JAS (Java Application Server)

The EnterpriseOne JAS (Java Application Server) category will include all posts and pages pertaining to the JAS (Java Application Server) of EnterpriseOne.

3 Ways To Find Your Oracle Weblogic Version

There are at least 3 different ways to find the version of Oracle Weblogic Server that you are running:

  1. Using the registry.xml file located in your MW_HOME directory.
    • example: /u01/weblogic/Oracle/Middleware or E:\Oracle\Middleware
    • Look for a line similar to:
      <component name=”WebLogic Server” version=”10.3.4.0″ InstallDir=”/u01/weblogic/Oracle/Middleware/wlserver_10.3″&gt;
  2. Using the .product.properties file located in your WLS_HOME directory.
    • example: /u01/weblogic/Oracle/Middleware/wlserver_10.3 or E:\Oracle\Middleware\wlserver_10.3
    • Look for a line similar to:
      WLS_PRODUCT_VERSION=10.3.4.0
  3. Using the Oracle Weblogic Server Administration Console
    • Use the left hand menu to navigate to Environment -&gt; Servers. Then, click the [Monitoring] tab. You should see a screen similar to the one below:
      Oracle Weblogic Server Administration Console

EnterpriseOne Business Services (BSSV) Error: Security Token Failed To Validate

Every once in a while we get the following error on a system that interacts with EnterpriseOne using business services (BSSV).

Security token failed to validate. weblogic.xml.crypto.wss.SecurityTokenValidateResult@2eba8ea[status: false][msg UNT Error:Message Created time past the current time even accounting for set clock skew]

Fortunately, until today, this error was always received when using our test environment and we couldn’t get it to be consistent so it went unresolved. Well, today was the day it hit production. So, after a little research I was able to find the solution:

  1. Login to the Weblogic Serve Administration Console
  2. Click Environment
  3. Click Servers
  4. Click the server you want to work with
  5. Click the [Configuration] tab
  6. Click the [Server Start] tab
  7. Add the following to the Arguments textarea:
    • -Dweblogic.security.identityAssertionTTL=-1
      -Dweblogic.wsee.security.clock.skew=3900000 -Dweblogic.wsee.security.delay.max=3900000

Oracle Weblogic Clock Skew

Allow Firefox & Chrome To Access Restricted Ports

When separating WebLogic E1 JAS instances we usually end up using odd port numbers.  Sometimes, we use ports that have been put on a restricted list by both Firefox and Chrome. 

Below is a list of the ports that are blocked and the service that is the reason for it being blocked:

1 – tcpmux 7 – echo 9 – discard 11 – systat
13 – daytime 15 – netstat 17 – qotd 19 – chargen
20 – ftp data 21 – ftp control 22 – ssh 23 – telnet
25 – smtp 37 – time 42 – name 43 – nicname
53 – domain 77 – priv-rjs 79 – finger 87 – ttylink
95 – supdup 101 – hostriame 102 – iso-tsap 103 – gppitnp
104 – acr-nema 109 – POP2 110 – POP3 111 – sunrpc
113 – auth 115 – sftp 117 – uucp-path 119 – NNTP
123 – NTP 135 – loc-srv / epmap 139 – netbios 143 – IMAP2
179 – BGP 389 – LDAP 465 – SMTP+SSL 512 – print / exec
513 – login 514 – shell 515 – printer 526 – tempo
530 – courier 531 – chat 532 – netnews 540 – uucp
556 – remotefs 563 – NNTP+SSL 587 – submission 601 – syslog
636 – LDAP+SSL 993 – IMAP+SSL 995 – POP3+SSL 2049 – nfs
4045 – lockd 6000 – X11    

For more detail about this you can visit Mozilla’s website.

We ended up using ports 81-89.  As you can see in the table above, port 87 is listed because of a service called ttylink.  Below are the steps that you can take to whitelist any port you want.  However, I would recommend not using the list of restricted ports.  It is much easier than going through these steps with all of your users or maintaining a Windows Group PolicyWindows Group Policy.

Firefox:

  1. Type the following URL into Firefox: about:config
  2. Create a string setting called: network.security.ports.banned.override
  3. Give your new setting a value of 87.  You can also include a comma separated list, a range or a combination of both:  87, 150-300, 350, 400, 450-500

Chrome:

  1. Modify your shortcut to Chrome by changing the Target field to look something like:
    “C:\Program Files (x86)\Google\Chrome\Application\chrome.exe”
    –explicitly-allowed-ports=87

Business Services SBF and EAR File Are Not Created During BSSV Package Build

I was trying to build a BSSV package for a new EnterpriseOne 9.1 installation and received a R9621 that said the build was successful.  However, when I tried to deploy the package I received an R98825F that said Failed to initiate BSSV deploy. 

After some investigation, I found that the .ear file was not created in the SBF directory of the package. Then, I found this on the Oracle Support site that solved the issue:

Symptoms:

When trying to build a client package for a standard business service.

The logs do not include the following lines:
*************************************************
Thu Jul 10 18:36:12 – Copy \\INFVA02670\E812\DV812\java\sbfjars to \\INFVA02670\E812\DV812\package\DVBSSV4\java\sbfjars.
Thu Jul 10 18:36:36 – Copy \\INFVA02670\E812\DV812\work to \\INFVA02670\E812\DV812\package\DVBSSV4\work.
********************************************************************

When these lines are missing, the system is not copying the required sbjars to the sbf folder under the package build folder.

Solution:

BSSV’s cannot be individually built – so if you have an update package (does not matter if this is from an ESU or not) and if it contains BSSV’s – they will be deleted since all BSSV’s have to be compiled and an EAR file created.

If the update pkg being created contains BSSV’s (specifically selected in Package Assembly) and is not marked as MASTERING, then pkgbld will delete the objects from its list and build the remaining objects (from package assembly or ESU). This is not an error – but working as designed.

So here, since the customer selected specific BSSV’s in Package Assembly and they did not have MASTERING turned on (you can check this – Fastpath to GH9083, Select Package Build, Right click – Prompt for Values and MASTERING is the second one and it should be blank – which means it is turned off) the pkgbld process is deleting the BSSV objects from the list and the sbfjars are not getting copied.

For a regular BSSV package the MASTERING flag should be turned OFF.

When building a regular BSSV package (generate the BSSV EAR that will be later deployed to a BSSV server) do not select individual BSSV’s during package assembly.

Note – The MASTERING flag is only set/turned on, if the customer is going through Product Package and building the ESU. This is generally not done by the customers. When MASTERING is turned on, you can specify individual BSSV’s in package assembly in which case the .zip files are copied from the pathcode to the package sbf folder and compressed and delivered as part of the MASTERED update (ESU) package. In this case the BSSV EAR will not be created.

Source: Oracle Support Doc# 1368331.1