Tuesday, May 31, 2011

Install 10.1.4.3 SSO Server

At this point you should do another full cold backup of both the database and various components of software you installed. In order to setup the SSO server we must first manually create the schema used by the SSO server. To do this we will need to use the 10.1.4 MCU creation assistant (Note this is a different repository utility then what was used to create the OID schema). The technical requirements for installing the MCU are fairly ridged: Basically you need x86 environment running either windows XP or RHEL 4.  Once you have overcome that challenge we need to execute the following command to downgrade the OID version (NOTE: You cannot bounce OID from this point forward without causing problems)

$ORACLE_HOME/perl/bin/perl $ORACLE_HOME/ldap/bin/inspre11.pl <oid host> 389 -nonssl oid1 chinook.pugetsound.edu:1521:infraprod <password> <password> -op1

Execute the repository creation tool against the infrastructure database. Follow the screens and select load & register to load both the database and OID. You will be prompted to supply an ORACLE_HOME directory understand this means the ORACLE_HOME of your infrastructure database and NOT the computer/server where the MCU is installed. (Example: /app/infra/db/oradata/infratst). Like-wise supply the same location for the oradata on your database server where you currently have all your DBF files location. You will get an error about knowledge base not found, ignore this and continue on.

Post install change back the ods password to the original in the database and execute the following:

ORACLE_IDM_HOME/ldap/bin/oidpasswd connect=OIDDB create_wallet=true

Followed by:

$ORACLE_HOME/perl/bin/perl $ORACLE_HOME/ldap/bin/inspre11.pl sso.example.com 389 -nonssl oid1 oiddb <password> <password> -op2

Download SSO server software and install it using the following commands:

linux32 bash

unset TNS_ADMIN

./runInstaller –ignoreSysPreReqs

Specify the following options:

1)      ORACLE_HOME location: /app/infra/sso-home,

2)      Select  “Oracle Application Server Infrastructure”

3)      Select  “Identity Management” (Ignore all the errors on the next screen)

4)      Select the following: “Oracle Application Server Single Sign-On”, “Oracle Application Server Delegated Administrator”, “High Availability & Replication”

5)      Select Virtual host

6)      For the virtual hostname specify sso.example.com (By doing this we avoid wiring in the SSO server to the same host name the SSO process run on).



During the installation you will receive an error that the opmnctl cannot start. This is normal. Manually start this process by issuing the following command from a different SSH session and then click on “continue”:

$ORACLE_HOME/opmn/bin/opmnctl startall

Further in the installation you will receive an error during the configuration of OC4J. While the installer is still up download patches 6880880 & 5649850 and install both (Be sure to use the 10.1 version for 6880880). Once both patches are installed click on retry within the install to complete the installation.

Once the first iteration of the SSO server is installed download and install patch 6265268 replacing the following files:

$STAGE_LOCATION/Disk1/stage/Queries/DBConnectQueries/8.4/1/DBConnectQueries.jar

$STAGE_LOCATION/Disk1/stage/Queries/IP_DBQueries/3.0/IP_DBQueries.jar

$ORACLE_HOME/inventory/Queries21/DBConnectQueries/8.4/DBConnectQueries.jar

$ORACLE_HOME/inventory/Queries21/IP_DBQueries/3.0/IP_DBQueries.jar

Next, we need to install 10.1.4 patchset to bring the server into the certification matrix. This can be down by downloading patchset 7215628. Make sure you issue this command before starting:

opmnctl stopall

This patch is MUCH better than the original 10.1.4 install and does not need any tweaking while installing and does not require any special tricks. Finally, we can change the OID version back to the normal version and it is save to bounce all the products. Be sure to change ods password back, again, before issuing this command:

$ORACLE_HOME/perl/bin/perl $ORACLE_HOME/ldap/bin/inspre11.pl <hostname> 389 -nonssl oid1 oiddb <password> <password> -op3

To judge he successfully of the install verify you can log into the various components:



No comments:

Post a Comment