Skip Headers
Oracle® Application Server Administrator's Guide
10
g
Release 2 (10.1.2)
B13995-08
Home
Solution Area
Index
Next
Contents
List of Examples
List of Figures
List of Tables
Title and Copyright Information
Preface
Audience
Documentation Accessibility
Related Documentation
Conventions
What's New in Oracle Application Server Administration?
New Features for 10
g
Release 2 (10.1.2.0.2)
New Features for 10
g
Release 2 (10.1.2.0.0)
Part I Getting Started
1
Getting Started After Installing Oracle Application Server
1.1
Task 1: Set Up Environment Variables
1.2
Task 2: Use the Oracle Application Server Welcome Page
1.3
Task 3: Check Your Port Numbers
1.4
Task 4: Get Started with Managing Components
1.4.1
Getting Started with Oracle Process Manager and Notification Server (OPMN)
1.4.2
Getting Started with Distributed Configuration Management (DCM)
1.4.3
Getting Started with Oracle HTTP Server
1.4.4
Getting Started with Oracle Application Server Containers for J2EE (OC4J)
1.4.5
Getting Started with OracleAS Web Cache
1.4.6
Getting Started with OracleAS Portal
1.4.7
Getting Started with OracleAS Wireless
1.4.8
Getting Started with OracleBI Discoverer
1.4.8.1
Prepare for Multidimensional Analysis
1.4.8.1.1
Prepare an Oracle9
i
Release 2 Database for Use with Discoverer
1.4.8.1.2
Prepare Oracle Database 10
g
Enterprise Edition for Use with Discoverer
1.4.8.1.3
How to Migrate an Existing Discoverer Catalog to Oracle Database 10
g
Enterprise Edition Release 2
1.4.8.2
Prepare for Relational Analysis
1.4.9
Getting Started with OracleAS Forms Services
1.4.10
Getting Started with OracleAS Reports Services
1.4.11
Getting Started with OracleAS Personalization
1.4.12
Getting Started with Oracle Application Server Integration Products
1.4.13
Getting Started with Identity Management Components
1.5
Task 5: Enable SSL (Optional)
2
Introduction to Administration Tools
2.1
Overview of Oracle Application Server Administration Tools
2.1.1
Managing Oracle Application Server with Oracle Enterprise Manager 10
g
2.1.1.1
Using Application Server Control to Manage Oracle Application Server
2.1.1.2
Using Grid Control to Manage Your Enterprise
2.1.1.3
Using Database Control to Manage an OracleAS Metadata Repository Database
2.1.2
Managing Oracle Application Server from the Command Line
2.1.3
Using Other Tools to Monitor the Built-In Performance Metrics
2.2
About Oracle Enterprise Manager 10
g
Application Server Control
2.2.1
Introducing the Enterprise Manager Home Pages
2.2.2
About the Underlying Technologies
2.2.3
Managing Previous Versions of Oracle Application Server
2.2.4
Using the Application Server Control Console Online Help
2.3
Getting Started with the Application Server Control Console
2.3.1
Displaying the Application Server Control Console
2.3.1.1
Using the Application Server Control Console URL
2.3.1.2
Displaying the Application Server Control Console from the Welcome Page
2.3.2
Understanding the Initial Application Server Control Console Home Page
2.3.3
Using the Application Server Home Page
2.3.4
Using the Oracle Application Server Farm Page
2.3.5
Using an Oracle Application Server Component Home Page
2.4
Monitoring and Diagnosing with the Application Server Control Console
2.4.1
Reviewing the Application Server Component Topology
2.4.2
Reviewing General Information and Resource Usage
2.4.3
Reviewing the Resources of the Application Server Host
2.4.4
Monitoring Application Server Components
2.4.5
Displaying the All Metrics Page for the Application Server or an Application Server Component
2.4.6
Monitoring J2EE Applications
2.4.7
Obtaining More Information About Monitoring Oracle Application Server
2.5
Managing the OracleAS Metadata Repository Database with Database Control
2.6
About Oracle Enterprise Manager 10
g
Grid Control
2.6.1
About the Components of Grid Control
2.6.2
Installing the Grid Control Components
2.6.3
Logging In to the Grid Control Console
2.6.4
Viewing a List of Application Servers in the Grid Control Console
2.6.5
Overview of Grid Control Monitoring Tasks
2.6.6
Obtaining More Information About Grid Control
3
Starting and Stopping
3.1
Overview of Starting and Stopping Procedures
3.2
Starting and Stopping Application Server Instances
3.2.1
Starting OracleAS Infrastructure
3.2.2
Stopping OracleAS Infrastructure
3.2.3
Starting a Middle-Tier Instance
3.2.4
Stopping a Middle-Tier Instance
3.3
Starting and Stopping Components
3.3.1
Starting and Stopping Components Using opmnctl
3.3.2
Starting and Stopping Components Using Application Server Control Console
3.4
Enabling and Disabling Components
3.5
Starting and Stopping an Oracle Application Server Environment
3.5.1
Starting an Oracle Application Server Environment
3.5.2
Stopping an Oracle Application Server Environment
3.6
Starting and Stopping: Special Topics
3.6.1
Starting and Stopping Log Loader
3.6.2
Starting and Stopping in High Availability Environments
3.6.3
Resolving OC4J Errors When Starting Multiple Instances
3.6.4
Forcing a Shut Down of OracleAS Metadata Repository
Part II Basic Administration
4
Managing Ports
4.1
About Managing Ports
4.2
Viewing Port Numbers
4.3
Changing Middle-Tier Ports
4.3.1
Changing Oracle Enterprise Manager Ports
4.3.2
Changing OC4J Ports
4.3.3
Changing the Oracle HTTP Server Listen Ports
4.3.4
Changing the Oracle HTTP Server Diagnostic Port
4.3.5
Changing OracleAS Web Cache Ports
4.3.5.1
Changing the OracleAS Web Cache Listen Ports
4.3.5.2
Changing the OracleAS Web Cache Administration Port
4.3.5.3
Changing the OracleAS Web Cache Invalidation Port
4.3.5.4
Changing the OracleAS Web Cache Statistics Port
4.3.6
Changing the DCM Discovery Port
4.3.7
Changing the Java Object Cache Port
4.3.8
Changing the Log Loader Port
4.3.9
Changing OPMN Ports (ONS Local, Request, and Remote)
4.3.10
Changing the Port Tunneling Port
4.3.11
Changing the OracleAS Portal Port
4.3.12
Changing the OracleAS Wireless Port
4.3.13
Changing OracleBI Discoverer Ports
4.3.14
Changing the OracleAS Forms Services Port
4.3.15
Changing OracleAS Reports Services Ports
4.3.15.1
Changing the OracleAS Reports Services Bridge Port
4.3.15.2
Changing the OracleAS Reports Services Network Port
4.3.15.3
Changing the OracleAS Reports Services SQL*Net Port
4.4
Changing Infrastructure Ports
4.4.1
Changing the OracleAS Metadata Repository Net Listener Port
4.4.1.1
Changing the KEY Value for an IPC Listener
4.4.2
Changing Oracle Internet Directory Ports
4.4.3
Changing the HTTP Server Port on an Identity Management Installation
4.4.4
Changing OracleAS Certificate Authority Ports
4.5
Changing OracleAS Developer Kit Ports
4.6
Changing Oracle Content Management Software Development Kit Ports
5
Managing Log Files
5.1
Introduction to Oracle Application Server Logging
5.1.1
Understanding Log File Data and Naming
5.1.1.1
ODL Message Formatting and ODL Log File Naming
5.1.1.2
Log File Messages by Component
5.1.2
Using a Log Repository
5.1.3
Configuring Component Logging Options
5.2
Listing and Viewing Log Files with Application Server Control
5.2.1
Listing Log Files for Components
5.2.2
Listing Log Files from Oracle Application Server Components Pages
5.2.3
Using Log Files Advanced Search
5.3
Searching Diagnostic Messages in a Log Repository
5.3.1
Getting Started with Log Repository
5.3.2
Searching Log Repository with Simple Search
5.3.3
Searching Log Repository with Advanced Search
5.3.4
Viewing Repository Log Entry Details
5.3.5
Using Regular Expressions with Log Repository Search
5.4
Diagnosing Problems and Correlating Messages
5.4.1
Correlating Messages Across Log Files and Components
5.4.2
Diagnosing Component Problems
5.5
Using Oracle Application Server Log Loader
5.5.1
Starting and Stopping Log Loader
5.5.2
Enabling and Disabling Log Loader
5.5.3
Updating the Log Configuration
5.5.4
Setting Log Loader Properties
5.5.5
Understanding Log Loader Diagnostic Messages
5.6
Advanced Logging Topics
5.6.1
Using the printlogs Tool to View Log Messages
5.6.2
Understanding ODL Messages and ODL Log Files
5.6.2.1
ODL Message Contents
5.6.2.2
ODL Log File Naming
5.6.3
Understanding Log Loader Log File Format Conversion
5.6.4
Component Diagnostic Log File Registration
5.6.5
Configuring Components to Produce ODL Messages and ECIDs
5.6.5.1
Configuring Oracle HTTP Server to Produce ODL Messages
5.6.5.2
Configuring OC4J to Produce ODL Messages
5.6.5.3
Configuring OC4J to Produce ECIDs
5.6.6
Creating and Managing a Diagnostic Message Database Repository
5.6.6.1
Creating a Diagnostic Message Database Repository
5.6.6.2
Removing Old Messages from the Diagnostic Message Repository
5.6.6.3
Deleting the Diagnostic Message Repository
5.6.6.4
Reconfiguring Log Loader to Use a File-Based Repository
5.6.7
Limitations and Configuration
6
Managing an OracleAS Metadata Repository
6.1
Frequently Asked Questions About OracleAS Metadata Repository
6.2
Postinstallation Status of OracleAS Metadata Repository Schemas
6.3
Viewing OracleAS Metadata Repository Schema Passwords
6.3.1
Viewing OracleAS Metadata Repository Schema Passwords using Oracle Directory Manager
6.3.2
Viewing OracleAS Metadata Repository Schema Passwords using ldapsearch
6.4
Changing OracleAS Metadata Repository Schema Passwords
6.4.1
Changing Schema Passwords Using the Application Server Control Console
6.4.2
Changing Schema Passwords Using SQL*Plus
6.4.3
Changing Schema Passwords in Oracle Internet Directory
6.5
Changing the Character Set of OracleAS Metadata Repository
6.6
Renaming and Relocating OracleAS Metadata Repository Datafiles
Part III Advanced Administration
7
Reconfiguring Application Server Instances
7.1
Expanding a Middle-Tier Installation
7.2
Configuring Additional Components After Installation
7.2.1
Configuring OracleAS Web Cache After Installation
7.2.1.1
Things to Know Before You Start
7.2.1.2
Configuring OracleAS Web Cache
7.2.1.3
Post-Configuration Tasks
7.2.2
Configuring OracleAS Portal After Installation
7.2.2.1
Things to Know Before You Start
7.2.2.2
Configuring OracleAS Portal
7.2.2.3
Post-Configuration Tasks
7.2.2.4
Steps Needed If OracleAS Portal Configured Before OracleAS Web Cache
7.2.3
Configuring OracleAS Wireless After Installation
7.2.3.1
Configuring OracleAS Wireless
7.2.3.2
Post-Configuration Tasks
7.2.4
Configuring OracleBI Discoverer After Installation
7.2.4.1
Configuring OracleBI Discoverer
7.2.4.2
Post-Configuration Tasks
7.2.5
Configuring OracleAS Forms Services After Installation
7.2.5.1
Configuring OracleAS Forms Services
7.2.5.2
Post-Configuration Tasks
7.2.6
Configuring OracleAS Reports Services After Installation
7.2.6.1
Things to Know Before You Start
7.2.6.2
Configuring OracleAS Reports Services
7.2.6.3
Post-Configuration Tasks
7.2.7
Configuring OracleAS Personalization After Installation
7.2.8
Configuring OracleAS Single Sign-On After Installation
7.2.8.1
Configuring OracleAS Single Sign-On
7.2.8.2
Post-Configuration Tasks
7.2.9
Configuring Oracle Delegated Administration Services After Installation
7.2.9.1
Things to Know Before You Start
7.2.9.2
Configuring mod_osso for Oracle Delegated Administration Services
7.2.9.3
Configuring Delegated Administration Service
7.2.9.4
Post-Configuration Tasks
7.2.10
Configuring Directory Integration and Provisioning After Installation
7.3
Deconfiguring Components
7.4
Deleting OC4J Instances
7.5
Configuring J2EE and Web Cache to Use Infrastructure Services
7.5.1
Configuring Instances to Use Oracle Identity Management
7.5.2
Configuring Instances with Oracle Identity Management to Use OracleAS Metadata Repository
7.5.3
Configuring Instances to Use an Existing Database as a Repository
7.5.4
Configuring Instances Without Oracle Identity Management to Use OracleAS Metadata Repository
7.5.5
Configuring Instances to Use an Existing File-Based Repository
7.5.6
Configuring Instances to Use a New File-Based Repository
7.6
Disabling and Enabling Anonymous Binds
7.6.1
Disabling Anonymous Binds for RunTime Environments
7.6.2
Enabling Anonymous Binds for Configuration Changes
8
Changing Network Configurations
8.1
Overview of Procedures for Changing Network Configurations
8.2
Changing the Hostname, Domain Name, or IP Address
8.2.1
Understanding the chgiphost Command
8.2.2
Changing the Hostname, Domain Name, or IP Address of a Middle-Tier Installation
8.2.3
Changing the Hostname, Domain Name, or IP Address of an Identity Management Installation
8.2.4
Changing the Hostname or Domain Name of an OracleAS Certificate Authority Installation
8.2.5
Changing the IP Address of an Infrastructure Containing a Metadata Repository
8.2.6
Special Topics for Changing Your Hostname or Domain Name
8.2.6.1
Running SSLConfigTool for SSL Environments
8.2.6.2
Setting the Log Level for chgiphost
8.2.6.3
Customizing the chgiphost Command
8.2.6.4
Changing a Hostname after Upgrading from Windows 2000 to Windows 2003
8.2.6.5
Recovering from Errors When Changing Your Hostname
8.3
Moving Between Off-Network and On-Network
8.3.1
Moving from Off-Network to On-Network (Static IP Address)
8.3.2
Moving from Off-Network to On-Network (DHCP)
8.3.3
Moving from On-Network to Off-Network (Static IP Address)
8.3.4
Moving from On-Network to Off-Network (DHCP)
8.4
Changing Between a Static IP Address and DHCP
8.4.1
Changing from a Static IP Address to DHCP
8.4.2
Changing from DHCP to a Static IP Address
9
Changing Infrastructure Services
9.1
Overview of Procedures for Changing Infrastructure Services
9.2
Changing the Oracle Internet Directory or Oracle HTTP Server Ports on Identity Management
9.3
Changing Oracle Internet Directory from Dual Mode to SSL Mode
9.3.1
Procedure
9.4
Moving Identity Management to a New Host
9.4.1
Sample Uses for This Procedure
9.4.2
Assumptions and Restrictions
9.4.3
Procedure
9.4.4
Strategy for Performing Failover with This Procedure
9.5
Changing the Metadata Repository Used by a Middle-Tier Instance
9.5.1
Sample Uses for This Procedure
9.5.2
Assumptions and Restrictions
9.5.3
Overview
9.5.4
Procedure
9.6
Changing the Metadata Repository Used by Identity Management
9.6.1
Sample Uses for This Procedure
9.6.2
Assumptions and Restrictions
9.6.3
Procedure
10
Cloning Application Server Middle-Tier Instances
10.1
Introduction to Cloning
10.2
What Installation Types Can You Clone?
10.3
Understanding the Cloning Process
10.3.1
Source Preparation Phase
10.3.2
Cloning Phases
10.4
Cloning Oracle Application Server Instances
10.4.1
Prerequisites for Cloning
10.4.2
Preparing the Source
10.4.3
Cloning the Instance
10.4.4
Locating and Viewing Log Files
10.4.5
Cloning Instances That Are Members of a Farm or OracleAS Cluster
10.5
Considerations and Limitations for Cloning
10.5.1
General Considerations and Limitations for Cloning
10.5.2
Considerations for Cloning Oracle HTTP Server
10.5.3
Considerations for Cloning Oracle Application Server Containers for J2EE (OC4J)
10.5.4
Considerations for Cloning OracleAS Web Cache
10.5.5
Considerations for Cloning Application Server Control
10.5.6
Considerations for Cloning OracleAS Portal
10.5.7
Considerations for Cloning OracleAS Wireless
10.5.8
Considerations for Cloning OracleBI Discoverer
10.5.9
Considerations for Cloning OracleAS Forms Services
10.5.10
Considerations for Cloning OracleAS Reports Services
10.5.11
Considerations for Cloning OracleAS Forms and Reports Services
10.6
Customizing the Cloning Process
10.6.1
Specifying Oracle Universal Installer Parameters
10.6.2
Assigning Custom Ports
10.6.3
Updating Custom Data
10.7
Examples of Cloning Application Server Instances
10.7.1
Using Cloning to Expand an OracleAS Cluster
10.7.2
Cloning a Portal and Wireless Instance Front-Ended by a Load Balancing Router
10.7.3
Cloning a Business Intelligence Instance
11
Staging a Test Environment from a Production Environment
11.1
Creating a Test Environment from a Production Environment and Copying Metadata
11.1.1
Preexisting Configuration Assumptions
11.1.2
Procedure
11.2
Upgrading the Test Environment
12
Changing from a Test to a Production Environment
12.1
Understanding the Options for Creating a Production Middle Tier
12.2
Case 1: Moving J2EE Applications to a Production Environment
12.2.1
Scenario 1: Redeploying J2EE Applications to an Existing Production Environment with a Middle-Tier Instance
12.2.1.1
Preexisting Configuration Assumptions
12.2.1.2
Procedure
12.2.2
Scenario 2: Moving J2EE Applications from a Test Middle Tier Without Identity Management to a New Production Environment
12.2.2.1
Preexisting Configuration Assumptions
12.2.2.2
Procedure
12.2.3
Scenario 3: Moving J2EE Applications from a Test Middle Tier with Identity Management to a New Production Environment
12.2.3.1
Preexisting Configuration Assumptions
12.2.3.2
Procedure
12.3
Case 2: Moving Non-J2EE Applications to a Production Environment
12.3.1
Scenario 1: Moving Applications from a Test Middle Tier with Identity Management to a Production Environment with a Preexisting Identity Management
12.3.1.1
Preexisting Configuration Assumptions
12.3.1.2
Procedure
12.3.1.3
Creating a Second Middle-Tier Instance in the Production Environment
12.3.2
Scenario 2: Moving Applications from a Test Middle Tier with Identity Management and a Product Metadata Repository to an Existing Production Environment with Identity Management
12.3.2.1
Preexisting Configuration Assumptions
12.3.2.2
Procedure
12.3.3
Scenario 3: Moving Applications from Multiple Test Middle Tiers with Dedicated Identity Management Metadata Repositories
12.3.3.1
Preexisting Configuration Assumptions
12.3.3.2
Procedure
12.3.4
Common Procedures for Scenarios in Use Case 2
12.4
Case 3: Moving Product-Specific Metadata from Test Metadata Repository to Production Metadata Repository
12.4.1
OracleAS Portal
12.4.1.1
Preexisting Configuration Assumptions
12.4.1.2
Procedure
12.4.2
OracleBI Discoverer
12.4.2.1
Preexisting Configuration Assumptions
12.4.2.2
Procedure
Part IV Secure Sockets Layer (SSL)
13
Overview of Secure Sockets Layer (SSL) in Oracle Application Server
13.1
What SSL Provides
13.2
About Private and Public Key Cryptography
13.3
How an SSL Session Is Set Up (the "SSL Handshake")
13.4
Requirements for Using SSL in Oracle Application Server
13.5
Certificates and Oracle Wallets
13.5.1
How to Get a Certificate
13.5.2
Oracle Wallet
13.5.3
Client Certificates
13.6
SSL Configuration Overview
13.6.1
Default SSL Configuration
13.6.2
Partial SSL Configuration
13.7
Integration with Hardware Security Modules
13.7.1
Protocol Converters
13.7.2
Mathematics Accelerators (PKCS #11 Integration)
14
Using the SSL Configuration Tool
14.1
Overview
14.2
Understanding SSL Termination
14.3
Command Line Interface
14.3.1
Where Can I Find the SSL Configuration Tool?
14.3.2
Syntax
14.3.3
Configuration File for Silent Mode
14.3.4
Default Wallet Locations
14.4
Common SSL Configuration Scenarios
14.4.1
Configuring SSL to Load Balancer for OracleAS Single Sign-On/Oracle Delegated Administration Services
14.4.1.1
What it Does
14.4.1.2
Running the SSL Configuration Tool
14.4.1.3
For More Information
14.4.2
Configuring SSL to Load Balancer for OracleAS Portal
14.4.2.1
What it Does
14.4.2.2
Running the SSL Configuration Tool
14.4.2.3
For More Information
14.4.3
Configuring SSL to Oracle HTTP Server for Oracle HTTP Server/Oracle Application Server Containers for J2EE
14.4.3.1
What it Does
14.4.3.2
Running the SSL Configuration Tool
14.4.3.3
For More Information
14.4.4
Configuring SSL to OracleAS Web Cache for J2EE
14.4.4.1
What it Does
14.4.4.2
Running the SSL Configuration Tool
14.4.4.3
For More Information
14.4.5
Configuring SSL to Oracle HTTP Server for OracleAS Single Sign-On/Oracle Delegated Administration Services
14.4.5.1
What it Does
14.4.5.2
Running the SSL Configuration Tool
14.4.5.3
For More Information
14.4.6
Configuring SSL to Oracle HTTP Server for OracleAS Portal
14.4.6.1
What it Does
14.4.6.2
Running the SSL Configuration Tool
14.4.6.3
For More Information
14.4.7
Configuring an HTTP Instance
14.4.8
Configuring SSL for Cluster Configurations
14.5
Manual Steps
14.6
Troubleshooting the SSL Configuration Tool
14.6.1
General Troubleshooting Procedure
14.6.2
Oracle Application Server Wireless Requires Manual Changes
14.6.3
Configuring Seeded Providers for OracleAS Portal
14.6.4
SSL Configuration Tool Does Not Support IASCONFIG_LOC Environment Variable
14.6.5
SSL Configuration Tool Does Not Modify sso_apache.conf File
14.6.6
SSL Configuration Tool Does Not Modify opmn.xml Parameters
15
Managing Wallets and Certificates
15.1
Using Oracle Wallet Manager
15.1.1
Oracle Wallet Manager Overview
15.1.1.1
Wallet Password Management
15.1.1.2
Strong Wallet Encryption
15.1.1.3
Microsoft Windows Registry Wallet Storage
15.1.1.3.1
Options Supported:
15.1.1.4
Backward Compatibility
15.1.1.5
Third-Party Wallet Support
15.1.1.6
LDAP Directory Support
15.1.2
Starting Oracle Wallet Manager
15.1.3
How to Create a Complete Wallet: Process Overview
15.1.4
Managing Wallets
15.1.4.1
Required Guidelines for Creating Wallet Passwords
15.1.4.2
Creating a New Wallet
15.1.4.2.1
Creating a Standard Wallet
15.1.4.2.2
Creating a Wallet to Store Hardware Security Module Credentials
15.1.4.3
Opening an Existing Wallet
15.1.4.4
Closing a Wallet
15.1.4.5
Exporting Oracle Wallets to Third-Party Environments
15.1.4.6
Exporting Oracle Wallets to Tools That Do Not Support PKCS #12
15.1.4.7
Uploading a Wallet to an LDAP Directory
15.1.4.8
Downloading a Wallet from an LDAP Directory
15.1.4.9
Saving Changes
15.1.4.10
Saving the Open Wallet to a New Location
15.1.4.11
Saving in System Default
15.1.4.12
Deleting the Wallet
15.1.4.13
Changing the Password
15.1.4.14
Using Auto Login
15.1.4.14.1
Enabling Auto Login
15.1.4.14.2
Disabling Auto Login
15.1.5
Managing Certificates
15.1.5.1
Managing User Certificates
15.1.5.1.1
Adding a Certificate Request
15.1.5.1.2
Importing the User Certificate into the Wallet
15.1.5.1.3
Importing Certificates Created with a Third-Party Tool
15.1.5.1.4
Removing a User Certificate from a Wallet
15.1.5.1.5
Removing a Certificate Request
15.1.5.1.6
Exporting a User Certificate
15.1.5.1.7
Exporting a User Certificate Request
15.1.5.2
Managing Trusted Certificates
15.1.5.2.1
Importing a Trusted Certificate
15.1.5.2.2
Removing a Trusted Certificate
15.1.5.2.3
Exporting a Trusted Certificate
15.1.5.2.4
Exporting All Trusted Certificates
15.2
Performing Certificate Validation and CRL Management with the orapki Utility
15.2.1
orapki Overview
15.2.1.1
orapki Utility Syntax
15.2.2
Displaying orapki Help
15.2.3
Creating Signed Certificates for Testing Purposes
15.2.4
Managing Oracle Wallets with the orapki Utility
15.2.4.1
Creating and Viewing Oracle Wallets with orapki
15.2.4.2
Adding Certificates and Certificate Requests to Oracle Wallets with orapki
15.2.4.3
Exporting Certificates and Certificate Requests from Oracle Wallets with orapki
15.2.5
Managing Certificate Revocation Lists (CRLs) with the orapki Utility
15.2.5.1
About Certificate Validation with Certificate Revocation Lists
15.2.5.1.1
What CRLs Should You Use?
15.2.5.1.2
How CRL Checking Works
15.2.5.2
Certificate Revocation List Management
15.2.5.2.1
Renaming CRLs with a Hash Value for Certificate Validation
15.2.5.2.2
Uploading CRLs to Oracle Internet Directory
15.2.5.2.3
Listing CRLs Stored in Oracle Internet Directory
15.2.5.2.4
Viewing CRLs in Oracle Internet Directory
15.2.5.2.5
Deleting CRLs from Oracle Internet Directory
15.2.6
orapki Utility Commands Summary
15.2.6.1
orapki cert create
15.2.6.1.1
Purpose
15.2.6.1.2
Syntax
15.2.6.2
orapki cert display
15.2.6.2.1
Purpose
15.2.6.2.2
Syntax
15.2.6.3
orapki crl delete
15.2.6.3.1
Purpose
15.2.6.3.2
Prerequisites
15.2.6.3.3
Syntax
15.2.6.4
orapki crl display
15.2.6.4.1
Purpose
15.2.6.4.2
Syntax
15.2.6.5
orapki crl hash
15.2.6.5.1
Purpose
15.2.6.5.2
Syntax
15.2.6.6
orapki crl list
15.2.6.6.1
Purpose
15.2.6.6.2
Syntax
15.2.6.7
orapki crl upload
15.2.6.7.1
Purpose
15.2.6.7.2
Syntax
15.2.6.8
orapki wallet add
15.2.6.8.1
Purpose
15.2.6.8.2
Syntax
15.2.6.9
orapki wallet create
15.2.6.9.1
Purpose
15.2.6.9.2
Syntax
15.2.6.10
orapki wallet display
15.2.6.10.1
Purpose
15.2.6.10.2
Syntax
15.2.6.11
orapki wallet export
15.2.6.11.1
Purpose
15.2.6.11.2
Syntax
15.3
Interoperability with X.509 Certificates
15.3.1
Public-Key Cryptography Standards (PKCS) Support
15.3.2
Multiple Certificate Support
16
Enabling SSL in the Infrastructure
16.1
SSL Communication Paths in the Infrastructure
16.2
Recommended SSL Configurations
16.3
Common SSL Configuration Tasks
16.3.1
Configuring SSL for OracleAS Single Sign-On and Oracle Delegated Administration Services
16.3.2
Configuring SSL for Oracle Internet Directory
16.3.3
Configuring SSL for Oracle Internet Directory Replication Server and Oracle Directory Integration and Provisioning
16.3.4
Configuring SSL in the Identity Management Database
16.3.5
Additional SSL Configuration in the OC4J_SECURITY Instance
16.3.5.1
Configuring SSL from mod_oc4j to OC4J_SECURITY
16.3.5.2
Using Port Tunneling from mod_oc4j to the OC4J_SECURITY Instance
16.3.5.3
Configuring JDBC/SSL (ASO support)
16.3.6
SSL in Oracle Application Server Certificate Authority
16.3.7
Configuring SSL for Oracle Enterprise Manager 10
g
16.3.7.1
Configuring Security for the Grid Control
16.3.7.2
Configuring Security for the Application Server Control Console
17
Enabling SSL in the Middle Tier
17.1
SSL Communication Paths in the Middle Tier
17.2
Recommended SSL Configurations
17.3
Common SSL Configuration Tasks for the Middle Tier
17.3.1
Enabling SSL in OracleAS Web Cache
17.3.2
Enabling SSL in the Oracle HTTP Server
17.3.3
Enabling SSL in OC4J
17.3.3.1
Configuring SSL from Oracle HTTP Server to OC4J
17.3.3.2
Using Port Tunneling (iaspt) from Oracle HTTP Server to OC4J
17.3.3.3
Configuring ORMI/HTTP SSL
17.3.3.4
Configuring Oracle Application Server Java Authentication and Authorization Service (JAAS) Provider for SSL with Oracle Internet Directory
17.3.3.5
Configuring Oracle HTTP Server for SSL
17.3.3.6
Configuring SSL in Standalone OC4J Installations
17.3.4
Enabling SSL in J2EE and Web Cache Installations
17.3.5
Enabling SSL in Virtual Hosts
17.3.6
Enabling SSL in OracleBI Discoverer
17.3.7
Enabling SSL in OracleAS Wireless
17.3.8
Enabling SSL in OracleAS Portal
17.3.9
Configuring SSL for Oracle Enterprise Manager 10
g
18
Troubleshooting SSL
18.1
Name-Based Virtual Hosting and SSL
18.2
Common ORA Errors Related to SSL
Part V Backup and Recovery
19
Introduction to Backup and Recovery
19.1
Philosophy of Oracle Application Server Backup and Recovery
19.2
Overview of the Backup Strategy
19.2.1
Types of Backups
19.2.2
Oracle Application Server Component Backup Input Files
19.2.3
Recommended Backup Strategy
19.3
Overview of Recovery Strategies
19.4
What Is the Oracle Application Server Backup and Recovery Tool?
19.5
Assumptions and Restrictions
19.6
Roadmap for Getting Started with Backup and Recovery
20
Oracle Application Server Backup and Recovery Tool
20.1
How to Obtain the Oracle Application Server Backup and Recovery Tool
20.1.1
Manually Installing the OracleAS Backup and Recovery Tool
20.2
Using Oracle Application Server Control to Configure the Backup and Recovery Tool
20.3
How to Configure the OracleAS Backup and Recovery Tool Manually
20.4
Running the Portal Validation/Cleanup Utility
20.5
Customizing the Tool for Your Configuration Files
20.5.1
How the Tool Works When Backing Up Configuration Files
20.5.2
How to Customize the Tool
20.6
OracleAS Backup and Recovery Tool Usage Summary
20.6.1
Prerequisites for Running the Tool
20.6.2
Syntax
20.6.3
Usage Examples
20.6.4
Purging Backups and Moving Them to Tertiary Storage
21
Backup Strategy and Procedures
21.1
Recommended Backup Strategy
21.2
Backup Procedures
21.2.1
Enabling Block Change Tracking
21.2.2
Enabling ARCHIVELOG Mode
21.2.3
Creating a Record of Your Oracle Application Server Configuration
21.2.4
Performing an Instance Backup of Oracle Application Server Using Application Server Control Console
21.2.5
Performing an Oracle Application Server Instance Backup from the Command Line
21.2.6
Performing a Complete Oracle Application Server Environment Backup
21.3
Recovering a Loss of Host Automatically
21.3.1
Preparing to Use Loss of Host Automation
21.3.2
Enabling Loss of Host Automation
21.3.3
Restoring a Node on a New Host
21.3.4
Restoring a Host with Identity Management to a Host with a Different Name
21.3.5
Recovering an Instance on the Same Host
22
Recovery Strategies and Procedures
22.1
Recovery Strategies
22.1.1
Recovery Strategies for Data Loss, Host Failure, or Media Failure (Critical)
22.1.2
Recovery Strategies for Process Failures and System Outages (Non-Critical)
22.2
Recovery Procedures
22.2.1
Using Application Server Control Console to Recover an Oracle Application Server Instance
22.2.2
Restoring an Infrastructure to the Same Host
22.2.3
Restoring an Infrastructure to a New Host
22.2.4
Restoring an Identity Management Instance to a New Host
22.2.5
Restoring and Recovering the Metadata Repository
22.2.5.1
Restoring and Recovering the Metadata Repository to the Same Host
22.2.5.2
Restoring and Recovering the Metadata Repository to a New Host
22.2.6
Restoring Infrastructure Configuration Files
22.2.7
Restoring a Middle-Tier Installation to the Same Host
22.2.8
Restoring a Middle-Tier Installation to a New Host
22.2.9
Restoring Middle-Tier Configuration Files
22.2.10
Restoring a File-Based Repository to a New Host
22.2.11
Restoring an Oracle Application Server Instance
23
Troubleshooting the Backup and Recovery Tool
23.1
Problems and Solutions
23.1.1
Receiving restore_config Operation Fails Error
23.1.2
Receiving Missing Files Messages During restore_config Operation
23.1.3
File-Based Repository Restoration Fails
23.1.4
Cannot Run a Cold Backup on Identity Management or J2EE Instance
23.1.5
Failure Due to Loss or Corruption of OPMN.XML File
23.1.6
A restore_config Operation Fails
23.1.7
Backup Operation Fails on a DCM File-Based Repository
23.1.8
Timeout Occurs While Trying to Stop Processes Using opmnctl stopall
23.1.9
Using the Backup and Recovery Tool to Perform a Recovery Fails Due to an Unknown Log Sequence Number
23.1.10
Enterprise Manager Cannot Access Restored Nodes on New Hosts
23.1.11
Restore of Portal Fails After Deleting OC4J Instance
23.1.12
Cold Backups Do Not Shut Down All Databases in RAC Environment
23.1.13
A restore_instance Fails at restore_repos Stage
23.1.14
Changing ORACLE_HOME May Cause Backup or Recovery Failure
23.1.15
Restore Operation Changes Farm Topology Leaving an Instance in Inconsistent State
23.1.16
Post-deployment Changes to Configuration Files Are Lost After Restoring DCM-Managed Components
Part VI Appendixes and Glossary
A
Managing and Configuring Application Server Control
A.1
Starting and Stopping the Application Server Control
A.1.1
Starting and Stopping the Application Server Control Console on UNIX
A.1.2
Starting and Stopping the Application Server Control Console on Windows
A.1.3
Verifying That the Application Server Control Is Running
A.2
Understanding Application Server Control Console Processes on UNIX
A.3
Changing the ias_admin Password
A.3.1
Changing the Password Using the Application Server Control Console
A.3.2
Changing the Password Using the emctl Command-Line Tool
A.4
Configuring Security for Application Server Control Console
A.5
Using the EM_OC4J_OPTS Environment Variable to Set Additional Application Server Control Options
A.5.1
Summary of Options You Can Set with the EM_OC4J_OPTS Environment Variable
A.5.2
Setting the EM_OC4J_OPTS Environment Variable
A.6
Enabling ODL for the Application Server Control Log File
A.6.1
Configuring the Application Server Control Logging Properties to Enable ODL
A.6.2
About the Application Server Control ODL Logging Properties
A.6.3
Configuring Logging Properties When ODL Is Not Enabled
A.7
Enabling Enterprise Manager Accessibility Mode
A.7.1
Making HTML Pages More Accessible
A.7.2
Providing Textual Descriptions of Enterprise Manager Charts
A.7.3
Modifying the uix-config.xml File to Enable Accessibility Mode
A.8
Managing Multiple Oracle Application Server Instances on a Single Host
A.8.1
Restrictions and Supported Configurations
A.8.1.1
General Restrictions
A.8.1.2
Supported Installation Types
A.8.1.3
Support for Separately Installed Components
A.8.2
Creating a New targets.xml for the Active Application Server Control
A.8.3
Updating the StandaloneConsoleURL Property in the Inactive targets.xml File
A.8.4
Updating the opmn.xml File to Refer to the Active Application Server Control
A.8.5
Restarting the Active Application Server Control and Verifying the Results
A.8.5.1
Verifying the Procedure for Infrastructure Installations
A.8.5.2
Verifying the Procedure for Middle-Tier Installations
A.8.6
Deinstallation Procedures
A.8.6.1
Deinstalling the Oracle Home with the Active Application Server Control
A.8.6.2
Deinstalling the Oracle Home with the Inactive Application Server Control
B
Oracle Application Server Command-Line Tools
C
URLs for Components
D
Oracle Application Server Port Numbers
D.1
Port Numbers and How They Are Assigned (Sorted by Installation Type)
D.1.1
J2EE and OracleAS Web Cache Ports
D.1.2
Portal and Wireless Ports
D.1.3
Business Intelligence and Forms Ports
D.1.4
Infrastructure Ports
D.1.5
Oracle Application Server Integration Ports
D.1.6
Oracle Enterprise Manager 10
g
Grid Control Ports
D.1.7
Oracle Content Management Software Development Kit Ports
D.1.8
OracleAS Developer Kits
D.2
Port Numbers (Sorted by Port Number)
E
Metadata Repository Schemas
E.1
Metadata Repository Schema Descriptions
E.1.1
Identity Management Schemas
E.1.2
Product Metadata Schemas
E.1.3
Management Schemas
E.2
Metadata Repository Schemas, Tablespaces, and Default Datafiles
F
printlogs Tool Syntax and Usage
F.1
Introduction
F.2
Basic Syntax
F.3
Detailed Option Descriptions
F.3.1
Input Options
F.3.2
Filter Options
F.3.3
Output Options
F.3.4
General Options
F.4
Log Record Fields
F.5
Environment Variable
F.6
Examples
G
Examples of Administrative Changes
G.1
How to Use This Appendix
G.2
Examples of Administrative Changes (by Component)
H
Supplementary Procedures for Configuring LDAP-Based Replicas
H.1
About LDAP-Based Replicas
H.1.1
What Is an LDAP-Based Replica?
H.1.2
How Is the LDAP-Based Replica Used for Changing Infrastructure Services?
H.2
Installing and Setting Up an LDAP-Based Replica
H.2.1
Things to Know Before You Start
H.2.2
Procedure
I
Viewing Oracle Application Server Release Numbers
I.1
Release Number Format
I.2
Viewing Oracle Application Server Installation Release Numbers
I.3
Viewing Component Release Numbers
I.4
Viewing Oracle Internet Directory Release Numbers
I.5
Viewing Metadata Repository Release Numbers
I.6
Using the OPatch Utility
I.6.1
Requirements
I.6.2
Running the OPatch Utility
I.6.2.1
apply Option
I.6.2.2
lsinventory Option
I.6.2.3
query Option
I.6.2.4
rollback Option
I.6.2.5
version Option
J
Troubleshooting Oracle Application Server
J.1
Diagnosing Oracle Application Server Problems
J.2
Common Problems and Solutions
J.2.1
Oracle Application Server Infrastructure Instance Will Not Start
J.2.2
Cannot Reset Administrator (ias_admin) Password
J.2.3
Cannot Restore Backup to a Different Host
J.2.4
Application Performance Impacted by Garbage Collection Pauses
J.2.5
Application Server Returns Connection Refused Errors
J.2.6
Oracle HTTP Server Unable to Start Due to Port Conflict
J.2.7
Machine Overloaded by Number of HTTPD Processes
J.2.8
Oracle Application Server Process Does Not Start
J.2.9
OPMN Start Up Consumes CPU Processing Capability
J.2.10
OPMN Cannot Start
J.2.11
DCM Daemon Cannot Start
J.2.12
DCM Unable to Connect to the Directory
J.2.13
DCM Cannot Access the Infrastructure Database
J.2.14
OracleAS Web Cache Fails to Initialize or Restart a Managed Process
J.2.15
Browser Displaying a Page Not Displayed Error
J.2.16
Unable to Access OracleAS Portal
J.2.17
Unable to Log into OracleAS Portal
J.2.18
Oracle Internet Directory Server Does Not Start
J.2.19
Poor LDAP Search Performance
J.2.20
Authentication Failed
J.2.21
Logging into OracleAS Single Sign-On Takes a Long Time
J.2.22
Standby Site Not Synchronized
J.2.23
Failure to Bring Up Standby Instances After Failover or Switchover
J.2.24
Diagnosing OracleAS Forms Services FRM-XXXXX Errors
J.2.25
Resolving OracleAS Forms Services Memory Problems
J.2.26
Hanging Report Requests
J.2.27
List of Values (LOV) Too Long for a Discoverer Portlet URL
J.2.28
Out of Memory Problems for the OC4J_BI_forms JVM Process
J.2.29
Problems Editing or Creating Discoverer Portlets
J.2.30
Previously Working Application Using ADF Business Components Starts Throwing JDBC Errors
J.3
Troubleshooting Application Server Control
J.3.1
Application Server Control General Problems and Solutions
J.3.1.1
Resetting the Administrator (ias_admin) Password
J.3.1.2
Unavailable Metric and Chart Data in the Application Server Control Console
J.3.1.3
Application Server Status Is Down When Server Components Are Up
J.3.1.4
Errors When Starting Application Server Control
J.3.1.5
Problems Connecting to an Application Server Instance from Farm or Cluster Page
J.3.1.6
Application Server Home Page Indicates That the Farm Is Unavailable
J.3.1.7
Error Connecting to the Directory Server
J.3.1.8
Browser Displays "SMISession has been invalidated" Error
J.3.1.9
Memory Errors Generated by the Oracle Management Agent
J.3.1.10
Administration Tasks Performed Using the Command Line Are Not Reflected in Application Server Control Console
J.3.1.11
SSL Timeout Issues with Microsoft Internet Explorer Browsers
J.3.1.12
Session Has Expired Message When Using Multiple Browser Windows
J.3.1.13
Topology Viewer Applet Not Loading
J.3.1.14
No Propagation Between Grid Control and Application Server Control When Creating a New OC4J Instance
J.3.1.15
Problems Viewing Metrics When Configured for Secure Sockets Layer (SSL)
J.3.1.16
Problems Displaying the Date Selection Window When Searching the Log Repository
J.3.2
OC4J Management Problems and Solutions
J.3.2.1
Problems Using the OC4J Security Page
J.3.2.2
Lookup Error When Deploying an OC4J Application
J.3.2.3
Redeploying WAR Applications with Application Server Control
J.3.2.4
Deployment Performance in Internet Explorer and Netscape Navigator 7.0
J.3.2.5
Problems Deploying Large OC4J Applications
J.3.2.6
Troubleshooting OC4J Out of Memory Errors
J.4
Need More Help?
Glossary
Index
