Luminis Channels for Banner

I am configuring Luminis Channels for Banner for the first time. We are running Luminis 3.3.3 and Luminis Channels for Banner 7.2. We use a load balancer (Big IP) in front of our INB server. I followed the SCT doc Mid-Tier Installation, but my channels are not working. I either get an unsupported OID service message or a do not have permission to access service message. Does anyone have any suggestions on how to fix this? The UDC sent me to the procedures I already used.

0
No votes yet

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

ExternalAccount set up for user?

This might be a silly question, but when you receive the "do not have permission to access service" message, have you checked that the user trying to access the channels has an ExternalAccount set up for this cpip? I think if you are logging in as the Luminis administrator you may receive this message.

Christine

Debugging Connectors - my list

We have 2 INB app servers set up with load balancing and our original implementation had the banportals.config file hardcoded to 1 of the 2 servers. That worked fine until we had to take that particular server down :) So I just 3 weeks ago went through this so I'll try to remember what we did.

When you get these errors - are the channels themselves working? Or you get this error when you click and its supposed to open INB from within the channel. And I'll just ask - which particular channel are you testing out - they all seem to behave differently. Some are pretty much static content with links into Self Service and INB, others are actual informational and load / display content from Banner (Advancement channels in particular).

The OID error can be the restult of a couple different things. I'll go through the list of things I have, I apologize if you know this already or have tried all of this -

  • check the logs - there are 2 $CP_ROOT/products/sso/logs/cpipconnector.log and $CP_ROOT/products/ws/https-cpipconnector/logs/errors (and access if you want), there might be clues. Typically the cp.log will have simply the OID message in it you had on the screen. You could bump that up to debug if you wanted for more info - edit the log4j.properties file in $CP_ROOT/config and change the rootLogger from ERROR to DEBUG. This will take effect about 30 seconds after you save it and will spew forth more than you ever wanted to know. Its important to look at the system clock when you test this way to help you narrow down the portion of the debug dump, otherwise you're weeding through transactions that have nothing to do with your testing.
  • could be the user doesn't have the connector permissions (this will show up in debug mode above). You can add it with this for everyone -
    cptool sync password -add cpip XXXXX (where XXXXX is the connector name you created - probably inb or ssb)
    or add it to one person with cptool set user jwheat ExternalAccount='XXXXX|jwheat|'
  • could be easily solved by simply restarting your cpipconnector server, then bouncing luminis. Luminis tries to connect (ping) each cpip service as it comes up and sometimes if its not up when luminis pings - you get that message.
  • could be something mistyped in the .properties and/or .XML file - the most popular issue is trailing spaces in these files. Even on blank lines make sure there's no spaces at all at the end of lines
  • also check your cpipconnector.properties file to verify you spelled your connector right
  • check configman -g es.systems to make sure its there
  • check configman -g es.xxxxx.* to make sure they're all set right
  • could be that the system end of the connector is returning something that the luminis side isn't expecting. Make sure wherever you're sending your link to works manually. For example - hit the goksso url and I _think_ you'll get a login box - make sure that works.
  • initialize the connector with this -
    http://portal.college.edu/cp/ip/config?sys=XXXXX

    that will yield a blank screen

    Test the connector by hitting the configUrl listed in : configman -g es.xxxxx.configURL - it'll look something like -
    http://portal.college.edu:8008/cpipconnector/XXXXX/GetConfigVersion2

    That should return a querystring looking thing that at quick glance looks like garble. If that happens, the .properties and .xml files are good and the connector is set up right

    then give it a whirl.

    I think that's all I have for testing. If you do all that and it still doesn't work - I'm stumped.
    Good Luck
    -Jon

cpipconnectors.properties

I did not make any changes to cpipconnector.properties, nor do I recall anything in the Mid Tier Install guide.

Could you elaborate on what changes I should have made? Also information on stopping and restarting the cpip server?

Mike

Channel Properties

You might need to check the property settings in the bannerCommon.car file.
File location: /opt/luminis/webapps/luminis/WEB-INF/cars/bannerCommon.car
Copy that file off to another location; then run jar -xvf bannerCommon.car
This will extract the files from the car.
You will need to double check the contents of the following.
./com/sct/banner/portals/providers/properties/BannerDataProviderConfig.properties
If the contents are not correct (have the car file regenerated / or / make the changes there).
If you wish to make the changes there you will need to reproduce the car file.
Go back to the root directory where you expanded the car file and remove bannerCommon.properties. Then run the following command: jar -cvf ../bannerCommon.car *
This will create a new bannerCommon.car file one directory up.

Hope this helps.

Just another quick tip: When checking INB SSO you will need to supply a OID at the end of the getConfig to yeild the proper response from the server. Do a configman -g es.sctinb* and gram the configURL. Take that url and append ?OID=1234
This will return the response for getConfig / if no result is returned you might want to check the configuation values on your INB webserver.

cpipconnector.properties

Sure -

if you look in $CP_ROOT/products/sso/config you'll see a cpipconnector.properties file. This controls some of the behavior of the GCF webserver including http vs https, the port config, root directory for the gcf install etc.

The first line will contain all of the GCF connectors you have (or want live) for example, this is mine -

property.files = mcbb6.properties,ytest.properties,mymail.properties,banweb.properties,sat.properties,bbuddy.properties
,gaim.properties,accweb.properties,disc.properties,degree.properties,moodle.properties,sakai.properties
,gw7.properties,cal7.properties,netstorage.properties,dworks.properties,sctinb.properties

they're all comma separated values of all the .properties files you have in your config directory.

Once you change this, you'll need to bounce the cpipconnector webserver.
(this is on a windows box) -

$CP_ROOT/products/ws/https-cpipconnector/stopsvr.bat
$CP_ROOT/products/ws/https-cpipconnector/startsvr.bat

there are start / stop scripts on solaris in the same directory.

You'll may have to bounce luminis too - not 100% sure.

- Jon

Unsupported OID Message

Hi

(we are using luminis 3.3.114 build 114)

- Unsupported OID occurs when the portal server is unable to contact banner's GetConfigVersion2 url (part of the Banner SSO package - installed on banner side of things) when it starts up. This information is cached.

You can refresh the GetConfigVersion2 information by logging into the portal and going to http://<portal address>/cp/ip/config?sys=sctssb (self service) or http://<portal address>/cp/ip/config?sys=sctinb (internet native banner)....

Thanks

Glenn Aitchison
Application Technical Support Analyst/Luminis System Administrator
Victoria University
Wellington, New Zealand.

Banner Common Car file

We had similar issues with the mid-tier and I had to un-car the file and verify all the banner settings. Once you have the file extracted go to /com/sct/banner/portals/providers/properties
and verify the data in BannerDataProviderConfig.properties

--Matt--