标签归档:EBS

Oracle S 由数据库端找到对应的前台URL地址

SELECT home_url FROM icx_parameters; 

SELECT profile_option_value  
  FROM fnd_profile_option_values  
WHERE profile_option_id=  
   (SELECT profile_option_id                              
      FROM fnd_profile_options WHERE profile_option_name = 'APPS_FRAMEWORK_AGENT')                               
   AND level_value = 0; 

Oracle EBS 取消“是否提交另一项请求”

配置文件

中文:并发:提交每个请求后显示请求摘要

英文:Concurrent: ShowRequests Summary After Each Request Submission

说明:设置为“是”以使 SRS 表单 (FNDRSRUN) 在每次提交新请求时显示当前提交请求的摘要。

使用场景:

    在使用EBS提交请求后,总要弹出“是否提交另一项请求”的提示,而我们往往选择“否”,这个提示就显得多余。  

    为了减轻这“多一步”的负担,取消“是否提交另一项请求”的提示,设置方法如下:默认:否(No),修改为是(Yes),可以在User Level上修改。

Oracle EBS R12启用HTTPS安全链接(SSL)

        E-Business Suite R12.1.1 provides Advanced Configuration wizards that make it easier to deploy features such as SSL and load-balancing.  Apps administrators can use these wizards to make configuration changes online through Oracle Applications Manager (OAM) and then run AutoConfig on the applications tier to make the changes effective.

       SSL (Secure Sockets Layer) is one of the most commonly used configurations in EBS. I'll walk through the SSL Advanced Configuration Wizard in this article.

Accessing the Advanced Configuration Wizards

Launch the Oracle Applications Manager Site Map using the System Administrator responsibility, then select the AutoConfig link from the Administration tab.

 

Click on Launch Wizards. It brings up the launch pad for five wizards:

  1. Forms Socket Mode
  2. SSL
  3. SSL Accelerator
  4. HTTP Load Balancing 
  5. OC4J Load Balancing

Start the SSL Configuration Wizard

The OAM General Collection Service must be activated before running any configuration wizards.  From the Administration tab of the Site Map, click on the 'Generic Services' link under the Application Services. Select 'OAM Generic Collect Services' and start it for the target instance. OAM submits a concurrent request for the same. Click on Verify to see if the service starts up fine. Once the service starts, you are ready to use the wizard.

From the Configuration Wizards launch pad, click on the 'Enable' button for SSL.

Select Nodes to be SSL-Enabled

Select the nodes on which you would like to enable SSL and click 'Next.'

2. Set Context variables for SSL

Notice the tip at the bottom of the Parameters screen:  you should make sure that your digital certificates are properly imported into the Wallet of your EBS instance. For details about importing SSL certificates, see:

 

The wizard sets the following context variables to 'https': 

  • URL protocol
  • Local URL protocol

It also sets values for the 'Web SSL directory' and the 'Active HTTP SSL port.' The subsequent screen gives the current and new values for these variables.

3. Validation

The wizard validates all settings when you click 'Next' after the user comparison of context values screen.  It checks that the Wallet and the required directory structures exist.

Make sure that the Status is 'Success.' Check the log file in the 'View' link for any errors.

4. Confirmation Page

Clicking 'Next' will take you to the Confirmation Page in the train cart. Click on the link below to check the confirmation page.

5. Submit the changes and run AutoConfig

Clicking the 'Submit' button on the Confirmation page displays the next action to be taken. You can review the context file on the applications tier for the changes that have been made. 

The next step is to run AutoConfig to propagate the changes. You need to restart all application services to make the changes effective.

Once the service have been restarted, the EBS instance is ready to be used in SSL mode.

转载自:http://blog.csdn.net/sunansheng/article/details/45848783

Oracle的单点登录解决方案(Single Sign-On Solution)

        Single Sign-On(SSO)即单点登录,在多个应用系统中,用户只需要登录一次就可以访问所有相互信任的应用系统。在此条件下,管理员无需修改或干涉用户登录就能方便的实施希望得到的安全控制。

        Oracle现有两套单点登录的解决方案:Oracle Access Manager,Oracle Single Sign-On Server (OSSO)。
Oracle官方推荐Access Manager作为SSO的解决方案,Oracle Single Sign-On Server的高级用户最终也会建议迁移到Oracle Access Manager解决方案上。

(来源:Note 1461465.2 – Information Center: Overview EBS Technology Stack OID and SSO and OAM)

OAM SSO实现方式有两种:一种是通过OAM Agent(WebGate),另外一种是使用OSSO Agents(mod_osso)

1.) 使用OAM Agent(WebGate代理),然后和Oracle E-Business Suite Access Gate集成(此处以EBS为例).

WebGate是Web服务器的一个插件,用于拦截HTTP请求,并把请求导向Oracle Access Manager (OAM)来获取用户认证。

OAM SSO登陆的过程描述:

When a user tries to access a protected application, the request is received by OAM which checks for the existence of the SSO cookie.

After authenticating the user and setting up the user context and token, OAM sets the SSO cookie and encrypts the cookie with the SSO Server key (which can be decrypted only by the SSO Engine).

Depending on the actions (responses in OAM 11g) specified for authentication success and authentication failure, the user may be redirected to a specific URL, or user information might be passed on to other applications through a header variable or a cookie value.

Based on the authorization policy and results of the check, the user is allowed or denied access to the requested content. If the user is denied access, she is redirected to another URL (specified by the administrator in Webgate registration).

可以看到,Oracle OAM通过Cookie存储用户的信息,进而通过Cookie来实现单点访问授信站点。

2.) 使用mod_osso代理,这种方法只适用于从Oracle Single Sign-On Server 10gR3升级上来的用户。

详细见:About SSO Log In Processing with OAM Agents中的“About SSO Login Log In Processing with OSSO Agents (mod_osso)”

关于Cookie

Cookies就是服务器暂存放在你的电脑里的资料( 用户ID,密码、浏览过的网页、停留的时间等信息),好让服务器用来辨认你的计算机。 当你在浏览网站的时候,Web服务器会先送一小小资料放在你的计算机上,Cookies 会帮你在网站上一些内容都记录下来。当下次你再访问同一个网站,Web服务器会先看看有没有它上次留下的Cookies资料,有的话,就会 依据Cookie里的内容来判断使用者,送出特定的网页内容给你。 一般来说,Cookie通过HTTP Headers从服务器端返回到浏览器上。IE Cookies 文件夹路径保存于注册表:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cookies

See Also:

Oracle LDAP解决方案 – Oracle Identity and Access Management Suite :http://blog.csdn.net/pan_tian/article/details/20927733

About SSO Log In Processing with OAM Agents

Overview of Single Sign-On Integration Options for Oracle E-Business Suite [ID 1388152.1]
Integrating Oracle E-Business Suite Release 11i with Oracle Access Manager 11gR2 (11.1.2) using Oracle E-Business Suite AccessGate [ID 1536941.1]

Oracle Access Manager 11.1.2 Certified with E-Business Suite 12 

Oracle Access Manager 11.1.2 Certified With E-Business Suite 11i
Introduction to Installing WebGates

转载自:http://blog.csdn.net/pan_tian/article/details/8691726

Oracle EBS R12.2版本更改apps密码

Oracle ebs12版本中,12.1和12.2更改密码有比较大的变化,以下是12.2变更的操作系统层的命令,以下是官方文档:

R12.2: Steps to Change the APPS, APPLSYS, and APPS_NE Password Using FNDCPASS or AFPASSWD (文档 ID 1674462.1)

–具体命令如下

su – appldev
cd $INST_TOP/admin/scripts
./adstpall apps/apps;
[appldev@devfin scripts]$ FNDCPASS apps/apps 0 Y system/manager SYSTEM APPLSYS xxxxxx
Log filename : L510975.log


Report filename : O510975.out
[appldev@devfin scripts]$ cat L510975.log
+—————————————————————————+
Application Object Library: Version : 12.2

Copyright (c) 1998, 2013, Oracle and/or its affiliates. All rights reserved.

FNDCPASS: 
+—————————————————————————+

Current system time is 17-JAN-2018 10:29:36

+—————————————————————————+

Arguments
 
   FNDCPASS system/***** SYSTEM APPLSYS ***** 
+—————————————————————————-+
Working…

FNDCPASS completed successfully.

+—————————————————————————+
Concurrent request completed successfully
Current system time is 17-JAN-2018 10:29:37

+—————————————————————————+
[appldev@devfin scripts]$ ./adautocfg.sh
Enter the APPS user password:

The log file for this session is located at: /u01/DEV/app/fs1/inst/apps/DEV_devfin/admin/log/01171038/adconfig.log

AutoConfig is configuring the Applications environment…

AutoConfig will consider the custom templates if present.
        Using CONFIG_HOME location     : /u01/DEV/app/fs1/inst/apps/DEV_devfin
        Classpath                   : /u01/DEV/app/fs1/FMW_Home/Oracle_EBS-app1/shared-libs/ebs-appsborg/WEB-INF/lib/ebsAppsborgManifest.jar:/u01/DEV/app/fs1/EBSapps/comn/java/classes

        Using Context file          : /u01/DEV/app/fs1/inst/apps/DEV_devfin/appl/admin/DEV_devfin.xml

Context Value Management will now update the Context file

        Updating Context file…COMPLETED

        Attempting upload of Context file and templates to database…COMPLETED

Configuring templates from all of the product tops…
        Configuring AD_TOP……..COMPLETED
        Configuring FND_TOP…….COMPLETED
        Configuring ICX_TOP…….COMPLETED
        Configuring MSC_TOP…….COMPLETED
        Configuring IEO_TOP…….COMPLETED
        Configuring BIS_TOP…….COMPLETED
        Configuring CZ_TOP……..COMPLETED
        Configuring SHT_TOP…….COMPLETED
        Configuring AMS_TOP…….COMPLETED
        Configuring CCT_TOP…….COMPLETED
        Configuring WSH_TOP…….COMPLETED
        Configuring CLN_TOP…….COMPLETED
        Configuring OKE_TOP…….COMPLETED
        Configuring OKL_TOP…….COMPLETED
        Configuring OKS_TOP…….COMPLETED
        Configuring CSF_TOP…….COMPLETED
        Configuring IBY_TOP…….COMPLETED
        Configuring JTF_TOP…….COMPLETED
        Configuring MWA_TOP…….COMPLETED
        Configuring CN_TOP……..COMPLETED
        Configuring CSI_TOP…….COMPLETED
        Configuring WIP_TOP…….COMPLETED
        Configuring CSE_TOP…….COMPLETED
        Configuring EAM_TOP…….COMPLETED
        Configuring GMF_TOP…….COMPLETED
        Configuring PON_TOP…….COMPLETED
        Configuring FTE_TOP…….COMPLETED
        Configuring ONT_TOP…….COMPLETED
        Configuring AR_TOP……..COMPLETED
        Configuring AHL_TOP…….COMPLETED
        Configuring IES_TOP…….COMPLETED
        Configuring OZF_TOP…….COMPLETED
        Configuring CSD_TOP…….COMPLETED
        Configuring IGC_TOP…….COMPLETED

AutoConfig completed successfully.

[appldev@devfin scripts]$ ./adadminsrvctl.sh start

You are running adadminsrvctl.sh version 120.10.12020000.10

Enter the WebLogic Admin password:
Enter the APPS Schema password:
Starting WLS Admin Server…
Refer /u01/DEV/app/fs1/inst/apps/DEV_devfin/logs/appl/admin/log/adadminsrvctl.txt for details

AdminServer logs are located at /u01/DEV/app/fs1/FMW_Home/user_projects/domains/EBS_domain_DEV/servers/AdminServer/logs

adadminsrvctl.sh: exiting with status 0

adadminsrvctl.sh: check the logfile /u01/DEV/app/fs1/inst/apps/DEV_devfin/logs/appl/admin/log/adadminsrvctl.txt for more information …  


[appldev@devfin scripts]$ grep wls_adminport $CONTEXT_FILE
         <wls_adminport oa_var="s_wls_adminport" oa_type="PORT" base="7001" step="1" range="-1" label="WLS Admin Server Port">7009</wls_adminport>

–上面步骤完成后,通过前台页面去进行WLS层级的配置

http://xxxxx:7009/console
a. Log in to WLS Administration Console.
b. Click Lock & Edit in Change Center.
c. In the Domain Structure tree, expand Services, then select Data Sources.
d. On the "Summary of JDBC Data Sources" page, select EBSDataSource.
e. On the "Settings for EBSDataSource" page, select the Connection Pool tab.
f. Enter the new password in the "Password" field.
g. Enter the new password in the "Confirm Password" field.
h. Click Save.
i. Click Activate Changes in Change Center.


[appldev@devfin scripts]$ ./adstrtal.sh apps/xxxxxx