« August 2007 | Main

October 17, 2007

Oracle Critical Patch Update October 2007 for 11i (11.5.10.2)

Oracle Critical Patch Update October 2007 for 11i (11.5.10.2)

Oracle yesterday released the Critical Patch Update (CPU) for October 2007.

As with the case of CPUs, the Oracle Database and Oracle Application Server are cumulative whereas CPU for Oracle eBusiness Suite are not cumulative.

Oracle ebusiness suite CPU are broadly categorized into

  • Oracle Database CPU.
  • Oracle HTTP Server CPU.
  • Oracle Developer CPU.
  • JInitiator Patches

This write up focuses on for UNIX /Linux environments running Oracle Applications 11i

Applications Database
For Oracle Applications 11i instance you must have your database upgraded to at least 9.2.0.8 to be able to apply this CPU.
11i instances running on 9i database you need to apply patch  6395038 (UNIX).
For 10g Release 1 apply patch 6395024
For 10g Release 2 apply patch 6395024

Applications HTTP Server
The Oracle HTTP Server does not have any additional patches released in the CPU Oct 2007.

Applications Developer Suite
You must upgrade to patchset 18 as a part of this CPU release and also apply patch 5687261 to the 8.0.6 Oracle home. This is a shell script (.sh) patch.

Oracle JInitiator
For JInitiator Oracle recommends to be upgraded to 1.3.1.26 or higher the latest version available however is 1.3.1.28.You can do this update via patch 5882294.

Oracle Application patches
You need to apply the following applications patches
5485003
4897479
4514856

If you have already applied ATG Rollup 5 you can omit patch 5485003.

October 02, 2007

Behind the Oracle HTTP Server - OHS

Behind the Oracle HTTP Server - OHS

The OHS is the abbreviation for the Oracle HTTP Server. This is the core component for the client facing interface of Oracle Applications. Much of how Oracle Applications behaves is controlled from the OHS.

The OHS is built upon the Apache Server project. The Oracle Application server in Oracle Applications 11i (11.5.10.2) is based on Apache 1.3.

Oracle Application Server 10g Release2 is based on Apache 2.Though we do not have 10g release 2 application server by default  in 11i, we can choose to implement the 10g applications server with 11i.

You can find out the current version of OHS by the command httpd -version
$ httpd -version
Server version: Oracle HTTP Server Powered by Apache/1.3.19 (Unix)
Server built:   Apr  5 2004 16:17:45 (iAS 1.0.2.2.2 rollup 4)

There are some core files which control the behavior of the Oracle HTTP Server. Again most of these files are autoconfig  managed , so changes to them should be via the Oracle Applications Manager and autoconfig must be run to propagate these changes to the respective config files.

httpd.conf
This is manin config file for the Apache based OHS. It contains all vital configuration information for the OHS like the port on which the server is running, the portocol used etc.A detailed list of derivates supported by the httpd.conf file can be found in the apache documentation. Again as mentioned before this file is also autoconfig managed.

httpds.conf
The httpds.conf file is similar to the httpd.conf. The httpds.conf filers comes into use when apache runs in the Secure Sockets Layer implementation(SSL).Another way make sure if httpds.conf is being used in your environment or not is to open up the apachectl file in the Apache/bin directory and check if the httpds executable is being used along with the httpd executale. something similar to below

HTTPD=/d01/sam/samsora/iAS/Apache/Apache/bin/httpds

access.conf
The access.conf file is natively used to specify the acess control files for the HTTP server. But in Oracle Implementation of  Apache server this file is essentially kept empty and instead the AccessConfig directive in httpd.conf is used.

url_fw.conf
The URL firewall or the url_fw.conf file implementation is used to provide an additional layer of security on the external  tier.This file comes into play once you define a node as external. After this is enabled only the urls specified in the  url_fw.conf files will be accessible through the external tier in a DMZ architecture.Once enabled the httpd.conf file will have a link to include this file.

security.conf
This file contains the security configuration for the OHS.It has information regarding security auditing and also location of the security audit log file location.

oracle-apache.conf
This a file that stores the configuration information for various supported modules in Oracle applications like imeeting , OEM etc.It will contain entries to include these configuration files. These module specific configuration file like the imeeting.conf will also reside in the Apache/conf directory on the application server.