Oracle DBA Tips and Techniques

By Arjun Raja

DB CONSOLE STARTUP ISSUES FOR 10.2.0.3 AND 10.2.0.4 POST 31 DEC 2010.

Posted by Arjun Raja on April 8, 2011

In Enterprise Manager Database Control with Oracle Database 10.2.0.4 and 10.2.0.5, the root certificate used to secure communications via the Secure Socket Layer (SSL) protocol expired on 31-Dec-2010 00:00:00.

The certificate expiration will cause errors if you attempt to configure Database Control on or after 31-Dec-2010. Existing Database Control configurations are not impacted by this issue.

The following errors may be received when you try to start dbconsole and dbconsole fails to start.

2011-04-08 08:09:50 Thread-1828 ERROR ssl: Open wallet failed, ret = 28750
2011-04-08 08:09:50 Thread-1828 ERROR ssl: nmehlenv_openWallet failed
2011-04-08 08:09:50 Thread-1828 ERROR http: 9: Unable to initialize ssl connection with server, aborting connection attempt
2011-04-08 08:09:50 Thread-1828 ERROR pingManager: nmepm_pingReposURL: Cannot connect to https://xxxu009.xxxxxxxx.com:5501/em/upload/: retStatus=-1

To avoid this error –

Download patch 8350262 from Metalink.

Unzip patch and apply the patch to the 10.2.0.4 ORACLE_HOME.

Make sure opatch executable in the PATH –

PATH=$PATH:$ORACLE_HOME/OPatch

echo $PATH
/usr/bin:/etc:/usr/sbin:/usr/ucb:/usr/bin/X11:/sbin:/u01/oracle:/u01/local/dbhk/scripts/run:/u01/oracle/product/10.2/db_1/bin:/u01/oracle/product/10.2/db_1/OPatch

Patch Installation Steps:
————————-
1. Shutdown all databases and listeners running out of this ORACLE_HOME .

2. Shutdown EM DB Console using the following command….the process may still be running despite a failed startup attempt.

cd $ORACLE_HOME/bin > ./emctl stop dbconsole

If it does not shutdown cleanly –

cd /u01/oracle/stage/ssl_patch/8350262

export ORACLE_SID=XXXX ( SID in which attempt was made to start dbconsole from )

./killDBConsole

ORACLE_HOME=/u01/oracle/product/10.2/db_1
ORACLE_SID=xxxua3
State directory = /u01/oracle/product/10.2/db_1/xxxu009.xxxxxxxx.com_xxxua3
WatchDog PID = 17170684
DBconsole PID = 22609924
EMAgent PID = 30540002
Killing WatchDog (pid=17170684) …
Successfully killed process 17170684
Killing DBConsole (pid=22609924) …
Successfully killed process 22609924
Killing EMAgent (pid=30540002) …
Successfully killed process 30540002

Set your current directory to the directory where the patch is located:

cd /u01/oracle/stage/ssl_patch/8350262

opatch apply

Once the patch is applied –

Startup databases and listeners.

export ORACLE_SID=xxxua3

xxxua3:/u01/oracle/product/10.2/db_1/bin> ./emctl secure dbconsole -reset
Oracle Enterprise Manager 10g Database Control Release 10.2.0.4.0
Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
https://xxxu009.xxxxxxxx.com:5501/em/console/aboutApplication
Enter Enterprise Manager Root Password : enter password of sysman user.
DBCONSOLE already stopped… Done.
Agent is already stopped… Done.
Securing dbconsole… Started.
Checking Repository… Done.
Checking Em Key… Done.
Checking Repository for an existing Enterprise Manager Root Key…
WARNING! An Enterprise Manager Root Key already exists in
the Repository. This operation will replace your Enterprise
Manager Root Key.
All existing Agents that use HTTPS will need to be
reconfigured if you proceed. Do you wish to continue and
overwrite your Root Key
(Y/N) ?
Y
Are you sure ? Reset of the Enterprise Manager Root Key
will mean that you will need to reconfigure each Agent
that is associated with this OMS before they will be
able to upload any data to it. Monitoring of Targets
associated with these Agents will be unavailable until
after they are reconfigured.
(Y/N) ?
Y
Generating Enterprise Manager Root Key (this takes a minute)… Done.
Fetching Root Certificate from the Repository… Done.
Updating HTTPS port in emoms.properties file… Done.
Generating Java Keystore… Done.
Securing OMS … Done.
Generating Oracle Wallet Password for Agent…. Done.
Generating wallet for Agent … Done.
Copying the wallet for agent use… Done.
Storing agent key in repository… Done.
Storing agent key for agent … Done.
Configuring Agent…
Configuring Agent for HTTPS in DBCONSOLE mode… Done.
EMD_URL set in /u01/oracle/product/10.2/db_1/xxxu009.xxxxxxxx.com_xxxua3/sysman/config/emd.properties
Done.
Configuring Key store.. Done.
Securing dbconsole… Sucessful.

xxxua3:/u01/oracle/product/10.2/db_1/bin> ./emctl start dbconsole

Oracle Enterprise Manager 10g Database Control Release 10.2.0.4.0
Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
https://xxxu009.xxxxxxxx.com:5501/em/console/aboutApplication
ps: invalid list with -o.
ps: illegal option — –
Usage: ps [-ANPaedfklmMZ] [-n namelist] [-F Format] [-o specifier[=header],…]
[-p proclist][-G|-g grouplist] [-t termlist] [-U|-u userlist] [-c classlist] [ -T pid] [ -L pidlist]
[-@ [wparname] ]
Usage: ps [aceglnsuvwxX] [t tty] [ProcessNumber]
Starting Oracle Enterprise Manager 10g Database Control ……………… started.
——————————————————————
Logs are generated in directory /u01/oracle/product/10.2/db_1/xxxu009.xxxxxxxx.com_xxxua3/sysman/log
xxxua3:/u01/oracle/product/10.2/db_1/bin> ./emctl status dbconsole
Oracle Enterprise Manager 10g Database Control Release 10.2.0.4.0
Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
https://xxxu009.xxxxxxxx.com:5501/em/console/aboutApplication
Oracle Enterprise Manager 10g is running.
——————————————————————
Logs are generated in directory /u01/oracle/product/10.2/db_1/xxxu009.xxxxxxxx.com_xxxua3/sysman/log
xxxua3:/u01/oracle/product/10.2/db_1/bin>

Login – https://xxxu009.xxxxxxxx.com:5501/em

echo $PATH
/usr/bin:/etc:/usr/sbin:/usr/ucb:/usr/bin/X11:/sbin:/u01/oracle:/u01/local/dbhk/scripts/run:/u01/oracle/product/10.2/db_1/bin:/u01/oracle/product/10.2/db_1/OPatch

Patch Installation Steps:

Advertisements

One Response to “DB CONSOLE STARTUP ISSUES FOR 10.2.0.3 AND 10.2.0.4 POST 31 DEC 2010.”

  1. febryo said

    Thanks a lot man, you saved my day!!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: