Re: ords/tomcat help

From: Mark J. Bobak <mark_at_bobak.net>
Date: Mon, 4 Feb 2019 09:35:54 -0500
Message-ID: <CAFQ5AC+UT8p6VYhnato1erYwNGg78Rp1ip8PVq+b8-Lc0PEJSw_at_mail.gmail.com>





We run Glassfish, with Apache frontend to support SSL for multiple domains, using JK listener to talk between Apache and Glassfish.

It took a while to get right, but works well for us now.

-Mark

On Mon, Feb 4, 2019, 09:15 Bill Ferguson <wbfergus_at_gmail.com> wrote:

> That was my impression as well, for a web server that will work with
> Oracle, Apex, ORDS, and is free.
>
> Last I read, many years ago, the only three web server contenders were
> Weblogic (must have license), Oracle Application Server (must have
> license), and Tomcat (free).
>
> Tomcat can have it's own set of unique headaches, but it does work, and it
> is free. Depending on your organization, it also wasn't too difficult for
> me to figure out how to incorporate our organizations wildacrd certificate
> for HTTPS. Now I'm just stuck on LDAPS, and later this year on SAML 2.0.
>
> I wish the SAML 2.0 could simply be a new option in the Apex stack, or
> maybe in ORDS (or both?), but that's probably a pipe dream. LOL
>
> Bill Ferguson
>
> On Mon, Feb 4, 2019 at 6:13 AM Jeff Smith <jeff.d.smith_at_oracle.com> wrote:
>
>> Whoa.
>>
>>
>>
>> >> You don’t need additinal license if you install weblogic and deploy
>> ORDS on top of it.
>>
>> I’m not in Sales or Legal here at Oracle, but I can say this – there are
>> no freebies when it comes to WLS and ORDS.
>>
>>
>>
>> *From:* Shastry(DBA) <shastry17_at_gmail.com>
>> *Sent:* Saturday, February 2, 2019 11:11 AM
>> *To:* tim_at_oracle-base.com
>> *Cc:* Backseat DBA <backseatdba_at_gmail.com>; Jeff Smith <
>> jeff.d.smith_at_oracle.com>; Mark J. Bobak <mark_at_bobak.net>; anthony
>> Sanchez <anthonycsanchez_at_gmail.com>; oracle-l-freelist <
>> oracle-l_at_freelists.org>; wbfergus_at_gmail.com
>> *Subject:* Re: ords/tomcat help
>>
>>
>>
>> Hi Jeff,
>>
>>
>>
>> Why don’t you switch to web logic ORDS APEX combination? You don’t need
>> additinal license if you install weblogic and deploy ORDS on top of it. I
>> did it successfully last week.
>>
>>
>>
>> Thanks,
>>
>> Ananth
>>
>>
>>
>> On Fri, Feb 1, 2019 at 4:45 AM, Tim Hall <tim_at_oracle-base.com> wrote:
>>
>> I would recommend an ORDS validate after every APEX upgrade and DB patch.
>>
>>
>>
>> $JAVA_HOME/bin/java -jar ords.war validate
>>
>>
>>
>> I would recommend an APEX validate after every DB patch/upgrade. Easy to
>> add to your scripts and it just makes sure everything is happy.
>>
>>
>>
>> CONN / AS SYSDBA
>>
>> --ALTER SESSION SET CONTAINER=pdb1;
>>
>> SET SERVEROUTPUT ON
>>
>> EXEC SYS.validate_apex;
>>
>>
>>
>> On Thu, Jan 31, 2019 at 4:19 PM Mark J. Bobak <mark_at_bobak.net> wrote:
>>
>> Oh, cool! I knew about 'java -jar ords.war standalone', but I never knew
>> about 'java -jar ords.war validate'.
>>
>>
>>
>> I learn something new every day.....
>>
>>
>>
>> -Mark
>>
>>
>>
>> On Wed, Jan 30, 2019 at 8:41 AM Jeff Smith <jeff.d.smith_at_oracle.com>
>> wrote:
>>
>> Running java -jar ords.war validate for your connection pool might help –
>> it’ll confirm everything is there that needs to be there to service that db
>> and/or APEX
>>
>>
>>
>> *From:* Bill Ferguson <wbfergus_at_gmail.com>
>> *Sent:* Wednesday, January 30, 2019 8:36 AM
>> *To:* backseatdba_at_gmail.com
>> *Cc:* anthonycsanchez_at_gmail.com; oracle-l-freelist <
>> oracle-l_at_freelists.org>
>> *Subject:* Re: ords/tomcat help
>>
>>
>>
>> Jeff,
>>
>> I by no means am an expert on this "stuff", as there are so many
>> different moving parts. But, I've also had my installation up and running
>> for probably around 15 years or so, since like HTMLDB 3? My system sounds
>> similar to yours, but I'm running on Windows Server 2012 R2, Tomcat 7, ORDS
>> 3. I'll be starting another post with a new issue I've been tasked with
>> implementing shortly, it deals with SAML 2.0 in this environment.
>>
>> Anyway, some of these may be legacy id's from previous installs that
>> never got removed, and I may have some security violations. But, perhaps
>> this may get you to connect, and then others can chime in with what I may
>> have incorrectly set.
>>
>> In Oracle, I have 5 users that seem to have bearing on Apex and the web.
>> They are:
>>
>> Apex_050000 (this one is version dependent)
>>
>> Apex_Listener
>>
>> Apex_public_user
>>
>> Apex_rest_public_user
>>
>> ORDS_public_user
>>
>> In my installation, all of them have the same password as what I used in
>> the ORDS setup, and all 5 of the accounts are unlocked and not expired.
>> With this, you should be able to at least connect correctly to Apex through
>> your webserver. But, as I said, this configuration may not be properly
>> secured either. Hopefully after you can establish a connection, then others
>> can chime in with the proper combination of which accounts to lock, etc.
>>
>> Bill Ferguson
>>
>>
>>
>> On Fri, Sep 7, 2018 at 12:17 PM Jeff Chirco <backseatdba_at_gmail.com>
>> wrote:
>>
>> Thanks Anthony. I tried that and I ended up with a different error. So
>> I decided to just delete all the apex_xx.xml files cause some of them were
>> dated really old. I then ran
>>
>> $JAVA_HOME/bin/java -jar ords.war
>>
>> It then walked me through setup and and recreated those xml files. This
>> time I was getting invalid password for apex|pu. I tried your method for
>> encrypting the file for that one but no luck. So I just put the actual
>> password in the apex_pu.xml file. I can't get it to re-encrypt the file.
>> However after I start ords I am not getting this message on the page.
>> Feels like I am getting closer
>>
>>
>>
>> [image: image.png]
>>
>>
>>
>>
>>
>> On Fri, Sep 7, 2018 at 10:19 AM anthony Sanchez <
>> anthonycsanchez_at_gmail.com> wrote:
>>
>> Hi Jeff,
>>
>>
>>
>> do you see this user getting locked out? APEX_PUBLIC_USER?
>>
>>
>>
>> have you tried re-encrypting your good working password for apex public
>> user in apex.xml?
>>
>>
>>
>> I think if you put an ! followed by your password and restart tomcat it
>> will be reencrpyted.
>>
>>
>>
>> for example if your working password is Password you would change this
>>
>>
>>
>> <?xml version="1.0" encoding="UTF-8" standalone="no"?>
>>
>> <!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
>>
>> <properties>
>>
>> <comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>
>>
>> *<entry
>> key="db.password">_at_05D745EDD5A466F362FF08A22A072DB77A9E8D55EBED8029D9</entry>*
>>
>> <entry key="db.username">APEX_PUBLIC_USER</entry>
>>
>> </properties>
>>
>>
>>
>>
>>
>> to this
>>
>>
>>
>> <?xml version="1.0" encoding="UTF-8" standalone="no"?>
>>
>> <!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
>>
>> <properties>
>>
>> <comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>
>>
>> *<entry key="db.password">!Password</entry>*
>>
>> <entry key="db.username">APEX_PUBLIC_USER</entry>
>>
>> </properties>
>>
>>
>>
>> thanks,
>>
>> Anthony
>>
>>
>>
>>
>>
>> On Thu, Sep 6, 2018 at 3:10 PM Jeff Chirco <backseatdba_at_gmail.com> wrote:
>>
>> Yep I manually logged into each apex user account with the same password.
>> Still having same issue. I am not getting errors about apex pu, al, or rt
>> just this pool named |apex|
>>
>>
>>
>> WARNING: The pool named: |apex|| is invalid and will be ignored: The
>> username or password for the connection pool named apex, are invalid,
>> expired, or the account is locked
>>
>> Sep 06, 2018 2:07:17 PM
>>
>>
>>
>> On Thu, Sep 6, 2018 at 1:58 PM Jeff Smith <jeff.d.smith_at_oracle.com>
>> wrote:
>>
>> You could run the install again – but also make sure the apex public user
>> is ALSO unlocked
>>
>>
>>
>> *From:* Jeff Chirco <backseatdba_at_gmail.com>
>> *Sent:* Thursday, September 6, 2018 4:25 PM
>> *To:* Jeff Smith <jeff.d.smith_at_oracle.com>
>> *Cc:* Mark Bobak <mark_at_bobak.net>; Stefan Knecht <knecht.stefan_at_gmail.com>;
>> oracle-l-freelist <oracle-l_at_freelists.org>
>> *Subject:* Re: ords/tomcat help
>>
>>
>>
>> Hi Jeff, Which apex user account. I checked and APEX_PUBLIC_USER
>> password is matching.
>>
>>
>>
>> On Thu, Sep 6, 2018 at 12:57 PM Jeff Smith <jeff.d.smith_at_oracle.com>
>> wrote:
>>
>> Well that error is a pretty big one.
>>
>>
>>
>> ORDS can’t establish a connection pool to run your APEX app.
>>
>>
>>
>> Change the apex user password in the database to match what you have in
>> the ords config files or vice versa.
>>
>>
>>
>> *From:* Jeff Chirco <backseatdba_at_gmail.com>
>> *Sent:* Thursday, September 6, 2018 3:27 PM
>> *To:* Mark Bobak <mark_at_bobak.net>
>> *Cc:* Stefan Knecht <knecht.stefan_at_gmail.com>; oracle-l-freelist <
>> oracle-l_at_freelists.org>
>> *Subject:* Re: ords/tomcat help
>>
>>
>>
>> Apex 18.1
>>
>> ORDS 18.2ZZZ
>>
>> Apacke Tomcat 9.0.10
>>
>>
>>
>> This is the only warning I see in the logs
>>
>> WARNING: The pool named: |apex|| is invalid and will be ignored: The
>> username or password for the connection pool named apex, are invalid,
>> expired, or the account is locked
>> Sep 04, 2018 9:51:43 PM
>>
>>
>>
>> I am running in standalone mode and I don't see any other errors.
>>
>>
>>
>>
>>
>> On Thu, Sep 6, 2018 at 11:48 AM Mark J. Bobak <mark_at_bobak.net> wrote:
>>
>> Also, try turning ords.war in Standalone mode.
>>
>>
>>
>> java -jar ords.war standalone
>>
>>
>>
>> It should be clear if you're missing any Oracle DBA users, or if you have
>> the wrong password for any of them.
>>
>>
>>
>> -Mark
>>
>> On Thu, Sep 6, 2018, 13:39 Stefan Knecht <knecht.stefan_at_gmail.com> wrote:
>>
>> Restart ORDS after setting them to true, BTW.
>>
>>
>>
>>
>>
>>
>>
>> On Fri, Sep 7, 2018 at 12:37 AM, Stefan Knecht <knecht.stefan_at_gmail.com>
>> wrote:
>>
>> Turn those two on in your defaults.xml in the ORDS installation directory:
>>
>>
>>
>> <entry key="debug.debugger">false</entry>
>>
>> <entry key="debug.printDebugToScreen">false</entry>
>>
>>
>>
>> Then you should get more information.
>>
>>
>>
>>
>>
>>
>>
>> On Thu, Sep 6, 2018 at 11:14 PM, Jeff Chirco <backseatdba_at_gmail.com>
>> wrote:
>>
>> I am working on setting up Tomcat/ORDS/APEX for the first time. I have a
>> Linux box with Tomcat installed. I followed Tim's notes for ORDS install
>>
>>
>> https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-installation-on-tomcat
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__oracle-2Dbase.com_articles_misc_oracle-2Drest-2Ddata-2Dservices-2Dords-2Dinstallation-2Don-2Dtomcat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=KPj0MSF4snLbyTibImr6x9psDGcy6ymSAiQOqUnluOk&e=>
>>
>> But when I try to go the site I get the Oracle REST Data Services page
>> but with a 404 Not Found.
>>
>>
>>
>> I copied the APEX images to my /tomcat/webapps/i folder. What is usually
>> the cause of this?
>>
>> Appreciate any help.
>>
>>
>>
>> Thanks,
>>
>> Jeff
>>
>>
>>
>>
>>
>> --
>>
>> //
>>
>> zztat - The Next-Gen Oracle Performance Monitoring and Reaction Framework!
>>
>> Visit us at zztat.net
>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e=> |
>> _at_zztat_oracle | fb.me/zztat
>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e=>
>> | zztat.net/blog/
>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e=>
>>
>>
>>
>>
>>
>> --
>>
>> //
>>
>> zztat - The Next-Gen Oracle Performance Monitoring and Reaction Framework!
>>
>> Visit us at zztat.net
>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e=> |
>> _at_zztat_oracle | fb.me/zztat
>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e=>
>> | zztat.net/blog/
>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e=>
>>
>>
>>
>> --
>>
>> -- Bill Ferguson
>>
>>
>
> --
> -- Bill Ferguson
>



--
http://www.freelists.org/webpage/oracle-l


Received on Mon Feb 04 2019 - 15:35:54 CET

Original text of this message