OAM/WebGate troubleshooting : WebGate on Apache/OHS Unable to read the configuration file

This post is from one of customer engagement where we implemeted and now support complete Oracle Identity & Access Management ( Contact Us If you are looking for Oracle Support or Implementation Partner) .  When you protect a resource on Oracle Access Manager (OAM) you configure WebGate on WebServer (OHS, Apache or IIS) acting as Policy Enforcement Point (PEP).

  • In OAM 11g with WebGate 10g/11g configuration for WebGate to OAM server is defined in file ObAccessClient.xml that is generated during WebGate registration.
  • In 10g Wegate file ObAccessClient.xml is automatically copied from OAM server to WebGate/WebServer host during WebGate registration .
  • In 11g Webgate you must copy ObAccessClient.xml file manually from OAM host (where this file is generated during WebGate registration) to WebGate/WebServer host.

WebGate encountered issue when file system on Webserver host was 100% full (Yes monitoring is enabled and alert sysadmins when file system reaches 70%) .

Error reported on system

________________
Message from syslogd@linuxHost at May 11 16:09:57 …
Oblix: 2015/05/11@ 15:09:57.543160 #0111805#0111805#011 ACCESS_CLIENT#011FATAL #0110x00001C01#011/scratch/alnguyen/Oblix/ coreid1014/palantir/ aaa_client/src/ aaa_service_client.cpp:393#011″ Unable to read the configuration file.  The file might be corrupt.  Please rerun the configuration”# 011configFile^/opt/netpoint/ webgate/access/ oblix/lib/ ObAccessClient.xml#011

Message from syslogd@linuxHost at May 11 16:09:57 …
Oblix: 2015/05/11@15:09:57.543841 #0111805#0111805#011ACCESS_SDK #011FATAL#0110x0000181C#011/ scratch/alnguyen/Oblix/coreid1014/ palantir/ access_api/src/ obconfig.cpp:494#011″Oracle AccessGate API is not initialized.”#011raw_code^204#011

Message from syslogd@linuxHost at May 11 16:09:57 …
Oblix: 2015/05/11@15:09:57.544254# 0111805#0111805# 011ACCESS_GATE#011FATAL# 0110×00001520#011/scratch/alnguyen/ Oblix/coreid1014/palantir/webgate2/src/apache2entry_web_gate.cpp:433#011″Exception thrown during WebGate initialization”#011

Message from syslogd @linuxHost at May 11 16:09:57 …
Oblix: 2015/05/11@15:09:57.544347# 0111805#0111805#011ACCESS_GATE#011FATAL# 0110x0000181C# 011/ scratch/ alnguyen /Oblix /coreid1014/palantir/ webgate2/ src/apache2entry_web_gate.cpp :434#011 “Oracle AccessGate API is not initialized.”#011raw_code^204#011

________________
As highlighted in log Unable to read the configuration file, Please rerun the configuration ObAccessClient.xml simple fix is to copy ObAccessClient.xml from OAM Host (each webGate has its own specific ObAccessClient.xml file containing WebGate and OAM details) to WebGate instance on Web Server.

.
Did you register for our YouTube Channel for Tips, Tutorials & Troubleshooting on Oracle ?

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

2 comments
dtp says June 20, 2016

Hi,
In 10g Wegate file ObAccessClient.xml is automatically copied from OAM server to WebGate/WebServer host during WebGate registration

–> From which path of OAM server does ObAccessClient.xml copied to webserver webgate automatically

Reply
    Atul Kumar says June 28, 2016

    @Dtp, It depends how webgate was created
    a) If via OAMconsole then file is under $DOMAIN_HOME/output/[WebGate_Name]
    b) If via RREG then file is under $RREG_HOME/output/[WebGate_Name]

    Reply
Add Your Reply

Not found