R12.2: E-Business Suite XML Gateway Inbound Test Page ECXOTAInbound Url Fails For All Users With 'Error 403 Forbidden' Or '404 Page Not Found'

Issue:

R12.2 E-Business Suite XML Gateway Inbound Test Page ECXOTAInbound Url Fails For All Users With 'Error 403 Forbidden' Or '404 Page Not Found'.

When attempting to access the XML Gateway Inbound URL  -

http://<hostname>:<port>/webservices/ECXOTAInbound

Getting below error:

The URL with localhost is working i.e. on VNC Server

http://localhost:8000/webservices/ECXOTAInbound

Cause:

By default, AOL/J diagnostic pages and ECXOTAInbound Servlet Page are only accessible from the local host where Oracle HTTP Server is running.

We can verify it by checking content of the s_admin_ui_access_nodes parameter in $CONTEXT_FILE.

$ grep -i s_admin_ui_access_nodes $CONTEXT_FILE

<admin_ui_access_nodes oa_var="s_admin_ui_access_nodes">localhost</admin_ui_access_nodes>

Solution:

To resolve the issue, perform the following steps :

1.    Comment out the ECXOTAInbound entries in $FND_TOP/admin/template/trusted_conf_FMW.tmp

These are the entries:

<Location ~ "^(/)+webservices(/)+ECXOTAInbound">
   Order deny,allow
   Deny from all
   Allow from %s_admin_ui_access_nodes%
</Location>

Comment out as below:

# <Location ~ "^(/)+webservices(/)+ECXOTAInbound">
#  Order deny,allow
#  Deny from all
#  Allow from %s_admin_ui_access_nodes%
# </Location>

2.     Run autoconfig so the changes are processed.

3. Bounce the oafm services or all application tier services

4. Check          $IAS_ORACLE_HOME/instances/EBS_web_<SID>_OHS1/config/OHS/EBS_web_<SID>/trusted.conf
to verify if the changes are reflected.

5. Try to access the XML Gateway Inbound URL http://<hostname>:<port>/webservices/ECXOTAInbound

This should work now.

Note: As a temporary workwround we can just try to comment out the lines in $IAS_ORACLE_HOME/instances/EBS_web_<SID>_OHS1/config/OHS/EBS_web_<SID>/trusted.conf then bounce oafm services if autoconfig cannot be executed.

Additional Checks:

Query to check if OTA is running:

select machine,action, decode(count(*),0,'Error: OTA is Not Running','OTA is Running')
from gv$session
where action like '%OXTA%'
group by machine, action; 

Reference Notes: 

Doc ID 2397274.1: Unable to Access XML Gateway ECXOTAInbound Page after Applying AD / TXK Delta 10 Patches
Doc ID 2335074.1: R12 E-Business Suite XML Gateway Inbound Test Page ECXOTAInbound Url Fails For All Users With 'Error 403 Forbidden' Or '404 Page Not Found'
Doc ID 2324193.1: R12 E-Business Suite XML Gateway Users Are Unable To Access Due To 'Error 403 Forbidden' When Accessing /webservices/ECXOTAInbound To Start Inbound XML Gateway Process