When attempting to execute a new
ORA-29273: HTTP request failed
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at “SYS.UTL_HTTP”, line 1491
ORA-06512: at “DEMANTRA_INTG.AU_TRIGGERWORKFLOW”, line 17
ORA-06512: at “DEMANTRA_INTG.XXDM_UPDATE_CONTAINER_DATA”, line 228
ORA-06512: at “DEMANTRA_INTG.XXDM_BUILD_CONTAINER”, line 344
ORA-06512: at line 1
Starting Demantra: Hardware. LOG. JAVA Compatibility ACL / SYS_GRANTS. SYNC WKS. Setup MAIL (Doc ID 1372253.1)
Here is an example of Demantra installed directory where the sql files located:
C:\Program Files (x86)\Oracle Demantra 12.2.4.1\Demand Planner\Database Objects\Oracle Server\admin
SYS_GRANTS
SYS_GRANTS.SQL or ACL error
Have you met this error on db_exception_log? ~ This is how you can fix it!:
29273 : ORA-29273: HTTP request failed
ORA-06512: at “”SYS.UTL_HTTP””, line 1817
ORA-24247: network access denied by access control list (ACL)”
SYS_GRANTS.sql performs the following:
– Adds EXECUTE privileges to access DBMS_CRYPTO (UPGRADE_PASSWORDS): Provides the highest level of user password encryption.
– Adds EXECUTE privileges to access DBMS_LOCK: Provides as SLEEP operation for improved concurrency.
– Adds EXECUTE privileges to access V_$PARAMETER so that Oracle Demantra can better adapt to your database configuration.
– (10g only) Adds GRANT privileges to access the package UTL_HTTP, which enables Oracle Demantra to send notification messages to the application server and engine.
– (11g only) Adds an ACL to enable HTTP communications for Oracle Demantra to send notification messages to the application server and engine.
Find it in Demantra_Folder\Demand Planner\Database Objects\Oracle Server\admin
or directly in the root of the Demantra installation package.
Please also verify you have the correct data in
SQL> select * from sys_params where lower(pname) like ‘%url%’;
You need to run this script manually after installing or upgrading Demantra only if you did not specify a database user with full SYSDBA privileges when running the Installer.
1. !! Login AS sys, WITH sysdba privileges:
2. C:\> cd DEMANTRA_INSTALL_DIRECTORY
3. C:\DEMANTRA_INSTALL_DIRECTORY> sqlplus SYS@SERVER as sysdba@sys_grants.sql DM_SCHEMA_USER ACL_for_WebServerURL ACL_for_EngineServerURL
Example execution:
C:\DEMANTRA_INSTALL_DIRECTORY> sqlplus SYS@SERVER as sysdba@sys_grants.sql DM_SCHEMA_USER ‘/sys/acls/demantra.xml’ ‘ /sys/acls/demantra.xml’
OR by Default: if you are not sure, they will be created if they do not exist, or updated in /sys/acls/demantra.xml:
SQL> @sys_grants.sql DM_USER ACL_DEFAULT ACL_DEFAULT;
General Checks:
— select * from dba_network_acls;
— select * from dba_network_acl_privileges;
Check also in sys_params or Business Modeler
— AppServerURL and
— EngineServerURL
— select * from sys_params where lower(pname) like ‘%url%’;
Check:
— SQL> select * from DBA_tab_privs where grantee = ‘DEMANTRA’ ; — (dem schema)
— Be sure from system user run if needed entry for APPS user against demantra.xml in dba_network_acl_privileges table: BEGIN DBMS_NETWORK_ACL_ADMIN.ADD_PRIVILEGE ( ‘/sys/acls/demantra.xml’, ‘APPS’,TRUE,’connect’); COMMIT; END;
—Also check entry for UTL_HTTP table for the query – select * from DBA_tab_privs where grantee = ‘DEMANTRA’ ;
Check
For failed login problem to Collaborator Workbench, check if sys_grants is needed to be applied again:
1. SQL> select distinct encryption_type from user_id; — This should return a single value like “SHA-1”
2. SQL> select encryption.get_highest_desc() from dual; — This should return the same value returned in step (1).
If the result of (1) is “SHA-1” but the return of (2) is something else, then you need to fix your sys_grants.
References:
Document: 454369.1 Roles and Privileges that are granted to the Demantra database during the install process
Document: 730883.1 Additional Database Privilege needed for Demantra Schema when Running on Oracle 11g Database
Document: 1064995.1 Additional Configurations needed when Running Demantra on Oracle 11g Databases
Oracle Demantra Installation Guide for Release 7.3 Document: 825082.1
Like this:
Like Loading...
Thoughts from James H. Lui 
You must be logged in to post a comment.