6 Replies Latest reply: Nov 18, 2013 5:24 AM by Karan Kukreja RSS

    Users getting internal server errror post SSO authentication

    Karan Kukreja

      Hi All,

       

      Greetings.

       

      Last year we had an MBL upgrade moving to Version 11.5.10.2.0 and database version 11gr2.

       

      DB version : 11gr2

      App version : 11.5.10.2.0

      SSO : Siteminder

       

      The users who are either end dated or have a change in the GUID  due to BG movement etc get an internal server error once they enter
      the SSO creds and get SSO authenticated.

       

      On other instances users get the message : "Your EBS account has not been linked with SSO " instead of the "500 internal server error".

       

      We have had multiple SR's with Oracle but of no help.

       

      Please suggest.

       

      Regards

      KK

        • 1. Re: Users getting internal server errror post SSO authentication
          Hussein Sawwan-Oracle

          The users who are either end dated or have a change in the GUID  due to BG movement etc get an internal server error once they enter

          the SSO creds and get SSO authenticated.

           

          On other instances users get the message : "Your EBS account has not been linked with SSO " instead of the "500 internal server error".

           

          Please check the application log files for details about the error.

           

          We have had multiple SR's with Oracle but of no help.

           

          Have you reviewed the following docs?

           

          "Applications SSO Auto Link User" (APPS_SSO_AUTO_LINK_USER) Profile option doesn't work and still ask to manually link the user (Doc ID 399117.1)

          How to unlink a FND_USER user account in Oracle EBusiness Suite that is linked to an SSO Account in Oracle Internet Directory (Doc ID 429375.1)

          Integrating Oracle E-Business Suite Release 11i with Oracle Internet Directory and Oracle Single Sign-On (Doc ID 261914.1)

          Internet Explorer gives blank page after AppsLocalLogin and OAInfo.jsp (Doc ID 315039.1)

           

          Thanks,

          Hussein

          • 2. Re: Users getting internal server errror post SSO authentication
            Rajiv.

            Hi KK,

             

            Suggest to do the following as one of operation.

             

            Note : Please take a valid backup of table(s)/database before making any changes.

             

            1. Make a list of users having this issue,( there may be valid end dates in the system, exclude them ), in FND_USER table these users would have an end date on the day of upgrade(as informed in your initial post).

            2. Remove the end date for all these users.

            3. Remove the GUID too.

            4. Ask users to login to the system with their SSO user name and password,

             

            This would re populate the GUID and link the SSO user with the FND_USER table (called Link on the fly).

             

            Please try this solution in your Non-prod environments and if found satisfied, you can move them to other environments as appropriate.

             

            Alternatively, try this out for few users who are getting this error within your reach (team) we can ask them to test it and if successful, consider using it for all the users.

             

            Good Luck!.

             

            Thanks,

            Rajiv.

            • 3. Re: Users getting internal server errror post SSO authentication
              Karan Kukreja

              Hi Hussein Sir,

               

              Thank you for sharing the doc id's. We have gone through the same. We are aware of this solution and thats what we have been doing always .[ refering to note 399117.1] but our primary concern is that under these situations , instead of prompting for "System asks to link the existing OID user with an existing APPS user, and the "Request Information" page appears waiting for "username" & "password" for an existing E-Business user to be linked" we get a 500 internal server error post entering the creds in the siteminder SSO.


              We need to fix that it should ask for "System asks to link the existing OID user with an existing APPS user, and the "Request Information" page appears waiting for "username" & "password" for an existing E-Business user to be linked" and not 500 internal server error.

               

              There is no error reported in the logfiles.

              Error.log only has generic errors like :File does not exist

               

              and access log has information as below :

               

              {code}

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              RANDOM_IP - - [29/Aug/2013:13:40:48 +0530] "GET /OA_HTML/xxcust_menu.css HTTP/1.1" 404 229 0

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_MEDIA/relatedlink_document.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_MEDIA/relatedlink_document.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:48 +0530] "GET /OA_MEDIA/relatedlink_document.gif HTTP/1.1" 304 - 0

              PROD_SERVER_APPL_IP - - [29/Aug/2013:13:40:48 +0530] "GET /OA_HTML/xxcust_header.html HTTP/1.1" 200 394 0

              IP1 - - [29/Aug/2013:13:40:49 +0530] "GET /oa_servlets/AppsSSOServlet/?urlc=v1.2~ED60D447ED64539F5AD1580307CAA1237FBFAAF259B450798E708C5CC37041FD957A5E8EE1E03DE7DF79C01689F54FA5D24401FD17CB1BFEC78B21B2203C9ECC299DF903DD7048988600DC75194FD597FDA4B791E68D1C9BFDFCD430DF3CEA7509314F2F982A55DAE0CC24F50FB24EFC094FF8983A50D17012E79E22BECA20F6BD4BE8DFFEA661C8C7F69F8EDD9594F59009F6715388A0B003AB5BA31C7FCFA317C725F3F4FC75F77B62B8C0A290E1BBDC6FE9705576C400C4531B76035615985F8B9E58F10A3BE2D4B2BADD0EB075D8C55617C1EB5B4F081F8764A0E6D6CF9412A43CCA54292ADC52604B70C213025580AA44059126F04D737732D0CD6674F4A0E58072D14B7EE085295577664E9CBF85D928A57F91E25A30C2D88583F0186E3BEC4F5F676CA600 HTTP/1.1" 500 539 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:50 +0530] "GET /oprocmgr-service?cmd=Getprocs HTTP/1.1" 404 222 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:50 +0530] "GET /dms0/Spy?recurse=all&format=xml&operation=get&value=false&units=true&description=true&name=/&noop=/ HTTP/1.1" 200 44121 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:50 +0530] "GET /dms1/Spy?recurse=all&format=xml&operation=get&value=false&units=true&description=true&name=/&noop=/ HTTP/1.1" 404 214 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_HTML/cabo/images/t.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_MEDIA/relatedlink_document.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_MEDIA/relatedlink_document.gif HTTP/1.1" 304 - 0

              IP2 - - [29/Aug/2013:13:40:50 +0530] "GET /OA_MEDIA/relatedlink_document.gif HTTP/1.1" 304 - 0

              PROD_SERVER_APPL_IP - - [29/Aug/2013:13:40:51 +0530] "GET /OA_HTML/xxcust_header.html HTTP/1.1" 200 394 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:54 +0530] "GET /oprocmgr-service?cmd=Getprocs HTTP/1.1" 404 222 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:54 +0530] "GET /dms0/Spy?recurse=all&format=xml&operation=get&value=false&units=true&description=true&name=/&noop=/ HTTP/1.1" 200 44121 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:54 +0530] "GET /dms1/Spy?recurse=all&format=xml&operation=get&value=false&units=true&description=true&name=/&noop=/ HTTP/1.1" 404 214 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:54 +0530] "GET /oprocmgr-service?cmd=Getprocs HTTP/1.1" 404 222 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:54 +0530] "GET /dms0/Spy?recurse=all&format=xml&operation=get&value=false&units=true&description=true&name=/&noop=/ HTTP/1.1" 200 44121 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:54 +0530] "GET /dms1/Spy?recurse=all&format=xml&operation=get&value=false&units=true&description=true&name=/&noop=/ HTTP/1.1" 404 214 0

              PROD_SERVER_APPL_IP - - [29/Aug/2013:13:40:54 +0530] "GET /OA_HTML/xxcust_header.html HTTP/1.1" 200 394 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:54 +0530] "GET /oprocmgr-service?cmd=Getprocs HTTP/1.1" 404 222 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:54 +0530] "GET /dms0/Spy?recurse=all&format=xml&operation=get&value=false&units=true&description=true&name=/&noop=/ HTTP/1.1" 200 44121 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:54 +0530] "GET /dms1/Spy?recurse=all&format=xml&operation=get&value=false&units=true&description=true&name=/&noop=/ HTTP/1.1" 404 214 0

              PROD_HOSTNAME - - [29/Aug/2013:13:40:56 +0530] "GET /dms0/Spy?format=xml&operation=get&value=true&units=false&description=false&recurse=none&name=%2FProcessInfo%2Fpid.value&name=%2FProcessInfo%2FupTime.value&name=%2FApache%2FnumMods.value&name=%2FApache%2FchildStart.count&name=%2FApache%2Fhandle.completed&name=%2FApache%2Fconnection.time&name=%2FApache%2Frequest.active&name=%2FApache%2Fconnection.completed&name=%2FProcessInfo%2FheapSize.value&name=%2FApache%2FinternalRedirect.count&name=%2FProcessInfo%2FcpuTime.value&name=%2FApache%2Frequest.time&name=%2FProcessInfo%2Fhost.value&name=%2FApache%2Fconnection.maxTime&name=%2FApache%2Fconnection.active&name=%2FApache%2Fconnection.avg&name=%2FProcessInfo%2FtotMem.value&name=%2FApache%2Fconnection.minTime&name=%2FApache%2Frequest.avg&name=%2FApache%2Frequest.minTime&name=%2FApache%2Frequest.maxTime&name=%2FApache%2Fhandle.active&name=%2FApache%2Fhandle.minTime&name=%2FApache%2Frequest.completed&name=%2FApache%2FchildFinish.count&name=%2FApache%2Fhandle.avg&name=%2FApache%2Fhandle.time&name=%2FApache%2Fhandle.maxTime&noop=/ HTTP/1.1" 200 2855 0

              {code}

               

               

              I have replaced the IP addresses with keywords . This was extracted when i logged in and got the internal server error.

               

              Regards

              KK

              • 4. Re: Users getting internal server errror post SSO authentication
                Karan Kukreja

                Hi Rajiv,

                 

                Thank you for your response but my problem is a little different. Also we do not have SSO in the dev setup.

                 

                Regards

                KK

                • 6. Re: Users getting internal server errror post SSO authentication
                  Karan Kukreja

                  Closing as i changed the organisation and cant figure out the issue.