perl adcfgclone.pl appsTier (add node) in R12.2 - RUN Weblogic AdminServer is down or AdminServer Credentials provided are incorrect!!
Adding a New Application Tier Node to an Existing System on a non shared file system:
col node_name format a30
col virtual_ip format a30
col server_id format a30
list
select node_name,virtual_ip, support_db,support_cp,support_forms,support_web,support_admin from fnd_nodes
1. Steps for adding a node on a non-shared file system
Run adpreclone.pl on both the Run and Patch Edition File Systems in the primary application tier node of the E-Business Suite instance.
Note: Before executing this step, ensure the AdminServer on both the Run Edition File System and the Patch Edition File System is running.
The AdminServer on the Patch Edition File System can be shut down after completion of adpreclone.pl.
2. Copy the Run Edition File System to the Target secondary node.
Only the following directories should be copied:
<APPL_TOP>
<COMMON_TOP>
<OracleAS Tools 10.1.2 ORACLE_HOME>
The secondary node must be on a different host.
If the primary node's Run Edition File System is in fs1, then the secondary node's Run Edition File System should also be in fs1.
If the primary node's Run Edition File System is in fs2, then the secondary node's Run Edition File System should also be in fs2.
Note: In Release 12.2, the base directory location needs to be set to the same value on all application tier nodes.
This should be taken care of while copying the the Run and Patch Edition File Systems to the Target secondary node.
3. Configure both Run and Patch Edition File Systems in the Target secondary node:
Note: Before executing these steps, ensure the AdminServer on both the Run Edition File System and the Patch Edition File System is running.
This is required for adcfgclone.pl to properly register the new node on the Oracle E-Business Suite instance.
4. make the cross entry of /etc/hosts of both app server using private ip
5. using passwordless using ssh-keygen -t rsa
issue: after adding ".pub" entry in authorized_keys, I started facing error
The authenticity of host 'ec2-52-207-19-147.compute-1.amazonaws.com (172.31.32.200)' can't be established.
RSA key fingerprint is 61:53:79:63:d4:59:a0:af:d3:ad:68:3b:88:80:44:8a.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'ec2-52-207-19-147.compute-1.amazonaws.com' (RSA) to the list of known hosts.
Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
Solution:
changed the value from no to yes of passwordauthentication in /etc/ssh/sshd_config
service sshd restart
6.
[ec2-user@ip-172-31-27-123 clone]$ cd bin
[ec2-user@ip-172-31-27-123 bin]$ perl adcfgclone.pl appsTier dualfs
Copyright (c) 2002, 2015 Oracle Corporation
Redwood Shores, California, USA
Oracle E-Business Suite Rapid Clone
Version 12.2
adcfgclone Version 120.63.12020000.63
Enter the APPS password :
Enter the Weblogic AdminServer password :
Do you want to add a node (yes/no) [no] : yes
Verifying: Run file system AdminServer is running
Verifying: Patch file system AdminServer is running
Running: Context clone...
Log file located at /u01/fs1/EBSapps/comn/clone/bin/CloneContext_0305112855.log
Target System Hostname (virtual or normal) [ip-172-31-27-123] :
Target System Base Directory set to /u01
Target System Current File System Base set to /u01/fs1
Target System Other File System Base set to /u01/fs2
Target System Fusion Middleware Home set to /u01/fs1/FMW_Home
Target System Other File System Fusion Middleware Home set to /u01/fs2/FMW_Home
Target System Web Oracle Home set to /u01/fs1/FMW_Home/webtier
Target System Other File System Web Oracle Home set to /u01/fs2/FMW_Home/webtier
Target System Appl TOP set to /u01/fs1/EBSapps/appl
Target System Other File System Appl TOP set to /u01/fs2/EBSapps/appl
Target System COMMON TOP set to /u01/fs1/EBSapps/comn
Target System Other File System COMMON TOP set to /u01/fs2/EBSapps/comn
Target System Instance Home Directory [/u01] :
Target System Current File System Instance Top set to /u01/fs1/inst/apps/NEWVIS_ip-172-31-27-123
Do you want to preserve the Display [ip-172-31-32-200:0.0] (y/n) : n
Target System Display [ip-172-31-27-123:0.0] : y
Target System Root Service [enabled] :
Target System Web Entry Point Services [enabled] :
Target System Web Application Services [enabled] :
Target System Batch Processing Services [enabled] :
Target System Other Services [disabled] :
Do you want the target system to have the same port values as the source system (y/n) [y] ? : y
Validating if the source port numbers are available on the target system..
Complete port information available at /u01/fs1/EBSapps/comn/clone/bin/out/NEWVIS_ip-172-31-27-123/portpool.lst
Target System proxy port [80] :
UTL_FILE_DIR on database tier consists of the following directories.
1. /u01/temp/NEWVIS
2. /u01/temp/NEWVIS
3. /u01/12.1.0/appsutil/outbound/NEWVIS_ip-172-31-32-200
4. /u01/temp/NEWVIS
Choose a value which will be set as APPLPTMP value on the target node [1] : 3
The new APPL_TOP context file has been created :
/u01/fs1/inst/apps/NEWVIS_ip-172-31-27-123/appl/admin/NEWVIS_ip-172-31-27-123.xml
Check Clone Context logfile /u01/fs1/EBSapps/comn/clone/bin/CloneContext_0305112855.log for details.
Creating Patch file system context file.....
Log file located at /u01/fs1/EBSapps/comn/clone/bin/CloneContextPatch_0305113044.log
Target System Other File System Instance Top set to /u01/fs2/inst/apps/NEWVIS_ip-172-31-27-123
Validating if the source port numbers are available on the target system..
Complete port information available at /u01/fs1/EBSapps/comn/clone/bin/out/NEWVIS_ip-172-31-27-123/portpool.lst
Target System proxy port [80] :
The new APPL_TOP context file has been created :
/u01/fs2/inst/apps/NEWVIS_ip-172-31-27-123/appl/admin/NEWVIS_ip-172-31-27-123.xml
Check Clone Context logfile /u01/fs1/EBSapps/comn/clone/bin/CloneContextPatch_0305113044.log for details.
FMW Pre-requisite check log file location : /u01/fs1/EBSapps/comn/clone/FMW/logs/prereqcheck.log
Running: FMW pre-req check...
Configuring: Run file system....
LogFile located at /u01/fs1/inst/apps/NEWVIS_ip-172-31-27-123/admin/log/clone/run/RCloneApplyAppstier_03051131.log
Configuring: Patch file system....
LogFile located at /u01/fs1/inst/apps/NEWVIS_ip-172-31-27-123/admin/log/clone/patch/RCloneApplyAppstier_03051223.log
Do you want to startup the Application Services for NEWVIS? (y/n) [n] : n
Services not started
[ec2-user@ip-172-31-27-123 bin]$
col node_name format a30
col virtual_ip format a30
col server_id format a30
select node_name,virtual_ip, support_db,support_cp,support_forms,support_web,support_admin from fnd_nodes;
SQL> /
NODE_NAME VIRTUAL_IP S S S S S
------------------------------ ------------------------------ - - - - -
IP-172-31-27-123 N Y Y Y Y
AUTHENTICATION N N N N N
IP-172-31-32-200 ip-172-31-32-200 Y Y Y Y Y
SQL>
bhuarora@:/Users/bhuarora/Downloads$jobs
[1] Exit 1 nohup cp -pr ibm_last_day_backup /Users/bhuarora/Desktop/Old_laptop_backup_ibm_oracle/ (wd: /Volumes/My Passport)
[2] Done nohup cp -pr ibm /Users/bhuarora/Desktop/Old_laptop_backup_ibm_oracle/ (wd: /Volumes/My Passport)
[3]- Done nohup cp -pr iphone__backup /Users/bhuarora/Desktop/ (wd: /Volumes/My Passport)
[4]+ Exit 1 nohup cp -pr Dell_Laptop_bkp_16_apr_2016 /Users/bhuarora/Desktop/Old_laptop_backup_ibm_oracle/ (wd: /Volumes/My Passport)
bhuarora@:/Users/bhuarora/Downloads$
Error 1:
[oracle@ip-172-31-36-1 bin]$ perl adcfgclone.pl appsTier
Copyright (c) 2002, 2015 Oracle Corporation
Redwood Shores, California, USA
Oracle E-Business Suite Rapid Clone
Version 12.2
adcfgclone Version 120.63.12020000.63
***********************************************************
In AD-TXK Delta 7, we recommend you clone the run and patch
file systems in a single operation using the 'dualfs' option.
Separate cloning of the run and patch file systems will be deprecated
************************************************************
Enter the APPS password :
Enter the Weblogic AdminServer password :
Do you want to add a node (yes/no) [no] : yes
Verifying: run file system AdminServer is running
RUN Weblogic AdminServer is down or AdminServer Credentials provided are incorrect!!
https://k21academy.com/oracle-ebs-r12-on-cloud/troubleshoot-socket000445-connection-rejected-filter-blocked-socket-while-accessing-ebs-r12-weblogic-console-on-oci/
Cause:
After you apply either the April 2019 Critical Patch Update (CPU) or the Oracle E-Business Suite Technology Stack Delta 11 release update pack (R12.TXK.C.Delta.11) to Oracle E-Business Suite Release 12.2,
AutoConfig will secure access to the Oracle WebLogic Server ports using Oracle WebLogic Server connection filters.
All the existing application tier nodes of the Oracle E-Business Suite instance are allowed unrestricted access to Oracle WebLogic Server ports.
However, by default, there are no trusted hosts defined for the Oracle WebLogic Server Administration ports, which are used by the Oracle WebLogic Server Administration Console and Fusion Middleware Control.
Solution:
Open the config.xml file
1. (/u01/install/APPS/fs1/FMW_Home/user_projects/domains/EBS_domain/config)
2)Backup your config.xml file before making any changes
eg: $ cp -R config.xml config.xml_bkp
3)Search for connection -filter-rule
Weblogic Connection Filter
4)Change the string “deny” to “allow”
<connection-filter-rule>ip-172-31-43-20.ec2.internal * * allow</connection-filter-rule>
or
<connection-filter-rule>0.0.0.0/0 * * allow</connection-filter-rule>
Note: Next autoconfig will replace this value so change in context file
(5) now again restart weblogic server on run/patch file system
For permanent fix:
Alternative Methods to Allow Access to Oracle WebLogic Server Administration Console from
Trusted Hosts for Oracle E-Business Suite Release 12.2 (Doc ID 2542826.1)
<s_wls_admin_console_access_nodes oa_var="s_wls_admin_console_access_nodes">192.0.2.0/24</s_wls_admin_console_access_nodes>
col node_name format a30
col virtual_ip format a30
col server_id format a30
list
select node_name,virtual_ip, support_db,support_cp,support_forms,support_web,support_admin from fnd_nodes
1. Steps for adding a node on a non-shared file system
Run adpreclone.pl on both the Run and Patch Edition File Systems in the primary application tier node of the E-Business Suite instance.
Note: Before executing this step, ensure the AdminServer on both the Run Edition File System and the Patch Edition File System is running.
The AdminServer on the Patch Edition File System can be shut down after completion of adpreclone.pl.
2. Copy the Run Edition File System to the Target secondary node.
Only the following directories should be copied:
<APPL_TOP>
<COMMON_TOP>
<OracleAS Tools 10.1.2 ORACLE_HOME>
The secondary node must be on a different host.
If the primary node's Run Edition File System is in fs1, then the secondary node's Run Edition File System should also be in fs1.
If the primary node's Run Edition File System is in fs2, then the secondary node's Run Edition File System should also be in fs2.
Note: In Release 12.2, the base directory location needs to be set to the same value on all application tier nodes.
This should be taken care of while copying the the Run and Patch Edition File Systems to the Target secondary node.
3. Configure both Run and Patch Edition File Systems in the Target secondary node:
Note: Before executing these steps, ensure the AdminServer on both the Run Edition File System and the Patch Edition File System is running.
This is required for adcfgclone.pl to properly register the new node on the Oracle E-Business Suite instance.
4. make the cross entry of /etc/hosts of both app server using private ip
5. using passwordless using ssh-keygen -t rsa
issue: after adding ".pub" entry in authorized_keys, I started facing error
The authenticity of host 'ec2-52-207-19-147.compute-1.amazonaws.com (172.31.32.200)' can't be established.
RSA key fingerprint is 61:53:79:63:d4:59:a0:af:d3:ad:68:3b:88:80:44:8a.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'ec2-52-207-19-147.compute-1.amazonaws.com' (RSA) to the list of known hosts.
Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
Solution:
changed the value from no to yes of passwordauthentication in /etc/ssh/sshd_config
service sshd restart
6.
[ec2-user@ip-172-31-27-123 clone]$ cd bin
[ec2-user@ip-172-31-27-123 bin]$ perl adcfgclone.pl appsTier dualfs
Copyright (c) 2002, 2015 Oracle Corporation
Redwood Shores, California, USA
Oracle E-Business Suite Rapid Clone
Version 12.2
adcfgclone Version 120.63.12020000.63
Enter the APPS password :
Enter the Weblogic AdminServer password :
Do you want to add a node (yes/no) [no] : yes
Verifying: Run file system AdminServer is running
Verifying: Patch file system AdminServer is running
Running: Context clone...
Log file located at /u01/fs1/EBSapps/comn/clone/bin/CloneContext_0305112855.log
Target System Hostname (virtual or normal) [ip-172-31-27-123] :
Target System Base Directory set to /u01
Target System Current File System Base set to /u01/fs1
Target System Other File System Base set to /u01/fs2
Target System Fusion Middleware Home set to /u01/fs1/FMW_Home
Target System Other File System Fusion Middleware Home set to /u01/fs2/FMW_Home
Target System Web Oracle Home set to /u01/fs1/FMW_Home/webtier
Target System Other File System Web Oracle Home set to /u01/fs2/FMW_Home/webtier
Target System Appl TOP set to /u01/fs1/EBSapps/appl
Target System Other File System Appl TOP set to /u01/fs2/EBSapps/appl
Target System COMMON TOP set to /u01/fs1/EBSapps/comn
Target System Other File System COMMON TOP set to /u01/fs2/EBSapps/comn
Target System Instance Home Directory [/u01] :
Target System Current File System Instance Top set to /u01/fs1/inst/apps/NEWVIS_ip-172-31-27-123
Do you want to preserve the Display [ip-172-31-32-200:0.0] (y/n) : n
Target System Display [ip-172-31-27-123:0.0] : y
Target System Root Service [enabled] :
Target System Web Entry Point Services [enabled] :
Target System Web Application Services [enabled] :
Target System Batch Processing Services [enabled] :
Target System Other Services [disabled] :
Do you want the target system to have the same port values as the source system (y/n) [y] ? : y
Validating if the source port numbers are available on the target system..
Complete port information available at /u01/fs1/EBSapps/comn/clone/bin/out/NEWVIS_ip-172-31-27-123/portpool.lst
Target System proxy port [80] :
UTL_FILE_DIR on database tier consists of the following directories.
1. /u01/temp/NEWVIS
2. /u01/temp/NEWVIS
3. /u01/12.1.0/appsutil/outbound/NEWVIS_ip-172-31-32-200
4. /u01/temp/NEWVIS
Choose a value which will be set as APPLPTMP value on the target node [1] : 3
The new APPL_TOP context file has been created :
/u01/fs1/inst/apps/NEWVIS_ip-172-31-27-123/appl/admin/NEWVIS_ip-172-31-27-123.xml
Check Clone Context logfile /u01/fs1/EBSapps/comn/clone/bin/CloneContext_0305112855.log for details.
Creating Patch file system context file.....
Log file located at /u01/fs1/EBSapps/comn/clone/bin/CloneContextPatch_0305113044.log
Target System Other File System Instance Top set to /u01/fs2/inst/apps/NEWVIS_ip-172-31-27-123
Validating if the source port numbers are available on the target system..
Complete port information available at /u01/fs1/EBSapps/comn/clone/bin/out/NEWVIS_ip-172-31-27-123/portpool.lst
Target System proxy port [80] :
The new APPL_TOP context file has been created :
/u01/fs2/inst/apps/NEWVIS_ip-172-31-27-123/appl/admin/NEWVIS_ip-172-31-27-123.xml
Check Clone Context logfile /u01/fs1/EBSapps/comn/clone/bin/CloneContextPatch_0305113044.log for details.
FMW Pre-requisite check log file location : /u01/fs1/EBSapps/comn/clone/FMW/logs/prereqcheck.log
Running: FMW pre-req check...
Configuring: Run file system....
LogFile located at /u01/fs1/inst/apps/NEWVIS_ip-172-31-27-123/admin/log/clone/run/RCloneApplyAppstier_03051131.log
Configuring: Patch file system....
LogFile located at /u01/fs1/inst/apps/NEWVIS_ip-172-31-27-123/admin/log/clone/patch/RCloneApplyAppstier_03051223.log
Do you want to startup the Application Services for NEWVIS? (y/n) [n] : n
Services not started
[ec2-user@ip-172-31-27-123 bin]$
col node_name format a30
col virtual_ip format a30
col server_id format a30
select node_name,virtual_ip, support_db,support_cp,support_forms,support_web,support_admin from fnd_nodes;
SQL> /
NODE_NAME VIRTUAL_IP S S S S S
------------------------------ ------------------------------ - - - - -
IP-172-31-27-123 N Y Y Y Y
AUTHENTICATION N N N N N
IP-172-31-32-200 ip-172-31-32-200 Y Y Y Y Y
SQL>
bhuarora@:/Users/bhuarora/Downloads$jobs
[1] Exit 1 nohup cp -pr ibm_last_day_backup /Users/bhuarora/Desktop/Old_laptop_backup_ibm_oracle/ (wd: /Volumes/My Passport)
[2] Done nohup cp -pr ibm /Users/bhuarora/Desktop/Old_laptop_backup_ibm_oracle/ (wd: /Volumes/My Passport)
[3]- Done nohup cp -pr iphone__backup /Users/bhuarora/Desktop/ (wd: /Volumes/My Passport)
[4]+ Exit 1 nohup cp -pr Dell_Laptop_bkp_16_apr_2016 /Users/bhuarora/Desktop/Old_laptop_backup_ibm_oracle/ (wd: /Volumes/My Passport)
bhuarora@:/Users/bhuarora/Downloads$
Error 1:
[oracle@ip-172-31-36-1 bin]$ perl adcfgclone.pl appsTier
Copyright (c) 2002, 2015 Oracle Corporation
Redwood Shores, California, USA
Oracle E-Business Suite Rapid Clone
Version 12.2
adcfgclone Version 120.63.12020000.63
***********************************************************
In AD-TXK Delta 7, we recommend you clone the run and patch
file systems in a single operation using the 'dualfs' option.
Separate cloning of the run and patch file systems will be deprecated
************************************************************
Enter the APPS password :
Enter the Weblogic AdminServer password :
Do you want to add a node (yes/no) [no] : yes
Verifying: run file system AdminServer is running
RUN Weblogic AdminServer is down or AdminServer Credentials provided are incorrect!!
https://k21academy.com/oracle-ebs-r12-on-cloud/troubleshoot-socket000445-connection-rejected-filter-blocked-socket-while-accessing-ebs-r12-weblogic-console-on-oci/
Cause:
After you apply either the April 2019 Critical Patch Update (CPU) or the Oracle E-Business Suite Technology Stack Delta 11 release update pack (R12.TXK.C.Delta.11) to Oracle E-Business Suite Release 12.2,
AutoConfig will secure access to the Oracle WebLogic Server ports using Oracle WebLogic Server connection filters.
All the existing application tier nodes of the Oracle E-Business Suite instance are allowed unrestricted access to Oracle WebLogic Server ports.
However, by default, there are no trusted hosts defined for the Oracle WebLogic Server Administration ports, which are used by the Oracle WebLogic Server Administration Console and Fusion Middleware Control.
Solution:
Open the config.xml file
1. (/u01/install/APPS/fs1/FMW_Home/user_projects/domains/EBS_domain/config)
2)Backup your config.xml file before making any changes
eg: $ cp -R config.xml config.xml_bkp
3)Search for connection -filter-rule
Weblogic Connection Filter
4)Change the string “deny” to “allow”
<connection-filter-rule>ip-172-31-43-20.ec2.internal * * allow</connection-filter-rule>
or
<connection-filter-rule>0.0.0.0/0 * * allow</connection-filter-rule>
Note: Next autoconfig will replace this value so change in context file
(5) now again restart weblogic server on run/patch file system
For permanent fix:
Alternative Methods to Allow Access to Oracle WebLogic Server Administration Console from
Trusted Hosts for Oracle E-Business Suite Release 12.2 (Doc ID 2542826.1)
<s_wls_admin_console_access_nodes oa_var="s_wls_admin_console_access_nodes">192.0.2.0/24</s_wls_admin_console_access_nodes>
Comments