Documentos de Académico
Documentos de Profesional
Documentos de Cultura
https://metalink.oracle.com/metalink/plsql/f?p=130:14:9873231365054...
Advanced Search
Quick Find
Knowledge Base
6
Select
Go
Advanced
Saved Searches
Select
Apply
Doc ID: Note:280167.1 Subject: AS10g with Apps 11i - Summary of Login process Type: BULLETIN Status: REVIEW_READY
IMPORTANT IMPORTANT ORACLE INTERNAL USE ONLY - DO NOT SEND TO CUSTOMERS IMPORTANT IMPORTANT This document is very much work in progress, and is currently more like some IMPORTANT notes I've made, rather than a note anyone can use ! IMPORTANT By all means try to use this information, but come back frequently to see how IMPORTANT I am getting on, as I do intend to make it more comprehensible IMPORTANT Note 295606.1 (Oracle Application Server 10g with Oracle E-Business Suite Release 11i Troubleshooting) is an External document for customer use IMPORTANT IMPORTANT ORACLE INTERNAL USE ONLY - DO NOT SEND TO CUSTOMERS
*** This article is being delivered in Draft form and may contain errors. Please use the MetaLink "Feedback" button to advise Oracle of any issues related to this article. ***
1 of 7
1/11/2006 12:02 PM
ShowDoc
https://metalink.oracle.com/metalink/plsql/f?p=130:14:9873231365054...
(SSO Server) /sso/jsp/login.jsp?site2pstoretoken= This is the page where the user enters username and password details (SSO Server) /sso/auth This sets the SSO Cookie (Apps Server) /oa_servlets/AppsSSOServlet This URL is defined by the "Success URL" when registering Partner Application in SSO. Sets the Applications session cookie Can check by running "Check success URL, SITE_ID, etc in SSO Server configuration" SQL listed in Appendix A Also refer SSO Task 1, Step 3.1 in Note 233436.1 If Applications SSO Type (APPS_SSO) = "SSWA w/SSO" (Apps Server) /OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE URL is determined by profile option "Self-Service Personal Home Page Mode" (APPLICATIONS_HOME_PAGE) If Applications SSO Type (APPS_SSO) = "Portal w/SSO" (AS 10g Middle Tier Server) /pls/portal/portal.home URL is determined by profile option "Applications Portal" (APPS_PORTAL) NOTE - this profile option currently gets overwritten by AutoConfig with Portal 3.0.9 URL, and needs to be manually reset.
Local login
A user may have "Applications SSO Login Types" (APPS_SSO_LOCAL_LOGIN) set to "LOCAL" which would preclude them from being authenticated by OID, so they would have to access Apps using a different initial URL, namely (Apps Server) /OA_HTML/AppsLocalLogin.jsp This provides direct access to Apps 11i, authenticating the user against the FND_USER table, instead of OID
Troubleshooting suggestions
General Hints
Make sure OID and SSO Server processes are running
This can be checked via the Enterprise Manager console Alternatively go to the Server URLs individually. The SSO Server will be : http://<host>.<domain>:<port>/pls/orasso/orasso.home then select "Login" and make sure you can signon Check the OID by going to the "Oracle Internet Directory Self Service Console" http://<host>.<domain>:<port>/oiddas/ then login, select Directory --> User and ensure you can complete a "User Search"
2 of 7
1/11/2006 12:02 PM
ShowDoc
https://metalink.oracle.com/metalink/plsql/f?p=130:14:9873231365054...
You are getting the "Error: Authentication failed. Please try again" message on the SSO Login page
Applications has succesfully redirected to SSO, but SSO cannot authenticate the user and/or the password. This implies there is some issue with OID, so you should initally check OID to ensure the username and password are correct
Specific Issues
"Page not found" error after successful sign on
Several possibilities for this one : a) OID orclguid is missing from FND_USER.user_guid (where is NULL) You can use SQL script "List GUID, etc from FND_USERS table" in Appendix A to check for the Apps username concerned If GUID missing from FND_USER, but does exist in OID, a quick workaround may be to enable profile option "Applications SSO Auto Link User (APPS_SSO_AUTO_LINK_USER) The "Summary of provisioning" note will discuss troubleshooting issues where user information in FND_USERS and OID is not synchronised. b) Has the user login cookie been cleared OK Close all browser sessions and try again. This situation can happen if you have logged into SSO Server, or OID (as "orcladmin" user for example) but not logged out yet. As this is not a valid Apps username, but the SSO cookie is still set, it does not ask you to login again, you just get sent straight to Apps. c) Bug 4053247 Up to and including Build 2.2, the "Link on the fly" screen does not display and gives this error. Bug 4053247 gives the workaround to fix it. This would be an issue if you are not using "Auto Link User" or you are using "Auto Link" but have a username in OID that does not exist in FND_USER4053247 gives the workaround to fix it. This would be an issue if you are not using "Auto Link User" or you are using "Auto Link" but have a username in OID that does not exist in FND_USER
"The system is set to run in Single Sign-On mode, but the configuration is incomplete for this mode. Please contact your System Administrator." error
You do not even see the SSO Sign on page in this case This could be because "regapp.sql" was not run correctly, or incorrect values were entered Use the scripts in Appendix A to get the values entered for the SSO Server and also the Apps server, and
3 of 7
1/11/2006 12:02 PM
ShowDoc
https://metalink.oracle.com/metalink/plsql/f?p=130:14:9873231365054...
make sure all the values entered were correct. If may also be worth setting the profile option "Applications SSO Partner Application Listener Token" (APPS_SSO_LISTENER_TOKEN) to the value of "<Hostname>_<ContextName>" and re-test. The value entered should be the same as the value returned by the SQL "select fnd_web_config.database_id from dual" Note 286768.1 also discusses this issue when using Clusters, such as HP ServiceGuard
Additional Diagnostics
Install the AS10g Diagnostics patch 4067949 - E-Business Suite Single Sign-On Diagnostic Utility (available soon)
4 of 7
1/11/2006 12:02 PM
ShowDoc
https://metalink.oracle.com/metalink/plsql/f?p=130:14:9873231365054...
dbms_output.put_line('------------------------------------------------ '); dbms_output.put_line('Host_SID Identifier: ' || l_listener_token); dbms_output.put_line('Site id : ' || l_site_id); dbms_output.put_line('Site token : ' || l_site_token); dbms_output.put_line('Encryption key : ' || l_encryption_key); dbms_output.put_line('Login URL : ' || l_login_url); dbms_output.put_line('Logout URL : ' || l_logout_url); dbms_output.put_line('IP check : ' || l_ip_check); dbms_output.put_line('------------------------------------------------ '); exception when others then dbms_output.put_line('------------------------------------------------ '); dbms_output.put_line('ERROR....'); dbms_output.put_line('Exception: ' || sqlerrm); dbms_output.put_line('l_listener_token: ' || l_listener_token); dbms_output.put_line('------------------------------------------------ '); end; / REM END OF SQL
5 of 7
1/11/2006 12:02 PM
ShowDoc
https://metalink.oracle.com/metalink/plsql/f?p=130:14:9873231365054...
,p_url_cookie_version => l_cookie_version ,p_encryption_key => l_encryption_key ,p_ipaddr_check => l_ip_check ); wwsec_sso_enabler.get_enabler_config ( p_lsnr_token => l_listener_token ,p_site_token => l_site_token ,p_site_id => l_site_id ,p_ls_login_url => l_login_url ,p_ls_logout_url => l_logout_url ,p_url_cookie_version => l_cookie_version ,p_encryption_key => l_encryption_key ,p_ipaddr_check => l_ip_check ); dbms_output.put_line('------------------------------------------------ '); dbms_output.put_line('New values now in operation (Apps 11i Server) '); dbms_output.put_line('------------------------------------------------ '); dbms_output.put_line('Host_SID Identifier: ' || l_listener_token); dbms_output.put_line('Site id : ' || l_site_id); dbms_output.put_line('Site token : ' || l_site_token); dbms_output.put_line('Encryption key : ' || l_encryption_key); dbms_output.put_line('Login URL : ' || l_login_url); dbms_output.put_line('Logout URL : ' || l_logout_url); dbms_output.put_line('IP check : ' || l_ip_check); dbms_output.put_line('------------------------------------------------ '); exception when others then dbms_output.put_line('------------------------------------------------ '); dbms_output.put_line('ERROR....'); dbms_output.put_line('Exception: ' || sqlerrm); dbms_output.put_line('l_listener_token: ' || l_listener_token); dbms_output.put_line('------------------------------------------------ '); end; / commit; set verify on show errors REM END OF SQL
6 of 7
1/11/2006 12:02 PM
ShowDoc
https://metalink.oracle.com/metalink/plsql/f?p=130:14:9873231365054...
Note 233436.1 - Installing Oracle Application Server 10g with Oracle E-Business Suite Release 11i Note 295606.1 - Oracle Application Server 10g with Oracle E-Business Suite Release 11i Troubleshooting Note tba - AS10g with Apps 11i - Summary of provisioning (this note will hopefully be written soon!) @ TAR 4049950.994 - VALIDATE SSO PRODUCE JSP ERROR
7 of 7
1/11/2006 12:02 PM