Oracle Application Server B32100-01 Installation Manual

10g (10.1.4.0.1) for hp-ux itanium

Table of Contents

Quick Links

Download this manual

Oracle® Application Server

Installation Guide

10g (10.1.4.0.1) for HP-UX Itanium

B32100-01

September 2006

Table of Contents

Troubleshooting

Need help?

Do you have a question about the Application Server B32100-01 and is the answer not in the manual?

Questions and answers

Summary of Contents for Oracle Application Server B32100-01

Page 1 Oracle® Application Server Installation Guide 10g (10.1.4.0.1) for HP-UX Itanium B32100-01 September 2006...
Page 2 Oracle Application Server Installation Guide 10g (10.1.4.0.1) for HP-UX Itanium B32100-01 Copyright © 2006, Oracle. All rights reserved. Primary Authors: Brintha Bennet, Megan Ginter Contributors: Rupesh Das, Nagesh Jayaram, Suresh Kesavan, Arun Kuzhimattathil, Sonal Pandey, Divya Shankar, Janelle Simmons, Shashidhara Varamballi The Programs (which include both the software and documentation) contain proprietary information;...
Page 3: Table Of Contents
Contents Preface ................................xiii Intended Audience............................ xiii Documentation Accessibility ........................xiii Related Documents ........................... xiv Conventions ............................... xiv Product and Installation Overview Product Overview........................1-1 Where Do I Find Installation Instructions for My Product?..........1-2 Recommended Topologies ......................1-3 Installing Oracle Identity Management in a Single Oracle Home........ 1-4 1.3.1 1.3.2 Installing a Distributed Oracle Identity Management with an Integrated Oracle HTTP...
Page 4 Operating System Groups ...................... 2-16 Create a Group for the Inventory Directory ..............2-16 2.6.1 2.6.2 Create Groups for Database Administrators ..............2-16 Operating System User ......................2-17 Environment Variables ......................2-18 Environment Variable Tips ..................... 2-18 2.8.1 2.8.2 ORACLE_HOME and ORACLE_SID ................2-19 2.8.3 PATH, CLASSPATH, and LD_LIBRARY_PATH ............
Page 5 3.15 Starting the Oracle Universal Installer..................3-8 Installing OracleAS Infrastructure Infrastructure Installation Types ....................4-1 Why Would I Select the Different Infrastructure Installation Types?......... 4-2 Order of Installation for the Infrastructure ................4-3 Can I Install Components on Separate Computers?.............. 4-4 Tips for Installing Oracle Identity Management Components Separately......
Page 6 5.4.1 Groups Required to Install Against the Desired Metadata Repository....... 5-7 Groups Required to Install Middle-tier Components ............ 5-7 5.4.2 5.4.3 Example..........................5-7 Groups Required to Install Additional Metadata Repositories ........... 5-8 Example of Installation with Different Users ................. 5-8 How to Create Users in Oracle Internet Directory..............
Page 7 Pre-Installation Steps for OracleAS Cold Failover Cluster ........... 8-2 Map the Virtual Hostname and Virtual IP Address............8-2 8.2.1 8.2.2 Set Up a File System That Can Be Mounted from Both Nodes........8-4 8.2.3 Review Recommendations for Automatic Storage Management (ASM)....8-5 8.2.4 Check That Clusterware Is Running (Automated Failovers only) .......
Page 8 Installing in High Availability Environments: OracleAS Cluster (Identity Management) OracleAS Cluster (Identity Management): Introduction ............9-1 Pre-Installation Steps for OracleAS Cluster (Identity Management) ........9-2 9.2.1 Use the Same Path for the Oracle Home Directory (recommended) ......9-2 9.2.2 Synchronize Clocks on All Nodes ..................9-3 9.2.3 Configure Virtual Server Names and Ports for the Load Balancer ......
Page 9 Installing Middle Tiers Against OracleAS Cluster (Identity Management) Configurations............................9-26 Installing in High Availability Environments: OracleAS Disaster Recovery 10.1 OracleAS Disaster Recovery: Introduction ................10-1 Setting up the OracleAS Disaster Recovery Environment..........10-3 10.2 10.2.1 Ensure Nodes Are Identical at the Operating System Level........10-3 10.2.2 Set Up staticports.ini File....................
Page 10 B.5.2 Creating Response Files by Using the Record Mode in the Installer ......B-3 Variables to Modify in the Response Files ..............B-3 B.5.3 B.5.4 Example Response Files..................... B-4 B.5.4.1 Example Response File for OracleAS Infrastructure: Oracle Identity Management Only ........................B-4 B.5.4.2 Example Response File for OracleAS Infrastructure: OracleAS Metadata Repository Only ....................B-6...
Page 11 Installation Problems and Solutions ..................F-2 Location of Log Files ......................F-2 F.3.1 F.3.2 Linking Failed, ORA Errors ....................F-3 F.3.3 Prerequisite Checks Fail at the Start of Installation ............F-3 F.3.4 Message About Installing in a Non-Empty Directory........... F-3 Messages About SHMMAX and SEMMSL..............
Page 13: Preface
Preface The Oracle Application Server Installation Guide covers requirements, new features in the Oracle Universal Installer, Oracle Application Server concepts that affect installation, installation procedures, and troubleshooting tips. In addition, this guide also provides some sample topologies for installing and running Oracle Application Server. Intended Audience This guide is intended for users who are comfortable running some system administration operations, such as creating users and groups, adding users to groups,...
Page 14: Related Documents
TTY Access to Oracle Support Services Oracle provides dedicated Text Telephone (TTY) access to Oracle Support Services within the United States of America 24 hours a day, seven days a week. For TTY support, call 800.446.2398. Related Documents For additional information, see the following manuals: Oracle Application Server Administrator’s Guide ■...
Page 15: Product And Installation Overview
Product and Installation Overview This chapter describes what is contained in Oracle Application Server and recommended topologies. It contains the following sections: Section 1.1, "Product Overview" ■ Section 1.2, "Where Do I Find Installation Instructions for My Product?" ■ Section 1.3, "Recommended Topologies" ■...
Page 16: Where Do I Find Installation Instructions For My Product
Where Do I Find Installation Instructions for My Product? Oracle Directory Integration Platform: A component of Oracle Internet Directory ■ designed to perform directory synchronization with third party directory products. Oracle Application Server Certificate Authority: A component that issues, revokes, ■...
Page 17: Recommended Topologies
Recommended Topologies 1.3 Recommended Topologies Table 1–2 provides a road map of where to find information about the supported 10g (10.1.4.0.1) topologies. Table 1–2 Recommended Topologies Topology See This Documentation for Details 10.1.4.0.1 OracleAS Infrastructure Topologies An Oracle Application Server instance containing Section 1.3.1, "Installing Oracle Identity Management in a all Oracle Identity Management components in Single Oracle Home"...
Page 18: Installing Oracle Identity Management In A Single Oracle Home
Recommended Topologies Table 1–2 (Cont.) Recommended Topologies Topology See This Documentation for Details An OracleAS Disaster Recovery configuration in Chapter 10, "Installing in High Availability Environments: which a standby site mirrors a production site. OracleAS Disaster Recovery" During normal operation, the production site handles all the requests.
Page 19: Installing A Distributed Oracle Identity Management With An Integrated Oracle Http Server
Recommended Topologies Figure 1–1 Oracle Identity Management in a Single Oracle Home Oracle Home 1 Oracle HTTP Server OC4J SSO / DAS Application Server Control OID / DIP OracleAS Metadata Repository Requirements The requirements are the same as those listed in Chapter 2, "Requirements".
Page 20 Recommended Topologies Figure 1–2 Cluster with a Distributed Oracle Identity Management with an Integrated Oracle HTTP Server Oracle Home 1 Oracle Home 2 Oracle HTTP Server OID / DIP OC4J SSO / DAS Application Server Control Host 1 OracleAS Metadata Repository Requirements The requirements are the same as those listed in...
Page 21: Installing A Distributed Oracle Identity Management With A Standalone Oracle Http Server
Recommended Topologies Select High Availability and Replication. ■ On Oracle Home 2, perform the following commands to disable Oracle HTTP Server: Edit the ORACLE_HOME/opmn/bin/opmn.xml file to change the Oracle HTTP Server status to disabled, as shown in bold. <ias-component id="HTTP_Server" status="disabled" > <process-type id="HTTP_Server"...
Page 22 Recommended Topologies Requirements The requirements are the same as those listed in Chapter 2, "Requirements". Installation Sequence To install this topology: Install OracleAS Metadata Repository on a shared disk. It is recommended that you install OracleAS Metadata Repository in an existing database. See Oracle Application Server Metadata Repository Creation Assistant User’s Guide for details.
Page 23 Recommended Topologies Configure the standalone Oracle HTTP Server in Oracle Home 1. See "Configuring Standalone Oracle HTTP Server with Oracle Application Server" in Oracle HTTP Server Administering a Standalone Deployment Based on Apache 2.0 in the 10g Release 2 (10.1.2) or 10g Release 3 (10.1.3) documentation library. Product and Installation Overview 1-9...
Page 24 Recommended Topologies 1-10 Oracle Application Server Installation Guide...
Page 25: Using Oraclemetalink To Obtain The Latest Oracle Application Server Hardware And Software Requirements
Requirements Before installing Oracle Application Server, ensure that your computer meets the requirements described in this chapter. Table 2–1 Sections in This Chapter Section Highlights Section 2.1, "Using OracleMetaLink to Obtain Describes how to find the most current requirements for Oracle the Latest Oracle Application Server Application Server 10g (10.1.4.0.1).
Page 26: System Requirements
System Requirements manufacturing. For the most up-to-date information about hardware and software requirements, refer to OracleMetaLink: http://metalink.oracle.com/ After logging into OracleMetaLink, click Certify. From the resulting Web page, you can view the latest certifications by product, platform, and product availability. 2.2 System Requirements Table 2–2 lists the system requirements for running Oracle Application Server.
Page 27 System Requirements Table 2–2 (Cont.) System Requirements Item Requirement Processor type 64-bit HP-UX Itanium processor To determine the processor type, run the following command: prompt> /usr/bin/getconf KERNEL_BITS Checked by Installer: No Processor speed 400 MHz or faster Checked by Installer: Yes Memory The memory requirements provided for the various installation types represents enough Oracle Application Server...
Page 28 System Requirements Table 2–2 (Cont.) System Requirements Item Requirement Disk space OracleAS Infrastructure: OracleAS Metadata Repository and Oracle Identity Management: 6.5 GB ■ You can install the data files for the OracleAS Metadata Repository database on a disk that is different from the disk where you are installing OracleAS Infrastructure. If you do this, make sure the disk for the Oracle Home has at least 3.5 GB of free space and the disk for the data files has at least 3.0 GB of free space.
Page 29: Installing From The Console Or X Windows
Software Requirements 2.2.1 Installing from the Console or X Windows If you are performing the installation from the console or X Windows, then add the following line to the /etc/pam.d/xdm file: session required pam_limits.so 2.2.2 Tips for Reducing Memory Usage If you need to reduce memory consumption: Configure only the components that you need.
Page 30 Software Requirements Table 2–3 (Cont.) Software Requirements for HP-UX 11i version 2 Itanium Systems Item Requirement Patches for 11.11 BUNDLE11i B.11.23.0409.3 (Patch Bundle for HP-UX 11i v2 (B.11.23), ■ (or higher September 2004) versions) PHSS_31850 (11.23 assembler patch) ■ PHSS_31851 (11.23 Integrity Unwind Library) ■...
Page 31: Kernel Parameters
Kernel Parameters # /usr/sbin/swlist -l patch | more If a required patch is not installed, download it from the following URL and install http://itresourcecenter.hp.com 2.4 Kernel Parameters The computers on which you plan to install OracleAS Metadata Repository require their kernel parameters to be set to the minimum values listed in the following sections: Section 2.4.1, "Kernel Parameter Settings for OracleAS Metadata Repository"...
Page 32: Ports
Ports Parameter Recommended Formula or Value shmmax The size of physical memory or 0X40000000 (1073741824), whichever is greater. Note: To avoid performance degradation, the value should be greater than or equal to the size of the SGA. shmmni shmseg tcp_conn_request_max 2048 vps_ceiling To view the current value specified for these kernel parameters, and to change them if...
Page 33: Checking If A Port Is In Use
Ports Why the Default Port for Oracle HTTP Server Is Port 7777 and Not Port 80 By default, the installer configures Oracle HTTP Server to use port 7777, not port 80. Port 7777 is the default port because on UNIX, components that use port numbers lower than 1024 require additional steps to be done as the root user before the components can run.
Page 34: Using Custom Port Numbers (The "Static Ports" Feature)
Ports Note: In the default configuration of the /etc/services file ■ includes ports 389 and 636 (for LDAP and LDAP/SSL). These happen to be the default ports for Oracle Internet Directory. This means that if you want to use these port numbers for Oracle Internet Directory, you must either delete or comment out these lines in the /etc/services file.
Page 35 Ports Oracle HTTP Server port = port_num Oracle HTTP Server Listen port = port_num Oracle HTTP Server SSL port = port_num Oracle HTTP Server Listen (SSL) port = port_num Oracle HTTP Server Diagnostic port = port_num Java Object Cache port = port_num DCM Discovery port = port_num Oracle Notification Server Request port = port_num Oracle Notification Server Local port = port_num...
Page 36: Error Conditions That Will Cause The Installer To Use Default Ports Instead Of Specified Ports
Ports Notes on Choosing Port Numbers: Port numbers cannot be greater than 65535. ■ If you use a port number less than 1024 for a component, you ■ must run the component as the root user. If you use a port number less than 1024 for a component, the ■...
Page 37: Example
Ports If you specify the same port for one component on multiple lines, the installer ■ assigns the default port for the component. The installer does not warn you if you have specified the same port on multiple lines. If you have syntax errors in the staticports.ini file (for example, if you ■...
Page 38 Ports You might be able to use the same listener for both the existing database and the OracleAS Metadata Repository database. You have to consider the version of the existing listener as well as the port number. Table 2–5 shows scenarios and outcomes. You can change the OracleAS Metadata Repository listener to use a different port after installation.
Page 39: If Port 1521 Is In Use By Some Other Application
Ports prompt> $ORACLE_HOME/bin/lsnrctl stop ORACLE_HOME is the home directory for your existing database. If you do not stop the existing listener, the installation will fail. Install the OracleAS Metadata Repository. See any of the procedures that install an OracleAS Metadata Repository in Chapter 4, "Installing OracleAS Infrastructure"...
Page 40: Operating System Groups
Operating System Groups OracleAS Metadata Repository. After installation, you can reconfigure the OracleAS Metadata Repository to use a port other than 1521. See the Oracle Application Server Administrator’s Guide for instructions on how to do this. 2.6 Operating System Groups You need to create operating system groups in these situations: If you plan to install Oracle Application Server on a computer that does not have ■...
Page 41: Operating System User
Operating System User Table 2–6 Privileges for the OSDBA and OSOPER Groups Group Description OSDBA This is the database administrator group. Users in this group are granted SYSDBA privileges. OSOPER Users in this group are granted SYSOPER privileges, which comprise privileges required for basic maintenance.
Page 42: Environment Variables
Environment Variables Table 2–7 (Cont.) Properties of the Operating System User Who Runs the Installer Item Description Login shell The default login shell can be the C, Bourne, or Korn shell. Use the oracle user only for installing and running Oracle Note: products.
Page 43: Oracle_Home And Oracle_Sid
Environment Variables If you set environment variables in the .profile file, they might not be read. To ■ ensure environment variables are set to the correct values, check their values in the shell where you will be running the installer. To check the value of environment variables, use the env command.
Page 44: Tmp And Tmpdir
Environment Variables 2.8.5 TMP and TMPDIR The installer uses a temporary directory for swap space. The installer checks for the TMP and TMPDIR environment variables to locate the temporary directory. If this environment variable does not exist, the installer uses the /tmp directory. If you want the installer to use a temporary directory other than /tmp, set the TMP and TMPDIR environment variables to the full path of an alternate directory.
Page 45: The /Etc/Hosts File
The /etc/hosts File 2.9 The /etc/hosts File Although the contents of the /etc/hosts file affect these items: Section 2.9.1, "Location of the Default Oracle Identity Management Realm" ■ Section 2.9.2, "Hostname for OracleAS Single Sign-On" ■ the installer provides alternative methods for you to enter the values that you want without editing the hosts file.
Page 46: Network Topics
Network Topics 2.10 Network Topics Typically, the computer on which you want to install Oracle Application Server is connected to the network, has local storage to contain the Oracle Application Server installation, has a display monitor, and has a CD-ROM or DVD-ROM drive. This section describes how to install Oracle Application Server on computers that do not meet the typical scenario.
Page 47: Installing From A Remote Cd-Rom Or Dvd-Rom Drive
Network Topics This space is in addition to the space required for installing Oracle Application Server (listed in Table 2–2). To Copy the CD-ROMs: Create a directory structure on your hard drive as shown in Figure 2–1. You need to create a parent directory (called OracleAS_10g in the example, but you can name it anything you like), and, under the parent directory, create subdirectories called Disk1, Disk2, and so on.
Page 48: Installing On Remote Computers
Network Topics Allow remote_computer to display on local_computer. You need to run this command on the local computer’s console. local_computer> xhost +remote_computer If you do not run xhost, you might get an Xlib error similar to "Failed to connect to server", "Connection refused by server," or "Can’t open display" when starting the installer.
Page 49: Installing On Nfs-Mounted Storage
Network Topics Set the DISPLAY environment variable on remote_computer to point to local_ computer. Example (C shell): remote_computer> setenv DISPLAY local_computer.mydomain.com:0.0 Example (Bourne or Korn shell): remote_computer> DISPLAY=local_computer.mydomain.com:0.0; export DISPLAY Run the installer. See Section 3.15, "Starting the Oracle Universal Installer".
Page 50: Support For Nis And Nis
Prerequisite Checks Performed by the Installer 2.10.7 Support for NIS and NIS+ You can install and run Oracle Application Server in NIS and NIS+ environments. 2.11 Prerequisite Checks Performed by the Installer Table 2–9 lists the checks performed by the installer: Table 2–9 Prerequisite Checks Performed by the Installer Item...
Page 51 Prerequisite Checks Performed by the Installer Table 2–9 (Cont.) Prerequisite Checks Performed by the Installer Item Description Oracle home directory You should install Oracle Application Server in a new directory. Here are some examples of installations that are not allowed: Any type of Oracle Application Server into an 8.0, 8i, 9.0.1, or 9.2 database ■...
Page 52 Prerequisite Checks Performed by the Installer Table 2–9 (Cont.) Prerequisite Checks Performed by the Installer Item Description TNS_ADMIN environment The TNS_ADMIN environment variable must not be set. variable There must not be a tnsnames.ora file in the /etc or /var/opt/oracle directories.
Page 53: Things You Should Know Before Starting The Installation
Things You Should Know Before Starting the Installation This chapter contains the following topics: Section 3.1, "Oracle Home Directory" ■ Section 3.2, "Can I Use Symbolic Links?" ■ Section 3.3, "First-Time Installation of Any Oracle Product" ■ Section 3.4, "Installing Additional Languages" ■...
Page 54: Installing In An Existing Oracle Home
Can I Use Symbolic Links? Spaces are not allowed anywhere in the Oracle home Notes: directory path. For example, you cannot install in "/opt/oracle/app server/Infra" because of the space character in "app server". The installer does not check for this until several screens after you have entered the path.
Page 55: Installing Additional Languages
Oracle Application Server Instances and Instance Names To ensure other users in the oinstall group have access to the inventory directory (so that they can install Oracle products), do not use the oracle user’s home directory as the inventory directory because home directories might not have the proper permissions set up for the oinstall group.
Page 56: The Ias_Admin User And Restrictions On Its Password
The ias_admin User and Restrictions on its Password Valid Characters in Instance Names Instance names can consist only of the alphanumeric characters (A-Z, a-z, 0-9) and the _ (underscore) character. The maximum length for an instance name is 64 characters. Restrictions on Oracle Application Server Instance Names Do not use the hostname of the computer when naming Oracle Application Server instances.
Page 57: Comparing Installing Components Against Configuring Components
Where Does the Installer Write Files? If you are using any other version of Oracle Internet Directory (for example, you ■ are using an existing Oracle Internet Directory), your Oracle Internet Directory administrator might have defined a different password policy. The password you enter for the ias_admin user must conform to the existing Oracle Internet Directory’s password policy.
Page 58: Why Do I Need To Be Able To Log In As Root At Certain Times During Installation
Why Do I Need to be Able to Log In as Root at Certain Times During Installation? Table 3–1 (Cont.) Directories Where the Installer Writes Files Directory Description Inventory directory When you install the first Oracle product on a computer, you specify this directory, which the installer uses to keep track of which Oracle products are installed on the computer.
Page 59: Connecting To Oracle Internet Directory Through Ssl Connections
Obtaining Software from Oracle E-Delivery 3.12 Connecting to Oracle Internet Directory Through SSL Connections When you install OracleAS Infrastructure or middle tiers, you can specify that Oracle Application Server components connect to Oracle Internet Directory only through SSL connections. On screens where you specify the hostname and port for Oracle Internet Directory, you can select the Use Only SSL Connections With This Oracle Internet Directory option.
Page 60: Extracting Software From The Zip Files
Setting the Mount Point for the CD-ROM or DVD 3.13.5 Extracting Software from the Zip Files Verify that the file size of your downloaded file matches the file size displayed on E-Delivery. Unzip each Zip file to its own temporary directory. For example, create a directory structure called oraAS10g on your hard drive: c:\oraAS10g Then create a new directory for each Zip file you downloaded:...
Page 61 Starting the Oracle Universal Installer CD-ROM users: Insert Oracle Application Server Disk 1 into the CD-ROM drive. DVD-ROM users: Insert the Oracle Application Server DVD-ROM into the DVD-ROM drive. Run the Oracle Universal Installer using the command shown after the notes: Notes: Be sure you are not logged in as the root user when you start ■...
Page 62 Starting the Oracle Universal Installer 3-10 Oracle Application Server Installation Guide...
Page 63: Installing Oracleas Infrastructure
Installing OracleAS Infrastructure This chapter contains the following sections: Table 4–1 Contents of This Chapter Topics Procedures Section 4.1, "Infrastructure Installation Types" Section 4.20, "Installing OracleAS Infrastructure" ■ ■ Section 4.2, "Why Would I Select the Different Infrastructure Section 4.21, "Installing OracleAS Infrastructure ■...
Page 64: Why Would I Select The Different Infrastructure Installation Types
Why Would I Select the Different Infrastructure Installation Types? Table 4–2 OracleAS Infrastructure Components Infrastructure Components Description Oracle Identity These components provide directory, security, and user Management components management functionality. Some of these components have schemas in the OracleAS Metadata Repository. Oracle Internet Directory ■...
Page 65: Order Of Installation For The Infrastructure
Order of Installation for the Infrastructure 4.3 Order of Installation for the Infrastructure If you plan to install both OracleAS Metadata Repository and Oracle Identity Management components on the same computer, select the "Oracle Identity Management and OracleAS Metadata Repository" option. The installer installs the components in the proper order.
Page 66: Can I Install Components On Separate Computers
Can I Install Components on Separate Computers? 4.4 Can I Install Components on Separate Computers? You already know that you can install Oracle Application Server instances on separate computers. In addition, you can also distribute components over multiple computers. This is especially useful for infrastructure components. You might want to do this to improve performance, security, scalability, and availability of infrastructure services.
Page 67: Tips For Installing Oracle Identity Management Components Separately
Tips for Installing Oracle Identity Management Components Separately Table 4–3 (Cont.) OracleAS Infrastructure Configurations Configuration Description / How to Install In this configuration, the OracleAS Metadata Repository runs on one computer, Oracle Internet Directory runs on a second OracleAS Metadata Repository computer, and the remaining Oracle Identity Management components run on a third computer.
Page 68: Do I Need The Oracle Delegated Administration Services Or The Oracle Directory Integration Platform Components
Do I Need the Oracle Delegated Administration Services or the Oracle Directory Integration Platform Components? Integration Platform against the same OracleAS Metadata Repository. If you want to configure more than one Oracle Internet Directory against the same OracleAS Metadata Repository, see the Oracle Internet Directory Administrator’s Guide. You must select at least one component to configure.
Page 69: Can I Use An Existing Oracle Internet Directory
Registration of OracleAS Metadata Repository in Oracle Internet Directory and Password Randomization 4.9 Can I Use an Existing Oracle Internet Directory? You can use an existing Oracle Internet Directory instead of having the installer create a new one. You might want to do this if your applications need to authenticate users that are already stored in your Oracle Internet Directory.
Page 70: Contents Of The Oracleas Metadata Repository
Contents of the OracleAS Metadata Repository Table 4–4 (Cont.) Database Registration Scenarios Scenario Registration Schema Passwords Install an Oracle Internet Directory against an existing Automatic Randomized (the metadata OracleAS Metadata Repository repository schemas are given new randomized passwords) Section 4.25, "Installing Oracle Internet Directory Only".
Page 71: Can I Use Multiple Metadata Repositories
Can I Use Multiple Metadata Repositories? If you are interested in seeing the names of all the schemas, see the Oracle Application Server Metadata Repository Creation Assistant User’s Guide. 4.12 Can I Use Multiple Metadata Repositories? You can install multiple metadata repositories to increase performance. This enables different components in your topology to use different metadata repositories.
Page 72: What High Availability Options Does Oracle Application Server Support
What High Availability Options Does Oracle Application Server Support? Figure 4–1 Multiple Metadata Repositories in Use Computer 1 OracleAS Infrastructure Both metadata repositories are Oracle Computer 3 OracleAS registered in the Internet Directory. Internet Single Directory Sign-On Identity Management Portal Product Metadata Wireless Metadata...
Page 73: Support For Ne8Iso8859P10 And Cel8Iso8859P14 Characters Sets
How to Determine Port Numbers Used by Components users, which are privileged users for the database. The passwords for these users have the following restrictions: Passwords must be shorter than 30 characters. ■ Passwords can contain only alphanumeric characters from your database character ■...
Page 74: Can I Add Oca After Installation
Can I Add OCA After Installation? Click the Ports link on the Enterprise Manager home page. This takes you to a page that lists all ports in use and the suggested port ranges for different components. Look in the ORACLE_HOME/install/portlist.ini file. ORACLE_HOME refers ■...
Page 75 Installing OracleAS Infrastructure Table 4–5 Steps for Installing OracleAS Infrastructure Screen Action Start up the installer and complete the first few screens. See Section 4.27, "Install Fragment: The First Few Screens of the Installation" for details. Notes: In the Select Installation Type screen, select Identity Management and ■...
Page 76: Installing Oracleas Infrastructure Against An Existing Oracle Internet Directory
Installing OracleAS Infrastructure Against an Existing Oracle Internet Directory 4.21 Installing OracleAS Infrastructure Against an Existing Oracle Internet Directory Perform this procedure to install Oracle Identity Management components (except Oracle Internet Directory) and the OracleAS Metadata Repository. Prerequisite: Oracle Internet Directory version 9.0.4 or later You would perform this procedure in cases where you already have an Oracle Internet Directory (and its associated OracleAS Metadata Repository), and you want to: Install OCA with its own OracleAS Metadata Repository, or...
Page 77: Installing Oracleas Metadata Repository In A New Database
Installing OracleAS Metadata Repository in a New Database Table 4–6 (Cont.) Steps for Installing OracleAS Infrastructure Against an Existing Oracle Internet Directory Screen Action Specify Oracle Internet Username: Enter the username to log in to Oracle Internet Directory. You must log Directory Login in as a user who belongs to the necessary groups in Oracle Internet Directory.
Page 78: Installing Oracle Identity Management Components Only (Including Oracle Internet Directory)
Installing Oracle Identity Management Components Only (Including Oracle Internet Directory) Table 4–7 Steps for Installing OracleAS Metadata Repository in a New Database Screen Action Start up the installer and complete the first few screens. See Section 4.27, "Install Fragment: The First Few Screens of the Installation" for details.
Page 79 Installing Oracle Identity Management Components Only (Including Oracle Internet Directory) Follow this procedure to configure Oracle Internet Directory against a remote OracleAS Metadata Repository. You have installed the OracleAS Metadata Repository in an existing database (see the Oracle Application Server Metadata Repository Creation Assistant User’s Guide) or in a new database (Section 4.22, "Installing OracleAS Metadata Repository in a New...
Page 80: Installing Oracle Identity Management Components Only (Excluding Oracle Internet Directory)
Installing Oracle Identity Management Components Only (Excluding Oracle Internet Directory) Table 4–8 (Cont.) Steps for Installing Oracle Identity Management Components Only (Including Oracle Internet Directory) Screen Action Enter information to Provide the information as prompted by the OCA screens. See Section 4.30, "Install configure OCA Fragment: OCA Screens"...
Page 81 Installing Oracle Identity Management Components Only (Excluding Oracle Internet Directory) Table 4–9 Steps for Installing Oracle Identity Management Components Only (Excluding Oracle Internet Directory) Screen Action Start up the installer and complete the first few screens. See Section 4.27, "Install Fragment: The First Few Screens of the Installation"...
Page 82: Installing Oracle Internet Directory Only
Installing Oracle Internet Directory Only Table 4–9 (Cont.) Steps for Installing Oracle Identity Management Components Only (Excluding Oracle Internet Directory) Screen Action Enter information to Provide the information as prompted by the OCA screens. See Section 4.30, "Install configure OCA Fragment: OCA Screens"...
Page 83: Installing Oca And Oracleas Metadata Repository Only
Installing OCA and OracleAS Metadata Repository Only Table 4–10 (Cont.) Steps for Installing Oracle Internet Directory Screen Action Specify Repository Username: Enter the username to use to log in to the OracleAS Metadata Repository database. The user must have DBA privileges. Password: Enter the user’s password.
Page 84 Installing OCA and OracleAS Metadata Repository Only Table 4–11 Steps for Installing OCA and OracleAS Metadata Repository Screen Action Start up the installer and complete the first few screens. See Section 4.27, "Install Fragment: The First Few Screens of the Installation" for details.
Page 85: Install Fragment: The First Few Screens Of The Installation
Install Fragment: The First Few Screens of the Installation 4.27 Install Fragment: The First Few Screens of the Installation The first few screens of the installer are described here because they are the same for all installations. Most installation procedures in this chapter refer to this section as their starting point.
Page 86 Install Fragment: The First Few Screens of the Installation Table 4–12 (Cont.) First Few Screens of the Installation Screen Action Select Installation Type The options displayed on this screen depend on what you selected in the Select a Product to Install screen. The installation types for OracleAS Infrastructure are: Identity Management and Metadata Repository ■...
Page 87: Install Fragment: The Last Few Screens Of The Installation
Install Fragment: The Last Few Screens of the Installation Figure 4–2 Sequence for the First Few Screens in the Installation Welcome If this is the first Oracle product to be installed on Specify Inventory Directory and Credentials this computer Run orainstRoot.sh (located in the inventory directory) Specify File Locations If the computer is part of hardware cluster...
Page 88: Install Fragment: Database Screens
Install Fragment: Database Screens 4.29 Install Fragment: Database Screens If you are installing a new database for the OracleAS Metadata Repository, the installer displays the following screens: Table 4–14 Database Screens Screen Action Specify Database Global Database Name: Enter a name for the OracleAS Metadata Repository Configuration Options database.
Page 89: Install Fragment: Oca Screens
Install Fragment: OCA Screens 4.30 Install Fragment: OCA Screens If you select Oracle Application Server Certificate Authority (OCA) in the Select Configuration Options screen when you are installing an OracleAS Infrastructure, the installer displays the screens listed in Table 4–15. Note that you cannot install more than one OCA against the same OracleAS Metadata Repository.
Page 90 Install Fragment: OCA Screens Table 4–15 (Cont.) OCA Screens Screen Action Specify OCA Administrator’s Password and Confirm Password: Specify and confirm the Administrator’s password for the OCA administrator. The password has the following restrictions: Password It must contain at least eight characters. ■...
Page 91: Configuring Oracle Internet Directory For Oracle Application Server Installation Privileges
Configuring Oracle Internet Directory for Oracle Application Server Installation Privileges When you install certain infrastructure components, the installer prompts you for a username to log in to Oracle Internet Directory. For the installation to complete successfully, this user must belong to certain groups in Oracle Internet Directory. The groups that are required depend on what you are installing.
Page 92: Groups In Oracle Internet Directory
Groups in Oracle Internet Directory Repository, and Oracle Delegated Administration Services, the cn=orcladmin user is created and becomes a member of the Repository Owners group and the DAS Component Owners group. cn=orcladmin also becomes a member of the iAS Admins group. Note that you cannot log in to Oracle Internet Directory as the superuser (cn=orcladmin) using Oracle Delegated Administration Services.
Page 93: Groups For Each Metadata Repository
Groups in Oracle Internet Directory 5.2.2 Groups for Each Metadata Repository Each metadata repository registered with Oracle Internet Directory has its own groups, as described in Table 5–2. This enables you to assign different owners and users for each repository. Table 5–2 Groups Associated with Each Metadata Repository Registered with Oracle Internet Directory Group...
Page 94: Groups Required To Configure Or Deinstall Components
Groups Required to Configure or Deinstall Components Figure 5–6 shows these groups for the Oracle Delegated Administration Services component. 5.3 Groups Required to Configure or Deinstall Components Table 5–4 shows the groups that a user needs to belong to in order to configure or deinstall Oracle Application Server components.
Page 95 Groups Required to Configure or Deinstall Components Oracle Internet Directory Table 5–4 (Cont.) Groups Required to Configure Components To Configure This Component User Must Be a Member of ALL Listed Groups: Trusted Application Admins , configured against an existing ■ OracleAS Metadata Repository iAS Admins ■...
Page 96 Groups Required to Configure or Deinstall Components Oracle Internet Directory Table 5–4 (Cont.) Groups Required to Configure Components To Configure This Component User Must Be a Member of ALL Listed Groups: OracleAS Wireless IAS & User Management Application Admins ■ iAS Admins ■...
Page 97: Groups Required To Install Middle Tiers
Groups Required to Install Middle Tiers -b "" -s base "objectclass=*" orclreplicaid Then run this command. prompt> ldapsearch -h oidhostname -p oidport -D cn=orcladmin -w password -b "orclreplicaid=value_from_previous_command,cn=replication configuration" -s base "objectclass=*" seealso This returns a "seealso" value in the format: cn=Metadata repository DB Name,cn=oraclecontext.
Page 98: Groups Required To Install Additional Metadata Repositories
Groups Required to Install Additional Metadata Repositories Figure 5–1 Contents of Oracle Internet Directory with One Infrastructure and One Middle Tier Oracle Context Products Groups Wireless Wireless Application Entity IAS Instances Infrastructure DB Portal and Wireless 1 orcl.oracle.com Component Associated Owners Mid Tiers Members:...
Page 99 Example of Installation with Different Users Figure 5–2 Oracle Internet Directory with Two Metadata Repositories and Two Middle Tiers Oracle Context Products Groups Members: IAS Admins - orcladmin - userA - userB IAS Instances Infrastructure DB J2EE orcl.oracle.com orcl1.oracle.com Repository Repository Mid-Tier Associated...
Page 100: How To Create Users In Oracle Internet Directory
How to Create Users in Oracle Internet Directory 3. Install OracleAS Infrastructure (OracleAS Metadata Repository only) userB was added to the iAS Admins group so that userB can perform this installation. Section 5.5, "Groups Required to Install Additional Metadata Repositories". The installer registers this new repository with Oracle Internet Directory by creating the "orcl1.oracle.com"...
Page 101: Using Oracle Directory Manager To Add Users To Groups
How to Add Users to Groups in Oracle Internet Directory 5.8.1 Using Oracle Directory Manager to Add Users to Groups When you have to log in as the cn=orcladmin superuser to add users to groups, you have to use Oracle Directory Manager, instead of Oracle Delegated Administration Services.
Page 102: Navigating To Metadata Repository Groups
How to Add Users to Groups in Oracle Internet Directory Figure 5–3 Using Oracle Directory Manager to Add Users to "Global" Groups 5.8.1.2 Navigating to Metadata Repository Groups The metadata repository groups are listed in Table 5–2. The general navigation path is as follows. See Figure 5–4 for a screenshot.
Page 103: Navigating To Component Groups
How to Add Users to Groups in Oracle Internet Directory Figure 5–4 Using Oracle Directory Manager to Add Users to Metadata Repository Groups 5.8.1.3 Navigating to Component Groups The component groups are listed in Table 5–3. The general navigation path is as follows. See Figure 5–5 for a screenshot.
Page 104: Using Deployment Delegation Console To Add Users To Groups
How to Add Users to Groups in Oracle Internet Directory Figure 5–5 Using Oracle Directory Manager to Add Users to the Component Users Group for the Oracle Delegated Administration Services Component 5.8.2 Using Deployment Delegation Console to Add Users to Groups Using the Deployment Delegation Console, which is installed as part of Oracle Delegated Administration Services, you can add users to or remove users from the following groups:...
Page 105 How to Add Users to Groups in Oracle Internet Directory Ensure that the Oracle Delegated Administration Services and Oracle Internet Directory are running. Display the Deployment Delegation Console page. The URL is: http://hostname:port/oiddas/ui/oidinstallhome hostname specifies the name of the computer where you installed Oracle Delegated Administration Services.
Page 106: Contents Of A New Oracle Internet Directory
Contents of a New Oracle Internet Directory 5.9 Contents of a New Oracle Internet Directory When you install OracleAS Infrastructure with Oracle Internet Directory, OracleAS Metadata Repository, and Oracle Delegated Administration Services, the Oracle Internet Directory contains the following objects (Figure 5–6): "Global"...
Page 107 On the Specify Login for Oracle Internet Directory Screen, What Username and Realm Do I Enter? This screen prompts you to enter a username and password to log in to Oracle Internet Directory. Username In the Username field, enter either the simple username or the user’s DN. Simple username example: jdoe DN example: cn=orcladmin The user must belong to specific groups for installing and configuring certain...
Page 108 On the Specify Login for Oracle Internet Directory Screen, What Username and Realm Do I Enter? 5-18 Oracle Application Server Installation Guide...
Page 109: Installing Oracle Internet Directory In Replicated Mode
Installing Oracle Internet Directory in Replicated Mode This chapter describes how to install Oracle Internet Directory in replicated mode, that is, how to install Oracle Internet Directory masters and replicas. This chapter contains the following sections: Section 6.1, "Oracle Internet Directory Replication Overview" ■...
Page 110: Fan-Out Replication (Ldap Replication)
Oracle Internet Directory Replication Overview 6.1.1 Fan-Out Replication (LDAP Replication) In fan-out replication, one Oracle Internet Directory is the master, and the other Oracle Internet Directory instances are called the Oracle Internet Directory replicas. In one-way fan-out replication, clients modify the data in the master Oracle Internet Directory only.
Page 111: Requirements
Requirements Figure 6–2 Example of Multimaster Replication (Advanced Replication) OracleAS Advanced Replicatio Read-Write In multimaster replication, Oracle Internet Directory instances use the Oracle Database Advanced Replication protocol to communicate with each other. The Select Oracle Internet Directory Replication Mode screen in the installer uses the term Advanced Replication to refer to multimaster replication.
Page 112: Clock Synchronization
Installation Order If you are installing against an existing OracleAS Metadata Repository, the OracleAS Metadata Repository must not be already registered with another Oracle Internet Directory. If you specify an OracleAS Metadata Repository that is already registered with an Oracle Internet Directory, the installer assumes you are installing a high availability environment, and it does not display the replication options.
Page 113: Installing An Oracle Internet Directory Replica
Installing an Oracle Internet Directory Replica 6.5 Installing an Oracle Internet Directory Replica You can install an Oracle Internet Directory replica against an existing database, or you can install it with a new database. Contents of this section: Section 6.5.1, "Overview of Installing a Replica" ■...
Page 114 Installing an Oracle Internet Directory Replica Table 6–1 (Cont.) Installing an Oracle Internet Directory Replica with a New Database Screen Action Specify Port If you want to use default ports for the components, select Automatic. Configuration Options If you do not want to use the default ports, and you have created a staticports.ini file, select Manual and enter the fullpath to your staticports.ini file in the provided field.
Page 115 Installing an Oracle Internet Directory Replica Table 6–1 (Cont.) Installing an Oracle Internet Directory Replica with a New Database Screen Action 10. Specify Database Global Database Name: Enter a name for the OracleAS Metadata Repository Configuration Options database. Append the domain name of your computer to the database name. Example: orcl.mydomain.com Note: Ensure that the master Oracle Internet Directory does not already contain a registration for a database with the same global database name or SID.
Page 116: Installing An Oracle Internet Directory Replica Against An Existing Database
Installing an Oracle Internet Directory Replica 6.5.3 Installing an Oracle Internet Directory Replica against an Existing Database Follow these steps to install an Oracle Internet Directory replica against an existing database. Table 6–2 Installing an Oracle Internet Directory Replica against an Existing Database Screen Action Start up the installer and complete the first few screens.
Page 117 Installing an Oracle Internet Directory Replica Table 6–2 (Cont.) Installing an Oracle Internet Directory Replica against an Existing Database Screen Action Select Oracle Internet Select One-way LDAP Replication if you want to use fan-out replication in one Directory Replication direction. Mode Select Two-way LDAP Replication if you want to use fan-out replication in one direction.
Page 118: Accessing Oracleas Single Sign-On And Oracle Delegated Administration Services
Accessing OracleAS Single Sign-On and Oracle Delegated Administration Services 6.6 Accessing OracleAS Single Sign-On and Oracle Delegated Administration Services To access OracleAS Single Sign-On or Oracle Delegated Administration Services on the replica node, you have to use the password for the orcladmin user on the master Oracle Internet Directory, not the replica Oracle Internet Directory.
Page 119: Installing In High Availability Environments: Overview
Installing in High Availability Environments: Overview This chapter provides an overview of the high availability configurations supported by Oracle Application Server. Subsequent chapters provide the details. This chapter also lists the common requirements. Contents of this chapter: Section 7.1, "Overview of High Availability Configurations" ■...
Page 120 Overview of High Availability Configurations passive node mounts the shared storage and runs the Oracle Application Server instance. The most common properties of an OracleAS Cold Failover Cluster configuration include: Shared storage ■ The Oracle home for the Oracle Application Server instance is typically installed on storage that is shared by the nodes in the OracleAS Cold Failover Cluster topology.
Page 121: Oracleas Clusters
Overview of High Availability Configurations Application independence ■ Some applications may not be suited to an active-active configuration. This may include applications which rely heavily on application state or on information stored locally. An active-passive configuration has only one instance serving requests at any particular time.
Page 122: Oracleas Disaster Recovery
Installation Order for High Availability Configurations Increased scalability and performance ■ Multiple identically-configured instances provide the capability to have a distributed workload shared among different machines and processes. New instances can also be added as the demand of the application grows. In general, the term OracleAS Clusters describes clustering at the Oracle Application Server instance level.
Page 123: Requirements For High Availability Configurations
Requirements for High Availability Configurations OracleAS Metadata Repository Oracle Identity Management components If you are distributing the Oracle Identity Management components, you install them in the following order: Oracle Internet Directory and Oracle Directory Integration Platform OracleAS Single Sign-On and Oracle Delegated Administration Services Middle tiers Note that you can install middle tiers before the other components and reassociate them with the high availability configuration following installation of the other...
Page 124: Check For Previous Oracle Installations On All Nodes
Requirements for High Availability Configurations Has write privileges on remote directories. ■ 7.3.4 Check for Previous Oracle Installations on All Nodes Check that all the nodes where you want to install in a high availability configuration do not have existing oraInventory directories. Details of all Oracle software installations are recorded in the Oracle Installer Inventory directory.
Page 125: Installing In High Availability Environments: Oracleas Cold Failover Cluster
Installing in High Availability Environments: OracleAS Cold Failover Cluster This chapter describes how to install Oracle Application Server in OracleAS Cold Failover Cluster configurations. Section 8.1, "OracleAS Cold Failover Cluster: Introduction" ■ Section 8.2, "Pre-Installation Steps for OracleAS Cold Failover Cluster" ■...
Page 126: Pre-Installation Steps For Oracleas Cold Failover Cluster
Pre-Installation Steps for OracleAS Cold Failover Cluster OracleAS Cold Failover Cluster (Infrastructure). See Section 8.3. ■ Distributed OracleAS Cold Failover Cluster (Infrastructure). See Section 8.4. ■ OracleAS Cold Failover Cluster (Identity Management). See Section 8.5. ■ Distributed OracleAS Cold Failover Cluster (Identity Management). See ■...
Page 127 Pre-Installation Steps for OracleAS Cold Failover Cluster Add the following line to the /etc/hosts file on the active node: ip_address hostname.domain hostname For example: 138.1.12.191 vhost.mydomain.com vhost Determine the primary public network interface. The primary public network interface for Ethernet encapsulation is typically lan0 on HP-UX Itanium.
Page 128: Set Up A File System That Can Be Mounted From Both Nodes
Pre-Installation Steps for OracleAS Cold Failover Cluster from a different node should provide a login to the node you configured in this procedure: telnet hostname.domain telnet ip_address For example, enter: telnet vhost.mydomain.com telnet 138.1.12.191 On Failover If the active node fails, then the secondary node takes over. If you do not have a clusterware agent to map the virtual IP from the failed node to the secondary node, then you have to do it manually.
Page 129: Review Recommendations For Automatic Storage Management (Asm)
Pre-Installation Steps for OracleAS Cold Failover Cluster Unmount the file system from node 1. Mount the file system from node 2 using the same mount point that you used in step 1. Unmount it from node 2, and mount it on node 1, because you will be running the installer from node 1.
Page 130: Installing An Oracleas Cold Failover Cluster (Infrastructure) Configuration
Installing an OracleAS Cold Failover Cluster (Infrastructure) Configuration (DESCRIPTION_LIST = (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)(HOST = db_hostname)(PORT = db_port)) In this example, db_hostname is the fully-qualified hostname for the existing database and db_port is the port for the existing database. Add an ADDRESS entry to the ADDRESS_LIST entry for the new Oracle Application Server instance: LISTENER =...
Page 131 Installing an OracleAS Cold Failover Cluster (Infrastructure) Configuration Figure 8–1 OracleAS Cold Failover Cluster (Infrastructure) Configuration Failover Mode Normal Mode Virtual Hostname: vhost.mydomain.com Virtual Hostname: vhost.mydomain.com Virtual IP: 123.45.67.11 Virtual IP: 123.45.67.11 on failover Node 1 Node 2 Node 1 Node 2 (Primary Node, Active) (Secondary Node)
Page 132: Oracleas Cold Failover Cluster (Infrastructure): Overview Of Installation Steps
Installing an OracleAS Cold Failover Cluster (Infrastructure) Configuration URL for: Example URL Application Server Control http://vhost.mydomain.com:1156 Oracle Application Server Middle Tiers You can install and run the middle tiers on other nodes (nodes that are not running OracleAS Infrastructure). During installation, you set up the middle tiers to use services from the OracleAS Infrastructure installed on the shared storage device.
Page 133 Installing an OracleAS Cold Failover Cluster (Infrastructure) Configuration Key Points The destination directory must be on the shared disk. ■ Remember to select High Availability and Replication in the Select Configuration ■ Options screen. By default, this option is not selected. You enter the virtual hostname in the Specify Virtual Hostname screen.
Page 134 Installing an OracleAS Cold Failover Cluster (Infrastructure) Configuration Table 8–2 (Cont.) Installing OracleAS Infrastructure in an OracleAS Cold Failover Cluster (Infrastructure) Screen Action OCA screens If you selected Oracle Application Server Certificate Authority (OCA) in the Select Configuration Options screen, the installer displays screens for configuring OCA.
Page 135: Installing A Distributed Oracleas Cold Failover Cluster (Infrastructure) Configuration
Installing a Distributed OracleAS Cold Failover Cluster (Infrastructure) Configuration Table 8–2 (Cont.) Installing OracleAS Infrastructure in an OracleAS Cold Failover Cluster (Infrastructure) Screen Action 10. Specify Instance Name Instance Name: Enter a name for this infrastructure instance. Instance names can and ias_admin Password contain alphanumeric characters and the _ (underscore) character.
Page 136 Installing a Distributed OracleAS Cold Failover Cluster (Infrastructure) Configuration Figure 8–2 Distributed OracleAS Cold Failover Cluster (Infrastructure) Configuration Distributed OracleAS Cold Failover Cluster (Infrastructure) Configuration Load Balancer In this tier, Identity Management includes: - Oracle Delegated Administration Services - OracleAS Single Sign-On ·...
Page 137: Distributed Oracleas Cold Failover Cluster (Infrastructure): Overview Of Installation Steps
Installing a Distributed OracleAS Cold Failover Cluster (Infrastructure) Configuration 8.4.1 Distributed OracleAS Cold Failover Cluster (Infrastructure): Overview of Installation Steps To set up a distributed OracleAS Cold Failover Cluster (Infrastructure) configuration, perform these steps: Table 8–3 Overview of Installation Steps for Distributed OracleAS Cold Failover Cluster (Infrastructure) Step Description Perform Pre-Installation Steps...
Page 138: Installing An Oracleas Cold Failover Cluster (Identity Management) Configuration
Installing an OracleAS Cold Failover Cluster (Identity Management) Configuration If you meet these requirements, you need to configure the CSS daemon on the other node. The CSS daemon synchronizes ASM instances with the database instances that use the ASM instances for database file storage. To configure the CSS daemon: Stop all the processes in the OracleAS Cold Failover Cluster (Infrastructure) home.
Page 139 Installing an OracleAS Cold Failover Cluster (Identity Management) Configuration two shared disks that can be accessed by both nodes. One shared disk contains the ■ Oracle home for the database (on which you will load the OracleAS Metadata Repository), and on the other shared disk, you will install Oracle Identity Management.
Page 140: Oracleas Cold Failover Cluster (Identity Management): Overview Of Installation Steps
Installing an OracleAS Cold Failover Cluster (Identity Management) Configuration Figure 8–3 OracleAS Cold Failover Cluster (Identity Management) Configuration OracleAS Cold Failover Cluster (Identity Management) Configuration Virtual Hostname: vhost.mydomain.com Virtual IP: 123.45.67.11 Identity Management includes: - Oracle Internet Directory - OracleAS Single Sign-On ·...
Page 141: Oracleas Cold Failover Cluster (Identity Management): Details Of Installation Steps
Installing an OracleAS Cold Failover Cluster (Identity Management) Configuration 8.5.2 OracleAS Cold Failover Cluster (Identity Management): Details of Installation Steps Perform the following steps to install Oracle Application Server in an OracleAS Cold Failover Cluster (Identity Management) configuration. Step 1 Perform Pre-Installation Steps Perform the pre-installation steps listed in Section 8.2, "Pre-Installation Steps for OracleAS Cold Failover...
Page 142 Installing an OracleAS Cold Failover Cluster (Identity Management) Configuration Table 8–5 (Cont.) Installing Oracle Identity Management Components Screen Action Specify Port If you want to use default ports for the components, select Automatic. Configuration Options If you do not want to use the default ports, and you have created a staticports.ini file, select Manual and enter the fullpath to your staticports.ini file in the provided field.
Page 143: Installing A Distributed Oracleas Cold Failover Cluster (Identity Management) Configuration
Installing a Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration 8.6 Installing a Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration This configuration is suitable: if you want to run Oracle Internet Directory and Oracle Directory Integration ■ Platform on the same tier as your database, and Oracle Delegated Administration Services and OracleAS Single Sign-On on a different tier if you want to install the OracleAS Metadata Repository in an existing cold ■...
Page 144 Installing a Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration Tier Running Oracle Delegated Administration Services and OracleAS Single Sign-On Note that the nodes in this tier are not clustered. Both nodes are active at the same time, and you install the files locally on each node. To access these nodes, clients go through a load balancer.
Page 145: Distributed Oracleas Cold Failover Cluster (Identity Management): Overview Of Installation Steps
Installing a Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration Figure 8–4 Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration Load Balancer On this tier, Identity Management includes: - OracleAS Single Sign-On - Oracle Delegated Administration Services Note that the nodes in this tier are active-active.
Page 146: Distributed Oracleas Cold Failover Cluster (Identity Management): Details Of Installation Steps
Installing a Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration Table 8–6 Overview of Installation Steps for Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration Step Description Perform Pre-Installation Steps Pre-installation tasks, described in Section 8.2, include: Section 8.2.1, "Map the Virtual Hostname and Virtual IP ■...
Page 147 Installing a Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration Table 8–7 Installing Oracle Internet Directory and Oracle Directory Integration Platform Screen Action Start up the installer and complete the first few screens. See Section 4.27, "Install Fragment: The First Few Screens of the Installation" for details.
Page 148: Installing Oracle Delegated Administration Services And Oracleas Single Sign-On In An Oracleas Cold Failover Cluster
Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in an OracleAS Cold Failover Cluster Table 8–7 (Cont.) Installing Oracle Internet Directory and Oracle Directory Integration Platform Screen Action Specify Instance Name Instance Name: Enter a name for this infrastructure instance. Instance names can and ias_admin Password contain alphanumeric characters and the _ (underscore) character.
Page 149 Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in an OracleAS Cold Failover Cluster Figure 8–5 Oracle Delegated Administration Services and OracleAS Single Sign-On in a Cold Failover Cluster Virtual Hostname: vhost_2.mydomain.com Virtual IP: 123.45.67.111 on failover · DAS ·...
Page 150: Oracle Delegated Administration Services And Oracleas Single Sign-On In Oracleas Cold Failover Cluster: Overview Of Installation Steps
Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in an OracleAS Cold Failover Cluster 8.7.1 Oracle Delegated Administration Services and OracleAS Single Sign-On in OracleAS Cold Failover Cluster: Overview of Installation Steps Table 8–8 Overview of Steps for Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in an OracleAS Cold Failover Cluster Step Description...
Page 151 Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in an OracleAS Cold Failover Cluster Step 3 Install OracleAS Metadata Repository and Oracle Internet Directory Install OracleAS Metadata Repository and Oracle Internet Directory in the same Oracle home by selecting Identity Management and OracleAS Metadata Repository in the Select Installation Type screen.
Page 152 Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in an OracleAS Cold Failover Cluster Table 8–9 (Cont.) Installing Oracle Delegated Administration Services and OracleAS Single Sign-On Screen Action Specify Port Select Manual and enter the fullpath to your staticports.ini file in the provided Configuration Options field.
Page 153 Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in an OracleAS Cold Failover Cluster Stop the components. prompt> ORACLE_HOME/opmn/bin/opmnctl stopall Stop the OracleAS Metadata Repository. Set the ORACLE_HOME environment variable to the OracleAS Infrastructure home. Set the ORACLE_SID environment variable to the SID of the OracleAS Metadata Repository (for example, orcl).
Page 154: Installing Only The Oracleas Metadata Repository In An Oracleas Cold Failover Cluster Environment
Installing Only the OracleAS Metadata Repository in an OracleAS Cold Failover Cluster Environment On the other node, run the following command as root: # $ORACLE_HOME/root.sh ORACLE_HOME is where you installed the OracleAS Cold Failover Cluster (Infrastructure). 8.8 Installing Only the OracleAS Metadata Repository in an OracleAS Cold Failover Cluster Environment This section describes how to install the OracleAS Metadata Repository in a new database (that is, the installer will create a new database for you and populate it with...
Page 155: Post-Installation Steps For Oracleas Cold Failover Cluster
Post-Installation Steps for OracleAS Cold Failover Cluster Table 8–10 (Cont.) Installing the OracleAS Metadata Repository Only Screen Action Oracle Database screens Enter information for the OracleAS Metadata Repository database. See Section 4.29, "Install Fragment: Database Screens". Finish the installation. See Section 4.28, "Install Fragment: The Last Few Screens of the Installation"...
Page 156: Create A Clusterware Agent For Automatic Failover
Installing Middle Tiers Against an OracleAS Cold Failover Cluster Infrastructure After setting the variable, you can then run the "emctl action dbconsole" commands, where action is start, stop, or status (for example, emctl start dbconsole). 8.9.4 Create a Clusterware Agent for Automatic Failover An OracleAS Cold Failover Cluster environment provides the framework for a manual failover of OracleAS Infrastructure.
Page 157: Rename The /Var/Opt/Oracle Directory Used For The Infrastructure
Installing Middle Tiers Against an OracleAS Cold Failover Cluster Infrastructure infrastructure. For example, if the infrastructure is running on the primary node but you want to install the middle tier on the secondary node, the installer is unable to detect which ports the infrastructure is using. In this situation, you need to set up a staticports.ini file to specify port numbers for the middle tier.
Page 158: Installing Regular Middle-Tiers On Oracleas Cold Failover Cluster Nodes
Installing Regular Middle-Tiers on OracleAS Cold Failover Cluster Nodes Read Section 8.10.1, "If You Plan to Install Middle Tiers on OracleAS Cold ■ Failover Cluster Nodes". 8.11 Installing Regular Middle-Tiers on OracleAS Cold Failover Cluster Nodes If you install middle-tiers that are not in a cold failover cluster configuration on the same nodes as an OracleAS Cold Failover Cluster infrastructure, then the ports used for the middle tiers must be different from the ones used for any OracleAS Infrastructure installed on the same cluster.
Page 159: Installing In High Availability Environments: Oracleas Cluster (Identity Management)
Installing in High Availability Environments: OracleAS Cluster (Identity Management) This chapter describes how to install Oracle Application Server in OracleAS Cluster (Identity Management) configurations. Section 9.1, "OracleAS Cluster (Identity Management): Introduction" ■ Section 9.2, "Pre-Installation Steps for OracleAS Cluster (Identity Management)" ■...
Page 160: Pre-Installation Steps For Oracleas Cluster (Identity Management)
Pre-Installation Steps for OracleAS Cluster (Identity Management) Install the OracleAS Metadata Repository in an existing database using the ■ OracleAS RepCA. See the Oracle Application Server Metadata Repository Creation Assistant User’s Guide for supported database configurations. For OracleAS Cluster (Identity Management) configurations, Oracle recommends using a high availability database configuration such as Real Application Clusters or cold failover cluster.
Page 161: Synchronize Clocks On All Nodes
Pre-Installation Steps for OracleAS Cluster (Identity Management) 9.2.2 Synchronize Clocks on All Nodes Synchronize the system clocks on all nodes so they are running within 250 seconds of each other. When synchronizing the system clocks, make sure the clocks are set to the same time zone.
Page 162: Load Balancer Supports Ldap Service Monitoring
About Oracle Internet Directory Passwords Note that these procedures apply only to the LDAP virtual server configured on your load balancer. They do not apply to the HTTP virtual server configured on your load balancer. 9.2.4.1 Load Balancer Supports LDAP Service Monitoring If your load balancer supports LDAP service monitoring, then you can add all the nodes to the LDAP virtual server before starting the installation.
Page 163: About Configuring Ssl And Non-Ssl Ports For Oracle Http Server
About Configuring SSL and Non-SSL Ports for Oracle HTTP Server Connecting to Oracle Internet Directory using the Oracle Directory Manager ■ You still need the passwords that you entered in subsequent installations for logging into Application Server Control. 9.4 About Configuring SSL and Non-SSL Ports for Oracle HTTP Server When you are installing OracleAS Cluster (Identity Management) configurations, the installer displays the "Specify HTTP Load Balancer Host and Listen Ports"...
Page 164: Case 2: Client
About Configuring SSL and Non-SSL Ports for Oracle HTTP Server Example Table 9–1 Example for Case 1 Values in Screen Resulting Values in Configuration Files HTTP Listener: Port: 8000 In httpd.conf: Enable SSL: Unchecked Port 80 Listen 8000 HTTP Load Balancer: Port: 80 Enable SSL: Unchecked In ssl.conf: Port <default port number assigned by installer>...
Page 165: Installing An Oracleas Cluster (Identity Management) Configuration
Installing an OracleAS Cluster (Identity Management) Configuration HTTP Load Balancer: Port: Enter the port number that the HTTP virtual server listens on. This will be the value of the Port directive in the httpd.conf file. Enable SSL: Select this option. Note that in this configuration, the load balancer must have SSL acceleration capabilities, or you must add a separate SSL Accelerator.
Page 166: Installation Order
Installing an OracleAS Cluster (Identity Management) Configuration Internet Directory to be listening on both SSL and non-SSL ports when you install OracleAS Single Sign-On and Oracle Delegated Administration Services. Figure 9–1 OracleAS Cluster (Identity Management) Configuration OracleAS Cluster (Identity Management) Configuration Load Balancer On this tier, Identity Management includes: - OracleAS Delegated Administration...
Page 167: Installing Oracleas Metadata Repository
Installing an OracleAS Cluster (Identity Management) Configuration If you want to configure Oracle Internet Directory to listen on Note: SSL ports only, perform this configuration after you have installed Oracle Identity Management. Oracle Internet Directory needs to be listening on both SSL and non-SSL ports when you install OracleAS Single Sign-On and Oracle Delegated Administration Services.
Page 168: Disable Tcp Monitoring On Load Balancer For First Node
Installing an OracleAS Cluster (Identity Management) Configuration If you have a staticports.ini file, you should also use the same file for installations on subsequent nodes. 9.5.3.2 Disable TCP Monitoring on Load Balancer for First Node Before installing on the first node, you must make sure that TCP monitoring is not enabled for the Virtual IP on the first node.
Page 169 Installing an OracleAS Cluster (Identity Management) Configuration Table 9–4 Steps for Installing OracleAS Cluster (Identity Management) on the First Node Screen Action Start up the installer and complete the first few screens. See Section 4.27, "Install Fragment: The First Few Screens of the Installation" for details.
Page 170: Installing Oracleas Cluster (Identity Management) On Subsequent Nodes
Installing an OracleAS Cluster (Identity Management) Configuration Table 9–4 (Cont.) Steps for Installing OracleAS Cluster (Identity Management) on the First Node Screen Action Specify Host and Port for The values you enter in this screen depend on your scenario. There are two LDAP possible scenarios: Scenario 1: You have configured a virtual server on your load balancer to handle...
Page 171 Installing an OracleAS Cluster (Identity Management) Configuration Key Points for Installing on Subsequent Nodes Use the same staticports.ini file that you used for installing on the first node to ■ ensure that the same component on all nodes uses the same port number. Note that the Oracle Internet Directory ports specified in staticports.ini will not be used by the installer.
Page 172 Installing an OracleAS Cluster (Identity Management) Configuration OracleAS Cluster (Identity Management) Table 9–5 (Cont.) Steps for Installing on Subsequent Screen Action Specify Existing Oracle Specify an existing OracleAS Cluster (Identity Management) for the current Application Server instance to join. The cluster was created during a previous identical installation. Clusters Name Note that the cluster name is case-sensitive.
Page 173: Installing A Distributed Oracleas Cluster (Identity Management) Configuration
Installing a Distributed OracleAS Cluster (Identity Management) Configuration OracleAS Cluster (Identity Management) Table 9–5 (Cont.) Steps for Installing on Subsequent Screen Action 12. Specify Instance Name Instance Name: Enter a name for this infrastructure instance. Instance names can and ias_admin Password contain alphanumeric characters and the _ (underscore) character.
Page 174 Installing a Distributed OracleAS Cluster (Identity Management) Configuration Figure 9–2 Distributed OracleAS Cluster (Identity Management) Configuration Distributed OracleAS Cluster (Identity Management) Configuration Load Balancer On this tier, Identity Management includes: - Oracle Delegated Administration Services - OracleAS Single Sign-On · DAS ·...
Page 175: Installation Order
Installing a Distributed OracleAS Cluster (Identity Management) Configuration Section 9.6.2, "Installing OracleAS Metadata Repository" ■ Section 9.6.3, "Installing Oracle Internet Directory on the First Node" ■ Section 9.6.4, "Installing Oracle Internet Directory on Subsequent Nodes" ■ Section 9.6.5, "Installing OracleAS Single Sign-On and Oracle Delegated ■...
Page 176: Select The Same Components For Each Installation
Installing a Distributed OracleAS Cluster (Identity Management) Configuration 9.6.3.2 Select the Same Components for Each Installation If you are setting up the second node as a failover to the first node, then you must select the same set of components in the Select Configuration Options screen for each installation.
Page 177: Installing Oracle Internet Directory On Subsequent Nodes
Installing a Distributed OracleAS Cluster (Identity Management) Configuration Table 9–6 (Cont.) Steps for Installing Oracle Internet Directory in a Distributed OracleAS Cluster (Identity Management) on the First Node Screen Action Select High Availability Select OracleAS Cluster (Identity Management), and click Next. or Replication Option Specify Namespace in Select the suggested namespace, or enter a custom namespace for the location of...
Page 178 Installing a Distributed OracleAS Cluster (Identity Management) Configuration Oracle Internet Directory OracleAS Cluster (Identity Table 9–7 Steps for Installing in a Distributed Management) on Subsequent Nodes Screen Action Start up the installer and complete the first few screens. See Section 4.27, "Install Fragment: The First Few Screens of the Installation"...
Page 179: Installing Oracleas Single Sign-On And Oracle Delegated Administration Services On Each Node
Installing a Distributed OracleAS Cluster (Identity Management) Configuration Oracle Internet Directory OracleAS Cluster Table 9–7 (Cont.) Steps for Installing in a Distributed (Identity Management) on Subsequent Nodes Screen Action Oracle Internet Directory Specify Oracle Internet Username: Enter the username to log in to the first Directory Login Oracle Internet Directory You must log in as the...
Page 180: Start The Installer
Installing a Distributed OracleAS Cluster (Identity Management) Configuration 9.6.5.2 Start the Installer Key Points In the Specify OracleAS Cluster screen, for the first node, select Create a New ■ Cluster. For the second node, select Join an Existing Cluster to join the cluster that you created when installing on the first node.
Page 181 Installing a Distributed OracleAS Cluster (Identity Management) Configuration Table 9–8 (Cont.) Steps for Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in a Distributed OracleAS Cluster (Identity Management) Configuration Screen Action Specify Host and Port for The installer will use the values on this screen to connect to Oracle Internet LDAP Directory.
Page 182: Post-Installation Steps
Post-Installation Steps 9.7 Post-Installation Steps After installing Oracle Identity Management components on all nodes, reconfigure your load balancer to direct requests to all nodes. Before you started the installation, you had configured the load balancer to direct requests to node 1 only. See Section 9.2.4, "Configure Your LDAP Virtual Server".
Page 183: Changing The Ports For Oracle Internet Directory
Post-Installation Steps When choosing a multicast address, ensure that the address Note: does not collide with the addresses listed in: http://www.iana.org/assignments/multicast-addresses Also, if the low order 23 bits of an address is the same as the local network control block, 224.0.0.0 – 224.0.0.255, then a collision may occur.
Page 184 Installing Middle Tiers Against OracleAS Cluster (Identity Management) Configurations 9.8 Installing Middle Tiers Against OracleAS Cluster (Identity Management) Configurations Pre-Installation Before starting the middle-tier installation, configure the LDAP load balancer that you are using for Oracle Internet Directory so that it points to only one Oracle Internet Directory node.
Page 185: Installing In High Availability Environments: Oracleas Disaster Recovery
Installing in High Availability Environments: OracleAS Disaster Recovery This chapter describes how to install Oracle Application Server in OracleAS Disaster Recovery configurations. OracleAS Disaster Recovery is one of the high availability environments supported by Oracle Application Server. Contents of this chapter: Section 10.1, "OracleAS Disaster Recovery: Introduction"...
Page 186 OracleAS Disaster Recovery: Introduction middle tiers. In an asymmetric topology, the number of instances required on the standby site are fewer than the number on the production site and the number of instances required on the standby site must be the minimum set of instances required to run your site in the event of a switchover or failover operation.
Page 187: Setting Up The Oracleas Disaster Recovery Environment
Setting up the OracleAS Disaster Recovery Environment Figure 10–1 OracleAS Disaster Recovery Environment Standby Site Production Site External hostname: prodmid1 External hostname: standbymid1 IP: 138.1.2.333 IP: 213.2.2.330 Internal hostname: asmid1 Internal hostname: asmid1 External hostname: standbymid2 External hostname: prodmid2 Middle Tier Middle Tier IP: 213.2.2.331 IP: 138.1.2.444...
Page 188: Set Up Identical Hostnames On Both Production And Standby Sites
Setting up the OracleAS Disaster Recovery Environment 10.2.3 Set Up Identical Hostnames on Both Production and Standby Sites The names of the corresponding nodes on the production and standby sites must be identical, so that when you synchronize data between the sites, you do not have to edit the data to fix the hostnames.
Page 189 Setting up the OracleAS Disaster Recovery Environment non-authoritative requests to the external DNS servers. The external DNS servers do not know about the existence of the internal DNS servers. See Figure 10–2. Figure 10–2 Method 1: Using DNS Servers External DNS Server External DNS Server External DNS Server Internal DNS Server...
Page 190 Setting up the OracleAS Disaster Recovery Environment Do the same for the nodes on the standby site, but use the IP address of the internal DNS server for the standby site. Create a separate entry for Oracle Data Guard in the internal DNS servers. This entry is used by Oracle Data Guard to ship redo data to the database on the standby site.
Page 191 Setting up the OracleAS Disaster Recovery Environment In the hosts file, be sure that the line that identifies the Note: current node comes immediately after the localhost definition (the line with the 127.0.0.1 address). 127.0.0.1 localhost 213.2.2.330 asmid1.oracle.com asmid1 213.2.2.331 asmid2.oracle.com asmid2 213.2.2.110 asinfra.oracle.com asinfra Ensure that the "hosts:"...
Page 192: If You Want To Use Oracleas Cold Failover Cluster On The Production Site
Installing Oracle Application Server in an OracleAS Disaster Recovery Environment 10.2.4 If You Want to Use OracleAS Cold Failover Cluster on the Production Site On the production site of a OracleAS Disaster Recovery system, you can set up the OracleAS Infrastructure to run in a OracleAS Cold Failover Cluster configuration. In this case, you have two nodes in a hardware cluster, and you install the OracleAS Infrastructure on a shared disk.
Page 193: Installing The Oracleas Infrastructure
Installing the OracleAS 10g (10.1.2.0.2) Standalone Install of OracleAS Guard into Oracle Homes For all of the installations, be sure to use staticports.ini to Note: specify port numbers for the components. See Section 10.2.2, "Set Up staticports.ini File". Install OracleAS Infrastructure on the production site. Install OracleAS Infrastructure on the standby site.
Page 194: Patching Oracleas Guard Release 10.1.2.0.0 With Release 10.1.2.0.2
Patching OracleAS Guard Release 10.1.2.0.0 with Release 10.1.2.0.2 upgrade procedure in Oracle Application Server High Availability Guide for more information). OracleAS Guard patch upgrade from OracleAS 10g (10.1.2.0.0) to OracleAS 10g ■ (10.1.2.0.2) (see Section 10.5, "Patching OracleAS Guard Release 10.1.2.0.0 with Release 10.1.2.0.2"...
Page 195: What To Read Next
What to Read Next <ORACLE_HOME>/opmn/bin/opmnctl startall <ORACLE_HOME>/opmn/bin/opmnctl startproc ias-component=DSA 10.6 What to Read Next For information on how to manage your OracleAS Disaster Recovery environment, such as setting up Oracle Data Guard and configuring the OracleAS Metadata Repository database, see the Oracle Application Server High Availability Guide. Installing in High Availability Environments: OracleAS Disaster Recovery 10-11...
Page 196 What to Read Next 10-12 Oracle Application Server Installation Guide...
Page 197: Post-Installation Tasks
Post-Installation Tasks Contents: Section 11.1, "State of Oracle Application Server Instances After Installation" ■ Section 11.2, "Passwords for Oracle Application Server Components" ■ Section 11.3, "NFS Installations" ■ Section 11.4, "Backup and Recovery" ■ Section 11.5, "SSL" ■ Section 11.6, "Operating System Locale and NLS_LANG Environment Variable" ■...
Page 198: Nfs Installations
NFS Installations 11.3 NFS Installations If you installed Oracle Application Server on an NFS disk, you need to edit the LockFile directive in the ORACLE_HOME/Apache/Apache/conf/httpd.conf file so that it points to a local disk. This file is used by the Oracle HTTP Server component. See the Oracle HTTP Server Administrator’s Guide for details.
Page 199: Component Configuration After Installation
Component Configuration After Installation 11.7 Component Configuration After Installation If you did not configure a component during installation (that is, you did not select the component in the Select Configuration Options screen), you can configure some components after installation. Some components have dependencies that you have to complete before you can configure the component.
Page 200 Component Configuration After Installation oracle.ias.configtool.UseInfrastructure i -f $ORACLE_HOME/config/infratool_mod_osso.properties -h OIDhost -p OIDport -u OIDadminName -w OIDclearTextPassword -o ORACLE_HOME -m ASinstanceName -infra infraGlobalDBName -mh host -sso true -sslp sslPort -sslf false Table 11–1 describes the parameters where you have to supply values: Table 11–1 Parameters for Configuring mod_osso Parameter...
Page 201: Components That Require Post-Installation Tasks
What to Do Next 11.8 Components that Require Post-Installation Tasks If you plan to use any of the components listed in Table 11–2, you need to perform some steps specific to the component after installation before you can use the component.
Page 202 What to Do Next 11-6 Oracle Application Server Installation Guide...
Page 203: Installing The Oracle Identity Management Grid Control Plug-In
Installing the Oracle Identity Management Grid Control Plug-in This appendix describes how to install Oracle Identity Management Grid Control Plug-in and Oracle Identity Management Grid Control Plug-in Agent. It contains the following sections: Section A.1, "Installation Requirements" ■ Section A.2, "Starting the Grid Control Plug-in Installer" ■...
Page 204: Installing Oracle Identity Management Grid Control Plug-In
Installing Oracle Identity Management Grid Control Plug-in Notes: Be sure you are not logged in as the root user when you start ■ the Oracle Universal Installer. The installer gives an error message if you try to run it as the root user. Do not start the installation inside the mount_point directory.
Page 205: Installing Oracle Identity Management Grid Control Plug-In Agent
Installing Oracle Identity Management Grid Control Plug-in Agent Table A–1 (Cont.) Steps for Installing Oracle Identity Management Grid Control Plug-in Screen Action Repository Database Password: Enter the password for the SYS user. Administrator Password Click Next. Summary Verify your selections and click Install. Install Progress This screen shows the progress of the installation.
Page 206 Installing Oracle Identity Management Grid Control Plug-in Agent Product: Click on the flashlight icon and select Intelligent Agent from the box. Release: Enter "10.2.0.3.0" as the release number. Note that you must enter the numbers manually. Do not use any of the numbers from the list. Platform: Select the operating system for the patch.
Page 207: Silent And Non-Interactive Installation
Silent and Non-Interactive Installation This appendix describes how to install Oracle Application Server in silent mode. This appendix contains the following topics: Section B.1, "Silent Installation" ■ Section B.2, "Non-Interactive Installation" ■ Section B.3, "Pre-Installation" ■ Section B.4, "Notes for Silent and Non-Interactive Installations" ■...
Page 208: Non-Interactive Installation
Non-Interactive Installation B.2 Non-Interactive Installation Non-interactive installations also use a response file to automate the Oracle Application Server installation. In non-interactive installations, there is graphical output and users may enter input. Non-interactive installation of Oracle Application Server is also accomplished by supplying the Oracle Universal Installer with a response file but without specifying the -silent flag on the command line.
Page 209: Create The Response File
Create the Response File B.5 Create the Response File Before doing a silent or non-interactive installation, you must provide information specific to your installation in a response file. The installer will fail if you attempt an installation using a response file that is not configured correctly. Response files are text files that you can create or edit in a text editor.
Page 210: Example Response Files
Create the Response File UNIX_GROUP_NAME FROM_LOCATION ORACLE_HOME szl_PortListSelect oracle.iappserver.instance:szl_InstanceInformation See the response file for descriptions of the parameters in the file. B.5.4 Example Response Files The following sections shows example response files for the following Oracle Application Server installation types: Section B.5.4.1, "Example Response File for OracleAS Infrastructure: Oracle ■...
Page 211 Create the Response File NEXT_SESSION_ON_FAIL=false SHOW_DEINSTALL_CONFIRMATION=false SHOW_DEINSTALL_PROGRESS=false oracle.iappserver.infrastructure:SHOW_IAS_COMPONENT_CONFIG_PAGE=false ACCEPT_LICENSE_AGREEMENT=true RESTART_SYSTEM=<Value Unspecified> CLUSTER_NODES=<Value Unspecified> OUI_HOSTNAME=im_host.mycompany.com PreReqConfigSelections="" n_ValidationPreReqConfigSelections=0 TOPLEVEL_COMPONENT={"oracle.iappserver.infrastructure","10.1.4.0.1"} DEINSTALL_LIST={"oracle.iappserver.infrastructure","10.1.4.0.1"} oracle.iappserver.infrastructure:szl_ PortListSelect={"YES","/private/jdoe/mystaticports.ini"} COMPONENT_LANGUAGES={"en"} INSTALL_TYPE="Infrastructure_ID" oracle.iappserver.infrastructure:b_configureMETA=false oracle.iappserver.infrastructure:b_configureOID=true oracle.iappserver.infrastructure:b_configureSSO=true oracle.iappserver.infrastructure:b_configureDAS=true oracle.iappserver.infrastructure:b_configureDIP=true oracle.iappserver.infrastructure:b_configureOCA=true oracle.iappserver.infrastructure:b_configureHA=false oracle.iappserver.infrastructure:b_launchEMCA=true oracle.iappserver.infrastructure:b_launchOHS=true # Meta Repository Connection Info ( for OID ) oracle.iappserver.iappdialog:szl_RepositoryUserInput={"sys", "syspassword", "mr_ host.mycompany.com:1521", "", "", "mr.mycompany.com", ""} # Meta Repository Connection Info ( for OCA )
Page 212: Example Response File For Oracleas Infrastructure: Oracleas Metadata Repository Only
Create the Response File B.5.4.2 Example Response File for OracleAS Infrastructure: OracleAS Metadata Repository Only The following shows an example of a response file for a silent installation of OracleAS Infrastructure as described in Section 4.22, "Installing OracleAS Metadata Repository in a New Database".
Page 213 Create the Response File szIdentityAdminContext="dc=mycompany,dc=com" s_dnSelection="Custom DN:" s_dnCntval="United States" s_dncustom="CN=AS Certificate Authority,OU=MyOrg,O=MyCompany,C=US" sl_keylengthInfo={"2048"} sl_ocmInfo={"adminpassword","adminpassword"} s_nameForDBAGrp="dba" s_nameForOPERGrp="dba" ## Specify Database Configuration Options s_dbRetChar="Unicode standard UTF-8 AL32UTF8" s_dbSid=mr s_globalDBName=mr.mycompany.com b_loadExampleSchemas=false ## Specify Database Management Option s_dlgEMEmailNotificationSelected="N" s_dlgEMOptionSelected="Use Database Control for Database Management" s_dlgEMCentralAgentSelected="No Agents Found"...
Page 214: Example Response File For Oracleas Infrastructure: Identity Management And Oracleas Metadata Repository
Create the Response File B.5.4.3 Example Response File for OracleAS Infrastructure: Identity Management and OracleAS Metadata Repository The following shows an example of a response file for a silent installation of OracleAS Infrastructure as described in Section 4.20, "Installing OracleAS Infrastructure".
Page 215: Example Response File For Oracle Identity Federation
Create the Response File s_dnSelection="Custom DN:" s_dnCntval="United States" s_dncustom="CN=My Certificate Authority,OU=MyOrg,O=MyCompany,C=US" sl_keylengthInfo={"2048"} sl_ocmInfo={"adminpassword","adminpassword"} s_nameForDBAGrp="dba" s_nameForOPERGrp="dba" ## Specify Database Configuration Options s_dbRetChar="Unicode standard UTF-8 AL32UTF8" s_dbSid=inf7296 s_globalDBName=infra_host.mycompany.com b_loadExampleSchemas=false ## Specify Database Management Option s_dlgEMEmailNotificationSelected="N" s_dlgEMOptionSelected="Use Database Control for Database Management" s_dlgEMCentralAgentSelected="No Agents Found" s_dlgEMSMTPServer=""...
Page 216: Start The Installation
Start the Installation Note that if you do not copy the CD-ROMs to the hard drive, the installer will prompt you to switch CD-ROMs during installation. To complete the installation without any prompting, you must copy the contents of the CD-ROMs to the hard drive and specify the LOCATION_FOR_DISKn parameters.
Page 217: Post-Installation
Security Tips for Silent and Non-Interactive Installations prompt> runInstaller -responseFile absolute_path_and_filename To perform a silent installation, use the -silent parameter: prompt> runInstaller -silent -responseFile absolute_path_and_filename B.7 Post-Installation The success or failure of the non-interactive and silent installations is logged in the installActions<time_stamp>.log file.
Page 218: Deinstallation
Deinstallation B.9 Deinstallation You can perform a silent deinstallation of Oracle Application Server by supplying a silent deinstallation parameter to the response file you used for installation. Add the following parameter to your installation response file: REMOVE_HOMES={"<ORACLE_HOME to be removed>"} For example: REMOVE_HOME="/local_location/oracle_home"...
Page 219: Default Port Numbers
Default Port Numbers By default, the installer assigns port numbers to components from a set of default port numbers. This appendix contains a list of these port numbers. If you want to use a different set of port numbers, you have to create a file called staticports.ini, in which you list the port numbers that you want to use.
Page 220 Default Port Numbers Table C–1 Default Port Numbers and Ranges (Grouped by Component) Port Number Component Default Port Range Name in staticports.ini Oracle Process Manager and Notification Server (OPMN) Oracle Notification Server Request Port 6003 6003 - 6099 Oracle Notification Server Request port Oracle Notification Server Local Port 6100...
Page 221: Ports To Open In Firewalls
Ports to Open in Firewalls Table C–1 (Cont.) Default Port Numbers and Ranges (Grouped by Component) Port Number Component Default Port Range Name in staticports.ini Oracle Management Agent 1157 1157; 18120 - Oracle Management 18139 Agent port Application Server Control - RMI 1850 1850-1869, Application Server...
Page 222 Ports to Open in Firewalls For a 10g (10.1.4.0.1) instance, you need access to Oracle Internet Directory, OracleAS Metadata Repository, Oracle Notification Server, and SJP ports. You need to open the following ports used by these components in the firewall LDAP: port 389 ■...
Page 223: Deinstallation And Reinstallation
Deinstallation and Reinstallation This appendix guides you through the deinstallation and reinstallation process for Oracle Application Server. Section D.1, "Deconfig Tool" ■ Section D.2, "Deinstallation Procedure: Overview" ■ Section D.3, "Deinstalling OracleAS Cold Failover Cluster Installations" ■ Section D.4, "Deinstalling OracleAS Single Sign-On Instances in OracleAS Cluster ■...
Page 224: Parameters
Deconfig Tool If you run it without all of the parameters, the tool prompts you for the necessary information. For security reasons, it is not recommended that you specify Note: the password on the command line. The Deconfig tool will prompt you for the password if you do not specify it on the command line.
Page 225: Log Files Generated By The Deconfig Tool
Deinstallation Procedure: Overview D.1.2 Log Files Generated by the Deconfig Tool The Deconfig tool writes its log file to the ORACLE_ HOME/cfgtoollogs/DeconfigureWrapper.log file. D.2 Deinstallation Procedure: Overview Follow these high-level steps to deinstall Oracle Application Server: Deinstall middle-tier instances first. See Oracle Application Server Installation Guide for the middle-tier platform and release for deinstallation instructions.
Page 226: Deinstalling Oracleas Cold Failover Cluster Installations
Deinstalling OracleAS Cold Failover Cluster Installations Table D–1 (Cont.) Items to Deinstall Item to Clean Up Tool to Use Instance name from Farm page Installer Entries for the deleted instance in the You have to remove the entries manually. See: /var/opt/oracle directory OracleAS Step 9 on page D-7 if you ar e deinstalling...
Page 227: Deinstalling Oracleas Cluster (Identity Management
Deinstalling OracleAS Infrastructure D.5 Deinstalling OracleAS Cluster (Identity Management) To deinstall an OracleAS Cluster (Identity Management), perform the following steps. Deinstall all instances that contain OracleAS Single Sign-On except for the last instance installed. Use the steps in Section D.4, "Deinstalling OracleAS Single Sign-On Instances in OracleAS Cluster (Identity Management)"...
Page 228 Deinstalling OracleAS Infrastructure If OCA is configured on the instance you want to deinstall, run the following commands: prompt> $ORACLE_HOME/oca/bin/ocactl stop prompt> $ORACLE_HOME/oca/bin/cmdeinst ocaAdminPassword oidAdminPassword Replace ocaAdminPassword with the password of the OCA administrator. Replace oidAdminPassword with the password of the Oracle Internet Directory user who installed OCA.
Page 229: Harmless Errors In The Log File
Harmless Errors in the Log File Follow these steps in the installer. Welcome screen: Click Deinstall Products. Inventory screen: Select the instance you want to deinstall, and click Remove. Confirmation screen: Verify the components selected for deinstallation. Click Yes to continue. Deinstallation Progress screen: Monitor the progress of the deinstallation.
Page 230: Cleaning Up Oracle Application Server Processes
Cleaning Up Oracle Application Server Processes D.8 Cleaning Up Oracle Application Server Processes If you forgot to shut down Oracle Application Server processes before starting the installation, you have to kill the processes because the files for these processes are deleted.
Page 231: Configuration Assistants
Configuration Assistants This appendix lists the configuration assistants and the location of their log files. Section E.1, "Troubleshooting Configuration Assistants" ■ Section E.2, "Description of Oracle Application Server Configuration Assistants" ■ E.1 Troubleshooting Configuration Assistants Contents: Section E.1.1, "General Tips" ■...
Page 232: Configuration Assistant Result Codes
Description of Oracle Application Server Configuration Assistants <MemberOf TYPE="oracle_ias" NAME="instance2.domain.com"/> </CompositeMembership> </Target> If an optional configuration assistant fails, and it does not have any dependencies, run the remaining configuration assistants. Uncheck the cancelled optional configuration assistant, highlight and check the next listed configuration assistant, and click Retry.
Page 233 Description of Oracle Application Server Configuration Assistants Oracle Application Server Table E–2 Configuration Assistants Configuration Assistant Description Log File Location Application Starts the Oracle Management Agent and the ORACLE_HOME/cfgtoollogs/ Server Control Application Server Control to deploy applications configtoolstimestamp.log Configuration through the Oracle Enterprise Manager 10g Assistant Application Server Control.
Page 234 Description of Oracle Application Server Configuration Assistants Oracle Application Server Table E–2 (Cont.) Configuration Assistants Configuration Assistant Description Log File Location Infrastructure Updates the ORACLE_HOME/config/ ORACLE_HOME/config/ Instance ias.properties file, registers the instance with infratool_instance_jazn.log Oracle Internet Directory Configuration , and creates the Assistant Oracle Internet Directory ORACLE_HOME/cfgtoollogs/...
Page 235 Description of Oracle Application Server Configuration Assistants Oracle Application Server Table E–2 (Cont.) Configuration Assistants Configuration Assistant Description Log File Location Internet Directory Starts up Oracle Internet Directory, loads the LDAP ORACLE_HOME/cfgtoollogs/oidca.log Configuration schemas, and sets up the Oracle Identity Assistant Management realm.
Page 236 Description of Oracle Application Server Configuration Assistants Oracle Application Server Table E–2 (Cont.) Configuration Assistants Configuration Assistant Description Log File Location OracleAS Adds an entry for the instance to the ORACLE_HOME/cfgtoollogs/ Instance ORACLE_HOME/config/target2add.xml file. configtoolstimestamp.log Configuration Assistant OracleAS Changes the default password of all schemas. None Randomize Password...
Page 237 Description of Oracle Application Server Configuration Assistants Oracle Application Server Table E–2 (Cont.) Configuration Assistants Configuration Assistant Description Log File Location Single Sign-On Configures OracleAS Single Sign-On. ORACLE_HOME/sso/log/ssoca.log Configuration Before running this configuration assistant, check Assistant ORACLE_HOME/sso/log/ssoreg.log that Oracle Internet Directory, OracleAS Metadata Repository, and the Repository API are configured.
Page 238 Description of Oracle Application Server Configuration Assistants E-8 Oracle Application Server Installation Guide...
Page 239: Troubleshooting
Troubleshooting This appendix describes solutions to common problems that you might encounter when installing Oracle Application Server. It contains the following sections: Section F.1, "Log Files" ■ Section F.2, "General Troubleshooting Tips" ■ Section F.3, "Installation Problems and Solutions" ■ Section F.4, "Deinstallation Problems and Solutions"...
Page 240: Installation Problems And Solutions
Installation Problems and Solutions Remove the failed installation by following the steps in Appendix D, "Deinstallation and Reinstallation". Correct the issue that caused the error. Restart the installation. F.3 Installation Problems and Solutions This section describes common installation problems and solutions: Section F.3.1, "Location of Log Files"...
Page 241: Linking Failed, Ora Errors
Installation Problems and Solutions – oraInventory_location/logs/installActionstimestamp.log – oraInventory_location/logs/oraInstalltimestamp.err – oraInventory_location/logs/oraInstalltimestamp.out – Oracle_Home/install/make.log The configuration assistants write log files in the ORACLE_HOME/cfgtoollogs ■ directory. Note that if you want to access the log files created by the configuration assistants, you need to exit the installer first. The log files are inaccessible if the installer is still in use.
Page 242: Messages About Shmmax And Semmsl
Installation Problems and Solutions directory that you specified. If you later try to install again in the same directory, which contains some files created by the installer, the installer gives a warning that the directory is not empty. Steps to take: In the warning dialog, click No to return to the Specify File Locations screen.
Page 243: Unable To Clean Up A Failed Installation
Installation Problems and Solutions F.3.7 Unable to Clean Up a Failed Installation If your installation was not successful, you have to deinstall it first before you can install Oracle Application Server again. Refer to Appendix D, "Deinstallation and Reinstallation" for instructions. F.3.8 Forgot the Password for the cn=orcladmin Account Problem You forgot the password for the cn=orcladmin account.
Page 244: Installer Does Not Display Correct Database Name For Oracleas Metadata Repository
Installation Problems and Solutions If you are serving non-English content, be sure you add all the languages that you need during installation. To add languages during installation, click the Product Languages button in the "Select a Product to Install" screen. To see which languages are installed by default, see Section 3.4, "Installing Additional Languages".
Page 245: Oracleas Randomize Password Configuration Assistant Failures
Installation Problems and Solutions Check that the listener, database, and Oracle Internet Directory associated with the ■ OracleAS Infrastructure are up and running. If not, start them up and click the Retry button to rerun the configuration assistant that failed. Check the log files for the failed configuration assistant to determine the problem.
Page 246: Harmless Error Message From Database Configuration Assistant (Dbca
Installation Problems and Solutions at oracle.sysman.assistants.dbca.backend.PostDBCreationStep.executeImpl(Compiled Code) at oracle.sysman.assistants.dbca.backend.Step.execute(Compiled Code) at oracle.sysman.assistants.dbca.backend.Host$ModeRunner.run(Compiled Code) at java.lang.Thread.run(Thread.java:466) ERROR :oracle.sysman.assistants.util.NetAPIException Solution This error occurs if the TNS_ADMIN environment variable is set. The TNS_ADMIN environment variable should not be set (see Section 2.8.6, "TNS_ADMIN"). If it is set, unset it and rerun DBCA by clicking the Retry button in the Configuration Assistants screen.
Page 247: Opmn Configuration Assistant - Start Das Instance Failures
Installation Problems and Solutions F.3.17 OPMN Configuration Assistant - Start DAS Instance Failures Problem The OPMN Configuration Assistant - Start DAS Instance fails when you re-run it. Solution The problem is that the Oracle Delegated Administration Services instance is already running.
Page 248: Oracleas Cluster (Identity Management)- Cluster Configuration Assistant Fails
Installation Problems and Solutions F.3.20 OracleAS Cluster (Identity Management)- Cluster Configuration Assistant Fails Problem During the installation of OracleAS Cluster (Identity Management), the Cluster Configuration Assistant failed because the cluster name was typed incorrectly or the cluster was not available. Solution To cluster the instance, you must use the "dcmctl joincluster"...
Page 249: Deinstallation Problems And Solutions
Deinstallation Problems and Solutions Solution Perform the following steps to correct the problem: Start Oracle Directory Manager. prompt> cd ORACLE_HOME/bin prompt> ./oidadmin Navigate to the entry: orclApplicationCommonName=ORASSO_SSOSERVER,cn=SSO,cn=Products,cn=OracleContext Remove the instance name of the failed middle tier from the values of the attribute labeledURI.
Page 250: Unable To Reuse Instance Name Of A Deleted Instance
Deinstallation Problems and Solutions For -site_name hostname.domain, specify the computer where the middle tier is installed. Include also the domain name. For -mod_osso_url http://hostname.domain:port, specify the computer where the middle tier is installed, and the port number on which Oracle HTTP Server is listening. For -u userid, specify the operating system user who can start up the middle-tier processes.
Page 251: Deconfiguration Failed On Distributed Oracleas Cluster (Identity Management
Deinstallation Problems and Solutions Do not perform this procedure if you are deinstalling a middle Note: tier. Start up Oracle Directory Manager. Oracle home refers to the home where you installed Oracle Internet Directory. prompt> $ORACLE_HOME/bin/oidadmin In the Connect screen, enter the Oracle Internet Directory connect information. Log in as the Oracle Internet Directory superuser (cn=orcladmin).
Page 252: Need More Help
Need More Help? Solution The Deconfig tool failed because it was unable to find the $ORACLE_ HOME/Apache/Apache/conf/osso/osso-https.conf file. Perform the following steps to correct this problem: Create a link from osso-https.conf to osso.conf: cd $ORACLE_HOME/Apache/Apache/conf/osso ln osso-https.conf osso.conf Run the Deconfig tool again. F.5 Need More Help? If this appendix does not solve the problem you encountered, try these other sources: Oracle Application Server Release Notes, available on the Oracle Technology Network...
Page 253 Index how to install on separate computers, 4-4 OracleAS Infrastructure components, 4-2 adding users to groups ports used by components, 4-11 using Deployment Delegation Console, 5-14 configuration assistant errors using Oracle Directory Manager, 5-11 Database configuration assistant, F-7 additional languages, 3-3 database configuration assistant, F-8 ASM recommendations (for OracleAS Cold Failover OPMN configuration assistant - Start DAS...
Page 254 troubleshooting, F-11 Deployment Delegation Console grid control plug-in adding users to groups, 5-14 installing, A-1 directories, integration with third-party, 4-11 starting the installer, A-1 disk space requirements, 2-4 grid control plug-in agent DISPLAY environment variable, 2-19 installing, A-3 distributed OracleAS Cluster (Identity groupadd command, 2-16 Management), 9-15 groups (operating system)
Page 255 installing in non-empty directory, F-3 names of instances installing the grid control plug-in, A-1 see instance names installing the grid control plug-in agent, A-3 namespace in Oracle Internet Directory, 4-11 instance names, 3-3 Network Appliance filers, 2-25 how they are used, 3-4 network requirements, 2-2 reusing, F-12 network topics, 2-22...
Page 256 Oracle Enterprise Manager Application Server ORACLE_SID environment variable, 2-19 Control OracleAS Certificate Authority URL, 11-1 adding after installation, 4-12 Oracle home directory, 3-1 groups required for installation, 5-5 Oracle HTTP Server in silent and non-interactive installations, B-2 in NFS installations, 11-2 installing, 4-21 Oracle Internet Directory, 5-1 OracleAS Cluster...
Page 257 Oracle Data Guard, 10-6 oraInventory directory, 2-16, 3-2 setting up, 10-3 orcladmin user, 5-2 setting up identical hostnames, 10-4 password, 5-2 staticports.ini file, 10-3 OSDBA group, 2-17 with OracleAS Cold Failover Cluster, 10-8 OSOPER group, 2-17 OracleAS Forms Services groups required for installation, 5-6 OracleAS Infrastructure, 4-1 passwd command, 2-18 components, 4-2...
Page 258 creating, B-3 creating using the record mode, B-3 /tmp directory, 3-6 examples, B-4 space required in, 2-4 specifying on command-line, B-10 TNS_ADMIN environment variable, 2-20, F-8 templates, B-3 tnsnames.ora file, 2-20 reusing database name, F-12 topologies root user, 3-6 10.1.4.0.1 identity federation, 1-3 root.sh, 3-6 10.1.4.0.1 infrastructure, 1-3 runInstaller command...

This manual is also suitable for:

Application server 10g

Oracle Application Server B32100-01 Installation Manual

Preface

1 Product and Installation Overview

2 Requirements

3 Things You Should Know before Starting the Installation

4 Installing Oracleas Infrastructure

5 Configuring Oracle Internet Directory for Oracle Application Server Installation Privileges

6 Installing Oracle Internet Directory in Replicated Mode

7 Installing in High Availability Environments: Overview

8 Installing in High Availability Environments: Oracleas Cold Failover Cluster

9 Installing in High Availability Environments: Oracleas Cluster (Identity Management)

10 Installing in High Availability Environments: Oracleas Disaster Recovery

11 Post-Installation Tasks

Installing the Oracle Identity Management Grid Control Plug-In

Silent and Non-Interactive Installation

Default Port Numbers

Deinstallation and Reinstallation

Quick Links

Troubleshooting

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Oracle Application Server B32100-01

Summary of Contents for Oracle Application Server B32100-01