Oracle OAS 5.5 integration with Oracle OAM

[Zaheer]

Aoa Dear,
I have completed Oracle OAS 5.5 integration with Oracle OAM. Finally, when i access URL, webgate presents standard OAM password page but after authentication a white screen appears displaying following text:

Bad Oracle Access Manager Request

Unable to process request due to unexpected error


and the URL window displays a URL as follows:

hostIP:7777/obrar.cgi?encreply=...

In overall config i am using Oracle OID and EBS as well.

Best Regards

[ErmanArslansOracleBlog]

Send me the webgate log + OAM Server log.
Also ensure you have session stickyness enabled on the Load Balancer (if you have load balancer in front of the webgates)

What documentation did you follow for implementing this conf? Is it this one -> OBIEE 12c|OAS: How To Configure OBIEE 12c with Oracle Access Manager (OAM) SSO using OHS 12c WebGates for OAM (IAM) 12c and OID 12c (IDM) (Doc ID 2313210.1)

[Zaheer]

NO, I have followed following document (As my OAM and OID are on 11g):

OBIEE 12c: How To Configure OBIEE 12c with Oracle Access Manager (OAM) SSO using OHS 12cWebGates for OAM (IAM) 11g and OID 11g (IDM) (Doc ID 2097038.1)

I will try to send you the logs in a while as logs have to be downloaded after following a long process of my organization.

My webgate is already working fine with OBIEE 11 and EBS 12.2. So session stickyness is already enabled on Load Balancer.


Best Regards

[Zaheer]

Aoa,
I am unable to get logs out of my company's network. Can you please give me a general guidline regarding what all should i look for

[ErmanArslansOracleBlog]

Check the webgate.log or oblog.log.
Check for the keyword -> ERROR

Send me what ERROR you have there..

Don't send me the whole log.. Just the error message, so that I can see the situation and recommend you some actions..

If you can't do that, then you may try doing a search on Oracle Support with the keyword "obrar.cgi?encreply Bad Oracle Access Manager Request".. You can check the document returned by your search and see if the cases documented there are related to your case or not.. If you find a related one, you may consider taking the actions provided in that document.

[Zaheer]

Aoa,

Webgate.log shows following errors:


ACCESS_GATE ERROR 0x00001531

/ade/syseng_NGAMAC_12.2.1.4.0_LINUX.X64_slaveView_169/ngamac/src/palantir/webgate2/src/redirect.cpp:936

ecid^005ldDltzkG3NA1_rt0FyY00042G000003 rid^0 "The obrareq.cgi, obrar.cgi, DCCCtxCookie, logout redirect message,

or any other encrypted string has failed integrity check." HMAC cksum is null or empty^400






ACCESS_GATE ERROR 0x00001531

/ade/syseng_NGAMAC_12.2.1.4.0_LINUX.X64_slaveView_169/ngamac/src/palantir/webgate2/src/redirect.cpp:1020  

ecid^005ldDltzkG3NA1_rt0FyY00042G000003 rid^0 "The obrareq.cgi, obrar.cgi, DCCCtxCookie, logout redirect message,

or any other encrypted string has failed integrity check." HTTPStatus^400 requestedURL^/obrar.cgi

[ErmanArslansOracleBlog]

Consider the action plans given in the following MOS notes;

Oracle Access Manager (OAM) Authentication Via Detached Credential Collector Fails "Bad Access Manager Request"(Doc ID 2784534.1)
Oracle Access Manager 11g (OAM 11.1.2.3.x) After applying April CVE Patch (27373151) on OAM Server and Webgate - Protected Resources Do Not Work - Error "Bad Oracle Access Manager Request" (Doc ID 2610269.1)

[Zaheer]

Ok. Thanx