Oracle Delegated Administration Services, 7 of 8

Configuring Oracle Delegated Administration Services in a New Oracle Home

Oracle Delegated Administration Services is configured automatically as part of the default Identity Management and Metadata Repository installation in which Oracle Internet Directory, Oracle Delegated Administration Services, and OracleAS Single Sign-On are selected. In some situations, you may need to configure it on a computer other than that on which the infrastructure is configured. You can do this in one of two ways: either by performing a standalone Oracle Delegated Administration Services installation using the Oracle Installer, or manually.

This section contains these topics:

Performing a Standalone Oracle Delegated Administration Services Installation

To perform a standalone Oracle Delegated Administration Services installation, when prompted by the Oracle Installer, select the Identity Management installation type. On the Configuration Options screen, select "Delegated Administration Service".

Note:
If you configure Oracle Application Server Single Sign-On and Oracle Delegated Administration Services in separate installations against the same Oracle Internet Directory, then be sure to configure OracleAS Single Sign-On first. This is because Oracle Delegated Administration Services depends on mod_osso, which is not set up during installation unless the Oracle Internet Directory it points to already has OracleAS Single Sign-On configured.

See Also:
Oracle Application Server 10g Installation Guide for further instructions

Manually Deploying Oracle Delegated Administration Services in a New Oracle Home

To manually deploy Oracle Delegated Administration Services in a separate Oracle Home, follow these steps:

Verify that the computer has at least the core installation installed and the installation is pointing to an existing Oracle Internet Directory/Oracle Application Server Single Sign-On.
Navigate to the ORACLE_HOME/dcm/bin directory.

Create a new component using the following command:

dcmctl createcomponent -verbose -debug -ct oc4j -co OC4J_SECURITY

Start the component by using the following command:
```
dcmctl start -verbose -debug -co OC4J_SECURITY
```

Deploy the oiddas.ear file using the following command:

dcmctl deployApplication -debug -verbose -a oiddas -f
ORACLE_HOME/ldap/das/oiddas.ear -co OC4J_SECURITY

Perform the following steps to add the LD_LIBRARY_PATH and DISPLAY environment variables to the opmn.xml file:
1. Navigate to the ORACLE_HOME/opmn/conf directory and open opmn.xml in a text editor.
2. Add the following lines in the OC4J_SECURITY section of opmn.xml:
  
  For a UNIX environment:
```
<environment>
<prop name="DISPLAY" value="%hostname%:0.0"/>
<prop name="LD_LIBRARY_PATH" value="%ORACLE_HOME%/lib"/>
</environment>
```
  For a Windows environment:
```
<environment>
<prop name="PATH" value="%ORACLE_HOME%/bin"/>
</environment>
```
  Replace hostname and ORACLE_HOME with the appropriate values. Hostname should point to a computer where X server is running.
  
  Note the placement of the section <environment> in the following example.
```
<oc4j maxRetry="3" instanceName="OC4J_DAS" gid="OC4J_SECURITY"
numProcs="1">
<config-file path="/home/ias902/j2ee/OC4J_
DAS/config/server.xml"/>
<oc4j-option value="-properties"/>
<port ajp="3001-3100" jms="3201-3300"
rmi="3101-3200"/>
<environment>
<prop name="DISPLAY" value="sandal:0.0"/>
<prop name="LD_LIBRARY_PATH" value="/home/ias902/lib"/>
</environment>
</oc4j>
```
3. Navigate to the ORACLE_HOME/dcm/bin directory.
4. Save the changes to the repository by using the following command:
```
dcmctl updateconfig -verbose -debug -ct opmn
```
5. Restart OPMN by using the following command:
```
dcmctl restart -verbose -ct opmn
```
6. Stop and start the OC4J_SECURITY instance by using the following commands:
```
dcmctl stop -verbose -debug -ct oc4j -co OC4J_SECURITY
dcmctl start -verbose -debug -ct oc4j -co OC4J_SECURITY
```
7. Set the necessary permissions for Oracle Delegated Administration Services. Modify the group by using either Oracle Directory Manager or the command-line tool. Add the DN of the new Oracle Application Server instance where Oracle Delegated Administration Services is currently being deployed as the uniquemember.
```
DN of the group to be modified:

cn=Associated 
Mid-tiers,orclApplicationCommonName=DASApp,cn=DAS,cn=Products,cn=OracleC
ontext
```
  The DN on the Oracle Application Server instance is:
```
orclApplicationCommonName=name of Oracle Application Server 
instance,cn=IAS Instances, cn=IAS, cn=Products,

cn=OracleContext 
```
  where name of Oracle Application Server instance is obtained from $ORACLE_HOME/config/ias.properties.