Troubleshooting OracleAS Single Sign-On

Forbidden Error When Accessing OracleAS Single Sign-On Administration
When trying to access the OracleAS Single Sign-On Administration page, users see the following error:

Forbidden. You don't have permission to access .../pls/orasso/orasso.home on this server.


$/home/oracle/orainfra/jdk/bin/java -jar /home/oracle/orainfra/sso/lib/ossoreg.jar -oracle_home_path /home/oracle/orainfra -site_name sys38.doyen.in:389 -config_mod_osso TRUE -mod_osso_url http://sys38.doyen.in:7777 -u oracle


[oracle@sys38 ~]$ /home/oracle/orainfra/jdk/bin/java -jar /home/oracle/orainfra/sso/lib/ossoreg.jar -oracle_home_path /home/oracle/orainfra -site_name sys38.doyen.in:389 -config_mod_osso TRUE -mod_osso_url http://sys38.doyen.in:7777 -u oracle

Parameters passed to SSO registration tool :
param0:-oracle_home_path param1:/home/oracle/orainfra param2:-site_name param3:sys38.doyen.in:389 param4:-config_mod_osso param5:TRUE param6:-mod_osso_url param7:http://sys38.doyen.in:7777 param8:-u param9:oracle
-DinstallType=
-DoldOracleHome=
-DoldOHSUser=root
Check /home/oracle/orainfra/sso/log/ssoreg.log for details of this registration
SSO registration tool finished successfully.



Tue Jan 08 11:44:47 IST 2008 =========================================
Tue Jan 08 11:44:47 IST 2008 OracleAS Single Sign-On Registration Tool
Tue Jan 08 11:44:47 IST 2008 =========================================
Tue Jan 08 11:44:47 IST 2008 Parameters passed to SSO registration tool :
param0:-oracle_home_path param1:/home/oracle/orainfra param2:-site_name param3:sys38.doyen.in:389 param4:-config_mod_osso par
am5:TRUE param6:-mod_osso_url param7:http://sys38.doyen.in:7777 param8:-u param9:oracle
Tue Jan 08 11:44:47 IST 2008 -DinstallType=
Tue Jan 08 11:44:47 IST 2008 -DoldOracleHome=
Tue Jan 08 11:44:47 IST 2008 -DoldOHSUser=root
Tue Jan 08 11:44:47 IST 2008 SSO database is jdbc:oracle:thin:@ldap://sys38.doyen.in:389/test,cn=oraclecontext
Tue Jan 08 11:44:48 IST 2008 Creating sso partner
Tue Jan 08 11:44:48 IST 2008 Mod_osso file /home/oracle/orainfra/Apache/Apache/conf/osso/osso.conf already exists.
Tue Jan 08 11:44:48 IST 2008 The existing partner application will be removed.
Tue Jan 08 11:44:49 IST 2008 Executing command: /home/oracle/orainfra/dcm/bin/dcmctl ssoPropagate -u oracle -f /home/oracle/
orainfra/Apache/Apache/conf/osso/osso.txt -out /home/oracle/orainfra/Apache/Apache/conf/osso/osso.conf -d -v
Tue Jan 08 11:44:55 IST 2008 dcmctl returned exit value 0
Tue Jan 08 11:44:55 IST 2008 SSO registration tool finished successfully.



A.1.6 Forbidden Error When Accessing OracleAS Single Sign-On Administration
When trying to access the OracleAS Single Sign-On Administration page, users see the following error:

Forbidden. You don't have permission to access .../pls/orasso/orasso.home on this server.

Problem

This message may appear when you try to access the single sign-on administration URL. Perhaps the password for the ORASSO schema was changed in the database, but not in the dads.conf file.

Solution

Perform these steps:

Update ORACLE_HOME/Apache/modplsql/conf/dads.conf.

Restart the Oracle HTTP Server:

ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server

If the schema password is correct to begin with, check the Oracle HTTP Server error log for error messages: ORACLE_HOME/Apache/Apache/logs/error_log.


https://metalink.oracle.com/metalink/plsql/f?p=130:10:7255648600606491996::::docId,knowledge,archive,bug,numHits:368806.1,TRUE,TRUE,TRUE,100