E-AS/TUX: PTWEBSERVER Account Causing "bea.jolt.ApplicationException: TPESVCFAIL" when Logging on to PIA
SYMPTOMS
While upgrading or applying patches to PeopleTools 8.4x+. When getting to the signon page, the following error appears:
CHECK APPSERVER LOGS. THE SITE BOOTED WITH INTERNAL DEFAULT SETTINGS, BECAUSE OF: bea.jolt.ApplicationException: TPESVCFAIL - application level service failure.
The application server starts fine and the users can log into PIA with VP1 or PS with no problems.
Here's what is shown in the APPSRV_MMDD.LOG:
PSAPPSRV.2372 [12/11/03 09:27:35 GetCertificate](3) Error Setting Sign on PeopleCode context for User PTWEBSERVER@bufsql08: Sign on PeopleCode was not executed
PSAPPSRV.2372 [12/11/03 09:27:35 GetCertificate](3) PeopleSoft ID and Password authentication failed. Invalid user PTWEBSERVER@bufsql08.
PSAPPSRV.2372 [12/11/03 09:27:35 GetCertificate](1) (NET.502): PTWEBSERVER@bufsql08 is an Invalid User ID, or you typed the wrong password. User ID and Password are required and case-sensitive. Make sure you're typing in the correct upper and lower case.
PSAPPSRV.2372 [12/11/03 09:27:35 GetCertificate](1) (NET.346): Failed to execute GetCertificate request
SOLUTION
PeopleTools 8.44 and higher requires a user id for internal web server communication (things like loading the profile from the DB, and the performance agent). For applications on PT8.44 and above, PeopleSoft predelivers the PTWEBSERVER user ID.
If you are upgrading to PeopleTools 8.44 or higher you will need to setup the PTWEBSERVER user ID. Go to PeopleTools > Security > User Profiles and add it. All that's needed is to assign it to the "PeopleTools Web Server" role. Also check that the role has "PTPT1500" permission list assigned.
The other thing to check is that the user PTWEBSERVER has access to the PTPT1500 permission list:
select * from PSOPRCLS where OPRID = 'PTWEBSERVER' and OPRCLASS = 'PTPT1500';
If this doesn't resolve the problem, the issue is most probably a bad password. The id and password both come from configuration.properties file on your web server located here:
<PS_HOME>/webserv/<DOMAIN-NAME>/applications/peoplesoft/PORTAL.war/WEB-INF/psftdocs/<PIASITE>
Check that it is correct (it can be specified encrypted or unencrypted, for this test use unencrypted until verified that the password is entered correctly- it is case-sensitive).
==> Encrypt PTWEBSERVER password using PSCipher script :
Usually the password for PTWEBSERVER is encrypted in configuration.properties and you need to add this same password when you create the PTWEBSERVER user id. The password information is entered when you install PIA and the default password for user id PTWEBSERVER is PTWEBSERVER. Enter this under user profile and then this should resolve the password problem.
To encrypt the password use the PSCipher script located on your web server under
<PS_HOME>/webserv/<domain>/. Starting with PeopleTools 8.51 the location is
<PS_HOME>/webserv/<domain>/piabin. The syntax is as follows:
PSCipher <password>
It will return:
Your environment has been set.
Encrypted text: {V1.1}wOvkBkaVu6k=
Copy and paste the new encrypted text to configuration.properties:
WebPassword={V1.1}wOvkBkaVu6k=
This issue can also happen if the PTWEBSERVER account is locked.
From user security, open UserId PTWEBSERVER in PIA and uncheck the box "Account Locked out"
If you are upgrading to PeopleTools 8.44 or higher you will need to setup the PTWEBSERVER user ID. Go to PeopleTools > Security > User Profiles and add it. All that's needed is to assign it to the "PeopleTools Web Server" role. Also check that the role has "PTPT1500" permission list assigned.
The other thing to check is that the user PTWEBSERVER has access to the PTPT1500 permission list:
select * from PSOPRCLS where OPRID = 'PTWEBSERVER' and OPRCLASS = 'PTPT1500';
If this doesn't resolve the problem, the issue is most probably a bad password. The id and password both come from configuration.properties file on your web server located here:
<PS_HOME>/webserv/<DOMAIN-NAME>/applications/peoplesoft/PORTAL.war/WEB-INF/psftdocs/<PIASITE>
Check that it is correct (it can be specified encrypted or unencrypted, for this test use unencrypted until verified that the password is entered correctly- it is case-sensitive).
==> Encrypt PTWEBSERVER password using PSCipher script :
Usually the password for PTWEBSERVER is encrypted in configuration.properties and you need to add this same password when you create the PTWEBSERVER user id. The password information is entered when you install PIA and the default password for user id PTWEBSERVER is PTWEBSERVER. Enter this under user profile and then this should resolve the password problem.
To encrypt the password use the PSCipher script located on your web server under
<PS_HOME>/webserv/<domain>/. Starting with PeopleTools 8.51 the location is
<PS_HOME>/webserv/<domain>/piabin. The syntax is as follows:
PSCipher <password>
It will return:
Your environment has been set.
Encrypted text: {V1.1}wOvkBkaVu6k=
Copy and paste the new encrypted text to configuration.properties:
WebPassword={V1.1}wOvkBkaVu6k=
This issue can also happen if the PTWEBSERVER account is locked.
From user security, open UserId PTWEBSERVER in PIA and uncheck the box "Account Locked out"
No comments:
Post a Comment