status is STATUS_FAIL for GET_AUTHN_SCHEME event. Error code OAM-02073

This morning I was updating a WebGate to use SERVER_NAME as Preferred Host when I started to find this error message appearing in the Access Manager logs.

<Apr 13, 2013 10:19:26 AM EST> <Warning> <oracle.oam.controller> <OAM-02073> <Error while checking if the resource is protected or not.>
<Apr 13, 2013 10:19:26 AM EST> <Error> <oracle.oam.proxy.oam> <OAM-04029> <Error in generating AMEvent. Details Event Response status is STATUS_FAIL for GET_AUTHN_SCHEME event. Error code OAM-02073 status fail isExcluded false>
<Apr 13, 2013 10:19:26 AM EST> <Error> <oracle.oam.proxy.oam> <OAM-04020> <Exception encountered while processing the request message:
oracle.security.am.proxy.oam.requesthandler.OAMProxyException: Event Response status is STATUS_FAIL for GET_AUTHN_SCHEME event. Error code OAM-02073 status fail isExcluded false
        at oracle.security.am.proxy.oam.requesthandler.NGProvider.checkProtected(NGProvider.java:4272)
        at oracle.security.am.proxy.oam.requesthandler.NGProvider.getIsRescProtectedResponse(NGProvider.java:1335)
        at oracle.security.am.proxy.oam.requesthandler.NGProvider.getResponse(NGProvider.java:336)
        at oracle.security.am.proxy.oam.requesthandler.RequestHandler.handleRequest(RequestHandler.java:346)
        at oracle.security.am.proxy.oam.requesthandler.RequestHandler.handleMessage(RequestHandler.java:169)
        at oracle.security.am.proxy.oam.requesthandler.ControllerMessageBean.getResponseMessage(ControllerMessageBean.java:75)
        at oracle.security.am.proxy.oam.requesthandler.ControllerMessageBean_eo7ylc_MDOImpl.__WL_invoke(Unknown Source)
        at weblogic.ejb.container.internal.MDOMethodInvoker.invoke(MDOMethodInvoker.java:35)
        at oracle.security.am.proxy.oam.requesthandler.ControllerMessageBean_eo7ylc_MDOImpl.getResponseMessage(Unknown Source)
        at oracle.security.am.proxy.oam.mina.ObClientToProxyHandler.messageReceived(ObClientToProxyHandler.java:205)
        at org.apache.mina.common.DefaultIoFilterChain$TailFilter.messageReceived(DefaultIoFilterChain.java:743)
        at org.apache.mina.common.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:405)
        at org.apache.mina.common.DefaultIoFilterChain.access$1200(DefaultIoFilterChain.java:40)
        at org.apache.mina.common.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:823)
        at org.apache.mina.common.IoFilterEvent.fire(IoFilterEvent.java:54)
        at org.apache.mina.common.IoEvent.run(IoEvent.java:62)
        at oracle.security.am.proxy.oam.mina.CommonJWorkImpl.run(CommonJWorkImpl.java:41)
        at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:184)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
>

Turns out that OHS was presenting an uknkown host to Access Manager via the WebGate, due to the Health Check being performed by OPMN. Turns out that OPMN make a HEAD request to /index.html using the Server Hostname as HOST quite often and I was seeing the following in ${ORACLE_INSTANCE}/diagnostics/logs/${COMPONENT_TYPE}/${COMPONENT_NAME}/oblog.log

2013/04/[email protected]:02:06.643000	2156	2556	ACCESS_GATE	ERROR	0x0000151A	..\src\isprotected.cpp:294	"Failure to connect to Access Server"	HTTPStatus^500	Error^The AccessGate is unable to contact any Access Servers.	
2013/04/[email protected]:02:06.644000	2156	2556	WEB	ERROR	0x0000151F	..\src\apache2_req_info.cpp:202	"WebGate Error Report"	Message^The WebGate plug-in is unable to contact any Access Servers.	ReqReq^HEAD  /index.html HTTP/1.1	ReqProto^HTTP/1.1	ReqHost^win-51nk3n8aiq8	ReqStatLine^	ReqStatus^200	ReqRawUri^/index.html	ReqUri^/index.html	ReqFilename^C:/Oracle/Middleware/Oracle_WT1/instances/instance1/config/OHS/ohs1/htdocs/index.html	ReqPath^	ReqArgs^	

By adding the server host name (win-51nk3n8aiq8) to the Host Identifier registered by the WebGate the error message disappeared from both logs.

Loading Google+ Comments ...