Re: ords/tomcat help

The way I understand it, is that the WLS they ship together with Apache, and which is used to start the nodemanager, can now be configured to also run the ords jar file instead of OHS.

The "web tier" used to always refer to just OHS - then (I believe around 11.2) they added an WLS bundled with it when you installed it. I believe that's the WLS you can use.

On Tue, Feb 5, 2019 at 12:50 AM Mark J. Bobak <mark_at_bobak.net> wrote:

> Ok, I'm going to open a can of worms here, I'm afraid.
> Reading from Stefan's second link:
>
> https://www.oracle.com/technetwork/developer-tools/rest-data-services/faq-3561782.html#three
>
>
> I see "So within the WebTier license you have a RUL of WL SE for hosting
> Java servlets that is used by Oracle Rest Data Services."
>
> Ok, what is a "WebTier license"? Does it cost money?
>
> As I said, we are currently running 11.2.0.4, 12.1.0.1, and 12.2.0.1
> Oracle DB, on Apex 5.0.3 and 5.0.4, with ORDS 3.0.11, deploying with
> Glassfish 4.1.1, and an Apache 2.4 frontend to support multiple SSL certs.
>
> Can I replace Apache/Glassfish with Oracle WebLogic Server, if I *only*
> use it to serve up ords.war? Do I need any license other than the DB
> license to do so?
>
> Thanks,
>
> -Mark
>
> On Mon, Feb 4, 2019 at 10:03 AM Stefan Knecht <knecht.stefan_at_gmail.com>
> wrote:
>
>> Well it's not "free" per se.
>>
>> You need to have the server licensed where it runs (e.g. from the
>> database license). And if you do, Oracle gives you a restricted use license
>> for the middleware. It was the case with OHS (via a restricted-use Oracle
>> Application Server license) and now with WLS.
>>
>> It's all documented:
>>
>> For OHS:
>> https://docs.oracle.com/database/121/DBLIC/editions.htm#DBLIC-GUID-54E5D57D-DF9B-43EB-8B17-D712A231C6E5
>>
>> For ORDS with WLS:
>> https://www.oracle.com/technetwork/developer-tools/rest-data-services/faq-3561782.html#three
>>
>>
>>
>> On Mon, Feb 4, 2019 at 9:16 PM Bill Ferguson <wbfergus_at_gmail.com> wrote:
>>
>>> That was my impression as well, for a web server that will work with
>>> Oracle, Apex, ORDS, and is free.
>>>
>>> Last I read, many years ago, the only three web server contenders were
>>> Weblogic (must have license), Oracle Application Server (must have
>>> license), and Tomcat (free).
>>>
>>> Tomcat can have it's own set of unique headaches, but it does work, and
>>> it is free. Depending on your organization, it also wasn't too difficult
>>> for me to figure out how to incorporate our organizations wildacrd
>>> certificate for HTTPS. Now I'm just stuck on LDAPS, and later this year on
>>> SAML 2.0.
>>>
>>> I wish the SAML 2.0 could simply be a new option in the Apex stack, or
>>> maybe in ORDS (or both?), but that's probably a pipe dream. LOL
>>>
>>> Bill Ferguson
>>>
>>> On Mon, Feb 4, 2019 at 6:13 AM Jeff Smith <jeff.d.smith_at_oracle.com>
>>> wrote:
>>>
>>>> Whoa.
>>>>
>>>>
>>>>
>>>> >> You don’t need additinal license if you install weblogic and deploy
>>>> ORDS on top of it.
>>>>
>>>> I’m not in Sales or Legal here at Oracle, but I can say this – there
>>>> are no freebies when it comes to WLS and ORDS.
>>>>
>>>>
>>>>
>>>> *From:* Shastry(DBA) <shastry17_at_gmail.com>
>>>> *Sent:* Saturday, February 2, 2019 11:11 AM
>>>> *To:* tim_at_oracle-base.com
>>>> *Cc:* Backseat DBA <backseatdba_at_gmail.com>; Jeff Smith <
>>>> jeff.d.smith_at_oracle.com>; Mark J. Bobak <mark_at_bobak.net>; anthony
>>>> Sanchez <anthonycsanchez_at_gmail.com>; oracle-l-freelist <
>>>> oracle-l_at_freelists.org>; wbfergus_at_gmail.com
>>>> *Subject:* Re: ords/tomcat help
>>>>
>>>>
>>>>
>>>> Hi Jeff,
>>>>
>>>>
>>>>
>>>> Why don’t you switch to web logic ORDS APEX combination? You don’t need
>>>> additinal license if you install weblogic and deploy ORDS on top of it. I
>>>> did it successfully last week.
>>>>
>>>>
>>>>
>>>> Thanks,
>>>>
>>>> Ananth
>>>>
>>>>
>>>>
>>>> On Fri, Feb 1, 2019 at 4:45 AM, Tim Hall <tim_at_oracle-base.com> wrote:
>>>>
>>>> I would recommend an ORDS validate after every APEX upgrade and DB
>>>> patch.
>>>>
>>>>
>>>>
>>>> $JAVA_HOME/bin/java -jar ords.war validate
>>>>
>>>>
>>>>
>>>> I would recommend an APEX validate after every DB patch/upgrade. Easy
>>>> to add to your scripts and it just makes sure everything is happy.
>>>>
>>>>
>>>>
>>>> CONN / AS SYSDBA
>>>>
>>>> --ALTER SESSION SET CONTAINER=pdb1;
>>>>
>>>> SET SERVEROUTPUT ON
>>>>
>>>> EXEC SYS.validate_apex;
>>>>
>>>>
>>>>
>>>> On Thu, Jan 31, 2019 at 4:19 PM Mark J. Bobak <mark_at_bobak.net> wrote:
>>>>
>>>> Oh, cool! I knew about 'java -jar ords.war standalone', but I never
>>>> knew about 'java -jar ords.war validate'.
>>>>
>>>>
>>>>
>>>> I learn something new every day.....
>>>>
>>>>
>>>>
>>>> -Mark
>>>>
>>>>
>>>>
>>>> On Wed, Jan 30, 2019 at 8:41 AM Jeff Smith <jeff.d.smith_at_oracle.com>
>>>> wrote:
>>>>
>>>> Running java -jar ords.war validate for your connection pool might help
>>>> – it’ll confirm everything is there that needs to be there to service that
>>>> db and/or APEX
>>>>
>>>>
>>>>
>>>> *From:* Bill Ferguson <wbfergus_at_gmail.com>
>>>> *Sent:* Wednesday, January 30, 2019 8:36 AM
>>>> *To:* backseatdba_at_gmail.com
>>>> *Cc:* anthonycsanchez_at_gmail.com; oracle-l-freelist <
>>>> oracle-l_at_freelists.org>
>>>> *Subject:* Re: ords/tomcat help
>>>>
>>>>
>>>>
>>>> Jeff,
>>>>
>>>> I by no means am an expert on this "stuff", as there are so many
>>>> different moving parts. But, I've also had my installation up and running
>>>> for probably around 15 years or so, since like HTMLDB 3? My system sounds
>>>> similar to yours, but I'm running on Windows Server 2012 R2, Tomcat 7, ORDS
>>>> 3. I'll be starting another post with a new issue I've been tasked with
>>>> implementing shortly, it deals with SAML 2.0 in this environment.
>>>>
>>>> Anyway, some of these may be legacy id's from previous installs that
>>>> never got removed, and I may have some security violations. But, perhaps
>>>> this may get you to connect, and then others can chime in with what I may
>>>> have incorrectly set.
>>>>
>>>> In Oracle, I have 5 users that seem to have bearing on Apex and the
>>>> web. They are:
>>>>
>>>> Apex_050000 (this one is version dependent)
>>>>
>>>> Apex_Listener
>>>>
>>>> Apex_public_user
>>>>
>>>> Apex_rest_public_user
>>>>
>>>> ORDS_public_user
>>>>
>>>> In my installation, all of them have the same password as what I used
>>>> in the ORDS setup, and all 5 of the accounts are unlocked and not expired.
>>>> With this, you should be able to at least connect correctly to Apex through
>>>> your webserver. But, as I said, this configuration may not be properly
>>>> secured either. Hopefully after you can establish a connection, then others
>>>> can chime in with the proper combination of which accounts to lock, etc.
>>>>
>>>> Bill Ferguson
>>>>
>>>>
>>>>
>>>> On Fri, Sep 7, 2018 at 12:17 PM Jeff Chirco <backseatdba_at_gmail.com>
>>>> wrote:
>>>>
>>>> Thanks Anthony. I tried that and I ended up with a different error.
>>>> So I decided to just delete all the apex_xx.xml files cause some of them
>>>> were dated really old. I then ran
>>>>
>>>> $JAVA_HOME/bin/java -jar ords.war
>>>>
>>>> It then walked me through setup and and recreated those xml files.
>>>> This time I was getting invalid password for apex|pu. I tried your method
>>>> for encrypting the file for that one but no luck. So I just put the actual
>>>> password in the apex_pu.xml file. I can't get it to re-encrypt the file.
>>>> However after I start ords I am not getting this message on the page.
>>>> Feels like I am getting closer
>>>>
>>>>
>>>>
>>>> [image: image.png]
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Fri, Sep 7, 2018 at 10:19 AM anthony Sanchez <
>>>> anthonycsanchez_at_gmail.com> wrote:
>>>>
>>>> Hi Jeff,
>>>>
>>>>
>>>>
>>>> do you see this user getting locked out? APEX_PUBLIC_USER?
>>>>
>>>>
>>>>
>>>> have you tried re-encrypting your good working password for apex public
>>>> user in apex.xml?
>>>>
>>>>
>>>>
>>>> I think if you put an ! followed by your password and restart tomcat it
>>>> will be reencrpyted.
>>>>
>>>>
>>>>
>>>> for example if your working password is Password you would change this
>>>>
>>>>
>>>>
>>>> <?xml version="1.0" encoding="UTF-8" standalone="no"?>
>>>>
>>>> <!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
>>>>
>>>> <properties>
>>>>
>>>> <comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>
>>>>
>>>> *<entry
>>>> key="db.password">_at_05D745EDD5A466F362FF08A22A072DB77A9E8D55EBED8029D9</entry>*
>>>>
>>>> <entry key="db.username">APEX_PUBLIC_USER</entry>
>>>>
>>>> </properties>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> to this
>>>>
>>>>
>>>>
>>>> <?xml version="1.0" encoding="UTF-8" standalone="no"?>
>>>>
>>>> <!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
>>>>
>>>> <properties>
>>>>
>>>> <comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>
>>>>
>>>> *<entry key="db.password">!Password</entry>*
>>>>
>>>> <entry key="db.username">APEX_PUBLIC_USER</entry>
>>>>
>>>> </properties>
>>>>
>>>>
>>>>
>>>> thanks,
>>>>
>>>> Anthony
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Thu, Sep 6, 2018 at 3:10 PM Jeff Chirco <backseatdba_at_gmail.com>
>>>> wrote:
>>>>
>>>> Yep I manually logged into each apex user account with the same
>>>> password. Still having same issue. I am not getting errors about apex pu,
>>>> al, or rt just this pool named |apex|
>>>>
>>>>
>>>>
>>>> WARNING: The pool named: |apex|| is invalid and will be ignored: The
>>>> username or password for the connection pool named apex, are invalid,
>>>> expired, or the account is locked
>>>>
>>>> Sep 06, 2018 2:07:17 PM
>>>>
>>>>
>>>>
>>>> On Thu, Sep 6, 2018 at 1:58 PM Jeff Smith <jeff.d.smith_at_oracle.com>
>>>> wrote:
>>>>
>>>> You could run the install again – but also make sure the apex public
>>>> user is ALSO unlocked
>>>>
>>>>
>>>>
>>>> *From:* Jeff Chirco <backseatdba_at_gmail.com>
>>>> *Sent:* Thursday, September 6, 2018 4:25 PM
>>>> *To:* Jeff Smith <jeff.d.smith_at_oracle.com>
>>>> *Cc:* Mark Bobak <mark_at_bobak.net>; Stefan Knecht <
>>>> knecht.stefan_at_gmail.com>; oracle-l-freelist <oracle-l_at_freelists.org>
>>>> *Subject:* Re: ords/tomcat help
>>>>
>>>>
>>>>
>>>> Hi Jeff, Which apex user account. I checked and APEX_PUBLIC_USER
>>>> password is matching.
>>>>
>>>>
>>>>
>>>> On Thu, Sep 6, 2018 at 12:57 PM Jeff Smith <jeff.d.smith_at_oracle.com>
>>>> wrote:
>>>>
>>>> Well that error is a pretty big one.
>>>>
>>>>
>>>>
>>>> ORDS can’t establish a connection pool to run your APEX app.
>>>>
>>>>
>>>>
>>>> Change the apex user password in the database to match what you have in
>>>> the ords config files or vice versa.
>>>>
>>>>
>>>>
>>>> *From:* Jeff Chirco <backseatdba_at_gmail.com>
>>>> *Sent:* Thursday, September 6, 2018 3:27 PM
>>>> *To:* Mark Bobak <mark_at_bobak.net>
>>>> *Cc:* Stefan Knecht <knecht.stefan_at_gmail.com>; oracle-l-freelist <
>>>> oracle-l_at_freelists.org>
>>>> *Subject:* Re: ords/tomcat help
>>>>
>>>>
>>>>
>>>> Apex 18.1
>>>>
>>>> ORDS 18.2ZZZ
>>>>
>>>> Apacke Tomcat 9.0.10
>>>>
>>>>
>>>>
>>>> This is the only warning I see in the logs
>>>>
>>>> WARNING: The pool named: |apex|| is invalid and will be ignored: The
>>>> username or password for the connection pool named apex, are invalid,
>>>> expired, or the account is locked
>>>> Sep 04, 2018 9:51:43 PM
>>>>
>>>>
>>>>
>>>> I am running in standalone mode and I don't see any other errors.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Thu, Sep 6, 2018 at 11:48 AM Mark J. Bobak <mark_at_bobak.net> wrote:
>>>>
>>>> Also, try turning ords.war in Standalone mode.
>>>>
>>>>
>>>>
>>>> java -jar ords.war standalone
>>>>
>>>>
>>>>
>>>> It should be clear if you're missing any Oracle DBA users, or if you
>>>> have the wrong password for any of them.
>>>>
>>>>
>>>>
>>>> -Mark
>>>>
>>>> On Thu, Sep 6, 2018, 13:39 Stefan Knecht <knecht.stefan_at_gmail.com>
>>>> wrote:
>>>>
>>>> Restart ORDS after setting them to true, BTW.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Fri, Sep 7, 2018 at 12:37 AM, Stefan Knecht <knecht.stefan_at_gmail.com>
>>>> wrote:
>>>>
>>>> Turn those two on in your defaults.xml in the ORDS installation
>>>> directory:
>>>>
>>>>
>>>>
>>>> <entry key="debug.debugger">false</entry>
>>>>
>>>> <entry key="debug.printDebugToScreen">false</entry>
>>>>
>>>>
>>>>
>>>> Then you should get more information.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Thu, Sep 6, 2018 at 11:14 PM, Jeff Chirco <backseatdba_at_gmail.com>
>>>> wrote:
>>>>
>>>> I am working on setting up Tomcat/ORDS/APEX for the first time. I have
>>>> a Linux box with Tomcat installed. I followed Tim's notes for ORDS install
>>>>
>>>>
>>>> https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-installation-on-tomcat
>>>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__oracle-2Dbase.com_articles_misc_oracle-2Drest-2Ddata-2Dservices-2Dords-2Dinstallation-2Don-2Dtomcat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=KPj0MSF4snLbyTibImr6x9psDGcy6ymSAiQOqUnluOk&e=>
>>>>
>>>> But when I try to go the site I get the Oracle REST Data Services page
>>>> but with a 404 Not Found.
>>>>
>>>>
>>>>
>>>> I copied the APEX images to my /tomcat/webapps/i folder. What is
>>>> usually the cause of this?
>>>>
>>>> Appreciate any help.
>>>>
>>>>
>>>>
>>>> Thanks,
>>>>
>>>> Jeff
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> //
>>>>
>>>> zztat - The Next-Gen Oracle Performance Monitoring and Reaction
>>>> Framework!
>>>>
>>>> Visit us at zztat.net
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e=> |
>>>> _at_zztat_oracle | fb.me/zztat
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e=>
>>>> | zztat.net/blog/
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e=>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> //
>>>>
>>>> zztat - The Next-Gen Oracle Performance Monitoring and Reaction
>>>> Framework!
>>>>
>>>> Visit us at zztat.net
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e=> |
>>>> _at_zztat_oracle | fb.me/zztat
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e=>
>>>> | zztat.net/blog/
>>>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e=>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> -- Bill Ferguson
>>>>
>>>>
>>>
>>> --
>>> -- Bill Ferguson
>>>
>>
>>
>> --
>> //
>> zztat - The Next-Gen Oracle Performance Monitoring and Reaction Framework!
>> Visit us at zztat.net | _at_zztat_oracle | fb.me/zztat | zztat.net/blog/
>>
>

-- 
//
zztat - The Next-Gen Oracle Performance Monitoring and Reaction Framework!
Visit us at zztat.net | _at_zztat_oracle | fb.me/zztat | zztat.net/blog/





--
http://www.freelists.org/webpage/oracle-l




image/png attachment: image001.png