ORATraining Blog » installing

Configuring Oracle Identity and Access Management components

admin — Mon, 06 Feb 2012 09:30:04 +0000

Oracle Fusion Applications Installation: Configuring Oracle Identity and Access Management components

Previous: Installing Oracle Identity and Access Management Components

Configuring Oracle Identity Management components” can be divided into following tasks.

Configuring the Web Tier
Create Weblogic Domain for Identity Management
Extending the Domain with Oracle Internet Directory
Extending the Domain with Oracle Directory Service Manager (ODSM)
Extending the Domain with Oracle Virtual Directory
Extending the Domain with Oracle Access Manager
Extending the Domain to Configure Oracle Identity Manager and Oracle SOA Suite
Installing and Configuring WebGate

Please note that this post is going to be long so allow time to load all images.

Configuring the Web Tier

Start the configuration from /bin

[oracle@fusion bin]$ cd /app/fusion/bea_default/Oracle_WT1/bin

[oracle@fusion bin]$ ./config.sh

Click Next

Select “Oracle HTTP Server” and click Next

For Instance location enter “/app/fusion/bea_default/instances” since we will keep all instances in this location. Provide any appropriate Instance name and OHS component name. We will go for the defaults. Click Next

Select “Specify Ports using Configuration File” and enter file name as /home/oracle/staticports.ini

Now we will copy staticports.ini default file from /installers/webtier/Disk1/stage/Response to home directory /home/oracle

cp /mnt/fusion/installers/webtier/Disk1/stage/Response/staticports.ini ~/staticports.ini

Now click on “View/Edit File” to edit this file.

Uncomment and set the following values. Click Save

OPMN Local Port = 6700

OHS Port = 7777

Click Next

Deselect email notification and click Next

Save summary if needed and click Configure to start configuration.

Important Note: If SELinux is enabled in your Linux operating System then it will throw an error. Since we already disabled it during installation, we will not see that error here.

Once installation finishes, click Next

Save installation summary if needed and click Finish to complete the installation.

It would have already started HTTP server now. We can verify the same.

[oracle@fusion instances]$ ps -ef | grep http

oracle 3521 3491 0 10:06 ? 00:00:00 /app/fusion/bea_default/Oracle_WT1/ohs/bin/httpd.worker -DSSL

oracle 3547 3521 0 10:06 ? 00:00:00 /app/fusion/bea_default/Oracle_WT1/ohs/bin/httpd.worker -DSSL

oracle 3548 3521 0 10:06 ? 00:00:00 /app/fusion/bea_default/Oracle_WT1/ohs/bin/httpd.worker -DSSL

oracle 3549 3521 0 10:06 ? 00:00:00 /app/fusion/bea_default/Oracle_WT1/ohs/bin/httpd.worker -DSSL

Check /app/fusion/bea_default/Oracle_WT1/instances/instance1/config/OHS/ohs1/httpd.conf to make sure it reflects correct user and group name

User oracle

Group oinstall

We can launch http://fusion:7777 (Homepage of Oracle HTTP server) now. It will look as follows.

Create Weblogic Domain for Identity Management

Start the configuration from /oracle_common/commin/bin

[oracle@fusion bin]$ /app/fusion/bea_default/oracle_common/common/bin/config.sh

Select “Create a new Weblogic domain” and click Next

Select “Oracle Enterprise Manager – 11.1.1.0 [oracle_common]” and “Oracle JRF – 11.1.1.0 [oracle_common]” and click Next

Enter details as above or accept default values and click Next.

Since it accepts minimum 8 characters set password again to
oracle123. Please note that you can also change username from weblogic but in future whenever we refer to weblogic user you must enter the new user which selected. We will go for default “weblogic” username

You would see option of Oracle JRockit here. So select that JDK in this list.

Select “Administration Server” and “Managed Servers, Clusters and Machines”. Click Next

Keep defaults but make a note of the port since this will be widely used during next part of installation. Click Next

Just click Next

Click Next again

Select Second Tab “Unix Machine” and enter the hostname as above. Click Next

Click on AdminServer and Click right arrow. Click Next

It will now look as above. Click Next

On Summary page click Create

Once installation finishes, click Done

Make sure that the encrypted username and password values are already in boot.properties

[oracle@fusion security]$ more /app/fusion/bea_default/user_projects/domains/IDM_domain/servers/AdminServer/security/boot.properties

# Generated by Configuration Wizard on Mon Jan 23 10:59:07 GST 2012

username={AES}zaXc3+4y2KGuxnK6WkI7ehKcliQDeandkjdTdu0vpuY=

password={AES}WZ6Zo+j6aGoCyE2nQmCCdboEkA8TDGRlagdSqFGRedo=

Set StartScriptEnabled=true in nodemanager.properties by running following script

[oracle@fusion bin]$ cd /app/fusion/bea_default/oracle_common/common/bin

[oracle@fusion bin]$ ./setNMProps.sh

Appending required nodemanager.properties

Verify the change.

[oracle@fusion bin]$ tail -f /app/fusion/bea_default/wlserver_10.3/common/nodemanager/nodemanager.properties

#Required NM Property overrides (append to existing nodemanager.properties)

StartScriptEnabled=true

Start Node manager

[oracle@fusion bin]$ cd /app/fusion/bea_default/wlserver_10.3/server/bin

[oracle@fusion bin]$ nohup ./startNodeManager.sh &

…

IDM_domain -> /app/fusion/bea_default/user_projects/domains/IDM_domain

…

INFO: Secure socket listener started on port 5556

Start Weblogic AdminServer

[oracle@fusion bin]$ nohup
/app/fusion/bea_default/user_projects/domains/IDM_domain/bin/startWebLogic.sh &

tail nohup.out file until it shows following message.

Open Weblogic Admin Console

Launch Weblogic Admin console through
http://fusion:7001/console

Note: Go to preferences and change “automatic acquire lock” settings to avoid accidental changes since we are in development mode.

Configuring HTTP server for the Administration Server

Create a new file admin.conf as follows.

[oracle@fusion moduleconf]$ more /app/fusion/bea_default/Oracle_WT1/instances/instance1/config/OHS/ohs1/moduleconf/admin.conf

ServerName fusion:80

ServerAdmin you@your.address

RewriteEngine On

RewriteOptions inherit

RewriteRule ^/console/jsp/common/logout.jsp /oamsso/logout.html [PT]

RewriteRule ^/em/targetauth/emaslogout.jsp /oamsso/logout.html [PT]

# Admin Server and EM

SetHandler weblogic-handler

WebLogicHost fusion

WeblogicPort 7001

SetHandler weblogic-handler

WebLogicHost fusion

WeblogicPort 7001

SetHandler weblogic-handler

WebLogicHost fusion

WeblogicPort 7001

Restart http server.

ORACLE_HOME=/app/fusion/bea_default/Oracle_WT1

export ORACLE_HOME

ORACLE_INSTANCE=/app/fusion/bea_default/Oracle_WT1/instances/instance1

export ORACLE_INSTANCE

PATH=$ORACLE_HOME/opmn/bin:$PATH

export PATH

opmnctl stopall

opmnctl startall

Now we need to Register HTTP server with Weblogic Server so that Enterprise Manager can monitor the instance.

[oracle@fusion ~]$ opmnctl registerinstance -adminHost fusion -adminport 7001 -adminUsername weblogic

Command requires login to weblogic admin server (fusion):

Username: weblogic

Password:

…

Done

Registering instance

Command succeeded.

Note: We will not enable load-balancer access since we have skipped load-balancing in this single node installation guide.

Enable Weblogic Plugin

Log in the Oracle Weblogic Server Administration and click on Lock and Edit. Click on IDMDomain and Click on Configuration tab and then select the Web Applications tab.

Scroll down and enable “Weblogic Plug-in Enabled”.

Click on Save and Activate the Changes.

Restart the Weblogic Administration Server.

Extending the Domain with Oracle Internet Directory

Start the configuration from

[oracle@fusion bin]$ cd /app/fusion/bea_default/Oracle_IDM1/bin

[oracle@fusion bin]$ ./config.sh &

Click Next

Select “Configure Without A Domain” and click Next

Make sure to select any directory inside MW_HOME/instances. You can accept default for Instance Name. Click Next

Deselect email notification and click Next

Select only “Oracle Internet Directory” and click Next

Select “Specify Ports using Configuration File” and enter file name as /home/oracle/staticports.ini

In another terminal window copy the staticports.ini file to home directory.

[oracle@fusion bin]$ cp /app/fusion/provisioning/idm/idm/Disk1/stage/Response/staticports.ini ~/

Click on View/Edit file

VERY IMPORTANT:

As per Oracle Manual we should Change it to as follows.

#The Non-SSL port for OID

Oracle Internet Directory Port No = 389

#The SSL port for OID

Oracle Internet Directory (SSL) Port No = 636

But OID fails to configure and start at the end of installation with these values so we will stick to the OID values for 11g in the staticports.ini and just remove the comments.

#The Non-SSL port for OID

Oracle Internet Directory Port No = 3060

#The SSL port for OID

Oracle Internet Directory (SSL) Port No = 3061

Click Save

Once saved, click Next

Enter oracle123 or any suitable password. If you are using different passwords then please make a note of all of them. Click Next

Since we are not using any domains as such but as we have added an entry in our hosts file for fusion.localdomain, we will add “dc=localdomain” for Realm. Enter oracle123 or any suitable password. Click Next

Save summary if needed and click Configure to start configuration.

Once installation finishes, click Next

Save installation summary if needed and click Finish to complete the installation.

Validate the OID installation

[oracle@fusion ~]$ export ORACLE_HOME=/app/fusion/bea_default/Oracle_IDM1

[oracle@fusion ~]$ export ORACLE_INSTANCE=/app/fusion/bea_default/instances/oid_inst1

[oracle@fusion ~]$ export PATH=$ORACLE_HOME/opmn/bin:$ORACLE_HOME/bin:$ORACLE_HOME/ldap/bin:$ORACLE_HOME/ldap/admin:$PATH

[oracle@fusion ~]$ ldapbind -h fusion -p 3060 -D “cn=orcladmin” -q

Please enter bind password:

bind successful

[oracle@fusion ~]$ ldapbind -h fusion -p 3061 -D “cn=orcladmin” -q -U 1

Please enter bind password:

bind successful

[oracle@fusion ~]$ opmnctl status

Processes in Instance: oid_inst1

———————————+——————–+———+———

ias-component | process-type | pid | status

———————————+——————–+———+———

oid1 | oidldapd | 19810 | Alive

oid1 | oidldapd | 19798 | Alive

oid1 | oidmon | 19785 | Alive

EMAGENT | EMAGENT | 19325 | Alive

Registering Oracle Internet Directory with the WebLogic Server Domain

[oracle@fusion ~]$ echo $ORACLE_HOME

/app/fusion/bea_default/Oracle_IDM1

[oracle@fusion ~]$ echo $ORACLE_INSTANCE

/app/fusion/bea_default/instances/oid_inst1

[oracle@fusion ~]$ opmnctl registerinstance -adminHost fusion -adminPort 7001 -adminUsername weblogic

Command requires login to weblogic admin server (fusion):

Username: weblogic

Password:

Registering instance

Command succeeded.

Note: We have skipped next steps related to SSL since we are setting up non-SSL connections here.

Update the Enterprise Manager Repository URL

Next we will update the Enterprise Manager Repository URL using the emctl utility with the switchOMS flag. The emctl utility is located under the ORACLE_INSTANCE/EMAGENT/EMAGENT/bin directory.

[oracle@fusion ~]$ cd /app/fusion/bea_default/instances/oid_inst1/EMAGENT/EMAGENT/bin

[oracle@fusion bin]$ ./emctl switchOMS http://fusion:7001/em/upload

Oracle Enterprise Manager 10g Release 5 Grid Control 10.2.0.5.0.

Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.

SwitchOMS succeeded.

We can now verify whether this instance is registered for monitoring agent.

Login to http://fusion:7001/em

Click on Farm->Agent monitored targets.

You should be able to see the OID instance under this. Make sure that the Agent URL is showing up fine. If the status shows as “Need Configuration” then click on Configure and then in next screen enter weblogic user credentials. It should now show the correct Agent URL.

Extending the Domain with Oracle Directory Service Manager (ODSM)

Start the configuration from /bin

[oracle@fusion bin]$ cd /app/fusion/bea_default/Oracle_IDM1/bin

[oracle@fusion bin]$ ./config.sh &

Click Next

Select “Extend Existing Domain” and enter details of existing weblogic Server and AdminServer port. Click Next

You can ignore this error since we created this domain using the Identity Management installer. Click Yes to ignore.

Verify that the weblogic server directory shown is correct as per previous steps. Specify name and path for Oracle Directory Service instance. Make sure to keep the instance in same parent directory as previous instances. Click Next

Deselect email notification and click Next

Select Oracle “Directory Service Manager” and click Next

Select “Specify Ports using Configuration File” and enter file name as /home/oracle/staticports.ini

Meanwhile in another terminal window copy the staticports.ini to home directory.

[oracle@fusion bin]$ cp -p /app/fusion/provisioning/idm/idm/Disk1/stage/Response/staticports.ini ~/

Uncomment the ODS Server Port and keep it default 7006. Click Save.

Once Saved click Next.

Save summary if needed and click Configure to start configuration.

Once installation finishes, click Next

Save installation summary if needed and click Finish to complete the installation.

Password-less startup for ODS

cd /app/fusion/bea_default/user_projects/domains/IDM_domain/servers/wls_ods1/security

cp ../../AdminServer/security/boot.properties .

cd /app/fusion/bea_default/user_projects/domains/IDM_domain/bin

nohup ./startManagedWebLogic.sh wls_ods1

Now you can access ODS homepage at http://fusion:7006/odsm/faces/odsm.jspx (as per the above post-installation summary screen)

Register ODS with OID

Click on Connect to a directory -> Create A New Connection

Enter the details for OID.

Name: fusion-oid

Server: fusion

SSL Enabled: Unchecked

User Name: cn=orcladmin

Password: oracel123

Start Page: Home

Click Connect

Once connection is successful, you should be able to see OID page.

You can randomly check whether you are able to see details of any user, for example cn=orcladmin

Configuring Oracle HTTP Servers to Access the ODSM Console

[oracle@fusion moduleconf]$ cd /app/fusion/bea_default/Oracle_WT1/instances/instance1/config/OHS/ohs1/moduleconf

[oracle@fusion moduleconf]$ vi admin.conf

# Append following lines in admin.conf

SetHandler weblogic-handler

WebLogicCluster fusion:7006

Restart HTTP server.

Now we can access ODSM through http://fusion:7777/odsm/faces/odsm.jspx

Extending the Domain with Oracle Virtual Directory

Start the configuration from /bin

[oracle@fusion ~]$ cd /app/fusion/bea_default/Oracle_IDM1/bin/

[oracle@fusion bin]$ ./config.sh &

Click Next

Select “Configure Without A Domain“. Click Next

Provide values for Oracle Virtual Directory (OVD) instance. You can accept default values. Click Next

Deselect email notification and click Next

Select “Oracle Virtual Directory” and click Next

Select “Specify Ports using Configuration File” and enter file name as /home/oracle/staticports.ini

Open a separate terminal/putty window and copy staticports.ini file to home directory.

[oracle@fusion ~]$ cp /app/fusion/provisioning/idm/idm/Disk1/stage/Response/staticports.ini ~/

Click on View/Edit.

Edit the staticports.ini file to assign ports 6501 and 7501, as follows.

# The non-SSL port for Oracle Virtual Directory

Oracle Virtual Directory port = 6501

# The SSL port for Oracle Virtual Directory

Oracle Virtual Directory (SSL) port = 7501

Click Save and then Next

Provide OID login details.

Uncheck “Configure Administrative Server in secure mode” since we are not using SSL anywhere in this installation. Click Next

Click Ok

Save summary if needed and click Configure to start configuration.

Once installation finishes, click Next

Save installation summary if needed and click Finish to complete the installation.

Registering OVD with the Oracle WebLogic Server Domain

[oracle@fusion bin]$ cd /app/fusion/bea_default/instances/ovd_inst1/bin

[oracle@fusion bin]$ ./opmnctl registerinstance -adminHost fusion -adminPort 7001 -adminUsername weblogic

Command requires login to weblogic admin server (fusion):

Username: weblogic

Password:

Registering instance

Command succeeded.

Update the Enterprise Manager Repository URL using the emctl utility with the switchOMS flag.

The emctl utility is located under the ORACLE_INSTANCE/EMAGENT/EMAGENT/bin directory.

[oracle@fusion bin]$ cd /app/fusion/bea_default/instances/ovd_inst1/EMAGENT/EMAGENT/bin

[oracle@fusion bin]$ ./emctl switchOMS http://fusion:7001/em/upload

Oracle Enterprise Manager 10g Release 5 Grid Control 10.2.0.5.0.

Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.

SwitchOMS succeeded.

We can now verify whether this instance is registered for monitoring agent.

Login to http://fusion:7001/em

Click on Farm->Agent monitored targets.

You should be able to see the OID and OVD instances under this. Make sure that the Agent URL is showing up fine. If the status shows as “Need Configuration” then click on Configure and then in next screen enter weblogic user credentials. It should now show the correct Agent URL.

Validate the Oracle Virtual Directory Instances

[oracle@fusion ~]$ export ORACLE_HOME=/app/fusion/bea_default/Oracle_IDM1

[oracle@fusion ~]$ export ORACLE_INSTANCE=/app/fusion/bea_default/instances/ovd_inst1

[oracle@fusion ~]$ export PATH=$ORACLE_HOME/opmn/bin:$ORACLE_HOME/bin:$ORACLE_HOME/ldap/bin:$ORACLE_HOME/ldap/admin:$PATH

[oracle@fusion bin]$ ldapbind -h fusion -p 6501 -D “cn=orcladmin” –q

Please enter bind password:

bind successful

[oracle@fusion bin]$ ldapbind -h fusion -p 7501 -D “cn=orcladmin” -q -U 1

Please enter bind password:

SSL handshake failed

This is fine since we did not configure SSL mode.

Creating ODSM connections to Oracle Virtual Directory

Open http://fusion:7777/odsm/faces/odsm.jspx

Click Connect to a directory -> Create a new connection

Enter details of OVD here.

Name: fusion-ovd

Host: fusion

Port: 8899

SSL Enabled: Unchecked

User Name: cn=orcladmin

Password: oracle123

Start Page: Home

Click Connect

It will display OVD home page.

Note: We are skipping the adapter creation for now. We will create them later once needed.

Extending the Domain with Oracle Access Manager

Start the configuration from

[oracle@fusion bin]$ cd /app/fusion/bea_default/oracle_common/common/bin

[oracle@fusion bin]$ ./config.sh

Click “Extend an existing WebLogic domain” and click Next

Scroll down and select user_projects->domains->IDM_domain. Click Next

Select only “Oracle Access Manager with Database Policy Store” and click on Next.

Here you need to provide the database connection details and choose schema owner username. You can keep the name default but make sure to keep a note of it since you will need this later. Choose a password for example oracle123. Click Next

Now it will test the database connectivity through JDBC.

Once successful, click Next

Select “Managed Servers, Clusters and Machines” only and click Next

The first row was from previous configuration of ODS and now there will be another row for OAM. Keep the default port and make a note of it. Enter wls_oam1 for the instance name (or whichever you chose while creating instance) and click Next

Just click Next

On the “Machines” tab make sure that correct hostname is entered. Click Next

Select wls_oam1 and click the right arrow.

Now it should look as above. Click Next

On the summary page Click Extend.

Click OK Since we are aware that these are correct ports being used by AdminServer and wls_ods1 instance.

Once configuration finishes, click Done.

You can start the managed server by using following command.

[oracle@fusion bin]$ cd /app/fusion/bea_default/user_projects/domains/IDM_domain/bin

[oracle@fusion bin]$ ./startManagedWebLogic.sh wls_oam1

This will create the directory /app/fusion/bea_default/user_projects/domains/IDM_domain/servers/wls_oam1

Press CTRL+C to stop the process since we will need to configure startup without password prompt.

[oracle@fusion wls_oam1]$ cd /app/fusion/bea_default/user_projects/domains/IDM_domain/servers/wls_oam1

[oracle@fusion wls_oam1]$ cp ../wls_ods1/security/ boot.properties .

Now we can start the managed server without prompting for password.

[oracle@fusion bin]$ cd /app/fusion/bea_default/user_projects/domains/IDM_domain/bin

[oracle@fusion bin]$ nohup ./startManagedWebLogic.sh wls_oam1 &

Configuring Oracle HTTP Servers to Display Login Page and Oracle Access Manager Console

Append following entries in /app/fusion/bea_default/Oracle_WT1/instances/instance1/config/OHS/ohs1/moduleconf/admin.conf

SetHandler weblogic-handler

WebLogicCluster fusion:14100

SetHandler weblogic-handler

WebLogicHost fusion

WebLogicPort 7001

Restart HTTP Server to bring this to effect.

Note: There are few other steps as well as per Oracle documentation but we will skip them for now.

Extending the Domain to Configure Oracle Identity Manager and Oracle SOA Suite

Start the configuration from

[oracle@fusion bin]$ cd /app/fusion/bea_default/oracle_common/common/bin

[oracle@fusion bin]$ ./config.sh &

Select “Extend an existing WebLogic domain” and click Next

Scroll down and select user_projects->domains->IDM_domain and click Next

Select Oracle Identity Manager. It will automatically select Oracle SOA Suite and Oracle WSM. Click Next

Check all to modify all entries together. Provide database connect details and select a password for all. Accept default value for Schema owner names. Click Next

Now it will test the database connectivity through JDBC.

Once JDBC test is successful, click Next

Select only “Managed Servers, Clusters and Machines” and click Next

Add entries for soa_server1 and oim_server1. As per Oracle documentation you can change them to wls_soa1 and wls_oim1 as well. But here we have kept them as default.

Note the ports and click Next.

Just click Next

Since we are using Linux/Unix machine, delete entry from above screen. And proceed to Unix Machine tab.

Make sure correct hostname is entered here. Click Next

Select oim_server1 and soa_server1 and click right arrow. (if you had renamed them to wls_oim1 and wls_soa1 then you will see those entries instead of this)

The screen will now look like above. Click Next

On Summary screen click Next

Click OK

Once configuration finishes, click Done

Configuring Oracle Identity Manager

Now we will configure the Identity Manager from /bin

[oracle@fusion bin]$ cd /app/fusion/bea_default/Oracle_IAM/bin

[oracle@fusion bin]$ ./config.sh &

Click Next

Select only OIM Server and click Next

Enter database details in shown format “fusion:1521:fusiondb“. Select Schema names (keep default) and enter password (oracle123). Make sure to keep a note of these schema names DEV_OIM and DEV_MDS. We will need these later during provisioning plan. Click Next

Enter AdminServer details in t3://: format. Here t3://fusion:7001

Important Note: Before clicking next make sure that AdminServer is running otherwise it may throw following error on next page. Start or restart AdminServer if you see this error.

INST-6180: Error while retrieving OIM Managed Server URL from the domain.

Click Next

Enter passwords as follows and keep a note of them since we will require them in provisioning wizard.

OIM Admin password: Oracle123

Keystore Password: oracle123

Enter OIM HTTP URL as http://fusion:14000 (based on port value in previous configuration step). Click Next

Deselect both and click Next

Save the summary if required and click Configure.

Once configuration finishes click Next

Save the configuration summary if needed and click Finish to complete the configuration.

Installing and Configuring WebGate

Start Webgate 10g installation from /installers/webgate

[oracle@fusion webgate]$ cd /mnt/fusion/installers/webgate

[oracle@fusion webgate]$ ./Oracle_Access_Manager10_1_4_3_0_linux64_OHS11g_WebGate –gui

Click Next

Enter the OS oracle user details. Click Next

Select a path where you want to install webgate. We have selected /app/fusion/webgate. Click Next

Click Next

Open a new terminal/putty window and execute following commands. Once done enter the location /app/fusion/oam_lib in this screen and click Next to start the installation.

[oracle@fusion oam_lib]$ mkdir /app/fusion/oam_lib

[oracle@fusion oam_lib]$ ln -s /usr/lib64/libstdc++.so.5 /app/fusion/oam_lib/libstdc++.so.5

[oracle@fusion oam_lib]$ ln -s /lib64/libgcc_s.so.1 /app/fusion/oam_lib/libgcc_s.so.1

Now WebGate Configuration will start. Select “Open Mode” and click Next

Since this screen requires WebGate ID from Access Manager. We need to first create a Webgate Agent in Access Manager. So keep this Java window open and open Oracle Access Manager Console in browser by entering http://fusion/oamconsole or http://fusion:7777/oamconsole

Note: We could have done this before starting Webgate installation as well but keeping it here in the guide gives you an idea where we are going to this configuration. Next time when you install, you can do this step before itself.

Login with weblogic admin user.

Once logged under SSO Agents, click on New “OAM 10g Webgate” (since we are installing 10g webgate).

Enter name: Webgate_sso or any name

Base URL: http://fusion:7777

Host Identifier: Webgate_sso

Security: Open

Uncheck all 3 options on right.

Click Apply

Now Edit the same Webgate Agent again. It will show following screen.

We did not put domain since we are using only http://fusion

Change Max Connections to 4

Logout URL: Enter following values.

/oamconsole/logout.html

/console/jsp/common/logout.jsp

/em/targetauth/eamlogout.jsp

Click Apply

Once webgate Agent is created in OAM, go back to the already open configuration window and enter following details and click Next to finish the configuration. In case if the configuration window was closed, you can also launch the configuration from command prompt.

[oracle@fusion webgate]$ /app/fusion/webgate/access/oblix/tools/configureWebGate/start_configureWebGate -i /app/fusion/webgate/access -t WebGate

Please enter the Mode in which you want the Web Gate to run : 1(Open) 2(Simple) 3(Cert) : 1

Please enter the Web Gate ID : Webgate_sso

Please enter the Password for this Web Gate :

Please enter the Access Server ID : wls_oam1

Please enter the Access Server Host Machine Name : fusion

Please enter the Access Server Port : 5575

Preparing to connect to Access Server. Please wait.

Web Gate installed Successfully.

Press enter key to continue …

As per Oracle documentation there are a few steps to use the Webgate and validate but we will skip them for now.

Next step is to prepare Identity and Policy Stores by creating necessary users and groups for provisioning Fusion Applications.

Next: Preparing Identity and Policy Stores

Installing Oracle Fusion Applications – steps

Installing Fusion Applications Provisioning Framework

Installing Oracle 11g Database (Applications Transactional Database)

Running Oracle Fusion Applications Repository Creation Utility (Applications RCU)

Creating another database for Oracle Identity Management Infrastructure (optional)

Running Repository Creation Utility (RCU) for Oracle Identity Management components

Installing Oracle Identity and Access Management Components

Configuring Oracle Identity and Access Management components

Preparing Identity and Policy Stores

Creating a New Provisioning Plan

Provisioning an Applications Environment

Creating a new Provisioning Plan

admin — Thu, 02 Feb 2012 19:16:05 +0000

Tweet

Oracle Fusion Applications Installation: Creating a new Provisioning Plan

Previous: Preparing Identity and Policy Store

In order to create a new fusion applications provisioning plan we should launch the provisioning wizard again from <framework_location>/provisioning/bin

is same what we mentioned in previous post. i.e. /app/fusion

[oracle@fusion $ cd /app/fusion/provisioning/bin

[oracle@fusion bin]$ ./provisioningWizard.sh

On Welcome screen, click Next

Select “Create a New Applications Environment Provisioning Plan” and click Next

Deselect Security updates notification and click Next

Please note that in Fusion Applications each Applications will include multiple Weblogic Managed Servers, admin servers etc and since our Virtual Machine is not having sufficient capacity to host all these applications, we selected “Oracle Human Capital Management”. You can select any product which you wish to configure first. Click Details to see the topology details for the selected module.

Click Close and then Next on configurations screen.

In this screen provide any name to this provisioning plan. Click Next

Since we entered “weblogic” as Node Manager login earlier, provide its credentials.

Installers Directory Location: The stage or repository location. In our case /mnt/fusion

Oracle Fusion Applications Home: Provide base location for the installation. /app/fusion

Enter /app/fusion/instance for Application Configuration Directory.

As we have noted the location for Webgate Library earlier in Previous post, enter /app/fusion/oam_lib

We had created IDM Properties file /app/fusion/bea_default/Oracle_IAM/idmtools/bin/idmDomainConfig.param in previous post.

RDP Password: oracle123

Click Next

Accept default values. Click Next

Enter database details in this screen. Click Next

Enter same password. Lets’ keep oracle123 again J

This will only accept earlier entered ODI Supervisor password. In our case, nothing to worry since we have all passwords as oracle123

Password: oracle (it validated this password)

We are going to have single host for all domains. Enter our hostname “fusion” and click Next

Deselect DMZ, enter host as fusion, domain as fusion.local. Click Next

Change at least the internal names as above to keep it simple. Click Next

Since we are going to have the simplest installation, deselect Load Balancing. Click Next

Deselect Proxy. Click Next

Entered following values only, remaining were populated from idmDomainConfig.param file

Super User Name: orcladmin

Checked “Create Administrators Group”, “Create Monitors Group”, “Create Operators Group”

Entered oracle123 in both password fields

Unchecked “Identity Store Enabled SSL”, “OIM Endpoint Enabled SSL”

OIM Administrator User Name: xelsysadmin

OIM Administrator Password: oracle123

OIM Managed Server port: 7004

OIM Endpoint Host: fusion (this is because we did not configure load balancing)

OIM Endpoint Port: 7777 (again because we didn’t configure load balancing)

IDM Keystore file: Create a dummy file anywhere on Linux and enter its path here.

[oracle@fusion]$ touch /app/fusion/provisioining/dummy

IDM KeyStore Password: Enter any value

OAM Administrator User Name: oamadmin

OAM Administrator Password: oracle123 (as defined earlier)

OAM AAA Server Host: fusion

OAM AAA Server Port: 5575 (Default and also defined earlier)

Access Server Identifier: wls_oam1

Unchecked OPSS Policy Store SSL Enabled

Deselect Secondary OAM.

OAM Security Mode: Open

Webgate password: oracle123 (as entered earlier in previous post)

Remaining fields already poputed due to idmDomainConfig.param file. Deselect last 2 options. Click Next

Enter Database Details. Also enter DEV_MDS and password (defined earlier during installation in previous post). Click Next

Click Finish to complete creating the plan.

Next: Provisioning an Applications Environment

Installing Oracle Fusion Applications – steps

Installing Fusion Applications Provisioning Framework

Installing Oracle 11g Database (Applications Transactional Database)

Running Oracle Fusion Applications Repository Creation Utility (Applications RCU)

Creating another database for Oracle Identity Management Infrastructure (optional)

Running Repository Creation Utility (RCU) for Oracle Identity Management components

Installing Oracle Identity and Access Management Components

Configuring Oracle Identity and Access Management components

Preparing Identity and Policy Stores

Creating a New Provisioning Plan

Provisioning an Applications Environment

Running Repository Creation Utility for Oracle Identity Management components

admin — Thu, 02 Feb 2012 11:48:07 +0000

Tweet

Oracle Fusion Applications installation: Running Repository Creation Utility (RCU) for Oracle Identity Management Components

Previous: Running Oracle Fusion Applications Repository Creation Utility (Applications RCU)

Important Note: We are NOT creating a separate database to host Oracle Identity Management schemas. Instead we will create these schemas in our Fusion Database (fusiondb) itself since the schema names are distinct compared to Fusion Application schemas. We will save a lot of Memory for our Virtual Machine.

In order to run RCU for Identity Management on same database, we must set the open_cursors parameter to 800.

Open a new database session and set following values.

SQL> show parameter open_cursors

NAME TYPE VALUE

———————————— ———– ——————————

open_cursors integer 500

SQL> alter system set open_cursors=800 scope=both sid=’*';

System altered.

Launch Repository Creation Utility for Oracle Identity Management from /fmw_rcu/bin location

[oracle@fusion bin]$ /app/fusion/provisioning/fmw_rcu/bin/rcu &

Click Next

Select Create and click Next

Enter the database information (for same fusiondb database as entered earlier. Click Next

Next it will check for required prerequisites. Upon successful check click OK

Click Idnentity Management. It will select few other required components also automatically. Click Next

Again it will check prerequisites for the selected components. Upon successful check click OK

Enter same password oracle123 for ease of remembering. Click Next

No need to change anything in this screen. Click Next

Click OK

It will create the required tablespaces. Once finished click OK

On this summary screen click Create to create required schemas and load data.

This will be quicker than earlier RCU. Once finished proceed to next screen.

Finally it will display Completion Summary. Clock Close

Next: Installing Oracle Identity and Access Management Components

Installing Oracle Fusion Applications – steps

Installing Fusion Applications Provisioning Framework

Installing Oracle 11g Database (Applications Transactional Database)

Running Oracle Fusion Applications Repository Creation Utility (Applications RCU)

Creating another database for Oracle Identity Management Infrastructure (optional)

Running Repository Creation Utility (RCU) for Oracle Identity Management components

Installing Oracle Identity and Access Management Components

Configuring Oracle Identity and Access Management components

Preparing Identity and Policy Stores

Creating a New Provisioning Plan

Provisioning an Applications Environment

Creating Oracle VirtualBox Virtual Machine with Oracle Linux 5

admin — Wed, 01 Feb 2012 15:23:42 +0000

Tweet

Previous: Oracle Fusion Applications Installation – Steps

Creating Oracle VirtualBox Virtual Machine with Oracle Linux

Before we begin first download the required software.

Download and install Oracle VirtualBox Software from https://www.virtualbox.org/wiki/Downloads

Download Oracle Linux from http://edelivery.oracle.com/linux

Select “Oracle Linux” and “x86 64 bit“. Click Go

Download Oracle Linux Release 5 Update 7

If you are installing on your Windows machine then download the software for Windows.

Important Note: We are using Linux 5 because somehow Oracle Linux 6 (update 2) is not working with VirtualBox for us as it was not able to launch GUI mode. The whole installation was going in text mode and later also it was not able to shift to GUI mode. The error is as follows.

Click on New

Click Next

Provide any name for this VM and select Linux/Oracle (64 bit) for the OS Type. Click Next

In Memory screen, select at least 2 GB memory. I have selected 2.5 GB (2560 MB). Click Next.

Select “Startup Disk” and “Create new hard disk“. Click Next

Since we want our VM Disks to be compatible with VMWare as well, we will use VMDK file type.

Next screen we will select “Dynamically allocated” storage. This will allow us to keep the VM disk size according to the actual usage. Click Next

Note: This of course makes VM a bit slower initially during the installation (compared to Fixed size) since in this case the VM needs to keep on increasing the disk size as we move with the installation. So we have to choose between the trade-offs.

Provide a location with at least 300 GB available space. Select size as 300 GB. Click Next

On Summary screen click on “Create” to create the Virtual Disk.

On next Summary screen click on “Create” to create the Virtual Machine.

Click on Settings

Click on Network. Select “Host-only Adapter“. We will explain this later while assigning IP in Linux. Click OK

Make sure to have Operating System CD (Here Oracle Linux 5) in the CD drive. Click on Start

Note: You can optionally use Virtual CD drive software (for example Daemon tools-lite) to mount an ISO image to a virtual CD.

Click Next

Select the drive / virtual drive containing OS installation CD/DVD. Click Next

Click on Start to begin installation of Linux

In the next section we will coner Installing Linux on Physical or Virtual Machine (VMWare or VirtualBox) .

Note: This is a generic guide which can be used for installation on Physical or Virtual machine.

Installing Linux Operating System

Press Enter to continue with Graphical mode installation

At this moment we can ignore this message if it appears since graphics is already available. Once we install Virtualbox Guest Additions (Explained later)

Use TAB to select between options. Select “Skip” and press Enter

Click Next

Keep default “English (English)” Click Next

Keep default “US English” Click Next

Since our disk is blank and not yet formatted to Linux File System, click “Yes” to erase all data.

Select “Remove all partitions on selected drive and create default layout” and click Next

Manually assign host name. We are using “fusion” as our hostname. We will assign IP later.

Important note: We will use the hostname “fusion” throughout this installation. If you are planning to change the host name then make sure that you enter the new name everywhere during the installation wherever we have mentioned “fusion”

Select Customize now and click Next

Make sure to include following while selecting.

Now select Base System from the left pane and check System Tools from the right pane. Click on Optional packages. In the list of packages select oracle-validated package. This package will create a Linux user oracle and will create necessary Linux groups. This package will also set Linux kernel parameters needed for Oracle installations.

Click Next to finish the installation and reboot the OS.

After first boot, above welcome screen appears. Click Forward

Select Yes and click Forward

Select Disabled and click Forward

Select Disabled in this screen and click Forward.

Please note that if this is kept Enforcing then at one point the installation will fail to start the services.

Click Forward

Select correct date and time and click Forward

We can skip this page since we will create users later if required. Just click Forward

Click Forward

Click Finish. On the login screen, login as root

Now let us check what is the IP range for our VM network. Open command prompt on your host windows OS.

C:\>ipconfig

Windows IP Configuration

Ethernet adapter VirtualBox Host-Only Network:

Connection-specific DNS Suffix . :

IP Address. . . . . . . . . . . . : 192.168.56.1

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :

In the ipconfig output look for VirtualBox Host-Only Network. We can see that the IP address is 192.168.56.1. This is our gateway for VM. Since the Subnet mask is 255.255.255.0, we can change the last octet and assign any IP in that range for our VM. Let us select 192.168.56.101 as our VM IP.

Click on System->Administration->Network

Click on Edit.

Enter manual IP address as follows.

IP: 192.168.56.101

Subnet mask: 255.255.255.0

Gateway: 192.168.56.1

Click on File->Save and click Activate. Now on shell prompt run following command as root to restart network services.

service network restart

Make an entry for this IP for the host in /etc/hosts file. Also comment out IPv6 entry (localhost6). Also create an additional alias fusion.localdomain (we will use this later)

[root@fusion ~]# cat /etc/hosts

# Do not remove the following line, or various programs

# that require network functionality will fail.

127.0.0.1       localhost.localdomain localhost

#::1            localhost6.localdomain6 localhost6

192.168.56.101 fusion fusion.localdomain

Now we must install Guest Additions to smoothly use the VM along with the host windows. We can have higher resolution and also easier mouse movements between VM and host Windows after this.

Click Devices-> Install Guest Additions in the VirtualBox menu. This will automatically mount a CD on the VM CD drive.

Then run following commands. Make sure you are logged in as root

cd /media/VBOXADDITIONS_4.1.8_75467

./VBoxLinuxAdditions.run

This will install the Guest Additions. Reboot the VM. Now we can change the resolution to higher value.

Click on System -> Preferences -> Screen Resolution

Change the resolution to 1024×768. Click Apply. On next reboot the system will show higher resolution.

Now we will mount the already created Stage directory/Provisioning Repository in the Linux VM.

In the VirtualBox window, click on Settings

Click on Shared Folders -> Add shared folder

Browse for the directory where we staged the installation files. We will mount it as “Read-only” because we do not want to make any changes in the source folder.

It will look as above. Click OK

Now we will mount it in the VM. Login as root and run following commands.

[root@fusion ~]# mkdir /mnt/fusion

[root@fusion ~]# chown oracle:dba /mnt/fusion/

[root@fusion ~]# mount -t vboxsf FusionStage /mnt/fusion/

[root@fusion ~]# ls -l /mnt/fusion/

drwxrwxrwx 1 root root 0 Sep 7 08:02 appspatches

drwxrwxrwx 1 root root 0 Jan 8 15:35 installers

drwxrwxrwx 1 root root 0 Sep 7 02:28 jdk6

Please note that since the installation involves graphical interface, you can either run it directly by opening a terminal window from the Virtual Machine GUI or we can use putty on windows to connect to the virtual machine. When you use putty from windows then you must use tools like XManager to view output on host.

Also please make sure that sufficient swap memory is available by using “free –m” command. It least double the amount of RAM should be available as swap space. If not manually add swap files.

For example, adding 4 GB swap space.

[root@fusion fusiondb]# dd if=/dev/zero of=/swapfile1 bs=1024 count=4194304

4194304+0 records in

4194304+0 records out

4294967296 bytes (4.3 GB) copied, 112.697 seconds, 38.1 MB/s

[root@fusion fusiondb]# mkswap /swapfile1

Setting up swapspace version 1, size = 4294963 kB

[root@fusion fusiondb]# swapon /swapfile1

[root@fusion fusiondb]# free -m

total       used       free     shared    buffers     cached

Mem:          2506       2386        119          0          9       1871

-/+ buffers/cache:        505       2000

Swap:         5605        152       5452

Next: Installing Fusion Applications Provisioning Framework

Installing Oracle Fusion Applications – steps

Installing Fusion Applications Provisioning Framework

Installing Oracle 11g Database (Applications Transactional Database)

Running Oracle Fusion Applications Repository Creation Utility (Applications RCU)

Creating another database for Oracle Identity Management Infrastructure (optional)

Running Repository Creation Utility (RCU) for Oracle Identity Management components

Installing Oracle Identity and Access Management Components

Configuring Oracle Identity and Access Management components

Preparing Identity and Policy Stores

Creating a New Provisioning Plan

Provisioning an Applications Environment

Installing Oracle Applications (eBusiness Suite) Release 12 on Solaris

admin — Mon, 03 May 2010 10:05:57 +0000

Tweet

Let us consider we are installing Oracle eBusiness Suite Release 12 (12.1.1) on Sun Solaris 10 on SPARC 64 bit platform.

First of all following pre-requisites must be checked at the Operating System level.

Packages

SUNWarc

SUNWbtool

SUNWcsl

SUNWhea

SUNWi15cs

SUNWi1cs

SUNWi1of

SUNWlibC

SUNWlibm

SUNWlibms

SUNWsprot

SUNWtoo

SUNWuiu8

SUNWulcf

SUNWxwfnt

Patches

125100-04 or higher

120473-05 or higher

127111-02 or higher

137111-04 or higher

Kernel parameters in /etc/system

rlim_fd_max 65536

noexec_user_stack                        1

semsys:seminfo_semmni            100

semsys:seminfo_semmsl             256

shmsys:shminfo_shmmax           4294967295

shmsys:shminfo_shmmni            100

ulimit Value Settings

Verify that the owner of the Oracle Application Server and Oracle Database server file systems have the following ‘ulimit’ values:

time (seconds) = unlimited

file (blocks) = unlimited

data (kbytes) = unlimited

stack (kbytes) = unlimited

memory (kbytes) = unlimited

coredump (blocks) = unlimited

nofiles (descriptors) = 65536

Java requirements

JDK 6 (bundled with R12, no need to manually install)

Operating system utilities

ar

ld

make

X Display Server

ldd

gcc

g++

Next step is to create required users.

groupadd dba

useradd -g dba oradev

useradd -g dba appldev

passwd oradev

New Password:

Re-enter new Password:

passwd: password successfully changed for oradev

passwd appldev

New Password:

Re-enter new Password:

passwd: password successfully changed for appldev

Now let’s create required directories as root.

mkdir /u01

mkdir /u01/oracle

mkdir /u01/oracle/ERPDEV

mkdir /u01/oracle/ERPDEV/db

mkdir /u01/oracle/ERPDEV/apps

chown oradev:dba /u01

chown oradev:dba /u01/oracle

chown oradev:dba /u01/oracle/ERPDEV

chown oradev:dba /u01/oracle/ERPDEV/db

chown appldev:dba /u01/oracle/ERPDEV/apps

Create Staging area or else you can directly install from DVDs but you may need to switch DVDs during the installation.

Here we have created Staging directory as /u01/R12stage/

There are multiple ways for creating staging areas. The simplest method is to copy all DVD contents to Staging directory in following subfolders.

startCD, oraDB, oraAppDB, oraApps, oraAS, NLS- (if installing NLS)

Or else you can use adautostg.pl to create a staging area automatically.

ORATraining Tip: Execute the following to avoid unexpected errors during the installation since we are doing multiuser installation.
chmod 777 /tmp

ORATraining tip: Sometimes it has been noticed on some Solaris based installation that installation will throw following error.

/u01/R12stage/startCD/Disk1/rapidwiz/rapidwiz: whoami: not found

Execute the following before starting the installation to avoid the issue.

export PATH=$PATH:/usr/ucb/

Starting the installation:

cd /u01/R12stage/startCD/Disk1/rapidwiz

./rapidwiz

ORATraining tip: You can also execute directly with the path like “/u01/R12stage/startCD/Disk1/rapidwiz/rapidwiz/rapidwiz” to avoid selecting DVDs at the end of every component installation.

ORATraining Tip: Sometimes you may encounter following error after starting the installation.

/u01/R12stage/startCD/Disk1/rapidwiz/rapidwiz: /tmp/RapidInstall/bin/runWizard.sh: cannot execute

Execute the following to fix this if you encounter the same.

chmod 777 /u01/R12stage/startCD/Disk1/rapidwiz/bin

Welcome Screen:

Do not change anything in this screen unless you are upgrading existing Oracle Applications release. Express release will go with many default parameters and skip certain steps but not recommended for an Apps DBA.

Keep these blank if installing on test machine. This can always be filled later. You will need a valid CSI number and associated email id for this.

No not change anything in this screen unless you are restarting a failed installation or installing on secondary nodes in case of multinode installation.

Select a port pool here. All default ports will be added by a number selected in port pool and those ports will be assigned accordingly. For example with port pool 10, default ports will change as follows.

Web Server port will become 8010 (8000 + 10)

Forms port will become 9010 (9000 + 10)

Reports port will become 7010 (7000 + 10)

and so on..

Installing Oracle Applications 11.5.10 on Linux

admin — Wed, 01 Apr 2009 07:15:06 +0000

Tweet

Installing Oracle Applications on RedHat Linux 4.0