cinqict

Friday, July 31, 2015

Oracle OID (11.1.1.9) with ODIP/ODSM installation

Introduction
This blog will guide you through the installation of Oracle OID (version 11.1.1.9) with ODIP and ODSM installed. Although there are lots of howto’s on the internet and Oracle documentation, there are some tricky things when trying to install the domain in a custom location. Especially with ODIP installed. Most real-world  environments have their domains located on a separate location, outside the middleware home. This is why I wanted to share this with you.
So. Lets get started!
Software used
I have used 2 Oracle Linux 6.4 servers for the installation. 1 is running a Oracle 12c database for the schema’s that you can install with RCU (ODS). The other Linux server will be running the OID. The software used for the OID installation is from the Oracle Identity and Access Management Deployment Repository 11.1.2.3.0, which you can download from the Oracle Software Delivery Cloud This Repository contains the whole Identity and Access Management stack, including Weblogic and RCU.
We will be installing the OID as the oraoas user. The example installation will use the following settings:
The middleware home will be created in /w001/app/mwhome_idm
The ORACLE_HOME  will be created in /w001/app/mwhome_idm/Oracle_IDM1
The instance will be created in /w001/app/instances/oidinst_1 with name oid_1
The domain will be created in /w001/app/domains/idm_domain
We have a jdk home (version 1.7) installed in /w001/app/jdk
Weblogic Installation
Start the weblogic installation by running
java –jar wls_generic.jar
This jar is found in the installers/weblogic directory of the unpacked repository.
Follow the installation screens
Selection_001_thumb
Create the middleware home directory:
Selection_002_thumb
Choose Custom Install Type…
Selection_003_thumb
…to avoid installation of the Evaluation Database…
Selection_004_thumb1
Select the JDK at /w001/app/jdk
Selection_005_thumb
Verify the installation directories
Selection_006_thumb
Verify the Summary
Selection_007_thumb
Get some coffee….
Selection_008_thumb
And finally deselect the Run Quickstart screen and press Done. We do not want to setup a domain at this point!
Selection_009_thumb1
Oracle IDM Installation
We are now going to install the Oracle IDM software in the middleware home and create an ORACLE_HOME directory
Go to the installers/idm/Disk1 directory from the unpacked Repository and run runInstaller.
This will open the Inventory Directory screen. We will use /w001/app/oraInventory in this example.
Selection_048_thumb
Now, the Welcome Screen appears. Click Next
Selection_023_thumb
On the next screen, select Install Software – Do Not Configure
Selection_050_thumb
Select the middleware home, created in the Weblogic installation, and enter a name for the ORACLE_HOME (default Oracle_IDM1)
Selection_051_thumb
Accept the defaults in the rest of the installation.
Domain Creation
We are now going to create a domain with some extra options, that are now available, since we have installed the IDM software.
Run the following command to open the Domain Creation Wizard:
/w001/app/mwhome_idm/wlserver_10.3/common/bin/config.sh
Choose to create a new domain
Selection_011_thumb
Now, the next selection is very important! Select Oracle Enterprise Manager, Oracle Identity Management and Oracle JRF (auto-selected). Do NOT select Oracle Directory Integration Platform. We will install ODIP when we will extend the domain.
Selection_012_thumb
In the next screen, enter the custom location for the domain and applictions and enter the domain name.
Selection_013_thumb
Enter the password for the weblogic user
Selection_014_thumb
Select Production Mode
Selection_015_thumb
Choose to configure only an Administration Server
Selection_016_thumb
Enter the listen address and port for the Administration server
Selection_017_thumb
Verify the Summary screen and click Create
Selection_018_thumb
And Finish the domain creation
Selection_019_thumb
Domain Extension
Now, we will extend the domain with the OID configuration.
Start up the domain by simply running
/w001/app/domains/idm_domain/startWebLogic.sh
This will ask you to enter the weblogic user and password. Wait till the AdminServer is up and running.
With the AdminServer running, run the following command
/w001/app/mwhome_idm/Oracle_IDM1/bin/config.sh
This will show us the Oracle Identity Management Installation Welcome Screen
Selection_023_thumb1
In the next screen, choose to extend an existing domain and enter the values for the domain created in the previous chapter.
Selection_024_thumb
Enter the path and name for the instance
Selection_025_thumb
The next screen gives us the option to configure ODIP. If we would have chosen the install ODIP during the creation of the domain, this option would not have been available!
So, now you can select to configure OID, ODIP, HTTP server and ODSM
Selection_026_thumb
In the next screen, select Auto Port Configuration, or select a file with custom ports.
Selection_027_thumb
Enter the database connection settings
Selection_028_thumb
Enter the realm and password for the orcladmin user
Selection_029_thumb
Verify the installation summary
Selection_030_thumb
Watch the configuration progress.
Selection_031_thumb
And finally click Finish to end the configuration.
Selection_032_thumb
Optional settings
To verify the running instance, run the following command:
/w001/app/instances/oidinst_1/bin/opmnctl status –l
This will show you the following:
Selection_033_thumb
To run the http server on port 80, we will have to grant root access to the .apachectl file.
As root:
Selection_034_thumb
Selection_035_thumb
As oraoas:
Selection_036_thumb
Change the listen port to 80
Selection_037_thumb
And restart the OHS
Selection_038_thumb
Verify OHS is running on port 80
Selection_039_thumb1

From the Admin Console you can choose to run the Managed Server, which is hosting the DIP and ODSM application, on a different port. I have configured to run this on port 7024.
You can then configure the weblogic plugin to forward odsm to that managed server.
Edit the file mod_wl_ohs.conf
vi /w001/app/instances/oidinst_1/config/OHS/ohs1/mod_wl_ohs.conf
and add the following section:
<Location ~ "/odsm*">
SetHandler weblogic-handler
WebLogicHost oid1.cinqict.local
WebLogicPort 7024
</Location>
Again, restart the OHS server.
Now you can reach the odsm application and configure you OID through the OHS Http server, on a clean url:
Selection_047_thumb

The end ….
That’s all folks.

1 comment: