Posts

Weblogic AdminServer with SSL configurations

Steps to enable SSL configurations for all Admin Server tasks:  1) Enable SSL port using weblogic Admin console        Home >Summary of Servers >adminserver > General > SSL Listen Port Enabled 2) Upload the custom SSL keystore certificate in Keystores  tab section:       Keystores: Custom Identity and Custom Trust       Custom Identity Keystore: <path to keystore>       Custom Identity Keystore Passphrase: <password> 3) Update the Truststore alias and passwords in SSL tab section      Identity and Trust Locations: Keystore      Private Key Location: from Custom Identity Keystore      Private Key Alias: <alias name>      Private Key Passphrase: <password> 4) Update the custom wlctl or WLST command scripts to use SSL protocol instead of non-ssl protocol.    ...

Apache mod rewrite examples

Scenario 1:  To extract the specific word from QUERY_STRING in a URL. RewriteCond %{QUERY_STRING} ^(.*)matching-word=([^&]+)&?(.*)$ RewriteRule ^(.*)request-url$  https://%{HTTP_HOST}/some/path/value=%2 [NE,QSA,PT,L] In the above scenario, we would like to extract the value after <matching-word> string and before the & or ? charecters in the QUERY_STRING. Example:  Source url:  https://mydomain.com/request/url/test1?myquery&string= value1 &test123 Destination url:   https://mydomain.com/some/path/value= value1

Extract PEM (Private Key) & CERT from PFX file

Prerequisite : Login into any Linux based server and make sure it has openssl installed and copied pfx file in some location.  Run below command to extract the PEM (Private Key). openssl pkcs12 -in <filename>.pfx -nocerts -nodes -out domaincert.pem Run below command to extract certificate. openssl pkcs12 -in <filename>.pfx -clcerts -nokeys -out domaincert.crt

Apache Disable Outdated SSL/TLS versions

Following configurations will get you high security cipher SSL configurations in Apache by updating the ssl config file. ##To disable TLS 1.0/1.1 and SSL 2.0/3.0 SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 ## To enable only high degree of protection SSLCipherSuite HIGH:!aNULL:!MD5:!3DES ## To use server cipher preferences instead of client preferences SSLHonorCipherOrder on

Weblogic 12c & Apache 2.4 troubleshooting

Error -   libonssys.so: cannot open shared object file : httpd: Syntax error on line 355 of /etc/httpd/conf/httpd.conf: Syntax error on line 1 of /data/apps/apache2/conf.d/vhost.conf: Cannot load /etc/httpd/modules/mod_wl_24.so into server: libonssys.so: cannot open shared object file: No such file or directory Solution: 1) Copy all supported  Download Oracle WebLogic Web Server Plug-Ins 12c from Oracle website : http://www.oracle.com/technetwork/middleware/webtier/downloads/index-jsp-156711.html Extract the downloaded archive and find (correct file according to your architecture) mod_wl_24.so (This is for Apache2.4.x) & libonssys.so & libonsssl.so & libdms2.so copy into /etc/httpd/modules/ folder. 2) Set the  LD_LIBRARY_PATH inside the  /etc/sysconfig/httpd file.  echo $ LD_LIBRARY_PATH first and copy paste the same in httpd file along with  /etc/httpd/modules location. Example in my case: File:  /etc/syscon...

Set Local_Listener value to localhost in Oracle DB

Steps: SQL> alter system set local_listener = 'localhost' scope=memory; SQL> alter system register; SQL> show parameter local_list NAME TYPE VALUE ------------------------------------ ----------- ------------------------------ local_listener string (ADDRESS = (PROTOCOL=TCP)(HOST =localhost)(PORT=1521)) 

Enabling WL-Proxy-SSL HTTP header in WebLogic

Scenario : Weblogic server will be always behind the LoadBalancer or Apache layer. Most of the time the SSL's will be either offloaded in LoadBalancer or Apache layer.  To construct applicaitons URL's with the right protocol will be a challenge while using weblogic as application server.  To achieve this scenario we have to enable  WL-Proxy-SSL and WebLogic Plug-In Enabled. Solution: - Update the LoadBalancer configurations/iRules to set the RequestHeader WL-Proxy-SSL to  true . - Follow the below steps to set the WebLogic 'Plugin Enabled' flag to Yes. (Following steps are based on the weblogic version 12.1.2)    - Login into weblogic console    - Click on Lock & Edit button     - Click on the domain name    - Under Configurations tab go to "Web Applications" sub tab    - Select the check box "WebLogic Plugin Enabled" and click "save" button    - Finally click on "Activate C...

Suppress Server Header in JBoss EAP 6

Modify or suppress "Server" header and "X-Powered-By" header in JBoss EAP 6.x: Solution: Following  section to be added to disable X-powered-by header value in standalone.xml file <subsystem xmlns="urn:jboss:domain:web:1.1" default-virtual-server="default-host" native="false">             <configuration>                 <jsp-configuration x-powered-by="false"/>             </configuration>        ...        ... </subsystem> Modify Server header value using system property org.apache.coyote.http11.Http11Protocol.SERVER in standalone.xml file <system-properties>      <property name="org.apache.coyote.http11.Http11Protocol.SERVER" value="foo"/> </system-properties>

ScenarioManager & WorkFlowManager startup errors

While starting weblogic server, following exceptions thrown with " unknown protocol: dynamosystemresource " while starting ScenarioManger : Error stack trace: **** info       Mon Jul 31 09:22:43 EDT 2017    1501507363023   /atg/scenario/XrefParserManager XrefParserManager startup complete **** Error      Mon Jul 31 09:22:43 EDT 2017    1501507363708   /       Unable to start service "/atg/scenario/ScenarioManager": atg.nucleus.ServiceException: The configuration file XMLFile(/atg/scenario/scenarioManager.xml) could not be read: java.net.MalformedURLException: unknown protocol: dynamosystemresource **** Error      Mon Jul 31 09:22:44 EDT 2017    1501507364054   /       Unable to set configured property "/com/tap/commerce/pricing/ShippingChargeManager.defaultShippingOptions" atg.nucleus.ConfigurationException: Unable to resolve component /sparkred/paypal/PayPa...

GIT Useful tips

GIT Commands: Renaming Branch: ** Rename branch locally to the new name      git branch -m old_branch_name new_branch_name ** Delete the old branch on remote. Where <remote> is like origin      git push <remote> :old_name      Eg: git push origin :old_branch ** Push the new branch to remote              git push --set-upstream <remote> new_name     Eg: git push --set-upstream origin new_branch -------------------------------------------------------------------------------------------------------------------- GIT Push issues: Symptoms : While pushing the file to GIT repository, facing issues like "insufficient permissions" while using  "git push" command with below errors. Counting objects: 3, done. Delta compression using up to 8 threads. Compressing objects: 100% (2/2), done. Writing objects: 100% (3/3), 312 bytes | 0 bytes/s, done. Total...

Oracle EBS posts

How to compile FORMS in EBS 12.2.x version when you get below errors ORA-04062 of has been changed - Source the EBS Apps environment file :           Example:  source /u01/install/VISION/EBSapps.env - Change the directory to $AU_TOP/resource          cd  $AU_TOP/resource - Compile the form using below command.   frmcmp_batch module=<form-name> userid=apps/apps module_type=library  compile_all=y    Example: Compile Sales Order forms   frmcmp_batch module=OEXOEHDR userid=apps/apps module_type=library     compile_all=y   frmcmp_batch module=OEXOELIN userid=apps/apps module_type=library     compile_all=y   frmcmp_batch module=OEXOETRE userid=apps/apps module_type=library     compile_all=y NOTE: Use “frmcmp_batch.sh” for form compilation in Linux/cmd platforms. If you use “frmcmp”, you will need an X11 Windows running on the se...

CSC NullPointerExceptions

Symptoms: CSC application sometimes throws you NullpointerExceptions with below errors. Especially when your using JBOSS as application server. ERROR [nucleusNamespace.atg.dynamo.servlet.dafpipeline.DynamoServlet] (ajp-127.0.0.1-8009-1)  java.lang.NullPointerException         at org.apache.jasper.runtime.BodyContentImpl.clear(BodyContentImpl.java:251)         at javax.servlet.jsp.tagext.BodyContent.clearBody(BodyContent.java:89)         at org.apache.jasper.runtime.BodyContentImpl.setWriter(BodyContentImpl.java:307)         at org.apache.jasper.runtime.PageContextImpl.pushBody(PageContextImpl.java:718)         at org.apache.jasper.runtime.PageContextImpl.pushBody(PageContextImpl.java:704)         at org.apache.jsp.script.resources_js_jsp._jspx_meth_dsp_005flayeredBundle_005f0(resources_js_jsp.java:732) Solution: If your running A...

CSC & Endeca integration issues with Indexing jobs

As part of CSC setup, if you guys come across with below indexing/endeca search issues, then following are the solutions. Symptoms: When you see below errors while starting CSC instance, then it seems to be an issue with module Order. WARN  [IndexingPeriodicService] No configuration registered for "/atg/commerce/endeca/index/CategoryToDimensionOutputConfig" so skipping check for incremental upd WARN  [IndexingPeriodicService] No configuration registered for "/atg/commerce/search/OrderOutputConfig" so skipping check for incremental update. WARN  [IndexingPeriodicService] No configuration registered for "/atg/commerce/search/ProductCatalogOutputConfig" so skipping check for incremental update. WARN  [IndexingPeriodicService] No configuration registered for "/atg/commerce/endeca/index/CategoryToDimensionOutputConfig" so skipping check for incremental upd WARN  [IndexingPeriodicService] No configuration registered for "/atg/commerce...

BCC Master – Slave Agent Configurations

Configuring Content Administration (BCC) environment to deploy Single ConfigFileSystem across multiple Physical/Virtual machines (VM). To achive this, we should create a master ConfigFileSystem on one JVM/ATG instance on the VM and slave ConfigFileSystems on rest of the JVM's on the same VM. So only one JVM/ATG instance on a given machine/VM is responsible for file deployments. This configuration can significantly increase performance because deployment data, which can be very large, is sent to one agent rather than all agents. Also deployments won’t affect even if one of the non-essential agent went down during deployment. Note : A shared ConfigFileSystem is supported for switch mode deployments only. Steps to set up Shared ConfigFileSystem: 1. Designate one ATG instance on each machine/VM as the master instance and rest other ATG instances are considered as slave instances. 2. Configure a master ConfigFileSystem.properties file with below content. File: <ATG-Data-...

Dead locks while deploying project in BCC

Symptoms : If there are dead lock issues in BCC while deploying large assets/feeds project either in Staging or Production agents . If it fails after multiple attempts with " java.sql.SQLException: ORA-00060: deadlock detected while waiting for resource " errors in logs, we can try tweaking below configurations to make it successful. (Note: This might solve the issue for temporarily , but you need to look at the error log for exact issue) Solution: 1. Increase the INITRANS  for the affected table (will get the table names from the bcc/pub application logs)   Use this SQL to check current  INITRANS  value of the table :  select ini_trans,max_trans from dba_tables where table_name='table_Name'; Increase the value of INITRANS to good number, this can be determined based on the site.   Also request DBA team to examine the AWR report to detected the high ITL waits on a number of tables. 2. Tweak the default values of the D...

BCC performance issues

BCC Navigation slowness while browsing unsited catalog Symptoms: After creating merchandising project and browsing unsited catalog assets, if you see slowness  then that could be the problem with large catalog data. Solution: 1.  To resolve this issue, update the below configur ations in DCS-UI module.  2. Go to build server/ATG installed server location <ATG-ROOT>/DCS-UI/config/atg/remote/content/browse/ContentBrowseHierarchy.xml  3. Open the file  ContentBrowseHierarchy.xml and find    <browse-item id="unsited"  section. 4. Update the value from  show-count="true"  to  show-count="false"  5.  After the change the lines will look as below (highlighted in bold)... <!-- The unsited catalog items node --> <browse-item id="unsited"                label-resource="node.unsitedItems.label"                 show...