ssh user equivalence

I found two metalink notes which have detailed step by step instructions to do ssh user equivalence:

372795.1
329476.1 Read the section about setting up ssh.

You can stop using rsh/rcp and set up ssh using these notes easily. rsh/rcp has following disadvantages:

1. It is not secure.
2. rcp uses standard ports below 1024 to transfer files, Available free ports in this range are free, so if you have to rsh a lot of files in parallel, it won't succeed.

ALECDC, ARGLTP, XDPCTRLS, FNDLIBR writing core files

After moving the storage to Solaris 10 or cloning from Solaris 8 box to Solaris 10 box, in a few instances the /var/crash/cores directory was reaching 100%. It was full of cores written by ALECDC, ARGLTP, XDPCTRLS, FNDLIBR, MSONEW, MSCSLD etc. I logged an SR with Oracle and they asked me for a stack trace. Metalink Note 1812.1 describes how to get a stack trace from a core file. Here's what I did:

Stack trace for ARGLTP

$ adb /apps11i/erp/appl/ar/11.5.0/bin/ARGLTP
1207343405-ARGLTP-16927-66128-54055-tsgsd1007-sun4u
core file = 1207343405-ARGLTP-16927-66128-54055-tsgsd1007-sun4u -- program
``
/apps11i/erp/appl/ar/11.5.0/bin/ARGLTP'' on platform SUNW,Netra-T12
SIGSEGV: Segmentation Fault
$c
libc.so.1`strcmp+0x60(174ba4, 73737431, 0, 0, 1d1900, 1d18e0)
afppre+0x1cc(2a9900, 262b50, 50, 50, ff1ea2b4, ff1f29f8)
fdpcls+0x3e4(4e, 1c3df4, 1c3de4, 1c3c00, 1c3c00, 1)
main+0x7704(14fc30, 14fc74, ffbf9efc, a, 2a5e28, 7f80)
_start+0xdc(0, 0, 0, 0, 0, 0)
$q

We nailed it finally after long discussions with Oracle. It was a bug. After ATG_PF.H RUP6 when concurrent programs try to write Completed successfully, a variable was not initialized in the code. Because of this even though the concurrent program completed successfully, it used to coredump before it was able to write to its log file: Completed successfully. Applying Patch 6815663 resolved this issue.

System error 53 - The network path was not found

In our loftware Windows 2000 box we have mounted a NAS device as Z:. It stopped working a few days ago. Mapping it with net use z: \\nasmount1\loftware again gave this error:

System error 53 - The network path was not found.

Symptom: when using net view ip or computername, you get system error 53. Resolutions:

1) if it is domain environment, check your WINS;
2) if it is peer-to-peer workgroup, enable NetBIOS over TCP/IP;
3) make sure the machine is running;
4) make sure file and Printer Share enabled on remote computer;
5) make sure client for ms networks is enabled on local computer;
6) make sure you type the correct name.

However all of the above were ok. On top of that, it mounted fine if I tried the net use command on my laptop. After many hours of trial and error, I realized that I am working from home and connected through VPN. I pinged a few colleagues in office and asked them to try the net use command. They got the same error as the loftware box. It looked like firewall settings had been changed. I installed VPN client on the loftware box and connected through VPN. Voila, net use command worked fine. I have to now talk to the firewall guys to find out what changed and revert to previous state.

150 Opening ASCII mode data connection hangs

I was asked to investigate an ftp issue in one of our test environments. ftp was being done through a concurrent program which was connecting to an external site and sending files:


$ ftp external.site.on.internet.com 39000

Connected to external.site.on.internet.com

Name (external.site.on.internet.com:user1): user1

331 Password required for user1.

Password:

ftp> dir

150 ASCII data connection (192,168,29,1,211,181 ).

Hangs here

Any command like dir or get or put would hang. However if we executed the very same commands from our laptops, it worked fine. Clearly something was blocking it. I did a network trace of connections through Wireshark and found that ftp was actually using two ports: 39000 and 39001. An explanation of this behavior is given in RFC 1579:

   The FTP protocol [1] uses a secondary TCP connection for actual
  transmission of files.  By default, this connection is set up by an
  active open from the FTP server to the FTP client.  However, this
  scheme does not work well with packet filter-based firewalls, which
  in general cannot permit incoming calls to random port numbers.

  If, on the other hand, clients use the PASV command, the data channel
  will be an outgoing call through the firewall.  Such calls are more
  easily handled, and present fewer problems.

However the ftp server did not support passive mode. Since the network trace gave us the information that two ports were being used, we have requested for firewall to be opened for incoming traffic from this site on those two ports. I'll update the post, once this gets done.

isRtl(java.lang.String) has protected access in oracle.apps.fnd.sso.SessionMgr

In one of our instances, after applying ATG_PF.H RUP6, July 2007, Oct 2007 and Jan 2008 CPU patches, the login page (AppsLocalLogin.jsp) did not come up. We got HTTP-500 Internal Server Error. Apache logs showed this:

Apache access_log showed:

192.168.3.5 - - [02/Apr/2008:16:33:13 -0400] "GET /OA_HTML/AppsLocalLogin.jsp HTTP/1.1" 500 544 2

jserv.log showed:

[02/04/2008 16:58:26:550 EDT] JspServlet: unable to dispatch to requested page:
Exception:oracle.jsp.provider.JspCompileException:

Errors compiling:/apps11i
/comn/_pages/_oa__html//_AppsLocalLogin.java

Line #	Error
416	[jsp src:line #:308] isRtl(java.lang.String) has protected access in oracle.apps.fnd.sso.SessionMgr if (SessionMgr.isRtl(langCode)) {

I had never seen such an error and presumed that it could be due to the patches. Later on in the day, Akhilesh called me to say that the issue is resolved. He said that the project team had asked the DBAs to do a code move which contained a customized AppsLocalLogin.jsp. Once they replaced it with the standard AppsLocalLogin.jsp the issue was resolved. I never thought that someone would customize AppsLocalLogin.jsp. I learnt that the project team wanted to put some disclaimers on the login page because of which they were customizing it. Metalink Note 468971.1 describes tips for personalizing AppsLocalLogin.jsp. The project team had logged an SR with Oracle with this query:

Hi we have to add the copyright message at the login page in Bold and in red color for that we have updated the message FND_SSO_SARBANES_OXLEY_TEXT . then submited the "Generate Messages" and also updated the profile value "Local Login Mask" with 96 and finally bounced the appache , but our message is not coming on the single screen and and we have to scroll down to right of the screen to read that . we have tried to add the HTML tags in the
message but thay are cmoing as it is in the screen without any effect , can you please help in achiving this requirment .


Solution given by Oracle which involved editing AppsLocalLogin.jsp:

ANSWER
=======
Please review the Note 391826.1 FND_SSO_SARBANES_OXLEY_TEXT Does Not Line Wrap On AppsLocalLogin.jsp

Solution

The following solution is a workaround. You make the following change at your own risk. Furthermore, the following change wil
l be lost when applying patches that replace $OA_HTML/AppsLocalLogin.jsp. In thi
s case it is up to you to manage this change.

1. Backup $OA_HTML/AppsLocalLogin.jsp

2. edit AppsLocalLogin.jsp with a text editor such as vi

3. change the line :
StyledTextBean legalMessage = new StyledTextBean();
to:
RawTextBean legalMessage = new RawTextBean();

4. Save

5. cd $OAD_TOP/_pages/_oa__html/, rm *AppsLocalLogin*

6. Change the Sarbanes Oxley text so that your using html tags to place line breaks using navigation: Application Developer - Messages

7. Bounce Apache

The text should now wrap

Seems it didn't work, because project team replied:

Hi,

Did the changes suggested. There no change except the font size and color. Now its getting displayed in RED color.
Attached the screen shot of the output.

changes done were:
1. Download file AppsLocalLogin.jsp fron $OA_HTML.
2. Comment the Styled TextBean and Add RawTextBean
//StyledTextBean legalMessage = new StyledTextBean();
RawTextBean legalMessage = new RawTextBean();

UPDATE
=======
Hi Vijay,

As the text is now interpreted as html code, you can use
tag in the text FND_SSO_SARBANES_OXLEY_TEXT to make the text to wrap.
Please upload the FND_SSO_SARBANES_OXLEY_TEXT text if you need help to customize
the message.

Thanks,
Adrian

Hi Adrian
please find the attcahed message we have put for FND_SSO_SARBANES_OXLEY_TEXT .
but it is showing the message in the single line , but when we use the same in normal HTML file it is coming properly
.
Regards

Regards
Vijay Sharma



26-MAR-08 13:55:08 GMT

.
UPDATE
=======
Hi Vijay,

Please try the followings text for the FND_SSO_SARBANES_OXLEY_TEXT :

My Oracle ERP is a non-export controlled system. All technical information disclosed or otherwise provided (orally, electronically, visually or in writing) shall at all times be subject to U.S.A. export control laws and regulations.

Accordingly all technical data and information, technical assistance and software disclosed or otherwise provided by Justanexample Company, and any product thereof,
shall not be exported directly or indirectly from the U.S.A. unless
explicitly permitted by Justanexample Company in writing in accordance with U.S.A. export control laws and regulations.
It is understood that “export” includes re-export and any disclosures within a country to a citizen or resident of another country.
The aforesaid obligations shall be without limitation as to time.

Thanks,
Adrian

After this the TAR was closed. I'll find out if that really solved the issue.

How to compile a java class in Oracle database

The short answer is:

alter java class "java class name" resolve;

For example: alter java class "/e6bc455_DocumentGenerator" resolve;

The long answer is given in the post titled "Long road to loadjava" in Frederic Tang's blog.

The following metalink notes describe some well known invalid java classes:

363679.1
301345.1
339962.1
471901.1