15 Postinstallation Tasks for Oracle Collaboration Suite

This chapter contains the following sections:

Section 15.1, "Setting Environment Variables"
Section 15.2, "Modifying Password Settings for Oracle Internet Directory"
Section 15.3, "Enabling SSL"
Section 15.4, "Performing Component-Specific Tasks"

15.1 Setting Environment Variables

After the installation is complete, you might need to set the environment variables listed in the following section. These environment variables are required for proper functioning of some Oracle Collaboration Suite commands. Variables that you must set are listed in the following table:

Variable Name	Bourne, Korn, or Derivative Shells	C Shell
`ORACLE_HOME`	ORACLE_HOME=/u01/oracle/product/ocs; export ORACLE_HOME	setenv ORACLE_HOME /u01/oracle/product/ocs
`PATH` `PATH` must include `ORACLE_HOME/bin`.	PATH=$ORACLE_HOME/bin:$PATH; export PATH	setenv PATH $ORACLE_HOME/bin:$PATH
`DISPLAY` `DISPLAY` must point to a running X server. Do not use X emulation on your client computer to start server processes. Run X server instead.	DISPLAY= X server:display_number.screen_number; export DISPLAY For example: DISPLAY= localhost:0.0; export DISPLAY	setenv DISPLAY X server:display_number.screen_number For example: setenv DISPLAY localhost:0.0
`LD_LIBRARY_PATH` `LD_LIBRARY_PATH` must include `$ORACLE_HOME/lib`	LD_LIBRARY_PATH=$ORACLE_HOME/lib; export LD_LIBRARY_PATH	setenv LD_LIBRARY_PATH $ORACLE_HOME/lib
`NLS_LANG` (optional, for globalization support)	NLS_LANG=language_territory.characterset; export NLS_LANG For example: de_de.WE8ISO8859P15; export NLS_LANG	setenv NLS_LANG language_territory.characterset For example: setenv de_de.WE8ISO8859P15
`ORA_NLS` `ORA_NLS` is the location of the globalization support-specific message files.	ORA_NLS=$ORACLE_HOME/ocommon/nls/admin/data; export ORA_NLS	setenv ORA_NLS $ORACLE_HOME/ocommon/nls/admin/data
`TNS_ADMIN` `TNS_ADMIN` is the location of the SQL*Net configuration files `tnsnames.ora`, `listener.ora`, `sqlnet.ora` and by default these are located in `$ORACLE_HOME/network/admin`.	TNS_ADMIN=$ORACLE_HOME/network/admin; export TNS_ADMIN	setenv TNS_ADMIN $ORACLE_HOME/network/admin

Note:

You can source the $ORACLE_HOME/bin/oraenv or $ORACLE_HOME/bin/coraenv scripts (depending on their current shell) to set the ORACLE_HOME and ORACLE_SID variables. These scripts will also add $ORACLE_HOME/bin in to the PATH variable.

15.2 Modifying Password Settings for Oracle Internet Directory

Beginning with Oracle Internet Directory 10g (9.0.4), the default password expiry time, which is assigned to the pwdmaxage attribute, is set to 60 days.

To change the default value, perform the following steps:

Perform this step only if your Oracle Internet Directory account is locked. Unlock the cn=orcladmin superuser account before you can modify password policies. Use the oidpasswd utility to unlock the superuser account as follows:
```
oidpasswd connect=ocsdb unlock_su_acct=true
OID DB user password:
OID super user account unlocked successfully.
```
This unlocks only the superuser account, cn=orcladmin. Do not confuse this account with the cd=orcladmin account within the default realm cn=orcladmin,cn=users,dc=xxxxx,dc=yyyyy. These are two separate accounts.
Start an Oracle Internet Directory 10g (10.1.2) version of Oracle Directory Manager and navigate to Password Policy Management. You will see two entries: cn=PwdPolicyEntry and the password policy for your realm—for example, password_policy_entry,dc=acme,dc=com.

Change the pwdmaxage attribute in each password policy to an appropriate value:
- 5184000 = 60 days (default)
- 7776000 = 90 days
- 10368000 = 120 days
- 15552000 = 180 days
- 31536000 = 1 year
Start the Oracle Directory Manager and navigate to the realm-specific orcladmin account. Find the userpassword attribute and assign a new value. You should then be able to start any Oracle component that uses Oracle Application Server Single Sign-On and log in as orcladmin.

Rerun the odisrvreg utility to reset the randomly generated password for Directory Integration and Provisioning:
```
odisrvreg -D cn=orcladmin -w welcome1 -p 3060
Already Registered...Updating DIS password...
DIS registration successful.
```

Reregister the connector:

odisrvreg -p port -D cn=orcladmin -w passwd

15.3 Enabling SSL

You may want to enable Secure Sockets Layer (SSL) depending on your security requirements. To enable SSL, perform the following steps:

Run the following script on the computer where Infrastructure is installed:
```
$ORACLE_HOME/bin/SSLConfigTool -config_w_default -opwd orcladmin_user_password
```
Note:
For detailed information on SSLConfigTool, refer to Oracle Applicaton Server Administrator's Guide at
http://www.oracle.com/technology/documentation/index.html
Run the following script on the computer where Applications tier is installed:
```
$ORACLE_HOME/bin/midtierSSLConfigTool.sh oid_hostname oid_port oid_ admin_dn
oid_admin_password http_server_SSL_port https hostname_of_the_computer_to_be_used true/false
```
In the preceding syntax, arguments for the script are:
- oid_hostname: The host name of the Oracle Internet Directory computer the Applications tier is associated with.
- oid_port: The port that the Oracle Internet Directory server is listening on.
- oid_admin_dn: The administrative DN (Distinguished Name) for the Oracle Internet Directory admin user (cn=orcladmin).
- oid_admin_password: The password for the Oracle Internet Directory admin user.
- http_server_SSL_port: The SSL port that was configured during the installation. This value can be found in the $ORACLE_HOME/install/portlist.ini file as the Oracle HTTP Server SSL port value.
- https: The indication that the HTTPS communication protocol will be used for Oracle HTTP Server.
- hostname_of_the_machine: The host name that the computer is using with reference to its Oracle Collaboration Suite configuration. This may be the local host name or a load balancer virtual host name, as the case may be.
- true/false: The boolean value indicates whether you are connecting to the Oracle Internet Directory SSL port or not. If the value is set to true, then it indicates that you are connecting to the Oracle Internet Directory SSL port. If the value is set to false, then it indicates that you are connecting to the Oracle Internet Directory non-SSL port.
Note:
The SSL script will not work for the single-computer installation if the the default ports for Oracle Collaboration Suite Web Access were changed to 80/443 from 7777/4443 in the staticports.ini file during the installation. Therefore, examine the value of Oracle Collaboration Suite Web Access ports in the file running the SSL script.

15.4 Performing Component-Specific Tasks

After you have successfully installed Oracle Collaboration Suite Applications and if you have installed Oracle Mail as a part of the Applications tier, then perform the following steps:

Log in as the oracle user.
Set the ORACLE_HOME and PATH variables.

Obtain the values of uid and groupid using the following command:

prompt> id
uid=509(oracle) gid=510(oinstall) groups=510(oinstall),511(dba)

Switch to the root user.
Start the TNS listener using the following command:
```
tnslsnr listener_es -user user_id -group group_id &
```
In the preceding command, user_id and group_id are the IDs of user that owns the installation. Here, assuming the oracle user installed Oracle Collaboration Suite, user_id refers to the value 509 and group_id refers to the value 510, as shown in Step 3.