Contents

Title and Copyright Information

Preface

• Intended Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Product and Installation Overview

• 1.1 Product Overview
• 1.2 Where Do I Find Installation Instructions for My Product?
• 1.3 Recommended Topologies
  • 1.3.1 Installing Oracle Identity Management in a Single Oracle Home
  • 1.3.2 Installing a Distributed Oracle Identity Management with an Integrated Oracle HTTP Server
  • 1.3.3 Installing a Distributed Oracle Identity Management with a Standalone Oracle HTTP Server

2 Requirements

• 2.1 Using OracleMetaLink to Obtain the Latest Oracle Application Server Hardware and Software Requirements
• 2.2 System Requirements
  • 2.2.1 Installing from the Console or X Windows
  • 2.2.2 Tips for Reducing Memory Usage
• 2.3 Software Requirements
  • 2.3.1 Software Requirements for Red Hat Enterprise Linux AS/ES 4.0 Systems
  • 2.3.2 Software Requirements for SUSE Linux Enterprise Server 9 Systems
• 2.4 Kernel Parameters
  • 2.4.1 Kernel Parameter Settings for OracleAS Metadata Repository
• 2.5 Set Shell Limits for the oracle User
• 2.6 Ports
  • 2.6.1 Checking If a Port Is in Use
  • 2.6.2 Using Default Port Numbers
  • 2.6.3 Using Custom Port Numbers (the "Static Ports" Feature)
    • 2.6.3.1 Format of the staticports.ini File
    • 2.6.3.2 Error Conditions that Will Cause the Installer to Use Default Ports Instead of Specified Ports
    • 2.6.3.3 Example
  • 2.6.4 If Port 1521 Is in Use
    • 2.6.4.1 If Port 1521 Is In Use by an Existing Oracle Database
    • 2.6.4.2 If Port 1521 Is In Use by Some Other Application
• 2.7 Operating System Groups
  • 2.7.1 Create a Group for the Inventory Directory
  • 2.7.2 Create Groups for Database Administrators
• 2.8 Operating System User
• 2.9 Environment Variables
  • 2.9.1 Environment Variable Tips
  • 2.9.2 ORACLE_HOME and ORACLE_SID
  • 2.9.3 PATH, CLASSPATH, and LD_LIBRARY_PATH
  • 2.9.4 DISPLAY
  • 2.9.5 TMP and TMPDIR
  • 2.9.6 TNS_ADMIN
  • 2.9.7 ORA_NLS
  • 2.9.8 LD_BIND_NOW
• 2.10 The /etc/hosts File
  • 2.10.1 Location of the Default Oracle Identity Management Realm
  • 2.10.2 Hostname for OracleAS Single Sign-On
• 2.11 Network Topics
  • 2.11.1 Installing on a DHCP Host
  • 2.11.2 Installing on Multihomed (Multi-IP) Computers
  • 2.11.3 Copying CD-ROMs or DVD-ROM to Hard Drive, and Installing from the Hard Drive
  • 2.11.4 Installing from a Remote CD-ROM or DVD-ROM Drive
  • 2.11.5 Installing on Remote Computers
  • 2.11.6 Installing on NFS-Mounted Storage
  • 2.11.7 Running Multiple Instances from One Installation
  • 2.11.8 Support for NIS and NIS+
• 2.12 Prerequisite Checks Performed by the Installer

3 Things You Should Know Before Starting the Installation

• 3.1 Oracle Home Directory
  • 3.1.1 Installing in an Existing Oracle Home
  • 3.1.2 Installing in a Non-Empty Oracle Home
• 3.2 Can I Use Symbolic Links?
• 3.3 First-Time Installation of Any Oracle Product
• 3.4 Installing Additional Languages
• 3.5 Oracle Application Server Instances and Instance Names
• 3.6 The ias_admin User and Restrictions on its Password
• 3.7 Comparing Installing Components against Configuring Components
• 3.8 Where Does the Installer Write Files?
• 3.9 Why Do I Need to be Able to Log In as Root at Certain Times During Installation?
• 3.10 Running root.sh During Installation
• 3.11 Can I Modify Other Oracle Application Server Instances During Installation?
• 3.12 Connecting to Oracle Internet Directory Through SSL Connections
• 3.13 Obtaining Software from Oracle E-Delivery
  • 3.13.1 Finding and Downloading the Oracle Application Server 10g (10.1.4.0.1) E-Pack
  • 3.13.2 Finding Required and Optional Downloads
  • 3.13.3 Disk Space Requirements
  • 3.13.4 Software Requirements for Unzipping Files
  • 3.13.5 Extracting Software from the Zip Files
• 3.14 Setting the Mount Point for the CD-ROM or DVD-ROM
• 3.15 Starting the Oracle Universal Installer

4 Installing OracleAS Infrastructure

• 4.1 Infrastructure Installation Types
• 4.2 Why Would I Select the Different Infrastructure Installation Types?
• 4.3 Order of Installation for the Infrastructure
• 4.4 Can I Install Components on Separate Computers?
• 4.5 Tips for Installing Oracle Identity Management Components Separately
• 4.6 Do I Need the Oracle Delegated Administration Services or the Oracle Directory Integration Platform Components?
• 4.7 Can I Configure Components After Installation?
• 4.8 Can I Use an Existing Database for the OracleAS Metadata Repository?
• 4.9 Can I Use an Existing Oracle Internet Directory?
• 4.10 Registration of OracleAS Metadata Repository in Oracle Internet Directory and Password Randomization
• 4.11 Contents of the OracleAS Metadata Repository
• 4.12 Can I Use Multiple Metadata Repositories?
• 4.13 What High Availability Options Does Oracle Application Server Support?
• 4.14 Restrictions on the Passwords for the SYS, SYSTEM, SYSMAN, and DBSNMP Users
• 4.15 Support for NE8ISO8859P10 and CEL8ISO8859P14 Characters Sets
• 4.16 What Do I Enter in the "Specify Namespace in Internet Directory" Screen?
• 4.17 How to Determine Port Numbers Used by Components
• 4.18 Can I Add OCA After Installation?
• 4.19 How to Deploy Oracle Delegated Administration Services on a Separate Host
• 4.20 Installing OracleAS Infrastructure
• 4.21 Installing OracleAS Infrastructure Against an Existing Oracle Internet Directory
• 4.22 Installing OracleAS Metadata Repository in a New Database
• 4.23 Installing Oracle Identity Management Components Only (Including Oracle Internet Directory)
• 4.24 Installing Oracle Identity Management Components Only (Excluding Oracle Internet Directory)
• 4.25 Installing Oracle Internet Directory Only
• 4.26 Installing OCA and OracleAS Metadata Repository Only
• 4.27 Install Fragment: The First Few Screens of the Installation
• 4.28 Install Fragment: The Last Few Screens of the Installation
• 4.29 Install Fragment: Database Screens
• 4.30 Install Fragment: OCA Screens

5 Configuring Oracle Internet Directory for Oracle Application Server Installation Privileges

• 5.1 Default Users in Oracle Internet Directory
• 5.2 Groups in Oracle Internet Directory
  • 5.2.1 "Global" Groups
  • 5.2.2 Groups for Each Metadata Repository
  • 5.2.3 Groups for Each Component
• 5.3 Groups Required to Configure or Deinstall Components
• 5.4 Groups Required to Install Middle Tiers
  • 5.4.1 Groups Required to Install Against the Desired Metadata Repository
  • 5.4.2 Groups Required to Install Middle-tier Components
  • 5.4.3 Example
• 5.5 Groups Required to Install Additional Metadata Repositories
• 5.6 Example of Installation with Different Users
• 5.7 How to Create Users in Oracle Internet Directory
• 5.8 How to Add Users to Groups in Oracle Internet Directory
  • 5.8.1 Using Oracle Directory Manager to Add Users to Groups
    • 5.8.1.1 Navigating to "Global" Groups
    • 5.8.1.2 Navigating to Metadata Repository Groups
    • 5.8.1.3 Navigating to Component Groups
  • 5.8.2 Using Deployment Delegation Console to Add Users to Groups
• 5.9 Contents of a New Oracle Internet Directory
• 5.10 On the Specify Login for Oracle Internet Directory Screen, What Username and Realm Do I Enter?

6 Installing Oracle Internet Directory in Replicated Mode

• 6.1 Oracle Internet Directory Replication Overview
  • 6.1.1 Fan-Out Replication (LDAP Replication)
  • 6.1.2 Multimaster Replication (Advanced Replication)
• 6.2 Requirements
  • 6.2.1 Database Requirements
  • 6.2.2 Clock Synchronization
• 6.3 Installation Order
• 6.4 Installing a Master Oracle Internet Directory
• 6.5 Installing an Oracle Internet Directory Replica
  • 6.5.1 Overview of Installing a Replica
  • 6.5.2 Installing an Oracle Internet Directory Replica with a New Database
  • 6.5.3 Installing an Oracle Internet Directory Replica against an Existing Database
• 6.6 Accessing OracleAS Single Sign-On and Oracle Delegated Administration Services

7 Installing in High Availability Environments: Overview

• 7.1 Overview of High Availability Configurations
  • 7.1.1 OracleAS Cold Failover Cluster
  • 7.1.2 OracleAS Clusters
  • 7.1.3 OracleAS Disaster Recovery
  • 7.1.4 Summary of Differences
• 7.2 Installation Order for High Availability Configurations
• 7.3 Requirements for High Availability Configurations
  • 7.3.1 Check Minimum Number of Nodes
  • 7.3.2 Check That Groups Are Defined Identically on All Nodes
  • 7.3.3 Check the Properties of the oracle User
  • 7.3.4 Check for Previous Oracle Installations on All Nodes

8 Installing in High Availability Environments: OracleAS Cold Failover Cluster

• 8.1 OracleAS Cold Failover Cluster: Introduction
• 8.2 Pre-Installation Steps for OracleAS Cold Failover Cluster
  • 8.2.1 Map the Virtual Hostname and Virtual IP Address
  • 8.2.2 Set Up a File System That Can Be Mounted from Both Nodes
  • 8.2.3 Review Recommendations for Automatic Storage Management (ASM)
  • 8.2.4 Check That Clusterware Is Running (Automated Failovers only)
  • 8.2.5 Modify listener.ora file for Existing Database
• 8.3 Installing an OracleAS Cold Failover Cluster (Infrastructure) Configuration
  • 8.3.1 OracleAS Cold Failover Cluster (Infrastructure): Overview of Installation Steps
  • 8.3.2 OracleAS Cold Failover Cluster (Infrastructure): Details of Installation Steps
• 8.4 Installing a Distributed OracleAS Cold Failover Cluster (Infrastructure) Configuration
  • 8.4.1 Distributed OracleAS Cold Failover Cluster (Infrastructure): Overview of Installation Steps
  • 8.4.2 Distributed OracleAS Cold Failover Cluster (Infrastructure): Details of Installation Steps
• 8.5 Installing an OracleAS Cold Failover Cluster (Identity Management) Configuration
  • 8.5.1 OracleAS Cold Failover Cluster (Identity Management): Overview of Installation Steps
  • 8.5.2 OracleAS Cold Failover Cluster (Identity Management): Details of Installation Steps
• 8.6 Installing a Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration
  • 8.6.1 Distributed OracleAS Cold Failover Cluster (Identity Management): Overview of Installation Steps
  • 8.6.2 Distributed OracleAS Cold Failover Cluster (Identity Management): Details of Installation Steps
• 8.7 Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in an OracleAS Cold Failover Cluster
  • 8.7.1 Oracle Delegated Administration Services and OracleAS Single Sign-On in OracleAS Cold Failover Cluster: Overview of Installation Steps
  • 8.7.2 Oracle Delegated Administration Services and OracleAS Single Sign-On in OracleAS Cold Failover Cluster: Details of Installation Steps
• 8.8 Installing Only the OracleAS Metadata Repository in an OracleAS Cold Failover Cluster Environment
• 8.9 Post-Installation Steps for OracleAS Cold Failover Cluster
  • 8.9.1 Edit the ORACLE_HOME/Apache/Apache/htdocs/index.html File
  • 8.9.2 Copy the /var/opt/oracle Directory to the Other Node
  • 8.9.3 Running Database Console against a Cold Failover Cluster Database
  • 8.9.4 Edit the oraInst.loc and oratab Files on the Secondary Node
  • 8.9.5 Create a Clusterware Agent for Automatic Failover
• 8.10 Installing Middle Tiers Against an OracleAS Cold Failover Cluster Infrastructure
  • 8.10.1 If You Plan to Install Middle Tiers on OracleAS Cold Failover Cluster Nodes
    • 8.10.1.1 Create a staticports.ini File for the Middle Tier
    • 8.10.1.2 Rename the /etc/oraInst.loc File Used for the Infrastructure
  • 8.10.2 Procedure for Installing Middle Tiers Against an OracleAS Cold Failover Cluster Infrastructure
• 8.11 Installing Regular Middle-Tiers on OracleAS Cold Failover Cluster Nodes

9 Installing in High Availability Environments: OracleAS Cluster (Identity Management)

• 9.1 OracleAS Cluster (Identity Management): Introduction
• 9.2 Pre-Installation Steps for OracleAS Cluster (Identity Management)
  • 9.2.1 Use the Same Path for the Oracle Home Directory (recommended)
  • 9.2.2 Synchronize Clocks on All Nodes
  • 9.2.3 Configure Virtual Server Names and Ports for the Load Balancer
  • 9.2.4 Configure Your LDAP Virtual Server
    • 9.2.4.1 Load Balancer Supports LDAP Service Monitoring
    • 9.2.4.2 Load Balancer Does Not Support LDAP Service Monitoring
• 9.3 About Oracle Internet Directory Passwords
• 9.4 About Configuring SSL and Non-SSL Ports for Oracle HTTP Server
  • 9.4.1 Case 1: Client ---[HTTP]---> Load Balancer ---[HTTP]---> Oracle HTTP Server
  • 9.4.2 Case 2: Client ---[HTTPS]---> Load Balancer ---[HTTPS]---> Oracle HTTP Server
  • 9.4.3 Case 3: Client ---[HTTPS]---> Load Balancer ---[HTTP]---> Oracle HTTP Server
• 9.5 Installing an OracleAS Cluster (Identity Management) Configuration
  • 9.5.1 Installation Order
  • 9.5.2 Installing OracleAS Metadata Repository
  • 9.5.3 Installing OracleAS Cluster (Identity Management) on the First Node
    • 9.5.3.1 Create staticports.ini File
    • 9.5.3.2 Disable TCP Monitoring on Load Balancer for First Node
    • 9.5.3.3 Configure the Load Balancer to Return Immediately to the Calling Client
    • 9.5.3.4 Ensure that the OracleAS Metadata Repository Is Not Registered with any Oracle Internet Directory
    • 9.5.3.5 Select the Same Components for Each Node
    • 9.5.3.6 Run the Installer
  • 9.5.4 Installing OracleAS Cluster (Identity Management) on Subsequent Nodes
• 9.6 Installing a Distributed OracleAS Cluster (Identity Management) Configuration
  • 9.6.1 Installation Order
  • 9.6.2 Installing OracleAS Metadata Repository
  • 9.6.3 Installing Oracle Internet Directory on the First Node
    • 9.6.3.1 Set up staticports.ini File
    • 9.6.3.2 Select the Same Components for Each Installation
    • 9.6.3.3 Start the Installer
  • 9.6.4 Installing Oracle Internet Directory on Subsequent Nodes
    • 9.6.4.1 Staticports.ini File Not Needed
    • 9.6.4.2 Select the Same Components for Each Installation
    • 9.6.4.3 Start the Installer
  • 9.6.5 Installing OracleAS Single Sign-On and Oracle Delegated Administration Services on Each Node
    • 9.6.5.1 Set up staticports.ini File
    • 9.6.5.2 Start the Installer
• 9.7 Post-Installation Steps
  • 9.7.1 Cluster the OC4J_Security Instance for State Replication (First Oracle Delegated Administration Services node only)
  • 9.7.2 Changing the Ports for Oracle Internet Directory
  • 9.7.3 Update targets.xml (Case 2 only)
• 9.8 Installing Middle Tiers Against OracleAS Cluster (Identity Management) Configurations

10 Installing in High Availability Environments: OracleAS Disaster Recovery

• 10.1 OracleAS Disaster Recovery: Introduction
• 10.2 Setting up the OracleAS Disaster Recovery Environment
  • 10.2.1 Ensure Nodes Are Identical at the Operating System Level
  • 10.2.2 Set Up staticports.ini File
  • 10.2.3 Set Up Identical Hostnames on Both Production and Standby Sites
  • 10.2.4 If You Want to Use OracleAS Cold Failover Cluster on the Production Site
• 10.3 Installing Oracle Application Server in an OracleAS Disaster Recovery Environment
  • 10.3.1 Installing the OracleAS Infrastructure
  • 10.3.2 Installing Middle Tiers
• 10.4 Installing the OracleAS 10g (10.1.2.0.2) Standalone Install of OracleAS Guard into Oracle Homes
• 10.5 Patching OracleAS Guard Release 10.1.2.0.0 with Release 10.1.2.0.2
• 10.6 What to Read Next

11 Post-Installation Tasks

• 11.1 State of Oracle Application Server Instances After Installation
• 11.2 Passwords for Oracle Application Server Components
• 11.3 NFS Installations
• 11.4 Backup and Recovery
• 11.5 SSL
• 11.6 Operating System Locale and NLS_LANG Environment Variable
  • 11.6.1 Check the Operating System Locale
  • 11.6.2 Check the NLS_LANG Setting
• 11.7 Component Configuration After Installation
  • 11.7.1 Configuring mod_osso (Required for Oracle Delegated Administration Services)
• 11.8 Components that Require Post-Installation Tasks
• 11.9 What to Do Next

A Installing the Oracle Identity Management Grid Control Plug-in

• A.1 Installation Requirements
• A.2 Starting the Grid Control Plug-in Installer
• A.3 Installing Oracle Identity Management Grid Control Plug-in
• A.4 Installing Oracle Identity Management Grid Control Plug-in Agent

B Silent and Non-Interactive Installation

• B.1 Silent Installation
• B.2 Non-Interactive Installation
• B.3 Pre-Installation
• B.4 Notes for Silent and Non-Interactive Installations
  • B.4.1 Installing OracleAS Certificate Authority
• B.5 Create the Response File
  • B.5.1 Creating Response Files from Templates
  • B.5.2 Creating Response Files by Using the Record Mode in the Installer
  • B.5.3 Variables to Modify in the Response Files
  • B.5.4 Example Response Files
    • B.5.4.1 Example Response File for OracleAS Infrastructure: Oracle Identity Management Only
    • B.5.4.2 Example Response File for OracleAS Infrastructure: OracleAS Metadata Repository Only
    • B.5.4.3 Example Response File for OracleAS Infrastructure: Identity Management and OracleAS Metadata Repository
    • B.5.4.4 Example Response File for Oracle Identity Federation
• B.6 Start the Installation
• B.7 Post-Installation
• B.8 Security Tips for Silent and Non-Interactive Installations
• B.9 Deinstallation

C Default Port Numbers

• C.1 Method of Assigning Default Port Numbers
• C.2 Default Port Numbers
• C.3 Ports to Open in Firewalls

D Deinstallation and Reinstallation

• D.1 Deconfig Tool
  • D.1.1 Parameters
  • D.1.2 Log Files Generated by the Deconfig Tool
• D.2 Deinstallation Procedure: Overview
• D.3 Deinstalling OracleAS Cold Failover Cluster Installations
• D.4 Deinstalling OracleAS Single Sign-On Instances in OracleAS Cluster (Identity Management)
• D.5 Deinstalling OracleAS Cluster (Identity Management)
• D.6 Deinstalling OracleAS Infrastructure
  • D.6.1 Deinstallation Order
  • D.6.2 Deinstallation Steps
• D.7 Harmless Errors in the Log File
• D.8 Cleaning Up Oracle Application Server Processes
• D.9 Reinstallation
• D.10 Troubleshooting

E Configuration Assistants

• E.1 Troubleshooting Configuration Assistants
  • E.1.1 General Tips
  • E.1.2 Configuration Assistant Result Codes
• E.2 Description of Oracle Application Server Configuration Assistants

F Troubleshooting

• F.1 Log Files
• F.2 General Troubleshooting Tips
• F.3 Installation Problems and Solutions
  • F.3.1 Location of Log Files
  • F.3.2 Linking Failed, ORA Errors
  • F.3.3 Prerequisite Checks Fail at the Start of Installation
  • F.3.4 Message About Installing in a Non-Empty Directory
  • F.3.5 Messages About SHMMAX and SEMMSL
  • F.3.6 Installer Disappears After Running the Pre-Installation Checks
  • F.3.7 Unable to Clean Up a Failed Installation
  • F.3.8 Forgot the Password for the cn=orcladmin Account
  • F.3.9 cn=orcladmin Account Becomes Locked
  • F.3.10 User Interface Does Not Display in the Desired Language, or Does Not Display Properly
  • F.3.11 Installer Does Not Display Correct Database Name for OracleAS Metadata Repository
  • F.3.12 Configuration Assistant Failures - General
  • F.3.13 OracleAS Randomize Password Configuration Assistant Failures
  • F.3.14 Database Configuration Assistant (DBCA) Failures
  • F.3.15 Harmless Error Message from Database Configuration Assistant (DBCA)
  • F.3.16 OPMN Configuration Assistant - Start HTTP Server Failures
  • F.3.17 OPMN Configuration Assistant - Start DAS Instance Failures
  • F.3.18 OPMN Configuration Assistant - Start OCA Failures
  • F.3.19 WARNING: DCM service may not be available at this time
  • F.3.20 OracleAS Cluster (Identity Management)- Cluster Configuration Assistant Fails
  • F.3.21 OracleAS Cluster (Identity Management) - Installation Fails on Second Oracle Internet Directory Node
  • F.3.22 OracleAS Cluster (Identity Management) - Installation Fails on Second Oracle Delegated Administration Services and OracleAS Single Sign-On Node
• F.4 Deinstallation Problems and Solutions
  • F.4.1 Obsolete Partner URLs Still Remain on the OracleAS Single Sign-On Administration Screen
  • F.4.2 Unable to Reuse Instance Name of a Deleted Instance
  • F.4.3 Unable to Reuse Database Name
  • F.4.4 Deconfiguration Failed on Distributed OracleAS Cluster (Identity Management)
• F.5 Need More Help?

Index