Re: WHY WHY does Oracle OEM 12c (12.1.0.5) use the following...
Date: Sat, 14 Nov 2015 00:05:44 +0000
Message-ID: <CAP=5zEibarcX2M317xWQRL2=DPTu4D-ff8Z6+=2xzPb6G0ETFw_at_mail.gmail.com>
WebLogic is only one piece if the puzzle. As Pete said, there is a whole framework, including ADF and the internal framework the EM is built on. Oracle database 122c is certified, so you are moving all your apps directly to it without testing anything right? No? And your still going to use those deprecated and/or de-supported features right? No? I think you get his point here. :)
Cheers
Tim...
On Fri, Nov 13, 2015 at 8:46 PM, Chris Taylor < christopherdtaylor1994_at_gmail.com> wrote:
> *Supposedly *Java 1.7 (any version) is supported with Weblogic 10.3.6 and
> 12.x (according to the metalink documents). There wasn't a clear
> certification matrix that was easy to tie WLS 10.3.6/12.x to specific JDK
> versions and updates that I could find however.
>
> Chris
>
>
> On Fri, Nov 13, 2015 at 11:07 AM, Peter Sharman <pete.sharman_at_oracle.com>
> wrote:
>
>> Sigh, we DO certify versions for a reason, you know! ;)
>>
>>
>>
>> Pete
>>
>> [image: Oracle logo]
>>
>> Pete Sharman
>> Database Architect, DBaaS / DBLM
>> Enterprise Manager Product Suite
>> 33 Benson Crescent CALWELL ACT 2905 AUSTRALIA
>>
>> Phone: +61262924095 | | Mobile: *+61414443449 <%2B61414443449>*
>> Email: pete.sharman_at_oracle.com Twitter: _at_SharmanPete LinkedIn:
>> au.linkedin.com/in/petesharman
>> Website: petewhodidnottweet.com
>> ------------------------------
>>
>> "Controlling developers is like herding cats."
>>
>> Kevin Loney, Oracle DBA Handbook
>>
>>
>>
>> "Oh no, it's not, it's much harder than that!"
>>
>> Bruce Pihlamae, long term Oracle DBA
>> ------------------------------
>>
>>
>>
>> *From:* Chris Taylor [mailto:christopherdtaylor1994_at_gmail.com]
>> *Sent:* Saturday, November 14, 2015 12:39 AM
>> *To:* Niall Litchfield <niall.litchfield_at_gmail.com>
>> *Cc:* Tim Hall <tim_at_oracle-base.com>; Oracle-L Freelists <
>> oracle-l_at_freelists.org>
>> *Subject:* Re: WHY WHY does Oracle OEM 12c (12.1.0.5) use the
>> following...
>>
>>
>>
>> In the spirit of full ownership of crap I spew, Niall is exactly right.
>> I updated the JRE for the OEM 12c (12.1.0.5) and immediately things started
>> breaking. Apparently, after Java 1.7 u 85, RC4 ciphers have been removed
>> which Grid apparently uses so you have to update some things. *sigh*
>>
>>
>>
>> Metalink Docs of note:
>>
>> *How to Install and Maintain the Java SE Installed or Used with FMW
>> 11g/12c Products (Doc ID 1492980.1)*
>>
>> *MBean Error Accessing HTTP Server Configuration in FMW Control (/em) -
>> After Upgrading JDK (Doc ID 2049077.1)*
>>
>> Note 1067411.1
>> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1067411.1> How
>> To Disable Anonymous and Weak Cipher Suites in Oracle WebLogic Server
>>
>> Note 1463846.1
>> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1463846.1> JDK
>> 7 BREAKS EM CONSOLE WHEN ATTEMPTING TO EDIT CONFIG FILES FMW 11.1.1.6 -
>> 11.1.2.1
>>
>> Note 1598061.1
>> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1598061.1> JDK
>> 7: OWM Fails with the Error, "This function should be called while holding
>> treeLock"
>>
>> Note 1943873.1
>> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1943873.1> Latest
>> JDK 6 or 7: Patch 17337741 Causes Error "Too few bytes (1) received from
>> OPMN response" While Trying to Manage System Components Using FMW Control
>> Note 1450179.1
>> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1450179.1> Solaris
>> OS: Managed Servers of a Portal, Forms, Reports, Discoverer Installation
>> Fail to Start with Java 7 with the Error "Unknown keyword
>> 'useEcX963Encoding"
>> Note 1987534.1
>> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1987534.1> IBM
>> JDK: When Trying To Login To EM FMW Control - Error Is Returned:
>> "User is not authorized to login to WebLogic
>> Domain. User should be part of one or more Administrative roles to be able
>> to login"
>>
>>
>>
>>
>>
>> On Thu, Nov 12, 2015 at 6:24 PM, Niall Litchfield <
>> niall.litchfield_at_gmail.com> wrote:
>>
>> I suspect you underestimate the engineering effort required to ensure
>> that that change of JVM doesn't in fact hobble anything. I mean why does
>> anyone run apps against Oracle 11.2 - 12.1 is just a version change right
>> :)
>>
>>
>>
>> On Fri, Nov 13, 2015 at 12:12 AM, Chris Taylor <
>> christopherdtaylor1994_at_gmail.com> wrote:
>>
>> Well, that makes me feel better at least - that I'm not alone in
>> scratching my head over it I mean. Seems crazy to ship out a product that
>> contains significant vulnerabilities when they could re-package it with a
>> known good java version.
>>
>>
>>
>> Chris
>>
>>
>>
>> On Thu, Nov 12, 2015 at 5:33 PM, Tim Hall <tim_at_oracle-base.com> wrote:
>>
>> Well:
>>
>> 1) Many (but not all) of the major security alerts around Java6 have
>> actually been on the client side, when running the Java plugins in
>> browser, so server side Java is not so much of a problem (insert
>> caveats here).
>> 2) Cloud Control is not for public access, so...
>> 3) WebLogic 11g (10.3.6) is still by far the most popular version at
>> this time. Oracle Fusion Apps is currently built on WebLogic 11g
>> 10.3.6 using ADF 11.1.1.9. To my knowledge, it has not been migrated
>> to WebLogic 12c yet. With that in mind, it's hardly surprising other
>> projects have not moved forward yet.
>> 4) The teams in Oracle each have their own deadlines and
>> time-to-market pressures mean they rarely use the latest products.
>> Testing your code base against a later release of the software takes
>> time that could be spent adding new features. This happens to all of
>> us. :)
>> 5) Cloud Control is a shrink-wrapped application. You shouldn't be
>> using it for your own stuff, so why do you care what it's built with,
>> provided it passes your external penetration testing? I treat it like
>> a black box.
>> 6) Oracle teams very rarely seem to look outside of themselves for
>> best practices provided by other teams. As proof I offer you the
>> database installations associated with eBusiness Suite, which don't
>> seem to follow simple best practices that I would consider DBA101.
>> Even if you are a good DBA, you have to check your real DBA hat in and
>> pick up a Oracle Apps DBA hat before doing any work on them, because
>> if you do things "correctly", the apps die. :)
>>
>> This is not a defence of it, it's just an observation. I made a
>> similar comment about Java 6 when I first installed 12.1.0.5.
>>
>>
>> https://oracle-base.com/blog/2015/06/17/oracle-enterprise-manager-cloud-control-12c-release-5-12-1-0-5-my-first-two-installations/
>>
>> I too get a little frustrated by this, but it is what I've come to
>> expect of nearly every large software vendor. Check out what's under
>> the hood of Microsoft BizTalk Server and you will see much the same
>> issues. It's cobbled together with loads of old bits of software, but
>> sold as a current "enterprise" solution... :)
>>
>> Cheers
>>
>> Tim...
>>
>>
>>
>>
>>
>>
>>
>> --
>>
>> Niall Litchfield
>> Oracle DBA
>> http://www.orawin.info
>>
>>
>>
>
>
-- http://www.freelists.org/webpage/oracle-lReceived on Sat Nov 14 2015 - 01:05:44 CET