This chapter describes how to install and configure Oracle Identity Management 11g Release 1 (11.1.1.7.0).
This chapter includes the following topics:
Installing Oracle Identity Management Using "Install and Configure" Option
Configuring Oracle Identity Management for "Install Software - Do Not Configure" Option
Before you start installing and configuring Oracle Identity Management products, keep the following points in mind:
This chapter provides information for installing and configuring Oracle Identity Management (11.1.1.7.0) for new users. If you are an existing Oracle Identity Management 11g user, refer to "Applying the Latest Oracle Fusion Middleware Patch Set" in the Oracle Fusion Middleware Patching Guide.
For complete information about patching your Oracle Fusion Middleware 11g to the latest release, refer to the Oracle Fusion Middleware Patching Guide.
The Select Installation Type screen in the Installer presents two options: Install and Configure and Install Software - Do Not Configure. For more information about these options, see Section 3.1.1, "Installation Types: "Install Software - Do Not Configure" vs. "Install and Configure"".
The Select Installation Type screen in the Installer presents two options: Install and Configure and Install Software - Do Not Configure. This section describes both options:
Choose the Install Software - Do Not Configure option to install Oracle Identity Management components without configuring them during installation. If you choose the Install Software - Do Not Configure option, the Installer installs the component software and then closes. Oracle Identity Management components will not start running after deploying them using the Install Software - Do Not Configure option, as additional configuration is needed.
After you install components using the Install Software - Do Not Configure option, you can configure them at a later time using the Oracle Identity Management 11g Release 1 (11.1.1.7.0) Configuration Wizard. To start the Oracle Identity Management 11g Release 1 (11.1.1.7.0) Configuration Wizard, execute the ORACLE_HOME/bin/config.sh script (config.bat on Windows).
The Install and Configure option allows you to install Oracle Identity Management components and simultaneously configure some of their fundamental elements, such as passwords, user names, and so on. Oracle Identity Management components start running and are immediately ready for use after deploying them using the Install and Configure option.
Follow the instructions in this section to install and configure the latest Oracle Identity Management software.
Installing and configuring the latest version of Oracle Identity Management 11g components involves the following steps:
Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)
Installing Oracle WebLogic Server and Creating the Middleware Home
Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software
Note:
If you have an existing Oracle Identity Management installation refer to Oracle Fusion Middleware Patching Guide or Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management.
You can download the latest Oracle Fusion Middleware 11g software from the Oracle Technology Network (OTN):
http://www.oracle.com/technetwork/index.html
You must ensure that you have the following versions of Oracle Fusion Middleware Software:
Oracle WebLogic Server 11g Release 1
Oracle Database
Oracle Repository Creation Utility
Oracle Identity Management Suite
For more information on obtaining Oracle Fusion Middleware 11g software, see Oracle Fusion Middleware Download, Installation, and Configuration ReadMe.
You must install an Oracle Database before you can install some Oracle Identity Management components, such as:
Oracle Internet Directory
Oracle Identity Federation, if you want to use an RDBMS data store
For latest information about supported databases, refer to the Oracle Fusion Middleware Supported System Configurations document.
The database must be up and running to install the relevant Oracle Identity Management component. The database does not have to be on the same system where you are installing the Oracle Identity Management component.
The database must also be compatible with Oracle Fusion Middleware Repository Creation Utility (RCU), which is used to create the schemas that Oracle Identity Management components require.
Note:
For information about RCU requirements for Oracle Databases, see "RCU Requirements for Oracle Databases" topic in the Oracle Fusion Middleware System Requirements and Specifications document.
You must create and load the appropriate Oracle Fusion Middleware schema in your database before installing the following Oracle Identity Management components and configurations:
Oracle Internet Directory, if you want to use an existing schema rather than create a new one using the Installer during installation.
Note:
When you install Oracle Internet Directory, you have the choice of using an existing schema or creating a new one using the Installer. If you want to use an existing schema, you must create it using the Oracle Fusion Middleware Repository Creation Utility (RCU) before you can install Oracle Internet Directory. If you choose to create a new schema during installation, the Installer creates the appropriate schema for you and you do not need to use the RCU.
Oracle Identity Federation Advanced configurations that use RDBMS for the Federation Store, Session Store, Message Store, or Configuration Store.
You create and load Oracle Fusion Middleware schema in your database using the RCU, which is available in the Oracle Fusion Middleware 11g Release 1 (11.1.1) release media and on the Oracle Technology Network (OTN) Web site. You can access the OTN web site at:
http://www.oracle.com/technetwork/index.html
For information on RCU requirements, refer to the "Repository Creation Utility (RCU) Requirements" topic in the Oracle Fusion Middleware System Requirements and Specifications document.
Note:
Use the Linux RCU to create schemas on supported UNIX databases. Use Windows RCU to create schemas on supported Windows databases.
When you run RCU, create and load only the following schema for your Oracle Identity Management components—do not select any other schema available in RCU:
For Oracle Internet Directory, select only the Identity Management - Oracle Internet Directory schema
For Oracle Identity Federation, select only the Identity Management - Oracle Identity Federation schema
Note:
When you create schema, be sure to remember the schema owner and password that is shown in RCU. For Oracle Identity Federation, it is of the form PREFIX_OIF. You will need to provide this information when configuring Oracle Identity Federation with RDBMS stores.
Do not change the prefix provided for Oracle Internet Directory.
See:
The Oracle Fusion Middleware Repository Creation Utility User's Guide for complete information.
Oracle Identity Management requires Oracle WebLogic Server and a Middleware home directory.
For more information, see "Installing Oracle WebLogic Server" in Oracle Fusion Middleware Installation Planning Guide. In addition, see Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server for complete information about installing Oracle WebLogic Server.
Notes:
If you are installing Oracle Internet Directory without an Oracle WebLogic administration domain, you do not need to install Oracle WebLogic.
The same user that installed Oracle WebLogic Server must install Oracle Identity Management.
Do not log in to the Oracle WebLogic Server Administration Console during Oracle Identity Management installation.
If you want to configure the minimum amount for Oracle WebLogic Server's maximum heap size, see Section 2.6, "Optional: Configuring the Minimum Amount for Oracle WebLogic Server's Maximum Heap Size"
If you are installing on a UNIX system, and if this is the first time any Oracle product is being installed on your system with the Oracle Universal Installer, you will be asked to provide the location of an inventory directory. This is where the installer will set up subdirectories and maintain inventory data for each Oracle product that is installed on this system.
Follow the instructions in Table 3-1 to configure the inventory directory information:
Table 3-1 Inventory Directory and Group Screens
| Screen | Description |
|---|---|
|
Specify Inventory Directory |
Specify the Oracle inventory directory and group permissions for that directory. The group must have write permissions to the Oracle inventory directory. Click OK to continue. |
|
Inventory Location Confirmation |
Run the createCentralInventory.sh script as root. Click OK to continue. |
Note:
If you do not want to use the central inventory, you can create the oraInst.loc file, add the custom location of the inventory, and run the runInstaller by using the following command:
runInstaller -invPtrLoc <full location to oraInst.loc>
Perform the following steps to start an Oracle Identity Management installation:
Note:
You must be logged in to the UNIX operating system as a non-root user to start the Installer.
Start the Installer by executing one of the following commands:
UNIX: <full path to the runInstaller directory>/runInstaller -jreLoc <Middleware Home>/jrockit_1.6.0_24/jre
Windows: <full path to the setup.exe directory>\ setup.exe -jreLoc <Middleware Home>\jrockit_1.6.0_24\jre
Note:
The installer prompts you to enter the absolute path of the JDK that is installed on your system. When you install Oracle WebLogic Server, the jrockit_1.6.0_24 directory is created under your Middleware Home. You must enter the absolute path of the JRE folder located in this JDK when launching the installer. For example, on Windows, if the JRE is located in D:\oracle\Middleware\jrockit_1.6.0_24, then launch the installer from the command prompt as follows:
D:\setup.exe -jreLoc D:\oracle\Middleware\jrockit_1.6.0_24\jre
If you do not specify the -jreLoc option on the command line when using the Oracle JRockit JDK, the following warning message is displayed:
-XX:MaxPermSize=512m is not a valid VM option. Ignoring
This warning message does not affect the installation. You can continue with the installation.
On 64 bit platforms, when you install Oracle WebLogic Server using the generic jar file, the jrockit_1.6.0_24 directory will not be created under your Middleware Home. You must enter the absolute path of the JRE folder from where your JDK is located.
Follow the instructions in Table 3-2 to install and configure Oracle Identity Management 11.1.1.7.0.
If you need additional help with any of the installation screens, click Help to access the online help.
Table 3-2 Installation Flow for Install Only Option
| No. | Screen | When Does This Screen Appear? | Description and Action Required |
|---|---|---|---|
|
1 |
Welcome |
Always |
Click Next to continue. |
|
2 |
Install Software Updates |
Always |
Specify any software updates to install before you install Oracle Identity Management.To get updates from My Oracle Support, you can select Search My Oracle Support for Updates, specify a user name and password, and then click Search for Updates. Before you search, you can click Proxy Settings to change the settings for the proxy server and Test Connection to test the credentials.To get updates that you have saved to your computer, you can select Search Local Directory for Updates, specify a directory, and then click Search for Updates.If you do not want to update any software, select Skip Software Updates, and then click Next to continue the installation. |
|
3 |
Select Installation Type |
Always |
Select Install and Configure option. Notes:
Click Next to continue. |
|
4 |
Prerequisite Checks |
Always |
Ensure that all the prerequisites are met. Click Next to continue. |
|
5 |
Select Domain |
This screen is displayed if you select Install and Configure option. |
Select one of the following options:
For more information, refer to the following: |
|
6 |
Specify Installation Location |
Always |
Specify the Oracle Middleware Home location, Oracle Home Directory, WebLogic Server Directory, Oracle Instance Location, and Oracle Instance Name. Click Next to continue. |
|
7 |
Specify Security Updates |
Always |
This screen allows you to decide how you want to be notified about security issues:
Click Next to continue. |
|
8 |
Configure Components |
This screen is displayed if you select Install and Configure option. |
Click Next to continue. |
|
9 |
Configure Ports |
This screen is displayed if you select Install and Configure option. |
Choose how you want the Installer to configure ports:
Click Next to continue. |
|
10 |
Specify Schema Database |
This screen is displayed if you select Install and Configure option and choose to configure Oracle Internet Directory. |
Choose whether to use an existing schema or to create a new one using the Installer. Note: If you want to use an existing schema, it must currently reside in the database to continue with the installation. If it does not currently reside in the database, you must create it now using the Oracle Fusion Middleware Repository Creation Utility. To use an existing schema:
To create a new schema:
|
|
11 |
Specify Oracle Virtual Directory Information |
This screen is displayed if you select Install and Configure option and choose to configure Oracle Virtual Directory. |
Enter the following information:
Click Next to continue. |
|
12 |
Specify OID Administrator Password |
This screen is displayed if you select Install and Configure option and choose to configure Oracle Internet Directory. |
Enter the password for the Oracle Internet Directory administrator. Click Next to continue. |
|
13 |
Select Oracle Identity Federation Configuration Type |
This screen is displayed if you select Install and Configure option and choose to configure Oracle Identity Federation. |
Select one of the following configuration types:
Note: The procedure in this table shows the screens that appears when the Basic option is selected. Click Next to continue. |
|
14 |
Specify Oracle Identity Federation Details |
This screen is displayed if you select Install and Configure option and choose to configure Oracle Identity Federation. |
Enter the following information:
Click Next to continue. |
|
15 |
Installation Summary |
Always |
Verify the information on this screen. If you want to change any options, you can return to a previous screen by clicking a link in the navigation tree on the left or by clicking Back until you get to the screen. After you edit the required options, you can continue the installation from the previous screen. Click Save if you want to save a response file. You will be prompted for a name and location for the response file, which will contain information specific to your installation. After the installer creates the response file, you can use it exactly as is to replicate the installation on other systems, or you can modify the response file in a text editor. Click Install to begin the installation. |
|
16 |
Installation Progress |
Always |
If you are installing on a UNIX system, you may be asked to run the For more information, see the "Executing the oracleRoot.sh Script on UNIX Platforms" topic in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management. Click Next to continue. |
|
17 |
Configuration Progress |
This screen is displayed if you select Install and Configure option. |
Click Next to continue. |
|
18 |
Installation Complete |
Always |
Click Finish to dismiss the installer. |
Oracle Identity Management 11g Release 1 (11.1.1.7.0) is installed and configured if you selected Install and Configure option in the Select Installation Type screen. By default Oracle_IDM1 is created as the Oracle Identity Management Oracle home directory. This home directory is also referred to as IDM_Home in this guide.
To locate the installation log files, see Section 2.8, "Locating Installation Log Files".
If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.7.0), as described in Section 3.2.7, "Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software", you must now start the Oracle Identity Management Configuration Wizard to configure the following components:
Oracle Internet Directory
Oracle Virtual Directory
Oracle Directory Services Manager
Oracle Directory Integration Platform
Oracle Identity Federation
Run the Oracle Identity Management Configuration Wizard as follows:
On UNIX systems:
ORACLE_HOME/bin/config.sh
On Windows systems:
ORACLE_HOME\bin\config.bat
The Oracle Identity Management 11g Configuration Wizard is displayed. You can use this wizard to configure your component in a new domain, in an existing domain, or without a domain. Note that you can install and configure only Oracle Internet Directory and Oracle Virtual Directory without a domain. For more information, see the following topics:
OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic Domain
OVD with ODSM and Fusion Middleware Control in a New WebLogic Domain
OIF with OID in a New WebLogic Domain for LDAP Authentication, User Store, and Federation Store
This topic describes how to configure Oracle Internet Directory (OID) with Oracle Directory Integration Platform (ODIP), Oracle Directory Services Manager (ODSM), and Fusion Middleware Control in a new WebLogic administration domain. It includes the following sections:
The configuration described in this topic is appropriate for environments that have both of the following conditions:
You want to install Oracle Internet Directory and Oracle Directory Integration Platform colocated on the same host.
There is no WebLogic Administration Server managing other 11g Release 1 (11.1.1) Oracle Directory Services components.
Performing the configuration in this section deploys the following components:
WebLogic Administration Server
Oracle Internet Directory
WebLogic Managed Server
Oracle Directory Integration Platform
Oracle Directory Services Manager
Fusion Middleware Control
The configuration in this section depends on the following:
Oracle WebLogic Server
Oracle Database
If you want to use an existing schema, Identity Management - Oracle Internet Directory schema existing in the Oracle Database.
Perform the following steps to configure Oracle Internet Directory with Oracle Directory Integration Platform, Oracle Directory Services Manager, and Fusion Middleware Control in a new domain:
Ensure that Oracle Internet Directory is installed, as described in Section 3.2, "Installing Oracle Identity Management Using "Install and Configure" Option".
Note:
If you selected Install and Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.7.0), as described in Section 3.2.7, "Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software", the Select Domain screen is displayed.
If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.7.0), as described in Section 3.2.7, "Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software", you must now start the Oracle Identity Management Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start the Oracle Identity Management Configuration Wizard. The Select Domain screen is displayed.
On the Select Domain screen, select Create New Domain and enter the following information:
Enter the user name for the new domain in the User Name field.
Enter the user password for the new domain in the User Password field.
Enter the user password again in the Confirm Password field.
Enter a name for the new domain in the Domain Name field.
Click Next. The Specify Installation Location screen appears.
Identify the Homes, Instances, and the WebLogic Server directory by referring to Section 2.4, "Identifying Installation Directories". After you enter information for each field, click Next. The Specify Security Updates screen appears.
Choose how you want to be notified about security issues:
If you want to be notified about security issues through email, enter your email address in the Email field.
If you want to be notified about security issues through My Oracle Support (formerly MetaLink), select the My Oracle Support option and enter your My Oracle Support Password.
If you do not want to be notified about security issues, leave all fields empty.
Click Next. The Configure Components screen appears.
Select Oracle Internet Directory and Oracle Directory Integration Platform. The Oracle Directory Services Manager and Oracle Fusion Middleware Control will be automatically selected.
Ensure no other components are selected and click Next. The Configure Ports screen appears.
Choose how you want the Installer to configure ports:
Select Auto Port Configuration if you want the Installer to configure ports from a predetermined range.
Select Specify Ports using Configuration File if you want the Installer to configure ports using the staticports.ini file. You can click View/Edit File to update the settings in the staticports.ini file.
Click Next. The Specify Schema Database screen appears.
Choose whether to use an existing schema or to create a new one using the Installer.
Note:
If you want to use an existing schema, it must currently reside in the database to continue with the installation. If it does not currently reside in the database, you must create it now using the Oracle Fusion Middleware Oracle Fusion Middleware Repository Creation Utility or follow the To create a new schema section mentioned below.
For more information, refer to Section 3.2.3, "Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)".
To use an existing schema:
Select Use Existing Schema.
Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.
Enter the password for the existing ODS schema in the Password field.
Click Next.
Note:
If your existing ODS and ODSSM schemas have different passwords, the Specify ODSSM Password screen will appear after you click Next. Enter the password for your existing ODSSM schema and click Next.
The Create Oracle Internet Directory screen appears.
Continue the installation by going to step 8 now.
Select Create Schema.
Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.
Enter the name of the database user in the User Name field. The user you identify must have DBA privileges.
Enter the password for the database user in the Password field.
Click Next. The Enter OID Passwords screen appears.
Create a password for the new ODS schema by entering it in the ODS Schema Password field.
Enter it again in the Confirm ODS Schema Password field.
Create a password for the new ODSSM schema by entering it in the ODSSM Schema Password field.
Enter it again in the Confirm ODSSM Schema Password field.
Click Next. The Create Oracle Internet Directory screen appears.
Enter the following information for Oracle Internet Directory:
Realm: Enter the location for your realm.
Administrator Password: Enter the password for the Oracle Internet Directory administrator.
Confirm Password: Enter the administrator password again.
Click Next.
The Installation Summary screen appears. Verify the information on this screen. Click Configure to begin the configuration.
The Configuration Progress screen appears. Click Next to continue.
The Installation Complete screen appears. Click Save to save the configuration information to a file, and then click Finish to exit the installer.
Note:
You may see the following error message in $Instance_home/diagnostics/logs/OID/oid1/** log files after configuring Oracle Internet Directory:
"2010-02-01T07:27:42+00:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host:stadp47] [pid: 26444] [tid: 0] Main:: FATAL * gslsmaiaInitAudCtx * Audit struct initialization failed. Audit error code: 62005"
You can ignore this error message.
This topic describes how to configure only Oracle Internet Directory (OID) without a WebLogic administration domain. It includes the following sections:
The configuration described in this topic is appropriate for environments that have both of the following conditions:
You do not want to include Oracle Internet Directory in a WebLogic administration domain for management purposes.
You do not want to manage Oracle Internet Directory using Fusion Middleware Control.
Performing the configuration in this section deploys only Oracle Internet Directory.
The configuration in this section depends on the following:
Oracle Database
If you want to use an existing schema, Identity Management - Oracle Internet Directory schema existing in the Oracle Database.
Perform the following steps to configure only Oracle Internet Directory without a domain:
Ensure that Oracle Internet Directory is installed, as described in Section 3.2, "Installing Oracle Identity Management Using "Install and Configure" Option".
Note that installing Oracle WebLogic Server is optional in this particular scenario. Instead, you can create the Middleware Home by using the Oracle Identity Management Configuration Wizard, as described later in Step 4 of the procedure.
Note:
If you selected Install and Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.7.0), as described in Section 3.2.7, "Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software", the Select Domain screen is displayed.
If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.7.0), as described in Section 3.2.7, "Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software", you must now start the Oracle Identity Management Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start the Oracle Identity Management Configuration Wizard. The Select Domain screen is displayed.
Select Configure without a Domain on the Select Domain screen and click Next. The Specify Installation Location screen appears.
Enter the following information in each field:
Oracle Middleware Home Location: If an Oracle Middleware Home directory already exists, enter the path to it in this field. If an Oracle Middleware Home directory does not exist, enter a path to the location where you want the Installer to create the directory that will contain the Oracle Common Home and Oracle Home directories. The Installer creates an Oracle Common Home directory and an Oracle Home directory inside the directory you identify in this field.
The Oracle Middleware Home directory is commonly referred to as MW_HOME.
Note:
The Oracle Middleware Home directory is not required to contain an Oracle WebLogic Server installation.
Oracle Home Directory: Enter a name for the Oracle Home directory. The Installer uses the name you enter in this field to create the Oracle Home directory under the location you enter in the Oracle Middleware Home Location field. The Oracle Home directory is commonly referred to as ORACLE_HOME.
Oracle Instance Location: Enter the directory path to the location where you want to create the Oracle Instance directory. The Installer creates the Oracle Instance directory using the location you enter in this field and using the name you enter in the Oracle Instance Name field. You can identify any location on your system for the Oracle Instance directory—it does not have to reside inside the Oracle Middleware Home directory.
Oracle Instance Name: Enter a name for the Oracle Instance directory. The Installer uses the name you enter in this field to create the Oracle Instance directory at the location you specify in the Oracle Instance Location field. This directory is commonly referred to as ORACLE_INSTANCE.
After you enter information for each field, click Next. The Specify Security Updates screen appears.
Choose how you want to be notified about security issues:
If you want to be notified about security issues through email, enter your email address in the Email field.
If you want to be notified about security issues through My Oracle Support (formerly MetaLink), select the My Oracle Support option and enter your My Oracle Support Password.
If you do not want to be notified about security issues, leave all fields empty.
Click Next. The Configure Components screen appears.
On the Configure Components screen, select only Oracle Internet Directory. Ensure no other components are selected and click Next. The Configure Ports screen appears.
Choose how you want the Installer to configure ports:
Select Auto Port Configuration if you want the Installer to configure ports from a predetermined range.
Select Specify Ports using Configuration File if you want the Installer to configure ports using the staticports.ini file. You can click View/Edit File to update the settings in the staticports.ini file.
Click Next. The Specify Schema Database screen appears.
Choose whether to use an existing schema or to create a new one using the Installer.
Note:
If you want to use an existing schema, it must currently reside in the database to continue with the installation. If it does not currently reside in the database, you must create it now using the Oracle Fusion Middleware Repository Creation Utility or follow the To create a new schema section mentioned below.
For more information, refer to Section 3.2.3, "Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)".
To use an existing schema:
Select Use Existing Schema.
Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.
Enter the password for the existing ODS schema in the Password field.
Click Next.
Note:
If your existing ODS and ODSSM schemas have different passwords, the Specify ODSSM Password screen will appear after you click Next. Enter the password for your existing ODSSM schema and click Next.
The Create Oracle Internet Directory screen appears.
Continue the installation by going to step 8 now.
Select Create Schema.
Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.
Enter the name of the database user in the User Name field. The user you identify must have DBA privileges.
Enter the password for the database user in the Password field.
Click Next. The Enter OID Passwords screen appears.
Create a password for the new ODS schema by entering it in the ODS Schema Password field.
Enter it again in the Confirm ODS Schema Password field.
Create a password for the new ODSSM schema by entering it in the ODSSM Schema Password field.
Enter it again in the Confirm ODSSM Schema Password field.
Click Next. The Create Oracle Internet Directory screen appears.
Enter the following information for Oracle Internet Directory:
Realm: Enter the location for your realm.
Administrator Password: Enter the password for the Oracle Internet Directory administrator.
Confirm Password: Enter the administrator password again.
Click Next.
The Installation Summary screen appears. Verify the information on this screen. Click Configure to begin the configuration.
The Configuration Progress screen appears. Click Next to continue.
The Installation Complete screen appears. Click Save to save the configuration information to a file, and then click Finish to exit the installer.
Note:
If you perform this installation and configuration, but later decide you want to manage Oracle Internet Directory using Fusion Middleware Control, you must register Oracle Internet Directory with a WebLogic Administration Server.
Refer to the "Registering an Oracle Instance or Component with the WebLogic Server" section in the Oracle Fusion Middleware Administrator's Guide for Oracle Internet Directory for more information.
You may see the following error message in $Instance_home/diagnostics/logs/OID/oid1/** log files after configuring Oracle Internet Directory:
"2010-02-01T07:27:42+00:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host:stadp47] [pid: 26444] [tid: 0] Main:: FATAL * gslsmaiaInitAudCtx * Audit struct initialization failed. Audit error code: 62005"
You can ignore this error message.
This topic describes how to configure Oracle Virtual Directory (OVD) with Oracle Directory Services Manager (ODSM) and Fusion Middleware Control in a new WebLogic administration domain. It includes the following sections:
The configuration described in this topic is appropriate for environments that have all of the following conditions:
You want to manage Oracle Virtual Directory using Fusion Middleware Control.
You want Oracle Virtual Directory to be in a WebLogic administration domain.
There is no WebLogic Administration Server managing other 11g Release 1 (11.1.1) Oracle Directory Services components.
You want to install Oracle Virtual Directory and a WebLogic Administration Server colocated on the same host.
Performing the configuration in this section deploys the following components.
WebLogic Administration Server
Oracle Virtual Directory
Oracle Directory Services Manager
Fusion Middleware Control
The configuration in this section depends on Oracle WebLogic Server.
Perform the following steps to configure Oracle Virtual Directory with Oracle Directory Services Manager and Fusion Middleware Control in a new domain:
Ensure that Oracle Virtual Directory and Oracle Directory Services Manager are installed, as described in Section 3.2, "Installing Oracle Identity Management Using "Install and Configure" Option".
Note:
If you selected Install and Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.7.0), as described in Section 3.2.7, "Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software", the Select Domain screen is displayed.
If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.7.0), as described in Section 3.2.7, "Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software", you must now start the Oracle Identity Management Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start the Oracle Identity Management Configuration Wizard. The Select Domain screen is displayed.
On the Select Domain screen, select Create New Domain and enter the following information:
Enter the user name for the new domain in the User Name field.
Enter the user password for the new domain in the User Password field.
Enter the user password again in the Confirm Password field.
Enter a name for the new domain in the Domain Name field.
Click Next. The Specify Installation Location screen appears.
Identify the Homes, Instances, and the WebLogic Server directory by referring to Section 2.4, "Identifying Installation Directories". After you enter information for each field, click Next. The Specify Security Updates screen appears.
Choose how you want to be notified about security issues:
If you want to be notified about security issues through email, enter your email address in the Email field.
If you want to be notified about security issues through My Oracle Support (formerly MetaLink), select the My Oracle Support option and enter your My Oracle Support Password.
If you do not want to be notified about security issues, leave all fields empty.
Click Next. The Configure Components screen appears.
Select only Oracle Virtual Directory. The Oracle Directory Services Manager and Fusion Middleware Control management components are automatically selected for this installation.
Ensure no other components are selected and click Next. The Configure Ports screen appears.
Choose how you want the Installer to configure ports:
Select Auto Port Configuration if you want the Installer to configure ports from a predetermined range.
Select Specify Ports using Configuration File if you want the Installer to configure ports using the staticports.ini file. You can click View/Edit File to update the settings in the staticports.ini file.
Click Next. The Specify Oracle Virtual Directory Information screen appears.
Enter the following information:
LDAP v3 Name Space: Enter the name space for Oracle Virtual Directory. For example, dc=myhost,dc=mycompany,dc=com.
HTTP Web Gateway: Select this option to enable the Oracle Virtual Directory HTTP Web Gateway.
Secure: Select this option if you enabled the HTTP Web Gateway and you want to secure it using SSL.
Administrator User Name: Enter the user name for the Oracle Virtual Directory administrator. The default value is cn=orcladmin.
Password: Enter the password for the Oracle Virtual Directory administrator.
Confirm Password: Enter the password for the Oracle Virtual Directory administrator again.
Configure Administrative Server in secure mode: Select this option to secure the Oracle Virtual Directory Administrative Listener using SSL. This option is selected by default. Oracle recommends selecting this option.
Click Next.
The Installation Summary screen appears. Verify the information on this screen. Click Configure to begin the configuration.
The Configuration Progress screen appears. Click Next to continue.
The Installation Complete screen appears. Click Save to save the configuration information to a file, and then click Finish to exit the installer.
This section describes how to configure Oracle Identity Federation (OIF) with Oracle Internet Directory (OID) in a new WebLogic administration domain for LDAP Authentication, User Store, and Federation Store.
Note:
When you configure Oracle Identity Federation with Oracle Internet Directory, the Installer automatically configures connection, credential, attribute, and container settings using the Oracle Internet Directory configuration.
This section includes the following information about this configuration:
Perform the configuration in this topic to quickly deploy Oracle Identity Federation with Oracle Internet Directory as the LDAP repository for Authentication, User Store, and Federation Store.
Performing the configuration in this section deploys the following components:
WebLogic Managed Server
Oracle Identity Federation
Oracle Internet Directory
Oracle Directory Services Manager
WebLogic Administration Server
Fusion Middleware Control
Optionally, Oracle HTTP Server
The configuration in this section depends on the following components:
Oracle WebLogic Server
Oracle Database for Oracle Internet Directory
Identity Management - Oracle Internet Directory schema existing in the database for Oracle Internet Directory.
Oracle Database for Oracle Identity Federation, if using RDBMS for Session Store, Message Store, or Configuration Store.
New Identity Management - Oracle Identity Federation schema existing in the database for Oracle Identity Federation, if using RDBMS for Session Store, Message Store, or Configuration Store.
Perform the following steps to configure Oracle Identity Federation with Oracle Internet Directory in a new domain for LDAP Authentication, User Store, and Federation Store:
Decide if you want to use RDBMS for Session Store, Message Store, or Configuration Store. If you do, perform the following steps a and b:
Install the database for Oracle Identity Federation. Refer to Section 3.2.2, "Installing Oracle Database" for more information.
Create the Identity Management - Oracle Identity Federation schema in the database. Refer to Section 3.2.3, "Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)" for more information.
Install the Oracle Database for Oracle Internet Directory. Refer to Section 3.2.2, "Installing Oracle Database"for more information.
Create the Identity Management - Oracle Internet Directory schema in the database for Oracle Internet Directory. Refer to Section 3.2.3, "Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)" for more information.
Ensure that Oracle Identity Federation and Oracle Internet Directory are installed, as described in Section 3.2, "Installing Oracle Identity Management Using "Install and Configure" Option".
Note:
If you selected Install and Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.7.0), as described in Section 3.2.7, "Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software", the Select Domain screen is displayed.
If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.7.0), as described in Section 3.2.7, "Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.7.0) Software", you must now start the Oracle Identity Management Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start the Oracle Identity Management Configuration Wizard. The Select Domain screen is displayed.
On the Select Domain screen, select Create New Domain and enter the following information:
User Name: Enter the user name for the new domain.
User Password: Enter the user password for the new domain.
Enter the user password again in the Confirm Password field.
Domain Name: Enter a name for the new domain.
Click Next. The Specify Installation Location screen appears.
Identify the Homes, Instances, and the WebLogic Server directory by referring to Section 2.4, "Identifying Installation Directories". After you enter information for each field, click Next. The Specify Security Updates screen appears.
Choose how you want to be notified about security issues:
If you want to be notified about security issues through email, enter your email address in the Email field.
If you want to be notified about security issues through My Oracle Support (formerly MetaLink), select the My Oracle Support option and enter your My Oracle Support Password.
If you do not want to be notified about security issues, leave all fields empty.
Click Next. The Configure Components screen appears.
Select Oracle Internet Directory, Oracle Identity Federation, and optionally, Oracle HTTP Server.
Note:
Oracle HTTP Server is required when using Oracle Identity Federation for enterprise level single sign-on with Oracle Single Sign-On and Oracle Access Manager. Although Oracle Identity Federation can function without Oracle HTTP Server, there are advantages to configuring it as a proxy for Oracle Identity Federation.
When you select Oracle HTTP Server and Oracle Identity Federation on this Configure Components screen, the Configuration Wizard configures the Oracle HTTP Server so that the Oracle Identity Federation application can be accessed through Oracle HTTP Server ports.
Refer to the "Deploying Oracle Identity Federation with Oracle HTTP Server" section in the Oracle Fusion Middleware Administrator's Guide for Oracle Identity Federation for more information.
The Oracle Directory Services Manager and Fusion Middleware Control management components are automatically selected for this installation.
Ensure no other components are selected and click Next. The Configure Ports screen appears.
Choose how you want the Installer to configure ports:
Select Auto Port Configuration if you want the Installer to configure ports from a predetermined range.
Select Specify Ports using Configuration File if you want the Installer to configure ports using the staticports.ini file. You can click View/Edit File to update the settings in the staticports.ini file.
Click Next. The Specify Schema Database screen appears.
Identify the ODS schema for Oracle Internet Directory that you created in step 3 by selecting Use Existing Schema and entering the following information:
Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.
Enter the password for the ODS schema in the Password field and click Next.
Note:
If your existing ODS and ODSSM schemas have different passwords, the Specify ODSSM Password screen will appear after you click Next. Enter the password for your existing ODSSM schema and click Next.
The Create Oracle Internet Directory screen appears.
Enter the following information for Oracle Internet Directory:
Realm: Enter the location for your realm.
Administrator Password: Enter the password for the Oracle Internet Directory administrator.
Confirm Password: Enter the administrator password again.
Click Next. The Specify OIF Details screen appears.
Enter the following information:
PKCS12 Password: Enter the password Oracle Identity Federation will use for encryption and for signing wallets. The Installer automatically generates these wallets with self-signed certificates. Oracle recommends using the wallets only for testing.
Confirm Password: Enter the PKCS12 password again.
Server ID: Enter a string that will be used to identify this Oracle Identity Federation instance. A prefix of oif will be added to the beginning of the string you enter. Each logical Oracle Identity Federation instance within an Oracle WebLogic Server administration domain must have a unique Server ID. Clustered Oracle Identity Federation instances acting as a single logical instance will have the same Server ID.
Click Next. The Select OIF Advanced Flow Attributes screen appears.
Notes:
Notice that the options for Authentication Type, User Store and Federation Store are automatically set to LDAP because you are installing Oracle Internet Directory with Oracle Identity Federation.
The Installer sets the User Federation Record Context to cn=fed,BASE_REALM, where BASE_REALM is typically dc=us,dc=oracle,dc=com.
Select the appropriate option for each configuration item and click Next:
Note:
User Session Store and Message Store appear in the Installer as separate configuration items, however, most deployments use the same type of repository for both stores.
User Session Store: Memory or RDBMS
Select Memory to store transient runtime session state data in in-memory tables.
Select RDBMS to store transient runtime session state data in a relational database.
Message Store: Memory or RDBMS
Select Memory to store transient protocol messages in in-memory tables
Select RDBMS to store transient protocol messages in a relational database.
Configuration Store: File or RDBMS
Select File to store Oracle Identity Federation configuration data on the local file system.
Select RDBMS to store Oracle Identity Federation configuration data in a relational database.
Note:
The screens that appear next depend on the options you selected for the configuration items.
If you selected RDBMS for User Session Store, Message Store, or Configuration Store, go to step 14 now.
If you did not select RDBMS for User Session Store, Message Store, or Configuration Store, go to step 16 now.
Enter the following information on the Specify Transient Store Database Details screen:
HostName: Enter the connection string to the database host in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.
Username: Enter the name of the schema owner created by RCU, which is of the form PREFIX_OIF.
Password: Enter the password for the database user.
Click Next.
The Installation Summary screen appears. Verify the information on this screen. Click Configure to begin the configuration.
The Configuration Progress screen appears. Click Next to continue.
The Installation Complete screen appears. Click Save to save the configuration information to a file, and then click Finish to exit the installer.
Note:
To configure Oracle Identity Federation so that it is integrated with Oracle HTTP Server, refer to the "Deploying Oracle Identity Federation with Oracle HTTP Server" section in the Oracle Fusion Middleware Administrator's Guide for Oracle Identity Federation.