Wednesday, June 27, 2012

OAM Access Gate Configuration : Not responding AM Service status mismatch

We were getting following error while configuring OAM access gate: Not responding AM Service status mismatch, even though primary OAM server host and port were correctly specified.




Resolution

It was quite simple: Modify the Access Gate configuration for ASDK client. Change the Access Management Service from Off to On.



OAM configuration tool - OAMCFG-60015: Invalid value detected for oam_aaa_host or oam_aaa_port

We were using OAM configuration tool from our OHS install to create webgate id, and we faced following issue:


[oracle@dalgcmap02pl oracle]$ /opt/app/oracle/jrockit-jdk1.6.0_24-R28.1.3-4.0.1/bin/java -jar /opt/app/oracle/fmw_home/oracle_common/modules/oracle.oamprovider_11.1.1/oamcfgtool.jar mode=CREATE app_domain="my_app_domain" protected_uris="$PROTECTED_URI_LIST" public_uris="$PUBLIC_URI_LIST" app_agent_password=mypassword ldap_host=myldaphost ldap_port=389 ldap_userdn="cn=orcladmin" ldap_userpassword=mypassword oam_aaa_host=myoamhost
01i.hti.com oam_aaa_port=6021
Jun 21, 2012 3:12:15 AM oracle.security.oam.oamcfg.OAMCfgGlobalConfigHandler constructGlobalConfig
INFO: Processed input parameters
Jun 21, 2012 3:12:16 AM oracle.security.oam.oamcfg.OAMCfgGlobalConfigHandler constructGlobalConfig
INFO: Could not initialize global config::OAMCFG-60015: Invalid value detected for oam_aaa_host or oam_aaa_port.
Jun 21, 2012 3:12:16 AM oracle.security.oam.oamcfg.OAMCfgTool main
WARNING: OAMCFG-60083: OAM Configuration did not complete successfully. Refer log for details
Jun 21, 2012 3:12:16 AM oracle.security.oam.oamcfg.OAMCfgTool main
WARNING:  Stack trace::
      oracle.security.oam.oamcfg.OAMCfgGlobalConfigHandler:intializeGlobalConfig()  in file OAMCfgGlobalConfigHandler.java:1439
      oracle.security.oam.oamcfg.OAMCfgGlobalConfigHandler:constructGlobalConfig()  in file OAMCfgGlobalConfigHandler.java:1786
      oracle.security.oam.oamcfg.impl.OAMCfgToolConfigHandler:handleConfig()  in file OAMCfgToolConfigHandler.java:67
      oracle.security.oam.oamcfg.OAMCfgTool:main()  in file OAMCfgTool.java:152



We certainly verified that http://myoamhost:port/access/oblix that access server was created and 6021 port was correct as well. The only new thing we were trying was Simple vs Open authentication, but host and port for OAM were correct. Error was quite misleading. I think only hope was to decrypt the Java class to figure out where the error was coming from. Upon decrypting OAMCfgGlobalConfigHandler, found out that it was taking lot more parameters than mentioned in user guide.

Resolution
  • We had to provide oam_aaa_mode=Simple in parameter list