Oracle® Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management 11g Release 1 (11.1.1) Part Number E12035-06 |
|
|
View PDF |
This chapter contains the following topics:
Section 4.4, "Installing Oracle HTTP Server on WEBHOST1 and WEBHOST2"
Section 4.8, "Upgrading Existing Enterprise Deployment Topologies"
This chapter describes the software installations required for Oracle Identity Management. The installation is divided in two sections. In the first one, the WebTier required installations are addressed. In the second, the required Oracle Fusion Middleware components are installed. Later chapters will describe the configuration steps to create the Oracle Identity Management topology.
Different topologies use different servers. Before moving on to the detail of creating your topology, you must install the Oracle Software needs onto the hosts in your topology.
The Table 4-1 shows, for each topology, which software should be installed into each host.
The subsequent sections explain how to do this.
Note:
Each topology requires the same software to be installed at least twice on two different servers. To achieve this, follow the instructions for installing the appropriate software on each of the servers concerned.Where the two different pieces of Oracle binary software are installed onto the same host (for example OIM11g and OAM10g), this software will be installed in the same Middleware home location, but in different Oracle homes.
All software uses the same Middleware home location.
Different topologies require different software to be installed. The installation process is the same for each product. Install the software shown in Table 4-1 and Table 4-2 for the desired topology, according to the instructions in this chapter
Table 4-1 Software to be Installed for Different Topologies
Topology | Hosts | OHS 11g | WLS | IAM | SOA | IDM | OAM 10g | |
---|---|---|---|---|---|---|---|---|
All |
WEBHOST1 |
X |
||||||
WEBHOST2 |
X |
|||||||
OAM11g |
IDMHOST1 |
X |
X |
X |
||||
IDMHOST2 |
X |
X |
X |
|||||
OIDHOST1 |
X |
|||||||
OIDHOST2 |
X |
|||||||
OVDHOST1 |
X |
|||||||
OVDHOST2 |
X |
|||||||
OAAM11g |
IDMHOST1 |
X |
X |
X |
||||
IDMHOST2 |
X |
X |
X |
|||||
OAAMHOST1 |
X |
X |
X |
|||||
OAAMHOST2 |
X |
X |
X |
|||||
OIDHOST1 |
X |
|||||||
OIDHOST2 |
X |
|||||||
OVDHOST1 |
X |
|||||||
OVDHOST2 |
X |
|||||||
OAM11g/OIM11g |
IDMHOST1 |
X |
X |
|||||
IDMHOST2 |
X |
X |
||||||
OIMHOST1 |
X |
X |
X |
X |
||||
OIMHOST2 |
X |
X |
X |
X |
||||
OIDHOST1 |
X |
|||||||
OIDHOST2 |
X |
|||||||
OVDHOST1 |
X |
|||||||
OVDHOST2 |
X |
|||||||
OAM10g/ OIM11g |
IDMHOST1 |
X |
X |
X |
X |
|||
IDMHOST2 |
X |
X |
X |
X |
||||
OAMADMINHOST |
X |
X |
||||||
OAMHOST1 |
X |
|||||||
OAMHOST2 |
X |
|||||||
OIMHOST1 |
X |
X |
X |
X |
||||
OIMHOST2 |
X |
X |
X |
X |
||||
OIDHOST1 |
X |
|||||||
OIDHOST2 |
X |
|||||||
OVDHOST1 |
X |
|||||||
OVDHOST2 |
||||||||
OIF11g/OAM11g |
IDMHOST1 |
X |
X |
X |
X |
|||
IDMHOST2 |
X |
X |
X |
X |
||||
OIFHOST1 |
X |
X |
X |
X |
||||
OIFHOST2 |
X |
X |
X |
X |
||||
OIDHOST1 |
X |
|||||||
OIDHOST2 |
X |
|||||||
OVDHOST1 |
X |
|||||||
OVDHOST2 |
X |
Table 4-2 Software Versions Used
Abbreviation | Product | Version |
---|---|---|
OHS11G |
Oracle HTTP Server |
11.1.1.3.0 |
WLS |
Oracle WebLogic Server |
10.3.3.0 |
IAM |
Oracle Identity Management Suite |
11.1.1.3.0 |
SOA |
Oracle SOA Suite |
11.1.1.3.0 |
IDM |
Oracle Identity Management Platform and Directory Services |
11.1.1.3.0 |
OAM10g |
Oracle Access Manager |
10.1.4.3 |
Some of the topologies require two versions of the Identity Management software to be installed (see Table 4-1. In this scenario, the relevant Identity Management software is installed into separate Oracle homes.
This section explains how to install OHS.
This section contains the following topics:
Prior to installing the Oracle HTTP server, check that your machines meet the following requirements:
Ensure that the system, patch, kernel, and other requirements are met as specified in Oracle Fusion Middleware Installation Guide for Oracle Web Tier.
Ensure that port 7777 is not in use, as described in Section 4.4.1.1.
On Linux platforms, if the /etc/oraInst.loc
file exists, check that its contents are correct, as described in Section 4.4.1.2.
Because Oracle HTTP Server is installed by default on port 7777, you must ensure that port 7777 is not used by any other service on the nodes. To check if this port is in use, run the following command before installing Oracle HTTP Server. You must free the port if it is in use.
netstat -an | grep 7777
Check that the inventory directory is correct and that you have write permissions for that directory. If the /etc/oraInst.loc
file does not exist, you can skip this step.
The contents of the oraInst.loc
file are shown in this example:
inventory_loc=/u01/app/oraInventory inst_group=oinstall
As described in Section 2.4, "Shared Storage and Recommended Directory Structure," you install Oracle Fusion Middleware in at least two storage locations for redundancy.Start the Oracle Universal Installer as follows:
On UNIX, issue the command
runInstaller
On Windows, double-click setup.exe
.
Before Starting the install, ensure that the following environment variables are not set.
LD_ASSUME_KERNEL
ORACLE_INSTANCE
On the Specify Inventory Directory screen, do the following:
Enter HOME
/oraInventory
, where HOME is the home directory of the user performing the installation (this is the recommended location).
Enter the OS group for the user performing the installation.
Click Next.
Follow the instructions on screen to execute createCentralInventory.sh
as root
.
Click OK.
Proceed as follows:
On the Specify Oracle Inventory Directory screen, enter HOME
/oraInventory
, where HOME
is the home directory of the user performing the installation. (This is the recommended location).
Enter the OS group for the user performing the installation.
Click Next.
On the Welcome screen, click Next.
On the Select Installation Type screen, select Install–Do Not Configure
Click Next.
On the Prerequisite Checks screen, click Next.
On the Specify Installation Location screen, specify the following values:
Fusion Middleware Home Location (Installation Location) For example:
/u01/app/oracle/product/fmw
Oracle Home Location Directory: web
On the Specify SecurityUpdates screen, choose whether or not to receive security updates from Oracle support.
Click Next.
On the Installation Summary screen, review the selections to ensure that they are correct (if they are not, click Back to modify selections on previous screens), and click Install.
On UNIX systems, when prompted, run the script oracleRoot.sh
as the user root
.
Follow these steps to upgrade the OHS ORACLE_HOME from 11.1.1.2 to 11.1.1.3 on WEBHOST1
and WEBHOST2
:
Start the WebTier Patchset Installer by running ./runInstaller
.
On the Welcome screen, click Next.
On the Prerequisite Checks screen, click Next.
On the Specify Install Location screen, provide the path to the Oracle Middleware home and the name of the Oracle home directory.
On the Installation Summary screen, validate your selections and click Install.
The Installation Progress screen shows the progress of the installation. Once the installation is complete, click Next.
On the Installation Complete Screen, click Finish to exit.
This section describes how to install Oracle Fusion Middleware.
This section contains the following topics:
Section 4.5.1, "Installing Oracle Fusion Middleware Components"
Section 4.5.4, "Installing the OIM Platform and Directory Services Suite"
This section describes how to install the required binaries to create the, Middleware home (MW_HOME
), the Oracle WebLogic Server home (WL_HOME
), the Oracle homes for the Identity Management Platform and Directory Services Suite Release 11.1.1.3.0 (IDM_ORACLE_HOME
), the Oracle SOA Suite (SOA_ORACLE_HOME
) and the Oracle Identity Management Suite Release 11.1.1.3.0 (IAM_ORACLE_HOME
). A summary of these homes is provided in Table 4-3.
Table 4-3 Summary of Homes
Home Name | Home Description | Products Installed |
---|---|---|
|
Consists of the Oracle WebLogic Server home and, optionally, one or more Oracle homes. |
|
|
This is the root directory in which Oracle WebLogic Server is installed. The WL_HOME directory is a peer of Oracle home directory and resides with the MW_HOME |
|
|
Contains the binary and library files for the Identity Management Platform and Directory Services Suite Release 11.1.1.3.0. Resides within the directory structure of the Middleware Home |
|
|
Contains the binary and library files required for the Oracle Identity Management Suite Release 11.1.1.3.Resides within the directory structure of the Middleware home |
|
|
Contains the binary and library files required for the Oracle SOA Suite.Required only when creating topologies with OIM.Resides within the directory structure of the Middleware home. |
|
Oracle strongly recommends that you read the release notes for any additional installation and deployment considerations prior to starting the setup process.
As described in Section 2.4, "Shared Storage and Recommended Directory Structure," you install Oracle Fusion Middleware software in at least two storage locations for redundancy.
You must install the following components of Oracle Fusion Middleware to create a Middleware home (MW_HOME
):
Oracle WebLogic Server: Section 4.5.3, "Installing Oracle WebLogic Server"
One or more of the Oracle Fusion Middleware components
Oracle Fusion Middleware for Identity Management (see Section,
Prior to installing the Oracle WebLogic Server, ensure that your machines meet the system, patch, kernel, and other requirements as specified in Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server.
The first step in the installation procedure is to install Oracle WebLogic Server. On UNIX/Linux, issue the command:
./wls_lin32.bin
On Windows, execute the command:
wls_win32.exe
Then proceed as follows.
On the Welcome screen, click Next.
On the Choose Middleware Home Directory screen, select Create a New Middleware Home.
For Middleware Home Directory, enter:
ORACLE_BASE
/product/fmw
.
Note:
ORACLE_BASE
is the base directory under which Oracle products are installed. The recommended value is /u01/app/oracle
. See Section 2.4, "Shared Storage and Recommended Directory Structure," for more information.Click Next.
On the Register for Security Updates screen, enter your "My Oracle Support" username and password so that you can be notified of security updates.
Click Next.
On the Choose Install Type screen, select Typical.
Note:
Oracle WebLogic Server and Oracle Coherence are installed.Click Next.
On the Choose Product Installation Directories screen, accept the following:
Middleware Home Directory: ORACLE_BASE
/product/fmw
Product Installation Directories for
WebLogic Server:ORACLE_BASE
/product/fmw/wlserver_10.3
Oracle Coherence: ORACLE_BASE
/product/fmw/ coherence_3.5
Click Next.
On the Installation Summary screen, click Next to start the install process.
On the Installation complete screen, deselect run Quickstart.
Click Done to exit the WebLogic Server Installer.
Note:
Because the installation is performed on shared storage, the twoMW_HOME
installations are accessible and used by the remaining servers in that tier of the topology.
When provisioning the software on the local hard disk of the machine, make sure to complete the steps on all the hosts in the tier.
Ensure that the system, patch, kernel and other requirements are met. These are listed in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management in the Oracle Fusion Middleware documentation library for the platform and version you are using.
Start the Oracle Fusion Middleware 11g Oracle Identity Management Installer as follows:
HOST1> runInstaller
Then proceed as follows:
On the Specify Inventory Directory screen, enter values for the Oracle Inventory Directory and the Operating System Group Name. For example:
Specify the Inventory Directory: /u01/app/oraInventory
Operating System Group Name: oinstall
A dialog box appears with the following message:
Certain actions need to be performed with root privileges before the install can continue. Please execute the script /u01/app/oraInventory/createCentralInventory.sh now from another window and then press "Ok" to continue the install. If you do not have the root privileges and wish to continue the install select the "Continue installation with local inventory" option.
Log in as root
and run:
/u01/app/oraInventory/createCentralInventory.sh
This sets the required permissions for the Oracle Inventory Directory and then brings up the Welcome screen.
Note:
The Oracle Inventory screen is not shown if an Oracle product was previously installed on the host. If the Oracle Inventory screen is not displayed for this installation, make sure to check that the following are true:The /etc/oraInst.loc
file exists.
The Inventory directory listed is valid.
The user performing the installation has write permissions for the Inventory directory.
On the Welcome screen, click Next.
On the Select Installation Type screen, select Install Software - Do Not Configure, and then click Next.
On the Prerequisite Checks screen, verify that the checks complete successfully, then click Next.
On the Specify Installation Location screen, enter the following values:
Oracle Middleware Home: Select the previously installed Middleware home from the list for MW_HOME
, for example
/u01/app/oracle/product/fmw
Oracle Home Directory: Enter "idm
as the Oracle home directory name.
Click Next.
On the Specify Email for Security Updates screen, specify these values:
Email Address: The email address for your My Oracle Support account.
Oracle Support Password: The password for your My Oracle Support account.
Select I wish to receive security updates via My Oracle Support.
Click Next.
On the Installation Summary screen, click Install.
When prompted, on Linux and UNIX installations, execute the script oracleRoot.sh
as the root
user.
On the Installation Progress screen, on Linux and UNIX systems, a dialog box appears that prompts you to run the oracleRoot.sh
script. Open a window and run the oracleRoot.sh
script, as the root
user.
On the Installation Complete screen, click Finish.
Perform these steps to install the Oracle Identity Management Platform and Directory Services Suite on IDMHOST1
and IDMHOST2
.
Ensure that the system, patch, kernel and other requirements are met. These are listed in the Oracle Fusion Middleware Installation Guide for Oracle SOA Suite in the Oracle Fusion Middleware documentation library for the platform and version you are using.
Start the Oracle Fusion Middleware 11g SOA Suite Installer as follows:
HOST1>./ runInstaller
When the installer prompts you for a JRE/JDK location, enter the Oracle SDK location created in the Oracle WebLogic Server installation, for example:
/u01/app/product/fmw/jrockit_160_14_R27.6.5-32.
Then perform these installation steps:
On the Specify Inventory Directory screen, enter values for the Oracle Inventory Directory and the Operating System Group Name. For example:
Specify the Inventory Directory: /u01/app/oraInventory
Operating System Group Name: oinstall
A dialog box appears with the following message:
Certain actions need to be performed with root privileges before the install can continue. Please execute the script /u01/app/oraInventory/createCentralInventory.sh now from another window and then press "Ok" to continue the install. If you do not have the root privileges and wish to continue the install select the "Continue installation with local inventory" option.
Log in as root
and run:
/u01/app/oraInventory/createCentralInventory.sh
This sets the required permissions for the Oracle Inventory Directory and then brings up the Welcome screen.
Note:
The Oracle Inventory screen is not shown if an Oracle product was previously installed on the host. If the Oracle Inventory screen is not displayed for this installation, check the following:The /etc/oraInst.lo
c file exists.
The Inventory directory listed is valid.
The user performing the installation has write permissions for the Inventory directory.
On the Welcome screen, click Next.
On the Prerequisite Checks screen, verify that the checks complete successfully, and then click Next.
On the Specify Installation Location screen, enter the following values:
Oracle Middle Ware Home: Select a previously installed Middleware Home from the drop-down list. For example: /u01/app/oracle/product/fmw
Oracle Home Directory: Enter soa
as the Oracle home directory name.Click Next.
On the Installation Summary screen, click Install.
On the Installation Complete screen, click Finish.
The Oracle homes for the Oracle Identity Management Suite 11.1.1.2 (IDM_ORACLE_HOME
) and the Oracle SOA Suite (SOA_ORACLE_HOME
) must be upgraded to Release 11.1.1.3 before creating the Identity Management domain. This section provides the steps to upgrade the IDM_ORACLE_HOME
and the SOA_ORACLE_HOME
.
This section contains the following topics:
Follow the steps in this section to upgrade the IDM_ORACLE_HOME
from Release 11.1.1.2 to 11.1.1.3 using Oracle Universal Installer. Complete these step on IDMHOST1
and IDMHOST2
. Ensure that your machines meet all the prerequisites listed in the Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management. Start the Oracle Identity Management Patch Set installer as follows:
HOST1> ./runInstaller
Then proceed as follows
On the Welcome screen, click Next.
On the Prerequisite Checks screen, verify that the checks complete successfully, then click Next.
On the Specify Installation Location screen, enter the following values:
Oracle Middleware Home: Select the previously installed Middleware Home from the list, for example:/u01/app/oracle/product/fmw
Oracle Home Directory: Enter idm
as the Oracle home directory. This Oracle home contains the Oracle Identity Management Suite binaries that will be upgraded from 11.1.1.2 to 11.1.1.3.
Click Next.
On the Specify Security Updates screen, enter these values:
Email Address: The email address for your My Oracle Support account.
Oracle Support Password: The password for your My Oracle Support account.
Select I wish to receive security updates via My Oracle Support.
Click Next.
On the Installation Summary screen, click Install. When prompted, on Linux and UNIX installations, execute the script oracleRoot.sh
as the root
user.
On the Installation Complete screen, click Finish.
Follow the steps in this section to upgrade the SOA_ORACLE_HOME
from release 11.1.1.2 to 11.1.1.3 using the Oracle SOA Suite Patch Set installer. Complete these step on IDMHOST1
and IDMHOST2
. Ensure that your machines meet all the prerequisites listed in the Oracle Fusion Middleware Upgrade Guide for Oracle SOA Suite, WebCenter, and ADF.
Start the Oracle SOA Suite Patch Set installer by typing:
HOST1> ./runInstaller
When the installer prompts you for a JRE/JDK location, enter the Oracle SDK location created in the Oracle WebLogic Server installation, for example:
ORACLE_BASE/product/fmw/jrockit_160_14_R27.6.5-32
Then proceed as follows:
On the Welcome screen, click Next.
On the Prerequisite Checks screen, verify that the checks complete successfully, then click Next.
On the Specify Installation Location screen, enter the following Values:
Oracle Middleware Home: Select the previously installed Middleware Home from the drop-down list, for example: /u01/app/oracle/product/fmw
.
Oracle Home Directory: Enter soa
as the Oracle home directory. This Oracle home contains the Oracle SOA Suite binaries that will be upgraded from 11.1.1.2 to 11.1.1.3.
Click Next.
On the Installation Summary screen, click Install. When prompted, on Linux and UNIX installations, execute the script oracleRoot.sh
as the root
user.
On the Installation Complete screen, click Finish.
Ensure that the system, patch, kernel and other requirements are met. These are listed in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management in the Oracle Fusion Middleware documentation library for the platform and version you are using.
Start the Oracle Fusion Middleware 11g Oracle Identity Management Installer as follows:
HOST1>./ runInstaller
When the installer prompts you for a JRE/JDK location, enter the Oracle SDK location created in the Oracle WebLogic Server installation, for example:
/u01/app/product/fmw/jrockit_160_14_R27.6.5-32
Then perform these installation steps:
On the Specify Inventory Directory screen, enter values for the Oracle Inventory Directory and the Operating System Group Name. For example:
Specify the Inventory Directory: /u01/app/oraInventory
Operating System Group Name: oinstall
A dialog box appears with the following message:
Certain actions need to be performed with root privileges before the install can continue. Please execute the script /u01/app/oraInventory/createCentralInventory.sh now from another window and then press "Ok" to continue the install. If you do not have the root privileges and wish to continue the install select the "Continue installation with local inventory" option.
Log in as root
and run:
/u01/app/oraInventory/createCentralInventory.sh
This sets the required permissions for the Oracle Inventory Directory and then brings up the Welcome screen.
Note:
The Oracle Inventory screen is not shown if an Oracle product was previously installed on the host. If the Oracle Inventory screen is not displayed for this installation, check the following:The /etc/oraInst.loc
file exists.
The Inventory directory listed is valid.
The user performing the installation has write permissions for the Inventory directory.
On the Welcome screen click Next.
On the Prerequisite Checks screen, verify that the checks complete successfully, then click Next.
On the Specify Installation Location screen, enter the following values:
Oracle Middle Ware Home: Select a previously installed Middleware Home from the drop-down list. For example: /u01/app/oracle/product/fmw
Oracle Home Directory: Enter iam
" as the Oracle home directory name.
Click Next.
On the Installation Summary screen, click Install.
On the Installation Complete screen, click Finish.
This section describes how to apply patches after installing the software. For a complete list of patches, see the Oracle Fusion Middleware Release Notes for your platform and operating system.
This section contains the following topics:
Download Patch 9674375
from My Oracle Support at https://support.oracle.com
. Patch all the common Oracle homes in your environment with this patch.
Note:
Patch9674375
need not be applied to OIDHOST1
, OIDHOST2
, OVDHOST1
,OVDHOST2
, WEBHOST1
and WEBHOST2
Make sure that your environment meets the prerequisites listed in the Readme
file that is shipped with the patch. Follow these steps to apply the patch:
Unzip the patch. This creates a directory called 9674375
.
Set your Oracle home to the Oracle common home and make sure that the ORACLE_HOME
/OPatch
directory is in your path.
Navigate to the 9674375
directory.
Apply the patch using the opatch
apply
command.
Answer Y
in response to the question:
Is the local system ready for patching? [y|n].
For example:
export ORACLE_HOME=MW_HOME/oracle_common export PATH=$ORACLE_HOME/OPatch:$PATH prompt> cd 9674375 prompt> opatch
The output looks similar to this:
Prompt> opatch apply Invoking OPatch 11.1.0.8.0 Oracle Interim Patch Installer version 11.1.0.8.0 Copyright (c) 2009, Oracle Corporation. All rights reserved. Oracle Home : /u01/app/oracle/product/fmw/oracle_common Central Inventory : /u01/app/oraInventory from : /etc/oraInst.loc OPatch version : 11.1.0.8.0 OUI version : 11.1.0.8.0 OUI location : /u01/app/oracle/product/fmw/oracle_common/oui Log file location : /u01/app/oracle/product/fmw/oracle_common/cfgtoollogs/opatch/opatch2010-07-30_17-07-36PM.log Patch history file: /u01/app/oracle/product/fmw/oracle_common/cfgtoollogs/opatch/opatch_history.txt OPatch detects the Middleware Home as "/u01/app/oracle/product/fmw" ApplySession applying interim patch '9674375' to OH '/u01/app/oracle/product/fmw/oracle_common' Running prerequisite checks... OPatch detected non-cluster Oracle Home from the inventory and will patch the local system only. Please shutdown Oracle instances running out of this ORACLE_HOME on the local system. (Oracle Home = '/u01/app/oracle/product/fmw/oracle_common') Is the local system ready for patching? [y|n] y User Responded with: Y Backing up files and inventory (not for auto-rollback) for the Oracle Home Backing up files affected by the patch '9674375' for restore. This might take a while... Backing up files affected by the patch '9674375' for rollback. This might take a while... Patching component oracle.jrf.adfrt, 11.1.1.3.0... Copying file to "/u01/app/oracle/product/fmw/oracle_common/modules/oracle.adf.share_11.1.1/adf-share-support.jar" ApplySession adding interim patch '9674375' to inventory Verifying the update... Inventory check OK: Patch ID 9674375 is registered in Oracle Home inventory with proper meta-data. Files check OK: Files from Patch ID 9674375 are present in Oracle Home. The local system has been patched and can be restarted. OPatch succeeded.
Download Patch 9817469
from My Oracle Support at https://support.oracle.com
. Patch all the common Oracle homes in your environment with this patch.
Note:
Patch9817469
need not be applied to OIDHOST1
, OIDHOST2
, OVDHOST1
,OVDHOST2
, WEBHOST1
and WEBHOST2
.Make sure that your environment meets the prerequisites listed in the Readme
file that is shipped with the patch. Follow these steps to apply the patch:
Unzip the patch. This creates a directory called 9817469
.
Set your Oracle home to the Oracle common home and make sure that the ORACLE_HOME
/OPatch
directory is in your path.
Navigate to the 9817469
directory.
Apply the patch using the opatch
apply
command.
Answer Y
when you see the question Is the local system ready for patching? [y|n].
For example:
export ORACLE_HOME=MW_HOME/oracle_common export PATH=$ORACLE_HOME/OPatch:$PATH prompt> cd 9817469 prompt> opatch apply
The output looks similar to this:
Prompt> opatch apply Invoking OPatch 11.1.0.8.0 Oracle Interim Patch Installer version 11.1.0.8.0 Copyright (c) 2009, Oracle Corporation. All rights reserved. Oracle Home : /u01/app/oracle/product/fmw/oracle_common Central Inventory : /u01/app/oraInventory from : /etc/oraInst.loc OPatch version : 11.1.0.8.0 OUI version : 11.1.0.8.0 OUI location : /u01/app/oracle/product/fmw/oracle_common/oui Log file location : /u01/app/oracle/product/fmw/oracle_common/cfgtoollogs/opatch/opatch2010-07-30_17-11-14PM.log Patch history file: /u01/app/oracle/product/fmw/oracle_common/cfgtoollogs/opatch/opatch_history.txt OPatch detects the Middleware Home as "/u01/app/oracle//product/fmw" ApplySession applying interim patch '9817469' to OH '/u01/app/oracle/product/fmw/oracle_common' Running prerequisite checks... OPatch detected non-cluster Oracle Home from the inventory and will patch the local system only. Please shutdown Oracle instances running out of this ORACLE_HOME on the local system. (Oracle Home = '/u01/app/oracle/product/fmw/oracle_common') Is the local system ready for patching? [y|n] y User Responded with: Y Backing up files and inventory (not for auto-rollback) for the Oracle Home Backing up files affected by the patch '9817469' for restore. This might take a while... Backing up files affected by the patch '9817469' for rollback. This might take a while... Patching component oracle.jrf.adfrt, 11.1.1.3.0... Copying file to "/u01/app/oracle/product/fmw/oracle_common/modules/oracle.adf.model_11.1.1/adfm.jar" Copying file to "/u01/app/oracle/product/fmw/oracle_common/modules/oracle.adf.model_11.1.1/adf.oracle.domain.ear" ApplySession adding interim patch '9817469' to inventory Verifying the update... Inventory check OK: Patch ID 9817469 is registered in Oracle Home inventory with proper meta-data. Files check OK: Files from Patch ID 9817469 are present in Oracle Home. The local system has been patched and can be restarted.
Download Patch 9882205
from My Oracle Support at https://support.oracle.com
. Patch all the common Oracle homes in your environment with this patch.
Note:
Patch9882205
need not be applied to OIDHOST1
, OIDHOST2
, OVDHOST1
,OVDHOST2
, WEBHOST1
and WEBHOST2
Make sure that your environment meets the prerequisites listed in the Readme
file that is shipped with the patch. Follow these steps to apply the patch:
Unzip the patch. This creates a directory called 9882205
.
Set your Oracle home to the Oracle common home and make sure that the ORACLE_HOME
/OPatch
directory is in your path.
Navigate to the 9882205
directory.
Apply the patch using the opatch
apply
command.
Answer Y
when you see the question:
Is the local system ready for patching? [y|n].
For example:
export ORACLE_HOME=MW_HOME/oracle_common export PATH=$ORACLE_HOME/OPatch:$PATH prompt> cd 9882205 prompt> opatch apply
The output looks similar to this:
Prompt> opatch apply Invoking OPatch 11.1.0.8.0 Oracle Interim Patch Installer version 11.1.0.8.0 Copyright (c) 2009, Oracle Corporation. All rights reserved. Oracle Home : /u01/app/oracle/product/fmw/oracle_common Central Inventory : /u01/app/oraInventory from : /etc/oraInst.loc OPatch version : 11.1.0.8.0 OUI version : 11.1.0.8.0 OUI location : /u01/app/oracle/product/fmw/oracle_common/oui Log file location : /u01/app/oracle/product/fmw/oracle_common/cfgtoollogs/opatch/opatch2010-07-30_17-16-22PM.log Patch history file: /u01/app/oracle/product/fmw/oracle_common/cfgtoollogs/opatch/opatch_history.txt OPatch detects the Middleware Home as "/u01/app/oracle/product/fmw" ApplySession applying interim patch '9882205' to OH '/u01/app/oracle/product/fmw/oracle_common' Running prerequisite checks... OPatch detected non-cluster Oracle Home from the inventory and will patch the local system only. Please shutdown Oracle instances running out of this ORACLE_HOME on the local system. (Oracle Home = '/u01/app/oracle/product/fmw/oracle_common') Is the local system ready for patching? [y|n] y User Responded with: Y Backing up files and inventory (not for auto-rollback) for the Oracle Home Backing up files affected by the patch '9882205' for restore. This might take a while... Backing up files affected by the patch '9882205' for rollback. This might take a while... Patching component oracle.jrf.adfrt, 11.1.1.3.0... Copying file to "/u01/app/oracle/product/fmw/oracle_common/modules/oracle.adf.view_11.1.1/adf.oracle.domain.webapp.war" Copying file to "/u01/app/oracle/product/fmw/oracle_common/modules/oracle.adf.pageflow_11.1.1/adf-pageflow-impl.jar" ApplySession adding interim patch '9882205' to inventory Verifying the update... Inventory check OK: Patch ID 9882205 is registered in Oracle Home inventory with proper meta-data. Files check OK: Files from Patch ID 9882205 are present in Oracle Home. The local system has been patched and can be restarted. OPatch succeeded.
Apply Patch 9745107 to all the WebLogic Homes in your environment by using the Oracle Smart Update utility. Follow these steps:
Change directory to the location of the Oracle Smart Update Utility located under the MW_HOME
/utils/bsu
directory
IDMHOST1 > cd $MW_HOME/utils/bsu
Start the Oracle Smart Update Utility by running bsu.sh
.
IDMHOST1 > ./bsu.sh
Log in to Oracle Smart Update with your support ID and password to download the patches.
After the utility validates your credentials, the Register Security Updates screen appears. Specify these values:
Email Address: The email address for your My Oracle Support account.
Oracle Support Password: The password for your My Oracle Support account.
Select I wish to receive security updates via My Oracle Support.
Click Continue.
Select your Target Installation in the left pane and click Get Patches.
Select Patches then Retrieve Private. View Private Patch appears.
Provide the Patch Identifier and the Passcode for the patch and click Download. For Patch 9745107, the patch identifier is 3SAY and the passcode is 1IN3XNGX.
Select Download, then enable Check for Conflicts to enable the Oracle Smart Update to check for conflicts.
Click OK.
After Oracle Smart Update validates that there are no conflicts, click OK to download the patch
Click the Manage Patches tab.
Select the patch with the Patch ID 3SAY
from the downloaded patches and click Apply.
The following message appears:
Temporary patches for Oracle products provided through this tool are developed by Oracle in response to issues reported when using Oracle products in certain scenarios. Oracle testing of patches is typically limited to validation that the patch addresses the specific issue reported. This scope of testing is more limited than the testing performed on product version releases and maintenance packs. Oracle only recommends the use of patches for resolving specific issues that have been encountered in the user environment, or are likely to be encountered. Oracle recommends that users perform functional testing of their environments after applying temporary patches.
Click OK to continue.
A Module Patch Warning appears with the message:
You are attempting to apply a patch for a module applicable to multiple products on the same system. Do you like to Continue.
Click Yes
The Oracle Smart Update validates the patch. After the validation is complete, click OK to install the patch
Download the Patch 9449855 from My Oracle Support at https://support.oracle.com
. Patch all the common Oracle homes in your environment with this patch.
Note:
Patch 9449855 need not be applied toOIDHOST1
, OIDHOST2
, OVDHOST1
, OVDHOST2
, WEBHOST1
, and WEBHOST2
.Make sure that your environment meets the prerequisites listed in the Readme
file that is shipped with the patch. Follow these steps to apply the patch:
Unzip the patch to a directory on your machine by using unzip
. For example:
unzip p9449855_111130_Generic.zip.
This creates a directory called 9449855
.
Set the Oracle home to the common Oracle home. For example:
export ORACLE_HOME=$MW_HOME/oracle_common
Set the path to include the OPatch directory under the Oracle home. For example:
export PATH=$ORACLE_HOME/OPatch:$PATH
Navigate to the directory to the directory where the patch is located. For Example:
cd 9449855
Apply the patch using opatch
apply
. The output should be similar to the following:
[Prompt> opatch apply Invoking OPatch 11.1.0.8.0 Oracle Interim Patch Installer version 11.1.0.8.0 Copyright (c) 2009, Oracle Corporation. All rights reserved. Oracle Home : /u01/app/oracle/product/fmw/oracle_common Central Inventory : /u01/app/oraInventory from : /etc/oraInst.loc OPatch version : 11.1.0.8.0 OUI version : 11.1.0.8.0 OUI location : /u01/app/oracle/product/fmw/oracle_common/oui Log file location : /u01/app/oracle/product/fmw/oracle_common/cfgtoollogs/opatch/opatch2010-06-11_17-08-43PM.log Patch history file: /u01/app/oracle/product/fmw/oracle_common/cfgtoollogs/opatch/opatch_history.txt OPatch detects the Middleware Home as "/u01/app/oracle/plus/product/fmw" ApplySession applying interim patch '9449855' to OH '/u01/app/oracle/product/fmw/oracle_common' Running prerequisite checks... OPatch detected non-cluster Oracle Home from the inventory and will patch the local system only. Backing up files and inventory (not for auto-rollback) for the Oracle Home Backing up files affected by the patch '9449855' for restore. This might take a while... Backing up files affected by the patch '9449855' for rollback. This might take a while... Patching component oracle.jrf.opss, 11.1.1.3.0... Copying file to /u01/app/oracle/product/fmw/oracle_common/modules/oracle.oamprovider_11.1.1/oamAuthnProvider.jar" Copying file to /u01/app/oracle/product/fmw/oracle_common/common/wlst/resources/oamAuthnProvider.jar" ApplySession adding interim patch '9449855' to inventory Verifying the update... Inventory check OK: Patch ID 9449855 is registered in Oracle Home inventory with proper meta-data. Files check OK: Files from Patch ID 9449855 are present in Oracle Home.
Validate that the patch applied successfully by running opatch
lsiventory
. When you run opatch
apply
followed by opatch
lsiventory
, the output is similar to this:
Prompt> opatch apply Invoking OPatch 11.1.0.8.0 Oracle Interim Patch Installer version 11.1.0.8.0 Copyright (c) 2009, Oracle Corporation. All rights reserved. Oracle Home : /u01/app/oracle/plus/product/fmw/oracle_common Central Inventory : /u01/app/oraInventory from : /etc/oraInst.loc OPatch version : 11.1.0.8.0 OUI version : 11.1.0.8.0 OUI location : /u01/app/oracle/plus/product/fmw/oracle_common/oui Log file location : /u01/app/oracle/plus/product/fmw/oracle_common/cfgtoollogs/opatch/opatch2010-06-11_17-08-43PM.log Patch history file: /u01/app/oracle/plus/product/fmw/oracle_common/cfgtoollogs/opatch/opatch_history.txt OPatch detects the Middleware Home as "/u01/app/oracle/plus/product/fmw" ApplySession applying interim patch '9449855' to OH '/u01/app/oracle/plus/product/fmw/oracle_common' Running prerequisite checks... OPatch detected non-cluster Oracle Home from the inventory and will patch the local system only. Backing up files and inventory (not for auto-rollback) for the Oracle Home Backing up files affected by the patch '9449855' for restore. This might take a while... Backing up files affected by the patch '9449855' for rollback. This might take a while... Patching component oracle.jrf.opss, 11.1.1.3.0... Copying file to "/u01/app/oracle/plus/product/fmw/oracle_common/modules/oracle.oamprovider_11.1.1/oamAuthnProvider.jar" Copying file to "/u01/app/oracle/plus/product/fmw/oracle_common/common/wlst/resources/oamAuthnProvider.jar" ApplySession adding interim patch '9449855' to inventory Verifying the update... Inventory check OK: Patch ID 9449855 is registered in Oracle Home inventory with proper meta-data. Files check OK: Files from Patch ID 9449855 are present in Oracle Home. OPatch succeeded.
[Prompt> opatch lsinventory Invoking OPatch 11.1.0.8.0 Oracle Interim Patch Installer version 11.1.0.8.0 Copyright (c) 2009, Oracle Corporation. All rights reserved. Oracle Home : /u01/app/oracle/plus/product/fmw/oracle_common Central Inventory : /u01/app/oraInventory from : /etc/oraInst.loc OPatch version : 11.1.0.8.0 OUI version : 11.1.0.8.0 OUI location : /u01/app/oracle/plus/product/fmw/oracle_common/oui Log file location : /u01/app/oracle/plus/product/fmw/oracle_common/cfgtoollogs/opatch/opatch2010-06-11_17-28-59PM.log Patch history file: /u01/app/oracle/plus/product/fmw/oracle_common/cfgtoollogs/opatch/opatch_history.txt OPatch detects the Middleware Home as "/u01/app/oracle/plus/product/fmw" Lsinventory Output file location : /u01/app/oracle/plus/product/fmw/oracle_common/cfgtoollogs/opatch/lsinv/lsinventory2010-06-11_17-28-59PM.txt ------------------------------------------------------------------------------- Installed Top-level Products (2): Application Server 11g SOA Patchset 11.1.1.3.0 Oracle AS Common Toplevel Component 11.1.1.2.0 There are 2 products installed in this Oracle Home. Interim patches (1) : Patch 9449855 : applied on Fri Jun 11 17:08:54 PDT 2010 Unique Patch ID: 12621969 Created on 19 May 2010, 21:47:40 hrs US/Pacific Bugs fixed: 9449855
Download Patch 9477292 from My Oracle Support at https://support.oracle.com
. Patch all the IDM Oracle homes in your environment with this patch. Make sure that your environment meets the prerequisites listed in the Readme
file that is shipped with the patch. Follow these steps to apply the patch:
Unzip the patch, this creates a directory called 9477292
.
Shut down all services running from the IDM_ORACLE_HOME
.
Set your ORACLE_HOME
to the IDM_ORACLE_HOME
and make sure that the ORACLE_HOME
/OPatch
directory is in your path.
Navigate to the 9477292
directory.
Apply the patch using the opatch
apply
command.
Answer Y
when you see the question Is the local system ready for patching? [y|n].
Example:
Prompt> opatch apply Invoking OPatch 11.1.0.8.0 Oracle Interim Patch Installer version 11.1.0.8.0 Copyright (c) 2009, Oracle Corporation. All rights reserved. Oracle Home : /u01/app/oracle/product/fmw/idm Central Inventory : /u01/app/oraInventory from : /etc/oraInst.loc OPatch version : 11.1.0.8.0 OUI version : 11.1.0.8.0 OUI location : /u01/app/oracle/product/fmw/idm/oui Log file location : /u01/app/oracle/product/fmw/idm/cfgtoollogs/opatch/opatch2010-07-18_11-49-02AM.log Patch history file: /u01/app/oracle/product/fmw/idm/cfgtoollogs/opatch/opatch_history.txt OPatch detects the Middleware Home as "/u01/app/oracle/product/fmw" ApplySession applying interim patch '9477292' to OH '/u01/app/oracle/product/fmw/idm' Running prerequisite checks... OPatch detected non-cluster Oracle Home from the inventory and will patch the local system only. Please shutdown Oracle instances running out of this ORACLE_HOME on the local system. (Oracle Home = '/u01/app/oracle/product/fmw/idm') Is the local system ready for patching? [y|n] y User Responded with: Y Backing up files and inventory (not for auto-rollback) for the Oracle Home Backing up files affected by the patch '9477292' for restore. This might take a while... Backing up files affected by the patch '9477292' for rollback. This might take a while... Patching component oracle.as.im.install, 11.1.1.3.0... Copying file to "/u01/app/oracle/product/fmw/idm/install/config/StartUtil.dll"Copying file to "/u01/app/oracle/product/fmw/idm/install/config/StartUtil64.dll" Copying file to "/u01/app/oracle/product/fmw/idm/install/config/ASConfig.jar" Copying file to "/u01/app/oracle/product/fmw/idm/inventory/Scripts/ext/jlib/engine.jar" Copying file to "/u01/app/oracle/product/fmw/idm/inventory/Scripts/ext/jlib/im/im.jar" ApplySession adding interim patch '9477292' to inventory Verifying the update... Inventory check OK: Patch ID 9477292 is registered in Oracle Home inventory with proper meta-data. Files check OK: Files from Patch ID 9477292 are present in Oracle Home. The local system has been patched and can be restarted. OPatch succeeded.
Validate that the patch applied successfully by running opatch
lsiventory
. The output is similar to this:
Prompt> opatch lsinventory Invoking OPatch 11.1.0.8.0 Oracle Interim Patch Installer version 11.1.0.8.0 Copyright (c) 2009, Oracle Corporation. All rights reserved. Oracle Home : /u01/app/oracle/product/fmw/idm Central Inventory : /u01/app/oraInventory from : /etc/oraInst.loc OPatch version : 11.1.0.8.0 OUI version : 11.1.0.8.0 OUI location : /u01/app/oracle/product/fmw/idm/ouiLog file location : /u01/app/oracle/product/fmw/idm/cfgtoollogs/opatch/opatch2010-07-18_11-52-02AM.log Patch history file: /u01/app/oracle/product/fmw/idm/cfgtoollogs/opatch/opatch_history.txt OPatch detects the Middleware Home as "/u01/app/oracle/product/fmw" Lsinventory Output file location : /u01/app/oracle/product/fmw/idm/cfgtoollogs/opatch/lsinv/lsinventory2010-07-18_11-52-02AM.txt -------------------------------------------------------------------------------- Installed Top-level Products (2): Oracle Identity Management 11g 11.1.1.2.0 Oracle Identity Management 11g Patchset 11.1.1.3.0 There are 2 products installed in this Oracle Home. Interim patches (9) : Patch 9477292 : applied on Sun Jul 18 11:50:03 PDT 2010 Unique Patch ID: 12767997 Created on 15 Jul 2010, 14:41:36 hrs US/Pacific Bugs fixed: 9477292 Patch 7663342 : applied on Thu Jun 10 19:24:50 PDT 2010 Created on 15 Jan 2009, 00:17:30 hrs PST8PDT Bugs fixed: 7663342 Patch 7572595 : applied on Thu Jun 10 19:24:24 PDT 2010 Created on 15 Jan 2009, 02:37:01 hrs PST8PDT Bugs fixed: 7572595 Patch 6599470 : applied on Thu Jun 10 19:24:09 PDT 2010 Created on 21 Jan 2009, 01:50:17 hrs PST8PDT Bugs fixed: 6599470 Patch 7707476 : applied on Thu Jun 10 19:23:55 PDT 2010 Created on 10 Feb 2009, 19:13:18 hrs PST8PDT Bugs fixed: 7707476, 7360273, 7284982 Patch 7393921 : applied on Thu Jun 10 19:22:37 PDT 2010 Created on 17 Oct 2008, 03:32:19 hrs PST8PDT Bugs fixed: 7393921 Patch 6750400 : applied on Thu Jun 10 19:21:42 PDT 2010 Created on 3 Nov 2008, 22:33:54 hrs PST8PDT Bugs fixed: 6750400 Patch 7427144 : applied on Thu Jun 10 19:21:00 PDT 2010 Created on 29 Oct 2008, 00:14:14 hrs PST8PDT Bugs fixed: 7427144 Patch 6845838 : applied on Thu Jun 10 19:20:52 PDT 2010 Created on 3 Nov 2008, 22:00:04 hrs PST8PDT Bugs fixed: 6845838 -------------------------------------------------------------------------------- OPatch succeeded.
Oracle Identity Manager uses the wlfullclient.jar
library for certain operations. Oracle does not ship this library, so you must create this library manually. Oracle recommends creating this library under the MW_HOME
/wlserver_10.3/server/lib
directory on all the machines in the application tier of your environment. You do not need to create this library on directory tier machines such as OIDHOST1
, OIDHOST2
, OVDHOST1
and OVDHOST2
.
Follow these steps to create the wlfullclient.jar
file:
Navigate to the MW_HOME
/wlserver_10.3/server/lib
directory
Set your JAVA_HOME
to MW_HOME
/jdk160_18
and ensure that your JAVA_HOME
/bin
directory is in your path.
Create the wlfullclient.jar
file by running:
java -jar wljarbuilder.jar
Due to issues with versions of the configuration wizard, some environmental variables are not added to the DOMAIN_HOME
/bin/setDomainenv.sh
script. This causes certain install sequences to fail. This section is a temporary workaround for that problem. The steps in this section must be performed on all the hosts in application tier (IDMHOST1
, IDMHOST2
, OIMHOST1
, OIMHOST2
, OAAMHOST1
, OAAMHOST2
, OIFHOST1
, and OIFHOST2
).
Apply the following steps across all the WebLogic Server homes in the domain.
Copy the OIMAuthenticator.jar
, oimmbean.jar
and oimsignaturembean.jar
files located under the IAM_ORACLE_HOME
/server/loginmodule/wls
directory to the MW_HOME
/wlserver_10.3/server/lib/mbeantypes
directory.
cp $IAM_ORACLE_HOME/server/loginmodule/wls/* $MW_HOME/wlserver_10.3/server/lib/mbeantypes/.
Change directory to MW_HOME
/wlserver_10.3/server/lib/mbeantypes/
.
cd $MW_HOME/wlserver_10.3/server/lib/mbeantypes
Change the permissions on these files to 750 by using the chmod
command.
chmod 750 *
Download Patch 9847606 from My Oracle Support at https://support.oracle.com
. Patch all the Middleware homes in your environment with this patch. Make sure that your environment meets the prerequisites listed in the Readme
file that is shipped with the patch.
Follow these steps to apply the patch:
Shut down any managed servers that are running.
cd MW_HOME
Make a backup of the original JRockit JDK.
mv jrockit_160_17_R28.0.0-679 jrockit_160_17_R28.0.0-679.orig
Unzip the patch.
unzip p9847606_2801_LINUX.zip
Rename the patched jdk to the original name.
mv jrockit-jdk1.6.0_20 jrockit_160_17_R28.0.0-679
Restart Managed Servers as necessary.
If your enterprise deployment topology was created using the Oracle Identity Management Suite Release 11.1.1.2 binaries, follow the steps in the Oracle Fusion Middleware Patching Guide to upgrade your existing Oracle home to 11.1.1.3 before installing the Oracle Identity Management Suite software.
Once you have created the Fusion Middleware home, stop all servers and back up the Fusion Middleware home. Type:
tar -cvpf fmwhomeback.tar ORACLE_BASE/product/fmw
This creates a backup of the installation files for any products installed in the Oracle Fusion Middleware home.