Saturday, October 8, 2022

adop fs_clone failure

adop fs_clone failure

Validating credentials.


Initializing.

    Run Edition context  : /ascprd/app/applmgr/IRASCPRD_R122/fs1/inst/apps/IRASCPRD_Admin_host/appl/admin/IRASCPRD_Admin_host.xml

    Patch edition context: /ascprd/app/applmgr/IRASCPRD_R122/fs2/inst/apps/IRASCPRD_Admin_host/appl/admin/IRASCPRD_Admin_host.xml

    Patch file system free space: 696.66 GB


Validating system setup.

    [UNEXPECTED]Invalid worker Count: 0

    [UNEXPECTED]Error validating worker count



[STATEMENT] Please run adopscanlog utility, using the command


"adopscanlog -latest=yes"


to get the list of the log files along with snippet of the error message corresponding to each log file.



adop exiting with status = 2 (Fail)



Fix : Run with one worker

$ adop phase=fs_clone worker=1




Solution worked for others


Solution:
The default worker count information(recomm & max)  is stored in a file adpawc.xml that can be found under $APPL_TOP/admin/$TWO_TASK/log

Somehow this file has been modified with recommended value as 0 and max value as 1 during node addition.

FileContent:
<?xml version="1.0"?>
<WORKER_COUNT>
        <RECOMMENDED>0</RECOMMENDED>
        <MAX>1</MAX>
</WORKER_COUNT>

Update recommended &  max value based on cpu count.

Here I updated recommended value as 8 and max value as 64 and saved the file.

Once the changes are made, fs_clone went smoothly.

Friday, September 23, 2022

Post Clone Steps on EBS Environment

 Post Clone Steps on EBS Environment

---------------------------------------------


1) Drop the Private Database link using apps user( ie these db link names are depend on your environment, just for example)


drop database link XXTEST.NIZAMAPPSDBA.COM;

drop database link XXTEST1.NIZAMAPPSDBA.COM;


2) Drop the Private Database link using sys user( ie these db link names are depend on your environment, just for example)


exec dropschema_dblinks('NIZAMAPPSDBA);

exec dropschema_dblinks('APPS');


3) Update the Worflow tables and FND table on Clone Environment(depend on your environment, just for example below)


Update apps.wf_systems (This should show the target Instance and not the source Instance)


select name,display_name from apps.wf_systems;

update apps.wf_systems set name=’<SID>’,display_name=’ <SID>.<hostname.domainname>’;

COMMIT;


eg: update apps.wf_systems set name='TEST.NIZAMAPPSDBA.COM',display_name='TEST.AU123.NIZAMAPPSDBA.COM’;


update apps.wf_systems set name='UATTEST.NIZAMAPPSDBA.COM',display_name='UATEST.DX123.NIZAMAPPSDBA.COM’;



UPDATE wf_notifications SET status ='CLOSED',mail_status ='SENT', end_date ='26-JAN-16' WHERE mail_status in ('MAIL','INVALID','OPEN');


update wf_agents set address = replace (address,'PROD','DEV') ;


eg: update wf_agents set address = replace (address,'HRD','TEST') ;

update wf_agents set address = replace (address,'HRD','UATTEST') ;


select name ,display_name from wf_systems;


update wf_systems set DISPLAY_NAME = replace (DISPLAY_NAME,'PROD.DBALOUNGE.COM','DEV.DBALOUNGE.COM');


eg:update wf_systems set DISPLAY_NAME = replace (DISPLAY_NAME,'PROD.NIZAMAPPSDBA.COM','TEST.NIZAMAPPSDBA.COM'); 

   update wf_systems set DISPLAY_NAME = replace (DISPLAY_NAME,'PROD.NIZAMAPPSDBA.COM','UATTEST.NIZAMAPPSDBA.COM'); 


Commit;


Update the target node in CM fnd_concurrent_queues table using below post_clone.sql script. values will be different and it is based on our environment



WHENEVER SQLERROR EXIT FAILURE

WHENEVER OSERROR EXIT FAILURE


SET echo OFF

SET linesize 150

set verify off

SET show OFF


define Backup_date = "&Backup_Date"


UPDATE fnd_profile_option_values

SET profile_option_value = 'Production Copy '||'&BACKUP_DATE'

WHERE profile_option_id=125;


UPDATE fnd_concurrent_queues

SET node_name='TEST1243'

WHERE node_name in('PROD252','PROD253','PROD214','PROD215','PROD258','PROD259','PROD250','PROD251');


UPDATE fnd_concurrent_queues

SET node_name2='TEST1243'

WHERE node_name2 in('PROD252','PROD253','PROD214','PROD215','PROD258','PROD259','PROD250','PROD251');


UPDATE fnd_concurrent_queues

SET node_name2='TEST1243'

WHERE node_name2 in('PROD252','PROD253','PROD214','PROD215','PROD258','PROD259','PROD250','PROD251');


UPDATE fnd_concurrent_queues

SET target_node='TEST1243'

WHERE target_node in('PROD252','PROD253','PROD214','PROD215','PROD258','PROD259','PROD250','PROD251');


UPDATE fnd_concurrent_queues

SET target_node='TEST1243'

WHERE target_node in('PROD252','PROD253','PROD214','PROD215','PROD258','PROD259','PROD250','PROD251');


commit;


4) Cleaning the Clone Setup and Change the password in Clone Environment


FNDCPASS apps/****** 0 Y system/**** SYSTEM APPLSYS apps


FNDCPASS apps/***** 0 Y system/****** USER sysadmin Welcome123456789



perl $FND_TOP/patch/115/bin/txkManageDBConnectionPool.pl


exec FND_CONC_CLONE.SETUP_CLEAN;



Run cmclean.sql


1. Change the value for context variables s_url_protocol, s_local_url_protocol,s_webentryurlprotocol in context file from https to http. 

3. Change the value of s_help_web_agent, s_login_page, s_external_url context variables to point to http url and the port in the url refers to s_webport.

4. Change the value of s_enable_sslterminator to -  <sslterminator oa_var="s_enable_sslterminator">#</sslterminator>  


AUTOCONFIG

-----------

Run adautocfg.sql in DB and Apps Tier



$FND_TOP/bin/txkrun.pl -script=SetSSOReg -removereferences=yes -appspass=apps


Run adautocfg.pl in DB and Apps Tier


Start the application services.


5) Profile change if SSO to disabled on Clone Environment

------------------------------------------------------


Application Authenticate Agent to NULL

Applications SSO Type to SSWA

Applications SSO Login Types to Local

Applications Single Sign On Hint Cookie Name to ORASSO_AUTH_HINT

Application SSO LDAP Synchronization to NULL

Applications SSO Auto Link User to NULL

Applications SSO User Creation and Updation Allowed to NULL


 

6) Disable_concurrent_request on Clone Environment

--------------------------------------------------


update fnd_concurrent_requests

set phase_code = 'C', status_code = 'X'

where status_code in ('Q','I','P','R')

and requested_start_date > SYSDATE

and hold_flag = 'N';



update fnd_concurrent_requests

set phase_code = 'C', status_code = 'X'

where requested_start_date > SYSDATE

and hold_flag = 'N';


update fnd_concurrent_requests

set phase_code = 'C', status_code = 'X';


define Backup_date = "&Backup_Date"


UPDATE fnd_profile_option_values

SET profile_option_value = 'Production Copy '||'&BACKUP_DATE'

WHERE profile_option_id=125;


7) Data Masking on Clone Environment, ie it depend on the evironment and organization requirement

-------------------------------------------------------------------------------------------------


login to database using HR schema, run below scripts


create table Per_all_people_f_nomask as select *from Per_all_people_f;

update Per_all_people_f

set full_name=dbms_random.string('U', 20),

first_name=dbms_random.string('U', 20),

last_name=dbms_random.string('U', 20),

middle_names=dbms_random.string('U', 20),

global_name=dbms_random.string('U', 20),

local_name=dbms_random.string('U', 20);


create table per_phones_nomask as select *from per_phones; 

update per_phones

set phone_number=trunc(dbms_random.value(1000000000,9999999999));


create table per_analysis_criteria_no_mask as select *from per_analysis_criteria; 

update per_analysis_criteria

set segment1=trunc(dbms_random.value(1000000000,9999999999)),

segment5=trunc(dbms_random.value(1000000000,9999999999)),

segment6=trunc(dbms_random.value(1000000000,9999999999));






Thursday, September 22, 2022

Demantra related Docs

 Information Center:Demantra Install, Upgrade, Patching,Technical Config (Doc ID 1400207.2)


Install Demantra ~ How to UPGRADE ~ Main Release Patches List And Recommended Patches (Doc ID 1342064.1)



Demantra - Development Sponsored Document Library. CRITICAL Updates, Comprehensive, Effective Technical Briefs, Guides, Notes +! (Doc ID 2245610.1)



To BottomTo Bottom

Monday, September 5, 2022

Apps password not working

 Someone changed apps password using 'alter user' which is not a good practice.


Now during a clone, password change is not working using FNDCPASS.


1) SEC_CASE_SENSITIVE_LOGON parameter is already set to FALSE

2) select fnd_web_sec.validate_login('GUEST','ORACLE') from dual;

FND_WEB_SEC.VALIDATE_LOGIN('GUEST','ORACLE')
--------------------------------------------------------------------------------
Y
3) There is no error on FNDCPASS but password change is not successful.



So, this is what we did as a fix,


Changed apps password to default apps/apps -- using 'alter user'.

Updated password in FND_ORACLE_USERID to apps using encrypted value.

and then re-tried FNDCPASS, this time it was successful.


EBSPROD> create table FND_ORACLE_USERID_BAK as (select * from FND_ORACLE_USERID);

Table created.

EBSPROD> create table FND_USER_BAK as (select * from FND_USER);

Table created.


SQL> ALTER USER apps IDENTIFIED BY apps;

User altered.

SQL> ALTER USER applsys IDENTIFIED BY apps;

User altered.

Below is the value for encrypted apps password --


SQL> update apps.FND_ORACLE_USERID set ENCRYPTED_ORACLE_PASSWORD = 'ZGA34EA20B5C4C9726CC95AA9D49EA4DBA8EDB705CB7673E645EED570D5447161491D78D444554655B87486EF537ED9843C8' where ORACLE_USERNAME in ('APPS', 'APPLSYS');

2 rows updated.

SQL> commit;

Commit complete.


#######################
col user_name for a30
select USER_NAME from APPS.fnd_user order by 1;



CREATE FUNCTION apps.decrypt_pin_func(in_chr_key IN VARCHAR2,in_chr_encrypted_pin IN VARCHAR2)
RETURN VARCHAR2

     AS
LANGUAGE JAVA NAME 'oracle.apps.fnd.security.WebSessionManagerProc.decrypt(java.lang.String,java.lang.String) return java.lang.String';
/


######################
SYSADMIN
=========
SELECT APPS.decrypt_pin_func('GUEST/ORACLE',(SELECT ENCRYPTED_FOUNDATION_PASSWORD from APPS.fnd_user where USER_NAME='GUEST')) from dual;
SELECT ENCRYPTED_USER_PASSWORD FROM APPS.FND_USER where USER_NAME='SYSADMIN';
SELECT APPS.decrypt_pin_func('&appspwd','&sysadminkey') from dual;

ewallet p12 vs cwallet sso

The  ewallet.p12  stores credentials and certificates protected by a user password, while  cwallet.sso  provides an obfuscated, random passw...