July 6, 2008 01:12am pdt

1. sdstuber 14,055
2. schwertner 12,150
3. rolutola 6,280
4. sonicefu 6,020
5. Dr_Billy 5,000
6. joebednarz 3,500
7. oleggold 3,000
8. markgeer 2,000
8. leoneagan 2,000
8. Tolomir 2,000
8. jlguerra 2,000
12. dvz 1,500
12. Kuldeepc... 1,500
14. rbrooker 1,000
14. ee_rlee 1,000
14. aiklamha 1,000
14. kevp75 1,000
14. golfDoctor 1,000

1. bochgoch 92,601
2. Henka 42,546
3. vzilka 34,624
4. schwertner 26,850
5. bpeterse 20,937
6. gacki 17,578
7. markcallen 16,445
8. sdstuber 14,055
9. DLyall 12,450
10. rogerper... 8,892
11. sujith80 8,350
12. alexnuijten 7,772
13. joebednarz 7,500
14. seazodiac 6,864
15. baonguyen1 6,729

05.06.2008 at 01:46PM PDT, ID: 23380901 | Points: 500

	[x] Attachment Details

Oracle SSO Failure - Unable to process request

Zones: Oracle Database, Oracle IAS Application Server, Oracle 10.x

I'm getting this error when I login to SSO.
The HTTP server and OID is running fine. but if I go to http://localhost:7777/oiddas and tried to login this error comes out.
It also says:
Either the requested URL was not specified in terms of a fully-qualified host name or OHS single sign-on is incorrectly configured.

I checked my host file and I am using the FQDN which is also used in the creation of my OID.
Other web service like dbconsole, infrastructure and welcome page are working fine but only to this.

note: I am using OIM 10.1.4.0 and my other server is working fine. Can't see any unusual difference when i compared it.

What seems to be the problem? anyone who can help?

Start your free trial to view this solution

Question Stats

Zone: Software

Question Asked By: mchua

Question Asked On: 05.06.2008

Participating Experts: 1

Points: 500

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

05.06.2008 at 11:42PM PDT, ID: 21513623

Rank: Master

rolutola:

mchua,

This problem is the same as your other question.

You need to run ssoreg.

I noticed you're supplying localhost. Are you using localhost or are you using FQDN? There is a difference.

When you run ssoreg youmust supply the url you expect to use, and you must set orcldasurlbase in oidadmin to the correct url.

R.

05.07.2008 at 06:25AM PDT, ID: 21516109

mchua:

hi,

I intentionally use localhost to protect my servername ( I should have used servername instead . Sorry for that).

Anyway I'm seeing this kind of error on a newly build server . OID is running fine and the rest of the components such as http,oc4j .

So frustrated that i rebuild a new server to carefully see where did i went wrong because I have created an OID server running smoothly before and all of a sudden I'm getting an error differently.

Thanks for your reply I appreciate it.

05.07.2008 at 07:08AM PDT, ID: 21516509

Rank: Master

rolutola:

Should we only update the other case and leave this one for now?

05.07.2008 at 07:13AM PDT, ID: 21516551

mchua:

sure no problem.

Thanks for your assistance.
And I am re-doing the ssoreg.sh for one more time.
I'll post again the log file on my first post.

Thanks..

05.08.2008 at 07:28AM PDT, ID: 21525019

mchua:

Now I have to solve this another problem..
This is a different server than before and It gives me different error than the previous one.

05.08.2008 at 08:09AM PDT, ID: 21525410

Rank: Master

rolutola:

OK mchua,

You should use a 'proper' URL and not localhost.
Is this on server 1 or server 2?

Have you confirmed that the url is set correctly in the DAS properties?

Try and login into http://oidsrv1.cs.com:7777/oiddas and note the error.
Now try http://oidsrv1.cs.com:7777/pls/orasso and note the error (if any)
I'm assuming this is on oidsrv1.

I hope you're prepared for another voyage of discovery? :)

R.

05.08.2008 at 08:13AM PDT, ID: 21525449

mchua:

I test LDAPBIND on this server with SSL port and it was successful.
Having this result means that the OID and SSO passwords are synchronized so I get back again into my browser and login to sso but it gave me the same error:

Oracle SSO Failure - Unable to process request
Either the requested URL was not specified in terms of a fully-qualified host name or OHS single sign-on is incorrectly configured.
Please notify your administrator.

Checking the ssoServer log, I'm getting this:

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Thu May 08 10:41:28 EDT 2008 [ERROR] AJPRequestHandler-ApplicationServerThread-6 SSO Cookie decyption exception
java.lang.StringIndexOutOfBoundsException: String index out of range: -1
at java.lang.String.substring(String.java:1444)
at oracle.security.sso.util.SSOUtil.decrypt3DES(SSOUtil.java:611)
at oracle.security.sso.server.token.SSOServerCookie.parseCookie(SSOServerCookie.java:249)
at oracle.security.sso.server.auth.AuthUtil.parseSSOCookie(AuthUtil.java:1717)
at oracle.security.sso.server.auth.SSOServerAuth.getUserCredentialPage(SSOServerAuth.java:829)
at oracle.security.sso.server.ui.SSOLoginServlet.processSSOPartnerRequest(SSOLoginServlet.java:1193)
at oracle.security.sso.server.ui.SSOLoginServlet.doPost(SSOLoginServlet.java:485)
at oracle.security.sso.server.ui.SSOLoginServlet.doGet(SSOLoginServlet.java:333)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:826)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:332)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:830)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:224)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:133)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:186)
at java.lang.Thread.run(Thread.java:534)
Thu May 08 10:41:28 EDT 2008 [ERROR] AJPRequestHandler-ApplicationServerThread-6 AuthUtil: Error in parsing SSO cookie
oracle.security.sso.server.token.DecryptionException: Cookie decryption failed
at oracle.security.sso.server.token.SSOServerCookie.parseCookie(SSOServerCookie.java:260)
at oracle.security.sso.server.auth.AuthUtil.parseSSOCookie(AuthUtil.java:1717)
at oracle.security.sso.server.auth.SSOServerAuth.getUserCredentialPage(SSOServerAuth.java:829)
at oracle.security.sso.server.ui.SSOLoginServlet.processSSOPartnerRequest(SSOLoginServlet.java:1193)
at oracle.security.sso.server.ui.SSOLoginServlet.doPost(SSOLoginServlet.java:485)
at oracle.security.sso.server.ui.SSOLoginServlet.doGet(SSOLoginServlet.java:333)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:826)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:332)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:830)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:224)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:133)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:186)
at java.lang.Thread.run(Thread.java:534)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

05.08.2008 at 08:41AM PDT, ID: 21525681

Rank: Master

rolutola:

Please answer the questions and confirm you have taken the steps I requested in my last post.

R.

05.08.2008 at 09:46AM PDT, ID: 21526365

mchua:

Hi,

I run the ssoreg.sh and l stop and start opmnctl
But login to sso returned the same error.

Looking at the ssoreg.log file
++++++++++++++++++++++++++++++++++++++++++++++++++++
Thu May 08 11:41:36 EDT 2008 =========================================
Thu May 08 11:41:36 EDT 2008 OracleAS Single Sign-On Registration Tool
Thu May 08 11:41:36 EDT 2008 =========================================
Thu May 08 11:41:36 EDT 2008 Parameters passed to SSO registration tool :
param0:-oracle_home_path param1:/u01/TEST/oracle/product/as10g param2:-oracle_hom
e_path param3:/u01/TEST/oracle/product/as10g param4:-site_name param5:infra1.oidtest.cs.com param6:-config_mod_osso param7:TRUE param8:-mod_osso_url param
9:http://oidtest.cs.com:7777 param10:-u param11:oracle param12:-verbose p
aram13:TRUE
Thu May 08 11:41:36 EDT 2008 -DinstallType=
Thu May 08 11:41:36 EDT 2008 -DoldOracleHome=
Thu May 08 11:41:36 EDT 2008 -DoldOHSUser=root
Thu May 08 11:41:36 EDT 2008 SSO database is jdbc:oracle:thin:@ldap://oidtest.cs.com:389/oiddb1,cn=oraclecontext
Thu May 08 11:41:39 EDT 2008 Creating sso partner
Thu May 08 11:41:39 EDT 2008 Mod_osso file /u01/TEST/oracle/product/as10g/Apache
/Apache/conf/osso/osso.conf already exists.
Thu May 08 11:41:39 EDT 2008 902 format supported
Thu May 08 11:41:39 EDT 2008 The existing partner application will be removed.
Thu May 08 11:41:39 EDT 2008 Old site token is: P3IPQ18K94534FB6
Thu May 08 11:41:39 EDT 2008 Successfully deleted partner with site_token P3IPQ
18K94534FB6
Thu May 08 11:41:40 EDT 2008 Creating partner registration record on the SSO Se
rver side
Thu May 08 11:41:40 EDT 2008 Partner registration record created on the SSO Ser
ver side
Thu May 08 11:41:40 EDT 2008 Now creating the registration record on the partne
r side
Thu May 08 11:41:40 EDT 2008 sso_server_url=http://oidtest.cs.com:7777/p
ls/orasso/orasso.wwsso_app_admin.ls_login
Thu May 08 11:41:40 EDT 2008 sso_server_logout_url=http://oidtest.cs.com
:7777/pls/orasso/orasso.wwsso_app_admin.ls_logout
Thu May 08 11:41:40 EDT 2008 cipher_key=47213DBE0EA9EE45
Thu May 08 11:41:40 EDT 2008 cipher_premask=2C1D3497C6485B7A07EED1347E6605E7
Thu May 08 11:41:40 EDT 2008 cipher_postmask=C326CF14F2E0E3158B372DAE23AD85C8
Thu May 08 11:41:40 EDT 2008 ip_check=FALSE
Thu May 08 11:41:40 EDT 2008 site_id=40B3E8D6
Thu May 08 11:41:40 EDT 2008 site_token=GR3O600P40B3E8D6
Thu May 08 11:41:40 EDT 2008 success_url=http://oidtest.cs.com:7777/osso
_login_success
Thu May 08 11:41:40 EDT 2008 cancel_url=http://oidtest.cs.com:7777
Thu May 08 11:41:40 EDT 2008 sso_timeout_cookie_name=OSSO_USER_CTX
Thu May 08 11:41:40 EDT 2008 sso_timeout_cookie_key=A6A75443AC8C008D
Thu May 08 11:41:40 EDT 2008 nonssl_sso_port=5000
Thu May 08 11:41:40 EDT 2008 creating the registration record in /u01/TEST/oracl
e/product/as10g/Apache/Apache/conf/osso/osso.conf
Thu May 08 11:41:40 EDT 2008 Executing command: dcmctl
Thu May 08 11:45:14 EDT 2008 dcmctl returned exit value 0
Thu May 08 11:45:14 EDT 2008 SSO registration tool finished successfully.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

any Idea?

05.08.2008 at 09:57AM PDT, ID: 21526458