Fusion Applications 11.1.1.5.1 Installation Part II – Configure Oracle Internet Directory

In previous post here I discussed Identity and Access Management installation for Fusion Applications and covered following steps

a) Install WebLogic Server 10.3.5 (This will create middleware Home)
b) Install OID 11.1.1.2 and apply patch 11.1.1.5 (This will create IDM Oracle Home)
c) Install OIM/OAM 11.1.1.5 (This will create IAM Oracle Home)
d) Install SOA 11.1.1.5 (This will create SOA Oracle Home, SOA is used by OIM)
e) Install OHS 11.1.1.2 and apply patch 11.1.1.5 (This will create OHS Oracle Home)
f) Create Schema in IDM database using RCU

Next step is to configure these components (OID, OIM, OAM, SOA, OHS) and then integrate
i) OID with OIM (for user/role synchronization between OIM and OID)
ii) OAM with OIM (for password management and account lock/unlock)
iii) OAM with OID (user store for OAM)

This post covers configuration of Oracle Internet Directory 11g.

a) Start OID configuration by running config.sh from IDM Oracle_Home/bin

b) Select option “Create New Domain” (This step will create WebLogic domain which will later be extended to include OIM, OAM and SOA)

c) Provide Instance Directory and Oracle Home, WebLogic Sever directory. (Instance Directory can be anywhere i.e. inside or outside Middleware Home).  This step will create ORACLE_INSTANCE OID startup/shutdown, log and configuration files are under Instance Directory.

Note : OHS configuration will also create another instance directory.

d) From components list,  select Oracle Internet Directory and Oracle Directory Services Manager (ODSM) (Other components like OVD, OIF, DIP are optional and are NOT used by Fusion Applications)

e) On database screen, select Use Existing Schema and provide details of database where schemas were created using RCU

f) Enter details of realm (also known as domain) and Administrator password (default user is cn=orcladmin). Realm value by default is domain name of machine on which you are installing OID. For ex. if machine names is machine1.onlineappsdba.com then installer will create default realm value as dc=onlineappsdba,dc=com (If required you can select different realm value).

Note: Users and Groups in Fusion Applications are created and stored under relam like cn=Users, <Realm> and cn=Groups, <Realm> respectively.

Note: There are two orcladmin accounts in OID i.e. cn=orcladmin (Super User) and cn=orcladmin, cn=Users, <Realm> (Domain Administrator) with same password by default. Password of these two accounts can be set to different value.

g)  Installer will automatically start OID and WebLogic Services (Admin Server and ODSM)

h) Verify configuration by checking
i) OID ($ORACLE_INSTANCE/bin/opmnctl status -l)
ii) Admin Server http://hostname:7001/console
iii) ODSM http://hostname:7005/odsm

Note: 7001 and 7005 are default Admin Server and ODS managed server port in WebLogic Domain  .

In next post we are going to prepare OID for OIM/OAM using idmConfigTool more here and here , including what happens behind the scene when you run idmConfigTool

About the Author Masroof Ahmad

Leave a Comment:

25 comments
fusion_cwa says December 30, 2011

I am following your series on Fusion Applications Install and just did Part II – Configure OID. But the config.sh tool failed while trying to instantiate the instance. The log shows a bunch of missing files, listed below. All steps until now appear to have worked fine. Where might I find these files, and what step might I have missed?
.
/u02/app/oracle/fmw/patch_wls1032/profiles/default/sys_manifest_classpath/weblogic_patch.jar
/u02/app/oracle/fmw/jrockit_160_14_R27.6.4-18/lib/tools.jar
/u02/app/oracle/fmw/wlserver_10.3/server/lib/weblogic_sp.jar
/u02/app/oracle/fmw/modules/features/weblogic.server.modules_10.3.2.0.jar
/u02/app/oracle/fmw/modules/org.apache.ant_1.7.0/lib/ant-all.jar
/u02/app/oracle/fmw/modules/net.sf.antcontrib_1.0.0.0_1-0b2/lib/ant-contrib.jar
/u02/app/oracle/fmw/wlserver_10.3/common/eval/pointbase/lib/pbembedded57.jar
/u02/app/oracle/fmw/wlserver_10.3/common/eval/pointbase/lib/pbclient57.jar
/u02/app/oracle/fmw/wlserver_10.3/common/eval/pointbase/lib/pbtools57.jar
/u02/app/oracle/fmw/modules/org.apache.ant_1.7.0/lib/ant-all.jar
/u02/app/oracle/fmw/modules/org.apache.ant_1.7.0/lib/ant.jar
/u02/app/oracle/fmw/modules/org.apache.ant_1.7.0/lib/ant-launcher.jar
/u02/app/oracle/fmw/modules/features/weblogic.server.modules_10.3.1.0.jar

Reply
fusion_cwa says January 1, 2012

Not sure the files listed in the log are really relevant to the failure to create the ASinstance. These are just warnings in the lg and it goes on to a few other steps. WLS is up with both services (Admin and wls_ods1).

Reply
fusion_cwa says January 1, 2012

After further analysis the root error appears to be…
===================================
opmnctl start: failed.
Can not resolve .com for interface any
In doCancel method …
Yes option….
===================================
I cannot start it from the command line. I can ping the server name so it is not clear to me what is meant by ‘Can not resolve…’

Reply
fusion_cwa says January 1, 2012

At what point do the databases get built? Am I supposed to have that installed manually before starting any of these steps or do they get built by the provisioning wizard?

Reply
fusion_cwa says January 1, 2012

After much searching I found a solution at http://www.oraclenerd.com/2011/08/obiee-11g-opmnctl-start-failed-can-not.html in which the solution is stated as simply separating the loopback entries in /etc/hosts so that there are separate lines for localhost and for fusionoid. Now I can start opmn. I deleted IDMDomain and reran config.sh sucessfully!

I still have a question about when the DB gets built, though.

Reply
Atul Kumar says January 2, 2012

@ fusion_cwa,
Which database we are talking here ?

Is this for OID, OAM/OIM or for Fusion Apps ?

a) OID schema can be created via RCU or during OID configuration.
b) OIM/OAM must be created via RCU before OIM/OAM configuration.
c) Fusion Apps Schema must be created using RCU before provisioning fusion applications.

Reply
fusion_cwa says January 14, 2012

OK, I missed a step. So I went back and reinstalled things and now everything checks out except I cannot reach ODSM. The netstat cmd shows a java process (weblogic.Name=wls_ods1) listening on 7005 and the oraInventory/installSummary file gives the URL to access odsm but it does not come up.

Reply
Atul Kumar says January 15, 2012

@ fusion_cwa,
Check what is port of ODSM from weblogic console and ensure that you are using correct URL.

If you are then check error message during startup under $DOMAIN_HOME/servers/wls_ods1/logs

Reply
fusion_cwa says January 15, 2012

Thanks. Access log is zero bytes, no errors in the other 2 logs. I now see I can access the osdm from a browser launched at the server (inside a VNC desktop) however attempts to reach it from another platform results in a HTTP-404. I also see the wls_ods1 service is in a different container associated with localhost.localdomain whereas everything else is associated with a real fqd. Is this an OIM security mechanism?

Reply
Atul Kumar says January 16, 2012

@fusion_cwa,
No this is no OIM security. This is configuration during weblogic domain configuration.

Login to weblogic console, expand Environment and click on Servers -> on right panel click on wls_ods1

Under Listen Address, check what is configured ?

If this is localhost.localdomain or 127.0.0.1 then change it to FQDN and then restart wls_ods1

Try then from machine on network.

Reply
fusion_cwa says January 16, 2012

I stated the issue incorrectly. Sorry for wasting your valuable time but I am not totaly familiar with what things are called. The odsm application (target: wsl_ods1, WebLogic Domain: IDMDomain) is up and has a fully qualified domain name. The target ‘/Farm_IDMDomain/aserver/oid1’ shows its host as ‘localhost.localdomain’. I don’t know if that is relevant or not since it shows the Agent as ‘localhost.localdomain:5162’ and I can hit that from another server (using the real server name of course) and get a response that it is up and available. I can hit both odsm and odsm-config from a browser on the OID server, but neither from any other server, even though all other URLs to the OID server are available.

Reply
fusion_cwa says January 28, 2012

I was able to log into ODSM and also connect to the directory (did not realize the login was literally ‘cn=orcladmin’). Still cannot hit ODSM from any other client but I did notice that if I launch ODSM from within EM on the local server it generates the URL using ‘localhost6.localdomain6’. I have IPV6 turned off on these servers, might that be relevant? I can hit EM and Console from any other platform, just not ODSM. I will continue the configs on this platform but obviously will not be able to provision Fusion without resolving this issue. Any troubleshooting advice?

Reply
Atul Kumar says January 28, 2012

@ fusion_cwa, login to weblogic admin console and then select servers (from left panel)

click on wls_ods1 on right panel , update what is value in “Listen Address”

Reply
fusion_cwa says February 1, 2012

Listen address shows the fully qualified server name. However netstat shows it is only listening locally…

$ netstat -a -n | grep 7005
tcp 0 0 ::1:7005 :::* LISTEN
tcp 0 0 ::1:11759 ::1:7005 ESTABLISHED
tcp 0 0 ::1:7005 ::1:11759 ESTABLISHED

Reply
Atul Kumar says February 5, 2012

@ fusion_cwa,
::1 means IPV 6 local IP (::1)

It should instead listen on either * (all IPs) or actual IP of machine.

What is output of

ping

Update output of /etc/hosts (at time of installation)

Reply
fusion_cwa says February 5, 2012

Contents of hosts file at time of install…
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
127.0.0.1 fusionoid.hitachiconsulting.com fusionoid
::1 fusionoid.hitachiconsulting.com fusionoid

Not sure what you mean by output of ping. From my local system I can ping fusionoid because it is defined in my local hosts file, which is why I can reach AdminServer. Do I have to define the fusionoid IP address in the host file on fusionoid?

Reply
Atul Kumar says February 7, 2012

@ fusion_cwa ,

Q: Do I have to define the fusionoid IP address in the host file on fusionoid?
A: Yes

Change /etc/hosts entry like

[IP of fusionoid] fusionoid.hitachiconsulting.com fusionoid
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6

Restart services and then try (You may have to update database listener.ora )

Reply
fusion_cwa says February 7, 2012

I found the same advice on Oracle Support in note ‘CheckList For OID 11g ODSM Page Launching / Loading / Displaying Problems Or Errors [ID 972416.1]’. However, changing the hosts file and bouncing all the services does not correct the situation. I fear I will have to reinstall everything now that my hosts file contains the local entry. If you have any other things to try I would rather try them then re-install (again ;-))

Reply
fusion_cwa says February 10, 2012

OK, I put my local IP address in hosts file and reinstalled everything from scratch. No difference! I guess I am looking at an SR.

Reply
oracle_app says March 9, 2012

I am unable to create the domain form Forms and Reports 11.1.1.5 for Weblogic server 10.3.5. It just hangs there. Any ideas?

Reply
Atul Kumar says March 11, 2012

@ oracle_app,
Create domain with option log to find root cause of issue

config.sh -log=createDomain.log

Reply
amr says April 1, 2012

dear my friend

i get this error please check

http://www.4shared.com/photo/Zx0jiYqo/FU_online.html

Reply
Atul Kumar says April 1, 2012

@ amr,
check log file as mentioned in screenshot to find root cause of OID startup issue. Search on this blog about error configuring OID on windows at start-up

Reply
Add Your Reply