Apache 11g WebGate for OAM 11gR2

Apache WebGate is one of the widely used webgates in most of the enterprises. Oracle has been releasing OHS 11g webgates for OAM 11gR1, R2 PS1 and R2 PS2 releases. However Oracle has released Apache 11g R2 PS1 webgate with OAM 11g R2 PS1 release and it can be downloaded from edelivery.oracle.com -> Oracle Fusion Middleware -> Oracle Fusion Middleware Identity Management 11g R2 Media Pack -> Oracle Access Manager Apache 2.2 WebGates 11.1.2.1.0

This PS1 Apache WebGate can be used with OAM 11gR2 PS1 and R2 PS2.

Apache 11.1.2.1.0 WebGate Installation:

Pre-requisites: Ensure that JRE 1.6 or higher is installed in the Webgate machine.

Silent installation procedure:

./runInstaller -jreLoc <<JRE_LOCATION>> -invPtrLoc <<ORA_INV_LOCATION>> -silent -response <<RESPONSE_FILE>>

Response File contents:

[ENGINE]

#DO NOT CHANGE THIS.
Response File Version=1.0.0.0.0

[GENERIC]

#Provide the Oracle Home location. The location has to be the immediate child under the specified Middleware Home location. The Oracle Home directory name may only contain alphanumeric , hyphen (-) , dot (.) and underscore (_) characters, and it must begin with an alphanumeric character. The total length has to be less than or equal to 128 characters.
ORACLE_HOME=/home/oracle/apache_11gR2PS1_webgate

#Provide existing Middleware Home location.
#MIDDLEWARE_HOME=/opt/

[SYSTEM] SKIP_SOFTWARE_UPDATES=true

[APPLICATIONS] [RELATIONSHIPS]

NOTE: Note that only ORACLE_HOME is required and not MIDDLEWARE_HOME unlike for OHS 11g webgate.

Post-Installation Steps:

Goto <<ORACLE_HOME>>/webgate/apache/tools/deployWebGate
Run the command ./deployWebGateInstance.sh -w <<WEBGATE_INSTANCE_DIR>> -oh <<ORACLE_HOME>> -ws apache
Goto <<ORACLE_HOME>>/webgate/apache/tools/setup/InstallTools
Run the command ./EditHttpConf -f <<WEBGATE_INSTANCE_DIR>>/httpd.conf -oh <<ORACLE_HOME>> -w <<WEBGATE_INSTANCE_DIR>>-ws apache
Copy the WebGate artifacts from OAM Server domain output folder. For example, /opt/oam/11gr2/fmw/user_projects/domains/mydomain/output/Apache_WebGate.
Restart the Apache web server.

NOTES:

The <<WEBGATE_INSTANCE_DIR>> is location where Apache conf file is present , for example /home/apache/conf.

LD_LIBRARY_PATH variable need not be set unlike for OHS 11g webgate.

Test the WebGate:

Access the Apache home page and verify that Apache Webgate intercepting the requests.

Troubleshooting:

If the Apache webgate is not intercepting the requests, make sure that webgate.conf file is created under apache conf folder and httpd.conf is updated to include webgate.conf. Also, verify the webgate.conf file for contents and verify the ObAccessClient.xml present in Apache conf/webgate/config folder.

If you want to learn more in Oracle Access Manager then register for our free Minicourse by clicking on below image.

About the Author Mahendra

I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com

Leave a Comment:

12 comments

Atul Fan says June 18, 2014

Can we use Apache 11GR2 PS1 webgate with OHS 11GR2 webserver?

sravan says June 18, 2014

Can we use 11GR2 PS1 WEBGATE FOR OHS11G WEBSERVER?

Mahendra says June 18, 2014

Do you mean using Apache PS1 webgate for OHS 11g web server? If yes, is there a specific reason why not to use existing OHS 11g webgate? You may try using it though but not guaranteed to work.

Thanks
Mahendra.

narendra says July 28, 2014

Hi Mahendra,

I installed an apache 11g webgate and deployed the instance successfully, also edited the httpd.conf file using/EditHttpdConf tool,

Where as while starting the apache server I am getting error like below,

Syntax Error on line 432 in httpd.conf and syntax error on line 9 in webgate.conf : cannot load webgate.so into server libclntch.so.11.1 cannot open shared object file.

Where 9th line in webgate.conf is

LoadModule obWebgateModule “/Location_to_/webgate.so”

Please advise me to solve this issue.

FYI,
JDK Version is 1.6 64 bit
Installed webgate is p18177519_111210_Generic.zip
RHEL 5.6 (x86_64 )
Apache is installed with root under /usr/local/apache2 but can be start with user oracle as httpd.conf file is modified like that.
Webgate is installed under /home/oracle/ with user oracle.

Thanks,
Narendra

Mahendra says July 28, 2014

Set the LD_LIBRARY_PATH env variable to <>/apache/webgate/lib and restart the server.

Hari says August 6, 2014

Hello,

Receiving the same error as Narendra.
Setting the LD_LIBRARY_PATH didn’t solve…

echo $LD_LIBRARY_PATH
/u01/Middleware/Oracle_OAMWebGate1/webgate/apache/lib
export LD_LIBRARY_PATH=/u01/Middleware/Oracle_OAMWebGate1/webgate/apache/lib

$ service httpd start
Starting httpd: httpd: Syntax error on line 1011 of /etc/httpd/conf/httpd.conf: Syntax error on line 9 of /etc/httpd/conf/webgate.conf: Cannot load /u01/Middleware/Oracle_OAMWebGate1/webgate/apache/lib/webgate.so into server: libclntsh.so.11.1: cannot open shared object file: No such file or directory
[FAILED]

Mahendra says August 6, 2014

Are you starting the apache server as same user as webgate is setup?

amininkl says November 25, 2014

Hi,

I have followed all the steps one by one but my issue is that Apache wont get restarted and I get below error:

The Apache service named reported the following error:
>>> httpd.exe: Syntax error on line 495 of C:/Java/Apache Software Foundation/Apache2.2/conf/httpd.conf: Syntax error on line 9 of C:/Java/Apache Software Foundation/Apache2.2/conf/webgate.conf: Cannot load C:/oracle/apache/webgate/apache/lib/webgate.dll into .

fkochanowicz says December 9, 2014

You will also need to copy the ObAccessClient.xml from your Admin Domain to the API Gateway server into the /WebGateInstance/webgate/config

You should have your webgate.config cwallet.sso and ObAccessClient.xml all in the /WebGateInstance/webgate/config directory and restart your HTTP Server. If everything worked successfully under /WebGateInstance/webgate/log you should see a oblog.log file too.

Another thing to check is the owner and group under the /WebGateInstance directory make sure the HTTP server can write to the /WebGateInstance/webgate/log directory.

Frank Kochanowicz

Rodolphe says January 15, 2015

@Hari

Just in case, under redhat 6.3, if you start apache with the command ‘service apache start’, you got this error : Starting httpd: httpd: Syntax error on line 1011 ….. cannot open shared object file: No such file or directory

But if you use this command ‘/usr/sbin/httpd -k start’, the web server starts without any error

Kumar says October 24, 2016

Hi Mahendra,
Greetings, I am struck in a situation that Apache is not starting and throwing the below error: can you please help me to resolve the issue.
This install was done by another login who left the org, now when i try to start i am facing the below error: can you please let me know any workaround to start and complete my testing.

Thanks in advance

bash-4.1$ ./apachectl -k start
httpd: Syntax error on line 527 of /httpd-2.4.10/conf/httpd.conf: Syntax error on line 9 of /httpd-2.4.10/conf/webgate.conf: Cannot load /Software/oracle/product/11.1.1/as_1/webgate/apache/lib/webgate_apache24.so into server: libclntsh.so.11.1: cannot open shared object file: No such file or directory

joshua says November 24, 2016

thanks for the article @Mahendra, though its late for the blog’s timeline, only recently I had to configure Apache2.4 Webgate on Windows2012 server; all steps wnet thru well & Apache restarted properly.
I could see the `OAM_Authn*Cookie*` elements in the Request header; but, there’s no information on the authenticated user-info in the response; any pointers to retrieve logged in user info will be a great help. thanks in advance. – Joshua

Add Your Reply