By default, if you were to access the showjobs page of your Oracle Reports 11g or 12c environment, any user is able to view the page and open up the reports even if they contain confidential information. There is a way you can configure the showjobs to where only specific users can access this page or any of the Reports admin pages (steps written for 12c but they will also work for 11g):

  1. Open up rwservlet.properties (make a backup first) located in $DOMAIN_HOME/config/fmwconfig/servers/WLS_REPORTS/applications/reports_12.2.1/configuration.
  2. Locate the line <webcommandaccess>L2</webcommandaccess>. Change L2 to L1.
    1. L1 will only permit end users to use the non-admin rwservlet commands GETJOBID, KILLJOBID, SHOWAUTH, and SHOWJOBID.
    2. rwservlet.properties
  3. Save and close the file.
  4. Open up rwserver.conf (make a backup first) located in $DOMAIN_HOME/config/fmwconfig/components/ReportsServerComponent/$rptsvr.
  5. Near the bottom of the file, look for the line <queue maxQueueSize=”1000”/>. Immediately after this line, add the following line:
    1. <identifier encrypted=”no”>username/password</identifier>
    2. NOTE: After you restart WLS_REPORTS and rep_server1, the credentials will be encrypted. Also, you may create any username/password combination you like. It does not need to be what is configured in weblogic or in the database.
    3. rwserver.conf update
  1. Save and close the file.
  2. Restart both WLS_REPORTS and the standalone reports server.
  3. Try to access showjobs normally. You should be presented with the following error:
    1. REP-52262: Diagnostic output is disabled
    2. REP-52262
  1. Now, add “?authId=username/password” to the end of the URL. Notice how the showjobs page appears.
    1. showjobs working
  1. If you were to reopen rwserver.conf, notice how the credentials are encrypted:
    1. rwserver.conf encrypted

Source: Oracle Support document 1242614.1 (Steps in the Oracle Support document are written for 11g)

There is a known issue where running tree reports from PITSS.CON 15.4.2 installed in a Forms 12c environment where the error “Error when running report” appears when attempting to create a PDF tree report. This happens to not be a bug with the latest PITSS.CON release. To get tree reports to generate in PITSS.CON, a new configuration is required in Forms and Reports 12c to run PITSS.CON tree reports in 12c.

First, make sure that all environment files (.env) have the new COMPONENT_CONFIG_PATH environment variable set up. For more information, you may check out our knowledge base article on setting up this environment variable here: https://pitss.com/us/2016/05/06/running-oracle-reports-12c-causes-frm-41214-errors/

Once the variable is set up, you will also need to set up two environment variables for your Reports 12c environment. This should be set up in rwserver.conf. If you are using a standalone reports server, the file is located in %DOMAIN_HOME%\config\fmwconfig\components\ReportsServerComponent\%RptSvr%; if you are using the in-process reports server, the file is located in %DOMAIN_HOME%\config\fmwconfig\servers\WLS_REPORTS\applications\reports_12.2.1\configuration. Before modifying this file, please make a backup. Inside the file after the <engine> tag containing the id=”rwEng” line, add the following lines (you may use the screenshot below as a guide):

<environment id=”pitss”>
<envVariable name=”REPORTS_PATH” value=”C:\pitsscon\tool;c:\pitsscon\%PITSS_USER%\rdf;c:\pitsscon\%PITSS_USER%\olb;” />
<envVariable name=”TNS_ADMIN” value=”%DOMAIN_HOME%\config\fmwconfig”/>
</environment>

NOTE: This assumes that PITSS.CON is installed in C:\pitsscon as it uses paths such as C:\pitsscon\tool and C:\pitsscon\%PITSS_USER%\rdf. Also, %PITSS_USER% should be your PITSS.CON user. If you have more than one PITSS.CON user, please specify the RDF and OLB paths for all PITSS.CON users here. For the TNS_ADMIN variable, the fully-written path for %DOMAIN_HOME%\config\fmwconfig should be filled inside the value attribute.

rwserver.conf for PITSS.CON

After the update is made, save and close the file. Once the file is updated, you will need to restart your reports server (the standalone reports server if you configured the standalone reports server or WLS_REPORTS if you configured the in-process reports server).

After restarting your reports server, you should be able to run a tree report in PITSS.CON.

After upgrading Oracle Forms and Reports from a previous version (e.g. 10g or 11g) to 12c, there is a known issue where running Oracle Reports in 12c with the RUN_REPORT_OBJECT built-in causes the following error:

“FRM-41214: Unable to run report”

Starting in Forms 12c, a new environment variable, CONFIGURE_COMPONENT_PATH, has been created. This should be placed in your environment file (.env) used by your Forms application. The variable should be mapped to the location of your ReportsToolsComponent. You may either edit the file manually or create a new variable under Environment Configuration for the Forms instance in EM FMW Control.

Example: CONFIGURE_COMPONENT_PATH=%DOMAIN_HOME%\config\fmwconfig\components\ReportsToolsComponent\reptools1

COMPONENT_CONFIG_PATH

NOTE: If you use EM FMW Control to create or modify your environment variables for Forms, it is highly recommended to continue to use EM FMW Control.

In addition, make sure that the CLASSPATH variable has the full path to rwrun.jar (%ORACLE_HOME%\reports\jlib\rwrun.jar), as this jar file is required to generate reports from Oracle Forms.

After you have made the changes, re-launch the Forms application. You should now be able to run a report.

Source: Oracle Support note 2074841.1

After installing and configuring Oracle Forms and Reports 12c, if you try to launch either Reports Builder (rwbuilder.bat) or Reports Converter (rwconverter.bat), both located in %ORACLE_HOME%\bin, you will most likely encounter the following error:

“Windows cannot find ‘\bin\rwbuilder.exe'” or “Windows cannot find ‘\bin\rwconverter.exe'”

Reports Builder 12c

The reason for the error is because the values for the DOMAIN_HOME and COMPONENT_NAME need to be filled out in both batch files. You may fix the error by completing these steps:

  1. Go to %ORACLE_HOME%\bin and make backups of both rwbuilder.bat and rwconverter.bat.
  2. Open up rwbuilder.bat in a text editor (Notepad, Wordpad, etc.)
  3. Look for $$domain_home$$ and $$component_name$$. Replace $$domain_home$$ with the full path to your domain home (Example: C:\Oracle\Middleware\user_projects\domains\FormsDomain) and $$component_name$$ with the name of your ReportsToolsComponent (Example: reptools1).
  4. Immediately before the line with “set DOMAIN_HOME=…”, insert the line: set ORACLE_HOME=<PATH_TO_ORACLE_HOME> where <PATH_TO_ORACLE_HOME> is the fully-written path to your Forms 12c Oracle home.
  5. Save and close the file.
  6. Repeat steps 2-5 for rwconverter.bat.

This is how the file looks before the changes are made:

rwbuilder.bat before

This is how the file should look after the changes are made:

rwbuilder.bat after

After making the changes above, Reports Builder and Reports Converter should open up normally.

IMPORTANT: Downloading JDK and JRE 7 from My Oracle Support requires an account with My Oracle Support.

As of July 14, 2015, JDK 7 and JRE 7 are no longer available for public download. Although the latest version of Oracle Forms, version 11.1.2.2.0 (11gR2) is supported to use JRE 8, it is currently NOT supported to use JDK 8 for Oracle Forms and Reports 11gR2 as well as for other Fusion Middleware products such as ADF (11g and 12c) and OHS (11g and 12c). However, as public downloads for Java 7 are no longer available, there are only two options to download JDK 7.

One method (requires an Oracle account) is to use the Oracle Java Archive: http://www.oracle.com/technetwork/java/archive-139210.html

The second method involves downloading the JDK and JRE from My Oracle Support. The following steps will explain how you can download the latest JDK and JRE 7 from My Oracle Support:

  1. Log into https://support.oracle.com using your My Oracle Support account.
  2. Go to Patches & Updates
  3. Search for the following patches:
    1. JDK/JRE 7u79: 20418638
    2. JDK/JRE 7u80: 20418657
    3. Specify the OS platform of your server environment
    4. image
  4. Select the Patch number on the left side of the table
    1. image
  5. Click “Download”
    1. image
  6. Click the name of the zip file to download it.

Once the JDK and JRE are downloaded, you should be able to find both the JDK and the JRE for the particular OS you selected.

image

There is a bug in Forms/Reports 11.1.2.2.0 where reports generated into PDFs are not displayed correctly in AIX and Solaris (possibly even Windows 32-bit) environments. According to Oracle Support note 1522543.1, an Oracle Patch, 17903693, will need to be applied to the Forms/Reports environment.

NOTE: This patch is already included with Forms and Reports 11.1.2.2.0 for Windows 64-bit.

How to Apply the Patch:

  1. Download Patch 17903693 from My Oracle Support
  2. Extract the patch into your directory. As a reference, let’s call the extracted location PATCH_TOP.
  3. Shut down all WebLogic servers and instances (OPMN).
  4. Set the following environment variables (NOTE: MW_HOME is your Oracle Middleware home):
    1. Windows: set PATH=%PATH%;%MW_HOME%\oracle_common\OPatch
    2. Windows: set ORACLE_HOME=%MW_HOME%\Oracle_FRHome1
    3. Unix: export PATH=$PATH:$MW_HOME/oracle_common/OPatch
    4. Unix: export ORACLE_HOME=$MW_HOME/Oracle_FRHome1
  5. Go to the PATCH_TOP/17903693 directory (PATCH_TOP\17903693 in Windows)
  6. Run: opatch apply
  7. Type ‘y’ and press Enter when it asks if the system is ready for patching.
  8. When the patch is finished, start up the WebLogic servers and OPMN.

PDF reports should display correct after applying the steps above.

NOTE: Please review the README file before applying any Oracle patch!

Source: Oracle Support note 1522543.1

There is a known issue where the standalone reports server can fail to start in OPMN. If this is the case, check in $ORACLE_INSTANCE/diagnostics/logs/ReportsServerComponent/$NAME_OF_REPORTS_SERVER/rwserver_diagnostic.log for the root cause of the error. If you see the following error appear and you are working with the DISPLAY environment variable if set in your environment:

[REP-56105] [oracle.reports.server] [tid: 11]
[ecid: ###################] EngineManager:manage
Engine rwEng-0 died with error: {1}.REP-0004: User preference file
cannot be opened.[[
REP-0004: User preference file cannot be opened.

You may need to have the REPORTS_DEFAULT_DISPLAY variable set to YES inside of reports.sh.  Normally it is set to YES, but in case it is set to NO, you may follow these steps to fix the problem:

1. Go to $ORACLE_INSTANCE/config/reports/bin

2. Make a backup of reports.sh

3. Open up reports.sh in a text editor.

image

4. Scroll down to near the end of the file until you see the variable REPORTS_DEFAULT_DISPLAY. Change the value from NO to YES.image

5. Save and close the file6. Restart WLS_REPORTS

After applying the steps above, you should be able to successfully start up the standalone reports server.

NOTE: This will also work if you experience the same issue with the in-process reports server.

Source: Oracle Support note 1421439.1

After a server with WebLogic installed is restarted either normally or abnormally, there is a known issue where the managed WebLogic servers are unable to be started up using the Node Manager inside the WebLogic Administration Console. Errors produced are:

“For server MANAGED_SERVER_NAME, the Node Manager associated with machine MACHINE_NAME is not reachable.”

image

To solve this problem, please follow these steps below:

1. Make sure all managed WebLogic servers are shut down.

2. Shut down the AdminServer.

3. Stop the Node Manager. In Windows, this can be done by stopping the Windows service (if installed) or closing out of the Command Prompt window running startNodeManager.cmd.

4. In the file system, delete the following files for each managed server:

a. %DOMAIN_HOME%\servers\%MANAGED_SERVER_NAME%\data\nodemanager\%MANAGED_SERVER_NAME%.state

b. %DOMAIN_HOME%\servers\%MANAGED_SERVER_NAME%\data\nodemanager\%MANAGED_SERVER_NAME%.lck

c. %DOMAIN_HOME%\servers\%MANAGED_SERVER_NAME%\data\nodemanager\%MANAGED_SERVER_NAME%.pid

NOTE: If any of the above three files do not appear, that will be perfectly fine as that can happen sometimes.

5. Start up the Node Manager.

6. Start the Admin Server using either a startup script or WLST.

 

After applying the steps above, you should be able to start the managed servers from the Admin Console.

Source: Oracle Support note 1293552.1

In Reports Builder 11g, there is a known issue where copying and pasting items within any of the layout editors in Reports Builder causes Reports Builder to freeze or hang. This has been reported with Reports 11.1.1.6.0, 11.1.1.7.0, 11.1.2.1.0 and 11.1.2.2.0 with Windows 7 64-bit.

To resolve the issue, Oracle has provided a patch for download (NOTE: Access to My Oracle Support (Metalink) is required):

1. Download Patch 17301874 from Oracle Support (https://support.oracle.com). Make sure you specify the version of Forms and Reports you have installed.

2. Extract the patch in your PC or server.

3. Shut down all WebLogic servers and OPMN processes pertaining to your Forms environment.

image

4. Open up Command Prompt as an administrator.

5. Set the following environment variables:

set ORACLE_HOME=C:\Oracle\Middleware\as_1 (or C:\Oracle\Middleware\Oracle_FRHome1)

set PATH=%PATH%;C:\Oracle\Middleware\oracle_common\OPatch

image

6. To ensure your OPatch version meets the prerequisites, run: opatch veresion

image

7. Navigate to where you extracted the Oracle patch and go into the 17301874 folder. Once there, install the patch by running: opatch apply

image

8. Ensuring that the Oracle Home mentioned matches the one for your Oracle Forms environment and everything in the Oracle Home is shutdown, type ‘y’ when asked if the system is ready for patching.

image

9. You will receive a success message when the patch is installed successfully.

10. Start up everything from the WebLogic servers to OPMN.

After applying the steps above, the problem should be fixed with Reports Builder.

Source: Oracle Support note 1395965.1

By default, when Oracle WebLogic Server uses HTTPS for secure connections such as for Forms and Reports, SSL (Secure Socket Layer) v3.0 and TLS (Transport Layer Security) v1.0 are configured. SSL is the original protocol used for secure connections via HTTPS where TLS is the newer, more secure protocol. In recent months, a security vulnerability known as Poodle, “Paddling Oracle On Downgraded Legacy Encryption”, was discovered to be. In summary, Poodle is a “man-in-the-middle” exploit which can allow hackers to view encrypted information. More information on Poodle can be found on Oracle’s website: http://www.oracle.com/technetwork/topics/security/poodlecve-2014-3566-2339408.html

The vulnerability exists with SSL v3.0, which is commonly used as the secure protocol used for HTTPS connections with using Oracle WebLogic Server. However, the TLS protocol does not contain this vulnerability. If WebLogic is configured for both (it is by default) and the end-user’s Web browser has SSL v3.0 and TLS v1.0 both enabled, there is a possibility that the WebLogic connection via HTTPS may be done using SSL v3.0 instead of TLS v1.0. A WebLogic connection is defined by any connection going to an application (JSP, Forms & Reports, ADF, Discoverer, etc.) which is deployed in Oracle WebLogic Server.

The best approach is to configure WebLogic to only use TLS v1.0. With this, all end-users will be forced to use TLS 1.0 on all HTTPS connections to the WebLogic server whether it is used for running deployed JSP applications, Oracle Forms and Reports applications, Oracle ADF applications, or other Oracle Fusion Middleware applications. The changes are quick and easy to deploy. Also, no new SSL/TLS certificates will need to be created. Implementing TLS v1.0 only for WebLogic can be done with these steps:

1. Log into the WebLogic Administration Console (Example: http://server.domain:7001/console)

2. Log in with the weblogic username and password

3. Go to Environment –> Servers

image

4. Select a WebLogic server where SSL has been set up. We’ll use WLS_FORMS as an example.

image

5. In the top-left corner, click “Lock & Edit”.

image

6. Make sure the Configuration tab is enabled. Select the “Server Start” sub-tab.

image

7. In the Arguments section, type in the following parameter:

-Dweblogic.security.SSL.protocolVersion=TLS1

NOTE: This will force the WebLogic server to use TLS instead of SSL.

When finished, click the “Save” button.

image

8. For any other WebLogic servers using SSL/TLS, repeat steps 4-7 (except for step 5 as you will be in “Lock & Edit” mode already).

9. In the top-left corner, click “Activate Changes” to apply all changes.

image

10. If any WebLogic servers which had the changes applied are currently running, they will need to be restarted using the Admin Console. If this includes the AdminServer, you will need to use WLST to start up the AdminServer as you will not be able to use the Admin Console if the AdminServer is down.

Now that WebLogic is configured for TLS v1.0, all end users will need to make sure that TLS 1.0 is enabled in their Web browsers:Internet Explorer:NOTE: It is likely that TLS 1.0 is enabled in Internet Explorer, but it is recommended to check anyway.Go to Tools –> Internet Options (or simply Internet Options from the menu in the top-right corner)In the Advanced tab, scroll down to the Security section. Make sure “Use TLS 1.0” is enabled.

SNAGHTMLaf2c8f

Mozilla Firefox and Google Chrome:All current releases of Firefox and Chrome have at least TLS 1.0 already enabled.After applying the steps above, you should be using TLS when running anything on the WebLogic server (JSP applications, ADF applications, Forms, etc.) using the HTTPS protocol.

Source: Oracle Support note 1936300.1