Sunday, December 31, 2006

Harder Passwords

On apps there are a lot of profile options that are useful in making apps passwords difficult to guess, the profiles are

1-Signon password failure limit
2-Signon Password Length
3-Signon Password No Reuse
4-Signon Password Hard to Guess

For the first one it means how many time can I try to access the system using wrong password by default apps leave the open you can try wrong passwords as much as you like but the recommendation it to change this value to 3.

The second one is how much is your password length by default it is set to 5 it is recommended to make it 6 or 7.

The 3ed profile is for how long I cannot use the same password on day I have this value at my environment set to 90 days I cannot use the same password unless at least 90 days pass by default this value is set to none.

For the 4th profile option by default it is set to no making it yes will give you the following benefits 1) The password contains at least one letter and at least one number.2) The password does not contain the username.3) The password does not contain repeating characters. (By repeating characters, we mean *consecutively* repeating characters).

Of course when you creating a user at your system using sysadmin->security->users there is an option that the user must change its password every n days I have this set to 30 days so my users have to change their passwords every 30 days


Thank you all for reading and please leave your comments

Fadi

Wednesday, December 27, 2006

Apps 11i Keys shortcut

below are 11i keys quick shortcut it will help to save time
F4 Exit
F5 Clear Field
F6 Clear Record
F7 Clear Block
F8 Clear Form
F11 Query Enter
F12 Count Query
Ctrl + S Save
Ctrl + L List of Values
Ctrl + F11 Query Run
Ctrl + E Edit
Ctrl + Up Delete Record
Ctrl + Down Insert Record
Ctrl + P Print
Ctrl + U Update Record
Ctrl + B Block Menu
Ctrl + K Display list of Keys
Shift + F5 Duplicate Field
Shift + F6 Duplicate Record
Shift + F8 Next Set of Records (Same as Page Down)
Shift + Page Down Next Block
Shift + Tab Previous Field
Shift + Page Up Previous Block
Shift + Ctrl + E Display Error
Page Down Scroll Down (Same as Shift + F8)
Page Up Scroll Up
Tab Next Field
Down Arrow Next Record
Up Arrow Previous Record
Return Return

Thursday, December 21, 2006

My Daily Check list

My daily Check list

Every day at the morning i do tow things
- Oracle applications and database check list.
- Oracle applications community check list.
In the first check list (apps and db) check list I check for the following

Check Apache server is up
Check Discoverer processes
Check Concurrent manager is up
Check forms is up
Clear tmp logs
Check disk space
Check memory usage
Look for new entries on alert log file
Verify success of database backup
Verify archive logs
Verify that all instances are up


In the second check list (apps community) check list I check the following websites and email lists

Oracle Apps Forums
Steven Chan an Oracle insider
Atul Become an Apps DBA
Sam Apps DBA Blog
Anil Apps Techno Functional Blog

I also keep monitoring the oracle-apps-l@Groups.ITtoolbox.com, oracle-db-l@Groups.ITtoolbox.com email lists.

If someone can add more resources please leave your comments

Oracle is not Magic, it just takes years of experience and doing my check lists ;-)

Sunday, December 17, 2006

Incase you ever need it

How to apply patch when adpatch is currently running?

Some times you might apply a patch and the during the process the patch failed at some workers, you search on metalink and find out that you need to apply patch in order to solve this failure, here in this case you have tow options either to cancel the current patch and apply the fixing patch then reapply the patch again or you can do the following (apply the fixing patch without the need to reapply the first patch and its very helpful when you applying a huge patch).
This is based on note (175485.1)

Steps to do that are:

1. Using the adctrl utility, shutdown the workers.
2. Backup the FND_INSTALL_PROCESSES table.
3. Backup the AD_DEFERRED_JOBS table.
4. Backup the .rf9 files located in $APPL_TOP/admin//restart directory.
5. Drop the FND_INSTALL_PROCESSES table and the AD_DEFERRED_JOBS tables.
6. Apply the new patch.
7. Restore the backed up .rf9 files.
8. Restore the FND_INSTALL_PROCESSES table.
9. Restore the AD_DEFERRED_JOBS table.
10. Re-create synonyms for APPLSYS.AD_DEFERRED_JOBS and APPLSYS.FND_INSTALL_PROCESSES.
11. Start adpatch, it will resume where it stopped previously.

and as you all know Oracle is not Magic, it just takes years of experience ;-)

Wednesday, December 13, 2006

Things I faced during implementing apps (11.5.10.2) on IBM AIX 5.3

Things I faced during implementing apps (11.5.10.2) on IBM AIX 5.3

Direct to the point, the issue is

1- After the installation and the post installation tasks went successfully I tried to create a user from sysadmin responsibility and I faced the following error when trying to display responsibilities to that user.

ORA-01403: no data foundFRM-40502: ORACLE error: unable to read list of values.
FRM-40815: Variable GLOBAL.LLL(xx) does not exist.
This problem seems to affect several different LOVs.

According to metalink note 338469.1 the problem is related to IBM OS security patches (APAR IY68989 and APAR IY73497) and there are 2 solutions for this problem

1- Revert the patches (APAR IY68989 and APAR IY73497 ) applied in the system.
2- Permanent Solution is to apply oracle patch no. (4689213).

Fadi Hasweh

Monday, December 11, 2006

Things I faced during installing apps (11.5.10.2) on IBM AIX 5.3

Direct to the point, the issues are
Installation Type was TEST on a Single Node with multi-users.

1- On the check system utilities the error was 'cc' not found.
The Solution was to create a symbolic link from gcc to cc
ln –s /usr/bin/gcc /usr/bin/cc
2- On the system utilities the following error
VisualAge C++ V6.0 or IBM XL C/C++ Enterprise Edition V7.0 compiler must be installed.
The Solution was based on note (282036.1) is to install the compiler, with no license requirement from:
http://www-1.ibm.com/support/docview.wss?uid=swg24009788

3- RW-50010: Error: - script has returned an error: 1
RW-50004: Error code received when running external process
And on the make.log the following error
(ld: 0706-006 Cannot find or open library file: -l m)
The solution was to install the following packages on the OS
-bos.adt.libm and bos.adt.base

4- RW-20001: Error. Unzip failed insufficient disk space
The Solution was based on note (340403.1) is to Set the soft limit for fsize to unlimited, as shown below:fsize = -1


Fadi Hsweh

Friday, December 08, 2006

Apps DBAs Sharing!




















Dear all,

I would like to share with the you a few chapters of a book I like a lot; most of you know the book (Oracle Applications DBA Field Guide), I came a cross this copy on the net on the http://www.apress.com/ site so I wanted it to share it with you all.
I am sure you will all benefit from the book.
Click to Download Book

The original copy is available on apr├Ęs in the following link
-Apress
-Amazon

I hope any one have good link or document and can share it with us to post it on the comments part.

Fadi


Thursday, December 07, 2006

Not able to login to APPS after upgrading to ATG RUP 4

Not able to login to APPS after upgrading to ATG RUP 4 (patch 4676589)

After applying patch 4676589 to upgrade to ATG RUP 4 users were no longer able to login to APPS and the following error occurred

Java.lang.NullPointerException
at oracle.apps.fnd.framework.webui.OADialogManager.getDialogMessages(OADialogManager.java:187)
at
oracle.apps.fnd.framework.webui.OAPageSecurity.displayPageSecurityError(OAPageSecurity.java:1223)
at oracle.apps.fnd.framework.webui.OAPageSecurity.validatePageSecurity(OAPageSecurity.java:938)
at oracle.apps.fnd.framework.webui.OAPageBean.processRequest(OAPageBean.java:2132)
at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(OAPageBean.java:1717)
at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(OAPageBean.java:502)
at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(OAPageBean.java:423)
at _oa__html._OA._jspService(_OA.java:86)

The cause of the problem that the ATG RUP4 had an incorrect class loader value in the file b3664848.ldt. based on (note 387061.1).

The solution is to do the following:
- Stop the Apps tire (adstpall.sh).
- Run the following command (on one line)
FNDLOAD apps/$appspass 0 Y UPLOAD $JTF_TOP/patch/115/import/jtfprefabcache.lct $FND_TOP/patch/115/import/US/b3664848.ldt CUSTOM_MODE=FORCE
- Start the Apps tire (adstrtal.sh).
- If the problem persisted bounce Apache and clear Apache cache

i hope no one will face any error in thire produciton env ;-)

and finaly
Oracle might be a magic when it comes to applying a big patch ;-)

Monday, December 04, 2006

Messed up with AutoConfig !!!

Autoconfig messed up what to do?

after you changed your current xml file (context file) of courser without taking backup and then after you had run adautocfg.sh you find out that you messed every thing up, and you need to go back to the previous status but you don’t have backup of your xml file so what can you do?.

-Fist of all before editing the xml file always take backup.
-If you want to do changes on your xml file try to do it using OAM (Oracle applications manger) Site Map->System Configuration ->Autoconfig. OAM backup your xml by default. And it also allows you to see the history of your xml files and what compare between current xml and the one in history.
-Incase you don’t have backup and you messed every thing up you can do the following.

When you run adautocfg.sh it takes backup under the following directory
-$ORACLE_HOME/appsutil/log/$CONTEXT_NAME/out/MMDDhhmm for the database tire.
-$APPL_TOP/admin/$CONTEXT_NAME/out/MMDDhhmm for the applications tire.
* Where MM is the month, DD is the day, hh is the hour, and mm is the minute when adconfig.sh was executed.

All what you have to do is to go to this directories and run a script called restore.sh

Nice thing you can do before you run adautocfg.sh is to run adchkcfg.sh script. This script
generates an HTML file named cfgcheck.html that displays the differences
in the configurations. The file will be located under
-$ORACLE_HOME/appsutil/log/$CONTEXT_NAME/out/MMDDhhmm on the database tire.
-$APPL_TOP/admin/$CONTEXT_NAME/out/MMDDhhmm on the application tire.

Please leave a comment if this post was helpful or not and thank you for taking time to read my posts

And always keep in mind
Oracle is not Magic, it just takes years of experience ;-)

Saturday, December 02, 2006

Who is connected to my apps?

Who is connected to my apps?

Sometimes the apps dba needs to know who is connecting to apps right now and what responsibly are they using, user id, client ip address and other info.

We can get that up and running in simple steps.

-set the profile option (Sign-On:Audit Level) value to form. By default it is set to none.

-run the concurrent program (OAM Applications Dashboard Collection) this concurrent will fill some tables like fnd_oam_forms_rti with important data like IP address of the client, time, …etc.

-go to Oracle applications manager (OAM) and from the drop down menu choose (forms sessions) this will give you users that are connected to your apps with their responsibilities, user id, time, and which from are they using and a lot of other info.

-To get the ip address of those users you have to click on the (rti pid) filed. This will give you other screen with the information needed.

p.s kindly note that some OS like hp-ux have bug and it will show the ip address like rubbish and it need a patch to be applied in order to get the correct ip address displied.

fadi hasweh
Oracle is not Magic, it just takes years of experience

Thursday, November 30, 2006

Making TARs helpful

How to log a professional SR?

As an Apps DBA sometimes we might need to open an SR (I hope no one will ever need to but in case you need, I know its not a good feeling when we open a Tar especially if it’s a SV1 tar) to solve a problem or to ask oracle a question to ask for an enhancement. It will be easier for us and them (Oracle Support) to send them a clear/direct info. On what we need and what we have.

Try always to keep a template of your current environment and when you open a tar just copy/paste it on the TAR.
Below is an example of what I have:

Subject
Oracle Apps 11i - Installation hanging Problem


Problem
On the Database tier installation at Step 5 of 7 (97%), when 'Converting database character set', the installation hanged. All pre-requests patches have been applied. I have also checked OS patches and every thing is applied and the server is ready for the installation.


Product
Oracle E-Business Suite 11i Release (11.5.10.2)


Platform
Red Hat Enterprise Linux AS 3.0


Installation Type
Multi-node Installation

Installation Structure
[Database Server-Database]
Directory: /oracle/proddb
Instance Name: ebprod
Port: 1521

[Database Server-Application]
Directory: /oracle/prodapp
Product installed: Concurrent Node, Admin Node


[Application Server-Application]
Directory: /oracle/prodapp
Product installed: Apache Node, Forms Node

Server Spec
CPU: Intel Xeon 700MHz x 4
RAM: 2Gb
HD: SCSI 36.4 Gb x 5 (Raid 5)
Swap: 2Gb


Last Message On InstallAction Log
OracleHome = /oracle/proddb

Query Returned: 03e48df5d45face1cf9265b70d70512baa33bc8d601a13d079
Calling Action generalActions2.3.0.8.0 setenv
selectedNodes = null
name = CALMGRVALUE
value = *Protected value, not to be logged*
append = null
replace = true
Calling Query calQueries9.0.4.0.8 Obfuscate
inputString = *Protected value, not to be logged*


Of course if the problem is not in the installation try to add the following:

Has the problem always occurred? or has it recently happened ?
If recent, then what has changed? Have you applied a patch, or what changed were made recently?

All this information well be helpful for oracle support to solve your problem and it will save you time because they will try to ask you questions ( try to answer them before you open the tar).
- try to be specific as much as you can.
-Avoid as much as you can opening Severity 1 TARs.

The above was an example so please; don’t consider it a real case.

I hope that was helpful and waiting for your comments

Wednesday, November 29, 2006

Upgrading discoverer 4i to 10g on Apps 11.5.10

Upgrading discoverer 4i to 10g on Apps 11.5.10.1

As you all know oracle has de-supported oracle discoverer 4i on apps 11i, therefore all DBA's will have at some point to upgrade their discoverer from 4i to 10g. Below are the steps I used to do that.
Kindly note that you have to refer to note 313418.1 in order to do that upgrade and not to my posts, my post will just give you a direct hint on what to do.

Steps are as follow based on note 313418.1:
-Install Oracle Business Intelligence Server 10g Release 2 (10.1.2.0.2). This installation type does not require installation and association to Oracle Application Server 10g Release 2 (10.1.2.0.2) Infrastructure. (You can choose this option if you are not planning to use features Discoverer Connection Management, Discoverer Portlet Provider, and Oracle SSO).

- Create secure directory under $Disco_ORACLE_HOME/discoverer
cd /u07/discoverer_home/discoverer
(mkdir secure)

-cp the $FND_SECURE/.dbc , $FND_SECURE/_.dbc TO your $Disco_ORACLE_HOME/discoverer/secure directory.

-Update tnsnames.ora file in $Disco_ORACLE_HOME to include connect to your Oracle E-Business database Use the same entry as exists in the tnsnames.ora file on your Oracle E-Business application tier server node.

-Migrate your existing Discoverer End User Layers to Discoverer 10.1.2.
$Disco_ORACLE_HOME/bin/eulapi -CONNECT /@ -AUTO_UPGRADE

-Set Applications Profile Options for Discoverer using AutoConfig
-open your xml file and specify variables as listed in the table below:
s_disco_standalone=true
s_disco_machine=for example: ap6162rt.us.oracle.com
s_disco_port=for example: 7778
s_disco_protocol=http https
s_disco_ver_comma=10,1,2
s_disco_eul_prefix=EUL


After that you have to run autoconfig

-Verify Applications profile options in Oracle Applications
Log into Release 11i with the System Administrator responsibility
Navigate to the Profile > System form
Query the %Discoverer% profile options.
Verify the following ICX profile options in Oracle Applications

ICX_DISCOVERER_LAUNCHER=http://:/discoverer/plus?Connect=[APPS_SECURE]
ICX_DISCOVERER_VIEWER_LAUNCHER=http://:/discoverer/viewer?Connect=[APPS_SECURE]
ICX_DISCOVERER_RELEASE=10
ICX_DISCOVERER_USE_VIEWR=Y N
ICX_DEFAULT_EUL=EUL
ICX_DISCOVERER_EUL_LANGUAGE=US
ICX_DISCOVERER_PARAMETERS=exitURL=http://:/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE

Note:
When you open the discoverer EUL using the Discoverer 10g Desktop/Admin it will ask you if you want to upgrade your EUL and you have to choose yes.

To start/stop the new discoverer do the following:
$Disco_ORACLE_HOME/opmn/bin/opmnctl stopall (to stop).
$Disco_ORACLE_HOME/opmn/bin/opmnctl startall (to start).

If you have any question please leave at comments part

Tuesday, November 28, 2006

Stone Soup (Steven Chan)

After reading Steven's last post on his blog Stone Soup I took a decision to start posting on my blog even if at least once a week. My next post will be on (upgrading oracle discoverer from 4i to 10g on apps) so keep monitoring this blog because I am going to need your encouragement and your comments.

Thank you steven and thanks to all other bloggers and readers
fadi hasweh

Tuesday, August 15, 2006

My first post

Dear Oracle technical addicts,

Well the first post seems to be difficult, any way I decided to start a new oracle apps 11i technical blog to share real cases and technical problems.

I hope it will be helpful to you all its something I want to try and I hope I will succeed on it.

Please if you have any comments on the blogs let me know, i need your comments to able to continue posting later on so please add your comments, qustions or your technical problems and i will try to help you solve them.

Fadi