Thursday, February 16, 2012

OAM 11.1.1.5 error - java.lang.RuntimeException: Obrareq query string integrity check failed

In my environmnet, i have the following components installed, configured and up and running.

- Oracle Access manager 11.1.1.5
- Webgate 11.1.1.5
- Oracle weblogic 10.3.5

I am getting following error intermittently after the authentication.

"Bad Oracle Access Manager Request Unable to process the request due to unexpected error."



And the url which is seen while getting the error is 

https://hostname.domain.com/oberr.cgi?status%3D400%20errmsg%3DErrUnexpected
 
From the  WLS_OAM-diagnostic.log am getting the following exception.

[WLS_OAM2] [ERROR] [OAM-00002] [oracle.oam.binding] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: ]

[ecid: 004iHYKbvHxCslJLMmXBie00022u0000MG,0:1] [APP: oam_server] [URI: /oam/server/obrareq.cgi] Error occurred while handling the request.[[
java.lang.RuntimeException: Obrareq query string integrity check failed
        at oracle.security.am.proxy.oam.pbl.plugin.OAMProxyEngine.handleOAMLoginRequest(OAMProxyEngine.java:281)
        at oracle.security.am.engines.enginecontroller.OAMEngineController.processEvent(OAMEngineController.java:131)
        at oracle.security.am.controller.MasterController.processEvent(MasterController.java:418)
        at oracle.security.am.controller.MasterController.processRequest(MasterController.java:586)
        at oracle.security.am.controller.MasterController.process(MasterController.java:523)
        at oracle.security.am.pbl.PBLFlowManager.delegateToMasterController(PBLFlowManager.java:209)
        at oracle.security.am.pbl.PBLFlowManager.handleBaseEvent(PBLFlowManager.java:147)
        at oracle.security.am.pbl.PBLFlowManager.processRequest(PBLFlowManager.java:107)
        at oracle.security.am.pbl.transport.http.AMServlet.handleRequest(AMServlet.java:168)
        at oracle.security.am.pbl.transport.http.AMServlet.doPost(AMServlet.java:133)
        at oracle.security.am.pbl.transport.http.AMServlet.doGet(AMServlet.java:675)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:821)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
        at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
        at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:27)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
        at oracle.security.wls.filter.SSOSessionSynchronizationFilter.doFilter(SSOSessionSynchronizationFilter.java:277)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
        at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:111)
        at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
        at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:413)
        at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:94)
        at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:161)
        at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
        at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:136)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3715)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3681)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
        at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2277)
        at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2183)
        at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1454)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
***********************from the oblog.log*******************************


2012/02/16@18:10:52.85794       8399    8455    ACCESS_GATE     ERROR   0x00001531      /ade/aime_h0025/ngamac/src/palantir/webgate2/src/redirect.cpp:271       "The

obrar.cgi failed integrity check." HTTPStatus^400  requestedURL^/obrar.cgi
2012/02/16@18:10:52.85798       8399    8455    WEB     ERROR   0x0000151F      /ade/aime_h0025/ngamac/src/palantir/commonlib/src/apache2_req_info.cpp:198     

"WebGate Error Report"  Message^Unable to process the request due to unexpected error.  ReqReq^GET /obrar.cgi?

encreply=bvFWIjcsDzYNoyc7Zgd4AE325a2Pvav4UVVUiOZ4GGiHKzh5zoqvT8xmlK

%252BdQFMLb6Ezk1wrmX9Vjaxg9aGsMdlo4vMp0wpxGoRKFjfq8UVQUbsCRUEz1MOYIMTKdXvjUiIDkHaoJgGuCocN83zooKdbE5u3mT3KGVtM3b

%252FofqYVYa0gWMZTbnXivYpwlVzWULNsTVWQm4NJW6dXEXn2PcuB%252BRqBxmbX%252F1VBznvtUu3UH3Oat8bcdR67eOLXO2xM0jWU93f36wV9zxnsd8cSZf7I37a3Kh1px066JHU8xX3uHo

%252F7oJDaGlBlueaNNMJFMTe8xOb2XdqjgVd6mep%252B2JSW1ILa13z87IxqWWUPcon%252B7ijyFfY1979wb9ED

%252B4IoBA5rkvNjvRDCiNREosfpiuuzTuyPvK5chZ6%252Fw9Q2HwNdND5%252F0A4kfJde2MEaWV

%252Fxm7d1Y7tn21m0TlOQrpinRm90rsX6HApbQfOzM0%252FCaSTPDMS2YkrR0ARzUZW7XVxfiXezWRaWeu7eZfNWdTEoyo1aQ1bxM0vqxDMqcR4pUFL6jx0qsO2hsea18q0CNwi7T6fL2qG03Y

%252FwnmQXD4uWSd8zFFGyfk5uIEpUZnKdJeJDGHtBebqKRbfl2VL7mqwYbfZ4ynIHHVP%252FQQkeiBjS9zzS3c5G%252BeJh7XgfWEqT9A%252BcvFtUWU2cCqf3g

%252F9YjJDCLceUYJCSDQeD6s3tOGcCceDsDl7a89ZIULt2joUI6%252Bg%253D HTTP/1.1        ReqProto^HTTP/1.1       ReqHost^hostname.domain.com     ReqStatLine^  

 ReqStatus^200   ReqRawUri^/obrar.cgi?encreply=bvFWIjcsDzYNoyc7Zgd4AE325a2Pvav4UVVUiOZ4GGiHKzh5zoqvT8xmlK

%252BdQFMLb6Ezk1wrmX9Vjaxg9aGsMdlo4vMp0wpxGoRKFjfq8UVQUbsCRUEz1MOYIMTKdXvjUiIDkHaoJgGuCocN83zooKdbE5u3mT3KGVtM3b

%252FofqYVYa0gWMZTbnXivYpwlVzWULNsTVWQm4NJW6dXEXn2PcuB%252BRqBxmbX%252F1VBznvtUu3UH3Oat8bcdR67eOLXO2xM0jWU93f36wV9zxnsd8cSZf7I37a3Kh1px066JHU8xX3uHo

%252F7oJDaGlBlueaNNMJFMTe8xOb2XdqjgVd6mep%252B2JSW1ILa13z87IxqWWUPcon%252B7ijyFfY1979wb9ED

%252B4IoBA5rkvNjvRDCiNREosfpiuuzTuyPvK5chZ6%252Fw9Q2HwNdND5%252F0A4kfJde2MEaWV

%252Fxm7d1Y7tn21m0TlOQrpinRm90rsX6HApbQfOzM0%252FCaSTPDMS2YkrR0ARzUZW7XVxfiXezWRaWeu7eZfNWdTEoyo1aQ1bxM0vqxDMqcR4pUFL6jx0qsO2hsea18q0CNwi7T6fL2qG03Y

%252FwnmQXD4uWSd8zFFGyfk5uIEpUZnKdJeJDGHtBebqKRbfl2VL7mqwYbfZ4ynIHHVP%252FQQkeiBjS9zzS3c5G%252BeJh7XgfWEqT9A%252BcvFtUWU2cCqf3g

%252F9YjJDCLceUYJCSDQeD6s3tOGcCceDsDl7a89ZIULt2joUI6%252Bg%253D  ReqUri^/obrar.cgi       ReqFilename^/u01/Oracle/admin/ohs_inst2/config/OHS/ohs2/htdocs/obrar.cgi     

 ReqPath^ ReqArgs^encreply=bvFWIjcsDzYNoyc7Zgd4AE325a2Pvav4UVVUiOZ4GGiHKzh5zoqvT8xmlK

+dQFMLb6Ezk1wrmX9Vjaxg9aGsMdlo4vMp0wpxGoRKFjfq8UVQUbsCRUEz1MOYIMTKdXvjUiIDkHaoJgGuCocN83zooKdbE5u3mT3KGVtM3b/ofqYVYa0gWMZTbnXivYpwlVzWULNsTVWQm4NJW6dXEXn2PcuB

+RqBxmbX/1VBznvtUu3UH3Oat8bcdR67eOLXO2xM0jWU93f36wV9zxnsd8cSZf7I37a3Kh1px066JHU8xX3uHo/7oJDaGlBlueaNNMJFMTe8xOb2XdqjgVd6mep+2JSW1ILa13z87IxqWWUPcon+7ijyFfY1979wb9ED

+4IoBA5rkvNjvRDCiNREosfpiuuzTuyPvK5chZ6/w9Q2HwNdND5/0A4kfJde2MEaWV/xm7d1Y7tn21m0TlOQrpinRm90rsX6HApbQfOzM0/CaSTPDMS2YkrR0ARzUZW7XVxfiXezWRaWeu7eZfNWdTEoyo1aQ1bxM0vqxD

MqcR4pUFL6jx0qsO2hsea18q0CNwi7T6fL2qG03Y/wnmQXD4uWSd8zFFGyfk5uIEpUZnKdJeJDGHtBebqKRbfl2VL7mqwYbfZ4ynIHHVP/QQkeiBjS9zzS3c5G+eJh7XgfWEqT9A

+cvFtUWU2cCqf3g/9YjJDCLceUYJCSDQeD6s3tOGcCceDsDl7a89ZIULt2joUI6+g=
2012/02/16@18:10:52.99962       8399    8455    SSOTOKEN        ERROR   0x00001819      /ade/aime_h0025/ngamac/src/palantir/access_api/src/obuser_session.cpp:2392    

"Authn token passed to the ObUserSession constructor is null or invalid."        raw_code^201

Solution:

I looking for the solution, i will update here as soon as i find it.