HOWTO : Use TimesTen Plugin "run as" Privilege Delegation When Setting Targe Credentials With Oracle Enterprise Manager 12c (Doc ID 1416813.1)

Last updated on OCTOBER 18, 2016

Applies to:

Enterprise Manager for Miscellaneous Plug-ins - Version 10.2.0.1 to 12.1.0.2.0 [Release 10.2 to 12.1]
Oracle TimesTen In-Memory Database - Version 11.2.1.8.0 and later
Information in this document applies to any platform.

Symptoms

For purposes of security auditing, software is installed and run by a system account in this particular example below that
system account was 'oracle', but user's access or use software by logging in as themselves (e.g. if the user's user name
was joe smith, that is who he logged in as) and then running software as the superuser'ed system account:

[oracle@timesten-poc-01 bin]$ ./emctl status agent
Oracle Enterprise Manager 10g Release 5 Grid Control 10.2.0.5.0.
Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
---------------------------------------------------------------
Agent Version : 10.2.0.5.0
OMS Version : 10.2.0.5.0
Protocol Version : 10.2.0.5.0
Agent Home : /oracle/product/emagent
Agent binaries : /oracle/product/emagent
Agent Process ID : 16819
Parent Process ID : 16785
...
Started at : 2012-01-25 10:45:55
Started by user : oracle
Last Reload : 2012-01-25 10:45:55
Last successful upload : 2012-01-26 15:27:08
Total Megabytes of XML files uploaded so far : 13.72
Number of XML files pending upload : 0
Size of XML files pending upload(MB) : 0.00
Available disk space on upload filesystem : 98.96%
Last successful heartbeat to OMS : 2012-01-26 15:30:14
---------------------------------------------------------------
Agent is Running and Ready


User attempted to configure the Enterprise Manager using host credentials that don't match the user that Enterprise Manager
was installed by.  When attempting to deploy the TimesTen OEM plugin by setting different combinations of user's and system
user's name and password in OEM->Agent Preferred Credentials->Target Credentials, they would see one of 3 errors which can
be seen in the trace file, emoms.trc:

Error 1:
2012-01-25 13:09:56,806 [ManagementPluginWorker(timesten_imdb2:2.2,timesten-poc-01.test.com:3872)] ERROR em.emx runOperation.308 - Operation failed on the agent with status 1 : Invalid credentials at -e line 3.

at oracle.sysman.emx.AgentFileHandler.runRemoteCommand(AgentFileHandler.java:561)
at oracle.sysman.emx.AgentFileHandler.undeployFiles(AgentFileHandler.java:448)
at oracle.sysman.emx.AgentFileHandler.runOperation(AgentFileHandler.java:245)
at oracle.sysman.emx.AgentFileHandler.undeploy(AgentFileHandler.java:112)
at oracle.sysman.emx.MPHandler.runOperation(MPHandler.java:165)
at oracle.sysman.emx.MPHandler.undeploy(MPHandler.java:118)
at oracle.sysman.emx.AgentUndeployWorker.undeployFromAgent(AgentUndeployWorker.java:118)
at oracle.sysman.emx.AgentUndeployWorker.run(AgentUndeployWorker.java:52)
at oracle.sysman.util.threadPoolManager.WorkerThread.run(Worker.java:261)
2012-01-25 13:09:56,820 [ManagementPluginWorker(timesten_imdb2:2.2,timesten-poc-01.test.com:3872)] ERROR threadPoolManager.WorkerThread run.283 - Exception message: null
java.lang.Error
at oracle.sysman.emx.AgentUndeployWorker.run(AgentUndeployWorker.java:56)
at oracle.sysman.util.threadPoolManager.WorkerThread.run(Worker.java:261)
2012-01-25 13:09:56,820 [Thread-76] ERROR em.emx workerDied.250 - java.lang.Error
java.lang.Error
at oracle.sysman.emx.AgentUndeployWorker.run(AgentUndeployWorker.java:56)
at oracle.sysman.util.threadPoolManager.WorkerThread.run(Worker.java:261)

Error 2:
2012-01-26 17:54:31,728 [EMUI_17_54_31_/console/emx/deploy] ERROR ui.DeployController handleEvent.283 - oracle.sysman.emx.InvalidCredentialException: Preferred credentials are not set for target timesten-poc-01.test.com:3872 of type oracle_emd
oracle.sysman.emx.InvalidCredentialException: Preferred credentials are not set for target timesten-poc-01.test.com:3872 of type oracle_emd
at oracle.sysman.emx.Util.getPreferredCredentials(Util.java:76)
at oracle.sysman.emx.AgentDestination.getAgentDestinations(AgentDestination.java:236)
at oracle.sysman.emx.AgentDestination.getAgentDestinations(AgentDestination.java:213)
at oracle.sysman.emx.ui.DeployVerificationBean.getAgentDestinations(DeployVerificationBean.java:556)
at oracle.sysman.emx.ui.DeployVerificationBean.validateMP(DeployVerificationBean.java:608)
at oracle.sysman.emx.ui.DeployVerificationBean.populateTargets(DeployVerificationBean.java:532)
at oracle.sysman.emx.ui.DeployController.handleEvent(DeployController.java:206)
at oracle.sysman.emSDK.svlt.PageHandler.handleRequest(PageHandler.java:578)
at oracle.sysman.emSDK.svlt.EMServlet.myDoGet(EMServlet.java:777)
at oracle.sysman.emSDK.svlt.EMServlet.doGet(EMServlet.java:328)
at oracle.sysman.eml.app.Console.doGet(Console.java:304)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:65)
at oracle.sysman.eml.app.EMRepLoginFilter.doFilter(EMRepLoginFilter.java:265)
at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:16)
at oracle.sysman.eml.app.BrowserVersionFilter.doFilter(BrowserVersionFilter.java:122)
at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:20)
at oracle.sysman.emSDK.svlt.EMRedirectFilter.doFilter(EMRedirectFilter.java:102)
at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:20)
at oracle.sysman.eml.app.ContextInitFilter.doFilter(ContextInitFilter.java:369)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:670)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:341)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:816)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:231)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:136)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:192)
at java.lang.Thread.run(Thread.java:534)
Caused by: oracle.sysman.emx.StatusError: Severity: 0
Message bundle: oracle.sysman.emx.EmxMsg
Message ID: NO_PREF_CREDS_FOUND_ERROR
Substitutions: timesten-poc-01.test.com:3872

Error 3:
2012-02-02 15:21:26,262 [Shutdown] DEBUG jdbc.leak checkLeakedConnections.214 -
java.lang.Exception: Connection Leak Exception
at oracle.sysman.util.jdbc.DefaultConnectionListener.connectionOpened(DefaultConnectionListener.java:168)
at oracle.sysman.util.jdbc.ConnectionListenerManagerImpl.processConnectionEvent(ConnectionListenerManagerImpl.java:87)
at oracle.sysman.util.jdbc.ConnectionCache.processConnectionEvent(ConnectionCache.java:469)
at oracle.sysman.util.jdbc.ConnectionWrapper._fireOpenedEvent(ConnectionWrapper.java:1695)
at oracle.sysman.util.jdbc.ConnectionWrapper.<init>(ConnectionWrapper.java:212)
at oracle.sysman.emSDK.svc.conn.FGAConnection.<init>(FGAConnection.java:150)
at oracle.sysman.emSDK.svc.conn.FGAConnectionCache.getFGAConnection(FGAConnectionCache.java:321)
at oracle.sysman.emSDK.svc.conn.ConnectionService.getSystemConnection(ConnectionService.java:1403)
at oracle.sysman.emdrep.dbjava.loader.XMLLoaderContext.getConnection(XMLLoaderContext.java:1048)
at oracle.sysman.emdrep.dbjava.loader.XMLLoaderContext.initLoaderParameters(XMLLoaderContext.java:3800)
at oracle.sysman.emdrep.dbjava.loader.XMLLoader.run(XMLLoader.java:1351)
at java.lang.Thread.run(Thread.java:534)
2012-02-02 15:21:26,262 [Shutdown] INFO svc.ServiceUtil cleanupServices.214 - Destroying oracle.sysman.emSDK.license.LicenseManager
2012-02-02 15:21:26,262 [Shutdown] INFO svc.ServiceUtil cleanupServices.214 - Destroying oracle.sysman.emSDK.svc.houseKeeping.HouseKeepingService
2012-02-02 15:21:26,262 [Shutdown] INFO svc.ServiceUtil cleanupServices.214 - Destroying oracle.sysman.emSDK.topo.TopoManager
2012-02-02 15:21:26,263 [Shutdown] INFO svc.ServiceUtil cleanupServices.214 - Destroying oracle.sysman.emSDK.intg.IntegrationManager
2012-02-02 15:21:26,263 [Shutdown] INFO svc.ServiceUtil cleanupServices.214 - Destroying oracle.sysman.eml.app.EMDClientInitializer
2012-02-02 15:21:26,263 [Shutdown] INFO svc.ServiceUtil cleanupServices.214 - Destroying oracle.sysman.emSDK.conf.ConfigManager
2012-02-02 15:21:26,263 [Shutdown] INFO svc.ServiceUtil cleanupServices.229 - Done with service cleanup!
2012-02-02 15:21:26,263 [Shutdown] DEBUG cache.CacheManager sessionDestroyed.99 - Session :24748589 destroyed
2012-02-02 15:21:26,264 [Shutdown] DEBUG audit.AuditCacheManager logp.251 - AuditCacheManager.getAuditSwitch() returns false
2012-02-02 15:22:09,090 [Orion Launcher] ERROR app.ContextInitializer contextInitialized.460 - Integration Class not found: oracle.sysman.pp.virtualization.ui.provision.ovm.VirtualizationProvIntegration
2012-02-02 15:22:13,235 [Orion Launcher] ERROR app.ContextInitializer contextInitialized.453 - Integration Class not found: oracle.sysman.test.pp.common.intg.ProvTestIntg
2012-02-02 15:22:18,532 [Orion Launcher] ERROR app.ContextInitializer contextInitialized.453 - Integration Class not found: oracle.sysman.pp.paf.sample.ui.intg.PAFDemoIntegration

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms