Re: ords/tomcat help

Jeff,

I by no means am an expert on this "stuff", as there are so many different moving parts. But, I've also had my installation up and running for probably around 15 years or so, since like HTMLDB 3? My system sounds similar to yours, but I'm running on Windows Server 2012 R2, Tomcat 7, ORDS 3. I'll be starting another post with a new issue I've been tasked with implementing shortly, it deals with SAML 2.0 in this environment.

Anyway, some of these may be legacy id's from previous installs that never got removed, and I may have some security violations. But, perhaps this may get you to connect, and then others can chime in with what I may have incorrectly set.

In Oracle, I have 5 users that seem to have bearing on Apex and the web. They are:

Apex_050000 (this one is version dependent)
Apex_Listener
Apex_public_user
Apex_rest_public_user
ORDS_public_user

In my installation, all of them have the same password as what I used in the ORDS setup, and all 5 of the accounts are unlocked and not expired. With this, you should be able to at least connect correctly to Apex through your webserver. But, as I said, this configuration may not be properly secured either. Hopefully after you can establish a connection, then others can chime in with the proper combination of which accounts to lock, etc.

Bill Ferguson

On Fri, Sep 7, 2018 at 12:17 PM Jeff Chirco <backseatdba_at_gmail.com> wrote:

> Thanks Anthony. I tried that and I ended up with a different error. So I
> decided to just delete all the apex_xx.xml files cause some of them were
> dated really old. I then ran
> $JAVA_HOME/bin/java -jar ords.war
> It then walked me through setup and and recreated those xml files. This
> time I was getting invalid password for apex|pu. I tried your method for
> encrypting the file for that one but no luck. So I just put the actual
> password in the apex_pu.xml file. I can't get it to re-encrypt the file.
> However after I start ords I am not getting this message on the page.
> Feels like I am getting closer
>
> [image: image.png]
>
>
>
> On Fri, Sep 7, 2018 at 10:19 AM anthony Sanchez <anthonycsanchez_at_gmail.com>
> wrote:
>
>> Hi Jeff,
>>
>> do you see this user getting locked out? APEX_PUBLIC_USER?
>>
>> have you tried re-encrypting your good working password for apex public
>> user in apex.xml?
>>
>> I think if you put an ! followed by your password and restart tomcat it
>> will be reencrpyted.
>>
>> for example if your working password is Password you would change this
>>
>> <?xml version="1.0" encoding="UTF-8" standalone="no"?>
>> <!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
>> <properties>
>> <comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>
>> *<entry
>> key="db.password">_at_05D745EDD5A466F362FF08A22A072DB77A9E8D55EBED8029D9</entry>*
>> <entry key="db.username">APEX_PUBLIC_USER</entry>
>> </properties>
>>
>>
>> to this
>>
>> <?xml version="1.0" encoding="UTF-8" standalone="no"?>
>> <!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
>> <properties>
>> <comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>
>> *<entry key="db.password">!Password</entry>*
>> <entry key="db.username">APEX_PUBLIC_USER</entry>
>> </properties>
>>
>> thanks,
>> Anthony
>>
>>
>>
>> On Thu, Sep 6, 2018 at 3:10 PM Jeff Chirco <backseatdba_at_gmail.com> wrote:
>>
>>> Yep I manually logged into each apex user account with the same
>>> password. Still having same issue. I am not getting errors about apex pu,
>>> al, or rt just this pool named |apex|
>>>
>>> WARNING: The pool named: |apex|| is invalid and will be ignored: The
>>> username or password for the connection pool named apex, are invalid,
>>> expired, or the account is locked
>>> Sep 06, 2018 2:07:17 PM
>>>
>>>
>>> On Thu, Sep 6, 2018 at 1:58 PM Jeff Smith <jeff.d.smith_at_oracle.com>
>>> wrote:
>>>
>>>> You could run the install again – but also make sure the apex public
>>>> user is ALSO unlocked
>>>>
>>>>
>>>>
>>>> *From:* Jeff Chirco <backseatdba_at_gmail.com>
>>>> *Sent:* Thursday, September 6, 2018 4:25 PM
>>>> *To:* Jeff Smith <jeff.d.smith_at_oracle.com>
>>>> *Cc:* Mark Bobak <mark_at_bobak.net>; Stefan Knecht <
>>>> knecht.stefan_at_gmail.com>; oracle-l-freelist <oracle-l_at_freelists.org>
>>>> *Subject:* Re: ords/tomcat help
>>>>
>>>>
>>>>
>>>> Hi Jeff, Which apex user account. I checked and APEX_PUBLIC_USER
>>>> password is matching.
>>>>
>>>>
>>>>
>>>> On Thu, Sep 6, 2018 at 12:57 PM Jeff Smith <jeff.d.smith_at_oracle.com>
>>>> wrote:
>>>>
>>>> Well that error is a pretty big one.
>>>>
>>>>
>>>>
>>>> ORDS can’t establish a connection pool to run your APEX app.
>>>>
>>>>
>>>>
>>>> Change the apex user password in the database to match what you have in
>>>> the ords config files or vice versa.
>>>>
>>>>
>>>>
>>>> *From:* Jeff Chirco <backseatdba_at_gmail.com>
>>>> *Sent:* Thursday, September 6, 2018 3:27 PM
>>>> *To:* Mark Bobak <mark_at_bobak.net>
>>>> *Cc:* Stefan Knecht <knecht.stefan_at_gmail.com>; oracle-l-freelist <
>>>> oracle-l_at_freelists.org>
>>>> *Subject:* Re: ords/tomcat help
>>>>
>>>>
>>>>
>>>> Apex 18.1
>>>>
>>>> ORDS 18.2ZZZ
>>>>
>>>> Apacke Tomcat 9.0.10
>>>>
>>>>
>>>>
>>>> This is the only warning I see in the logs
>>>>
>>>> WARNING: The pool named: |apex|| is invalid and will be ignored: The
>>>> username or password for the connection pool named apex, are invalid,
>>>> expired, or the account is locked
>>>> Sep 04, 2018 9:51:43 PM
>>>>
>>>>
>>>>
>>>> I am running in standalone mode and I don't see any other errors.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Thu, Sep 6, 2018 at 11:48 AM Mark J. Bobak <mark_at_bobak.net> wrote:
>>>>
>>>> Also, try turning ords.war in Standalone mode.
>>>>
>>>>
>>>>
>>>> java -jar ords.war standalone
>>>>
>>>>
>>>>
>>>> It should be clear if you're missing any Oracle DBA users, or if you
>>>> have the wrong password for any of them.
>>>>
>>>>
>>>>
>>>> -Mark
>>>>
>>>> On Thu, Sep 6, 2018, 13:39 Stefan Knecht <knecht.stefan_at_gmail.com>
>>>> wrote:
>>>>
>>>> Restart ORDS after setting them to true, BTW.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Fri, Sep 7, 2018 at 12:37 AM, Stefan Knecht <knecht.stefan_at_gmail.com>
>>>> wrote:
>>>>
>>>> Turn those two on in your defaults.xml in the ORDS installation
>>>> directory:
>>>>
>>>>
>>>>
>>>> <entry key="debug.debugger">false</entry>
>>>>
>>>> <entry key="debug.printDebugToScreen">false</entry>
>>>>
>>>>
>>>>
>>>> Then you should get more information.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Thu, Sep 6, 2018 at 11:14 PM, Jeff Chirco <backseatdba_at_gmail.com>
>>>> wrote:
>>>>
>>>> I am working on setting up Tomcat/ORDS/APEX for the first time. I have
>>>> a Linux box with Tomcat installed. I followed Tim's notes for ORDS install
>>>>
>>>>
>>>> https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-installation-on-tomcat
>>>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__oracle-2Dbase.com_articles_misc_oracle-2Drest-2Ddata-2Dservices-2Dords-2Dinstallation-2Don-2Dtomcat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=KPj0MSF4snLbyTibImr6x9psDGcy6ymSAiQOqUnluOk&e=>
>>>>
>>>> But when I try to go the site I get the Oracle REST Data Services page
>>>> but with a 404 Not Found.
>>>>
>>>> [image: image.png]
>>>>
>>>>
>>>>
>>>> I copied the APEX images to my /tomcat/webapps/i folder. What is
>>>> usually the cause of this?
>>>>
>>>> Appreciate any help.
>>>>
>>>>
>>>>
>>>> Thanks,
>>>>
>>>> Jeff
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> //
>>>>
>>>> zztat - The Next-Gen Oracle Performance Monitoring and Reaction
>>>> Framework!
>>>>
>>>> Visit us at zztat.net
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e=> |
>>>> _at_zztat_oracle | fb.me/zztat
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e=>
>>>> | zztat.net/blog/
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e=>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> //
>>>>
>>>> zztat - The Next-Gen Oracle Performance Monitoring and Reaction
>>>> Framework!
>>>>
>>>> Visit us at zztat.net
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e=> |
>>>> _at_zztat_oracle | fb.me/zztat
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e=>
>>>> | zztat.net/blog/
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e=>
>>>>
>>>>

-- 
-- Bill Ferguson






--
http://www.freelists.org/webpage/oracle-l





image/png attachment: image.png