DeregisterOID / RegisterOID Error

classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

DeregisterOID / RegisterOID Error

Emmanuel Sanabria
When I try to deregisteroid OID, I sell the following error:
$FND_TOP/bin/txkrun.pl -script=SetSSOReg -deregisteroid=yes
*** ERROR : oracle.ldap.util.UtilException: NamingException encountered in removeUniqueMember [LDAP: error code 16 - One or more values for attribute uniquemember does not exist].

If then I try to register it I get the following error:
Beginning input parameter validation for LDAP Directory registration.
*** ALERT: This instance is already registered with the LDAP Server. LDAP Registration will be skipped.
Input parameters validation for LDAP Directory registration completed.
End of /u01/install/APPS/fs2/EBSapps/appl/fnd/12.0.0/patch/115/bin/txkSetSSOReg.pl : No Errors encountered

This happens in an environment where we have done postclone
Reply | Threaded
Open this post in threaded view
|

Re: DeregisterOID / RegisterOID Error

ErmanArslansOracleBlog
Administrator
Hi,

*txkrun.pl uses txkSetSSOReg.pl for this operation. (In FND_TOP the script called "txkSetSSOReg.pl" is used for this.)
*In txkSetSSOReg.pl-->
if ($REGISTER_OID or $DEREGISTER_OID) {
    $javaClass = "oracle.apps.fnd.txk.ias.oid.Instance";

*In oracle.apps.fnd.txk.ias.oid.instance, there is a method that suppose to remove the uniquemember from groups.

The comment written for that method is "Removing appDN as uniquememeber from Groups"
It removes the uniquemember from cn=groups, cn=oracleContext

Here -> (String)"cn=groups,cn=oraclecontext", (String)("uniquemember=" + string), (int)1, (String[])new String[]{"dn"});

You see "uniquemember= + string" , and that string in the code is equal to appDN, and appDN is equal to following->
(this.appDN = "orclApplicationCommonName=" + string + ",cn=EBusiness,cn=Products,cn=OracleContext," + this.defaultRealmDN;)

So, I think that is your issue, as you may not have the uniquemember in that OID path.
Also, you need to check the AppDN value in "cn=EBusiness,cn=Products,cn=OracleContext" and this should match what is stored in cn=groups,cn=oraclecontext

Please check it using ODSM and update me.

-- some manual modification may be needed.. But , since it is a licensed product, you need to create an SR for that. (any manual modification without taking the approval of Oracle Support may make your environment unsupported)
Reply | Threaded
Open this post in threaded view
|

Re: DeregisterOID / RegisterOID Error

msantaana
Hi  Erman, I am colleague of sanabria, thanks for your answer, I tell you that I can not find these entries by mail I send you an OID export.
Thanks
Marcelo
Reply | Threaded
Open this post in threaded view
|

Re: DeregisterOID / RegisterOID Error

ErmanArslansOracleBlog
Administrator
It is hard to understand by looking the ldiff files that you have sent.  (in those ldiffs we see the nternal OID structure there)
Let's see the java exceptions first. If we see the real java exception, we can understand where the code failing.. (we have only seen the LDAP error till now)
I checked the script that executes the java programs , which deregisters OID..
They are configured to be write their logs to the directory $APPLRGF/TXK

So, reproduce the issue and cd to the directory and send me the recents logs.

su - applmgr
cd $APPLRGF/TXK

We need to see the logs that are written by java.
We need to see the phase that it is actually failing in the code. (the related java codes are written to produce logs for every failure)...


Reply | Threaded
Open this post in threaded view
|

Re: DeregisterOID / RegisterOID Error

msantaana
Thanks, Erman. I'll send you by email.

Reply | Threaded
Open this post in threaded view
|

Re: DeregisterOID / RegisterOID Error

ErmanArslansOracleBlog
Administrator
Okay.
But i didn't get any email from you yet.
Reply | Threaded
Open this post in threaded view
|

Re: DeregisterOID / RegisterOID Error

msantaana
I send you again. Thanks.

Reply | Threaded
Open this post in threaded view
|

Re: DeregisterOID / RegisterOID Error

ErmanArslansOracleBlog
Administrator
As I was expecting..

It can not remove appDN from groups..

Gasthered Info from the logs:


<message>Removing appDN as uniquememeber from Groups</message>
oracle.ldap.util.UtilException: NamingException encountered in removeUniqueMember [LDAP: error code 16 - One or more values for attribute uniquemember does not exist] at oracle.ldap.util.Util.removeUniquemember(Util.java:2225) at oracle.apps.fnd.txk.ias.ldap.Instance.DeleteGroupSeedingAndAppDN(Instance.java:1383) at oracle.apps.fnd.txk.ias.ldap.Instance.deregister(Instance.java:1302) at oracle.apps.fnd.txk.ias.ldap.Instance.main(Instance.java:1715)


So, a manual fix will be required.

check this Oracle Community thread named "oracle.ldap.util.UtilException: NamingException encountered
". They have given the manual steps there..

-->

Reference Oracle Support
Manually fix.
 
Login to ODSM ( Orace Directory Service Manager)
search  for the  appname the one you are trying to register.  Delete only that app name.  Also we need to delete  the member entry  in all groups   in which this "appname" is a member.  This can be retrieved by running the below against ODS database account in OID database.
 
select * from ct_uniquemember where upper(attrvalue) like '%DEV%';  assuming DEV is the app name.
 
using "ENTRYDN" column value you can navigate the tree in ODSM and delete the member .
 
If you get zero row from the above.  Then you can register the eBS in OID.  Finally I was able to register that successfully.
Reply | Threaded
Open this post in threaded view
|

Re: DeregisterOID / RegisterOID Error

msantaana
Erman, the problem was solved (good tip), thank you so much for your help. The steps were as follows.

Run the query

Select * from ods.ct_uniquemember where upper (attrvalue) like '% APPL%'

There were 3 app entries

In the ODSM the entries were deleted, before doing an export of ldif

Cn = userproxyprivilege, cn = groups, cn = oraclecontext, dc = business, dc = com orclapplicationcommonname = APPL, cn = ebusiness, cn = products, cn = oraclecontext, dc = business, dc = com

Then I executed

A) $ FND_TOP / bin / txkrun.pl -script = SetSSOReg -removereferences = Yes

Output

You are removing all SSO-LDAP related preferences.

Enter Oracle E-Business apps database user password?

*** Log File = /u01/install/APPS/fs1/inst/apps/appl_serverlx/logs/appl/rgf/TXK/txkSetSSOReg_Mon_Jan_23_14_07_42_2017.xml

Beginning input parameter validation for Removing Preferences.
Input parameter validation for Removing Preferences completed.

BEGIN REMOVING PREFERENCES:
Oracle Home Instance preferences removed successfully
Updated APPS_SSO profile with value SSWA successfully.
SSO Preferences Removed successfully.
Removing LDAP Directory References Started.
Removing LDAP Directory References Completed Successfully.
Custom DIT Preferences Removed Successfully.
REMOVING PREFERENCES COMPLETED.

B) $ FND_TOP / bin / txkrun.pl -script = SetSSOReg -deregisteroid = yes

Enter Oracle E-Business apps database user password?
Enter LDAP Host name? Oid.business.com
Enter the LDAP Port on Oracle Directory server? 3060
Enter the LDAP Directory Administrator (orcladmin) Bind password?

*** Log File = /u01/install/APPS/fs1/inst/apps/appl_server/logs/appl/rgf/TXK/txkSetSSOReg_Mon_Jan_23_14_08_52_2017.xml

Beginning input parameter validation for LDAP Directory de-registration.
Input parameters validation for LDAP Directory de-registration completed.

BEGIN LDAP DIRECTORY DE-REGISTRATION:
Beginning to delete provisioning profile for this application.
Provisioning profile for this application has been deleted successfully.
Beginning to de-register this application from the LDAP Directory.
This application has been de-registered successfully from the LDAP Directory.
[Info] -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsLDAPDeRegistration.tmp
Jan 23, 2017 2:09:21 PM oracle.ldap.util.LDIFLoader loadOneLdifFile
INFO: -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsLDAPDeRegistration.tmp
Removing LDAP Directory References Started.
Removing LDAP Directory References Completed Successfully.
LDAP DIRECTORY DE-REGISTRATION COMPLETED.

C) run the query (there are no application entries)

* Select * from ods.ct_uniquemember where upper (attrvalue) like '% APPL%'

No rows selected

D) $ FND_TOP / bin / txkrun.pl -script = SetSSOReg -registeroid = yes

You are registering this instance with LDAP Server.

Enter LDAP Host name? Oid.business.com
Enter the LDAP Port on Oracle Directory server? 3060
Enter the LDAP Directory Administrator (orcladmin) Bind password?
Enter the instance password that you would like to register this application instance with?
Enter Oracle E-Business apps database user password?

*** Log File = /u01/install/APPS/fs1/inst/apps/APPL_computerlx/logs/appl/rgf/TXK/txkSetSSOReg_Mon_Jan_23_14_11_38_2017.xml

Beginning input parameter validation for LDAP Directory registration.
Input parameters validation for LDAP Directory registration completed.

BEGIN LDAP DIRECTORY REGISTRATION:
Beginning to register Application and Service containers if necessary.
Application and Service containers were created successfully if necessary.
Beginning to register application in the LDAP Directory.
Registration of application in LDAP Directory completed successfully.
[Info] -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsOIDRegistration.tmp
Jan 23, 2017 2:12:07 PM oracle.ldap.util.LDIFLoader loadOneLdifFile
INFO: -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsOIDRegistration.tmp
Beginning to register provisioning profile in the LDAP Directory.
Registration of provisioning profile in the LDAP Directory completed successfully.
Application is now registered successfully with provisioning in the LDAP Directory.

E) Run the query

There are 15 entries

Select * from ods.ct_uniquemember where upper (attrvalue) like '% APPL%'
Reply | Threaded
Open this post in threaded view
|

Re: DeregisterOID / RegisterOID Error

ErmanArslansOracleBlog
Administrator
good for you. thanks for the feedback.

23 Oca 2017 20:27 tarihinde "msantaana [via Erman Arslan's Oracle Forum]" <[hidden email]> yazdı:
Erman, the problem was solved (good tip), thank you so much for your help. The steps were as follows.

Run the query

Select * from ods.ct_uniquemember where upper (attrvalue) like '% APPL%'

There were 3 app entries

In the ODSM the entries were deleted, before doing an export of ldif

Cn = userproxyprivilege, cn = groups, cn = oraclecontext, dc = business, dc = com orclapplicationcommonname = APPL, cn = ebusiness, cn = products, cn = oraclecontext, dc = business, dc = com

Then I executed

A) $ FND_TOP / bin / txkrun.pl -script = SetSSOReg -removereferences = Yes

Output

You are removing all SSO-LDAP related preferences.

Enter Oracle E-Business apps database user password?

*** Log File = /u01/install/APPS/fs1/inst/apps/appl_serverlx/logs/appl/rgf/TXK/txkSetSSOReg_Mon_Jan_23_14_07_42_2017.xml

Beginning input parameter validation for Removing Preferences.
Input parameter validation for Removing Preferences completed.

BEGIN REMOVING PREFERENCES:
Oracle Home Instance preferences removed successfully
Updated APPS_SSO profile with value SSWA successfully.
SSO Preferences Removed successfully.
Removing LDAP Directory References Started.
Removing LDAP Directory References Completed Successfully.
Custom DIT Preferences Removed Successfully.
REMOVING PREFERENCES COMPLETED.

B) $ FND_TOP / bin / txkrun.pl -script = SetSSOReg -deregisteroid = yes

Enter Oracle E-Business apps database user password?
Enter LDAP Host name? Oid.business.com
Enter the LDAP Port on Oracle Directory server? 3060
Enter the LDAP Directory Administrator (orcladmin) Bind password?

*** Log File = /u01/install/APPS/fs1/inst/apps/appl_server/logs/appl/rgf/TXK/txkSetSSOReg_Mon_Jan_23_14_08_52_2017.xml

Beginning input parameter validation for LDAP Directory de-registration.
Input parameters validation for LDAP Directory de-registration completed.

BEGIN LDAP DIRECTORY DE-REGISTRATION:
Beginning to delete provisioning profile for this application.
Provisioning profile for this application has been deleted successfully.
Beginning to de-register this application from the LDAP Directory.
This application has been de-registered successfully from the LDAP Directory.
[Info] -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsLDAPDeRegistration.tmp
Jan 23, 2017 2:09:21 PM oracle.ldap.util.LDIFLoader loadOneLdifFile
INFO: -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsLDAPDeRegistration.tmp
Removing LDAP Directory References Started.
Removing LDAP Directory References Completed Successfully.
LDAP DIRECTORY DE-REGISTRATION COMPLETED.

C) run the query (there are no application entries)

* Select * from ods.ct_uniquemember where upper (attrvalue) like '% APPL%'

No rows selected

D) $ FND_TOP / bin / txkrun.pl -script = SetSSOReg -registeroid = yes

You are registering this instance with LDAP Server.

Enter LDAP Host name? Oid.business.com
Enter the LDAP Port on Oracle Directory server? 3060
Enter the LDAP Directory Administrator (orcladmin) Bind password?
Enter the instance password that you would like to register this application instance with?
Enter Oracle E-Business apps database user password?

*** Log File = /u01/install/APPS/fs1/inst/apps/APPL_computerlx/logs/appl/rgf/TXK/txkSetSSOReg_Mon_Jan_23_14_11_38_2017.xml

Beginning input parameter validation for LDAP Directory registration.
Input parameters validation for LDAP Directory registration completed.

BEGIN LDAP DIRECTORY REGISTRATION:
Beginning to register Application and Service containers if necessary.
Application and Service containers were created successfully if necessary.
Beginning to register application in the LDAP Directory.
Registration of application in LDAP Directory completed successfully.
[Info] -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsOIDRegistration.tmp
Jan 23, 2017 2:12:07 PM oracle.ldap.util.LDIFLoader loadOneLdifFile
INFO: -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsOIDRegistration.tmp
Beginning to register provisioning profile in the LDAP Directory.
Registration of provisioning profile in the LDAP Directory completed successfully.
Application is now registered successfully with provisioning in the LDAP Directory.

E) Run the query

There are 15 entries

Select * from ods.ct_uniquemember where upper (attrvalue) like '% APPL%'


If you reply to this email, your message will be added to the discussion below:
http://erman-arslan-s-oracle-forum.2340467.n4.nabble.com/DeregisterOID-RegisterOID-Error-tp1946p1989.html
To start a new topic under EBS 12.2, email [hidden email]
To unsubscribe from Erman Arslan's Oracle Forum, click here.
NAML