Showing posts with label OHS. Show all posts
Showing posts with label OHS. Show all posts

Thursday, 15 May 2014

Issue with port 80


Issue : above error showed when used opmn command.
Root Cause: permission issue on apachectl.sh
1.      Solution: Log in as root.
  1. Run the following commands in the Oracle home:
3.  cd ORACLE_HOME/ohs/bin
4.  chown root .apachectl
5.  chmod 6750 .apachectl
then run ./opmn startall      (command as oracle fusion installer user like oracle in my case)

case 2:When http server  status is NONE from command  ./opmnctl status then do below solution
1. Allow root to start HTTP Server
1.1Login as root
1.2 Run following command as root
cd ORACLE_HOME/ohs/bin  (Oracle Home in Fusion Middleware 11g is under Middleware Home MW_HOME to know more about ORACLE_HOME, MW_HOME or INSTANCE_HOME in 11g Click here)
chown root .apachectl  (Note* dot infront of apachectl which in Unix means this is hidden file)
chmod 6750 .apachectl



.
2. Change httpd.conf(using user owning OHS – awebtier in my case)
2.1Login as owning OHS 11g
2.2 cd $INSTANCE_HOME/config/OHS/ohs1 (INSTANCE_HOME for OHS by default is $MW_HOME/Oracle_WT1/instances/instance1)
2.3cp httpd.conf httpd.conf_pre_port_80
2.4 Change value against Listen to 80 (by default LISTEN value for OHS is 7777 or 7778 for OHS with webcache)





3.Start OHS using OPMN (using user owning OHS – awebtier in my case)
3.1cd $INSTANCE_HOME/bin (or $MW_HOME/Oracle_WT1/instances/instance1/bin)
3.2./opmnctl startall (stopall and startall if opmn is already running)
4. Test OHS via URL
4.1 Check if port 80 is listening on that machine “netstat -an | grep 80″
4.2 Type URL http://servername:80 (If you don’t specify port with http by default it takes port 80)

CSR generating process


Generate a Certificate Signing Request (CSR) -
Oracle Wallet Manager
Before all go to Oracle_WT1/bin
Export PATH=$PATH:$ORACLE_HOME(WThome)/bin
Run with command $owm
And create wallet and give location
Step 1: Create a new wallet for Oracle wallet manager

Note: The recommended key bit size is 2048-bit. All certificates that will expire after December 31, 2013 must have a 2048 bit key size
  1. From the menu bar, select Wallet > New
  2. Enter the password twice > click OK
    Note: The password must contain eight alphanumeric characters and special characters.
  3. 3. Select Add a certificate request. If not, select Cancel > select Wallet > Save in the system default to save the new wallet
Step 2: Create a certificate signing request (CSR) for Oracle wallet manager
  1. Select Operations > Add Certificate Request
  2. A dialog box will appear to enter your certificate information.
    For explanation of required CSR fields, refer to SO7289
  3. Select OK
Step 3: Export a certificate signing request (CSR) as a file
  1. In the left panel, select the certificate signing request you want to export
  2. From the menu bar, select Operations > Export Certificate Request
  3. Enter a file name and directory you want to save your file to > select OK
Overview of the Oracle wallet manager
Oracle Wallets are password-protected containers that are used to store SSL-related:
  • Authentication and signing credentials
  • Private keys
  • Certificates
  • Trusted certificates
The Oracle Wallet Manager is an application that wallet owners use to maintain the security credentials in their Oracle wallets. You use the Oracle Wallet Manager to perform tasks such as:
  • Creating wallets
  • Generating certificate requests
  • Opening wallets to access PKI-based services
  • Save credentials to cryptographic hardware devices, such as smart cards
  • Upload wallets to and download them from an LDAP directory
  • Import third-party PKCS #12-format wallets, and export Oracle wallets to a third-party environment
The Oracle Wallet manager can save credentials to smart cards by using APIs which comply to the Public-Key Cryptography Standards #11 (PKCS #11) specification.
Create the Wallet with the Oracle wallet manager
Navigate to $INST_TOP/certs/Apache directory to create the new wallet.

[applmgr@ebs appl]$ cd $INST_TOP/certs/Apache
[applmgr@ebs Apache]$ pwd
/d01/app/oracle/inst/apps/PROD_ebs/certs/Apache
[applmgr@ebs Apache]$ ls
cwallet.sso ewallet.p12