Internal Login Flow in Oracle Apps

1.DB connection is established using APPLSYSPUB user. This user “APPLSYSPUB” is having access to fnd_user view and a small set of other public tables needed to establish the initial connection.

 2.Once DB connection is established FND_USER table is used to get ENCRYPTED_FOUNDATION_PASSWORD.

3.Using GUEST/ORACLE password combination and ENCRYPTED_FOUNDATION_PASSWORD  string obtained from 2 above, we get Apps schema password.

4.Internally it tries to connect to Apps schema with the password retrieved in step 3 above. If the connection fails, then

   a)The GUEST username password is incorrect

   b)The FNDNAM (APPS) environment variable is set incorrectly.

   c)Some other problem prevented a connection

 
5 Using Apps password obtained in Step 3 and ENCRYPTED_USER_PASSWORD string from FND_USER table, password for Application user (e.g. SYSADMIN) is obtained.

6. The Application user password obtained in Step 5 is compared to the application user password entered by user in login screen. If both passwords match then user is allowed to get into self-service.

7. A list of responsibilities assigned to that user is shown.  The user picks one of the responsibilities listed.

8. Each responsibility has a data group and application defined for it.Together, the data group and application define the Oracle account the responsibility uses.

Thanks 

Srini

SSO Metalink referance notes ..

NOTE:289666.1 - REP-52251: Cannot Get Output Of Job Id
NOTE:370778.1 - Reports Failing to Run for a New User Entered into SSO
NOTE:298174.1 - Troubleshooting Problems with Report Server and SSO / Portal Integration
NOTE:316223.1 - How to Disable Single Sign-On in Reports
NOTE:329602.1 - REP-56017: Security violation: not a job owner when SSO user has '@' sign
NOTE:338451.1 - REP-56071 Showjobs and Reports Queue Manager are Asking for Userid/Pswd to Display Jobs Info
NOTE:339466.1 - SSO User With @, Showmyjobs No Jobs Displayed or REP-56017 using Getjobid
NOTE:1160747.1 - SSO and OID Reassociation, Enabled After Install Time, Are Not Working in 11g
NOTE:1287972.1 - Reports 11g De-associating OID shows [LDAP: error code 49 - Invalid Credentials]
NOTE:263664.1 - What is the Difference Between SSO and Reports Server Authentication
NOTE:271435.1 - Oracle SSO Failure Calling Reports From SSO Enabled Forms via RUN_REPORT_OBJECT
NOTE:279683.1 - How to Secure a Non-SSO Reports Server with DIAGNOSTIC=NO
NOTE:402934.1 - HTTP 500 Internal Server Error If Reports SSO Is Enabled And Portal Is Not Installed
NOTE:404359.1 - Rep-56071: Security Check Failed With Error Message: Error Code30009
NOTE:851029.1 - REP-503 for Certain SSO Users While Running Reports
NOTE:852352.1 - SSO 10g Integration with Portal, Forms, Reports, Discoverer 11g Release 1
NOTE:423384.1 - Is it Possible to Configure/Use SSO Realms for Reports 10.1.2.x ?
NOTE:437246.1 - Which Possibilities are Available to Prevent Users from Accessing Showjobs Page and Getjobid in URL
NOTE:550440.1 - Reports Fail To Run With Rep-56071 After Replacing Kerberos With Default Single Sign On
NOTE:605337.1 - Reports Queue Manager cannot connect to Reports Server. Userid/password fails
NOTE:736785.1 - Troubleshooting: How To Register a Forms & Reports Services Standalone Installation with an Existing Infrastructure - Switch Forms to SSO
NOTE:745454.1 - Error Rep-50171 While Running Report with SSO at Portal or Servlet

NOTE:418256.1 - How Forms Interacts with SSO and OID During Login
NOTE:796352.1 - REP-50201, REP-56071 And LDAP Error Code 48 "Insufficient access to do Proxy Switch"

NOTE:1085834.1 - How to Configure a Reports Server *without* SSO Authentication even when other Reports Servers *do* use SSO Authentication
NOTE:1094495.1 - Is It Possible to Disable Dynamic Resource Creation when SSOCONN is Used in Reports?
NOTE:203617.1 - "Service specific error 50125" or REP-50125 while Starting the Reports Server
NOTE:216847.1 - REP-56071: Security check failed with error message
NOTE:218911.1 - How to Retrieve the SSO Username in Reports
NOTE:246200.1 - How to Authenticate Report Servlet URLs when SSO is Disabled
NOTE:251033.1 - Reports Unable to Use Newly Created Default Resource as SSOCONN
NOTE:252339.1 - Fonts Change in Printed Output when SSO Turned On or Off and Report Server Restarted
NOTE:253222.1 - Unable to Start Reports Server from EM Website
NOTE:253724.1 - SSO Enabled reports request hangs after putting correct username/pwd in SSO login screen
NOTE:257855.1 - How to Disable SSO for a Registered Report in Portal to Allow Public Access

Thanks 

Srini

Oracle announced EBS 12.2.5

EBS 12.2.5 released!

Oracle announced EBS 12.2.5 on Oct 16 2015.

The new EBS 12.2.5 is delivered via a RUP patch 19676458 (Patch 12.2.5: ORACLE E-BUSINESS SUITE 12.2.5 RELEASE UPDATE PACK).
The root of the EBS 12.2.5 documentation is "Oracle E-Business Suite Product Specific Release Notes, Release 12.2.5 (Doc ID 2049015.1)"

The prerequisites of the patch 19676458 are R12.AD.C.delta.7 and R12.TXK.C.delta.7.
The upgrade process, in other words, applying the RUP patch 19676458 is explained in "Oracle E-Business Suite Release 12.2.5 Readme (Doc ID 1983050.1)" with all the details. So the document to follow for applying the 12.2.5 patch is 1983050.1.

Just like 12.2.4, applying 12.2.5 RUP patch with the downtime option is supported for the newly installed EBS 12.2 systems.
Lastly, it is important to mention that if you are on 12.2 you can directly upgrade to 12.2.5, but if you are on earlier releases like 11i or 12.0, you need to upgrade to release 12.2 first.
It seems, we will install EBS 12.2.5, as it will be considered as the latest and most stable EBS release in the upcoming days.

 

Thanks

Srini

Cloneing steps ...

Run preclone on DB tier

1.login to RDBMS oracle home

go to $ORACLE_HOME/appsutil/scripts/CONTEXT_NAME/perl adpreclone.pl dbTier

you should keep apps password ready at this time.

after you done with preclone, tar or copy entire oracle home to target

2. Run preclone on Apps or middle tier

cd $COMMON_TOP/admin/scripts/$CONTEXT_NAME

perl adpreclone.pl appsTier

you should keep apps password ready at this time.

3.Copy the Database Tier File System

create controle file using(alter database backup controlefile to trace), you can find this in udump directory

shutdown database

copy all datafiles to target

4.Copy source file system to target file system

Copy or tar appl/comn/ora directoroies to target

5.Configure db tier

untar copied oracle home binaries in target, then run below command

cd RDBMS ORACLE_HOME/appsutil/clone/bin

perl adcfgclone.pl dbTier

here this script will complete with error, do not worry it will create new context file

2.5 Configure apps/middle tier

urnar files appl/comn/ora


perl adcfgclone.pl appsTier
Enter the APPS password [APPS]:


First Creating a new context file for the cloned system.
The program is going to ask you for information about the new system:


Provide the values required for creation of the new APPL_TOP Context file.

Do you want to use a virtual hostname for the target node (y/n) [n] ?:

Target system database SID [OFMSINST]:(new database name)

Target system domain name [xxxx]:

Target system database server node [xxxxx]:

Target system database domain name [xxxx]:

Does the target system have more than one application tier server node (y/n) [n]
?:y

Does the target system application tier utilize multiple domain names (y/n) [n]
?:

Target system concurrent processing node [xxxx]:

Target system administration node [xxxx]:

Target system forms server node [xxxx]:oraapp01

Target system web server node [xxxx]:oraapp01

Is the target system APPL_TOP divided into multiple mount points (y/n) [n] ?:

Target system APPL_TOP mount point [u01/inst/appl]:/u02/regt/appl ( new appl top location)

Target system COMMON_TOP directory [u01/inst/comn]:/u02/regt/comn (new common top location)

Target system 8.0.6 ORACLE_HOME directory [u01/inst/ora/8.0.6]:/u02/regt/ora/8.0.6 (new 806 oh location)

Target system iAS ORACLE_HOME directory [u01/inst/ora/iAS]:/u02/regt/ora/iAS (new IAS home location)

Do you want to preserve the Display set to xxxxx (y/n) [y] ?:

Location of the JDK on the target system [opt/java1.5]:

Target system JRE_TOP [opt/java1.5]:

Clone Context uses the same port pool mechanism as the Rapid Install
Once you choose a port pool, Clone Context will validate the port availability.

Enter the port pool number [0-99]:


Check below metalink notes, it will help you.


Cloning E-Business Suite Using Hot Backup for Minimal Downtime of Source Environment. [ID 362473.1]



FAQ: Cloning Oracle Applications Release 11i [ID 216664.1]

Descriptive Checklist for performing Rapid Clone with 11i/R12 [ID 811715.1]
Cloning SSO-Enabled Environments in E-Business Suite [ID 1123843.1]

NOTE:230672.1 - Cloning Oracle Applications Release 11i with Rapid Clone
NOTE:316806.1 - Oracle Applications Installation Update Notes, Release 11i (11.5.10.2)
NOTE:364565.1 - Troubleshooting RapidClone issues with Oracle Applications 11i
NOTE:405565.1 - Oracle Applications Release 12 Installation Guidelines
NOTE:406982.1 - Cloning Oracle Applications Release 12 with Rapid Clone
NOTE:603104.1 - Troubleshooting RapidClone issues with Oracle Applications R1

Thanks
Srini