Fs_clone failed

[latifa]

Hi Erman,

I am facing an issue about fs_clone which is failing on the master node.
I ran adopscanlog and got somme errors.

we have done some attemps like force credentials of weblogic, running again fs_clone with fore option.
However, the result is failing also.

Could you help please. I give the result of adopscanlog.

Thanks in advance for your help.

Latifa

adopscanlog.txt
fs_clone_extracted_errors.txt

[ErmanArslansOracleBlog]

Hi Latifa,

Please try the following:

Open a browser and enter the weblogic console URL eg: https ://localhost:port/console as the administrator.
Navigate to the weblogic server administration Applications Configuration console.
Unlock the weblogic server configuration by clicking 'Release Configuration' option.
If the Configuration is not locked, you can also attempt to lock and then release the configuration.

 Run fs_clone again using the force option ->adop phase=fs_clone force=yes

Ref: 12.2 E-Business Suite Fsclone Attempts Fail After An Upgrade With Error 'weblogic.security.internal.encryption.EncryptionServiceException' 'in setNodeManagerCredentials java.lang.AssertionError' Running adPostDomainCloneCfg.pl (Doc ID 2232990.1)

[latifa]

Hi Erman,

Actuallay, fs_clone is still running.
However I checked some files like the follwoing and I found some warning:

in the file: remote_execution_result_level2.xml

The warnign is as follows:
<Name>udkfinp05</Name>
      <ProcessName>udkfinp05_udkfinp05pool-1-thread-4_udkfinp05_udkfinp05</ProcessName>
      <ResultString>    [WARNING]: Found invalid cross references in node manager and domain config files. :successful</ResultString>
      <Status>success</Status>


And this warning is for all servers (6).

Also in txkADOPPreparePhaseSynchronize.log logfile, we can see:


===================
Inside copyJDK()...
===================

FMW JDK version in use: 1.7.0_251

================================
Inside copyComnUtil()...
================================

...
Execute SYSTEM command : cp -rH  /opt/application/V12/fs1/EBSapps/comn/util /opt/application/V12/fs2/EBSapps/comn/util
EXIT STATUS: 1
Copied /opt/application/V12/fs1/EBSapps/comn/util into /opt/application/V12/fs2/EBSapps/comn/utilLOG FILE: /opt/application/V12/fs_ne/EBSapps/log/adop/71/20200220_145243/fs_clone/udkfinp03/TXK_SYNC_create/cp_rH.out

Regards,
Latifa

[latifa]

Hi Erman,

fs_clone failed again .

I foudn some errors in the logfile:  console~OHS~1.log /opt/application/V12/fs2/FMW_Home/webtier/instances/EBS_web_OHS1/diagnostics/logs/OHS/EBS_web/EBS_web.log

Unable to initialize SSL environment, nzos call nzosSetCredential returned 43084

[2020-02-20T17:52:28.1220+01:00] [OHS] [ERROR:32] [OHS-217] [core.c] [host_id: udkfinp03] [host_addr: 10.128.27.193] [pid: 25825] [tid: 1] [user: opfinbac] [VirtualHost: oracler12.dalkia.net:0]  NZ Library Error: Unknown error

like it consider that we use ssl or we should have TLS.

I join the adscanlog output and this file.
adopscanlog2.txt
console~OHS~1.log
EBS_web.log

Regards,
Latifa

 

[ErmanArslansOracleBlog]

Hi Latifa,

I haven't been able to reply for a long time due to my workload.

Adop is saying that problem is in a OS component and that component is probably the Oracle HTTP Server.

What we see in HTTP Server log is the following ->

Init: Unable to initialize SSL environment, nzos call nzosSetCredential returned 43084
NZ Library Error: Unknown error

Oracle Says,

Beginning with the July 2019 CPU, SSL certificates the MD5 algorithm will no longer be accepted after applying the OSS Bundle Patch.  You may see these errors preventing OHS from starting:

    Init: Unable to initialize SSL environment, nzos call nzosSetCredential returned 43084
    NZ Library Error: Unknown error

The error is the same as yours.
Did you apply any patches to this environment? Any technology patches to the FMW and Oracle HTTP Server?


Ref:

SSL Configuration Required to Secure Oracle HTTP Server After Applying Security Patch Updates (Doc ID 2314658.1)
Is your SSL setup okay?
When did you start getting this error? After what kind of an implementation,setup or patch?

[maxman722]

I am having this same error after applying OSS patch (31304503). Has this been resolved? I am not attempting fs_clone, i am only trying to get OPMN and OHS to start up correctly after applying the above patch. I have changed the algorithm to SHA1, since the MD5 no longer works after this patch is applied.

[ErmanArslansOracleBlog]

 Maxman722,

Did you check the MOS note -> SSL Configuration Required to Secure Oracle HTTP Server After Applying Security Patch Updates (Doc ID 2314658.1)

Especially the lines(suggested actions) after the following paragraph;

Beginning with the July 2019 CPU, SSL certificates the MD5 algorithm will no longer be accepted after applying the OSS Bundle Patch.  You may see these errors preventing OHS from starting:

    Init: Unable to initialize SSL environment, nzos call nzosSetCredential returned 43084
    NZ Library Error: Unknown error

[ErmanArslansOracleBlog]

Also please check this note -> FS_CLONE failing with error FUNCTION: main::instantiateFile [ Level 1 ] (Doc ID 2656509.1)

Same Symptomps:
 [ons-secure] Connection server SSL set credentials failed (43084) <<<<<<
 [ons-secure] SSL initialization failed

Check the note, and follow the action plan..