12
返回列表 发新帖
楼主: tj8858

[系统安装/维护] APS Organization Security Error

[复制链接]
论坛徽章:
2
ERP板块每日发贴之星
日期:2005-04-09 01:01:37ITPUB新首页上线纪念徽章
日期:2007-10-20 08:38:44
11#
 楼主| 发表于 2010-6-11 08:48 | 只看该作者
...

使用道具 举报

回复
论坛徽章:
15
生肖徽章2007版:羊
日期:2009-02-10 14:52:362013年新春福章
日期:2013-02-25 14:51:24迷宫蛋
日期:2012-12-17 17:16:242011新春纪念徽章
日期:2011-02-18 11:43:332011新春纪念徽章
日期:2011-01-30 14:20:16ITPUB9周年纪念徽章
日期:2010-10-08 09:28:522010年世界杯参赛球队:尼日利亚
日期:2010-07-15 14:53:432010年世界杯参赛球队:美国
日期:2010-04-29 22:55:002010新春纪念徽章
日期:2010-03-01 11:08:27生肖徽章2007版:龙
日期:2009-07-30 10:45:52
12#
发表于 2010-6-11 09:11 | 只看该作者
需要在测试环境做如下测试:
a. Run the following in SQL*Plus:
SQL> EXEC FND_CONC_CLONE.SETUP_CLEAN;
COMMIT;
EXIT;

b. Run AutoConfig on all tiers, firstly on the DB tier and then the APPS tiers, to repopulate the required system tables.

使用道具 举报

回复
论坛徽章:
2
ERP板块每日发贴之星
日期:2005-04-09 01:01:37ITPUB新首页上线纪念徽章
日期:2007-10-20 08:38:44
13#
 楼主| 发表于 2010-6-12 09:08 | 只看该作者

做了一些尝试,目前不起作用

action one:
a. Run the following in SQL*Plus:
SQL> EXEC FND_CONC_CLONE.SETUP_CLEAN;
COMMIT;
EXIT;
b. Run AutoConfig on all tiers, firstly on the DB tier and then the APPS tiers, to repopulate the required system tables.


action two:
Symptoms
Users are not able to Launch Forms from SSWA pages. Apache error_log has following entries:
1. [error] "client denied by server configuration: /tbsi/pbsilcomn/portal/TBSI_appsuat/oprocmgr-service" 2. [error] "client denied by server configuration: /tbsi/pbsilcomn/portal/TBSI_appsuat/pls"
Cause
Oracle Process Manager (OPM) & mod_sql module is not considering the Middle Tier Node as trusted.
It is more likely an issue with host_name resolution for the IP Address.

1. [error] "client denied by server configuration: /tbsi/pbsilcomn/portal/TBSI_appsuat/oprocmgr-service"  shows that OPM is not considering the Middle Tier Node as trusted.
2. [error] "client denied by server configuration: /tbsi/pbsilcomn/portal/TBSI_appsuat/pls " shows
    that mod_sql is not considering the Middle Tier Node as trusted.
Solution
To implement the solution, please execute the following steps:

1. Following files at $IAS_ORACLE_HOME/Apache/Apache/conf/ require the manual modification so that user can launch Forms from SSWA.


oprocmgr.conf
apps.conf
trusted.conf
security.conf
httpd_pls.conf

Note: Before making these manual changes check FND_NODES table to confirm that correct IP address of Middle Tier Node is populated in the column 'SERVER_ADDRESS' . If not then repopulate it with correct IP address and retest the issue.
@ Note 751328.1 gives the method to change the IP address (not yet published).


2. Add IP Address of the Middle Tier Node at all the occurrences of host_name.domain_name e.g. 'atg.oracle.com' or 'atg' in the aforementioned files.


3. You can find corresponding Template files at $FND_TOP/admin/template/ and can customize them
with the help of Metalink Note 270519.1

Also You can review the
NOTE.<<165195.1>> Using AutoConfig to Manage System Configurations
NOTE.<<218089.1>> Autoconfig FAQ


action three
Symptoms
When attempting to log into a new clone or fresh install using the URL
http://hoatname.domain\"\"ort/oa_servlets/AppsLogin
The following error occurs.

Cause
The issue is caused because the OPM process is not considering the Middle Tier Node as trusted. The issue can be seen in the error_log

[Wed Oct 29 12:40:40 2008] [error] [client 111.111.111.111] client denied by server configuration:
x:/oracle/testcomn/portal/test_gilthoniel/oprocmgr-service
Solution
To implement the solution, please execute the following steps on all Web Tiers:

1:- Update your autoconfig context file and change the
s_oacore_trusted_oproc_nodes to include the IPAddress as well

CHANGE
<oacore_trusted_oproc_nodes oa_var="s_oacore_trusted_oproc_nodes">HOSTNAME, HOSTNAME.DOMAIN,VIRUTALHOSTNAME,VIRUTALHOSTNAME.DOMAIN</oacore_trusted_oproc_nodes>

TO
<oacore_trusted_oproc_nodes oa_var="s_oacore_trusted_oproc_nodes">IPADDRESS, HOSTNAME, HOSTNAME.DOMAIN,VIRUTALHOSTNAME,VIRUTALHOSTNAME.DOMAIN</oacore_trusted_oproc_nodes>

2:- Run autoconfig

3:- Please retest the issue.

4:- If the issue is resolved, please migrate the solution as appropriate to other environments.
Symptoms
When attempting to log into a new clone or fresh install using the URL
http://hoatname.domain\"\"ort/oa_servlets/AppsLogin
The following error occurs.

Cause
The issue is caused because the OPM process is not considering the Middle Tier Node as trusted. The issue can be seen in the error_log

[Wed Oct 29 12:40:40 2008] [error] [client 111.111.111.111] client denied by server configuration:
x:/oracle/testcomn/portal/test_gilthoniel/oprocmgr-service
Solution
To implement the solution, please execute the following steps on all Web Tiers:

1:- Update your autoconfig context file and change the
s_oacore_trusted_oproc_nodes to include the IPAddress as well

CHANGE
<oacore_trusted_oproc_nodes oa_var="s_oacore_trusted_oproc_nodes">HOSTNAME, HOSTNAME.DOMAIN,VIRUTALHOSTNAME,VIRUTALHOSTNAME.DOMAIN</oacore_trusted_oproc_nodes>

TO
<oacore_trusted_oproc_nodes oa_var="s_oacore_trusted_oproc_nodes">IPADDRESS, HOSTNAME, HOSTNAME.DOMAIN,VIRUTALHOSTNAME,VIRUTALHOSTNAME.DOMAIN</oacore_trusted_oproc_nodes>

2:- Run autoconfig

3:- Please retest the issue.

4:- If the issue is resolved, please migrate the solution as appropriate to other environments.
Symptoms
When attempting to log into a new clone or fresh install using the URL
http://hoatname.domain\"\"ort/oa_servlets/AppsLogin
The following error occurs.

Cause
The issue is caused because the OPM process is not considering the Middle Tier Node as trusted. The issue can be seen in the error_log

[Wed Oct 29 12:40:40 2008] [error] [client 111.111.111.111] client denied by server configuration:
x:/oracle/testcomn/portal/test_gilthoniel/oprocmgr-service
Solution
To implement the solution, please execute the following steps on all Web Tiers:

1:- Update your autoconfig context file and change the
s_oacore_trusted_oproc_nodes to include the IPAddress as well

CHANGE
<oacore_trusted_oproc_nodes oa_var="s_oacore_trusted_oproc_nodes">HOSTNAME, HOSTNAME.DOMAIN,VIRUTALHOSTNAME,VIRUTALHOSTNAME.DOMAIN</oacore_trusted_oproc_nodes>

TO
<oacore_trusted_oproc_nodes oa_var="s_oacore_trusted_oproc_nodes">IPADDRESS, HOSTNAME, HOSTNAME.DOMAIN,VIRUTALHOSTNAME,VIRUTALHOSTNAME.DOMAIN</oacore_trusted_oproc_nodes>

2:- Run autoconfig

3:- Please retest the issue.

4:- If the issue is resolved, please migrate the solution as appropriate to other environments.

使用道具 举报

回复
论坛徽章:
2
ERP板块每日发贴之星
日期:2005-04-09 01:01:37ITPUB新首页上线纪念徽章
日期:2007-10-20 08:38:44
14#
 楼主| 发表于 2010-6-12 09:11 | 只看该作者

手动修改table,尝试模拟organization security界面操作

目前找到了一个table:MSC_ORG_ACCESS
但不管用,可能还有其它table

使用道具 举报

回复
论坛徽章:
2
ERP板块每日发贴之星
日期:2005-04-09 01:01:37ITPUB新首页上线纪念徽章
日期:2007-10-20 08:38:44
15#
 楼主| 发表于 2010-6-12 09:15 | 只看该作者

path step

如果不能解决,准备用替代方案, 测试组织用 mrp代替 aps跑,不知行不行。
就算mrp可行,我们的Key User很不理解我们的解释和做法,以前好好的,现在怎么不行了
用MRP不是后退吗
我目前还真不清楚MRP和APS的区别,MRP以前没有用过

使用道具 举报

回复
论坛徽章:
2
ERP板块每日发贴之星
日期:2005-04-09 01:01:37ITPUB新首页上线纪念徽章
日期:2007-10-20 08:38:44
16#
 楼主| 发表于 2010-6-12 10:22 | 只看该作者

找了一份MRP的操作说明

试试看

mrp.ppt

3.13 MB, 下载次数: 10

使用道具 举报

回复
论坛徽章:
15
NBA常规赛纪念章
日期:2013-04-22 11:49:35NBA季后赛纪念徽章
日期:2013-06-21 14:52:05ITPUB社区12周年站庆徽章
日期:2013-10-08 14:54:39马上加薪
日期:2014-10-23 16:03:28马上有对象
日期:2014-12-22 11:23:38知识
日期:2015-08-11 10:22:26知识
日期:2015-08-11 10:34:17秀才
日期:2015-09-21 09:46:16
17#
发表于 2010-6-13 09:51 | 只看该作者
[client 10.23.2.40] (79)A remote host refused an attempted connect operation.: proxy connect to 10.23.2.20 port 8886 failed
[Wed Jun  9 17:29:21 2010] [error] [client 10.23.2.40] (79)A remote host refused an attempted connect operation.: proxy connect to 10.23.2.20 port 8886 failed

---------------------
你的打开网页,是不是通过代理实现的?  排除掉代理,试试看。

我的都可以哦。

看图:

2010-6-13 9-50-39.png (64.51 KB, 下载次数: 8)

2010-6-13 9-50-39.png

使用道具 举报

回复
论坛徽章:
2
ERP板块每日发贴之星
日期:2005-04-09 01:01:37ITPUB新首页上线纪念徽章
日期:2007-10-20 08:38:44
18#
 楼主| 发表于 2010-6-14 22:57 | 只看该作者
没有关系,我门其它功能都能用,怀疑丢文件了

使用道具 举报

回复

您需要登录后才可以回帖 登录 | 注册

本版积分规则 发表回复

TOP技术积分榜 社区积分榜 徽章 团队 统计 知识索引树 积分竞拍 文本模式 帮助
  ITPUB首页 | ITPUB论坛 | 数据库技术 | 企业信息化 | 开发技术 | 微软技术 | 软件工程与项目管理 | IBM技术园地 | 行业纵向讨论 | IT招聘 | IT文档
  ChinaUnix | ChinaUnix博客 | ChinaUnix论坛
CopyRight 1999-2011 itpub.net All Right Reserved. 北京盛拓优讯信息技术有限公司版权所有 联系我们 未成年人举报专区 
京ICP备16024965号-8  北京市公安局海淀分局网监中心备案编号:11010802021510 广播电视节目制作经营许可证:编号(京)字第1149号
  
快速回复 返回顶部 返回列表