Oracle Apps 11i /oa_servlets/AppsLogin – Authentication Engine

Did you ever wonder “how Apps 11i determines where to direct for authentication – Local (FND_USER) or  SSO authentication” ?

What is ICXINDEX.html (in 11.5.9 or early 11.5.10) or AppsLogin or AppsLocalLogin.jsp ?

How to troubleshoot login issue ?

If you type http://hostname.domainname:port  (where port is web server port for 11i)

1.Web Server (9iAS 1.0.2.2.2) checks its configuration file $IAS_ORACLE_HOME/Apache/Apache/conf/httpd.conf for parameters

DocumentRoot   – $COMMON_TOP/portal/$CONTEXT_NAME/ and
DirectoryIndex – index.html

2. Based on above settings, server returns page $COMMON_TOP/portal/$CONTEXT_NAME/index.html to client

3. Page $COMMON_TOP/portal/$CONTEXT_NAME/index.html calls applist.html and aplogon.html in same directory

4. In aplogon.html there is link to
http(s)://hostname.domain:port/oa_servlets/AppsLogin

This link is based on value defined by context variable s_login_page in context file(SID_hostname.xml) under $APPL_TOP/admin5. Apache (11i Web Server) redirects /oa_servlets/AppsLogin to Jserv (via mod_jserv) which in turn uses oracle.apps.fnd.sso.AppsLogin from file$IAS_ORACLE_HOME/Apache/Jserv/etc/zone.propertiesservlet.AppsLogin.code=oracle.apps.fnd.sso.AppsLogin 

6.AppsLogin is a servlet which will direct user to specific login page depending on profile option “Application SSO Type

7. Profile Option : Application SSO Type can be set to one of following four values
Portal
SSWA
Portal w/SSO
SSWA w/SSO

a) If profile option is set to SSWA then user is redirected to /OA_HTML/AppsLocalLogin.jsp , after authentication (local to 11i) user is redirected to the configured home page specified in the Self Service Personal Home Page mode profile option.

b) If profile option is set to SSWA w/SSO then user is redirected to SSO (Single Sign-On) page for authentication and after authentication redirected to home page specified in the Self Service Personal Home Page mode profile option.

c) If profile option is set to Portal w/SSO then user is redirected to SSO (Single Sign-On) page for authentication and after authentication redirected to default Portal Homepage

d) If profile option is set to Portal then user is redirected to /OA_HTML/AppsLocalLogin.jsp for authentication and after authentication redirected to default Portal Homepage

If you hit any login related issues – check if
i) Request coming till web server i.e. ($IAS_ORACLE_HOME/ Apache/ Apache/ logs/ access_log)
ii) Next check for any error message in error_log in above directory
iii)Next check if request is routed to Jserv (via mod_jserv) ;  ($IAS_ORACLE_HOME/ Apache/ Jserv/ logs/ mod_jserv.log  (You may have to enable mod_jserv logs)
iv)After this check if request is routed to proper authentication server (Local 11i – AppsLocalLogin.jsp or SSO server)

.
References

  • 186981.1  Oracle Application Server with Oracle E-Business Suite Release 11i FAQ
  • 261914.1  Integrating Oracle E-Business Suite Release 11i with Oracle Internet Directory and Oracle Single Sign-On

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Oracle Gold Partner specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

6 comments
utpal says July 30, 2009

In the above flow it is mentioned that “AppsLogin is a servlet which will direct user to specific login page depending on profile option “Application SSO Type”

+ As the values set in profile options are stored in EBS database, so does the AppsLogin servlet connects to database to fetch the profile option ?

+ As per my understanding in login page (AppsLocalLogin.jsp) when we submit user name/password then the connection to database is established by Jserv engine by picking up the db cridentials from dbc file.

As per above explanation in this blog, it seems before login into the system the database connection is established by AppsLogin servlet. Just correct where i’m wrong.

Reply
Rajesh says August 1, 2010

Thanks so much Atul for this Note. You are doing a great job !!!

Reply
rahul pareek says November 13, 2010

hi Atul !
thnx for great job i am facing problem in authentication of jsp page as
during login int ooracle apps i am getting this exception

Request URI:/OA_HTML/OA.jsp

Exception:
java.lang.StackOverflowError

please suggest what to do as its a unique problem and not a usual one of Oracle itself.
thnx

Reply
jase says March 30, 2011

Hi Rahul, did you solve your StackOverflowError, I am getting the same thing from 1 user only when they use one specific machine. Any pointers would be appreciated.
thanks,
Jase.

Reply
rahul pareek says March 30, 2011

hi Jase,
i have solved that error.
dear, it was due to some personalization,
disable all form personalization you have made recently.that’s all i know.

Regards
Rahul

Reply
Ravikumar says February 22, 2013

Hi Atul,
I want to increase size limit of mod_jserv.log.
Where & how to achive this.
Thanks,
Ravikumar

Reply
Add Your Reply