Skip Headers
Oracle® Application Server Administrator's Guide
10
g
Release 3 (10.1.3.2.0)
Part Number B32196-01
Home
Book List
Index
Contact Us
Next
View PDF
Contents
List of Figures
List of Tables
Title and Copyright Information
Preface
Audience
Documentation Accessibility
Related Documentation
Conventions
What's New in Oracle Application Server Administration?
New Features for 10
g
Release 3 (10.1.3.2.0)
Part I Getting Started
1
Getting Started After Installing Oracle Application Server
1.1
Understanding Oracle Application Server 10
g
Release 3 (10.1.3.2.0)
1.2
Task 1: Set Up Environment Variables
1.3
Task 2: Use the Oracle Application Server Welcome Page
1.4
Task 3: Check Your Port Numbers
1.5
Task 4: Get Started with Managing Components
1.5.1
Getting Started with Oracle Process Manager and Notification Server (OPMN)
1.5.2
Getting Started with Oracle HTTP Server
1.5.3
Getting Started with Oracle Containers for J2EE (OC4J)
1.5.4
Getting Started with Oracle WebCenter Framework
1.5.5
Getting Started with Oracle Content DB
1.6
Task 5: Enable SSL (Optional)
2
Introduction to Administration Tools
2.1
Overview of Oracle Application Server Administration Tools
2.1.1
Managing Oracle Application Server with Oracle Enterprise Manager 10
g
Application Server Control
2.1.2
Managing Oracle Application Server Using the OPMN Command Line
2.1.3
Managing Oracle Application Server Using the admin_client.jar Utility
2.1.4
Using Other Tools to Monitor the Built-In Performance Metrics
2.2
About Oracle Enterprise Manager 10
g
Application Server Control
2.2.1
Application Server Control New Features for 10g Release 3 (10.1.3.0.0)
2.2.1.1
Lightweight Architecture
2.2.1.2
Standards-Based Management
2.2.1.3
Remote Management
2.2.1.4
Role-Based Administration
2.2.2
New Application Server Control Features Introduced for 10g Release 3 (10.1.3.1)
2.2.3
About the Application Server Control Underlying Technologies
2.2.4
Using the Application Server Control Console Online Help
2.3
Getting Started with the Application Server Control Console
2.3.1
Displaying the Application Server Control Console
2.3.1.1
Using the Application Server Control Console URL
2.3.1.2
Displaying the Application Server Control Console from the Welcome Page
2.3.2
Creating Administration Accounts for You and Your Team
2.3.3
Using Application Server Control to Manage the Cluster Topology
2.3.3.1
Viewing the Cluster Topology and Locating the Active Application Server Control
2.3.3.2
Using Application Server Control to Manage Groups
2.3.3.3
Summary of the Cluster Topology Administration Tasks
2.3.4
Using Application Server Control to Manage the Application Server Components
2.3.5
Using Application Server Control to View and Manage an OC4J Instance
2.3.6
About MBeans and the Application Server Control MBean Browsers
2.3.6.1
Viewing the System MBean Browser
2.3.6.2
Viewing the MBeans for a Selected Application
2.3.6.3
Viewing the Cluster MBean Browser
3
Starting and Stopping
3.1
Overview of Starting and Stopping Procedures
3.2
Starting and Stopping Application Server Instances
3.2.1
Starting a Middle-Tier Instance
3.2.2
Stopping a Middle-Tier Instance
3.3
Starting and Stopping Components
3.3.1
Starting and Stopping Components Using opmnctl
3.3.2
Starting and Stopping Components Using Application Server Control Console
3.4
Starting and Stopping an Oracle Application Server Environment
3.4.1
Starting an Oracle Application Server Environment
3.4.2
Stopping an Oracle Application Server Environment
3.4.3
Starting 10.1.4 or 10.1.2 OracleAS Infrastructure
3.4.4
Stopping 10.1.4 or 10.1.2 OracleAS Infrastructure
3.5
Starting and Stopping: Special Topics
3.5.1
Starting and Stopping in High Availability Environments
3.5.2
Enabling and Disabling Components
3.5.3
Resolving OC4J Errors When Starting Multiple Instances
Part II Basic Administration
4
Managing Ports
4.1
About Managing Ports
4.2
Viewing Port Numbers
4.3
Changing Middle-Tier Ports
4.3.1
Changing the OC4J Listener Port
4.3.2
Changing Other OC4J Ports
4.3.3
Changing the Oracle HTTP Server Listen Ports
4.3.3.1
Enabling Oracle HTTP Server to Run as Root for Ports Set to Less Than 1024 (Unix Only)
4.3.3.2
Changing the Oracle HTTP Server Non-SSL Listen Ports
4.3.3.3
Changing the Oracle HTTP Server SSL Listen Port
4.3.4
Changing the Oracle HTTP Server Diagnostic Port
4.3.5
Changing the Java Object Cache Port
4.3.6
Changing OPMN Ports (ONS Local, Request, and Remote)
4.3.7
Changing the Port Tunneling Port
4.4
Changing 10.1.4 or 10.1.2 Infrastructure Ports
4.4.1
Changing the 10.1.4 or 10.1.2 OracleAS Metadata Repository Net Listener Port
4.4.1.1
Changing the KEY Value for an IPC Listener
4.4.2
Changing 10.1.4 or 10.1.2 Oracle Internet Directory Ports
4.4.3
Changing the HTTP Server Port on a 10.1.4 or 10.1.2 Identity Management Installation
4.4.4
Changing 10.1.4 or 10.1.2 OracleAS Certificate Authority Ports
5
Managing Log Files
5.1
Listing and Viewing Log Files with Application Server Control
5.1.1
Viewing Log Files
5.1.2
Listing Log Files for Components
5.1.3
Searching Log Files and Viewing Messages
5.1.4
Using Regular Expressions with Search
5.2
Understanding Oracle Application Server Logging
5.2.1
Understanding Log File Formats and Naming
5.2.1.1
ODL Message Formatting and ODL Log File Naming
5.2.1.2
Log File Message Formats by Component
5.2.2
Configuring Component Logging Options
5.3
Diagnosing Problems and Correlating Messages
5.3.1
Correlating Messages Across Log Files and Components
5.3.2
Diagnosing Component Problems
5.4
Advanced Logging Topics
5.4.1
Understanding ODL Messages and ODL Log Files
5.4.1.1
ODL Message Contents
5.4.1.2
ODL Log File Rotation and Naming
5.4.2
Component Diagnostic Log File Registration
5.4.3
Configuring Components to Produce ODL Messages
5.4.3.1
Configuring Oracle HTTP Server to Produce ODL Messages
5.4.3.2
Configuring OC4J to Produce ODL Messages
5.4.4
Managing OC4J Redirected stderr and stdout Files
5.4.5
Configuration Issue for Log Files
Part III Advanced Administration
6
Reconfiguring Application Server Instances
6.1
Adding and Deleting OC4J Instances
6.1.1
Adding OC4J Instances
6.1.2
Deleting OC4J Instances
6.2
Configuring Cluster Topologies
6.2.1
Configuring a Web Server and OC4J on Separate Hosts
6.2.2
Configuring Multiple J2EE Server Middle Tiers in a Cluster
6.2.3
Creating Additional Groups
6.2.4
Adding OC4J Instances and Adding Them to Groups
6.2.5
Creating Multiple JVMs
6.3
Configuring 10.1.2 OracleAS Web Cache as a Reverse Proxy
6.3.1
Configuring an OracleAS Web Cache Instance as a Reverse Proxy
6.3.2
Configuring an OracleAS Web Cache Cluster as a Reverse Proxy
6.4
Configuring Oracle Application Server 10.1.2 with Oracle Application Server 10.1.3
6.5
Configuring Instances to Use OC4J Java Single Sign-On
6.6
Configuring Instances to Use 10.1.4 or 10.1.2 Oracle Identity Management
6.7
Disabling and Enabling Anonymous Binds
6.7.1
Disabling Anonymous Binds for Run-Time Environments
6.7.2
Enabling Anonymous Binds for Configuration Changes
7
Changing Network Configurations
7.1
Overview of Procedures for Changing Network Configurations
7.2
Changing the Hostname, Domain Name, or IP Address
7.2.1
Understanding the chgiphost Command
7.2.2
Changing the Hostname or Domain Name of a Middle-Tier Installation
7.2.3
Changing the Hostname, Domain Name, or IP Address of a 10.1.4 or 10.1.2 Identity Management Installation
7.2.4
Changing the IP Address of a 10.1.4 or 10.1.2 Infrastructure Containing a Metadata Repository
7.2.5
Special Topics for Changing a Hostname or Domain Name
7.2.5.1
Setting the Log Level for chgiphost
7.2.5.2
Customizing the chgiphost Command
7.2.5.3
Changing a Hostname After Upgrading from Windows 2000 to Windows 2003
7.2.5.4
Recovering from Errors When Changing a Hostname
7.3
Moving Between Off-Network and On-Network
7.3.1
Moving from Off-Network to On-Network (Static IP Address)
7.3.2
Moving from Off-Network to On-Network (DHCP)
7.3.3
Moving from On-Network to Off-Network (Static IP Address)
7.3.4
Moving from On-Network to Off-Network (DHCP)
7.4
Changing Between a Static IP Address and DHCP
7.4.1
Changing from a Static IP Address to DHCP
7.4.2
Changing from DHCP to a Static IP Address
8
Changing Infrastructure Services
8.1
Overview of Procedures for Changing Identity Management Services
8.2
Changing Oracle Internet Directory from Dual Mode to SSL Mode
8.2.1
Restrictions on Security Provider for Application Server Control
8.2.2
Procedure
8.3
Moving 10.1.4 or 10.1.2 Identity Management to a New Host
8.3.1
Sample Uses for This Procedure
8.3.2
Assumptions and Restrictions
8.3.3
Procedure for Moving Identity Management to a New Host
8.3.4
Strategy for Performing Failover with This Procedure
9
Cloning Application Server Middle-Tier Instances
9.1
Introduction to Cloning
9.2
What Installation Types Can You Clone?
9.3
Understanding the Cloning Process
9.3.1
Source Preparation Phase
9.3.2
Cloning Phases
9.4
Cloning Oracle Application Server Instances
9.4.1
Prerequisites for Cloning
9.4.2
Preparing the Source
9.4.3
Cloning the Instance
9.4.4
Locating and Viewing Log Files
9.4.5
Cloning Instances That Are Members of a Cluster Topology
9.5
Considerations and Limitations for Cloning
9.5.1
General Considerations and Limitations for Cloning
9.5.2
Considerations for Cloning Oracle HTTP Server
9.5.3
Considerations for Cloning Oracle Containers for J2EE (OC4J)
9.5.4
Considerations for Cloning Application Server Control
9.5.5
Considerations for Cloning Oracle WebCenter Framework
9.6
Customizing the Cloning Process
9.6.1
Specifying Oracle Universal Installer Parameters
9.6.2
Assigning Custom Ports
9.6.3
Updating Custom Data
9.7
Example: Using Cloning to Expand an Oracle Application Server Cluster
Part IV Secure Sockets Layer (SSL)
10
Overview of Secure Sockets Layer (SSL) in Oracle Application Server
10.1
What SSL Provides
10.2
About Private and Public Key Cryptography
10.3
How an SSL Session Is Set Up (the "SSL Handshake")
10.4
Requirements for Using SSL in Oracle Application Server
10.5
Certificates and Oracle Wallets
10.5.1
How to Get a Certificate
10.5.2
Oracle Wallet
10.5.3
Client Certificates
10.6
SSL Configuration Overview
10.6.1
Default SSL Configuration
10.6.2
Partial SSL Configuration
10.7
Integration with Hardware Security Modules
10.7.1
Protocol Converters
10.7.2
Mathematics Accelerators (PKCS #11 Integration)
11
Managing Wallets and Certificates
11.1
Using Oracle Wallet Manager
11.1.1
Oracle Wallet Manager Overview
11.1.1.1
Wallet Password Management
11.1.1.2
Strong Wallet Encryption
11.1.1.3
Microsoft Windows Registry Wallet Storage
11.1.1.4
Backward Compatibility
11.1.1.5
Third-Party Wallet Support
11.1.1.6
LDAP Directory Support
11.1.2
Starting Oracle Wallet Manager
11.1.3
How To Create a Complete Wallet: Process Overview
11.1.4
Managing Wallets
11.1.4.1
Required Guidelines for Creating Wallet Passwords
11.1.4.2
Creating a New Wallet
11.1.4.3
Opening an Existing Wallet
11.1.4.4
Closing a Wallet
11.1.4.5
Exporting Oracle Wallets to Third-Party Environments
11.1.4.6
Exporting Oracle Wallets to Tools That Do Not Support PKCS #12
11.1.4.7
Uploading a Wallet to an LDAP Directory
11.1.4.8
Downloading a Wallet from an LDAP Directory
11.1.4.9
Saving Changes
11.1.4.10
Saving the Open Wallet to a New Location
11.1.4.11
Saving in System Default
11.1.4.12
Deleting the Wallet
11.1.4.13
Changing the Password
11.1.4.14
Using Auto Login
11.1.5
Managing Certificates
11.1.5.1
Managing User Certificates
11.1.5.2
Managing Trusted Certificates
11.2
Performing Certificate Validation and CRL Management with the orapki Utility
11.2.1
orapki Overview
11.2.1.1
orapki Utility Syntax
11.2.2
Displaying orapki Help
11.2.3
Creating Signed Certificates for Testing Purposes
11.2.4
Managing Oracle Wallets with the orapki Utility
11.2.4.1
Creating and Viewing Oracle Wallets with orapki
11.2.4.2
Adding Certificates and Certificate Requests to Oracle Wallets with orapki
11.2.4.3
Exporting Certificates and Certificate Requests from Oracle Wallets with orapki
11.2.5
Managing Certificate Revocation Lists (CRLs) with orapki Utility
11.2.5.1
About Certificate Validation with Certificate Revocation Lists
11.2.5.2
Certificate Revocation List Management
11.2.6
orapki Utility Commands Summary
11.2.6.1
orapki cert create
11.2.6.2
orapki cert display
11.2.6.3
orapki crl delete
11.2.6.4
orapki crl display
11.2.6.5
orapki crl hash
11.2.6.6
orapki crl list
11.2.6.7
orapki crl upload
11.2.6.8
orapki wallet add
11.2.6.9
orapki wallet create
11.2.6.10
orapki wallet display
11.2.6.11
orapki wallet export
11.3
Interoperability with X.509 Certificates
11.3.1
Public-Key Cryptography Standards (PKCS) Support
11.3.2
Multiple Certificate Support
12
Enabling SSL in the Infrastructure
12.1
SSL Communication Paths in the Infrastructure
12.2
Recommended SSL Configurations
12.3
Common SSL Configuration Tasks
12.3.1
Configuring SSL for OracleAS Single Sign-On and Oracle Delegated Administration Services
12.3.2
Configuring SSL for Oracle Internet Directory
12.3.3
Configuring SSL for Oracle Internet Directory Replication Server and Oracle Directory Integration and Provisioning
12.3.4
Configuring SSL in the Identity Management Database
12.3.5
Additional SSL Configuration in the OC4J_SECURITY Instance
12.3.5.1
Configuring SSL from mod_oc4j to OC4J_SECURITY
12.3.5.2
Using Port Tunneling from mod_oc4j to the OC4J_SECURITY Instance
12.3.5.3
Configuring JDBC/SSL (ASO support)
12.3.6
SSL in Oracle Application Server Certificate Authority
12.3.7
Configuring SSL for Oracle Enterprise Manager 10
g
12.3.7.1
Configuring Security for the Grid Control
12.3.7.2
Configuring Security for the Application Server Control Console
13
Enabling SSL in the Middle Tier
13.1
SSL Communication Paths in the Middle Tier
13.2
Recommended SSL Configurations
13.3
Common SSL Configuration Tasks for the Middle Tier
13.3.1
Enabling SSL in OracleAS Web Cache
13.3.2
Enabling SSL in the Oracle HTTP Server
13.3.3
Enabling SSL in OC4J
13.3.3.1
Configuring SSL from Oracle HTTP Server to OC4J
13.3.3.2
Using Port Tunneling (iaspt) from Oracle HTTP Server to OC4J
13.3.3.3
Configuring ORMI/HTTP SSL
13.3.3.4
Configuring the Oracle Application Server Java Authentication and Authorization Service (JAAS) Provider for SSL with Oracle Internet Directory
13.3.3.5
Configuring Oracle HTTP Server for SSL
13.3.3.6
Configuring SSL in Standalone OC4J Installations
13.3.4
Enabling SSL in J2EE and Web Cache Installations
13.3.5
Enabling SSL in Oracle Content DB
13.3.6
Enabling SSL in Virtual Hosts
13.3.7
Configuring SSL for Oracle Enterprise Manager 10
g
14
Troubleshooting SSL
14.1
Name-Based Virtual Hosting and SSL
14.2
Common ORA Errors Related to SSL
Part V Backup and Recovery
15
Introduction to Backup and Recovery
15.1
Philosophy of Oracle Application Server Backup and Recovery
15.2
Overview of the Backup Strategy
15.2.1
Types of Backups
15.2.2
Oracle Application Server Component Backup Input Files
15.2.3
Plug-in Backup Input File
15.2.4
Recommended Backup Strategy
15.3
Overview of Recovery Strategies
15.4
What Is the OracleAS Recovery Manager?
15.5
Assumptions and Restrictions
15.6
Roadmap for Getting Started with Backup and Recovery
16
Oracle Application Server Recovery Manager
16.1
How to Obtain OracleAS Recovery Manager
16.2
How to Configure OracleAS Recovery Manager Manually
16.3
Customizing OracleAS Recovery Manager for Your Configuration Files
16.3.1
How OracleAS Recovery Manager Works When Backing Up Configuration Files
16.3.2
How to Customize OracleAS Recovery Manager
16.4
OracleAS Recovery Manager Usage Summary
16.4.1
Prerequisites for Running OracleAS Recovery Manager
16.4.2
Syntax
16.4.3
Usage Examples
16.4.4
Purging Backups and Moving Them to Tertiary Storage
17
Backup Strategy and Procedures
17.1
Recommended Backup Strategy
17.2
Backup Procedures
17.2.1
Creating a Record of Your Oracle Application Server Configuration
17.2.2
Performing an Oracle Application Server Instance Backup from the Command Line
17.2.3
Performing a Complete Oracle Application Server Environment Backup
17.2.4
Performing a Portlet Producer Backup
17.2.4.1
JPS Preference Store Backup
17.2.4.2
PDK-Java Preference Store Backup
17.3
Recovering a Loss of Host Automatically
17.3.1
Preparing to Use Loss of Host Automation
17.3.2
Enabling Loss of Host Automation
17.3.3
Restoring a Node on a New Host
17.3.4
Recovering an Instance on the Same Host
18
Recovery Strategies and Procedures
18.1
Recovery Strategies
18.1.1
Recovery Strategies for Data Loss, Host Failure, or Media Failure (Critical)
18.1.2
Recovery Strategies for Process Failures and System Outages (Non-Critical)
18.2
Recovery Procedures
18.2.1
Restoring a Middle-Tier Installation to the Same Host
18.2.2
Restoring a Middle-Tier Installation to a New Host
18.2.3
Restoring Middle-Tier Configuration Files
18.2.4
Restoring an Oracle Application Server Instance
18.2.5
Recovering a Portlet Producer Preference Store
19
Troubleshooting OracleAS Recovery Manager
19.1
Problems and Solutions
19.1.1
Receiving Missing Files Messages During restore_config Operation
19.1.2
Failure Due to Loss or Corruption of OPMN.XML File
19.1.3
Timeout Occurs While Trying to Stop Processes Using the "opmnctl stopall" Command
Part VI Appendixes and Glossary
A
Managing and Configuring Application Server Control
A.1
Starting and Stopping Application Server Control
A.1.1
Verifying That the Application Server Control Is Running
A.2
Changing the Application Server Control Administrator Password
A.2.1
Changing Your Own Administrator Account Password
A.2.2
About the oc4jadmin Account
A.2.2.1
Using the oc4jadmin Account to Log In for the First Time
A.2.2.2
Using the oc4jadmin Account for Administration Credentials
A.2.3
Changing the oc4jadmin Password for the Administration OC4J Instance
A.2.4
Using Application Server Control to Change the oc4jadmin Password for a Remote OC4J Instance
A.2.5
Using the Command Line to Change the oc4jadmin Password for a Remote OC4J Instance
A.3
Configuring Security for the Application Server Control Console
A.3.1
Securing Communication Between Browser Clients and Web Servers That Host Application Server Control Console
A.3.2
Securing Communication Between Components of Oracle Application Server
A.3.2.1
Securing Communication Between the Administration OC4J and Remote OC4J Instances
A.3.2.2
Securing OPMN Communication in an Oracle Application Server Cluster
A.4
Configuring Logging for Application Server Control
A.4.1
Enabling and Configuring ODL for the Application Server Control Log File
A.4.1.1
Configuring the Application Server Control Logging Properties to Enable ODL
A.4.1.2
About the Application Server Control ODL Logging Properties
A.4.2
Configuring Logging Properties When ODL Is Not Enabled
A.4.3
Controlling the Number of Entries Retrieved When Searching Log Files
A.5
Enabling Enterprise Manager Accessibility Mode
A.5.1
Making HTML Pages More Accessible
A.5.2
Providing Textual Descriptions of Enterprise Manager Charts
A.5.3
Modifying the uix-config.xml File to Enable Accessibility Mode
A.6
Managing the Active Application Server Control
A.6.1
About the Active Application Server Control
A.6.2
Best Practices for Managing the Active Application Server Control
A.6.3
Stopping an Instance of ascontrol and Preventing the Application from Starting
A.6.4
Identifying and Configuring a New Active Application Server Control
A.6.5
Accessing the Administration OC4J Directly Through HTTP
A.6.6
Publishing Application Server Control to a Separate Web Site in the Same OC4J Instance
B
Oracle Application Server Command-Line Tools
C
URLs for Components
D
Oracle Application Server Port Numbers
D.1
Port Numbers and How They Are Assigned
D.1.1
OC4J, OPMN, and Oracle HTTP Server Ports
D.1.2
Oracle WebCenter Framework and Oracle Content DB
D.1.3
Port Numbers for Other Components
D.2
Port Numbers (Sorted by Number)
D.3
Ports to Open in Firewalls
E
Examples of Administrative Changes
E.1
How to Use This Appendix
E.2
Examples of Administrative Changes (by Component)
F
Supplementary Procedures for Configuring LDAP-Based Replicas
F.1
About LDAP-Based Replicas
F.1.1
What Is an LDAP-Based Replica?
F.1.2
How Is the LDAP-Based Replica Used for Changing Infrastructure Services?
F.2
Installing and Setting Up an LDAP-Based Replica
F.2.1
Things to Know Before You Start
F.2.2
Procedure
G
Viewing Oracle Application Server Release Numbers
G.1
Release Number Format
G.2
Viewing Oracle Application Server Installation Release Numbers
G.3
Viewing Component Release Numbers
G.4
Using the OPatch Utility
G.4.1
Requirements
G.4.2
Running the OPatch Utility
G.4.2.1
apply Option
G.4.2.2
lsinventory Option
G.4.2.3
query Option
G.4.2.4
rollback Option
G.4.2.5
version Option
H
Troubleshooting Oracle Application Server
H.1
Diagnosing Oracle Application Server Problems
H.2
Common Problems and Solutions
H.2.1
Application Performance Impacted by Garbage Collection Pauses
H.2.2
Application Server Returns Connection Refused Errors
H.2.3
Oracle HTTP Server Unable to Start Due to Port Conflict
H.2.4
Machine Overloaded by Number of HTTPD Processes
H.2.5
Oracle Application Server Process Does Not Start
H.2.6
OPMN Start Up Consumes CPU Processing Capability
H.2.7
Browser Displaying a Page Not Displayed Error
H.2.8
Standby Site Not Synchronized
H.2.9
Failure to Bring Up Standby Instances After Failover or Switchover
H.3
Troubleshooting Application Server Control
H.3.1
Resetting the Administrator (oc4jadmin) Password
H.3.2
Deployment Performance in Internet Explorer 6.0 and Netscape Navigator 7.0
H.3.3
Troubleshooting OC4J Out-of-Memory Errors
H.3.4
"403 Forbidden - Directory browsing not allowed" Error When Testing a Web Module or Web Service
H.3.5
Administrator Credentials Error When Attempting to Access the OC4J Home Page in a Cluster Topology
H.4
Need More Help?
Glossary
Index
