URL / Hostname resolution

Hello
I've installed BI Publisher 10.1.3.3.2 on top of Oracle Application Server - 10.1.3.1.0. Lets say the Application Server name is as2.mydomain.com with IP address 192.168.2.242. There is a firewall + router that resolves www.mydomain.com and translates the WAN traffic to the local IP address (192.168.2.242). I'm able to access the Application server from anywhere in the world which has no problems and so viewing Apex application (running on modplsql) isn't a problem at all. Likewise...
http://www.mydomain.com/xmlpserver
opens the login screen for BI Publisher. However there is a problem here...
When I'm working outside my LAN and supply my username / password and press the "sign in" buton, am getting "Page cannot be displayed". If I configure my "hosts" file on my PC to have an entry for as2.mydomain.com to point to the same IP address as www.mydomain.com and invoke the URL (http://as2.mydomain.com/xmlpserver), I can login. So it clearly means that BI Publisher's login button is looking for as2.mydomain.com even when accessed via www.mydomain.com/xmlpserver.
Could anyone throw some light on what the configuration I've missed (to make it work on www.mydomain.com/xmlpserver)?
Hope the explanation is clear. I'm more than happy to provide any related info you may need to understand my problem.
Thanks
Kannan

Similar Messages

Error #2048 (Sandbox Violation) in AIR prevents future hostname resolution

Scenario:
Create an application which tries opening 100 socket connections. This in turn triggers an Error #2031(Socket Error) on a few of them, I believe this is a limitation in Flash? or something similar? After a few seconds, those same socket connections will trigger an Error #2048 (Security Sandbox Violation).
If the hostname which you used to connect to the sockets is a name (ex: "localhost") it will prevent any new connections from opening at all and will trigger an Error #2048 on all those future connections even though they are completely unrelated to the first.
If the hostname which you use is an IP Address ("127.0.0.1") those individual connections will have failed but no future interaction will be affected.
Problem:
1) Why is an AIR application triggering a security sandbox error at all?
2) Why is this error locking up hostname resolution?
3) Is this in fact a hostname resolution problem since there are no issues when using an IP address?
3a) In my testing it appears that once the Error #2048 "locks" resolution, it can be "unlocked" by using an IP Address on any socket (any successful socket connection really) which will restore the name resolution capability. Or so it seems.
Any help would be greatly appreciated. Until I nailed down the specific cases where this was happening the errors appeared very byzantine.
It is not only the Error #2031 from too many connections that triggers the Error #2048. The main problem is that Error #2048 is triggered by unspecified socket errors (unexpected close for example) and hence locks up future connections.
The reason this is such a problem is that I'm creating an application specifically for the purpose of monitoring a custom server so errors do happen, and if future requests cannot complete a connection due to name lookup failure it can cause a huge problem for monitoring validity.

Any help with this would be greatly appreciated.

The https URL hostname does not match the Common Name (CN) on the server.

Hi,
I am getting the following error while trying to use https with our self-signed certificates.
javax.xml.ws.soap.SOAPFaultException: Marshalling Error: The https URL hostname does not match the Common Name (CN) on the server certificate. To disable this check (NOT recommended for production) set the CXF client TLS configuration property "disableCNCheck" to true.
The above error is the error I get, when I try to use the Web Services using https.
I have added the following lines in cxf.xml but it still doesn't seem to work correctly.
<http-conf:conduit name="*.http-conduit">

<http-conf:tlsClientParameters disableCNCheck="true" />
Kindly let me know on what would be the issue here?.

I had P2V'd a SQL 2008 server and was having this issue. I tried everything I could find to get the affinity corrected; setting the Lock Pages security policy, trying the affinity commands in Single User mode, etc.
Then wrighbar's response got me headed in the right direction, but I ran into an issue where the previous engineer had set the Physical SQL server to have affinity on procs 9-16 of a 16 proc box, I could only set up to 8 procs on my VM. After searching
for a while for registry keys or config files that might be editable to change the affinity I couldn't find where SQL got that information from. Finally it hit me, maybe it's stored in the master or msdb datatbases.
SOLUTION: I was able to go back to the original Physical machine, change the affinity settings there, Stop SQL on both boxes, then copied MASTER, MODEL, MSDB, TEMPDB from the original Physical machine to the new virtual machine. All services started
OK on the virtual machine now and affinity was set the way I needed it.

Adapter URL - hostname vs FQDN

I see the following error in dev_icm:
MatchTargetName("<hostname>", "CN=<hostname.domain.com, OU=XXXXXXXX, O=XXXXXXXXXXXXXX
SSL NI-sock: local=<IP >:63071 peer=<IP>:<https java port>
<<- ERROR: SapSSLSessionStart(sssl_hdl=0x1059a4a20)==SSSLERR_SERVER_CERT_MISMATCH
ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-30): SSSLERR_SERVER_CERT_MISMATCH [icxxconn_m
ERROR => URLDecode recognised invalid sign in form field [ictxxfilt_mt 248]
ERROR => illegal request [http_auth_mt.c 470]
The issue seems to be that the certificate is for FQDN and request is
with just the hostname. Also in the sld the adapter engine urls are all
hostname:port. Where do I change this such that it uses the FQDN:port.
Any direction is much appreciated.
Thanks
S.

somewhat similar problem solved in the below thread:
Web UI does not work after deployment of BBPCRM SP for CRM 7
P.N.: the above thread is not related to XI/PI......giving for your reference

Url/hostname whitelisting with 867VAE?

Dear Community
Can the 867VAE do URL or hostname whitelisting? Not just IP address, but dns hostname.
We want to block all outgoing traffic except for a few hosts on the Internet. We don't want to just block web browsing, but all protocols. These computers need to be able to reach Logmein's various hosts, as well as Chase Paymentech for submitting credit card payments.
Thanks,
Peter
(I tried to ask this a few hours ago but cannot find any reference to the attempt, so I'm doing it again)

Hi Kumar,
it seems that your connections are fine, as you are able to connect using localhost.
however, if using public IP it is trying to time out, may be because, it is either failing to resolve the external to internal IP ( NAT ) or proxy settings can cause the problem with public IP.
Check with your network Admin, if you are able to use public ip and open http://publicip:8080 from your ipad?
Regards,
Atul B

DNS hostname resolution

Hi,
I've installed OSX server 10.3.4 with Open Directory.
From terminal, when I type hostname, it returns with the correct hostname.
When I type host and given hostname from previous line, it returns with a "host not found" and 3(NXDOMAIN) error.
Please help
Thx
eMAC Mac OS X (10.3.4)

To amplify a little bit on Camelot's suggestions:
1. In Server Admin, go to the DNS Service and click the Settings tab. Under General, Zone transfers and Recursion are both enabled by default. That's OK if your server is safely tucked away inside a private network. Under the Zones tab, enter a Zone name (smokin.private, for example) and a server name (emac, for example). Server Admin will show you a fully qualified domain name (emac.smokin.private). Enter your static local address (192.168.1.8) if necessary. Save.
2. In the server's System Preferences, enter the server's own local address (192.168.1.8) in the DNS Server field of the Network pane. You'll need to do this on each of your clients, too, for them to know to use the server for DNS. (Alternatively, if you have a router configured for DHCP, you can enter this information there and the clients will pick up the server's IP address with their DHCP leases. Just be sure the server itself isn't configured to use DHCP.)
3. Test your lookups.
4. You may want to set up a forwarder in this configuration. You may find this thread helpful.
Xserve G5 Mac OS X (10.4.5)

Hostname resolution question. Could it be DNS?

I've recently installed 10.5 Server on my Mac. I named the machine Silkworth, but when I run changeip -checkhostname I get the below. I do I get back to the hostname w/o ".local"?
Silkworth:etc waynehapp$ sudo changeip -checkhostname
Primary address = 192.168.1.100
Current HostName = Silkworth.local
The DNS hostname is not available, please repair DNS and re-run this tool.

If you go to terminal and type in *host servername* does it resolve your ip? If you type *host yourip* does it resolve your server name? This is how you check to see if DNS is working properly. If it does, then DNS is working. If it doesn't you have a problem. Make sure under setting in the DNS service that you have added your ip range into the recursive section. For example you might enter 192.168.0.0/24. Also make sure you still have an ns record for your primary zone. And that your primary zone name is fully qualified. For instance if your zone was called lunch-lady.land.com your fully qualified domain name would be lunch-lady.land.com. The period at the end is very important in this location. Hope this helps.
David

How to access a url only from APEX

Hi all.
We have a system that is accesible from internet, We are trying to secure the access to this system via login from APEX in order to deny the access to the URL if the request is not from our APEX app.
We configured the corresponding hostname in our APEX server and some firewall rules, but when a client clicks the link the hostname is looked in the client's computer, so is never found.
Is there any way to make this hostname resolution in the server's side?
Thanks in advance, regards.

sKC,
You may need to explain yourself in more detail
"How do I access a URL only from APEX?"
If you are trying to limit access to "mynormal.server.com" by seeing if the end user clicked on a link from "myapex.server.com", the answer is:
You don't.
Trying to limit access to a web page based on how you got there is a really really bad form of security due to the false sense of security it implies.
It is so bad that it is better to not even try.
reason:
All URL requests can be easily manipulated by the client computer that is making the request. (ie the request is easily faked.)
The Unix utility wget can be used to fake the 'referrer' information.
MK

WebDynpro URL failing?

Hi,
I'm working on ESS/MSS implementation. We got some workflows tasks that are sitting in UWL task list when employee submitted leave request. Manager need to approve it.
As a manager role, when I click on LeaveReqeust task from UWL inbox, portal tries to open the leave request in WebDynpro but fails with error saying no service is available. The new opened window has this message
Service cannot be reached
What has happened?
URL http://<hostname>:8010/webdynpro/dispatcher/sap.com/ess~lea/LeaveRequestApprover call was terminated because the corresponding service is not available.
The interesting thing is, the URL hostname it's using is not the portal hostname that is configured in SAP_WebDynpro_XSS system object WebAS connection details. If I grab the above url and change the hostname and port to my portal hostname and port 50000, paste in new IE browser it works successfully (Leave request is opening).
Where is this hostname and port number in the above URL coming from? My SAP_WebDynpro_XSS system object connection test are failing with following message.
The Web AS ping service http://<Portal hostname>:50000/sap/bc/ping was not pinged successfully. If the ping service is not activated on the Web AS, you can try to call the ping service manually.
An HTTP/S connection to http://<Portal hostname>:50000/webdynpro/dispatcher/ was not obtained successfully; this might be due to a closed port on the Firewall.
Thanks
Praveen

I resolved this issue, it's got to do with UWL configuration. Please refer to this thread for resolution
Leave request fails to open?
I still have SAP_WebDynPro_XSS system object connection tests are failing. Shall post back if there is any other issue due to this.
Thanks
Praveen.

How can I setup Open Directory so that name resolution can also be achieved using a LDAPv3 server (Linux host)

I have a Mac OS X Lion machine (macbook) which is used in a network where most machines are running Linux. Hostname resolution for local machines is achieved on the Linux boxes using a LDAP host. How can a similar behavior can be obtained on Lion (I found no /etc/nsswitch.conf).
I started the Directory Utility, chose the LDAPv3 line, add a line with the IP address of the LDAP server and a "base" but this does not seem to work.
The opendirectory log file is not very informative. It just says (XX.XX.XX.XX is the LDAP server IP address):
2011-10-27 16:42:33.040 CEST - Registered subnode with name '/LDAPv3/XX.XX.XX.XX'
Thanks for any help.
Thomas

My advice is to advise everyone of a scheduled down time when it's convinient for you and implement plan B.
Plan A will simply cause you more grief in the long run.

Acquiring case sensitive URL info from browser

In a Java filter am trying to acquire the case sensitive URL (hostname) from the app I'm filtering.
Normally, to get the whole URL, one would do something like:
String myurl = request.getServerName() + request.getRequestURI();getServerName returns an all lowercase server name from what I'm seeing...
Is it possible to get the case sensitive server name from the requested url....
For example:
http://mysErVer.cOm/myApp/
request.getServerName returns "*myserver.com*" whereas I want "*mysErVer.cOm*"
Any ideas? Am I missing anything obvious?

I may be wrong, but I'm pretty sure that when the request is sent by the browser, it's converted to lowercase, so if you want to know what the user typed into the address bar, you won't get it. Urls are defined as lowercase anyway, so what difference does it make how it's entered?
http://en.wikipedia.org/wiki/URL_normalization

Can we have two different web url for a same instance ??

Can we have two different web url for a same instance ??
I have read it somewhere that it's possible in R12....please correct me if I am wrong...and if it's correct please let me know the doc id for it...

Hi again;
Pelase also see Hussein Sawwan previous great post
Multiple URL (hostname.domain) to the same instance
Multiple URL (hostname.domain) to the same instance
Regard
Helios

Url.openConnection with PROXY

How can I do a url.openConnection through a proxy WITHOUT CHANGING THE SYSTEM PARAMETERS ??

You can build the HttpURLConnection as follows
HttpURLConnection url = new sun.net.www.protocol.http.HttpURLConnection(url, hostname, port);http://www.sourcebot.com/sourcebot/decompile.cgi?url=http://www.sourcebot.com/sourcebot/sun/net/www/protocol/http/HttpURLConnection.class

Hostname configurations for rac install

Is there any note which shows restrictions /recommendations for hostname configuration outlined by oracle to install a 2 node cluster with SCAN features enabled.
with any Oracle applications that would reference this Oracle RAC server ?
The applications of most concern are Oracle GRID,SQL*NET, ODBC,SIEBEL UCM,SIEBEL CRM

Simply comply to RFC 952 and use FQDN.
For hostname resolution, you need to use DNS (preferably), but +/etc/hosts+ can also be used (works fine, but not recommended for robustness).

JDev - J2EE Deployment Problem

I'm not sure if I should be posting this here or in the J2EE forum but here is my problem. Whenever I try to deploy a web application to our J2EE server I get the following error.
Invoking Oracle9iAS admin tool...
D:\jdk1.3.1\jre\bin\javaw.exe -jar D:\jdev9i_902\j2ee\home\admin.jar ormi://some.remote.host:23791/ admin **** -deploy -file D:\jdev9i_902\jdev\mywork\JSPTest\HW\HW.ear -deploymentName HW
Communication error: Disconnected: Connection reset by peer: JVM_recv in socket input stream read
Exit status of Oracle9iAS admin tool (-deploy): 0
-If i try to deploy a war file I get this slightly different error.
D:\jdk1.3.1\jre\bin\javaw.exe -Xmx128m -jar D:\jdev9i_902\j2ee\home\admin.jar ormi://some.remote.host:23791/ admin **** -deploy -file D:\jdev9i_902\jdev\mywork\JSPTest\Project1\webapp1.ear -deploymentName webapp1
Communication error: Disconnected: Connection reset by peer: JVM_recv in socket input stream read
Exit status of Oracle9iAS admin tool (-deploy): 0
D:\jdk1.3.1\jre\bin\javaw.exe -jar D:\jdev9i_902\j2ee\home\admin.jar ormi://some.remote.host:23791/ admin **** -bindWebApp webapp1 webapp1 http-web-site /JSPTest-Project1-context-root
Error: com.evermind.server.rmi.OrionRemoteException: Disconnected: Connection reset by peer: JVM_recv in socket input stream read
Exit status of Oracle9iAS admin tool (-bindWebApp): 1
Here is what I do to run our J2EE server.
java -Xmx268435456 -jar $j2ee_home/orion.jar
Oracle9iAS (1.0.2.2.1) Containers for J2EE initialized
I'm running JDev 9.0.2.829
I have confirmed that the J2EE server is listening on port 23791 and I can browse to it on port 8888. Any help would be appreciated.
-Eric Dalquist

See Infrastructure Serrver is down and Re: Lov values filtered by the value selected in other LOV for related discussions.
Here is a cut-and-paste of the important part:
When JDeveloper deploys to a remote OC4J, JDeveloper must use client-side classes to communicate with the server-side administrative objects via RMI. Since communication over RMI uses object serialization to send object instances across the wire, if there is a difference in version in the client-side objects and the server-side objects, there are likely to be deploy-time problems. The incompatibility would be due to implementation decisions made by the OC4J development team.
By default, JDeveloper uses the client-side OC4J classes that ship with JDeveloper. However, if you need to deploy to a different version of OC4J than what ships with JDeveloper, you can tell JDeveloper to use a different set of client-side classes when defining an OC4J connection in the JDeveloper connection manager. On step 3 of the Connection Wizard, there is a field labeled "Local Directory Where admin.jar for Oracle9iAS is Installed". Point that to the OC4J 1.0.2.2 directory containing admin.jar, and you should then be able to deploy from JDev 9i (9.0.2) production to OC4J 1.0.2.2.
There are a few other less common causes for hanging at deploy-time. Let's say you've specified a target server URL of "ormi://myserver".
1) Try specifying the full host name instead of the abbreviated name -- works around problems with hostname resolution.
2) Try specifying the IP address of the target server instead of the hostname -- works around problems with DNS lookups.
3) Try specifying "http:ormi://myserver" as the URL instead -- works around problems with a proxy server that is between the JDeveloper machine and the server (by using HTTP tunnelling).
Hope that helps.

URL / Hostname resolution

Similar Messages

Maybe you are looking for