• Find us:
    +1-669-900-5138   |   +44-203-372-5553
  • Free Newsletter

    Get Latest Updates

  • Make Training Enquiry


    Company

  • Categories

  • Archive

  • Policy distribution is failing in OES 10g

    Posted by "" in "oes, weblogic" on 2013-03-15

    Hi All,

    I took a gap to do a new post but I feel I came up with worthy one. If you are using OES 10g environment, Admin in CP5 and you are distributing policies through OES Admin console or ASI console, then you might witness this issue.

    In my case Oracle Support person aided me to resolve this issue.

    I have created a new application in OES Admin console and couple of policies, actions and resources. While trying to distribute the policies from console by selecting only the specific application (check-box), it shows a pop up window with Percentage complete as 0% and status as Starting…

    The exception I see in the logs is:

    2013-03-15 07:44:04,919 [[ACTIVE] ExecuteThread: ‘4’ for queue: ‘weblogic.kernel.Default (self-tuning)’] ERROR com.bea.security.entitlements.admin.beans.SessionState – no policy information is available for specified id
    com.bea.ales.management.exception.ManagementException: no policy information is available for specified id
    at com.bea.ales.management.PolicyDistributor.handleException(PolicyDistributor.java:179)
    at com.bea.ales.management.PolicyDistributor.getDistributionStatus(PolicyDistributor.java:165)

    The SSM is weblogic and I am not sure if this error could occur in other type of SSMs.

    Here are the workarounds I tried:

    1. Deleted the state.chk, contents of policyA and policyB folders of SSM instance.
    2. Restarted OES Admin Server.
    3. Restarted SSM servers (weblogic servers)
    4. Ran the script removeDistributionLock.sh present in $ALES32-ADMIN/bin folder. Basically this script removes the distribution lock when the distribution is in progress. Only after the lock is removed you will be able to trigger another distribution as otherwise you will see the message “Distribution is already in progress” message in ASI console.
    5. Tried distribution again after running the script removeDistributionLock.sh without any luck.

    What is the root cause?

    When we trigger policy distribution of a specific application to SSMs, the OES Policy Distributor component distributes all the applications from scratch to SSMs which will take ages to complete if the applications are huge in size.

    Solution:

    1. There is a parameter PD.simpleDistributionThreshold in WLESblm.properties (located under $ALES32-ADMIN/config) which has 1000 value by default and it is commented out. It specifies a threshold value for policy distribution. So if we have to distribute only few policies then we can specify small value say 10-15. Uncomment the line and specify 15 and save the changes.
    2. Then run the removeDistributionLock.sh script.
    3. Stop the SCM server.
    4. Stop the OES Admin server.
    5. Start the SCM server.
    6. Start the OES Admin server.
    7. Goto ASI console, select the application and click Distribute. After couple of minutes I got the distribution result as 100%.
    8. Once it is successful, restore the actual value of PD.simpleDistributionThreshold. Save the changes. Repeat the steps 3 – 6.
    9. If it did not succeed for you, login to OES Admin console. Goto application and click on tab Distribution and verify the status of distribution. If the distribution ID value is negative then distribution has not completed succesfully. Then repeat the steps 2-7 again.
    10. If the issue still persists even after executing step 9, then apply CP6 to OES Admin and reproduce the issue.

    Any suggestions/comments are most welcome.

    2 Responses to “Policy distribution is failing in OES 10g”

    1. krishna says:

      Hi Mahindra,

      Thanks for your post…We are also facing the similar problem.. But this is intermittent in our environment. We will apply your suggested solution and let you know the result..

      Thank you

    2. krishna says:

      During the distribution process we are getting this exception

      Start Policy Distribution, time is:
      policy from file /home/oracle/oesTestPolicy/distribution
      class com.wles.blm.BLMDBException: Distribution failed while computing update:ORA-00001: unique constraint (OES_USER.SS_ROLE_ENF_UI) violated
      Policy Loader Exception occurred while running. Distribution failed while computing update:ORA-00001: unique constraint (OES_USER.SS_ROLE_ENF_UI) violated

      This happens with every rule/grant we try to create

      Error Codes
      —————————————————
      ORA-00001: unique constraint (OES_USER.SS_ROLE_ENF_UI) violated

    Leave a Reply



  • K21 Technologies is among the most experienced Oracle Gold Partner for Identity Access Management service providers. We work with application development companies and in-house technology division to help achieve significant returns on their IT security investment. Our clientele includes some of the globally renowned corporate, which speaks of our expertise in our field.

    We have the most talented and experienced team that can swiftly deploy security solutions even in complex IT ecosystem. Our clients highly appreciate our timely implementation, interactive training, on-demand support and community resources.
  • CONTACTS

    K21 Technologies
    8 Magnolia Place, Harrow,
    London, HA2 6DS

    UK: +44(0)7476444481
    USA: +1-888-414-1821

  • 2014, K21 Technologies. All rights reserved DMCA.com
  • TOP
    TOP