8 Replies Latest reply: Jan 22, 2013 2:23 PM by BikashBagaria RSS

    OIM 11g R1 Clustering

    Sandy
      Hi All,

      I have deployed the OIM application as clustered in Weblogic.
      Weblogic - 10.3.5. OIM - 11.1.1.5 Version.

      I had created one Weblogic Admin Server + one OIM Managed Server in HOST1.
      I had created another Managed Server in HOST2.
      When i try to start the Second OIM Managed Server in Host2, I am getting couple of errors related to oim (11.1.1.3) EAR file and RoleSOD EAR. When i checked in Weblogic Admin Server, it is showing status as FAILED. When i tried to redeploy the Ear files of oim (11.1.1.3) and RoleSOD, I able to succesfully deploy only in First Manager Server in Host1. It is not getting deployed in Host2 Managed Server.

      I had tried clearing the /tmp folders and /ldapdata folder inside IDM_HOME path. No results.
      Weblogic Admin Server and First Maanaged Server is in the same host. But the second managed server is in different machine. Does this has any effect on the deployment. If yes, then why other Ear files are deployed successfully.

      Please throw some pointers to resolve this issue.

      Thanks in Advance,
      Sandy.
        • 1. Re: OIM 11g R1 Clustering
          935577
          What is the error you are getting in the logs for the failed deployment? There is no issue with the servers being in different hosts as long as network and multicast is setup correctly.

          -Bikash
          • 2. Re: OIM 11g R1 Clustering
            BikashBagaria
            Looks like my session was high jacked???

            -Bikash
            • 3. Re: OIM 11g R1 Clustering
              Sandy
              Hi,

              Below are the error logs which i am getting when i start Second OIM Managed Server.


              ==================================================================

              <17-Jan-2013 08:25:05 o'clock GMT> <Error> <oracle.wsm.resources.policyaccess> <WSM-06303> <The method "registerListener" was not called with required permission "oracle.wsm.policyaccess" >
              <17-Jan-2013 08:25:05 o'clock GMT> <Error> <HTTP> <BEA-101216> <Servlet: "CallbackResponseServiceServlethttp" failed to preload on startup in Web application: "callbackResponseService".
              java.lang.SecurityException: WSM-06303 : The method "registerListener" was not called with required permission "oracle.wsm.policyaccess"
              at oracle.wsm.policyaccess.PolicyAccessPoint.checkPermission(PolicyAccessPoint.java:182)
              at oracle.wsm.policyaccess.PolicyAccessPoint.registerListener(PolicyAccessPoint.java:357)
              at oracle.wsm.agent.handler.WSMEngineInvoker$2.run(WSMEngineInvoker.java:815)
              at oracle.wsm.agent.handler.WSMEngineInvoker$2.run(WSMEngineInvoker.java:813)
              at oracle.wsm.agent.handler.WSMEngineInvoker.invokePAP(WSMEngineInvoker.java:812)
              Truncated. see log file for complete stacktrace
              Caused By: java.security.AccessControlException: access denied (java.lang.RuntimePermission oracle.wsm.policyaccess)
              at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
              at java.security.AccessController.checkPermission(AccessController.java:546)
              at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:436)
              at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:496)
              at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:519)
              Truncated. see log file for complete stacktrace
              >
              <17-Jan-2013 08:25:05 o'clock GMT> <Error> <Deployer> <BEA-149231> <Unable to set the activation state to true for the application 'oim [Version=11.1.1.3.0]'.
              weblogic.application.ModuleException: [HTTP:101216]Servlet: "CallbackResponseServiceServlethttp" failed to preload on startup in Web application: "callbackResponseService".
              java.lang.SecurityException: WSM-06303 : The method "registerListener" was not called with required permission "oracle.wsm.policyaccess"
              at oracle.wsm.policyaccess.PolicyAccessPoint.checkPermission(PolicyAccessPoint.java:182)
              at oracle.wsm.policyaccess.PolicyAccessPoint.registerListener(PolicyAccessPoint.java:357)
              at oracle.wsm.agent.handler.WSMEngineInvoker$2.run(WSMEngineInvoker.java:815)
              at oracle.wsm.agent.handler.WSMEngineInvoker$2.run(WSMEngineInvoker.java:813)
              at oracle.wsm.agent.handler.WSMEngineInvoker.invokePAP(WSMEngineInvoker.java:812)
              at oracle.wsm.agent.handler.WSMEngineInvoker.initAgent(WSMEngineInvoker.java:176)
              at oracle.wsm.agent.handler.wls.WSMAgentHook.init(WSMAgentHook.java:261)
              at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory.newHandler(TubeFactory.java:108)
              at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory.createServer(TubeFactory.java:81)
              at weblogic.wsee.jaxws.WLSTubelineAssemblerFactory$TubelineAssemblerImpl.createServer(WLSTubelineAssemblerFactory.java:216)
              at com.sun.xml.ws.server.WSEndpointImpl.<init>(WSEndpointImpl.java:213)
              at weblogic.wsee.jaxws.WLSContainer$WLSEndpointFactory$WLSEndpointImpl.<init>(WLSContainer.java:615)
              at weblogic.wsee.jaxws.WLSContainer$WLSEndpointFactory.createEndpoint(WLSContainer.java:576)
              at com.sun.xml.ws.server.EndpointFactory.createEndpoint(EndpointFactory.java:231)
              at com.sun.xml.ws.api.server.WSEndpoint.create(WSEndpoint.java:496)
              at com.sun.xml.ws.api.server.WSEndpoint.create(WSEndpoint.java:539)
              at weblogic.wsee.jaxws.JAXWSDeployedServlet.getEndpoint(JAXWSDeployedServlet.java:183)
              at weblogic.wsee.jaxws.JAXWSServlet.registerEndpoint(JAXWSServlet.java:135)
              at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
              at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
              Caused by: java.security.AccessControlException: access denied (java.lang.RuntimePermission oracle.wsm.policyaccess)
              at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
              at java.security.AccessController.checkPermission(AccessController.java:546)
              at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:436)
              at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:496)
              at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:519)
              at oracle.wsm.policyaccess.PolicyAccessPoint.checkPermission(PolicyAccessPoint.java:180)
              at oracle.wsm.policyaccess.PolicyAccessPoint.registerListener(PolicyAccessPoint.java:361)
              ... 61 more

              at weblogic.servlet.internal.WebAppModule.startContexts(WebAppModule.java:1510)
              at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:482)
              at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:425)
              at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
              at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
              Truncated. see log file for complete stacktrace
              Caused By: java.security.AccessControlException: access denied (java.lang.RuntimePermission oracle.wsm.policyaccess)
              at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
              at java.security.AccessController.checkPermission(AccessController.java:546)
              at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:436)
              at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:496)
              at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:519)
              Truncated. see log file for complete stacktrace
              >
              <17-Jan-2013 08:25:07 o'clock GMT> <Error> <oracle.wsm.resources.policyaccess> <WSM-06303> <The method "registerListener" was not called with required permission "oracle.wsm.policyaccess" >
              <17-Jan-2013 08:25:07 o'clock GMT> <Error> <oracle.webservices.service> <OWS-04115> <An error occurred for port: {http://xmlns.oracle.com/idm/identity/webservice/SPMLService}SPMLServiceProviderSoap:Provider processor failed to initialize: oracle.webservices.provider.ProviderException: java.lang.SecurityException: WSM-06303 : The method "registerListener" was not called with required permission "oracle.wsm.policyaccess" .>
              <17-Jan-2013 08:25:07 o'clock GMT> <Error> <HTTP> <BEA-101216> <Servlet: "com.oracle.xmlns.idm.identity.webservice.spmlservice.SPMLServiceProviderSoapImpl" failed to preload on startup in Web application: "spml-xsd".
              oracle.webservices.provider.ProviderException: java.lang.SecurityException: WSM-06303 : The method "registerListener" was not called with required permission "oracle.wsm.policyaccess"
              at oracle.j2ee.ws.server.provider.ProviderProcessor.configureProviderManagement(ProviderProcessor.java:367)
              at oracle.j2ee.ws.server.provider.ProviderProcessor.init(ProviderProcessor.java:198)
              at oracle.j2ee.ws.server.provider.ProviderServlet.initializeProcessor(ProviderServlet.java:543)
              at oracle.j2ee.ws.server.provider.ProviderServlet.init(ProviderServlet.java:268)
              at oracle.j2ee.ws.server.provider.ProviderServlet.init(ProviderServlet.java:201)
              Truncated. see log file for complete stacktrace
              Caused By: java.lang.SecurityException: WSM-06303 : The method "registerListener" was not called with required permission "oracle.wsm.policyaccess"
              at oracle.wsm.policyaccess.PolicyAccessPoint.checkPermission(PolicyAccessPoint.java:182)
              at oracle.wsm.policyaccess.PolicyAccessPoint.registerListener(PolicyAccessPoint.java:357)
              at oracle.wsm.policyaccess.impl.PolicyAccessorImpl$1.run(PolicyAccessorImpl.java:238)
              at oracle.wsm.policyaccess.impl.PolicyAccessorImpl$1.run(PolicyAccessorImpl.java:234)
              at oracle.wsm.policyaccess.impl.PolicyAccessorImpl.getPolicySetMap(PolicyAccessorImpl.java:233)
              Truncated. see log file for complete stacktrace
              Caused By: java.security.AccessControlException: access denied (java.lang.RuntimePermission oracle.wsm.policyaccess)
              at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
              at java.security.AccessController.checkPermission(AccessController.java:546)
              at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:436)
              at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:496)
              at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:519)
              Truncated. see log file for complete stacktrace
              >

              Thanks,
              Sandy.
              • 4. Re: OIM 11g R1 Clustering
                BikashBagaria
                Did you do any upgrade recently? Check article: 1485851.1 for the configurations required.

                -Bikash
                • 5. Re: OIM 11g R1 Clustering
                  Sandy
                  Hi Bikash,

                  Recently we updated some patches given by oracle in both the Nodes of OIM. But only in Node 2 Managed Server, this problem is coming. Does this patch will impact only in the second node or it can happen in any of the nodes??

                  In the meanwhile, i will check the metalink Note given by you.

                  Thanks,
                  Sandy.
                  • 6. Re: OIM 11g R1 Clustering
                    Sandy
                    Hi,

                    How to check, what version of OPSS is installed? Any commands to verify or Install logs?

                    Thanks,
                    Sandy.
                    • 7. Re: OIM 11g R1 Clustering
                      Sandy
                      Hi,

                      Even after adding the XML tags shown below for Permissions in system-jazn-data.xml, while rebooting the OIM Managed Server, the file is getting replaced with the old XML tags. Newly added tags are not present in the system-jazn-data.xml. I want to know from where this is getting replaced and is there any reference build in Weblogic Admin Server for this files.

                      ============================================================

                      <permission>
                      <class>oracle.security.jps.service.credstore.CredentialAccessPermission</class>
                      <name>context=SYSTEM,mapName=oracle.wsm.security,keyName=*</name>
                      <actions>*</actions>
                      </permission>

                      <permission>
                      <class>java.lang.RuntimePermission</class>
                      <name>oracle.wsm.policyaccess</name>
                      </permission>

                      =============================================================

                      Thanks in Advance,
                      VA
                      • 8. Re: OIM 11g R1 Clustering
                        BikashBagaria
                        Not sure why you are seeing this, but can you delete the domain directory from node 2 (take a backup before doing that), then copy the domain directory from node 1 to node 2 and then try stating the managed server 2?

                        -Bikash