{"id":628,"date":"2012-02-05T11:24:47","date_gmt":"2012-02-05T05:54:47","guid":{"rendered":"http:\/\/www.oratraining.com\/blog\/?p=628"},"modified":"2013-01-07T07:49:01","modified_gmt":"2013-01-07T07:49:01","slug":"preparing-identity-and-policy-stores","status":"publish","type":"post","link":"https:\/\/www.oratraining.com\/blog\/2012\/02\/preparing-identity-and-policy-stores\/","title":{"rendered":"Preparing Identity and Policy Stores"},"content":{"rendered":"

Oracle Fusion Applications Installation<\/span>: Preparing Identity and Policy Stores
\n<\/strong><\/span><\/p>\n

Previous:\u00a0Configuring Oracle Identity and Access Management components<\/a><\/strong><\/p>\n

Important Note: This is OLD guide for old version 11.1.1.5. Please follow instructions at\u00a0<\/span>http:\/\/www.oratraining.com\/blog\/2012\/12\/oracle-fusion-applications-installation-step-by-step-guide-11-1-5\/<\/a>\u00a0for latest guide for current version i.e. 11.1.5<\/span><\/h3>\n

 <\/p>\n

Now we will prepare the Identity and Policy stores which will create the necessary users, groups etc. This will also generate a file called idmDomainConfig.param which we need to specify while creating a provisioning plan. This will automatically populate some of the required fields during the provisioning plan creation.<\/p>\n

Important Note: Please make sure to run all these commands from same location since these commands will create\/append into a file named idmDomainConfig.param in same directory. Running these commands from same directory will ensure that all the contents is appended into single file.<\/p><\/blockquote>\n

Change the directory to <IAM_ORACLE_HOME>\/idmtools\/bin. <\/strong>And\u00a0export the required environment variables.<\/p>\n

[oracle@fusion bin]$ cd \/app\/fusion\/bea_default\/Oracle_IAM\/idmtools\/bin<\/span>
\n<\/strong><\/p>\n

[oracle@fusion bin]$ export IDM_HOME=\/app\/fusion\/bea_default\/Oracle_IDM1<\/strong><\/span><\/p>\n

[oracle@fusion bin]$ export ORACLE_HOME=\/app\/fusion\/bea_default\/Oracle_IAM<\/strong>
\n<\/span><\/p>\n

[oracle@fusion bin]$ export MW_HOME=\/app\/fusion\/bea_default<\/span>
\n<\/strong><\/p>\n

[oracle@fusion bin]$ export JAVA_HOME=\/app\/fusion\/jdk6<\/strong><\/span><\/p><\/blockquote>\n

Now create a file named policystore.props<\/strong> with following contents.<\/p>\n

[oracle@fusion bin]$ more policystore.props <\/strong><\/span><\/p>\n

POLICYSTORE_HOST : fusion<\/p>\n

POLICYSTORE_PORT : 3060<\/p>\n

POLICYSTORE_BINDDN: cn=orcladmin<\/p>\n

POLICYSTORE_READONLYUSER: PolicyROUser<\/p>\n

POLICYSTORE_READWRITEUSER: PolicyRWUser<\/p>\n

POLICYSTORE_SEARCHBASE: dc=localdomain<\/p>\n

POLICYSTORE_CONTAINER: cn=jpsroot<\/p><\/blockquote>\n

Now run idmConfigTool.sh<\/strong> to configure the Policy store based on the above input file. Enter a password of choice whenever prompted. We will stick to “oracle123” for now.<\/p>\n

[oracle@fusion bin]$ .\/idmConfigTool.sh -configPolicyStore input_file=policystore.props<\/strong><\/span><\/p>\n

Enter Policy Store Bind DN password :
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for PolicyROUser:
\n<\/strong><\/p>\n

Confirm User Password for PolicyROUser:
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for PolicyRWUser:
\n<\/strong><\/p>\n

Confirm User Password for PolicyRWUser:
\n<\/strong><\/p>\n

\u2026<\/p>\n

The tool has completed its operation. Details have been logged to automation.log<\/p><\/blockquote>\n

Whenever you run this tool, it will append log to automation.log in same directory. You can check the same as follows.<\/p>\n

[oracle@fusion bin]$ ls -ltr<\/strong><\/span><\/p>\n

total 60<\/p>\n

-rwxr-x— 1 oracle oinstall 1169 Dec 2 2010 appidtool.sh<\/p>\n

-rwxr-x— 1 oracle oinstall 1139 Dec 2 2010 appidtool.bat<\/p>\n

-rwxr-x— 1 oracle oinstall 1593 Mar 28 2011 orclTenantManager.sh<\/p>\n

-rwxr-x— 1 oracle oinstall 2287 May 2 2011 orclTenantManager.bat<\/p>\n

-rwxr-x— 1 oracle oinstall 3005 May 3 2011 idmConfigTool.sh<\/p>\n

-rwxr-x— 1 oracle oinstall 3096 May 3 2011 idmConfigTool.bat<\/p>\n

-rw-r–r– 1 oracle oinstall 235 Jan 25 21:21 policystore.props<\/p>\n

-rw-r—– 1 oracle oinstall 154 Jan 25 21:23 idmDomainConfig.param<\/strong><\/p>\n

-rw-r–r– 1 oracle oinstall 1497 Jan 25 21:23 automation.log<\/strong><\/p><\/blockquote>\n

As you can see it has created 2 files. idmDomainConfig.param<\/strong> and automation.log
\n<\/strong><\/p>\n

Next we need to re-associate the policy store. Follow the steps below for the same.<\/p>\n

[oracle@fusion bin]$ cd \/app\/fusion\/bea_default\/ocracle_common\/common\/bin\/<\/p>\n

[oracle@fusion bin]$ .\/wlst.sh<\/p>\n

\u2026<\/p>\n

Initializing WebLogic Scripting Tool (WLST) …<\/p>\n

Welcome to WebLogic Server Administration Scripting Shell<\/p>\n

Type help() for help on available commands<\/p><\/blockquote>\n

This will take you to a prompt which looks as follows. Enter following command to connect to the weblogic AdminServer.<\/p>\n

wls:\/offline><\/strong>
\nconnect(“weblogic”,’ “oracle123″,”t3:\/\/fusion:7001”)
\n<\/strong><\/span><\/p>\n

Connecting to t3:\/\/fusion:7001 with userid weblogic …<\/p>\n

Successfully connected to Admin Server ‘AdminServer’ that belongs to domain ‘IDM_domain’.<\/p>\n

Warning: An insecure protocol was used to connect to the server. To ensure on-the-wire security, the SSL port or Admin port should be used instead.<\/p><\/blockquote>\n

Once connected run the following reassociateSecurityStore <\/strong>command.\u00a0reassociateSecurityStore(domain=\u201dIDMDomain\u201d, admin=\u201dcn=orcladmin\u201d,password=\u201doracle123\u2033, ldapurl=\u201dldap:\/\/fusion:3060\u2033, servertype=\u201dOID\u201d,jpsroot=\u201dcn=jpsroot\u201d)<\/strong><\/span><\/p>\n

wls:\/IDM_domain\/serverConfig> reassociateSecurityStore(domain=”IDMDomain”,admin=”cn=orcladmin”,password=”oracle123″,ldapurl=”ldap:\/\/fusion:3060″,servertype=”OID”,jpsroot=”cn=jpsroot”)
\n<\/span><\/strong><\/p>\n

Location changed to domainRuntime tree. This is a read-only tree with DomainMBean as the root.<\/p>\n

For more help, use help(domainRuntime)<\/p>\n

Starting policy store reassociation.<\/p>\n

\u2026<\/p>\n

Jps Configuration has been changed. Please restart the application server.<\/p><\/blockquote>\n

Enter the command “exit()” to quit the tool now.<\/p>\n

wls:\/IDM_domain\/serverConfig> exit()<\/span><\/strong><\/p>\n

Exiting WebLogic Scripting Tool.<\/p><\/blockquote>\n

Now restart the Weblogic Server. We will use the shell scripts which we have created to start\/stop weblogic. You can do this manually as well.<\/p>\n

[oracle@fusion bin]$ ~\/scripts\/stopwls.sh<\/strong><\/span><\/p>\n

Stopping Weblogic Server<\/p>\n

\u2026<\/p>\n

Shutting down the server AdminServer with force=false while connected to AdminServer …<\/p>\n

..<\/p>\n

Stopping Derby Server…<\/p>\n

[oracle@fusion bin]$ ~\/scripts\/startwls.sh<\/strong><\/span><\/p>\n

Starting Weblogic Server<\/p><\/blockquote>\n

Again change the directory to <IAM_ORACLE_HOME>\/idmtools\/bin <\/strong>and\u00a0create a file named extend.props<\/strong> with following contents.<\/p>\n

[oracle@fusion bin]$ cd \/app\/fusion\/bea_default\/ocracle_common\/common\/bin\/<\/strong><\/span><\/p>\n

[oracle@fusion bin]$ more extend.props<\/strong><\/span><\/p>\n

IDSTORE_HOST : fusion<\/p>\n

IDSTORE_PORT : 3060<\/p>\n

IDSTORE_BINDDN : cn=orcladmin<\/p>\n

IDSTORE_USERNAMEATTRIBUTE: cn<\/p>\n

IDSTORE_LOGINATTRIBUTE: uid<\/p>\n

IDSTORE_USERSEARCHBASE: cn=Users,dc=localdomain<\/p>\n

IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=localdomain<\/p>\n

IDSTORE_SEARCHBASE: dc=localdomain<\/p>\n

IDSTORE_SYSTEMIDBASE: cn=systemids,dc=localdomain<\/p><\/blockquote>\n

Make sure that all required environment variables are already set. No need to set again if you are in the same terminal\/putty window.<\/p>\n

[oracle@fusion bin]$ echo $IDM_HOME<\/strong><\/p>\n

\/app\/fusion\/bea_default\/Oracle_IDM1<\/p>\n

[oracle@fusion bin]$ echo $ORACLE_HOME<\/strong><\/p>\n

\/app\/fusion\/bea_default\/Oracle_IAM<\/p><\/blockquote>\n

 <\/p>\n

Again run idmConfigTool.sh<\/strong> Enter a password of choice whenever prompted. We will stick to “oracle123” for now.<\/p>\n

[oracle@fusion bin]$ .\/idmConfigTool.sh -preConfigIDStore input_file=extend.props
\n<\/strong><\/span><\/p>\n

Enter ID Store Bind DN password :
\n<\/strong><\/span><\/p>\n

…<\/p>\n

The tool has completed its operation. Details have been logged to automation.log<\/p><\/blockquote>\n

Now create a file named oam.props<\/strong> with following contents.<\/p>\n

[oracle@fusion bin]$ more oam.props
\n<\/strong><\/span><\/p>\n

IDSTORE_HOST : fusion<\/p>\n

IDSTORE_PORT : 3060<\/p>\n

IDSTORE_BINDDN : cn=orcladmin<\/p>\n

IDSTORE_USERNAMEATTRIBUTE: cn<\/p>\n

IDSTORE_LOGINATTRIBUTE: uid<\/p>\n

IDSTORE_USERSEARCHBASE: cn=Users,dc=localdomain<\/p>\n

IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=localdomain<\/p>\n

IDSTORE_SEARCHBASE: dc=localdomain<\/p>\n

POLICYSTORE_SHARES_IDSTORE: true<\/p>\n

OAM11G_IDSTORE_ROLE_SECURITY_ADMIN:OAMAdministrators<\/p>\n

IDSTORE_OAMSOFTWAREUSER:oamLDAP<\/p>\n

IDSTORE_OAMADMINUSER:oamadmin<\/p><\/blockquote>\n

Again run idmConfigTool.sh<\/strong> Enter a password of choice whenever prompted. We will stick to “oracle123” for now.<\/p>\n

[oracle@fusion bin]$ .\/idmConfigTool.sh -prepareIDStore mode=OAM input_file=oam.props
\n<\/strong><\/span><\/p>\n

Enter ID Store Bind DN password :
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for oblixanonymous:
\n<\/strong><\/p>\n

Confirm User Password for oblixanonymous:
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for oamadmin:
\n<\/strong><\/p>\n

Confirm User Password for oamadmin:
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for oamLDAP:
\n<\/strong><\/p>\n

Confirm User Password for oamLDAP:
\n<\/strong><\/p>\n

\u2026<\/p>\n

The tool has completed its operation. Details have been logged to automation.log<\/p><\/blockquote>\n

Now create a file named oim.props<\/strong> with following contents.<\/p>\n

[oracle@fusion bin]$ more oim.props
\n<\/strong><\/span><\/p>\n

IDSTORE_HOST : fusion<\/p>\n

IDSTORE_PORT : 3060<\/p>\n

IDSTORE_BINDDN : cn=orcladmin<\/p>\n

IDSTORE_USERNAMEATTRIBUTE: cn<\/p>\n

IDSTORE_LOGINATTRIBUTE: uid<\/p>\n

IDSTORE_USERSEARCHBASE:cn=Users,dc=localdomain<\/p>\n

IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=localdomain<\/p>\n

IDSTORE_SEARCHBASE: dc=localdomain<\/p>\n

POLICYSTORE_SHARES_IDSTORE: true<\/p>\n

IDSTORE_SYSTEMIDBASE: cn=systemids,dc=localdomain<\/p>\n

IDSTORE_OIMADMINUSER: oimadmin<\/p>\n

IDSTORE_OIMADMINGROUP:OIMAdministrators<\/p><\/blockquote>\n

Again run idmConfigTool.sh<\/strong> Enter a password of choice whenever prompted. We will stick to “oracle123” for now.<\/p>\n

[oracle@fusion bin]$ .\/idmConfigTool.sh -prepareIDStore mode=OIM input_file=oim.props
\n<\/strong><\/span><\/p>\n

Enter ID Store Bind DN password :
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for oimadmin:
\n<\/strong><\/p>\n

Confirm User Password for oimadmin:
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for xelsysadm:
\n<\/strong><\/p>\n

Confirm User Password for xelsysadm:
\n<\/strong><\/p>\n

The tool has completed its operation. Details have been logged to automation.log<\/p><\/blockquote>\n

Now create a file named lwls.props<\/strong> with following contents.<\/p>\n

[oracle@fusion bin]$ more lwls.props
\n<\/strong><\/span><\/p>\n

IDSTORE_HOST: fusion<\/p>\n

IDSTORE_PORT: 3060<\/p>\n

IDSTORE_BINDDN: cn=orcladmin<\/p>\n

IDSTORE_USERNAMEATTRIBUTE: cn<\/p>\n

IDSTORE_LOGINATTRIBUTE: uid<\/p>\n

IDSTORE_USERSEARCHBASE: cn=Users, dc=localdomain<\/p>\n

IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=localdomain<\/p>\n

IDSTORE_SEARCHBASE: dc=localdomain<\/p>\n

POLICYSTORE_SHARES_IDSTORE: true<\/p><\/blockquote>\n

Again run idmConfigTool.sh<\/strong> Enter a password of choice whenever prompted. We will stick to “oracle123” for now.<\/p>\n

[oracle@fusion bin]$ .\/idmConfigTool.sh -prepareIDStore mode=WLS input_file=wls.props
\n<\/strong><\/span><\/p>\n

Enter ID Store Bind DN password :
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for weblogic_idm:
\n<\/strong><\/p>\n

Confirm User Password for weblogic_idm:
\n<\/strong><\/p>\n

\u2026<\/p>\n

The tool has completed its operation. Details have been logged to automation.log<\/p><\/blockquote>\n

Now create a file named fusion.props<\/strong> with following contents.<\/p>\n

[oracle@fusion bin]$ more fusion.props
\n<\/strong><\/span><\/p>\n

IDSTORE_HOST : fusion<\/p>\n

IDSTORE_PORT : 3060<\/p>\n

IDSTORE_BINDDN : cn=orcladmin<\/p>\n

IDSTORE_USERNAMEATTRIBUTE: cn<\/p>\n

IDSTORE_READONLYUSER: IDROUser<\/p>\n

IDSTORE_READWRITEUSER: IDRWUser<\/p>\n

IDSTORE_USERSEARCHBASE:cn=Users,dc=localdomain<\/p>\n

IDSTORE_SEARCHBASE: dc=localdomain<\/p>\n

IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=localdomain<\/p>\n

IDSTORE_SUPERUSER: weblogic_fa<\/p>\n

POLICYSTORE_SHARES_IDSTORE: true<\/p><\/blockquote>\n

Again run idmConfigTool.sh<\/strong> Enter a password of choice whenever prompted. We will stick to “oracle123” for now.<\/p>\n

[oracle@fusion bin]$ .\/idmConfigTool.sh -prepareIDStore mode=fusion input_file=fusion.props
\n<\/strong><\/span><\/p>\n

Enter ID Store Bind DN password :
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for IDROUser:
\n<\/strong><\/p>\n

Confirm User Password for IDROUser:
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for IDRWUser:
\n<\/strong><\/p>\n

Confirm User Password for IDRWUser:
\n<\/strong><\/p>\n

\u2026<\/p>\n

Enter User Password for weblogic_fa:
\n<\/strong><\/p>\n

Confirm User Password for weblogic_fa:
\n<\/strong><\/p>\n

\u2026<\/p>\n

The tool has completed its operation. Details have been logged to automation.log<\/p><\/blockquote>\n

This concludes the preparation of Identity and Policy stores for the Fusion Applications Installation.<\/strong><\/p>\n

Next:\u00a0Creating a New Provisioning Plan<\/a><\/strong><\/p>\n

Installing Oracle Fusion Applications – steps<\/a><\/strong><\/p>\n

    \n
  1. Installing Fusion Applications Provisioning Framework<\/a>
    \n<\/strong><\/li>\n
  2. Installing Oracle 11g Database (Applications Transactional Database)<\/a>
    \n<\/strong><\/li>\n
  3. Running Oracle Fusion Applications Repository Creation Utility (Applications RCU)
    \n<\/a><\/strong><\/li>\n
  4. Creating another database for Oracle \u00a0Identity Management Infrastructure\u00a0<\/strong>(optional)
    \n<\/strong><\/li>\n
  5. Running Repository Creation Utility (RCU) for Oracle Identity Management components<\/a><\/strong><\/li>\n
  6. Installing Oracle Identity and Access Management Components<\/a>
    \n<\/strong><\/li>\n
  7. Configuring Oracle Identity and Access Management components<\/a>
    \n<\/strong><\/li>\n
  8. Preparing Identity and Policy Stores<\/a>
    \n<\/strong><\/li>\n
  9. Creating a New Provisioning Plan<\/a>
    \n<\/strong><\/li>\n
  10. Provisioning an Applications Environment<\/a><\/strong><\/li>\n<\/ol>\n


    \n<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

    Oracle Fusion Applications Installation: Preparing Identity and Policy Stores Previous:\u00a0Configuring Oracle Identity and Access Management components Important Note: This is OLD guide for old version 11.1.1.5. Please follow instructions at\u00a0http:\/\/www.oratraining.com\/blog\/2012\/12\/oracle-fusion-applications-installation-step-by-step-guide-11-1-5\/\u00a0for latest guide for current version i.e. 11.1.5   Now we will prepare the Identity and Policy stores which will create the necessary users, groups etc. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-628","post","type-post","status-publish","format-standard","hentry","category-oracle"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/posts\/628","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/comments?post=628"}],"version-history":[{"count":0,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/posts\/628\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/media?parent=628"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/categories?post=628"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.oratraining.com\/blog\/wp-json\/wp\/v2\/tags?post=628"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}