5 Installing and Configuring Oracle DIP and ODSM

5.2.1 Install and Configure DIP and ODSM on IDMHOST2

Follow these steps to install and configure Oracle Directory Integration Platform and Oracle Directory Service Manager on IDMHOST2:

1. Ensure that the system, patch, kernel and other requirements are met. These are listed in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management manual in the Oracle Fusion Middleware documentation library for the platform and version you are using.

2. Ensure that port number 7006 is not in use by any service on the computer by issuing this command for the operating system you are using. If a port is not in use, no output is returned from the command.

   On UNIX:

   netstat -an | grep "7006"
   

   If the port is in use (if the command returns output identifying the port), you must free it.

   On UNIX:

   Remove the entries for port 7006 in the /etc/services file if the port is in use by a service and restart the services, or restart the computer.

3. Copy the staticports.ini file from the Disk1/stage/Response directory to a temporary directory.

4. Edit the staticports.ini file that you copied to the temporary directory to assign the following custom port:

   #The port for ODSM Server port
   ODS Server Port No: 7006
   

5. Start the Oracle Identity Management 11g Installer as follows:

   On UNIX, issue this command: runInstaller

   The runInstaller file is in the ../install/platform directory where platform is a platform such as Linux or Solaris.

   The Specify Oracle Inventory screen is displayed.

6. On the Specify Inventory Directory screen, enter values for the Oracle Inventory Directory and the Operating System Group Name. For example:

   Specify the Inventory Directory: /u01/app/oraInventory

   Operating System Group Name: oinstall

   A dialog box appears with the following message:

   "Certain actions need to be performed with root privileges before the install can continue. Please execute the script /u01/app/oraInventory/createCentralInventory.sh now from another window and then press "Ok" to continue the install. If you do not have the root privileges and wish to continue the install select the "Continue installation with local inventory" option"

   Login as root and run the "/u01/app/oraInventory/createCentralInventory.sh"

   This sets the required permissions for the Oracle Inventory Directory and then brings up the Welcome screen.

   Note:

   The Oracle Inventory screen is not shown if an Oracle product was previously installed on the host. If the Oracle Inventory screen is not displayed for this installation, make sure to check and see:

   1. If the /etc/oraInst file exists

   2. If the file exists, the Inventory directory listed is valid

   3. The user performing the installation has write permissions for the Inventory directory

7. On the Welcome screen, click Next.

8. On the Select Installation Type screen, select Install and Configure and then click Next.

9. On the Prerequisite Checks screen, the installer completes the prerequisite checks. If any fail, please fix them and restart your Installation.

   Click Next.

10. On the Select Domain screen, select the Expand Cluster option and specify these values:

    • Hostname: idmhost1.mycompany.com

    • Port: 7001

    • UserName: weblogic

    • User Password: <Enter the password for the webLogic user>

    Click Next.

11. On the Specify Installation Location screen, specify these values:

    • Oracle Middleware Home Location:

      /u01/app/oracle/product/fmw
      

    • Oracle Home Directory: idm

    • WebLogic Server Directory:

      /u01/app/oracle/product/fmw/wlserver_10.3
      

    • Oracle Instance Location:

      /u01/app/oracle/admin/idm_inst2
      

    • Oracle Instance Name: idm_inst2

    Click Next.

12. On the Email for Security Updates screen, specify these values:

    • Email Address: Provide the email address for your My Oracle Support account.

    • Oracle Support Password: Provide the password for your My Oracle Support account.

    • Check the checkbox next to the I wish to receive security updates via My Oracle Support field.

    Click Next.

13. On the Configure Components screen, de-select all the products except Oracle DIP and Management Components and then click Next.

14. On the Configure Ports screen, select Specify Ports Using Configuration File and enter the full pathname to the staticports.ini file that you edited in the temporary directory.

    Click Next.

15. On the Installation Summary screen, review the selections to ensure that they are correct (if they are not, click Back to modify selections on previous screens), and click Install.

16. On the Installation Progress screen on UNIX systems, a dialog box appears that prompts you to run the oracleRoot.sh script. Open a window, log in as root, and run the script, following the prompts in the window.

    Click Next.

17. On the Configuration Progress screen, multiple configuration assistants are launched in succession; this process can be lengthy. Wait until it completes.

18. On the Installation Complete screen, click Finish to confirm your choice to exit.

5.2.2 Post-Installation Steps

In the previous section, the installer created a second Managed Server, wls_ods2 on IDMHOST2. However, the Oracle Directory Integration Platform application is not deployed on IDMHOST2 and the newly created Managed Server is not automatically started. Also, the WebLogic Administration Console shows the state of the wls_od2 Managed Server on IDMHOST2 as UNKNOWN.

Follow the post-installation steps in this section to complete the installation and configuration of the Oracle Directory Integration Platform and Oracle Directory Services Manager applications on IDMHOST2.

5.3.1 Validating Oracle Directory Services Manager

Follow these steps to validate the Oracle Directory Services Manager installation:

1. Bring up the Oracle Directory Services Manager (ODSM) Administration Console in a web browser. The URL to access the ODSM Administration Console is:

   http://hostname.mycompany.com:port/odsm/faces.odsm.jspx
   

   For example, on IDMHOST1, enter this URL:

   http://idmhost1.mycompany.com:7006/odsm/faces/odsm.jspx
   

   And on IDMHOST2, enter this URL:

   http://idmhost2.mycompany.com:7006/odsm/faces/odsm.jspx
   

2. Validate that Oracle Directory Services Manager can create connections to Oracle Internet Directory and Oracle Virtual Directory. Follow these steps to create connections to Oracle Internet Directory and Oracle Virtual Directory:

   To create connections to Oracle Internet Directory, follow these steps:

   1. Launch Oracle Directory Services Manager from IDMHOST1:

      http://idmhost1.mycompany.com:7006/odsm/faces/odsm.jspx
      

   2. Create a connection to the Oracle Internet Directory virtual host by providing the information shown below in the ODSM Console:

      Host: oid.mycompany.com
      Port: 636
      Enable the SSL option
      User: cn=orcladmin
      Password: <ldap-password>
      

   To create connections to Oracle Virtual Directory, follow these steps. Create connections to each Oracle Virtual Directory node separately. Using the Oracle Virtual Directory load balancer virtual host from the ODSM Console is not supported:

   1. Launch Oracle Directory Services Manager from IDMHOST1:

      http://idmhost1.mycompany.com:7006/odsm/faces/odsm.jspx
      

   2. Create a direct connection to Oracle Virtual Directory on OVDHOST1 providing the information shown below in the ODSM Console:

      Host: ovdhost1.mycompany.com
      Port: 8899  (The Oracle Virtual Directory proxy port)
      Enable the SSL option
      User: cn=orcladmin
      Password: <ldap-password>
      

5.3.2 Validating Oracle Directory Integration Platform

Validate the Oracle Directory Integration Platform installation by using the WLST dipStatus command. To run this command, follow these steps:

1. Set the ORACLE_HOME environment variable to the directory where you installed the Identity Management binaries. For example:

   export ORACLE_HOME=/u01/app/oracle/product/fmw/idm
   

2. Set the WLS_HOME environment variable to the directory where you installed the WebLogic Server. For example:

   export WLS_HOME=/u01/app/oracle/product/fmw/wlserver_10.3
   

3. Run the ORACLE_HOME/bin/dipStatus -h hostName -p port -D wlsuser command.

   For example, on IDMHOST1, the command and output look like this:

   ORACLE_HOME/bin/dipStatus -h idmhost1.mycompany.com -p 7006 -D weblogic
   [Weblogic user password]
   Connection parameters initialized.
   Connecting at idmhost1.mycompany.com:7006, with userid "weblogic"..
   Connected successfully.
   
   ODIP Application is active at this host and port.
   

   For example, on IDMHOST2, the command and output look like this:

   ORACLE_HOME/bin/dipStatus -h idmhost2.mycompany.com -p 7006 -D weblogic
   [Weblogic user password]
   Connection parameters initialized.
   Connecting at idmhost2.mycompany.com:7006, with userid "weblogic"..
   Connected successfully.
   
   ODIP Application is active at this host and port.