“Failure to connect to Access Server” while installing a WebGate.

Hi all,

We were installing the OHS WebGate and it failed at step while configuring the WebGate connecting to Access Server. We are able to telnet the access server port from webgate machine and it works fine. The oblog.log of WebGate shows the below error.

 The AccessGate is unable to contact any Access Servers.”    raw_code^301
2010/07/12@17:01:38.000695    471274    0    ACCESS_GATE    ERROR    0x0000151A    /export/home2/abuild/Oblix/10142ce/palantir/webgate2/src/isprotected.cpp:219    “Failure to connect to Access Server”

Now, I have checked the status of Access Server and found its up and running. Even the restart of Access Server could not help. I have then checked the time of both OAM Access Server and WebGate machines and I found that they are in different timezones and thus resulting in Access Server connection failure. Upon making both servers in sync with time, the webgate installation went smoothly.

Hence it is always a pre-requisite step to ensure both the machines of WebGate  and Access Server to have time synchronization.

About the Author Mahendra

I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com

Leave a Comment:

21 comments
Atul Kumar says July 12, 2010

Mahendra,
Good one, I faced similar issue 🙁

Access Server clocks can be ahead of WebGates by no more than 60 seconds.

Webgate clocks should never be ahead of Access Server clocks.

More on time synchronization in OAM here http://download.oracle.com/docs/cd/E15217_01/doc.1014/e12493/prepare.htm#BABHEDBA

Reply
kuram says September 21, 2010

I had a situation when web get was previously working with access server, then i started getting message that “WebGate plug-in is unable to contact any Access Server”
i reconfigured webgate, then it started working; nothing in logs….

Reply
Atul Kumar says September 21, 2010

@ Kuram,
Few things to check

1. Network time out from WebGate to Access Server . Run “telnet [acces_server_name] [access_server_port]”

2. As mentioned in above post, check time synch.

Reply
Mahendra says September 21, 2010

Kuram,

This could be because the Access server not running. Please check the webgate URL to find the status of webgate and access server.

Reply
itskuram says September 22, 2010

Access server was up as other webgates were able to connect to this server ( I also checked URL) and status of access gate, only on server failed, and was able to connect after running ..\oblix\tools\configureAccessGate

Reply
purva says March 7, 2011

Hello,
I am also facing the same problem
The access gate is installed at my machine and Access server is at another machine
And the configuration of web gate was successful.. still I am getting Internal Server Error (500) when accessing the following:
http://localhost:3128
I am using Apache as a web server
Can anybody help me?

Reply
Atul Kumar says March 7, 2011

@purva

What is erroe message in error_log (Apache) and oblog.log (WebGate on WebServer)

Reply
Mahendra says March 7, 2011

Purva,

Please check the status of the webgate first using the URL http://localhost:3128/access/oblix/apps/webgate/bin/webgate.cgi?progid=1

If this is working fine, then you should see the time difference between webgate machine and access server machine.

If this fails, then webgate was not installed properly or access server is down.

Post the webgate logs.

Reply
mani says March 8, 2011

Could please help me to know the status of 5 components of OAM 10g?

Reply
mani says March 8, 2011

In which way we can know the status of 5 components of OAM 10g?

Reply
Atul Kumar says March 9, 2011

1 & 2 – For Access Server and Identity Server – check ports are listening or not

netstat -an (Checl Listen with port number of Identity and Access Server 6021 and 6022 by default)

3, 4 & 5 – WebGate, WebPass and Policy Manager are all web components so check if Web Server is up they are simply plug-ins (in webserver)

Reply
Mahendra says March 9, 2011

Purva,

Are you facing this error while installing the webgate or post installation?

Reply
Tariks says February 28, 2012

Hi,

I’m setting up the WebGate in Webtier 11g, linux platform, I created a WebGate instance, configured and registered in OAM 11g 11.1.1.5.0
But the following error occurs in OHS

wlroam15 Oblix: 2012/02/25@17:38:33.18287 7085 7102 ACCESS_GATE FATAL 0x0000182C /ade/aime_h0025/ngamac/src/palantir/webgate2/src/apache2entry_web_gate.cpp:592 “The AccessGate is unable to contact any Access Servers.” raw_code^301
Message from syslogd@ at Sat Feb 25 15:38:53 2012 …

Could you please help me

thank

Reply
Atul Kumar says March 2, 2012

@ Tariks,
Did you copy generated ObClientxxxx.xml from OAM server to webgate lib folder ?

Check

4.5 Copy files generated in step 2.5 from $ORACLE_HOME/oam/server/rreg/output/[Agent_Name] to $WEBGATE_INSTANCE_DIR/webgate/config (For OHS 11g location is $MW_HOME/Oracle_WT1/instances/instance1/config/OHS/ohs1/webgate/config)

at

http://onlineappsdba.com/index.php/2011/01/10/part-ix-install-oam-agent-11g-webgate-with-oam-11g/

If you did then check OAM managed server is up and running and there are no error message in OAM managed server logs at

$DOMAIN_HOME/servers/oam_server1/logs

Reply
amit1090 says July 20, 2012

Hi all,
I have configured 11g webgate on the same host as access server but still getting the same error:
The AccessGate is unable to contact any Access Servers.” raw_code^301
2010/07/12@17:01:38.000695 471274 0 ACCESS_GATE ERROR 0x0000151A /export/home2/abuild/Oblix/10142ce/palantir/webgate2/src/isprotected.cpp:219 ”Failure to connect to Access Server”
i have checked all configurations but still unable to identify the problem. please suggest me any recovery.
(i have tried reconfiguration also)

Reply
sabaree says October 23, 2013

Hi All,

I have seen this thread and thought of sharing the issue we have currently with our old oblix. Issue is happening intermittently when the user tries to login to a application. That time it throws a “Oracle Access Manager operation Error, The authentication scheme used for login is unknown to the webgate plugin. The scheme mask is 0.”

Also we found from the webgate log that we are getting UNKNOWN_CLIENT_ID – raw code 331. Can you please tell me what does it mean? Any help would be greatly appreciated.

WebGate logs:
==============
2013/10/08@07:57:14.854412 21303 4066 SSOTOKEN ERROR 0x00001875 /export/t3array/build6/Oblix/coreidport/palantir/access_api/src/obuser_session.cpp:1615 “O
bAccessException_UNKNOWN_CLIENT_ID” raw_code^331
2013/10/08@07:57:19.552686 21303 4066 SSOTOKEN ERROR 0x00001875 /export/t3array/build6/Oblix/coreidport/palantir/access_api/src/obuser_session.cpp:1615 “O
bAccessException_UNKNOWN_CLIENT_ID” raw_code^331

Thanks,
Sabari

Reply
aminata says November 4, 2013

HEllo Everyone,
I have configured webgate on a distinct machine,
i have registered webgate to my OAM server. And now while accessing to my url i am getting the following error.
Message from syslogd@dgacprototype at Nov 4 17:49:38 …
Oblix: 2013/11/04@16:49:38.56688#01110556#01110590#011ACCESS_GATE#011FATAL#0110x0000182C#011/ade/aime_ngamac_497961/ngamac/src/palantir/webgate2/src/apache2entry_web_gate.cpp:590#011″The AccessGate is unable to contact any Access Servers.”#011raw_code^301#011

Can you help me?

Reply
    Atul Kumar says November 4, 2013

    @ Are you hitting this error in OHS server or on OAM domain logs .

    If this is on OAM domain logs then you can ignore them, If These are on OHS server then check

    1. If OAM server is running (and application oam_server deployment is in state ACTIVE)
    2. If Yes then OHS server can contact OAM server on proxy port .

    If you share WebGate version then I’ll update you what file to check in webgate for OAM server host and port number.

    Reply
aminata says November 8, 2013

Thank you for the reply.
My application was checkin the OAM on the default host:14100/oamconsole, what actually was under OHS host:7777/oamconsole.

Reply
pritesh says August 28, 2014

Thanks Atul for giving mentioning the copy point
(For OHS 11g location is $MW_HOME/Oracle_WT1/instances/instance1/config/OHS/ohs1/webgate/config)
Was searching for error since last few days

Reply
sarangapani.matoori says October 10, 2015

Hi Team,
We are getting an error message “WebGate plug-in is unable to contact any Access Server” continuously while we are doing the performance load testing with 150 users for fusion applications. Kindly advice on this issue to fix it.

Reply
Add Your Reply