Configure Oracle HTTP Server infront of Oracle WebLogic Server mod_wl_ohs

mod_wl_ohs: is a module in Oracle HTTP Server 11g R1 which allows requests to be proxied from Oracle HTTP Server (OHS) to Oracle WebLogic Server.

mod_weblogic: This module is part of Apache HTTP Server and allows requests to be proxied from Apache HTTP Server to Oracle WebLogic Server.

For difference between mod_wl_ohs and mod_weblogic click here

Things good to know about configuring OHS infront of weblogic

1. You can use Fusion Middleware control /em (register OHS with weblogic Server to access it from control) , steps here  or directly update httpd.conf  (steps given below) to configure mod_wl_ohs

2. If weblogic server is clustered then mod_wl_ohs uses simple round-robin to forwards requests from HTTP Server to all available weblogic servers.
mod_wl_ohs directs HTTP requests containing a cookie, URL-encoded session, or a session stored in the POST data to the server in the cluster that originally created the cookie.

3. mod_wl_ohs (as of 11gR1) only support container level failover and NOT application level failover. mod_wl_ohs continues to route requests to a down application as long as the managed server is up and running.

4. Configuration file of mod_wl_ohs is $INSTANCE_HOME/ config/ OHS/ <component_name>/ mod_wl_ohs.conf and included in $INSTANCE_HOME/ config/ OHS/ <component_name>/ httpd.conf (entry like
include “${ORACLE_INSTANCE}/ config/ ${COMPONENT_TYPE}/${COMPONENT_NAME}/ mod_wl_ohs.conf”)

5. mod_wl_ohs module file is available at $ORACLE_HOME/ ohs/ modules/ mod_wl_ohs.so

6. You can either use URL like /console using location directive (<Location /console>) or MatchExpression directive in mod_wl_ohs.conf to forward requests from HTTP Server to WebLogic Server.

7. While starting OHS on Windows, if you see error like

C:/atul/ fmw/ instances1/ config/ OHS/ ohs1/ mod_wl_ohs.conf:
Cannot load C:/ atul/ fmw/ ohs/ modules/ mod_wl_ohs.so into server: The specified module could not be found

Check mod_wl_ohs.so exists in specified location, if yes then
Copy “$ORACLE_HOME\ oui\ lib\ win32\ msvcp71.dll” to “c:\ windows\ system32″ and try again

.
Configure HTTP Serer infront of WebLogic Server

1. Install WebLogic Server and define server listening on port XXXX (7001 in this example)

2. Install Oracle HTTP Sever 11g steps here

3. Modify mod_wl_ohs.conf
$ORACLE_INSTANCE/ config/ <COMPONENT_TYPE>/ <COMPONENT_NAME>/ mod_wl_ohs.conf

a) For weblogic single instance

<Location /console>
SetHandler weblogic-handler
WebLogicHost server1
WeblogicPort 7001
</Location>

* This will forward /console from HTTP server to /console on WebLogic Server server1:7001

b) For Weblogic instances in cluster

<Location /myServerURL>
SetHandler weblogic-handler
WebLogicCluster server1:7010,server2:7010
</Location>

* This will forward /myServerURL from HTTP server to /myServerURL on WebLogic Cluster server1:7010 and server2:7010
4. Restart HTTP Server
$INSTANCE_HOME/ bin/ opmnctl restartproc ias-component=ohs1

5. Test that you can access application deployed on Weblogic using Oracle HTTP Server like

http://servername:ohs_http_port/console

.

References

 

Learn Oracle Weblogic Server Administration

 

Get 100 USD OFF + 100% Money Back Guarantee

Click here to get Early Bird Discounts

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Oracle Gold Partner specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

94 comments
FRivas says September 25, 2009

Hi Atul,

I’ve noticed that you have a good knowledge of the Oracle Imaging platform…. Can you tell me if there is a way to read some old MO disks, written with Optika software, with some TIFF files? I did a RAW data dump of a disk, and on the header I can see the “Copyright Optika”, and “SYSSQL” strings…

Reply
ADH says November 3, 2009

I’ve had an SR open for 2 weeks waiting for this information.
Found this page and had my DMZ server running within 15 minutes.
THANK YOU for posting this!

Reply
Karen says October 24, 2010

Hello Atul

Is it possible to configure the webgates on the weblogic http server embedded in the Weblogic app server, without the Oracle http server in front of it proxying requests.

Thanks
Karen

Reply
Atul Kumar says October 25, 2010

@ Karen,
What is version of OAM & Weblogic ?

OHS is recommended & easy way

Reply
jaswinder says November 30, 2010

I have come across an issue where the console hangs when using the Oracle http server only during activating changes in the console.

Would appreciate if you could any comments on this.

Reply
Lokanath says February 10, 2011

Hi Atul,
Is Oracle HTTP Server mandataory to access Weblogic Admin Console?.I have an Oracle HTTP (mod_wl_oh.conf or through some other files in httpd.conf ) configured for Managed servers and did not have entry for admin server but still able access admin console.

Please let me access flow. My environment
FMW11gR1, have Weblogic clusters.

Reply
Atul Kumar says February 10, 2011

@ Lokanath,
No HTTP server is not mandatory to access WebLogic Admin Console and same applied to Managed Server. WebLogic Admin Console and Managed Server comes with default HTTP listeners (7001 for Admin Server and for Managed server one you define during installation)

Why then you configure HTTP server infront of WebLogic ?
This could be for number of reasons like
a) You do not want to expose WebLogic Server (Admin or Managed) directly to end users for security reasons and want users to come via OHS
b) You want to configure Single Sign-On solution like Oracle Access Manager (in this case though you can configure SSO solution directly with weblogic without a need of OHS but configuring SSO via OHS makes configuration/deployment easy)
c) For multiple managed servers in cluster and you want to give single URL to end users.

Reply
Linnet says March 14, 2011

This post was very useful for me and I have the same set up, however I’m unable to get the OHS to pass client certificates in the header.

When using the OHS user it prompts me to select my client certificate, I select it but nothing gets pushed to WebLogic. I put the same user certificate on WebLogic in a keystore and going through that url again it prompts me to select a user certificate and I am able to retrieve it from the headers.

I know I haven’t gone into much detailed but any idea why this could be occurring?

Reply
KINGSTAR says May 3, 2011

Dear Atul,

This is the body of the modified file: mod_wl_ohs.config (ps. does the hash key infront of a line in the config file comment is?)

This empty block is needed to save mod_wl related configuration from EM to this file when changes are made at the Base Virtual Host Level

WebLogicHost
WebLogicPort
Debug ON
WLLogFile /tmp/weblogic.log
MatchExpression *.jsp

SetHandler weblogic-handler
PathTrim /weblogic
ErrorPage http:/vmucm:7001/

the link I am trying to access is:(http:/vmucm:7777/console) is should redirect me to the Weblogic console page, it shows a page cannot be found message.

yet, when I try to access both the weblogic or the OHS console directrly the work fine.

one other question is that you ve refered me to a page that had more configurations for OHS, Page: (http://download.oracle.com/docs/cd/E12839_01/web.1111/e10144/getstart.htm#BEHGIDCB)
Section: (4.4.4 Configuring the mod_wl_ohs Module)

I cant seem to locate where this admin screen is. And is this additional configuration required or the mod_wl_ohs modification is enough?

Reply
Atul Kumar says May 3, 2011

@ ROCKSTAR

Create an entry like

SetHandler weblogic-handler
WebLogicHost [weblogic_server_name]
WeblogicPort 7001

SetHandler weblogic-handler
WebLogicHost [weblogic_server_name]
WeblogicPort 7001

1. Change [weblogic_server_name] to server name where weblogic admin server is running
2. Restart OHS and try accessing url using OHS
Restart

Reply
KINGSTAR says May 3, 2011

i have copied the file again and it is like this
This empty block is needed to save mod_wl related configuration from EM to this file when changes are made at the Base Virtual Host Level

WebLogicHost
WebLogicPort
Debug ON
WLLogFile /tmp/weblogic.log
MatchExpression *.jsp

SetHandler weblogic-handler
PathTrim /weblogic
ErrorPage http:/vmucm:7001/

not as in the previous post i have made

Reply
Atul Kumar says May 3, 2011

@ KINGSTAR,
Don’t use EM, update file directly. Take backup of file before updating.

Reply
KINGSTAR says June 8, 2011

DEAR ATUL,

i reach page 151 in your book and i need you to convert it to windows cause i am weak in unix,aslo hope see chapter 12 very soon
thank you
export
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/lib
export
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/oracle/apps/idam/Middleware/Ora
cle_WT1/lib
cd /webgate/ohs/tools/setup/InstallTools
cd
/oracle/apps/idam/Middleware/Oracle_OAMWebGate1/webgate/ohs/tools
/setup/InstallTools
./EditHttpConf -w [-oh
] [-o ]
./EditHttpConf -w
/oracle/apps/idam/Middleware/Oracle_WT1/instances/instance1/confi
g/OHS/ohs1 -oh /oracle/apps/idam/Middleware/Oracle_OAMWebGate1 -o
/home/idam/output2.txt

Reply
Atul Kumar says June 8, 2011

@KINGSTAR,
Thanks for highlighting this. use set command to set environment variable in wondows like

set LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/oracle/apps/idam/Middleware/Oracle_WT1/lib

where /oracle/apps/idam/Middleware is Middleware_Home

I am going to update this in second revision of book.

Reply
Jose Luis says October 28, 2011

Hi Atul

How Can I configure two aplications ADF with OAM11 but without OHS ?; WLS is 10.3.5.

I Have to configure OAMAuthentication or OAMIdentityAsserter on the WebLogic, ?

Reply
» Integrate OBIEE 11g with OAM 11g for Single Sign-On in 13 steps Online Apps DBA: One Stop Shop for Apps DBA’s says December 5, 2011

[…] (bi_server1) and restart OHS. Test if you can access OBIEE via OHS Server . More on mod_wl_ohs here and […]

Reply
Vikrant says December 10, 2011

Download link for OHS which is a part of FMW Webtier. For some reason i need to struggle to locate this link.

http://www.oracle.com/technetwork/java/webtier/downloads/index2-303202.html

Reply
Vidya says January 26, 2012

Hi,
I am a newbie and trying to study OAM:
I am trying to install OAM 11g, on windows 64-bit. Everytime time i try to patch webtier 11.1.1.2 with 11.1.1.3 i get the following error
Error in writing to file ‘C:\Oracle\Middleware\Oracle_WT1\ohs\modules\mod_wl_ohs.so’. [C:\Oracle\Middleware\Oracle_WT1\ohs\modules\mod_wl_ohs.so (The process cannot access the file because it is being used by another process)]

and a number of similar errors after i skip this one.

Any suggestions would be really helpful.

Reply
Atul Kumar says January 30, 2012

@ Vidya,
Is OHS server running while you are applying patch 11.1.1.3 ? If yes shutdown OHS before applying 11.1.1.3 patch

Reply
Luke says February 1, 2012

Hello,
Is pssobile to use one OHS11g as proxy server for two WLS domains’ applications. I noticed that you configured for one domain with port 7001. But I have two WLS domains with ports 7001 and 7010. How can I utilize one OHS to protect the two WLS domains applications?

TIA

Luke.

Reply
Atul Kumar says February 5, 2012

@ Lukem
Yes it is possible but these two application should have different URI like /app1/**** for application on domain1 and /app2/*** for application on domain2

Reply
» Integrate E-Business Suite with Oracle WebCenter (11.1.1.5) using OID and OAM (11g) as SSO Online Apps DBA: One Stop Shop for Apps DBA’s says February 15, 2012

[…] 4.3 Install OHS Server and configure mod_wl_ohs to forward requests to WebLogic server on which EBS acccessGate is deployed (more on mod_wl_ohs here) […]

Reply
Alexander says March 15, 2012

Hello Atul,
What about sessions replication. It it work with OHS?

Reply
eroach says March 23, 2012

We have an existing Shibboleth IdP that we use as part of our campus SSO options. I would like to use that IdP to authenticate several of the components that we use from OFM 11g — specifically OHS and Oracle Report Server to start. Do we need to install OIF and OAM to do this?

Thanks,
Eileen

Reply
Atul Kumar says March 27, 2012

@ Alexander,
For most of application yes session replication works but if there are few application like ADF where you need to specify in application code that this is going to be in HA . More information at section 6.1.3.2 http://docs.oracle.com/cd/E23943_01/core.1111/e10106/adf.htm#CACHBHEF

persistent-store-type with value replicated_if_clustered

Reply
ravi says June 17, 2012

Hello Atul,

How to redirect APEX requests from OHS to WebLogic Server?

Java/J2EE applications are working fine.

Reply
Afzal says July 7, 2012

Hi ,

I recently installed weblogic 12c in windows and below are my domain details

Cluster name – test-cluster having two manage server in it ie server1 and Server-2 in listening on port 7003 and 7004 .

Now i have deployed an app name myapp on the cluster and it is accessible if i access it through manage server port.

I have installed OHS and i want to proxy my request so that my request goes through OHS to my app.

I configured the same in mod_wl_ohs conf file and the details are below :

SetHandler weblogic-handler
WebLogicHost localhost
WebLogicPort 7003

SetHandler weblogic-handler
WebLogicHost localhost
WebLogicPort 7004

SetHandler weblogic-handler
WebLogicCluster localhost:7003,localhost:7004

i restarted the ohs instances but when i tried accessing the myapp application through the url
http://localhost:7777/myapp i am getting the below error in browser :-

Failure of server APACHE bridge:

No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
Build date/time: Oct 29 2009 02:08:24

Change Number: 1013

Please help me out with this issue what is going wrong.I tried restarting the ohs instances as well as my domain and also allowed all http related service in my firewall but still the problem is persisting.

Reply
Afzal says July 7, 2012

Hi ,

I recently installed weblogic 12c in windows and below are my domain details

Cluster name – test-cluster having two manage server in it ie server1 and Server-2 in listening on port 7003 and 7004 .

Now i have deployed an app name myapp on the cluster and it is accessible if i access it through manage server port.

I have installed OHS and i want to proxy my request so that my request goes through OHS to my app.

I configured the same in mod_wl_ohs conf file and the details are below :

SetHandler weblogic-handler
WebLogicHost localhost
WebLogicPort 7003

SetHandler weblogic-handler
WebLogicHost localhost
WebLogicPort 7004

SetHandler weblogic-handler
WebLogicCluster localhost:7003,localhost:7004

i restarted the ohs instances but when i tried accessing the myapp application through the url
http://localhost:7777/myapp i am getting the below error in browser :-

Failure of server APACHE bridge:

No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
Build date/time: Oct 29 2009 02:08:24

Change Number: 1013

Please help me out with this issue what is going wrong.I tried restarting the ohs instances as well as my domain and also allowed all http related service in my firewall but still the problem is persisting

Reply
scarmony says July 10, 2012

I have the webtier HTTP server in front of weblogic server. I’m trying to do 2 way SSL. The client certificate is not being passed in the header to the application. I found some info about adding parameters into httpd.conf but most were depreciated and opmn would not start. I used the 10.3.5 plug-in document.

Reply
AJS says August 30, 2012

Your website is always helpful and easily understood. Thank you!

Reply
ChuLy says September 11, 2012

Hi,

I configure HTTP Server as Webgate redirect to my app which is a Weblogic Portal page.

But the page by request to HTTP Server shows less than page from request directly to WLS

http://imageshack.us/photo/my-images/856/captureinc.png/

What should i do to fix this problem?

Reply
bernie says September 12, 2012

We are using inbound SSL at our OHS server. This is terminated there and we then use mod_wl_ohs to proxy requests to the admin server console on WL at 7001 – so no SSL from OHS to WL.

Because the WL admin app generates non-SSL links we also have to catch these using a port 80 listener in OHS and redirect back to OHS using SSL.

However, this will not work for POST requests generated within the WL admin server as the POST data is lost when redirecting from 80 to 443. For example testing a WL data source uses POST.

Is there any way to overcome this without having to use SSL between OHS and WL?

Thanks,
Bernie

Reply
    Atul Kumar says September 12, 2012

    @Bernie What entry you are using for mod_wl_ohs , did you use option below for SSL ?

    WLProxySSLPassThrough ON

    Reply
bernie says September 12, 2012

Atul, thanks for your prompt – instant? – reply!
In fact setting just WLProxySSL On has done the trick after enabling the plugin in WL.

Many thanks for your help!

Regards,
Bernie

Reply
Girish says September 12, 2012

Hello Gurus
I am trying to install 11gR2 Database
on Linux 5.5
The Oracle installer is running very slow,
graphics are not display properly..any
ideas.. Can anyone please tell me what i
need to do.

I have completed all Prereq steps for 11g DB
installation.

regards
girish

Reply
Atul Kumar says September 13, 2012

@ Girish,
What is total & free memory on server , are you installing from vnc or using X running on your desktop

Reply
Girish says September 13, 2012

Hi Atul,
Please see the output of total & free memory
it is a 64 bit machine.

total used free shared buffers cached
Mem: 11905024 2214952 9690072 0 135152 1441092
-/+ buffers/cache: 638708 11266316
Swap: 32901080 0 32901080

regards
girish

Reply
Girish says September 13, 2012

Hi Atul,
I using xterm to install the software

regards
girish

Reply
Atul Kumar says September 13, 2012

@ Girish,

Do you mean display is running locally on laptop and tunneling .

If this is the case then this is common network issue. Install using vnc server or install from client which is on same subnet as server.

Reply
syed says November 20, 2012

Hi Atul,

I installed OHS web tier with “Install Software – Do Not Configure” option and started the config.bat

I am stuck at Specify Weblogic Domain Screen”

Error “INST-07242 Unable to connect to weblogic admin server”

what name should i give in the Domain Host Name.

My weblogic domain host name is “el01cn01″
The hostname of the server where I am installing web tier is “ucloud2″

I tried giving both the names as well as localhost, but still it is not going forward.

Reply
    Atul Kumar says November 20, 2012

    Do you need to integrate this OHS for weblogic ? If not then skip this step (uncheck integrate with WebLogic)

    If you need OHS to ointegrate with weblogic for managing OHS via em then provide hostname of WebLogic Admin Server and webLogic Admin Port. Did you start WebLogic Admin Server and can you connect from OHS host to weblogic host (where weblogic admin server is running) on weblogic admin port

    Reply
syed says November 21, 2012

Thanks a lot Atul, for your advice on OHS Config.

I have on more thing to clarify.

I am starting weblogic admin server by using script. It starts fine, but when i exit that session it shutdown. It is a production environment. Is there any that I keep it running, even after I terminate or exit from that sesssion. I mean how to keep it up running 24×7.

weblogic@el01cn01:~$ ./startWebLogic.sh &

weblogic@el01cn01:~$
weblogic@el01cn01:~$
weblogic@el01cn01:~$ uname -a
SunOS el01cn01 5.11 snv_151a i86pc i386 i86pc

Regards

Reply
Atul Kumar says November 21, 2012

@ Syed,

Change from ./startWebLogic.sh & to

nohup ./startWebLogic.sh &

Reply
Mannat says April 3, 2013

Hi,

I have configured the OHS in front of weblogic as per the steps. The request is received from HTTPS client and processed by my service. However the response is not being posted back to the https client. Please advise what can be done for such issue.

Thanks
-Mannat

Reply
bernie says April 4, 2013

Hi Mannat,
This problem arises because Weblogic doesn’t know that you’re using SSL as it only sees HTTP requests and so builds its links to use HTTP. To make it use HTTPS carry out the following changes:

1 Login to the Weblogic Administration Console
2 Under Domain Structure open ‘Environment’ and then click ‘Servers’
3 Click on Admin Server and Advanced
4 Check the Web Plug-In enabled box and Save
5 Repeat for all other managed servers

Go back to the home pages and, under ‘Preferences’, select ‘Shared Preferences’
Uncheck ‘Follow Configuration Changes’ and Save.

You may then need to bounce the Weblogic stack.

Regards,
Bernie

Reply
Mannat says April 4, 2013

Bernie,

Thanks a lot for the response. However after making the changes as mentioned above, I still don’t see the response being sent.
Kindly advise.

Thanks

-Mannat

Reply
bernie says April 4, 2013

Hi Mannat,
check your entries in mod_wl_ohs.conf – do they look like this?

WLProxySSL On
SetHandlerweblogic-handler
WebLogicHost
WeblogicPort

You could also edit your httpd.conf to enable a listener on port 80 but redirect all requests to 443 – this is not very efficient but would catch any non-SSL redirects.

Listen 80
.
.
.

# Rewrite to SSL for all requests
RewriteEngine on
Options +FollowSymLinks
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R]

Hope that helps,

Bernie

Reply
bernie says April 4, 2013

Update – in the previous response the bracketed/tagged lines were removed – see below….

Hi Mannat,
check your entries in mod_wl_ohs.conf – do they look like this?

‘open bracket’Location /some_URL’close bracket’
WLProxySSL On
SetHandlerweblogic-handler
WebLogicHost ‘Your WL host’
WeblogicPort ‘Your WL server non-SSL port’
‘open bracket’/Location’close bracket’

You could also edit your httpd.conf to enable a listener on port 80 but redirect all requests to 443 – this is not very efficient but would catch any non-SSL redirects.

Listen 80
.
.
.
‘open bracket’VirtualHost *:80’open bracket’
# Rewrite to SSL for all requests
RewriteEngine on
Options +FollowSymLinks
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R]
‘open bracket’/VirtualHost’open bracket’

Hope that helps,

Bernie

Reply
Mannat says April 22, 2013

Hi,

Thanks a lot for the help. The issue was that client was not accepting the response.

Regards
-Mannat

Reply
Jani says April 26, 2013

Hi!

What is about the cold failover? I have two weblogic servers without cluster, but with the same options. Can the OHS mod_wl_ohs use the simple round-robin to forwards requests all available weblogic servers? Can it check which weblogic is available, if there are not in cluster?

Regards, Jani

Reply
internet search engine marketing says May 6, 2013

What if I could guarantee your business would be located in the UK,
it is also the president of the board of the FXB Foundation.
You should hire professionals for the designing a website
that properly conveys your work attitude, potential and delivery
pattern to assure the client of standardized services if he decides to business with you.
These numbers show Yelp making $41. Every company offering
Google spamdexing service in online marketing.

As the list expands, i will format the content in
a piece of content for your sites that have been paid for.

Reply
Sri says May 21, 2013

Where does the actual load balancing happens in HA environment.

Is it at the Weblogic Cluster level or at the OHS level.

Thanks, Sri

Reply
    Atul Kumar says May 22, 2013

    @ Sri,
    Load balancing happen at load balancer level however user session is replicated across two members of WebLogic cluster.

    Reply
Al Kahaulik says May 29, 2013

I have:
A) a managed server listening on hostname:7008
B) an OHS Webtier installation listening on hostname:7777
C) OAM installed with a webgate protecting 7777
D) mod_wl_ohs configured to have OHS proxy for the weblogic managed server (7008) so that all requests to hostname:7777/application are protected by SSO.

Problem is that if you are clever and point your browser to hostname:7008/application you can bypass SSO. Is there an easy way to get weblogic to NOT answer on 7008 or redirect to 7777 maybe?

Reply
    Atul Kumar says May 29, 2013

    Use network channel in weblogic to allow using just OHS or block access using firewall

    Reply
Al Kahaulik says May 29, 2013

Thanks for the tip Atul. Great site!!

Reply
senthil says June 6, 2013

Hi
In one of our Siebel implementations, the SunOne Web server is used with the Siebel App Server. Along with these, we have 2 web applications for Reporting (BI Publisher) & Rules Engine (OPA) hosted in Weblogic Server. The Sibel App Server communicates with these applications and users DO NOT directly interact with these applications.

We are debating over, should we use a ‘Oracle HTTP Server’ as web server for Weblogic App Server, or would ‘Weblogic App Server’ themselves be sufficient ?

Since there are no users who directly hit these 2 web applications in Weblogic (BI Publisher & OPA), and also there are not much of static content to be delivered, does it really makes sense to have a OHS web server ? How do you think it would benefit by having it ?

Reply
tarun says June 26, 2013

Hi Atul,

I Installed weblogic12c in one server and OHS in One server.Now i have to configure the connection between those two.There is no clustered environment and i am working for test environment.
I am working for bank there will be so many request and how can i modify my configuaration files bcoz every request wil come to that.For security reasons OHS will be the frontend for customers.i have created one domain and one OHS instance.
Weblogic Domain admin name:admin server port 8001
managed server name:server1 port 8003

How can i configure these and u said for security weblogic shoulg not come for customers only OHS has to be visible.so please give me some suggestions.Bcoz so many requests will come for that url how i can allow all requests.

Regards,
Tarun

Reply
    Atul Kumar says June 26, 2013

    @ Tarun,
    To block client’s accessing WebLogic directly , use Network Chanels in WebLogic (allow connection from OHS node only) or configure firewall between OHS and WebLogic and allow connection to weblogic only from OHS.

    You need to define entries like


    SetHandler weblogic-handler
    WebLogicHost [WebLogicHost]
    WeblogicPort 8001


    SetHandler weblogic-handler
    WebLogicHost [WebLogicHost]
    WeblogicPort 8003

    Reply
tarun says June 26, 2013

Hi Atul,

I have to know the configuration data in detail please Bcoz this is the first time i am working with weblogic and OHS.So no idea on that. Please help

Regards,
Tarun

Reply
tarun says June 26, 2013

Hi Atul,

In the place of weblogic host wat can i give my system localhost or server rgt.

Also u specified to give application name all users hitting that url they can access that application rgt.

Regards,
Tarun

Reply
tarun says June 26, 2013

Hi Atul,

Please take application name as retail can i give that retail name like this.

SetHandler weblogic-handler
WebLogicHost [WebLogicHost]
WeblogicPort 8003

Every user can access this application rgt.sorry if i am asking so many questions bcoz i am new to weblogic and OHS

raegrds,
Tarun

Reply
Atul Kumar says June 26, 2013

@ Tarun,

Paste exact URL of application on WebLogic Server and I’ll share what to enter in mod_wl_ohs.conf

Atul

Reply
tarun says June 26, 2013

Thanks atul. I will be waiting for the response from u. I said i dont know anything but they pushed me into this project.

Reply
tarun says June 26, 2013

Hi Atul,

SetHandler weblogic-handler
WebLogicHost 10.192.2.45
WeblogicPort 8003

cani give like that

Reply
Atul Kumar says June 26, 2013

What is name of the application deployed on managed server running on 8003 ?

For WebLogic Console

SetHandler weblogic-handler
WebLogicHost 10.192.2.45
WeblogicPort 8001

For applcation deployed on managed server running on 8003

SetHandler weblogic-handler
WebLogicHost 10.192.2.45
WeblogicPort 8003

Here weblogic is running on 10.192.2.45

Reply
tarun says June 26, 2013

Hi atul,

We wont need console we need to run only application.They gave a ear file name bana623war.EAR.yes weblogic is runningon 10.192.2.45 and ohs running on 10.218.2.75

Regards,
Tarun

Reply
tarun says June 26, 2013

for security reasons we wont need console and there is no ssl also in test environment.In production we have everything

Reply
tarun says June 26, 2013

we have to access only OHS no need of weblogic console.Please give full command like this
location/application
SetHandler weblogic-handler
WebLogicHost 10.192.2.45
WeblogicPort 8003

in place of application what i have to mention

Reply
syed Abdul bari says July 3, 2013

how to add the below path in mod_wl_ohs conf file. I used matachexpression and location both of them are not working properly

http://172.16.102.108:7020/Yemen-DC/faces/login.jspx.

MY mod_wl_ohs conf is as below:

# MatchExpression *.jspx
#WebLogicHost 172.16.102.108
# WebLogicPort 7020
# DynamicServerList Off
# MatchExpression *.jspx

# Login Page

SetHandler weblogic-handler
WebLogicHost 172.16.102.108
WeblogicPort 7020

Reply
vankasrikar says September 10, 2013

Hi Atul,
I’m protecting Webcenter application [on HTTP] with OAM and /webcenter is unprotected.
Request comes through Load balancer which is on HTTPS and Webcenter is on HTTP, because of this the below files are getting blocked unless I manually unblock them in browser. [because of mixed content – HTTP vs HTTPS]

http://wcp.test.k12lds.memsdc.org/webcenter/adf/spaces/skins/publichtml/publichtml.css
http://wcp.test.k12lds.memsdc.org/webcenter/oracle/webcenter/webcenterapp/jsLibs/WebCenterLogin.js

Is there anyway I can tell OHS server to change these from http to https? So that these files wont be blocked and page looks good?

Thanks
Srikar

Reply
keko says January 8, 2014

Hey

Thanks for that information
But is there any mechanism to use http server in front of oracle apps r12

accessing url then web tier redirect it to oracle apps login

Regards

Reply
richard mendoza says March 6, 2014

Hi Atul, I don’t know if you remember me, I worked with you a short time at optumRX in San Diego. Anyway, I am trying to modify the mod_wl_ohs configuration for a client, and am running into an error when I click on the link (webtier->ohs1->administration->mod_wl_ohs configuration) it returns: Failed to invoke operation load on MBean

Any assistance would be helpful!
Richard

Reply
berniejones says March 7, 2014

Richard,
Has OAM been upgraded to 11.1.2.2 by any chance? I saw possibly similar issues after 11.1.2.0 -> 11.1.2.2 which required an SR to fix a broken config file.

An alternative could be to edit the file directly in the ohs1 config directory.

Regards,
Bernie

Reply
anishhshah says August 1, 2014

Hi –

Can OHS plugin route requests without any issue across clusters within single domain using one directive which will have host:port entry for all managed servers across cluster as below

WeblogicCluster host1:port1,host1:port2,host2:port1,host2:port2……

Reply
bondovine says September 2, 2014

Any inputs for the post from Bari:

how to add the below path in mod_wl_ohs conf file. I used matachexpression and location both of them are not working properly

http://172.16.102.108:7020/Yemen-DC/faces/login.jspx.

MY mod_wl_ohs conf is as below:

# MatchExpression *.jspx
#WebLogicHost 172.16.102.108
# WebLogicPort 7020
# DynamicServerList Off
# MatchExpression *.jspx

# Login Page

SetHandler weblogic-handler
WebLogicHost 172.16.102.108
WeblogicPort 7020

I have a similar setup but having issues with the forward.
1. FMW 11gR1 OHS on Host A
2. WLS 10.3.6 on Host B
3. Host B has a Web Service deployed on the Admin Server
4. I need to route requests coming in for the Web Service through OHS (Host A) and route it to be answered by service on Host B

Web Service is accessed using: http://hostname:port/ocamobile-context-root/jersey/searchservice?query=index

Please provide the syntax that needs to go into mod_wl_ohs.conf

Thanks in advance
VK

Reply
K.P says November 5, 2014

Dear Atul,

I have already configured cluster on two server and load-balance. How can I monitor sessions on two servers centralized ? How can to config HA for OHS ?

Thank you so much.
K.P

Reply
Anil says November 11, 2014

Hi Atul,

Thanks for the very precise details about the configuration. I am using OHS 12.1.3 and I’ve been trying to get the WebLogicCluster configuration working. I have a standalone OHS instance that i am trying to configure to access the Weblogic cluster. I followed the steps given in the oracle site with no use so far. Is there any specific instructions that I should be doing apart from following https://docs.oracle.com/middleware/1213/webtier/PLGWL/oracle.htm#PLGWL553 link. I keep getting “weblogic: parseJVMID: could not resolve hostname ‘-xxxxx’. Returning NULL from parseJVMID” in my instance log.

I have made sure that i give the configuration exactly matching the cluster Address in weblogic. Weblogic-Plugin Enabled is set to true for the cluster and both the managed servers are up and running. I have run out of options figuring the configuration as most of the blogs and oracle documentation show it is pretty simple and straight forward.

Appreciate your early reply as I am nearing the deadlines.

Thanks,
Anil

Reply
Sandeeppachauri.17061 says January 15, 2015

Hi Atul,
Me & My team is stuck with one issue.We are working with OSB WS.

I have one WS that is running over OSB cluster, This OSB cluster has 2 nodes, When i am trying to access WS with load balancer IP and Port, WS is accessible but in the WSDL WL5G3N4:address part is coming the address of nodes based on round robin algo of cluster.

We also try with configure cluster with Frontend Host/port information.
But it also not solved with our problem.

OSB Server configuration is look like as available on this blog.

http://abhinavgupta3.blogspot.in/2012/02/osb-clustering-load-balancer.html

Reply
tonydr58 says August 11, 2015

I am setting up OHS to weblogic 10.3.6
Weblogic logs:

Apache logs indicates
ap_proxy: trying GET /appName/ at backend host ‘1.2.3.4/7006; got exception ‘NO_RESOURCES: [os error=9, line 1602 of URL.cpp]: apr_socket_opt_set(APR_SO_NONBLOCK=0) call failed with error=9, host=xxx, port=7006

Reply
tonydr58 says August 11, 2015

I am setting up OHS to weblogic 10.3.6
Weblogic logs:

Apache logs indicates
ap_proxy: trying GET /appName/ at backend host ‘1.2.3.4/7006; got exception ‘NO_RESOURCES: [os error=9, line 1602 of URL.cpp]: apr_socket_opt_set(APR_SO_NONBLOCK=0) call failed with error=9, host=xxx, port=7006

Reply
    Atul Kumar says August 11, 2015

    Do you have application by name /appName that works by accessing directly on weblogic ?

    Reply
Martoh says September 1, 2015

I have a problem accessing applications running oracle weblogic in an DMZ. The scenario is that there is firewall between application and firewall and there is a core router before the firewall. I want to have the application accessible from Internet

Reply
Martoh says September 1, 2015

Martoh said,
in September 1st, 2015 at 7:26 am

I have a problem accessing applications running oracle weblogic in an DMZ. The scenario is that there is firewall between application and firewall and there is a core router before the firewall. I want to have the application accessible from Internet

Reply
    Atul Kumar says September 1, 2015

    @Martoh, Open managed server port where application is deployed . If you have OHS infront of weblogic then open OHS listen Port .

    Reply
rajat says September 2, 2015

hello Atul,

MAnaged servers on Weblogic has the root access and when i am trying to start my Managed servers through nodemanager , i am getting a failed to start error on my console.

How can OHS help me in running those MS through my WL console.

Reply
    Atul Kumar says September 3, 2015

    @Rajat,
    OHS will not help in start/stop of WebLogic server, it can only forward request from client to WebLogic server. For error related to startup check in node manager log file and managed server log file .

    Reply
Sriram says October 6, 2015

[C:\Oracle\Middleware\Oracle_WT1\ohs\modules\mod_wl_ohs.so (The process cannot access the file because it is being used by another process)]

the ohs is not running. i have stopped them. But still not able to proceed

Reply
    Atul Kumar says October 9, 2015

    @Sriram , Check who is using this file by using windows utility or some other tool , there could be rogue process using this library file

    Reply
pooja says January 18, 2016

Hi,

I am setting up OHS to proxy through an application which is deployed on Weblogic.
Below is the error when i am accessing the application through proxy:

Failure of server APACHE bridge:
No backend server available for connection: timed out after 10 seconds or idempotent set to OFF or method not idempotent.

Please check the logs below:

ap_proxy: trying GET /customApp/ at backend host ‘10.5.4.129/7002; got exception ‘NO_RESOURCES: [os error=9, line 1602 of URL.cpp]: apr_socket_opt_set(APR_SO_NONBLOCK=0) call failed with error=9, host=10.5.4.129, port=7002

Please help me out with this.

Reply
    Atul Kumar says January 20, 2016

    @Pooja this error means either your weblogic server is down or OHS can’t reach to weblogic server port (Check port is open or if there is firewall)

    Reply
Add Your Reply