Troubleshooting Login Problems in Oracle Applications 11i (11.5.2 11.5.

10+)

In this Document
Purpose Last Review Date Instructions for the Reader Troubleshooting Details IAS Checks RDBMS Checks OA Framework Checks Detailed checks Logging a TAR or SR - Checklist of things to send to Oracle Support Appendix A Appendix B Appendix C References

Applies to:
Oracle Applications Framework - Version: 11.5.2 to 11.5.10 Oracle Self-Service Web Applications - Version: 11.5.2 to 11.5.10 Information in this document applies to any platform.

Purpose

Introduction
This note is designed to help you investigate problems with logging into the Home Page with your Applications 11i system. (11.5.2 11.5.10+) The fact you are unable to login to Oracle Applications 11i can be a symptom of a completely different underlying problem. So it is important you determine the root cause of the login failure. The troubleshooting steps provided are intended to help reach that root cause. Login issues can be divided into 2 broad categories. The first category is where login page does not render at all. In other words the main page is completely inaccessible or unuseable. The second category of problem is issues encountered after entering a username & password combination. In this category are things like: errors received because the system is unable to process the login request, or after login the homepage is not rendered. This note does NOT address issues that occur after a successful login; such as forms not launching or javascript errors when selecting a responsibility or missing responsibilities. This note does NOT cover SSO or 10gAS login issues. (For SSO/Portal issues see Note 146469.1 , Note 233436.1, Note 186981.1) Throughout the history of 11i the login process has undergone several changes. In order to provide the most comprehensive troubleshooting guide possible we will include all things that need to be checked. Some of these may not be applicable for your version of Oracle Apps.

Where the check requires a specific version this will be indicated. If you are unsure of your version, do the check and report the results. Some of the recent changes in the login process include: As of FND.G / 11.5.9 maintenance pack, there is a new URL to launch Applications, namely: http://<host name>.<domain name>:<HTTP port>/oa_servlets/AppsLogin See Note 226825.1 - Release 11i, Oracle Application Object Library Mini-pack FND.G As of 11.5.10.CU2 the ICXINDEX.htm page has been modified to re-direct you to oa_servlets/AppsLogin Approach to Troubleshooting ----------------------------------------Error messages will not necessarily indicate the root cause of the problem so it is important to collate information on the scope and nature of the problem. Was it working previously? If so, what has changed, are all the Server processes running? Are all users affected? If not, what is common link to users with problem? If this is a single user issue, does it only affect the one PC or user id? W t are the user level profile options for this particular user? Is the problem confined to one network segment or one PC? Do you get different behaviour in Internet Explorer to Netscape browser? What is your instance architecture? Are you using load balancing, RAC, SSO, etc.? The troubleshooting tips below have been split into the quick checks that can be done easily on the fly, and detailed checks that

may involve bouncing servers and may require editing files/packages so will need to ensure they can be restored if required.

Last Review Date

November 23, 2005
Instructions for the Reader A Troubleshooting Guide is provided to assist in debugging a specific issue. When possible, diagnostic tools are included in the document to assist in troubleshooting.

Troubleshooting Details

Non-intrusive Checks
==================== The checks are divided into 4 categories: iAS, OA Framework, RDBMS and Environment. Note: These checks should not interfere with the running of a live system, so can be run while users are on the system. IAS Checks Note: You MUST be running a supported version of iAS/Apache. Check the certify site on Metalink. Older versions ( 1.3.9 and 1.3.12s have been desupported). Oracle Application Server 1.0.2.1, 1.0.2.1s & 1.0.2.1.x was desupported on 15-MAR-2003 . See Note 210966.1 Oracle Application Server 1.0.0.0.0 & 1.0.1.0.0 was desupported on 31-OCT-2001. See

Oracle Application Server 1.0.0.0.0 & 1.0.1.0.0 was desupported on 31-OCT-2001. See Note 156422.1 Oracle HTTP Server: Apache Server 1.3.9 was desupported on 31-OCT-2001. See Note 221309.1 You can check your version by doing: $IAS_ORACLE_HOME/Apache/Apache/bin/httpd version 1. Validate TNS Connectivity a. Make sure you can TNSPING and sqlplus the database alias used from the APPL_TOP (i.e. After running APPSORA.env). Do: tnsping [sid] sqlplus appsun/appspw sqlplus appsun/appspw@[sid] Also, validate that APPLSYSPUB/PUB can connect b. Change to the $IAS_ORACLE_HOME, run the [sid]_[host].env file. This will set the $ORACLE_HOME to be iAS. Now check that you can TNSPING and sqlplus the database alias. 2. Determine the DBC file in use and make sure it is valid: a. (11.5.9+) Run the profile option query provided in Appendix A when prompted for profile_option_name enter: APPS_DATABASE_ID. If this returns a value, then this is the DBC file name that Apps is expecting to use. Otherwise do: select host_name||'_'||instance_name from v$instance; b. Validate the OS location & permissions of the dbc file. Do: ls al $FND_SECURE/*.dbc (11.5.10+). If $FND_SECURE is not set, then the dbc filebr> This should return the value from step 1ad. The permissions on the file should be 644 and it should be owned my the applmgr user.

c. Verify the contents of the dbc file with the AdminAppServer utility. Do: java oracle.apps.fnd.security.AdminAppServer appsun/appspw STATUS DBC=[path to dbc]/[dbc_name].dbc This should return STATUS: VALID and the current status of AUTHENTICATION: [SECURE/ON/OFF/null] among other values. d. Validate the autoconfig context file (11.5.8+) uses the correct dbc file. Your context file is located in $APPL_TOP/admin and is typically named [SID]_[host].xml. Review the value for s_dbc_file_name, it should match the dbc just tested in 1c. If any of this errors you should run autoconfig and/or $COMMON_TOP/admin/install/adgendbc.sh appsus appspw and retest (this will require iAS restart) 3. Is the web server running and able to render static html? a. Are you able to access the page: http:// <host><domain>:<port>/aplogon.html b. If not, then do: ps fu [applmgr] | grep http (or ps fu [applmgr] | grep http | wc l ) This should return at least 5 http processes running otherwise you webserver may not be startedMake sure you are using the Oracle provided start script in: $COMMON_TOP/admin/scripts/[SID]_[host] If these tests fail you need to review your iAS installation and/or log a TAR. 4. (11.5.2-11.5.9) Check that the CGI environment and mod_plsql is functioning a. Run the following URL:

http://<hostname>:<port>/pls/<SID>/FND_WEB.PING If you are unable to run the procedure below because of an 'internal error' or a 'cannot find host' or a similar error, then it could indicate that there is a problem with the PLSQL Configuration. Failures here may indicate problems with mod_plsqlFollow <Note116715.1> - How to Enable Logging for the PL/SQL Gateway. Redo the test and log a tar with the logs attached. Or this may be a result of a RDBMS issue (For example - invalid packages, rdbms crashed)See RDBMS section below. b. Validate the APPS password used by the plsql gateway. The password may be stored as clear text as a parameter (password= APPSpw) in $IAS_ORACLE_HOME/Apache/modplsql/cfg/wdbsvr.app If the password is encrypted in the file, update the parameter: administrators = system to be administrators = all Then navigate to: http://<hostname>:<port>/pls/<SID>/admin_/ Select the Gateway Database Access Descriptor Settings link Select the Edit icon next to the Database Access Descriptor Name which matches your SID Make sure the Oracle User Name = APPS Enter the Apps user password in the Oracle Password field.

Make sure the Oracle Connect String is the SID for the instance. If you made any changes here you will have to review your autoconfig context file to make sure the changes are permanent. (11.5.10) After validating the above items, you may still get 'Forbidden - You don't have permission to access /pls/<SID>/fnd_web.ping' on this server. This may be by design for enhanced security. Please skip to the next test. 5. Ensure that JDK is installed correctly & is a certified version. a. Get the value of wrapper.bin in: $iAS_ORACLE_HOME/Apache/Jserv/etc This will either point directly to the java executable in use or to $iAS_ORACLE_HOME/Apache/Apache/bin/java.sh. If this points to the java.sh go to step 5botherwise skip to step 5c. b.Open the java.sh File under $iAS_ORACLE_HOME/Apache/Apache/bin. In this file and you will find path to java executable in variable "JSERVJAVA" c. Use the absolute path to the java executable and do: /absolute/path/to/java version e. Check that the version returned is certified by using the certify website on Metalink. Assuming this returns a supported version of JDK. Use the following notes to validate your JDK installation (i.e. that all required patches, autoconfig templates, etc have been completed): Note 304099.1 => if using J2SE Version 5.0 Or Note 246105.1 => if using J2SE 1.4 OR Note 130091.1 => if using JDK 1.3 6. Use the following programs to verify the installation and check that the servlets are functioning.

a. http(s)://<host><domain>:<port>/servlets/IsItWorking (11.5.10) This may fail with: Forbidden You don't have permission to access /servlets/IsItWorking on this server. This is due to enhanced security delivered with the autoconfig templates. Please try test 4b instead. b.http(s)://<host><domain>:<port>/servlets/Hello If this one fails, this indicates an issue with your Jserv set-up. You then need to follow Note 230688.1 to drill down into this problem. 7. Validate that jsp work. a. http(s)://<host><domain>:<port>/OA_HTML/jsp/fnd/aoljtest.jsp If this one fails to render, this indicates an issue with your Jserv set-up. You then need to follow Note 230688.1 to drill down into this problem.Otherwise you enter the values requested, and follow the link at the bottom of the first page to run through this set of diagnostic tests. Report all tests that fail in a TAR. Note: The initial page of this test may show some "missing" files. Depending on your configuration the following missing files are acceptable: apps.zip (is normal to be missing since it has been exploded on $JAVA_TOP (ref : Note 220188.1 )) iAS/mp/jlib/opreopi-rt.jar (Used for Oracle Personalization. Can be ignored if you are not using MP.) iAS/mp/jlib/dmtutil.jar (Used for Data Mining) iAS/dm/jlib/odmapi.jar (Used for Data Mining - If you are using Data Mining, and these are listed as missing, please

see Note 281739.1 ) iAS/portal30/jpdk/lib/partnerApp.jar (If you are not using Portal, this can be ignored.) 8. Check the "session.topleveldomain" setting in the $IAS_ORACLE_HOME/Apache/Jserv/etc/zone.properties This should match the domain you are using as defined in the SESSION_COOKIE_DOMAIN column in ICX_PARAMETERS table. From sqlplus do: select SESSION_COOKIE_DOMAIN from ICX_PARAMETERS; Notes: It is acceptable to have SESSION_COOKIE_DOMAIN set to null You MUST have a valid domain that is composed of 2 or more components (see Bug 2510732). I.e: .oracle is an INVALID domain, but .oracle.com IS a valid domain.

Environment Checks
9. Check the profile options Use the Query in Appendix A in sqlplus to get the profile option values for the following profiles (hint: you can simply enter AGENT when prompted) APPS_FRAMEWORK_AGENT (Application Framework Agent), APPS_JSP_AGENT (Applications JSP Agent), APPS_SERVLET_AGENT (Apps Servlet Agent), APPS_WEB_AGENT (Applications Web Agent)And for ICX_FORMS_LAUNCHER (ICX: Forms Launcher), POR_SERVLET_VIRTUAL_PATH (POR: Servlet Virtual Path),

GUEST_USER_PWD (Guest User Password) Application Framework Agent should be of the format: http://myHost.myDomain.com:8000 Applications JSP Agen http://myHost.myDomain.com:8000 Applications Web Agent should be of the format: http://myHost.myDomain.com:8000/pls/SID Apps Servlet Agent should be of the format: http://myHost.myDomain.com:8000/oa_servlets POR: Servlet Virtual Path should be of the format: oa_servlets ICX: Forms Launcher should be of the foomain.com:8000/dev60er Password should match the GUEST_USER_PWD value in the DBC file (see step 2) For a basic single node install these should be set at the site level and should all be pointing at the same server. For a load balanced or a DMZ setup, this may vary. See Note 217368.1 and Note 287176.1 for more details on these advanced configurations. Internet Explorer can give 'Your session is no longer valid' if the domain name is not specified in these profile options or in the login URL. You MUST have a valid domain that is composed of 2 or more components (see Bug 2510732). I.e. apps.oracle is

an INVALID host.domain combination, but apps.oracle.com IS a valid host.domain. 10. To support non-US character sets, the "ICX_CLIENT_IANA_ENCODING profile option must be set to the IANA character set name of the web server machine. If you don't know this value, you can look it up. After sourcing the $IAS_ORACLE_HOME/[SID]_[host].env file do: echo $NLS_LANG Now using the Oracle codeset from the NLS_LANG environment statement: select tag from fnd_lookup_values where lookup_type = 'FND_ISO_CHARACTER_SET_MAP' and lookup_code = '<ias_nls_lang>'; Take the value returned from the sql and make sure it is the value that is set at the Site level for the ICX_CLIENT_IANA_ENCODING profile option. 11. Is the system in Maintenance Mode? Run the following sql to verify: select fnd_profile.value('APPS_MAINTENANCE_MODE') from dual; If this returns Y, then run adadmin to disable maintenance mode (see Note 291901.1) 12. Are there any additional errors other than that reported directly on screen? variable on your Web Server tier with the following select

Use the 'View Source' option within your Web Browser to see if any additional information is shown. 13. Check browser settings: a. Ensure your browser has cookies enabled. In Netscape this can be checked from Edit -> Preferences -> Advanced. In Internet Explorer, this can be checked from Tools -> Internet Options -> Security Then select the correct zone for your Web Server and click on 'Custom Level' Scroll down to the 'Cookies' section. Oracle Applications uses 'per-session' cookies. It is worth verifying the same problem occurs in both IE and Netscape. Try setting the cookies setting to "prompt" to ensure they are being set correctly. b. With Internet Explorer, you must add your Web Server to the list of 'trusted sites'. You must enter the fully qualified hostname (hostname, plus domain name) of the Release 11i HTTP server node or nodes in the "Trusted sites" security zone, and you must leave the security level of that zone at its default setting of Low. Security levels are set on the Security tab of the Internet Options window. 14. Are there any uncomitted changes in your Autoconfig context file? Run: $AD_TOP/bin/adchkcfg.sh This will create output in: $APPL_TOP/admin/[SID]_[host]/out/[timestamp] Review the report for any pending changes. Run autoconfig (see Note 165195.1) as required. 15. For Windows ONLY: If you get the following error:

Request URI:/OA_HTML/AppsLocalLogin.jsp Exception java.lang.NoSuchMethodError java.lang.StringIndexOutOfBoundsException:String Index out of range: -1 Please see Note 295886.1 for your solution. 16. Do you have any symbolic links in your installed file system? If so, make sure your iAS configuration is setup to follow sym links. For security reasons, by default this is disabled. If you are unsure please see step 32 in the detailed checks. RDBMS Checks 17. Check the GUEST user information. a. Run following SQL: select user_name, start_date, end_date from fnd_user where user_name = 'GUEST'; This should return one row, end_date should be NULL or in advance of today's date, and start_date should be before today's date. b. Validate the GUEST username/password combinations from the DBC file. Using the GUEST_USER_PWD value in the DBC file (see step 2) run the following sql: select fnd_web_sec.validate_login('GUEST',' <GuestPassword>') from dual ;

This should return Yes If this returns N, then do: select fnd_message.get from dual; This should give a reason why the validation failed, or an error message. If this fails with a database error, confirm the problem is not specific to the GUEST user. Redo the SQL command with a different userid (like sysadmin) select fnd_web_sec.validate_login('SYSADMIN','<SYSADMIN PASSWORD>') from dual; Again, this command should return 'Y' if it is working OK. If not, you should reload the jar files to the database using adadmin.

18. Run the following script to ensure there are no invalid objects: select owner, object_name, object_type from all_objects where status != 'VALID' order by owner, object_type, object_name; Ideally, this should return no rows, but some invalid objects may be acceptable, depending on what they are. 19. Check Tablespace free space: Ensure that the database tablespaces have not run out of room. This can result in '-1' errors and/or 'Session expired' errors if the system cannot add data to the ICX tables. To test that rows can be succesfully inserted, you can run the script below:

REM Start of script insert into icx_sessions (session_id, user_id, created_by, creation_date,last_updated_by, last_update_date) values (-99999, -99, -1, sysdate, -1, sysdate) / insert into icx_failures (created_by, creation_date,last_updated_by, last_update_date) values (-1, sysdate, -1, sysdate) / rollback / REM - End of script Note - ensure these two insert statements are rolled back - you do not want these dummy records saved. 20. Review your Alert.log. Does the RDBMS alert log show any errors? What are they? Report them in a TAR. 21. Review any dafied by user_dump_dest in the init<sid>.ora file. Look for recent .trc files. Each failed attempt at login may create a .trc file 22. Validate the FND_NODES table: Run the following sql: select NODE_NAME, NODE_ID , SERVER_ID , SERVER_ADDRESS from FND_NODES; Each SERVER_ID and NODE_ID should be unique. The Node Name for all servers involved for the instance should appear here. We typically expect this to be e hostname or virtual hostname (alias), not the IP address. If the servers do not appear, use OAM to register them.

The SERVER_ADDRESS is optional, but if present should reflect the IP of the host. If necessary, update the IP using the system administrator responsibility.

For 11.5.2 11.5.9 this should return 56 rows. For 11.5.10 this should return 131 rows. (11.5.10+) Note: in 11.5.10 the required plsql patckages can be quickly enabled using the script: $FND_TOP/patch/sql/txkDisableModPLSQL.sql Y

23. Validate the FND_ENABLED_PLSQL table Run the script in Appendix B. For 11.5.2 11.5.9 this should return 56 rows. For 11.5.10 this should return 131 rows. (11.5.10+) Note: in 11.5.10 the required plsql packages can be quickly enabled using the script: $FND_TOP/patch/sql/txkDisableModPLSQL.sql Y : 24. Validate the 'ICX_SESSIONS_S' synonym This should be shown as owned by ICX, if not, drop the synonym and run adadmin to regenerate grants and synonyms. 25. Ensure ICX module is showing as an "Installed" module. Run "adutconf.sql" to check this, particularly important to check if migrating to 11i from previous release of Applications. 26. Validate the ICX_PARAMETERS table. Run the following SQL:

select count(*) from icx_parameters; This should only return one row.

27. Check for Bug 3275654 Run the following SQL: SELECT c.function_id, nvl(b.prompt,c.user_function_name) prompt,c.TYPE,a.menu_id from fnd_responsibility_vl a, fnd_menu_entries_vl b, fnd_form_functions_vl c where a.responsibility_id=21584 and a.menu_id=b.menu_id and b.function_id=c.function_id and c.type in ('WWW','WWK','SERVLET','JSP','FORM','INTEROPJSP'); This should only return one row. If not, apply Patch 3275654 28. Oracle 8i ONLY do the following sql: select fnd_crypto.SmallRandomNumber from dual; If this errors with: ORA-28235: algorithm not available Then make sure you have the file $ORACLE_HOME/lib/naeet.o (7112 bytes) in place. If not, you need to get the file from a known good source (like another instance or from the CD). Again use the size of the file to validate. Next relink the Oracle Executables: cd $ORACLE_HOME/rdbms/lib make -f ins_rdbms.mk install $ORACLE_HOME/bin/genclntsh.sh OA Framework Checks

these are only applicable to OA Framework 5.7 and above. (11.5.9+) 29. Disable all personalizations on the homepage Run the following sql: set serverout on; exec jdr_utils.listcustomizations(/oracle/apps/fnd/framework/navigate/webui/HomePG); If this returns any rows then you have personalizations. Disable your personalizations by logging into forms directly and setting the profile option: Disable Self Service Personal = Yes. Then retest the login. If the homepage works, you need to remove your bad personalization. See Note 304670.1 30. You can turn on OA Framework diagnostics logging in several ways Please refer to Note 139863.1, section 4 Profile Options Reference for more information, if required. Set the following profile options at USER level for one Applications user. It is important this is setup for one user only. You can launch Core Forms directly to gain access to the profile options, as you may not be able to login if you are reading this note! Name Value --------------------------------------------FND: Debug Log Enabled Yes FND: Debug Log Filename /tmp/OAF_Debug.txt FND: Debug Log Module % FND: Debug Log Level STATEMENT Login to Applications using the Apps Username you specified above. Any error or problem you experiance will still occur, but the file /tmp/OAF_Debug.txt should be created with some diagnostics information. Please upload this file to Oracle Support for further analysis. After you have created this diagnostics file, you should disable logging by setting the USER level profile option listed below: Name Value ---------------------------------------------

FND: Debug Log Enabled

No

Detailed checks ============== Note: It is recommended that you have a current backup your system and have no users on the system while performing these checks/tests. 31. Enable detailed logging in iAS Follow the steps in Appendix C to enable detailed logging for iAS. Review the logs for errors. 32.Temporarily enable iAS to use symbolic links. Replace all occurrences of 'Option -FollowSymLinks' for 'Option +FollowSymLinks' in $IAS_ORACLE_HOME/Apache/Apache/conf/httpd.conf and $IAS_ORACLE_HOME/Apache/Apache/conf/httpd_pls.conf and bounce apache. If this is the issue, you should then go back and implement the changes via autoconfig. The value from this is controllable from your Apps Context, see s_options_symlinks . 33. Clear the iAS cache.

To clear the jsp & modplsql caches either rename or delete the sub-directories below following directories and restart apache. This will clear out the compiled JSP classes and cached modplsql modules causing them to be automatically recompiled next time they are accessed. rm -Rf $OA_HTML/_pages/* rm -Rf $COMMON_TOP/_pages/* rm -Rf $IAS_ORACLE_HOME/Apache/modplsql/cache/* Note: Depending on your configuration and patch level all directories may not exist. 34. Check the sqlnet.ora setup in the database Oracle Home. Edit the $ORACLE_HOME/network/admin/<SID>/sqlnet.ora Is tcp.validnode_checking enabled (i.e. = yes)? If so, make sure the parameter tcp.invited_nodes contains an entry for all the nodes involved in your configuration. This parameter, in conjunction with tcp.validnode_checking determines which clients can connect to the database. Or you can temporarily disable node checking by removing the tcp.validnode_checking and retest. This is enabled for security reasons. 35. Modify AppsLocalLogin.jsp to trap exceptions. If you get java error while using the login page like NoClassDefFound or NullPointerException, we need to trap the context of the message. Backup and edit your: $OA_HTML/AppsLocalLogin.jsp. On the line that reads } catch(Exception e) {}

Change to: } catch(Exception e) { } catch(Throwable t) { System.err.println("OSS: Caught throwable in AppsLocalLogin.jsp : " + t.toString()); t.printStackTrace(); } Then bounce Apache and reload the page and more detail should show up in the OACoreGroup.0.stderr file. < status of the Server Security, which was verified in step 2c, is anything other then OFF, try toggling the current setting to see if the nature of the problem changes. Use the following command to temporarily disable the Security Server

After bouncing the apps services and retesting it is important to re-enable the Security. Use the command: java oracle.apps.fnd.security.AdminAppServer appsun/appspw AUTHENTICATION ON DBC=<full path to DBC file name> 37. Check file permissions are not causing any problems. Check file permissions are appropriate. In particular, the liboci806jdbc.so (.sl on HP, .DLL on NT) shared library should have read, write and execute permissions. It may be advisable to temporarily change all permissions in $JAVA_TOP to read, write and execute to see if it resolves the problem. On UNIX, you can use the command 'chmod -R 777 $JAVA_TOP', assuming

$JAVA_TOP has been set correctly in your environment. 38. Regenerate JAVA_TOP: Ensure you have a full backup of your system! To run this process, run adadmin and select Maintain Applications Files then Copy Files to Destinations. 39. Generate database trace and SQL*Net traces. To set-up SQL*Net Trace on the Web Server set TRACE_LEVEL_CLIENT = 16 in the $TNS_ADMIN/SQLNET.ORA file. This should be in the iAS file system and not in the 8.0.6. Oracle Home. By default the SQL*Net trace file will be called 'sqlnet.trc'. Logging a TAR or SR - Checklist of things to send to Oracle Support ********************************************************************************* IMPORTANT NOTE - the majority of the information required by Oracle Support for troubleshooting these types of issues can be obtained easily by using the Applications Remote Diagnostic Agent (APPS RDA) This utility is available from and described in Note 161474.1 Please use this mechanism where possible to send Oracle Support the required configuration and log file information. ********************************************************************************* Note 161474.1 Please use this mechanism where possible to send Oracle Support the required configuration and log file information. *********************************************************************************

1. Files should be sent as a SINGLE attachment. 2. Identify any other external influences: Are there any proxy servers or firewalls between the Database Server to Web Server, and the Web Server to the client PC? If so, try using a different PC within the firewall or temporarily disable the Proxy for that particular client. The more detail you can provide about the architecture of the instance the better. 3. Are you using any external authentication (i.e. SSO) or portal? Does the issue reproduce when using direct login (i.e. by-passing sso/portal) @if portal is involved see the portal section of Internal Note 273449.1 4. Are you using SSL? If using SSL, does not using SSL change or resolve the problem? What services are running in ssl mode? Load balancer, forms, iAS, sqlnet, etc.? 5. Screen output should ideally be sent in as screen dumps inserted into MS Word or similar package. This can be achieved by pressing the <Printscreen> key in Windows. This puts the screen into the Windows Clipboard, which can then be pasted into another application as a graphic image. Otherwise if output required is from a browser screen, the text can be highlighted then copied/pasted. 6. Upload the Apache log files (see Appendix C, step 2) 7.Does changing the value of APPLICATIONS_HOME_PAGE (Self Service Personal Home Page mode) profile option result in any change in the issue? Upload the results of each step in this document. Appendix A ----------------------------Profile Option Query ----------------------------REM START OF SQL

REM List values for profile options, for a given profile option friendly name REM profile_name is case insensitive and searches for partial value set serveroutput on set echo on set timing on set feedback on set long 10000 set linesize 120 set pagesize 132 column SHORT_NAME format A30 column NAME format A40 column LEVEL_SET format a15 column CONTEXT format a30 column VALUE format A60 wrap spool profile_options.txt select p.profile_option_name SHORT_NAME, n.user_profile_option_name NAME, decode(v.level_id, 10001, 'Site',

10002, 'Application', 10003, 'Responsibility', 10004, 'User', 10005, 'Server', 10007, 'SERVRESP', 'UnDef') LEVEL_SET, decode(to_char(v.level_id), '10001', '', '10002', app.application_short_name, '10003', rsp.responsibility_key,

'10005', svr.node_name, '10006', org.name, '10004', usr.user_name, '10007', 'Serv/resp', 'UnDef') "CONTEXT", v.profile_option_value VALUE from fnd_profile_options p, fnd_profile_option_values v, fnd_profile_options_tl n, fnd_user usr, fnd_application app, fnd_responsibility rsp, fnd_nodes svr, hr_operating_units org

where p.profile_option_id = v.profile_option_id (+) and p.profile_option_name = n.profile_option_name and upper(n.user_profile_option_name) like upper('%&profile_name%') and and usr.user_id (+) = v.level_value rsp.application_id (+) = v.level_value_application_id

and rsp.responsibility_id (+) = v.level_value and app.application_id (+) = v.level_value and svr.node_id (+) = v.level_value and org.organization_id (+) = v.level_value order by short_name, level_set; spool off REM END OF SQL Appendix B

---------------------------------FND Enable Plsql Query --------------------------------select count(*) from FND_ENABLED_PLSQL where enabled = 'Y'

and plsql_name in ( 'ABM_APP', 'AME_ACTIONS_UI', 'AME_ADMIN_UI', 'AME_ATTRIBUTES_UI', 'AME_CONDITIONS_UI', 'AME_GROUPS_UI', 'AME_RULES_UI', 'AME_TEST_UI', 'AME_UI', 'AP_CARD_VERIFY_PKG.SUBMITUPDATE', 'AP_CARD_VERIFY_PKG.VERIFY', 'BIS_CORRECTIVE_ACTION_PVT.GENERATEALERTS', 'BIS_CORRECTIVE_ACTION_PVT.UNSUB_LAUNCH_JSP', 'BIS_INTERMEDIATE_LOV_PVT.DIM_LEVEL_VALUES_QUERY', 'BIS_LOV_PUB.MAIN', 'BIS_LOV_PUB.LOV_SEARCH', 'BIS_LOV_PUB.LOV_DATA', 'BIS_LOV_PUB.LOV_BUTTONS', 'BIS_LOV_PUB.EDITLOVJSCRIPT',

'BIS_LOV_PUB.LOVJSCRIPT', 'BIS_PORTLET_PMREGION.BIS_LOV_PUB_MAIN', 'BIS_PORTLET_PMREGION.DIM_LEVEL_VALUES_QUERY', 'BIS_PORTLET_PMREGION.EDITDIMENSIONS', 'BIS_PORTLET_PMREGION.LOV_DATA', 'BIS_PORTLET_PMREGION.SETINDICATORS', 'BIS_PORTLET_PMREGION.SHOWDIMENSIONS', 'BIS_PORTLET_PMREGION.STRDIMENSIONS', 'BIS_INDICATOR_REGION_UI_PVT.SETINDICATORS', 'BIS_INDICATOR_REGION_UI_PVT.SHOWDIMENSIONS', 'BIS_INDICATOR_REGION_UI_PVT.STRDIMENSIONS', 'BIS_INDICATOR_REGION_UI_PVT.EDITDIMENSIONS', 'BIS_BUSINESS_VIEWS_CATALOG.QUERY', 'BISVIEWER', 'BISVIEWER_PUB.SHOWREPORT', 'BISVIEWER.SHOWREPORT', 'BISVIEWER.DISPLAYERROR', 'BISVIEWER.DISPLAYERRORMESSAGE',

'BISVIEWER.DRILLDOWN', 'BIS_TREND_PLUG.LAUNCHPAGEFROMREPORT', 'BIS_PMV_DRILL_PUB.DRILLACROSS', 'BIS_PMV_DRILL_PVT.DRILLACROSS', 'BIS_PMV_DRILL_PVT.DRILLDOWN', 'BIS_RG_SCHEDULES.UNSUBSCRIBEFROMREPORT', 'BIS_TREND_PLUG.LAUNCHLINKEDPAGE', 'BIS_TREND_PLUG.SHOWREPORTFORTITLE', 'BIS_TREND_PLUG.VIEW_REPORT_FROM_PORTLET', 'BIS_TREND_PLUG.SELECT_REPORTS', 'BIS_TREND_PLUG.CUSTOMIZEPORTLET', 'BIS_RG_SCHEDULES_PVT.SHOWDEFAULTSCHEDULEPAGE', 'BIS_RG_SCHEDULES_PVT.SCHEDULEFUNCTION', 'BIS_SAVE_REPORT.RETRIEVE_FOR_PHP', 'BIS_SAVE_REPORT.RETRIEVE_FOR_PDF', 'BSC_APP.LAUNCH', 'BSC_APP.LAUNCH_JSP', 'BSC_PORTLET_UI_WRAPPER.SHOW_INFO_PAGE',

'BSC_PORTLET_UI_WRAPPER.SHOW_CUSTOM_VIEW_IMAGE', 'BSC_PORTLET_UI_WRAPPER.LAUNCH_JSP', 'BSC_PORTLET_UI_WRAPPER.LAUNCH_IMGSRCURL_JSP', 'BSC_PORTLET_UI_WRAPPER.LAUNCH_FUNCTION', 'FII_AP_DRILL_ACROSS', 'FII_FDHM_PKG.LAUNCH', 'FII_GL_SRC_INV_PKG', 'FII_PARAMETER_FIIAPIPY', 'FII_PARAMETER_FIIAPTEX', 'FII_PARAMETER_FIIARCLD', 'FII_PARAMETER_FIIARTRD', 'FII_PARAMETER_FIIFANBV', 'FII_PARAMETER_FIIGLSUM', 'FII_PARAMETER_FIIAPIPY.PARAMETER_ACTIONVIEW', 'FII_PARAMETER_FIIAPIPY.PARAMETER_FORMVIEW', 'FII_PARAMETER_FIIARCLD.DRILLDOWN', 'FII_PARAMETER_FIIARCLD.PARAMETER_ACTIONVIEW', 'FII_PARAMETER_FIIARCLD.PARAMETER_FORMVIEW',

'FII_PARAMETER_FIIARTRD.PARAMETER_ACTIONVIEW_FIIARTRD', 'FII_PARAMETER_FIIARTRD.PARAMETER_FORMVIEW_FIIARTRD', 'FII_PARAMETER_FIIAPTEX.PARAMETER_ACTIONVIEW', 'FII_PARAMETER_FIIAPTEX.PARAMETER_FORMVIEW', 'FII_PARAMETER_FIIFANBV.PARAMETER_ACTIONVIEW', 'FII_PARAMETER_FIIFANBV.PARAMETER_FORMVIEW', 'FII_PARAMETER_FIIGLSUM.GLDRILLDOWN', 'FII_PARAMETER_FIIGLSUM.PARAMETER_ACTIONVIEW', 'FII_PARAMETER_FIIGLSUM.PARAMETER_FORMVIEW', 'FND_APPLET_LAUNCHER', 'FNDGFM', 'FND_FILE_UPLOAD', 'FND_GFM.GET', 'FND_GFM.TEST', 'FND_HELP.GET', 'FND_HELP.SEARCH', 'FND_HELP.ADVANCED_SEARCH_PAGE', 'FND_HELP_BUILDER', 'FND_ICX_LAUNCH',

'FND_WEB', 'GL_JAHE_PKG.LAUNCH', 'GL_WEB_PLSQL_CARTRIDGE', 'HRI_PARAMETERS', 'ICX_ADMIN_SIG', 'ICX_DEFINE_PAGES', 'ICX_UTIL.LOV', 'ICX_UTIL.LOVHE 'ICX_UTIL.LOVVALUES', 'JTF_BIS_UTIL', 'JTF_BIS_MIGRATERELATED_PVT', 'JTF_BISCHARTPLUG_PUB', 'JTF_BISFAVORITEPLUG_PUB', 'JTF_BISJAVASCRIPT_PUB', 'JTF_BISRELATED_PVT', 'JTF_BISUTILITY_PUB', 'JTF_BIS_CHART_PLUG', 'JTF_BIS_FAVORITE_PLUG', 'JTF_TERR_CHANGES_PARAM_PVT',

'JTF_TERR_CHANGES_REPORT_PVT', 'JTF_TERR_DEFINI_PVT', 'JTF_TERR_DEFINITION_REPORT_PVT', &; 'ORACLEAPPS', 'ORACLEAPPS.DISPLAYLOGIN', 'ORACLEAPPS.DMM', 'ORACLEAPPS.VL', 'ORACLEOASIS', 'ORACLEMYPAGE', 'ORACLESSWA', 'ORACLECONFIGURE', 'ORACLENAVIGATE', 'PER_IMAGE_UPLOAD_PKG.LOAD', 'POR_REDIRECT.REQSERVER', 'WF_MONITOR.GETPROCESS', 'WF_GETRESOURCES', 'WF_MONITOR.GETRESOURCE', 'WF_MONITOR.BUILDMONITORURL', 'WF_TASKFLOW.GET_FLOW_INSTANCE', 'WFA_HTML.SHOW_PLSQL_DOC',

'WF_TASKFLOW.GET_FLOW_DEFINITION', 'WF_TASKFLOW.GET_TRANSLATIONS');

Appendix C ------------------------------------------------------------Setting up detailed logging on the web server: --------------------------------------------------------------

1. Shut the HTTP Server (Apache/iAS) down. - You can grep for the 'httpd' process to verify it is down 2. Rename (or delete) the following files so we get a fresh copy of them: <IAS_ORACLE_HOME>/Apache/Jserv/logs/jserv.log <IAS_ORACLE_HOME>/Apache/Jserv/logs/forms.log <IAS_ORACLE_HOME>/Apache/Jserv/logs/mod_jserv.log <IAS_ORACLE_HOME>/Apache/Jserv/logs/jvm (the whole directory if it exists) <IAS_ORACLE_HOME>/Apache/Apache/logs/access_log* <IAS_ORACLE_HOME>/Apache/Apache/logs/error_log <IAS_ORACLE_HOME>/Apache/Apache/logs/error_log_pls (if it exists)

Now we will turn on debugging in the log files: 3. Modify the $IAS_ORACLE_HOME/Apache/Jserv/etc/jserv.conf file. Search for the parameter: ApJServLogLevel notice Change the 'notice' to 'info' 4. Modify the $IAS_ORACLE_HOME/Apache/Jserv/etc/jserv.properties file. Search for the following section: log=false Change this to be log=true and Change log.channel=false To be: log.channel=true 5. Modify the $IAS_ORACLE_HOME/Apache/Jserv/etc/forms.properties file. Search for the following section: log=false Change this to be log=true and Change: log.channel=false

To be

log.channel=true

6. Modify the $IAS_ORACLE_HOME/Apache/Apache/conf/httpd.conf file. Search for: LogLevel Set the LogLevel to 'info' from its current value. 7. Modify the $IAS_ORACLE_HOME/Apache/Apache/conf/httpd_pls.conf file (if it exists). Search for the following parameter LogLevel Set the LogLevel to 'info' from its current value. 8. Modify the: $IAS_ORACLE_HOME/Apache/modplsql/cfg/wdbsrv.app add the line: debugModules=Info immediatly after the line: custom_auth = CUSTOM 9. Start the HTTP Server. 10. Run a test to recreate the error, then upload the log files from step 2.

References

Bug 2510732 - Cannot Login To 11.5.7 If A Single Dot Domain Was Used During Rapidwiz Install Note 116715.1 - How to Enable Logging for the PL/SQL Gateway Note 130091.1 - Upgrading Oracle Applications 11i to use JDK 1.3 Note 135027.1 - Troubleshooting Personal Home Page Login Problems in 11i Note 135949.1 - Troubleshooting the Personal Home Page Login Problems in 11.5.x Note 139863.1 - Configuring and Troubleshooting the Self Service Framework with Oracle Applications (latest version) Note 146469.1 - Configuring Oracle Applications 11i With Oracle Portal Note 150597.1 - Troubleshooting Oracle Applications 11.5.1 PHP Login Issues Note 161474.1 - Oracle Applications Remote Diagnostics Agent (APPS_RDA) Note 165195.1 - Using AutoConfig to Manage System Configurations with Oracle Applications 11i Note 186981.1 - Oracle Application Server with Oracle E-Business Suite Release 11i FAQ

Note 217368.1 - Advanced Configurations and Topologies for Enterprise Deployments of E-Business Suite 11i Note 226825.1 - About Oracle Applications Application Object Library Mini-pack FND.G Note 230688.1 - Basic ApacheJServ Troubleshooting with IsItWorking.class With Applications 11i Note 233436.1 - Installing Oracle Application Server 10g with Oracle E-Business Suite Release 11i Note 246105.1 - Upgrading to J2SE 1.4.2 with Oracle Applications 11i Note 287176.1 - DMZ Configuration with Oracle E-Business Suite 11i Note 291901.1 - Maintenance Mode - A New Feature in 11.5.10 Note 295886.1 - Request URI:/OA_HTML/AppsLocalLogin.Jsp Exception Java.Lang.Nosuchmethoderror Note 304099.1 - Using J2SE Version 5.0 with Oracle E-Business Suite 11i Note 304670.1 - How to remove an OA Framework personalization

Errors

ORA-1422 "exact fetch returns more than requested number of rows" ORA-28235 algorithm not available

Keywords

'APPSLOCALLOGIN.JSP' 'AUTHENTICATION' 'SELF~SERVICE~PERSONAL~HOME~PAGE~MODE' 'INTERNET~EXPLORER' 'CANNOT~LOGIN' 'NETSCAPE' 'ORACLEMYPAGE' 'LOGIN~PAGE'