When I try to deregisteroid OID, I sell the following error:
$FND_TOP/bin/txkrun.pl -script=SetSSOReg -deregisteroid=yes *** ERROR : oracle.ldap.util.UtilException: NamingException encountered in removeUniqueMember [LDAP: error code 16 - One or more values for attribute uniquemember does not exist]. If then I try to register it I get the following error: Beginning input parameter validation for LDAP Directory registration. *** ALERT: This instance is already registered with the LDAP Server. LDAP Registration will be skipped. Input parameters validation for LDAP Directory registration completed. End of /u01/install/APPS/fs2/EBSapps/appl/fnd/12.0.0/patch/115/bin/txkSetSSOReg.pl : No Errors encountered This happens in an environment where we have done postclone |
Administrator
|
Hi,
*txkrun.pl uses txkSetSSOReg.pl for this operation. (In FND_TOP the script called "txkSetSSOReg.pl" is used for this.) *In txkSetSSOReg.pl--> if ($REGISTER_OID or $DEREGISTER_OID) { $javaClass = "oracle.apps.fnd.txk.ias.oid.Instance"; *In oracle.apps.fnd.txk.ias.oid.instance, there is a method that suppose to remove the uniquemember from groups. The comment written for that method is "Removing appDN as uniquememeber from Groups" It removes the uniquemember from cn=groups, cn=oracleContext Here -> (String)"cn=groups,cn=oraclecontext", (String)("uniquemember=" + string), (int)1, (String[])new String[]{"dn"}); You see "uniquemember= + string" , and that string in the code is equal to appDN, and appDN is equal to following-> (this.appDN = "orclApplicationCommonName=" + string + ",cn=EBusiness,cn=Products,cn=OracleContext," + this.defaultRealmDN;) So, I think that is your issue, as you may not have the uniquemember in that OID path. Also, you need to check the AppDN value in "cn=EBusiness,cn=Products,cn=OracleContext" and this should match what is stored in cn=groups,cn=oraclecontext Please check it using ODSM and update me. -- some manual modification may be needed.. But , since it is a licensed product, you need to create an SR for that. (any manual modification without taking the approval of Oracle Support may make your environment unsupported) |
Hi Erman, I am colleague of sanabria, thanks for your answer, I tell you that I can not find these entries by mail I send you an OID export.
Thanks Marcelo |
Administrator
|
It is hard to understand by looking the ldiff files that you have sent. (in those ldiffs we see the nternal OID structure there)
Let's see the java exceptions first. If we see the real java exception, we can understand where the code failing.. (we have only seen the LDAP error till now) I checked the script that executes the java programs , which deregisters OID.. They are configured to be write their logs to the directory $APPLRGF/TXK So, reproduce the issue and cd to the directory and send me the recents logs. su - applmgr cd $APPLRGF/TXK We need to see the logs that are written by java. We need to see the phase that it is actually failing in the code. (the related java codes are written to produce logs for every failure)... |
Thanks, Erman. I'll send you by email.
|
Administrator
|
Okay.
But i didn't get any email from you yet. |
I send you again. Thanks.
|
Administrator
|
As I was expecting..
It can not remove appDN from groups.. Gasthered Info from the logs: <message>Removing appDN as uniquememeber from Groups</message> oracle.ldap.util.UtilException: NamingException encountered in removeUniqueMember [LDAP: error code 16 - One or more values for attribute uniquemember does not exist] at oracle.ldap.util.Util.removeUniquemember(Util.java:2225) at oracle.apps.fnd.txk.ias.ldap.Instance.DeleteGroupSeedingAndAppDN(Instance.java:1383) at oracle.apps.fnd.txk.ias.ldap.Instance.deregister(Instance.java:1302) at oracle.apps.fnd.txk.ias.ldap.Instance.main(Instance.java:1715) So, a manual fix will be required. check this Oracle Community thread named "oracle.ldap.util.UtilException: NamingException encountered ". They have given the manual steps there.. --> Reference Oracle Support Manually fix. Login to ODSM ( Orace Directory Service Manager) search for the appname the one you are trying to register. Delete only that app name. Also we need to delete the member entry in all groups in which this "appname" is a member. This can be retrieved by running the below against ODS database account in OID database. select * from ct_uniquemember where upper(attrvalue) like '%DEV%'; assuming DEV is the app name. using "ENTRYDN" column value you can navigate the tree in ODSM and delete the member . If you get zero row from the above. Then you can register the eBS in OID. Finally I was able to register that successfully. |
Erman, the problem was solved (good tip), thank you so much for your help. The steps were as follows.
Run the query Select * from ods.ct_uniquemember where upper (attrvalue) like '% APPL%' There were 3 app entries In the ODSM the entries were deleted, before doing an export of ldif Cn = userproxyprivilege, cn = groups, cn = oraclecontext, dc = business, dc = com orclapplicationcommonname = APPL, cn = ebusiness, cn = products, cn = oraclecontext, dc = business, dc = com Then I executed A) $ FND_TOP / bin / txkrun.pl -script = SetSSOReg -removereferences = Yes Output You are removing all SSO-LDAP related preferences. Enter Oracle E-Business apps database user password? *** Log File = /u01/install/APPS/fs1/inst/apps/appl_serverlx/logs/appl/rgf/TXK/txkSetSSOReg_Mon_Jan_23_14_07_42_2017.xml Beginning input parameter validation for Removing Preferences. Input parameter validation for Removing Preferences completed. BEGIN REMOVING PREFERENCES: Oracle Home Instance preferences removed successfully Updated APPS_SSO profile with value SSWA successfully. SSO Preferences Removed successfully. Removing LDAP Directory References Started. Removing LDAP Directory References Completed Successfully. Custom DIT Preferences Removed Successfully. REMOVING PREFERENCES COMPLETED. B) $ FND_TOP / bin / txkrun.pl -script = SetSSOReg -deregisteroid = yes Enter Oracle E-Business apps database user password? Enter LDAP Host name? Oid.business.com Enter the LDAP Port on Oracle Directory server? 3060 Enter the LDAP Directory Administrator (orcladmin) Bind password? *** Log File = /u01/install/APPS/fs1/inst/apps/appl_server/logs/appl/rgf/TXK/txkSetSSOReg_Mon_Jan_23_14_08_52_2017.xml Beginning input parameter validation for LDAP Directory de-registration. Input parameters validation for LDAP Directory de-registration completed. BEGIN LDAP DIRECTORY DE-REGISTRATION: Beginning to delete provisioning profile for this application. Provisioning profile for this application has been deleted successfully. Beginning to de-register this application from the LDAP Directory. This application has been de-registered successfully from the LDAP Directory. [Info] -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsLDAPDeRegistration.tmp Jan 23, 2017 2:09:21 PM oracle.ldap.util.LDIFLoader loadOneLdifFile INFO: -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsLDAPDeRegistration.tmp Removing LDAP Directory References Started. Removing LDAP Directory References Completed Successfully. LDAP DIRECTORY DE-REGISTRATION COMPLETED. C) run the query (there are no application entries) * Select * from ods.ct_uniquemember where upper (attrvalue) like '% APPL%' No rows selected D) $ FND_TOP / bin / txkrun.pl -script = SetSSOReg -registeroid = yes You are registering this instance with LDAP Server. Enter LDAP Host name? Oid.business.com Enter the LDAP Port on Oracle Directory server? 3060 Enter the LDAP Directory Administrator (orcladmin) Bind password? Enter the instance password that you would like to register this application instance with? Enter Oracle E-Business apps database user password? *** Log File = /u01/install/APPS/fs1/inst/apps/APPL_computerlx/logs/appl/rgf/TXK/txkSetSSOReg_Mon_Jan_23_14_11_38_2017.xml Beginning input parameter validation for LDAP Directory registration. Input parameters validation for LDAP Directory registration completed. BEGIN LDAP DIRECTORY REGISTRATION: Beginning to register Application and Service containers if necessary. Application and Service containers were created successfully if necessary. Beginning to register application in the LDAP Directory. Registration of application in LDAP Directory completed successfully. [Info] -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsOIDRegistration.tmp Jan 23, 2017 2:12:07 PM oracle.ldap.util.LDIFLoader loadOneLdifFile INFO: -> LOADING: /u01/install/APPS/fs1/EBSapps/appl/fnd/12.0.0/admin/template/AppsOIDRegistration.tmp Beginning to register provisioning profile in the LDAP Directory. Registration of provisioning profile in the LDAP Directory completed successfully. Application is now registered successfully with provisioning in the LDAP Directory. E) Run the query There are 15 entries Select * from ods.ct_uniquemember where upper (attrvalue) like '% APPL%' |
Administrator
|
good for you. thanks for the feedback. 23 Oca 2017 20:27 tarihinde "msantaana [via Erman Arslan's Oracle Forum]" <[hidden email]> yazdı: Erman, the problem was solved (good tip), thank you so much for your help. The steps were as follows. |
Free forum by Nabble | Edit this page |