oracle 19c apex 19.1 openid连接配置错误ORA-24247:访问控制列表(ACL)拒绝网络访问

oracle 19c apex 19.1 openid连接配置错误ORA-24247:访问控制列表(ACL)拒绝网络访问,oracle,oracle-apex,oracle19c,oracle-apex-19.1,Oracle,Oracle Apex,Oracle19c,Oracle Apex 19.1,我通过选择访问控制启用基于角色的用户授权功能创建了一个新的应用程序is APEX 19.1。默认的身份验证方案applicationexpress身份验证工作正常。但当我将其更改为OpenID Connect并运行该应用程序时,我得到以下错误 - ora_sqlerrm: ORA-29273: HTTP request failed ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 1283 ORA-06512:

我通过选择访问控制启用基于角色的用户授权功能创建了一个新的应用程序is APEX 19.1。默认的身份验证方案
applicationexpress身份验证
工作正常。但当我将其更改为OpenID Connect并运行该应用程序时,我得到以下错误

- ora_sqlerrm: ORA-29273: HTTP request failed
ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 1283
ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 924
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at "SYS.UTL_HTTP", line 380
ORA-06512: at "SYS.UTL_HTTP", line 1148
ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 902
ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 1136
ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 1473
ORA-06512: at "APEX_190200.WWV_FLOW_WEBSERVICES_API", line 416
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_SOCIAL", line 79
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_SOCIAL", line 145
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_SOCIAL", line 244
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_NATIVE", line 485
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_NATIVE", line 1256
ORA-06512: at "APEX_190200.WWV_FLOW_PLUGIN", line 2840
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION", line 1970
这是错误回溯

- error_backtrace: ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 1283
ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 924
ORA-06512: at "SYS.UTL_HTTP", line 380
ORA-06512: at "SYS.UTL_HTTP", line 1148
ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 902
ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 1136
ORA-06512: at "APEX_190200.WWV_FLOW_WEB_SERVICES", line 1473
ORA-06512: at "APEX_190200.WWV_FLOW_WEBSERVICES_API", line 416
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_SOCIAL", line 79
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_SOCIAL", line 145
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_SOCIAL", line 244
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_NATIVE", line 485
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION_NATIVE", line 1256
ORA-06512: at "APEX_190200.WWV_FLOW_PLUGIN", line 2840
ORA-06512: at "APEX_190200.WWV_FLOW_AUTHENTICATION", line 1970
ORA-06512: at "APEX_190200.WWV_FLOW", line 4058
我尝试了以下方法来解决这个错误

BEGIN
    DBMS_NETWORK_ACL_ADMIN.APPEND_HOST_ACE(
        host => '*',
        ace => xs$ace_type(privilege_list => xs$name_list('connect'),
                           principal_name => 'apex_db_user',
                           principal_type => xs_acl.ptype_db));
END;
/
语句确实在继续,但我得到了相同的错误

然后我想可能是因为我没有使用SSL。因此,我更改了default.xml文件并添加了以下条目

<entry key="security.verifySSL">false</entry>
false

我是APEX的新手,所以我可能错过了一些东西。访问控制启用基于角色的用户授权功能是否足够?

这是Oracle中的一个安全主题,默认情况下,架构的所有网络权限都将关闭

使用sys作为sysdba帐户,执行以下代码。不要忘记更改架构名称和域

-- Execute as sysdba
DECLARE
  l_acl       VARCHAR2(100) := 'aclname.xml';
  l_desc      VARCHAR2(100) := 'description';
  l_principal VARCHAR2(30)  := 'APEX_SCHEMANAME'; -- UPPERCASE if applies
  l_host      VARCHAR2(100) := 'yourdomain.com'; --hostname to reach
BEGIN

  -- Connection rights
  dbms_network_acl_admin.create_acl(l_acl, l_desc, l_principal, TRUE, 'connect');
 
  -- DNS resolution privilege
  dbms_network_acl_admin.add_privilege(l_acl, l_principal, TRUE, 'resolve');
 
  dbms_network_acl_admin.assign_acl(l_acl, l_host);
 
  COMMIT;
END;
您可以知道执行下一个查询的架构名称

    SELECT TABLE_OWNER FROM all_synonyms
WHERE SYNONYM_NAME = 'WWV_FLOW' and OWNER = 'PUBLIC'

您好,您是否使用社交登录作为身份验证方法??到特定的Oauth2提供程序??或者您自己的组织之一???@RobertoHernandez我使用社交登录作为身份验证方案类型,然后在身份验证提供商下,我选择了OpenId连接提供商,并使用作为OpenId连接服务器的组织单点登录感谢Enrique的回答。我已经成功地执行了那段代码,但仍然会遇到同样的错误。我怀疑我有太多的acl xml文件。它应该与网络相关,因为我在sso中没有看到任何日志