Re: ords/tomcat help

From: Tim Hall <tim@xxxxxxxxxxxxxxx>
To: "Mark J. Bobak" <mark@xxxxxxxxx>
Date: Fri, 1 Feb 2019 10:43:59 +0000

I would recommend an ORDS validate after every APEX upgrade and DB patch.

$JAVA_HOME/bin/java -jar ords.war validate

I would recommend an APEX validate after every DB patch/upgrade. Easy to
add to your scripts and it just makes sure everything is happy.

CONN / AS SYSDBA
--ALTER SESSION SET CONTAINER=pdb1;
SET SERVEROUTPUT ON
EXEC SYS.validate_apex;

On Thu, Jan 31, 2019 at 4:19 PM Mark J. Bobak <mark@xxxxxxxxx> wrote:

Oh, cool!  I knew about 'java -jar ords.war standalone', but I never knew
about 'java -jar ords.war validate'.

I learn something new every day.....

-Mark

On Wed, Jan 30, 2019 at 8:41 AM Jeff Smith <jeff.d.smith@xxxxxxxxxx>
wrote:

Running java -jar ords.war validate for your connection pool might help –
it’ll confirm everything is there that needs to be there to service that db
and/or APEX

*From:* Bill Ferguson <wbfergus@xxxxxxxxx>
*Sent:* Wednesday, January 30, 2019 8:36 AM
*To:* backseatdba@xxxxxxxxx
*Cc:* anthonycsanchez@xxxxxxxxx; oracle-l-freelist <
oracle-l@xxxxxxxxxxxxx>
*Subject:* Re: ords/tomcat help

Jeff,

I by no means am an expert on this "stuff", as there are so many
different moving parts. But, I've also had my installation up and running
for probably around 15 years or so, since like HTMLDB 3? My system sounds
similar to yours, but I'm running on Windows Server 2012 R2, Tomcat 7, ORDS
3. I'll be starting another post with a new issue I've been tasked with
implementing shortly, it deals with SAML 2.0 in this environment.

Anyway, some of these may be legacy id's from previous installs that
never got removed, and I may have some security violations. But, perhaps
this may get you to connect, and then others can chime in with what I may
have incorrectly set.

In Oracle, I have 5 users that seem to have bearing on Apex and the web.
They are:

Apex_050000 (this one is version dependent)

Apex_Listener

Apex_public_user

Apex_rest_public_user

ORDS_public_user

In my installation, all of them have the same password as what I used in
the ORDS setup, and all 5 of the accounts are unlocked and not expired.
With this, you should be able to at least connect correctly to Apex through
your webserver. But, as I said, this configuration may not be properly
secured either. Hopefully after you can establish a connection, then others
can chime in with the proper combination of which accounts to lock, etc.

Bill Ferguson

On Fri, Sep 7, 2018 at 12:17 PM Jeff Chirco <backseatdba@xxxxxxxxx>
wrote:

Thanks Anthony.  I tried that and I ended up with a different error.  So
I decided to just delete all the apex_xx.xml files cause some of them were
dated really old.   I then ran

$JAVA_HOME/bin/java -jar ords.war

It then walked me through setup and and recreated those xml files.  This
time I was getting invalid password for apex|pu.  I tried your method for
encrypting the file for that one but no luck. So I just put the actual
password in the apex_pu.xml file.  I can't get it to re-encrypt the file.
However after I start ords I am not getting this message on the page.
Feels like I am getting closer

[image: image.png]

On Fri, Sep 7, 2018 at 10:19 AM anthony Sanchez <
anthonycsanchez@xxxxxxxxx> wrote:

Hi Jeff,

do you see this user getting locked out?  APEX_PUBLIC_USER?

have you tried re-encrypting your good working password for apex public
user in apex.xml?

I think if you put an ! followed by your password and restart tomcat it
will be reencrpyted.

for example if your working password is Password you would change this

<?xml version="1.0" encoding="UTF-8" standalone="no"?>

<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd";>

<properties>

<comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>

*<entry
key="db.password">@05D745EDD5A466F362FF08A22A072DB77A9E8D55EBED8029D9</entry>*

<entry key="db.username">APEX_PUBLIC_USER</entry>

</properties>

to this

<?xml version="1.0" encoding="UTF-8" standalone="no"?>

<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd";>

<properties>

<comment>Saved on Sun Jul 26 22:34:51 MDT 2015</comment>

*<entry key="db.password">!Password</entry>*

<entry key="db.username">APEX_PUBLIC_USER</entry>

</properties>

thanks,

Anthony

On Thu, Sep 6, 2018 at 3:10 PM Jeff Chirco <backseatdba@xxxxxxxxx> wrote:

Yep I manually logged into each apex user account with the same password.
Still having same issue.  I am not getting errors about apex pu, al, or rt
just this pool named |apex|

WARNING: The pool named: |apex|| is invalid and will be ignored: The
username or password for the connection pool named apex, are invalid,
expired, or the account is locked

Sep 06, 2018 2:07:17 PM

On Thu, Sep 6, 2018 at 1:58 PM Jeff Smith <jeff.d.smith@xxxxxxxxxx>
wrote:

You could run the install again – but also make sure the apex public user
is ALSO unlocked

*From:* Jeff Chirco <backseatdba@xxxxxxxxx>
*Sent:* Thursday, September 6, 2018 4:25 PM
*To:* Jeff Smith <jeff.d.smith@xxxxxxxxxx>
*Cc:* Mark Bobak <mark@xxxxxxxxx>; Stefan Knecht <knecht.stefan@xxxxxxxxx>;
oracle-l-freelist <oracle-l@xxxxxxxxxxxxx>
*Subject:* Re: ords/tomcat help

Hi Jeff,  Which apex user account.  I checked and APEX_PUBLIC_USER
password is matching.

On Thu, Sep 6, 2018 at 12:57 PM Jeff Smith <jeff.d.smith@xxxxxxxxxx>
wrote:

Well that error is a pretty big one.

ORDS can’t establish a connection pool to run your APEX app.

Change the apex user password in the database to match what you have in
the ords config files or vice versa.

*From:* Jeff Chirco <backseatdba@xxxxxxxxx>
*Sent:* Thursday, September 6, 2018 3:27 PM
*To:* Mark Bobak <mark@xxxxxxxxx>
*Cc:* Stefan Knecht <knecht.stefan@xxxxxxxxx>; oracle-l-freelist <
oracle-l@xxxxxxxxxxxxx>
*Subject:* Re: ords/tomcat help

Apex 18.1

ORDS 18.2ZZZ

Apacke Tomcat 9.0.10

This is the only warning I see in the logs

WARNING: The pool named: |apex|| is invalid and will be ignored: The
username or password for the connection pool named apex, are invalid,
expired, or the account is locked
Sep 04, 2018 9:51:43 PM

I am running in standalone mode and I don't see any other errors.

On Thu, Sep 6, 2018 at 11:48 AM Mark J. Bobak <mark@xxxxxxxxx> wrote:

Also, try turning ords.war in Standalone mode.

java -jar ords.war standalone

It should be clear if you're missing any Oracle DBA users, or if you have
the wrong password for any of them.

-Mark

On Thu, Sep 6, 2018, 13:39 Stefan Knecht <knecht.stefan@xxxxxxxxx> wrote:

Restart ORDS after setting them to true, BTW.

On Fri, Sep 7, 2018 at 12:37 AM, Stefan Knecht <knecht.stefan@xxxxxxxxx>
wrote:

Turn those two on in your defaults.xml in the ORDS installation directory:

<entry key="debug.debugger">false</entry>

<entry key="debug.printDebugToScreen">false</entry>

Then you should get more information.

On Thu, Sep 6, 2018 at 11:14 PM, Jeff Chirco <backseatdba@xxxxxxxxx>
wrote:

I am working on setting up Tomcat/ORDS/APEX for the first time.  I have a
Linux box with Tomcat installed. I followed Tim's notes for ORDS install

https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-installation-on-tomcat
<https://urldefense.proofpoint.com/v2/url?u=https-3A__oracle-2Dbase.com_articles_misc_oracle-2Drest-2Ddata-2Dservices-2Dords-2Dinstallation-2Don-2Dtomcat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=KPj0MSF4snLbyTibImr6x9psDGcy6ymSAiQOqUnluOk&e=>

But when I try to go the site I get the Oracle REST Data Services page
but with a 404 Not Found.

I copied the APEX images to my /tomcat/webapps/i folder.  What is usually
the cause of this?

Appreciate any help.

Thanks,

Jeff

--

//

zztat - The Next-Gen Oracle Performance Monitoring and Reaction Framework!

Visit us at zztat.net
<https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e=>
|
@zztat_oracle | fb.me/zztat
<https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e=>
| zztat.net/blog/
<https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e=>

--

//

zztat - The Next-Gen Oracle Performance Monitoring and Reaction Framework!

Visit us at zztat.net
<https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=Y8EqmM2rK4LGTo8XzY5AThx6L_335NVRDF0yho1m2yM&e=>
|
@zztat_oracle | fb.me/zztat
<https://urldefense.proofpoint.com/v2/url?u=http-3A__fb.me_zztat&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=V4dopSm9ciSDHqaqs3QreLUT78xZferdl20LxXi7QF0&e=>
| zztat.net/blog/
<https://urldefense.proofpoint.com/v2/url?u=http-3A__zztat.net_blog_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=8hz_O6HCQtyTzEIICpqaqhCr5-PypXfBkcFQg15atGM&s=O5sHs4DCl5HPNo0-jTIgqhONnSmaRVri_v7osZLpBbg&e=>

--

-- Bill Ferguson

Follow-Ups:
- Re: ords/tomcat help
  - From: Shastry(DBA)

Re: ords/tomcat help

Other related posts: