{"id":2524,"date":"2013-03-24T00:55:38","date_gmt":"2013-03-24T00:55:38","guid":{"rendered":"http:\/\/www.oratraining.com\/blog\/?p=2524"},"modified":"2013-04-30T09:42:28","modified_gmt":"2013-04-30T09:42:28","slug":"oracle-fusion-applications-installation-configure-oracle-identity-and-access-management-components","status":"publish","type":"post","link":"https:\/\/www.oratraining.com\/blog\/2013\/03\/oracle-fusion-applications-installation-configure-oracle-identity-and-access-management-components\/","title":{"rendered":"Oracle Fusion Applications Installation: Configure Oracle Identity and Access Management components"},"content":{"rendered":"

Previous: <\/strong>Apply mandatory Patches<\/a>
\n<\/strong><\/p>\n

Configuring Oracle Identity Management components” can be divided into following tasks. Please note that we will not configure Oracle Virtual Directory, Oracle Identity Federation etc.<\/p>\n

    \n
  1. Configure the Web Tier<\/li>\n
  2. Create Weblogic Domain for Identity Management<\/li>\n
  3. Extend the Domain to include Oracle Internet Directory<\/li>\n
  4. Prepare Identity and Policy Stores<\/li>\n
  5. Extend the Domain to include Oracle Directory Service Manager (ODSM)<\/li>\n
  6. Extend the Domain to include Oracle Virtual Directory (Optional<\/strong>)<\/li>\n
  7. Configure Oracle Access Manager 11g (OAM)<\/li>\n
  8. Configure Oracle Identity Manager (OIM) and Oracle SOA Suite<\/li>\n
  9. \n
    Post-configure tasks<\/div>\n

    Configure Web Tier<\/strong>
    \n<\/span><\/p>\n

    Start the configuration from\u00a0<Web_Home>\/bin<\/strong><\/p>\n

    [fusion@fmwhost ~]$ cd \/app\/fusion\/fmw\/web\/bin\/<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/config.sh<\/strong><\/p>\n

    \"\"<\/p>\n

    \"\"<\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select\u00a0only Oracle HTTP Server<\/strong>\u00a0and deselect other checkboxes. Click\u00a0Next
    \n<\/strong><\/span><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter following details and click\u00a0Next<\/strong><\/p>\n

    Instance Home Location:\u00a0\/app\/fusion\/config\/instances\/web1
    \n<\/strong><\/p>\n

    (Please note that the paths, instance\/component name etc are different from what we used during 11.1.5 installation steps)<\/p>\n

    Instance Name:\u00a0web1<\/strong><\/p>\n

    OHS Component Name:\u00a0ohs1<\/strong><\/p>\n

    \"\"<\/p>\n

    Select “Specify Ports using Configuration file”. Open another shell window and copy the staticports.ini from staging directory.<\/p>\n

    [fusion@fmwhost bin]$ cp -p \/mnt\/hgfs\/setup\/installers\/webtier\/Disk1\/stage\/Response\/staticports.ini ~\/
    \n<\/strong><\/p>\n

    Click\u00a0View\/Edit File<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Edit\/uncomment the following values.<\/p>\n

    OPMN Local Port = 6700<\/p>\n

    OHS Port = 7777<\/p>\n

    Click\u00a0Save<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Deselect the check box and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Yes<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Review the summary and click\u00a0Configure<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Once installation is successful, click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Review the summary and click\u00a0Finish<\/strong><\/p>\n

     <\/p>\n

    Check if the HTTP processes already started.<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ ps -ef | grep http<\/strong><\/p>\n

    fusion 5410 5383 1 13:13 ? 00:00:00 \/app\/fusion\/fmw\/web\/ohs\/bin\/httpd.worker -DSSL<\/p>\n

    fusion 5419 5410 0 13:13 ? 00:00:00 \/app\/fusion\/fmw\/web\/ohs\/bin\/httpd.worker -DSSL<\/p>\n

    fusion 5420 5410 0 13:13 ? 00:00:00 \/app\/fusion\/fmw\/web\/ohs\/bin\/httpd.worker -DSSL<\/p>\n

    fusion 5422 5410 0 13:13 ? 00:00:00 \/app\/fusion\/fmw\/web\/ohs\/bin\/httpd.worker -DSSL<\/p>\n

    fusion 5518 4052 0 13:14 pts\/1 00:00:00 grep http<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ vi \/app\/fusion\/config\/instances\/web1\/config\/OHS\/web1\/httpd.conf<\/strong><\/p>\n

    Change to following (dba\u00a0<\/strong>or\u00a0oinstall<\/strong>\u00a0based on fusion user group)<\/p>\n

     <\/p>\n

    User fusion<\/p>\n

    Group dba<\/p>\n

    Launch\u00a0http:\/\/<hostname>:7777\u00a0to make sure that HTTP home page is appearing.<\/p>\n

    \"\"<\/p>\n

    Make a backup of httpd.conf<\/p>\n

    [fusion@fmwhost bin]$ cp -pr \/app\/fusion\/config\/instances\/web1\/config\/OHS\/web1\/httpd.conf \/app\/fusion\/config\/instances\/web1\/config\/OHS\/web1\/httpd.conf.bak.original
    \n<\/strong><\/p>\n

    \u2026<\/p>\n

    <IfModule mpm_worker_module><\/p>\n

    ServerLimit 20<\/p>\n

    StartServers 2<\/p>\n

    MaxClients 1000<\/p>\n

    MinSpareThreads 200<\/p>\n

    MaxSpareThreads 800<\/p>\n

    ThreadsPerChild 50<\/p>\n

    MaxRequestsPerChild 10000<\/p>\n

    AcceptMutex fcntl<\/p>\n

    LockFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/${COMPONENT_TYPE}\/${COMPONENT_NAME}\/http_lock”<\/p>\n

    <\/IfModule><\/p>\n

     <\/p>\n

    Restart Web server as follows.
    \n<\/strong><\/p>\n

     <\/p>\n

    Create Weblogic Domain for Identity Management
    \n<\/strong><\/span><\/p>\n

    Start the configuration from\u00a0<Middleware Home>\/oracle_common\/commin\/bin<\/strong><\/p>\n

    [fusion@fmwhost bin]$ \/app\/fusion\/config\/instances\/web1\/bin\/opmnctl stopall
    \n<\/strong><\/p>\n

    opmnctl stopall: stopping opmn and all managed processes…<\/p>\n

    [fusion@fmwhost bin]$ \/app\/fusion\/config\/instances\/web1\/bin\/opmnctl startall<\/strong><\/p>\n

    opmnctl startall: starting opmn and all managed processes…<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/oracle_common\/common\/bin\/<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/config.sh &<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select “Create a new Weblogic domain<\/strong>” and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    For single domain creation, select:<\/p>\n

    \u2013 Oracle Identity Manager 11.1.1.3.0 [iam]<\/strong><\/p>\n

    \u2013 Oracle SOA Suite \u2013 11.1.1.0 [soa]<\/strong><\/p>\n

    \u2013 Oracle Enterprise Manager [oracle_common]<\/strong><\/p>\n

    \u2013 Oracle Access Manager with Database Policy Store \u2013 11.1.1.3.0 [iam]<\/strong><\/p>\n

    \u2013 Oracle WSM Policy Manager \u2013 11.1.1.0 [oracle_common]<\/strong><\/p>\n

    \u2013 Oracle JRF [oracle_common] (This should be selected automatically.)<\/strong><\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter following values.<\/p>\n

    Domain Name:\u00a0IDMDomain<\/strong><\/p>\n

    Domain location:\u00a0\/app\/fusion\/config\/domains<\/strong><\/p>\n

    Application location:\u00a0\/app\/fusion\/config\/domains\/IDMDomain\/applications
    \n<\/strong><\/p>\n

    [Please note that above paths are different from what we used in previous installations]
    \n<\/strong><\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter name “weblogic” and desired password. Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select “Production Mode” and make sure correct JDK is selected. Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Make sure to change each username to FA_ manually since we have modified the prefix earlier. Once that is changed, select all checkboxes to apply same password. Enter database server details and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    \"\"<\/p>\n

    Once connection test is successful, click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select “Administration Server” and “Managed servers, clusters and Machines”. Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter following values.<\/p>\n

    Name: AdminServer<\/p>\n

    Listen address: <hostname><\/p>\n

    Listen Port: <7001><\/p>\n

    We are not using SSL here so click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    In the “Configure Managed Servers” screen enter following values.<\/p>\n

    WLS_OAM1, <hostname>, 14100 (OAM Server)<\/p>\n

    WLS_SOA1, <hostname>, 8001 (SOA Server)<\/p>\n

    WLS_OIM1, <hostname>, 14000 (OIM Server)<\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Since we are using Unix machine, we must delete this entry. Click\u00a0Delete<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    This tab should look like this now.<\/p>\n

    \"\"<\/p>\n

    Click on “Unix Machine” tab and enter following values. And click\u00a0Next<\/strong><\/p>\n

    Name:\u00a0<hostname><\/strong><\/p>\n

    Node Manager listen address:\u00a0<hostname><\/strong><\/p>\n

    Node manager listen port:\u00a05556<\/strong><\/p>\n

     <\/p>\n

    Import Note: <\/strong>Make sure to use machine name same as hostname. In this case change this to fmwhost.paramlabs.com instead of just fmwhost. Check this using “hostname” command on your OS, even though both point to same IP, the node manager treats both name as different machines.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select all managed servers on left side and click on right arrow to assign all servers to our single node.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    It should look as above. Click Next
    \n<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Review the summary and click “Create<\/strong>“<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Once creation is complete, click\u00a0Done<\/strong><\/p>\n

     <\/p>\n

    Prepare Admin server for startup without prompting password<\/strong><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ mkdir -p \/app\/fusion\/config\/domains\/IDMDomain\/servers\/AdminServer\/security<\/strong><\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/config\/domains\/IDMDomain\/servers\/AdminServer\/security<\/strong><\/p>\n

    [fusion@fmwhost security]$ vi boot.properties<\/strong><\/p>\n

    [fusion@fmwhost security]$ more boot.properties<\/strong><\/p>\n

    username=weblogic
    \n<\/strong><\/p>\n

    password=Oracle123 <\/strong>(whichever password you chose)
    \n<\/strong><\/p>\n

     <\/p>\n

    Note:<\/strong> The username and password entries in the file are not encrypted until you start the Administration Server. For security reasons, minimize the time the entries in the file are left unencrypted. After you edit the file, start the server as soon as possible so that the entries are encrypted.
    \n<\/span><\/p>\n

     <\/p>\n

    Configure and start Node Manager<\/strong><\/p>\n

    [fusion@fmwhost security]$ cd \/app\/fusion\/fmw\/wlserver_10.3\/server\/bin\/<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/startNodeManager.sh<\/strong><\/p>\n

    \u2026<\/p>\n

    INFO: Secure socket listener started on port 5556<\/p>\n

    \u2026<\/p>\n

    Once you see above messege, press CTRL+C to kill the process (if you started with “&” then kill using kill -9 command)
    \n<\/strong><\/p>\n

    ^C+ set +x
    \n<\/strong><\/p>\n

     <\/p>\n

    Set the node manager properties<\/strong><\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/oracle_common\/common\/bin
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/setNMProps.sh<\/strong><\/p>\n

    Appending required nodemanager.properties<\/p>\n

     <\/p>\n

    To confirm the changes,<\/p>\n

    [fusion@fmwhost bin]$ tail -f \/app\/fusion\/fmw\/wlserver_10.3\/common\/nodemanager\/nodemanager.properties
    \n<\/strong><\/p>\n

    \u2026<\/p>\n

    #Required NM Property overrides (append to existing nodemanager.properties)<\/p>\n

    StartScriptEnabled=true
    \n<\/strong><\/p>\n

     <\/p>\n

    Start node manager in nohup mode so that it keeps running after you close the shell.<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/wlserver_10.3\/server\/bin\/
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ nohup .\/startNodeManager.sh &<\/strong><\/p>\n

     <\/p>\n

    Start Weblogic Admin server<\/strong><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/config\/domains\/IDMDomain\/bin\/<\/strong><\/p>\n

    [fusion@fmwhost bin]$ nohup .\/startWebLogic.sh &<\/strong><\/p>\n

     <\/p>\n

    Wait till you see this message.<\/p>\n

    \u2026<\/p>\n

    <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING<\/strong> mode><\/p>\n

     <\/p>\n

    ==========<\/p>\n

    Note:<\/strong> If you ever get error like<\/p>\n

     <\/p>\n

    <Info> <Management> <BEA-141281> <unable to get file lock, will retry \u2026><\/p>\n

    Then do the following<\/p>\n

    Kill any running processes for startWeblogic.sh and then remove the lock files as follows.<\/p>\n

    -bash-3.2$ rm \/app\/fusion\/config\/domains\/IDMDomain\/servers\/AdminServer\/tmp\/AdminServer.lok<\/p>\n

     <\/p>\n

    This error appears if you the admin server or managed server did not stop properly earlier.<\/p>\n

    ==========<\/p>\n

     <\/p>\n

    Make sure Admin server is started properly by launching the URL http:\/\/<hostname>:7001\/console<\/strong><\/p>\n

    \"\"<\/p>\n

    Login with “weblogic<\/strong>” user<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Launch Enterprise Manager URL
    \n<\/strong><\/p>\n

    http:\/\/<hostname>:7001\/em<\/a><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Login with “weblogic” user<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Setup HTTP Aliases<\/strong>
    \n<\/span><\/p>\n

    Create a file named\u00a0admin.conf<\/strong>\u00a0at <web instance directory>\/config\/OHS\/ohs1\/moduleconf and enter following lines
    \n<\/span><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ more \/app\/fusion\/config\/instances\/web1\/config\/OHS\/web1\/moduleconf\/admin.conf<\/strong><\/p>\n

    RewriteEngine On<\/p>\n

    RewriteOptions inherit<\/p>\n

    RewriteRule ^\/em\/targetauth\/emaslogout.jsp “\/oamsso\/logout.html?end_url=\/em” [R]<\/p>\n

    RewriteRule ^\/console\/jsp\/common\/logout.jsp “\/oamsso\/logout.html?end_url=\/console” [R]<\/p>\n

     <\/p>\n

    ###################################<\/p>\n

    ## General Domain Configuration<\/p>\n

    ###################################<\/p>\n

    # Admin Server and EM<\/p>\n

    <Location \/console><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    WebLogicHost fmwhost.paramlabs.com<\/p>\n

    WeblogicPort 7001<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    <Location \/consolehelp><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    WebLogicHost fmwhost.paramlabs.com<\/p>\n

    WeblogicPort 7001<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    <Location \/em><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    WebLogicHost fmwhost.paramlabs.com<\/p>\n

    WeblogicPort 7001<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    Restart Web server
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ \/app\/fusion\/config\/instances\/web1\/bin\/opmnctl stopall
    \n<\/strong><\/p>\n

    opmnctl stopall: stopping opmn and all managed processes…<\/p>\n

    [fusion@fmwhost bin]$ \/app\/fusion\/config\/instances\/web1\/bin\/opmnctl startall<\/strong><\/p>\n

    opmnctl startall: starting opmn and all managed processes…<\/p>\n

     <\/p>\n

    Now you can launch the same URL using our main http port 7777<\/strong><\/p>\n

     <\/p>\n

    http:\/\/<hostname>:7777\/console<\/strong> should open fine now<\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Register HTTP server with Enterprise Manager<\/strong>
    \n<\/span><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ .\/opmnctl registerinstance -adminHost fmwhost -adminport 7001 -adminUsername weblogic
    \n<\/strong><\/p>\n

    Command requires login to weblogic admin server (fmwhost):<\/p>\n

    Username: weblogic<\/strong><\/p>\n

    Password:<\/p>\n

    \u2026<\/p>\n

     <\/p>\n

    Done<\/p>\n

    Registering instance<\/p>\n

    Command succeeded.<\/p>\n

     <\/p>\n

    Removing IDM Domain Agent<\/strong>
    \n<\/span><\/p>\n

    In the Administration console, click on\u00a0“Security Realms” -> myrealm -> Providers<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select IAMSuiteAgent and click on Delete.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Activate Changes<\/p>\n

     <\/p>\n

    Enable Weblogic Plugin
    \n<\/strong><\/span><\/p>\n

    Open\u00a0http:\/\/<hostname>:7777\/console<\/a>\u00a0and login with weblogic user<\/p>\n

    Click\u00a0Lock & Edit.<\/strong>\u00a0Click on\u00a0IDMDomain -> Configuration -> Web Applications<\/strong><\/p>\n

    \"\"<\/p>\n

    Scroll down and check “Weblogic Plugin Enabled<\/strong>“<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click on\u00a0Environment -> Servers -> AdminServer -> Protocols -> HTTP<\/strong>. Change the Frontend port to\u00a07777<\/strong>.<\/p>\n

    \"\"<\/p>\n

    Activate Changes<\/p>\n

    Restart Welogic Admin Server
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/config\/domains\/IDMDomain\/bin\/<\/p>\n

    [fusion@fmwhost bin]$ .\/stopWebLogic.sh<\/p>\n

    [fusion@fmwhost bin]$ nohup .\/startWebLogic.sh &<\/p>\n

     <\/p>\n

    Extend the Domain to include Oracle Internet Directory<\/strong>
    \n<\/span><\/p>\n

    Make sure that the port 3060 is not being used by other process.<\/p>\n

    [fusion@fmwhost bin]$\u00a0netstat -an | grep “3060\u2033<\/p>\n

    Start the configuration from\u00a0<IDM_HOME>\/bin
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/idm\/bin
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/config.sh &<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select “Configure Without A Domain<\/strong>” and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Instance Location:\u00a0\/app\/fusion\/config\/instances\/oid1<\/strong><\/p>\n

    Instance Name:\u00a0oid1<\/strong><\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Deselect checkbox and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Yes<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select “Oracle Internet Directory<\/strong>” and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select “Specify Ports using Configuration file”<\/p>\n

    Open a shell and copy the staticports.ini file to home directory<\/p>\n

    [fusion@fmwhost bin]$ cp -p \/app\/fusion\/provisioning\/idm\/Disk1\/stage\/Response\/staticports.ini ~\/
    \n<\/strong><\/p>\n

    Click\u00a0View\/Edit File<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter\/uncomment Value for Non-SSL Port as 3060<\/p>\n

    And for SSL Port put value as 3061<\/p>\n

    Click\u00a0Save
    \n<\/strong><\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter database details and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Set Realm as the domain level DC (for example if domain is example.com then set dc=example, dc=com)<\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Review the summary and click\u00a0Configure<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Once configuration completes, click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Review the summary and click\u00a0Finish<\/strong><\/p>\n

     <\/p>\n

    Validate OID<\/strong>
    \n<\/span><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ export ORACLE_HOME=\/app\/fusion\/fmw\/idm
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export ORACLE_INSTANCE=\/app\/fusion\/config\/instances\/oid1
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export PATH=$ORACLE_HOME\/opmn\/bin:$ORACLE_HOME\/bin:$ORACLE_HOME\/ldap\/bin:$ORACLE_HOME\/ldap\/admin:$PATH
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ ldapbind -h fmwhost -p 3060 -D “cn=orcladmin” -q
    \n<\/strong><\/p>\n

    Please enter bind password:<\/p>\n

    bind successful<\/p>\n

    [fusion@fmwhost bin]$ ldapbind -h fmwhost -p 3061 -D “cn=orcladmin” -q -U 1
    \n<\/strong><\/p>\n

    Please enter bind password:<\/p>\n

    bind successful<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ opmnctl reload<\/strong><\/p>\n

    opmnctl reload: reconfiguring opmn…<\/p>\n

    [fusion@fmwhost bin]$ opmnctl status agent<\/strong><\/p>\n

     <\/p>\n

    Processes in Instance: oid1<\/p>\n

    ———————————+——————–+———+———<\/p>\n

    ias-component | process-type | pid | status<\/p>\n

    ———————————+——————–+———+———<\/p>\n

    oid1 | oidldapd | 11217 | Alive<\/p>\n

    oid1 | oidldapd | 11221 | Alive<\/p>\n

    oid1 | oidmon | 11203 | Alive<\/p>\n

    EMAGENT | EMAGENT | 10839 | Alive<\/p>\n

     <\/p>\n

    Registering Oracle Internet Directory with the WebLogic Server Domain<\/strong><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ export ORACLE_HOME=\/app\/fusion\/fmw\/idm<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export ORACLE_INSTANCE=\/app\/fusion\/config\/instances\/oid1<\/strong><\/p>\n

    [fusion@fmwhost bin]$ $ORACLE_INSTANCE\/bin\/opmnctl registerinstance -adminHost fmwhost -adminPort 7001 -adminUsername weblogic
    \n<\/strong><\/p>\n

    Command requires login to weblogic admin server (fmwhost):<\/p>\n

    Username: weblogic<\/strong><\/p>\n

    Password:<\/p>\n

     <\/p>\n

    Registering instance<\/p>\n

    Command succeeded.<\/p>\n

     <\/p>\n

    Update the Enterprise Manager Repository URL<\/strong>
    \n<\/span><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ cd $ORACLE_INSTANCE\/EMAGENT\/EMAGENT\/bin
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/emctl switchOMS http:\/\/fmwhost:7001\/em\/upload<\/strong><\/p>\n

    Oracle Enterprise Manager 10g Release 5 Grid Control 10.2.0.5.0.<\/p>\n

    Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.<\/p>\n

    SwitchOMS succeeded.<\/p>\n

     <\/p>\n

    We can now verify whether this instance is registered for monitoring agent.<\/p>\n

    Login to\u00a0http:\/\/<hostname>:7777\/em<\/strong> using weblogic user<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click on\u00a0Farm->Agent monitored targets.<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Make sure that Agent URL is configured and it does not<\/strong> show “Needs Configuration”<\/p>\n

    Tune Oracle Internet Directory for Fusion Applications Installation
    \n<\/strong><\/span><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    In EM console, select oid1 from farm tree. On right pan click on oid1->Administration->Shared Properties<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select Skip referral for search<\/strong> (in OID term orclskiprefinsql = 1<\/strong>)<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Deselect Match DN<\/strong> (orclMatchDnEnabled = 0<\/strong>)<\/p>\n

    Click Apply<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Now click on oid1->Administration->Server Properties<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Set following values.<\/p>\n

    Number of Oracle Internet Directory LDAP Server Processes\u00a0\u00a0\u00a0\u00a0orclserverprocs\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a04
    \n<\/strong><\/p>\n

    Number of DB Connections per Server Process\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0orclmaxcc\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a04
    \n<\/strong><\/p>\n

    Maximum Number of LDAP connections per Server Process\u00a0\u00a0\u00a0\u00a0orclmaxldapconns\u00a0\u00a0\u00a0\u00a04096
    \n<\/strong><\/p>\n

     <\/p>\n

    Restart OID processes<\/strong> to make sure that the changes are now in effect.<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ \/app\/fusion\/config\/instances\/oid1\/bin\/opmnctl stopall
    \n<\/strong><\/p>\n

    opmnctl stopall: stopping opmn and all managed processes…<\/p>\n

    [fusion@fmwhost bin]$ \/app\/fusion\/config\/instances\/oid1\/bin\/opmnctl startall
    \n<\/strong><\/p>\n

    opmnctl startall: starting opmn and all managed processes…<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ opmnctl status agent<\/strong><\/p>\n

     <\/p>\n

    Processes in Instance: oid1<\/p>\n

    ———————————+——————–+———+———<\/p>\n

    ias-component | process-type | pid | status<\/p>\n

    ———————————+——————–+———+———<\/p>\n

    oid1 | oidldapd | 17192 | Alive<\/p>\n

    oid1 | oidldapd | 17188 | Alive<\/p>\n

    oid1 | oidldapd | 17184 | Alive<\/p>\n

    oid1 | oidldapd | 17166 | Alive<\/p>\n

    oid1 | oidldapd | 17142 | Alive<\/p>\n

    oid1 | oidmon | 17104 | Alive<\/p>\n

    EMAGENT | EMAGENT | 17103 | Alive<\/p>\n

     <\/p>\n

    Prepare Identity and Policy Stores<\/strong><\/span><\/p>\n

    Prepare Policy store<\/strong><\/span><\/p>\n

    Go to directory\u00a0<IAM_HOME>\/idmtools\/bin<\/strong><\/p>\n

    -bash-3.2$\u00a0cd \/app\/fusion\/fmw\/iam\/idmtools\/bin\/<\/strong><\/p>\n

    Source environment variables<\/p>\n

    -bash-3.2$\u00a0export ORACLE_HOME=\/app\/fusion\/fmw\/iam
    \n<\/strong><\/p>\n

    -bash-3.2$\u00a0export JAVA_HOME=\/app\/fusion\/jdk6<\/strong><\/p>\n

    -bash-3.2$\u00a0export IDM_HOME=\/app\/fusion\/fmw\/idm<\/strong><\/p>\n

    -bash-3.2$\u00a0export MW_HOME=\/app\/fusion\/fmw<\/strong><\/p>\n

     <\/p>\n

    Create a file named\u00a0policystore.props<\/strong><\/p>\n

    [fusion@fmwhost bin]$ more policystore.props<\/strong><\/p>\n

    POLICYSTORE_HOST: fmwhost.paramlabs.com<\/p>\n

    POLICYSTORE_PORT: 3060<\/p>\n

    POLICYSTORE_BINDDN: cn=orcladmin<\/p>\n

    POLICYSTORE_READONLYUSER: PolicyROUser<\/p>\n

    POLICYSTORE_READWRITEUSER: PolicyRWUser<\/p>\n

    POLICYSTORE_SEARCHBASE: dc=paramlabs,dc=com<\/p>\n

    POLICYSTORE_CONTAINER: cn=idm_jpsroot<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ .\/idmConfigTool.sh -configPolicyStore input_file=policystore.props
    \n<\/strong><\/p>\n

    Enter Policy Store Bind DN password :<\/p>\n

    \u2026<\/p>\n

    Enter User Password for PolicyROUser:<\/p>\n

    Confirm User Password for PolicyROUser:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for PolicyRWUser:<\/p>\n

    Confirm User Password for PolicyRWUser:<\/p>\n

    Check for errors in the log file.<\/p>\n

    -bash-3.2$ grep -i error automation.log
    \n<\/strong><\/p>\n

    Note:\u00a0<\/strong>While running this command, you might see the following error message:<\/p>\n

    WARNING: Error in adding in-memory OID search filters.<\/strong><\/p>\n

    You may safely ignore this error.
    \n<\/strong><\/p>\n

     <\/p>\n

    Run following commands to reassociate Security Store<\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/oracle_common\/common\/bin\/<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/wlst.sh<\/strong><\/p>\n

    wls:\/offline> connect(“weblogic”,”Oracle123″,”t3:\/\/fmwhost.paramlabs.com:7001″)<\/strong><\/p>\n

    Connecting to t3:\/\/fmwhost.paramlabs.com:7001 with userid weblogic …<\/p>\n

    Successfully connected to Admin Server ‘AdminServer’ that belongs to domain ‘IDMDomain’.<\/p>\n

     <\/p>\n

    Warning: An insecure protocol was used to connect to the<\/p>\n

    server. To ensure on-the-wire security, the SSL port or<\/p>\n

    Admin port should be used instead.<\/p>\n

     <\/p>\n

    wls:\/IDMDomain\/serverConfig> reassociateSecurityStore(domain=”IDMDomain”, admin=”cn=orcladmin”,password=”Oracle123″, ldapurl=”ldap:\/\/fmwhost.paramlabs.com:3060″,servertype=”OID”, jpsroot=”cn=idm_jpsroot”)
    \n<\/strong><\/p>\n

     <\/p>\n

    wls:\/IDMDomain\/serverConfig> exit()<\/p>\n

     <\/p>\n

    Restart Admin Server
    \n<\/strong><\/p>\n

     <\/p>\n

    Prepare Identity Store<\/strong>
    \n<\/span><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ more idstore.props<\/strong><\/p>\n

    # Common<\/p>\n

    IDSTORE_HOST: fmwhost.paramlabs.com<\/p>\n

    IDSTORE_PORT: 3060<\/p>\n

    IDSTORE_BINDDN: cn=orcladmin<\/p>\n

    IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=paramlabs,dc=com<\/p>\n

    IDSTORE_SEARCHBASE: dc=paramlabs,dc=com<\/p>\n

    IDSTORE_USERNAMEATTRIBUTE: cn<\/p>\n

    IDSTORE_LOGINATTRIBUTE: uid<\/p>\n

    IDSTORE_USERSEARCHBASE: cn=Users,dc=paramlabs,dc=com<\/p>\n

    POLICYSTORE_SHARES_IDSTORE: true<\/p>\n

    # OAM<\/p>\n

    IDSTORE_OAMADMINUSER:oamadmin<\/p>\n

    IDSTORE_OAMSOFTWAREUSER:oamLDAP<\/p>\n

    OAM11G_IDSTORE_ROLE_SECURITY_ADMIN:OAMAdministrators<\/p>\n

    # OAM and OIM<\/p>\n

    IDSTORE_SYSTEMIDBASE: cn=systemids,dc=paramlabs,dc=com<\/p>\n

    # OIM<\/p>\n

    IDSTORE_OIMADMINGROUP: OIMAdministrators<\/p>\n

    IDSTORE_OIMADMINUSER: oimLDAP<\/p>\n

    # Required due to bug<\/p>\n

    IDSTORE_OAAMADMINUSER : oaamadmin<\/p>\n

    # Fusion Applications<\/p>\n

    IDSTORE_READONLYUSER: IDROUser<\/p>\n

    IDSTORE_READWRITEUSER: IDRWUser<\/p>\n

    IDSTORE_SUPERUSER: weblogic_fa<\/p>\n

    # Weblogic<\/p>\n

    IDSTORE_WLSADMINUSER : weblogic_idm<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ .\/idmConfigTool.sh -preConfigIDStore input_file=idstore.props
    \n<\/strong><\/p>\n

    Enter ID Store Bind DN password :<\/p>\n

     <\/p>\n

    Check the log for errors<\/p>\n

    [fusion@fmwhost bin]$ grep -i error automation.log<\/strong><\/p>\n

    The above commands will automatically create a file named idmDomainConfig.param<\/strong> file. This is an important file and we will seed the values from this file to the response file.<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ more idmDomainConfig.param<\/strong><\/p>\n

    IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=paramlabs,dc=com<\/p>\n

    POLICYSTORE_PORT: 3060<\/p>\n

    IDSTORE_HOST: fmwhost.paramlabs.com<\/p>\n

    IDSTORE_LOGINATTRIBUTE: uid<\/p>\n

    IDSTORE_PORT: 3060<\/p>\n

    POLICYSTORE_CONTAINER: cn=idm_jpsroot<\/p>\n

    IDSTORE_USERSEARCHBASE: cn=Users,dc=paramlabs,dc=com<\/p>\n

    POLICYSTORE_HOST: fmwhost.paramlabs.com<\/p>\n

    POLICYSTORE_READWRITE_USERNAME: cn=PolicyRWUser,cn=users,dc=paramlabs,dc=com<\/p>\n

     <\/p>\n

    Creating Users and Groups<\/strong>
    \n<\/span><\/p>\n

    Run following command.<\/p>\n

    [fusion@fmwhost bin]$ .\/idmConfigTool.sh -prepareIDStore mode=all input_file=idstore.props<\/strong><\/p>\n

    Enter ID Store Bind DN password :<\/p>\n

    \u2026<\/p>\n

    Enter User Password for IDROUser:<\/p>\n

    Confirm User Password for IDROUser:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for IDRWUser:<\/p>\n

    Confirm User Password for IDRWUser:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for weblogic_fa:<\/p>\n

    Confirm User Password for weblogic_fa:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for weblogic_idm:<\/p>\n

    Confirm User Password for weblogic_idm:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for oblixanonymous:<\/p>\n

    Confirm User Password for oblixanonymous:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for oamadmin:<\/p>\n

    Confirm User Password for oamadmin:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for oamLDAP:<\/p>\n

    Confirm User Password for oamLDAP:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for oaamadmin:<\/p>\n

    Confirm User Password for oaamadmin:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for oimLDAP:<\/p>\n

    Confirm User Password for oimLDAP:<\/p>\n

    \u2026<\/p>\n

    Enter User Password for xelsysadm:<\/p>\n

    Confirm User Password for xelsysadm:<\/p>\n

    The tool has completed its operation. Details have been logged to automation.log<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ grep -i error automation.log<\/strong><\/p>\n

    WARNING: Error in adding in-memory OID search filters<\/p>\n

     <\/p>\n

    Note: We are not using Oracle Virtual Directory (OVD) since this is optional component so skipping OVD part<\/strong><\/p>\n

     <\/p>\n

    Extend the Domain to include Oracle Directory Service Manager (ODSM)<\/strong>
    \n<\/span><\/p>\n

    Make sure that the port 7006 is not being used by any process.
    \n[fusion@fmwhost bin]$ netstat -an | grep 7006<\/strong><\/p>\n

    Start the configuration from\u00a0<IDM_HOME>\/bin<\/strong><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/idm\/bin\/<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/config.sh &<\/strong><\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select “Extend Existing Domain” and enter following values<\/p>\n

    Hostname: <hostname><\/strong><\/p>\n

    Port: 7001<\/strong><\/p>\n

    Username: weblogic<\/strong><\/p>\n

    Password: same as existing weblogic password<\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Yes<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter following values.<\/p>\n

    Weblogic Server Directory:\u00a0\/app\/fusion\/fmw\/wlserver_10.3<\/strong><\/p>\n

    Instance location:\u00a0\/app\/fusion\/config\/instances\/ods1<\/strong><\/p>\n

    Instance Name:\u00a0ods1<\/strong><\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Deselect checkbox and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Yes<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select\u00a0only Oracle Directory Service Manager<\/strong>\u00a0and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select “Specify Ports using Configuration file”. Open another shell window and copy the staticports.ini from staging directory.<\/p>\n

    [fusion@fmwhost bin]$ cp -p \/app\/fusion\/provisioning\/idm\/Disk1\/stage\/Response\/staticports.ini ~\/<\/strong><\/p>\n

    Click\u00a0View\/Edit File<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Edit\/uncomment ODS server Port No =\u00a07006<\/strong><\/p>\n

    Click\u00a0Save<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Review the summary and click\u00a0Configure<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Once configuration completes, click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Review the summary and click\u00a0Finish<\/strong><\/p>\n

     <\/p>\n

    Check if wls_ods1 is already up in Enterprise Manager at\u00a0http:\/\/<hostname>:7777\/em<\/a><\/p>\n

    If not up the start by following commands.<\/p>\n

    [fusion@fmwhost IDMDomain]$ cp -pr \/app\/fusion\/config\/domains\/IDMDomain\/servers\/AdminServer\/security\/boot.properties \/app\/fusion\/config\/domains\/IDMDomain\/servers\/wls_ods1\/security\/<\/strong><\/p>\n

    [fusion@fmwhost IDMDomain]$ cd \/app\/fusion\/config\/domains\/IDMDomain\/bin\/<\/strong><\/p>\n

    [fusion@fmwhost IDMDomain]$\u00a0nohup .\/startManagedWebLogic.sh wls_ods1 &<\/strong><\/p>\n

    Wait till you see RUNNING in the nohup.log file<\/p>\n

    Launch ODSM using following URL<\/p>\n

    http:\/\/<hostname>:7006\/odsm<\/a><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Create Aliases for ODSM in HTTP server<\/strong>
    \n<\/span><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ vi \/app\/fusion\/config\/instances\/web1\/config\/OHS\/web1\/moduleconf\/admin.conf<\/strong><\/p>\n

    <Append following lines>
    \n<\/strong><\/p>\n

    # ODSM<\/p>\n

    <Location \/odsm><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:7006<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    Restart Web Server as follows<\/p>\n

    [fusion@fmwhost bin]$ \/app\/fusion\/config\/instances\/web1\/bin\/opmnctl stopall
    \n<\/strong><\/p>\n

    opmnctl stopall: stopping opmn and all managed processes…<\/p>\n

    [fusion@fmwhost bin]$ \/app\/fusion\/config\/instances\/web1\/bin\/opmnctl startall<\/strong><\/p>\n

    opmnctl startall: starting opmn and all managed processes…<\/p>\n

    Now you can also launch ODSM using following URL<\/p>\n

    http:\/\/<hostname>:7777\/odsm<\/a><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click on\u00a0Connect to a directory -><\/strong><\/span>
    \nCreate A New Connection
    \n<\/strong><\/span><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter values as above. Click\u00a0Connect<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    You can now view the Oracle Internet Directory from ODSM<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    You can also browse the OID data as above<\/p>\n

     <\/p>\n

    Configure Oracle Access Manager (OAM)
    \n<\/strong><\/span><\/p>\n

    Append following entries in \/app\/fusion\/config\/instances\/web1\/config\/OHS\/web1\/moduleconf\/admin.conf<\/p>\n

    ##############################################
    \n## Entries Required by Oracle Access Manager
    \n##############################################
    \n# OAM console
    \n<Location \/oamconsole>
    \nSetHandler weblogic-handler
    \nWebLogicHost fmwhost.paramlabs.com
    \nWebLogicPort 7001
    \n<\/Location><\/p>\n

    ##############################################
    \n## Entries Required by Oracle Access Manager
    \n##############################################
    \n# OAM
    \n<Location \/oam>
    \nSetHandler weblogic-handler
    \n#WLProxySSL ON
    \n#WLProxySSLPassThrough ON
    \nWebLogicCluster fmwhost.paramlabs.com:14100
    \n<\/Location><\/p>\n

    ##############################################
    \n## Entries Required by Fusion Applications
    \n##############################################
    \n# FAAuthScheme
    \n<Location \/fusion_apps>
    \nSetHandler weblogic-handler
    \n#WLProxySSL ON
    \n#WLProxySSLPassThrough ON
    \nWebLogicCluster fmwhost.paramlabs.com:14100
    \n<\/Location><\/p>\n

    Restart Web Server as follows.
    \n[fusion@fmwhost ldap_config_util]$\u00a0\/app\/fusion\/config\/instances\/web1\/bin\/opmnctl stopall<\/strong><\/p>\n

    opmnctl stopall: stopping opmn and all managed processes…<\/p>\n

    [fusion@fmwhost ldap_config_util]$\u00a0\/app\/fusion\/config\/instances\/web1\/bin\/opmnctl startall<\/strong><\/p>\n

    opmnctl startall: starting opmn and all managed processes…<\/p>\n

    \nGo to\u00a0<IAM_HOME>\/idmtools\/bin<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export ORACLE_HOME=\/app\/fusion\/fmw\/iam
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export MW_HOME=\/app\/fusion\/fmw<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export JAVA_HOME=\/app\/fusion\/jdk6<\/strong><\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/iam\/idmtools\/bin<\/strong><\/p>\n

     <\/p>\n

    Create a file named config_oam1.props<\/p>\n

    [fusion@fmwhost bin]$ more config_oam1.props<\/strong><\/p>\n

    WLSHOST: fmwhost.paramlabs.com<\/p>\n

    WLSPORT: 7001<\/p>\n

    WLSADMIN: weblogic<\/p>\n

    WLSPASSWD: Oracle123<\/p>\n

    IDSTORE_HOST: fmwhost.paramlabs.com<\/p>\n

    IDSTORE_PORT: 3060<\/p>\n

    IDSTORE_DIRECTORYTYPE:OID<\/p>\n

    IDSTORE_BINDDN: cn=orcladmin<\/p>\n

    IDSTORE_USERNAMEATTRIBUTE: cn<\/p>\n

    IDSTORE_LOGINATTRIBUTE: uid<\/p>\n

    IDSTORE_USERSEARCHBASE: cn=Users,dc=paramlabs,dc=com<\/p>\n

    IDSTORE_SEARCHBASE: dc=paramlabs,dc=com<\/p>\n

    IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=paramlabs,dc=com<\/p>\n

    IDSTORE_OAMSOFTWAREUSER: oamLDAP<\/p>\n

    IDSTORE_OAMADMINUSER: oamadmin<\/p>\n

    PRIMARY_OAM_SERVERS: fmwhost.paramlabs.com:5575<\/p>\n

    WEBGATE_TYPE: ohsWebgate11g<\/p>\n

    ACCESS_GATE_ID: Webgate_IDM<\/p>\n

    OAM11G_IDM_DOMAIN_OHS_HOST:fmwhost.paramlabs.com<\/p>\n

    OAM11G_IDM_DOMAIN_OHS_PORT:7777<\/p>\n

    OAM11G_IDM_DOMAIN_OHS_PROTOCOL:http<\/p>\n

    OAM11G_WG_DENY_ON_NOT_PROTECTED: false<\/p>\n

    OAM_TRANSFER_MODE: open<\/p>\n

    OAM11G_OAM_SERVER_TRANSFER_MODE:open<\/p>\n

    OAM11G_IDM_DOMAIN_LOGOUT_URLS:\/console\/jsp\/common\/logout.jsp,\/em\/targetauth\/emaslogout.jsp<\/p>\n

    OAM11G_OIM_WEBGATE_PASSWD: Oracle123<\/p>\n

    COOKIE_DOMAIN: .paramlabs.com<\/p>\n

    OAM11G_IDSTORE_ROLE_SECURITY_ADMIN: OAMAdministrators<\/p>\n

    OAM11G_SSO_ONLY_FLAG: true<\/p>\n

    OAM11G_OIM_INTEGRATION_REQ: true<\/p>\n

    OAM11G_IMPERSONATION_FLAG:true<\/p>\n

    OAM11G_SERVER_LBR_HOST:fmwhost.paramlabs.com<\/p>\n

    OAM11G_SERVER_LBR_PORT:7777<\/p>\n

    OAM11G_SERVER_LBR_PROTOCOL:http<\/p>\n

    COOKIE_EXPIRY_INTERVAL: 120<\/p>\n

    OAM11G_OIM_OHS_URL:http:\/\/fmwhost.paramlabs.com:7777\/<\/p>\n

    OAM11G_SERVER_LOGIN_ATTRIBUTE: uid<\/p>\n

     <\/p>\n

    Keep a backup of idmDomainConfig.param for safety<\/p>\n

    [fusion@fmwhost bin]$ cp -pr idmDomainConfig.param idmDomainConfig.param.preOAM
    \n<\/strong><\/p>\n

     <\/p>\n

    Run the following command to Configure OAM<\/p>\n

    [fusion@fmwhost bin]$ .\/idmConfigTool.sh -configOAM input_file=config_oam1.props
    \n<\/strong><\/p>\n

    Enter ID Store Bind DN password :<\/p>\n

    Enter User Password for IDSTORE_PWD_OAMSOFTWAREUSER:<\/p>\n

    Confirm User Password for IDSTORE_PWD_OAMSOFTWAREUSER:<\/p>\n

    Enter User Password for IDSTORE_PWD_OAMADMINUSER:<\/p>\n

    Confirm User Password for IDSTORE_PWD_OAMADMINUSER:<\/p>\n

    \u2026<\/p>\n

    The tool has completed its operation. Details have been logged to automation.log<\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ grep -i error automation.log<\/strong><\/p>\n

    WARNING: Error in adding in-memory OID search filters<\/p>\n

     <\/p>\n

    Restart Admin server and all managed servers
    \n<\/strong><\/p>\n

     <\/p>\n

    Validate OAM
    \n<\/strong><\/p>\n

    Login to OAM Console using\u00a0oamadmin\u00a0<\/strong>user<\/p>\n

     <\/p>\n

    http:\/\/fmwhost:7777\/oamconsole\/<\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    In System Configuration<\/strong> tab, click Access Manager Settings -> SSO Agents-> OAM Agents<\/strong>. Search for all agents.<\/p>\n

    Edit Webgate_IDM<\/strong> agent<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Set\u00a0Max. number of Connections<\/strong>\u00a0to\u00a04<\/strong>\u00a0for each primary servers (in our case only one host is there)<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Do the same for Webgate_IDM_11g agent<\/p>\n

    Set\u00a0Max. number of Connections<\/strong>\u00a0to\u00a04<\/strong>\u00a0for each primary servers (in our case only one host is there)<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    In Policy Configurations<\/strong> tab, Host identifiers->IAMSuiteAgent-><\/strong> Make sure our hostname and the default http port is mentioned. If already there then nothing to change in this screen.
    \n<\/span><\/p>\n

    Adding the oamadmin Account to Access System Administrators<\/strong>
    \n<\/span><\/p>\n

    The oamadmin user is assigned to the Oracle Access Manager Administrators group, which is in turn assigned to the Access System Administrators group. Fusion Applications, however, requires the oamadmin user to be explicitly added to that role.<\/p>\n

     <\/p>\n

    To do this, perform the following steps:<\/p>\n

    1.\u00a0<\/strong>Log in to the oamconsole at http:\/\/<hostname>:7777\/oamconsole<\/p>\n

    2.\u00a0<\/strong>Click the\u00a0System Configuration\u00a0<\/strong>tab.<\/p>\n

    3.\u00a0<\/strong>Expand\u00a0Data Sources\u00a0<\/strong>–\u00a0User Identity Stores<\/strong>.<\/p>\n

    4.\u00a0<\/strong>Click\u00a0OIMIDStore<\/strong>.<\/p>\n

    5.\u00a0<\/strong>Click\u00a0Open<\/strong>.<\/p>\n

    6.\u00a0<\/strong>Click the\u00a0+\u00a0<\/strong>symbol next to\u00a0Access System Adminsitrators<\/strong>.<\/p>\n

    7.\u00a0<\/strong>Type oamadmin in the search box and click\u00a0Search<\/strong>.<\/p>\n

    8.\u00a0<\/strong>Click the returned\u00a0oamadmin\u00a0<\/strong>row, then click\u00a0Add Selected<\/strong>.<\/p>\n

    9.\u00a0<\/strong>Click\u00a0Apply<\/strong>.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    \"\"<\/p>\n

    \"\"<\/p>\n

    \"\"<\/p>\n

    Click Apply.<\/p>\n

    Create Oracle Access Manager Policies for WebGate 11g
    \n<\/em><\/strong><\/span><\/p>\n

    In order to allow WebGate 11g\u00a0<\/em>to display the credential collector, you must add \/oam to the list of public policies.<\/p>\n

    Proceed as follows:<\/p>\n

    1.\u00a0<\/strong>Log in to the OAM console<\/p>\n

    2.\u00a0<\/strong>Select the\u00a0Policy Configuration\u00a0<\/strong>tab.<\/p>\n

    3.\u00a0<\/strong>Expand\u00a0Application Domains \u2013 IAM Suite<\/strong><\/p>\n

    4.\u00a0<\/strong>Click\u00a0Resources<\/strong>.<\/p>\n

    5.\u00a0<\/strong>Click\u00a0Open<\/strong>.<\/p>\n

    6.\u00a0<\/strong>Click\u00a0New resource<\/strong>.<\/p>\n

    7.\u00a0<\/strong>Provide the following values:<\/p>\n

    Type:<\/strong>
    \nHTTP<\/strong><\/p>\n

    Description:<\/strong>
    \nOAM Credential Collector
    \n<\/strong><\/p>\n

    Host Identifier:<\/strong>
    \nIAMSuiteAgent<\/strong><\/p>\n

    Resource URL:<\/strong>
    \n\/oam<\/strong><\/p>\n

    Protection Level:<\/strong>
    \nUnprotected<\/strong><\/p>\n

    Authentication Policy:<\/strong>
    \nPublic Policy<\/strong><\/p>\n

    8.\u00a0<\/strong>Click Apply.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    \"\"<\/p>\n

    Click Apply<\/strong><\/p>\n

     <\/p>\n

    Updating Oracle Access Manager System Parameters<\/strong>
    \n<\/span><\/p>\n

     <\/p>\n

    1. Log in to the OAM console at http:\/\/<hostname>:7777\/oamconsole<\/strong> as the WebLogic administration user.<\/p>\n

    2. Select the System Configuration<\/strong> tab.<\/p>\n

    3. Click Common Settings<\/strong> under the Common Configuration<\/strong> entry.<\/p>\n

    4. Click Open<\/strong>.<\/p>\n

    5. Set the following values:<\/p>\n

    Idle Timeout (minutes): 120<\/strong><\/p>\n

    Session Lifetime: 120<\/strong><\/p>\n

    Maximum Number of Sessions per user: 200<\/strong><\/p>\n

    6. Click Apply<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Restart OAM
    \n<\/strong><\/p>\n

     <\/p>\n

    Configure Oracle Identity Manager (OIM) and Oracle SOA Suite<\/strong>
    \n<\/span><\/p>\n

    Start the configuration from\u00a0<IAM_HOME>\/bin<\/strong><\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/iam\/bin\/<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/config.sh &
    \n<\/strong><\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select only “OIM Server<\/strong>” and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter database details. Make sure to use correct prefix as we selected earlier (in our case PROD). ClickNext<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Admin server URL: t3:\/\/<hostname>:7001<\/p>\n

    Username and password of weblogic user<\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter required password and OIM HTTP URL as\u00a0http:\/\/<hostname>:14000<\/strong><\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Check “Enable LDAP Sync” and click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter following values<\/p>\n

    Directory Server Type:\u00a0OID<\/strong><\/p>\n

    ID:\u00a0oid1<\/strong><\/p>\n

    URL:\u00a0ldap:\/\/<hostname>:3060<\/strong><\/p>\n

    User:\u00a0cn=oimLDAP,cn=systemids,dc=<domain>,dc=<com><\/strong><\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Enter following values<\/p>\n

    Role Container:\u00a0cn=Groups,dc=<domain>,dc=<com><\/strong><\/p>\n

    User Container:\u00a0cn=Users,dc=<domain>,dc=<com><\/strong><\/p>\n

    Reservation Container:\u00a0cn=Reserve,dc=<domain>,dc=<com><\/strong><\/p>\n

    Click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Review summary and click\u00a0Configure<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Once configure completes, click\u00a0Next<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Review and click\u00a0Finish<\/strong><\/p>\n

     <\/p>\n

    Launch OIM URL<\/p>\n

    http:\/\/<hostname>:14000\/oim<\/a><\/p>\n

     <\/p>\n

    Important Note:<\/strong> If you get HTTP 404<\/strong>
    \nerror<\/strong> for OIM or if you see following errors in OIM log files (even if OIM status shows as “RUNNING” in admin console) then OIM has not come up properly. You can see this in EM and it will show OIM as down.<\/p>\n

     <\/p>\n

    <Error> <Deployer> <BEA-149265> <Failure occurred in the execution of deployment request with ID ‘1356332711618\u2032 for task ‘1\u2032. Error is: ‘weblogic.management.DeploymentException: [J2EE:160149]Error while processing library references. Unresolved application library references, defined in weblogic-application.xml: [Extension-Name: oracle.sdp.client, exact-match: false].’<\/p>\n

     <\/p>\n

    weblogic.management.DeploymentException: [J2EE:160149]Error while processing library references. Unresolved application library references, defined in weblogic-application.xml: [Extension-Name: oracle.sdp.client, exact-match: false].<\/p>\n

    at weblogic.application.internal.flow.CheckLibraryReferenceFlow.prepare(CheckLibraryReferenceFlow.java:26)<\/p>\n

    at weblogic.application.internal.BaseDeployment$1.next(BaseDeployment.java:648)<\/p>\n

    at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)<\/p>\n

    at weblogic.application.internal.BaseDeployment.prepare(BaseDeployment.java:191)<\/p>\n

    at weblogic.application.internal.EarDeployment.prepare(EarDeployment.java:59)<\/p>\n

     <\/p>\n

    Truncated. see log file for complete stacktrace<\/p>\n

     <\/p>\n

    As per metalink Note: 1328471.1<\/strong> following needs to be done to fix this.<\/p>\n

     <\/p>\n

     <\/p>\n

    Admin console->Deplyments->go to oracle.sdp.client page
    \n<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select Lock & Edit on left pan and on right pan click the checkboxes for WLS_OIM1 and WLS_SOA1<\/strong><\/p>\n

     <\/p>\n

    Restart OIM
    \n<\/strong><\/p>\n

     <\/p>\n

    Now launch OIM URL again.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Login with xelsysadm user<\/p>\n

    \"\"<\/p>\n

    Enter answers for challenge questions.<\/p>\n

     <\/p>\n

    If you have not applied post-steps for patch 13399365 properly then you might get following errors.<\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    oracle.iam.platform.kernel.OrchestatrionException<\/p>\n

    “ADF_FACES-60097 : For more information, please see the server’s error log for an entry beginning with: ADF_FACES-60096: Server Exception during PPR, #8\u2033<\/p>\n

     <\/p>\n

    Internal Exception: java.sql.SQLSyntaxErrorException: ORA-00904: “CONTEXTVAL”: invalid identifier<\/p>\n

    Error Code: 904<\/p>\n

    Call: INSERT INTO ORCHPROCESS (ID, BULKPARENTID, CHANGETYPE, CONTEXTVAL, CREATEDON, ENTITYID, ENTITYTYPE, MODIFIEDON, OPERATION, ORCHESTRATION, ORCHTARGET, PARENTPROCESSID, RETRY, SEQUENCE, STAGE, STATUS) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)<\/p>\n

    bind => [16 parameters bound]<\/p>\n

     <\/p>\n

    This is because following column might not be available in PROD_OIM. ORCHPROCESS table. The post steps for above patch create this column.
    \n<\/strong><\/p>\n

     <\/p>\n

    CONTEXTVAL CLOB<\/p>\n

     <\/p>\n

    Apply Post steps for patch 13399365 to fix this issue as follows.
    \n<\/strong><\/p>\n

     <\/p>\n

    [fusion@fmwhost patch]$ cd \/mnt\/hgfs\/setup\/installers\/idm\/patch\/13399365
    \n<\/strong><\/p>\n

    [fusion@fmwhost 13399365]$ mv \/app\/fusion\/fmw\/iam\/server\/bin\/weblogic.profile \/app\/fusion\/fmw\/iam\/server\/bin\/weblogic.profile_bak
    \n<\/strong><\/p>\n

    [fusion@fmwhost 13399365]$ cp -p sample_weblogic.profile.fa \/app\/fusion\/fmw\/iam\/server\/bin\/weblogic.profile
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/iam\/server\/bin\/
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ more weblogic.profile
    \n<\/strong><\/p>\n

    # For passwords if you dont want to put password <\/optional> in this file just comment it out from here, you will be promted for it in rumtime.<\/p>\n

     <\/p>\n

    #Neccessary env variables [Mandatory]<\/p>\n

    ant_home=\/app\/fusion\/fmw\/modules\/org.apache.ant_1.7.1<\/p>\n

    java_home=\/app\/fusion\/jdk6<\/p>\n

    mw_home=\/app\/fusion\/fmw<\/p>\n

    oim_oracle_home=\/app\/fusion\/fmw\/iam<\/p>\n

     <\/p>\n

    #DB configuration variables [Mandatory]<\/p>\n

    operationsDB.user=FA_OIM<\/p>\n

    # Database password is optional. if you want to give it on terminal itself leave it commented. Otherwise uncomment it.<\/p>\n

    OIM.DBPassword=Oracle123<\/p>\n

    operationsDB.driver=oracle.jdbc.OracleDriver<\/p>\n

    operationsDB.host=fdbhost.paramlabs.com<\/p>\n

    operationsDB.serviceName=fusiondb<\/p>\n

    operationsDB.port=1521<\/p>\n

    appserver.type=wls<\/p>\n

     <\/p>\n

    isMTEnabled=false<\/p>\n

    # If you have milty-tenancy enabled in your environment<\/p>\n

    mdsDB.user=FA_MDS<\/p>\n

    #Password is optional, if you want to give it on terminal itself leave it commented. Otherwise uncomment it.<\/p>\n

    mdsDB.password=Oracle123<\/p>\n

    mdsDB.host=fdbhost.paramlabs.com<\/p>\n

    mdsDB.port=1521<\/p>\n

    mdsDB.serviceName=fusiondb<\/p>\n

     <\/p>\n

    #For domain level configurations [Mandatory]<\/p>\n

    # put here your admin server related credentials<\/p>\n

    weblogic_user=weblogic<\/p>\n

    #Password is optional, if you want to give it on terminal itself leave it commented. Otherwise uncomment it.<\/p>\n

    weblogic_password=Oracle123<\/p>\n

    weblogic_host=fmwhost<\/p>\n

    weblogic_port=7001<\/p>\n

    weblogic.server.dir=\/app\/fusion\/fmw\/wlserver_10.3<\/p>\n

     <\/p>\n

    #oim specific domain level parameters [Mandatory]<\/p>\n

    oimserver_host=fmwhost.paramlabs.com<\/p>\n

    oimserver_port=14000<\/p>\n

    oim_managed_server=WLS_OIM1<\/p>\n

    oim_domain_dir=\/app\/fusion\/config\/domains\/IDMDomain<\/p>\n

     <\/p>\n

    isSODEnabled=false<\/p>\n

     <\/p>\n

    #SOA specific details [Mandatory]<\/p>\n

    soa_home=\/app\/fusion\/fmw\/SOA<\/p>\n

    soa_managed_server=WLS_SOA1<\/p>\n

    soaserver_host=fmwhost.paramlabs.com<\/p>\n

    soaserver_port=8001<\/p>\n

    #put here the name of the targets of taskdetails. in non cluster it will be soa server name and in cluster it will be something like cluster_soa<\/p>\n

    taskdetails_target_name=WLS_SOA1<\/p>\n

    isOHSEnabled=true<\/p>\n

    #Following params is needed only if you have enabled OHS in your env<\/p>\n

    ohs_home=\/app\/fusion\/fmw\/web<\/p>\n

     <\/p>\n

    #If your env is FA, you can set this var false or ignore this if your env is non FA.<\/p>\n

    isFAEnabled=true<\/p>\n

     <\/p>\n

    Now let’s apply the weblogic patch script.
    \n<\/strong><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ export MW_HOME=\/app\/fusion\/fmw<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export JAVA_HOME=\/app\/fusion\/jdk6
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export ANT_HOME=\/app\/fusion\/fmw\/modules\/org.apache.ant_1.7.1
    \n<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export OIM_ORACLE_HOME=\/app\/fusion\/fmw\/iam<\/strong><\/p>\n

    [fusion@fmwhost bin]$ export PATH=$JAVA_HOME\/bin:$PATH<\/strong><\/p>\n

    [fusion@fmwhost bin]$ .\/patch_weblogic.sh<\/strong><\/p>\n

     <\/p>\n

    It takes long time so be patient till it completes.<\/p>\n

     <\/p>\n

    Launch OIM again to make sure you can login successfully and enter security answers successfully.<\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Now Launch SOA<\/strong> using following URL<\/p>\n

    http:\/\/<hostname>:8001\/soa-infra<\/a><\/p>\n

    Login with weblogic username and password when prompted.<\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Prepare OIM to reconcile from ID store<\/strong>
    \n<\/span><\/p>\n

     <\/p>\n

    [fusion@fmwhost bin]$ cd \/app\/fusion\/fmw\/iam\/server\/ldap_config_util\/<\/strong><\/p>\n

    [fusion@fmwhost ldap_config_util]$ cp -pr ldapconfig.props ldapconfig.props_orig
    \n<\/strong><\/p>\n

    [fusion@fmwhost ldap_config_util]$ vi ldapconfig.props<\/strong><\/p>\n

    [fusion@fmwhost ldap_config_util]$ cat ldapconfig.props<\/strong><\/p>\n

    # OIMServer Type, Valid values can be WLS, JBOSS, WAS<\/p>\n

    # e.g.: OIMServerType=WLS<\/p>\n

    OIMServerType=WLS<\/p>\n

     <\/p>\n

    # OIMAdmin User Login<\/p>\n

    # e.g.: OIMAdminUser=xelsysadm<\/p>\n

    OIMAdminUser=xelsysadm<\/p>\n

     <\/p>\n

    # Skip Validation of OVD Schema<\/p>\n

    # e.g.: SkipOVDValidation=true|false, Default false<\/p>\n

    SkipOVDValidation=true<\/p>\n

     <\/p>\n

    # OIM Provider URL<\/p>\n

    # e.g.: OIMProviderURL=t3:\/\/localhost:8003<\/p>\n

    OIMProviderURL=t3:\/\/fmwhost.paramlabs.com:14000<\/p>\n

     <\/p>\n

    # OID URL<\/p>\n

    # e.g.: OIDURL=ldap:\/\/localhost:389<\/p>\n

    OIDURL=ldap:\/\/fmwhost.paramlabs.com:3060<\/p>\n

     <\/p>\n

    # Admin user name to connect to OID<\/p>\n

    # e.g.: OIDAdminUsername=cn=orcladmin<\/p>\n

    OIDAdminUsername=cn=oimLDAP,cn=systemids,dc=paramlabs,dc=com<\/p>\n

     <\/p>\n

    # Search base<\/p>\n

    # e.g.: OIDSearchBase=dc=company,dc=com<\/p>\n

    OIDSearchBase=dc=paramlabs,dc=com<\/p>\n

     <\/p>\n

    # Name of the user container<\/p>\n

    # e.g.: UserContainerName=cn=Users<\/p>\n

    UserContainerName=cn=Users<\/p>\n

     <\/p>\n

    # Name of the role container<\/p>\n

    # e.g.: RoleContainerName=cn=Roles<\/p>\n

    RoleContainerName=cn=Groups<\/p>\n

     <\/p>\n

    # Name of the reservation container<\/p>\n

    # e.g.: ReservationContainerName=cn=Reserve<\/p>\n

    ReservationContainerName=cn=Reserve<\/p>\n

     <\/p>\n

    [fusion@fmwhost ldap_config_util]$ export JAVA_HOME=\/app\/fusion\/jdk6
    \n<\/strong><\/p>\n

    [fusion@fmwhost ldap_config_util]$ export WL_HOME=\/app\/fusion\/fmw\/wlserver_10.3<\/strong><\/p>\n

    Run following command<\/p>\n

    [fusion@fmwhost ldap_config_util]$ .\/LDAPConfigPostSetup.sh \/app\/fusion\/fmw\/iam\/server\/ldap_config_util
    \n<\/strong><\/p>\n

    [Enter OIM admin password:]<\/p>\n

     <\/p>\n

    Authenticated with OIM Admin…..<\/p>\n

    Obtained Scheduler Service…..<\/p>\n

    Successfully Enabled Changelog based Reconciliation schedule jobs.<\/p>\n

    Successfully Updated Changelog based Reconciliation schedule jobs with last change number : <number><\/p>\n

     <\/p>\n

    Login to Enterprise Manager to make sure every required component is up.
    \n<\/strong><\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Configure HTTP for OIM and SOA<\/strong>
    \n<\/span><\/p>\n

     <\/p>\n

    Append following entries in \/app\/fusion\/config\/instances\/web1\/config\/OHS\/web1\/moduleconf\/admin.conf<\/strong><\/p>\n

    ################################################<\/p>\n

    ## Entries Required by Oracle Identity Manager<\/p>\n

    ################################################<\/p>\n

    # oim admin console(idmshell based)<\/p>\n

    <Location \/admin><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    #WLProxySSL ON<\/p>\n

    #WLProxySSLPassThrough ON<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:14000<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    # oim self and advanced admin webapp consoles(canonic webapp)<\/p>\n

    <Location \/oim><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    #WLProxySSL ON<\/p>\n

    #WLProxySSLPassThrough ON<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:14000<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    # xlWebApp – Legacy 9.x webapp (struts based)<\/p>\n

    <Location \/xlWebApp><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    #WLProxySSL ON<\/p>\n

    #WLProxySSLPassThrough ON<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:14000<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    # Nexaweb WebApp – used for workflow designer and DM<\/p>\n

    <Location \/Nexaweb><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    #WLProxySSL ON<\/p>\n

    #WLProxySSLPassThrough ON<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:14000<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    # used for FA Callback service.<\/p>\n

    <Location \/callbackResponseService><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    #WLProxySSL ON<\/p>\n

    #WLProxySSLPassThrough ON<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:14000<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    # spml xsd profile<\/p>\n

    <Location \/spml-xsd><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    #WLProxySSL ON<\/p>\n

    #WLProxySSLPassThrough ON<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:14000<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    # role-sod profile<\/p>\n

    <Location \/role-sod><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:14000<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    <Location \/HTTPClnt><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    #WLProxySSL ON<\/p>\n

    #WLProxySSLPassThrough ON<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:14000<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    ################################################<\/p>\n

    ## Entries Required by Oracle Identity Manager and SOA<\/p>\n

    ################################################<\/p>\n

     <\/p>\n

    # SOA Infrastructure<\/p>\n

    <Location \/soa-infra><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:8001<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    # UMS Email Support<\/p>\n

    <Location \/ucs><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:8001<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    # SOA Callback webservice for SOD – Provide the SOA Managed Server Ports<\/p>\n

    <Location \/sodcheck><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:8001<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    # Callback webservice for SOA. SOA calls this when a request is approved\/rejected<\/p>\n

    # Provide the SOA Managed Server Port<\/p>\n

    <Location \/workflowservice><\/p>\n

    SetHandler weblogic-handler<\/p>\n

    WLCookieName oimjsessionid<\/p>\n

    WebLogicCluster fmwhost.paramlabs.com:14000<\/p>\n

    WLLogFile “${ORACLE_INSTANCE}\/diagnostics\/logs\/OHS\/oim_component.log”<\/p>\n

    <\/Location><\/p>\n

     <\/p>\n

    A copy of my admin.conf file can be found here<\/a><\/strong>. This is just sample admin.conf, you must make changes to host name and ports accordingly.<\/p>\n

    Restart Web Server.
    \n[fusion@fmwhost ldap_config_util]$ \/app\/fusion\/config\/instances\/web1\/bin\/opmnctl stopall<\/strong><\/p>\n

    opmnctl stopall: stopping opmn and all managed processes…<\/p>\n

    [fusion@fmwhost ldap_config_util]$ \/app\/fusion\/config\/instances\/web1\/bin\/opmnctl startall<\/strong><\/p>\n

    opmnctl startall: starting opmn and all managed processes…<\/p>\n

     <\/p>\n

    Change Host assertion in Weblogic<\/strong>
    \n<\/span><\/p>\n

    \"\"<\/p>\n

    Click Save and Activate Changes.<\/p>\n

    Verify OIM and SOA using HTTP port
    \n<\/strong><\/p>\n

     <\/p>\n

    http:\/\/<hostname>:7777\/oim<\/a><\/p>\n

    http:\/\/<hostname>:7777\/soa-infra<\/a><\/p>\n

     <\/p>\n

    Enabling Oracle Identity Manager to Connect to SOA Using the Administrative Users Provisioned in LDAP<\/strong><\/p>\n

    Login to EM console<\/p>\n

    Select\u00a0Farm_IDMDomain\u00a0<\/strong>\u2013>\u00a0Identity and Access<\/strong>\u2013>\u00a0OIM\u00a0<\/strong>\u2013>\u00a0oim(11.1.1.3.0).<\/strong><\/p>\n

    Select\u00a0MBean Browser\u00a0<\/strong>from the menu or right click to select it.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Select\u00a0Application defined Mbeans\u00a0<\/strong>\u2013>\u00a0oracle.iam\u00a0<\/strong>\u2013>\u00a0Server: wls_oim1\u00a0<\/strong>\u2013>\u00a0Application: oim\u00a0<\/strong>\u2013>\u00a0XML Config\u00a0<\/strong>->\u00a0Config\u00a0<\/strong>\u2013>\u00a0XMLConfig.SOAConfig\u00a0<\/strong>\u2013>SOAConfig<\/strong><\/p>\n

    Change the\u00a0username\u00a0<\/strong>attribute to\u00a0weblogic_idm<\/strong><\/p>\n

     <\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    select\u00a0Weblogic Domain\u00a0<\/strong>\u2013>\u00a0IDMDomain\u00a0<\/strong>from the Navigator.<\/p>\n

    Select\u00a0Security\u00a0<\/strong>\u2013>\u00a0Credentials\u00a0<\/strong>from the down menu<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Expand the key\u00a0oim<\/strong>.<\/p>\n

    Click\u00a0SOAAdminPassword<\/strong>.<\/p>\n

    Click\u00a0Edit<\/strong>.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Change the username to weblogic_idm and set the password to the accounts password.<\/p>\n

    Click\u00a0OK<\/strong>.<\/p>\n

     <\/p>\n

    Run the reconciliation process<\/strong> to enable the Oracle WebLogic Server administrator, weblogic_idm, to be visible in the OIM Console. Follow these steps:<\/p>\n

    a.\u00a0<\/strong>Log in to Oracle Identity Manager at:<\/p>\n

    <hosname>:7777\/oim as the user xelsysadm<\/strong><\/p>\n

    b.\u00a0<\/strong>If prompted, set up challenge questions. This happens on your first login to Oracle Identity Manager.<\/p>\n

    c.\u00a0<\/strong>Click\u00a0Advanced<\/strong>.<\/p>\n

    d.\u00a0<\/strong>Click the\u00a0System Management\u00a0<\/strong>tab.<\/p>\n

    e.\u00a0<\/strong>Click the arrow for the\u00a0Search Scheduled Jobs\u00a0<\/strong>to list all the schedulers.<\/p>\n

    f.\u00a0<\/strong>Select\u00a0LDAP User Create and Update Full Reconciliation<\/strong>.<\/p>\n

    g.\u00a0<\/strong>Click\u00a0Run Now\u00a0<\/strong>to run the job.<\/p>\n

    h.\u00a0<\/strong>Go to the Administration page and perform a search to verify that the user is visible in the Oracle Identity Manager console.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Now click on Administration<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Advanced Search\u00a0<\/strong>\u2013>\u00a0Roles
    \n<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Search for the Administrators role. Click the\u00a0Administrators\u00a0<\/strong>Role.<\/p>\n

    Click\u00a0Open<\/strong>.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click the\u00a0Members\u00a0<\/strong>tab. Click\u00a0Assign<\/strong>.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Type weblogic_idm in the Search box and Click\u00a0-><\/strong>.<\/p>\n

    Select\u00a0weblogic_idm\u00a0<\/strong>from the list of available users.<\/p>\n

    Click\u00a0>\u00a0<\/strong>to move to\u00a0Selected Users<\/strong>.<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    Click\u00a0Save<\/strong>.<\/p>\n

     <\/p>\n

    1. Log in to the weblogic console using at:<\/p>\n

    http:\/\/<hostname>:7777\/console<\/p>\n

    2. Click Lock and Edit.<\/p>\n

    3. Expand the Environment<\/strong> Node in the Domain Structure window.<\/p>\n

    4. Click Servers<\/strong> to open the Summary of Servers Page.<\/p>\n

    5. Click on a server<\/strong> to show the server properties page.<\/p>\n

    6. Click the Server Start tab.<\/strong><\/p>\n

    7. Add the following values to the Arguments field:<\/p>\n

    -Djps.subject.cache.key=5
    \n<\/strong><\/p>\n

    -Djps.subject.cache.ttl=600000.
    \n<\/strong><\/p>\n

    8. Click Save.<\/p>\n

    9. Repeat for each of the managed servers.
    \n<\/strong><\/p>\n

    10. Click Activate Changes.<\/strong><\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Restart Admin server and all managed servers<\/strong><\/li>\n<\/ol>\n

    Next:\u00a0<\/strong>Integrate Oracle Identity Manager (OIM) and Oracle Access Manager (OAM)<\/a><\/p>\n

    Installing Oracle Fusion Applications – steps<\/b><\/a><\/p>\n

      \n
    1. Install Fusion Applications Provisioning Framework<\/a><\/li>\n
    2. Install Oracle 11g Database (Applications Transactional Database)<\/a><\/li>\n
    3. Run Oracle Fusion Applications Repository Creation Utility (Applications RCU)<\/a><\/li>\n
    4. Create another database for Oracle Identity Management Infrastructure (optional)
      \n<\/strong><\/li>\n
    5. Run Repository Creation Utility (RCU) for Oracle Identity Management components<\/a>
      \n<\/strong><\/li>\n
    6. Install Oracle Identity and Access Management Components<\/a><\/li>\n
    7. Apply mandatory Patches<\/a><\/li>\n
    8. Configure Oracle Identity and Access Management components<\/a>
      \n<\/strong><\/li>\n
    9. Integrate Oracle Identity Manager (OIM) and Oracle Access Manager (OAM)<\/a><\/li>\n
    10. Install provisioning framework on Node 2<\/li>\n
    11. Create new Response File<\/a><\/li>\n
    12. Provision an Applications Environment<\/a>\u00a0(Editing in progress,\u00a0this link\u00a0currently\u00a0points to 11.1.5 counterpart)<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

      Previous: Apply mandatory Patches Configuring Oracle Identity Management components” can be divided into following tasks. Please note that we will not configure Oracle Virtual Directory, Oracle Identity Federation etc. Configure the Web Tier Create Weblogic Domain for Identity Management Extend the Domain to include Oracle Internet Directory Prepare Identity and Policy Stores Extend the Domain […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2524","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/posts\/2524","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/comments?post=2524"}],"version-history":[{"count":0,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/posts\/2524\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/media?parent=2524"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/categories?post=2524"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/tags?post=2524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}