OFSAA WebLogic Re-Deploy Fails with Error Message: Not found in 'org.owasp.esapi.resources' directory or file not readable

(Doc ID 2388930.1)

Last updated on MAY 03, 2018

Applies to:

Oracle Financial Services Analytical Applications Infrastructure - Version 8.0.0 and later
Information in this document applies to any platform.
Oracle Financial Services Analytical Applications (OFSAA)
Oracle Financial Services Analytical Applications Infrastructure (OFSAAI)
Oracle Financial Services Profitability Management (PFT)
Oracle Financial Services Funds Transfer Pricing (FTP)
Oracle Financial Services Asset Liability Management (ALM)
WebLogic Redeploy
Patching

Symptoms

Upgraded 8.0.4 to 8.0.5 successfully but while re-deploying which failed with error message below in Weblogic nohup log:

Attempting to load ESAPI.properties via file I/O.
Attempting to load ESAPI.properties as resource file via file I/O.
Not found in 'org.owasp.esapi.resources' directory or file not readable: /u01/app/oracle/product/12.1.0/Middleware/user_projects/domains/ofsaai_domain/applications/ofsaa.ear/ofsaa.war/conf/ESAPI.properties
Not found in SystemResource Directory/resourceDirectory: .esapi/ESAPI.properties
Not found in 'user.home' (/export/home/ofsaaweb) directory: /export/home/ofsaaweb/esapi/ESAPI.properties
Loading ESAPI.properties via file I/O failed. Exception was: java.io.FileNotFoundException
Attempting to load ESAPI.properties via the classpath.
ESAPI.properties could not be loaded by any means. Fail. Exception was: java.lang.IllegalArgumentException: Failed to load ESAPI.properties as a classloader resource.
<Apr 17, 2018 9:27:44 PM CST> <Error> <HTTP> <BEA-101216> <Servlet: "FICMaster" failed to preload on startup in Web application: "ofsaa".
org.owasp.esapi.errors.ConfigurationException: java.lang.reflect.InvocationTargetException SecurityConfiguration class (com.ofs.aai.common.security.CustomESAPISecurity) CTOR threw exception.
at org.owasp.esapi.util.ObjFactory.make(ObjFactory.java:129)
at org.owasp.esapi.ESAPI.securityConfiguration(ESAPI.java:184)
at com.ofs.aai.common.security.OFSAASecurityService.initialize(OFSAASecurityService.java:45)

Changes

Patch upgrade to 8.0.5.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms