my import command. Kindly advice me.
    USERID=bditest/bditest@aspac
    FILE=D:\dump112\first10022009.dmp
    FROMUSER=BEIFLEX
    TOUSER=bditest
    LOG=D:\logbdi
    IGNORE=Y
    STATISTICS=NONE
    compile=N
    BUFFER=1000000

    One of the options would be carry out a table level import (you could generate the list of tables from the dump file using SHOW & LOGFILE options).
    Other one, as you have mentioned, would be to drop the associated schema (with CASCADE option)- with the assumption that these 5000 objects which were imported are the only objects in this schema - and then run the import again. Better to initiate the import from the server to avoid such problems :-)
    And, please post the queries in appropriate sections. This forum deals with the issues related Oracle software downloads.

  • Error while loading image from Windows Phone gallery into my Unity application

    Hi,
    I have developped a Windows Phone plugin for my Unity application which enable me to open the Windows Phone gallery in order to select an image and get its physic path.
    I've used this path to load the image in the application with a WWW object but I get this error
    "Error. Operation has failed with error 0x80070005: access is denied."
    The path is correct because I display it and I've ticked the ID_CAP_MEDIALIB_PHOTO in the WMAppManifest.xml (Capabilities tab).
    Here is my Unity C# test code to load the image with the path.
    IEnumerator loadImage()
    this.guiText.text = filePath;
    WWW www = new WWW(filePath);
    yield return www;
    if(www.error == null)
    GameObject texture = GameObject.Find("UNITY");
    if(texture != null)
    texture.guiTexture.texture = www.texture;
    Any help would be appreciated ! Thanks in advance !

    The error is correct. Your app doesn't have direct access to that path. It can directly load files only from its app data and install directories.
    To load from the libraries I it needs to use the StorageFile to get brokered access.
    The easiest way may be to copy from the library to local data then use WWW to load that. Otherwise you'll probably need to wrap the StorageFile can for use in unity. Unity has such a wrapper in the Unity Engine.WSA namespace that you can try

  • Out Of Memory Exception While Loading Images in Windows Phone 8 Silverlight App?

    Hi,
    I am developing a windows phone 8 silver light app , I am loading high resolution images from web  through image control , After loading 2-3 images I am getting outof memory exception ,
    I am unable to catch this , and I am unable to break this exception , Can anyone tell me how to handle this exception,
    I am searching solution for this  from last 15 days but I am unable to find solution,
    I tried by setting the bitmap image source to null by doing this also I am getting exception, I tried by using gc.collect() also ..
    First I am loading list of images in listbox with lowres of size 100X100 , in selection change event I am changing the image source , 
    My image control code is
    <Canvas Width="480" Height="720">
    <Image Width="480" x:Name="MyImage" Height="720" Stretch="Uniform" >
    <Image.Source>
    <BitmapImage x:Name="MyImage1"/>
    </Image.Source>
    <toolkit:GestureService.GestureListener>
    <toolkit:GestureListener Flick="GestureListener_Flick_1"
    PinchStarted="OnPinchStarted" DragDelta="GestureListener_DragDelta"
    PinchDelta="OnPinchDelta"/>
    </toolkit:GestureService.GestureListener>
    <Image.RenderTransform>
    <CompositeTransform x:Name="myTransform"
    ScaleX="1" ScaleY="1"
    TranslateX="0" TranslateY="0"/>
    </Image.RenderTransform>
    </Image>
    </Canvas>
    My listbox selection changed code is
    GC.Collect();
    GC.WaitForPendingFinalizers();
    Classes.PgaeInfo ob = listpages.SelectedItem as Classes.PgaeInfo;
    progressLoad.Visibility = Visibility.Visible;
    LayoutRoot.Opacity = 0.8;
    LayoutRoot.IsHitTestVisible = false;
    StackPanel st = sender as StackPanel;
    index = ob.pId - 1;
    JArray jsonArray = JArray.Parse(json);
    JToken jsonArray_Item = jsonArray[index];
    string sour = "xxx.xxx.xxx.jpeg" (only one image for sample)
    img.Source = null;
    DisposeImage(bm);
    img.Source = new BitmapImage(new Uri(sour));
    MyImage1.UriSource = null;
    MyImage1.DecodePixelHeight = (int)img.Height;
    MyImage1.DecodePixelWidth = (int)img.Width;
    MyImage1.UriSource = new Uri(sour);
    Any help..
    thanks..
    Suresh.M

    Hello Suresh,
    Are you loading multiple images at once on one page? If so this is an expected behavior. There is limited memory available per app so it's important to not load too large or too many photos at once in your app.
    If possible you can try to convert your Windows Phone 8 to Window Phone 8.1 so as to take advantage of the FlipView control which is built to handle photo gallery-like applications.
    Also you can always run the Windows Phone Application Analysis tool to check on the application performance and memory usage. This will help you test and fine tune your app accordingly.
    Let me know if this helps.
    Abdulwahab Suleiman

  • Sun PKCS#11 provider is caching PIN in applets

    I am coding an applet which uses Sun PKCS#11 provider to encrypt data. But There I am getting a strange problem of PIN caching.
    My Scenario_
    1. User login: User enters correct pin and Password is encrypted and sent to server.
    2. After log off button click, Login screen is displayed again. Now user enters wrong PIN.
    3. STRANGE Behavior: The encryption works well with the wrong key.
    1. I have removed the provider and readded it again.
    2. Created KeyStore again,
    But all this results in same problem.

    The program is just to simulate the issue. I understand that user have to pass the pin. In our GUI we have our own dialog to get the pin from user and pass it to the PKCS#11 provider that uses the pin while loading the keystore.
    cac.load(null, pin); // the pin passed in load method is not used at all
    My problem here is even after the proper pin is supplied by the user the active client PIN dialog is prompted. Whereas in LInux JRE this works fine.
    We have a command line application where active client dialog popup is not acceptable. We need to get the PIN from user as command argument and load the keystore.
    Please let me know if this clarifies the confusion.
    Thanks,
    Ruhul

  • 'Overlapping Time Intervals' error while loading the Master Data

    Guys,
              Need you help with this. I am trying to load the Master Data (attribute) for InfoObject 0FMD_FRSITM using DTP from DataSource 0FMD_FRSITM_ATTR and am getting an error 'Overlapping Time Intervals'.
    This is happening due to overlapping Valid From/Valid To date's for the same Financial Statement Item (0FMD_FRSITM) with different Editions.
    If I select the option 'Ignore Duplicate Records' while loading the data, it is successful. But not all the records are loads and Editions are missing.
    Below is an example of how the data looks like.
    FRSITM         Valid To                  Valid From                 Edition
    1001             12/31/9999             04/01/2010                2010.1.1
    1001             01/31/2010             03/01/2010                2010.1.2
    1001             12/31/9999             02/01/2010                2010.1.3
    In the above scenario, the Valid To Data for record 1 and record 3 is the same (12/31/9999) and the record 3 is being ignore when I select the option 'Ignore Duplicate Records'.
    And also I see that the Edition is not the Key Field.
    Any suggestions or ideas? Appreciate your help.
    Thanks.

    FRSITM Valid To Valid From Edition
    1001 12/31/9999 04/01/2010 2010.1.1
    1001 01/31/2010 03/01/2010 2010.1.2
    1001 12/31/9999 02/01/2010 2010.1.3
    1. While selecting ignore duplicate, make sure to-date is not part of symantic key.
    2. if system comes across two same records it picks up the latest one.
    3. It shall merge the timelines is overlap is found.
    4. I hope Edition is time dependent attribute
    I believe infoobjet key is FRSITM Valid To.
    In your case because first record has more period and may be the latets record system ignore the earlier one with the same time interval.
    have a look at Q table and you shall be able to figure out for your self.
    Hope it helps
    Vikash

  • Inspection at vendor site while loading the material?

    Hi All,
    How we can enable the inspection while loading the material i.e at vendor's site, how we can enable the inspection while unloading the material at customer site.
    That is I exactly require an inspection set up to record the values after PO & before GR  and after PGI in sales. How do i enable the same/
    regards,
    Sanjana

    after PO & before GR
    1. make qm procurement active
    2. set a control key with delivery release, 01 inspection type active
    3. create q info record qi01 for that material , plant , vendor- in inspection control tab enter01 insp. type
    4. when po is created , go to qi07 select chedule line and click on inspection lot save
    5. qa32 check for source inspection lot, this will be non stock relevent u can record results and defects
    after PGI in sales
    1. activate insp. type 10
    2. create q info record for sales qv51- click on new info record.enter material and select after delivery
    3. when pgi is done it will create inspection lot for recording purpose

  • Error 8 while loading the data from the souce system

    Hi Gurus
    Every day we are loading some data from one of our souce systems through process chain
    But today all the loads failed complaining about error 8 while extacting the data
    connection to source system is fine
    we have the problem while loading master data from the same source system
    any solution?
    Thanks in advance

    Hi,
    Check with basis team regarding any patches applied in source system or not ? If yes then replicate all data sources and activate again.
    hope it helps...
    regards,
    Raju

  • TIME_OUT in ST22 while loading data

    Hello all!
    While I load data from ODS-object to an InfoCube, after around 18 minutes I have the first TIME_OUT in ST22. Some seconds later I have the next and then again after 18 minutes and so on. All the time while loading. The loading doesn´t stop.
    I found the following statement in ST22:
    The program "GP2GCXJX3UPKBEN0B528IGJFPA3 " has exceeded the maximum permitted runtime and has therefore been terminated.
    But loading is still running.
    This programm is the programm which is generated from the update rules which can be found in the update rules under ->Extras ->Display Activated Programm in the menu there.
    I found also the information in ST22 that "rdisp/max_wprun_time" is 1000 seconds (16.66 minutes) which is the max. runtime. I think there is a second chance so the max. runtime should be 2000 seconds.
    But I think "rdisp/max_wprun_time" is a parameter for dialog processes and loading over InfoPackage isn´t one as far as I know.
    I load as a backround process. I´m loading from ODS and reading in update rules from 2 other ODS-objects. I read around 2 million records. Another IC which is very similar but doesn´t read from the 2nd ODS needs around 1 and a half hour to load.
    Can someone please help me?
    Thank you,
    Peter

    Peter,
    Update rules are processed in foreground and the time out setting applies to all dialog processes. The processing is done one data packet at a time.
    If the load is from ODS to InfoCube and is timing out then there is no option but to tune the update rules. Bring down the records that are being read. If your select statement is reading based on the contents of the data packet, then bring down the size of the data packet. THis can be done in the InfoPack in Scheduler --> DataS. Default Data Transfer. In the Max size field try 10000 or even 5000. Number of data pakckets will increase but processing time per packet should be lower.
    Another option is to find the ODS PSA request in the PSA Tree. ODS PSA Request number is the request number right before the REQU number in the ODS requests tab. They begin with ODSR.... Find this in the PSA and update to data target from there. This processing is then done in the background and the time out setting does not apply.
    If you do not see the request then turn on display generated object from the menu of the admin workbench Settings --> Display Generated Objects
    Cheers
    Aneesh

  • Error 0(Native: listNetInterfaces:[3]) and error while loading shared libraries: libpthread.so.0: cannot open shared object file: No such file or directory

    Hi Gurus,
    I'm trying to upgrade my test 9.2.0.8 rac to 10.1 rac. I cannot upgrade to 10.2 because of RAM limitations on my test RAC. 10.1 Clusterware software was successfully installed and the daemons are up with OCR and voting disk created. Then during the installation of RAC software at the end, root.sh needs to be run. When I run root.sh, it gave the error: while loading shared libraries: libpthread.so.0: cannot open shared object file: No such file or directory. I have libpthread.so.0 in /lib. I looked up on metalink and found Doc ID: 414163.1 . I unset the LD_ASSUME_KERNEL in vipca (unsetting of LD_ASSUME_KERNEL was not required in srvctl because there was no LD_ASSUME_KERNEL in srvctl). Then I tried to run vipca manually. I receive the following error: Error 0(Native: listNetInterfaces:[3]). I'm able to see xclock and xeyes. So its not a problem with x.
    OS: OEL5 32 bit
    oifcfg iflist
    eth0 192.168.2.0
    eth1 10.0.0.0
    oifcfg getif
    eth1 10.0.0.0 global cluster_interconnect
    eth1 10.1.1.0 global cluster_interconnect
    eth0 192.168.2.0 global public
    cat /etc/hosts
    192.168.2.3 sunny1pub.ezhome.com sunny1pub
    192.168.2.4 sunny2pub.ezhome.com sunny2pub
    192.168.2.33 sunny1vip.ezhome.com sunny1vip
    192.168.2.44 sunny2vip.ezhome.com sunny2vip
    10.1.1.1 sunny1prv.ezhome.com sunny1prv
    10.1.1.2 sunny2prv.ezhome.com sunny2prv
    My questions are:
    should ping on sunny1vip and sunny2vip be already working? As of now they dont work.
    if you look at oifcfg getif, I initially had eth1 10.0.0.0 global cluster_interconnect,eth0 192.168.2.0 global public then I created eth1 10.1.1.0 global cluster_interconnect with setif. Should it be 10.1.1.0 or 10.0.0.0. I looked at the subnet calculator and it says for 10.1.1.1, 10.0.0.0 is the subnet. In metalink they had used 10.10.10.0 and hence I used 10.1.1.0
    Any ideas on resolving this issue would be very much appreciated. I had been searching on oracle forums, google, metalink but all of them refer to DOC Id 414163.1 but it does n't seem to work. Please help. Thanks in advance.
    Edited by: ayyappa on Aug 20, 2009 10:13 AM
    Edited by: ayyappa on Aug 20, 2009 10:14 AM
    Edited by: ayyappa on Aug 20, 2009 10:15 AM

    a step forward towards resolution but i need some help from the gurus.
    root# cat /etc/hosts
    127.0.0.1 localhost.localdomain localhost
    ::1 localhost6.localdomain6 localhost6
    192.168.2.3 sunny1pub.ezhome.com sunny1pub
    192.168.2.4 sunny2pub.ezhome.com sunny2pub
    10.1.1.1 sunny1prv.ezhome.com sunny1prv
    10.1.1.2 sunny2prv.ezhome.com sunny2prv
    192.168.2.33 sunny1vip.ezhome.com sunny1vip
    192.168.2.44 sunny2vip.ezhome.com sunny2vip
    root# /u01/app/oracle/product/crs/bin/oifcfg iflist
    eth1 10.0.0.0
    eth0 192.168.2.0
    root# /u01/app/oracle/product/crs/bin/oifcfg getif
    eth1 10.0.0.0 global cluster_interconnect
    eth0 191.168.2.0 global public
    root# /u01/app/oracle/product/10.1.0/Db_1/bin/srvctl config nodeapps -n sunny1pub -a
    ****ORACLE_HOME environment variable not set!
    ORACLE_HOME should be set to the main directory that contain oracle products. set and export ORACLE_HOME, then re-run.
    root# export ORACLE_BASE=/u01/app/oracle
    root# export ORACLE_HOME=/u01/app/oracle/product/10.1.0/Db_1
    root# export ORA_CRS_HOME=/u01/app/oracle/product/crs
    root# export PATH=$PATH:$ORACLE_HOME/bin
    root# /u01/app/oracle/product/10.1.0/Db_1/bin/srvctl config nodeapps -n sunny1pub -a
    VIP does not exist.
    root# /u01/app/oracle/product/10.1.0/Db_1/bin/srvctl add nodeapps -n sunny1pub -o $ORACLE_HOME -A 192.168.2.33/255.255.255.0
    root# /u01/app/oracle/product/10.1.0/Db_1/bin/srvctl add nodeapps -n sunny2pub -o $ORACLE_HOME -A 192.168.2.44/255.255.255.0
    root# /u01/app/oracle/product/10.1.0/Db_1/bin/srvctl config nodeapps -n sunny1pub -a
    VIP exists.: sunny1vip.ezhome.com/192.168.2.33/255.255.255.0
    root# /u01/app/oracle/product/10.1.0/Db_1/bin/srvctl config nodeapps -n sunny2pub -a
    VIP exists.: sunny2vip.ezhome.com/192.168.2.44/255.255.255.0
    Once I execute the add nodeapps command as root on node 1, I was able to get vip exists for config nodeapps on node 2. The above 2 statements resulted me with same values on both nodes. After this I executed root.sh on both nodes, I did not receive any errors. It said CRS resources are already configured.
    My questions to the gurus are as follows:
    Should ping on vip work? It does not work now.
    srvctl status nodeapps -n sunny1pub(same result for sunny2pub)
    VIP is not running on node: sunny1pub
    GSD is not running on node: sunny1pub
    PRKO-2016 : Error in checking condition of listener on node: sunny1pub
    ONS daemon is not running on node: sunny1pub
    [root@sunny1pub ~]# /u01/app/oracle/product/crs/bin/crs_stat -t
    Name Type Target State Host
    ora....pub.gsd application OFFLINE OFFLINE
    ora....pub.ons application OFFLINE OFFLINE
    ora....pub.vip application OFFLINE OFFLINE
    ora....pub.gsd application OFFLINE OFFLINE
    ora....pub.ons application OFFLINE OFFLINE
    ora....pub.vip application OFFLINE OFFLINE
    Will crs_stat and srvctl status nodeapps -n sunny1pub work after I upgrade my database or should they be working now already? I just choose to install 10.1.0.3 software and after running root.sh on both nodes, I clicked ok and then the End of installation screen appeared. Under installed products, I see 9i home, 10g home, crs home. Under 10g home and crs home, I see cluster nodes(sunny1pub and sunny2pub) So it looks like the 10g software is installed.

Maybe you are looking for