DISQUS

Ron · 2 years ago

Thanks for posting this, I found it quite helpful.

Dilshod · 1 year ago

Thanks! It helped very much!

FYI: There is an updated metalink document(Note:468621.1)as of 3/13/2008.https://metalink.oracle.com/metalink/plsql/f?p=130:14:862239773707049499::::p14_database_id,p14_docid,p14_show_header,p14_show_help,p14_black_frame,p14_font:NOT,468621.1,1,1,1,helvetica

The document has a link to an interim patch for version 10.1.3.1: Patch 5726819.

Dan · 1 year ago

@Dilshod Thanks for the tip! I'll have to let the admins that originally hit this issue know that there's a patch available now (though the workaround worked well for them).

Subbu · 1 year ago

Hi Dan,

I have an exact similar issue, but not on oracle. The architecture is ------.
SSL is terminated on the load balancer and apache HTTP 2.0.59 is running http only and not https. Application (running on tomcat), perhaps due to the
use of absolute URLs when writing HTML, is not letting the content in general to work properly. We have mixed protocol references (https and http) due to the content. So would like to configure in apache's httpd.conf something that spoofs https for the application. Something on the lines of Oracle's mod_certheaders.so.

LoadModule certheaders_module modules/mod_certheaders.so
SimulateHttps on (inside the virtual host)

Have tried mod_certheaders.so but apache fails to start saying: Cannot load /modules/mod_certheaders.so into server:
/modules/mod_certheaders.so: undefined symbol: ap_ctx_set
---
$ file mod_version.so mod_version.so: writable, executable, regular file, no
read permission
$ file mod_certheaders.so mod_certheaders.so: ELF 32-bit LSB shared object,
Intel 80386, version 1 (SYSV), not stripped
---
Any easy way to accomplish this on apache?
---
(Reference:
http://www.dannorris.com/2007/11/01/using-mod_r...
)
(Reference:
http://www.netscalerkb.com/netscaler_tricks_and...
)
---
Thanks,
Subbu

jiffyjeff · 1 year ago

Fantastic -- thanks for the insights... I was having a hard time with two web apps running in the same OC4J clobbering each other's JSESSIONIDs. By setting the line “-Doracle.useSessionIDFromCookie=true” in startup Java options (not OC4J option), the apps will use an existing JSESSION ID if it's set. Works great!

Dan Norris · 1 year ago

Great, thanks for the feedback and I'm glad it worked well for you!

female · 1 year ago

Thanks,very interesting and useful post

frank · 7 months ago

Hello, I am new with the SSL and Load Balancer. I am guessing how the flow works with a Big Ip (this works and ssl end termination). I send a https request (443) to the BigIp via and Internet Explorer.then the BigIp redirects the request to one web node , the node returns the response to the Big Ip, so the door is only the Big Ip.
I don´t undestand very well the parameter Port 443 , suppose we have <VirtualHost *:4430> (same as your example) so the Big Ip convert the request to 443 to 4430
I really apreciate you possible help.
Thanks in advance

Francisco Javier Muñoz Fdez
Regards

Bill Zeledon · 2 months ago

Good information.
Question: how was oc4j directives with dynamic mount points dealt with?
An Metalink Doc Id: 739881.1 goes in detail, however I did see it this document.
In version 10.1.3.4, this is an important part in restricting Web Application Access By VirtualHosting.