BenutzerhandbuchInhaltsverzeichnisContents3Preface13Intended Audience13Documentation Accessibility13Related Documents14Conventions141 Product and Installation Overview151.1 Product Overview151.2 Where Do I Find Installation Instructions for My Product?161.3 Recommended Topologies171.3.1 Installing Oracle Identity Management in a Single Oracle Home181.3.2 Installing a Distributed Oracle Identity Management with an Integrated Oracle HTTP Server191.3.3 Installing a Distributed Oracle Identity Management with a Standalone Oracle HTTP Server212 Requirements252.1 Using OracleMetaLink to Obtain the Latest Oracle Application Server Hardware and Software Requirements252.2 System Requirements262.2.1 Installing from the Console or X Windows292.2.2 Tips for Reducing Memory Usage292.3 Software Requirements292.4 Kernel Parameters312.4.1 Kernel Parameter Settings for OracleAS Metadata Repository312.5 Ports322.5.1 Checking If a Port Is in Use332.5.2 Using Default Port Numbers332.5.3 Using Custom Port Numbers (the "Static Ports" Feature)342.5.3.1 Format of the staticports.ini File342.5.3.2 Error Conditions that Will Cause the Installer to Use Default Ports Instead of Specified Ports362.5.3.3 Example372.5.4 If Port 1521 Is in Use372.5.4.1 If Port 1521 Is In Use by an Existing Oracle Database372.5.4.1.1 Scenario 1: Existing Listener Uses Port 1521 and Listener Version Is Earlier Than 10.1.0.2382.5.4.1.2 Scenario 2: Existing Listener Uses Port 1521 and Listener Version Is 10.1.0.2 or Later392.5.4.1.3 Scenario 3: Existing Listener Uses a Port Other Than 1521392.5.4.2 If Port 1521 Is In Use by Some Other Application392.6 Operating System Groups402.6.1 Create a Group for the Inventory Directory402.6.2 Create Groups for Database Administrators402.7 Operating System User412.8 Environment Variables422.8.1 Environment Variable Tips422.8.2 ORACLE_HOME and ORACLE_SID432.8.3 PATH, CLASSPATH, and LD_LIBRARY_PATH432.8.4 DISPLAY432.8.5 TMP and TMPDIR442.8.6 TNS_ADMIN442.9 The /etc/hosts File452.9.1 Location of the Default Oracle Identity Management Realm452.9.2 Hostname for OracleAS Single Sign-On452.10 Network Topics462.10.1 Installing on Multihomed (Multi-IP) Computers462.10.2 Copying CD-ROMs or DVD-ROM to Hard Drive, and Installing from the Hard Drive462.10.3 Installing from a Remote CD-ROM or DVD-ROM Drive472.10.4 Installing on Remote Computers482.10.5 Installing on NFS-Mounted Storage492.10.6 Running Multiple Instances from One Installation492.10.7 Support for NIS and NIS+502.11 Prerequisite Checks Performed by the Installer503 Things You Should Know Before Starting the Installation533.1 Oracle Home Directory533.1.1 Installing in an Existing Oracle Home543.1.2 Installing in a Non-Empty Oracle Home543.2 Can I Use Symbolic Links?543.3 First-Time Installation of Any Oracle Product543.4 Installing Additional Languages553.5 Oracle Application Server Instances and Instance Names553.6 The ias_admin User and Restrictions on its Password563.7 Comparing Installing Components against Configuring Components573.8 Where Does the Installer Write Files?573.9 Why Do I Need to be Able to Log In as Root at Certain Times During Installation?583.10 Running root.sh During Installation583.11 Can I Modify Other Oracle Application Server Instances During Installation?583.12 Connecting to Oracle Internet Directory Through SSL Connections593.13 Obtaining Software from Oracle E-Delivery593.13.1 Finding and Downloading the Oracle Application Server 10g (10.1.4.0.1) E-Pack593.13.2 Finding Required and Optional Downloads593.13.3 Disk Space Requirements593.13.4 Software Requirements for Unzipping Files593.13.5 Extracting Software from the Zip Files603.14 Setting the Mount Point for the CD-ROM or DVD603.15 Starting the Oracle Universal Installer604 Installing OracleAS Infrastructure634.1 Infrastructure Installation Types634.2 Why Would I Select the Different Infrastructure Installation Types?644.3 Order of Installation for the Infrastructure654.4 Can I Install Components on Separate Computers?664.5 Tips for Installing Oracle Identity Management Components Separately674.6 Do I Need the Oracle Delegated Administration Services or the Oracle Directory Integration Platform Components?684.7 Can I Configure Components After Installation?684.8 Can I Use an Existing Database for the OracleAS Metadata Repository?684.9 Can I Use an Existing Oracle Internet Directory?694.10 Registration of OracleAS Metadata Repository in Oracle Internet Directory and Password Randomization694.11 Contents of the OracleAS Metadata Repository704.12 Can I Use Multiple Metadata Repositories?714.13 What High Availability Options Does Oracle Application Server Support?724.14 Restrictions on the Passwords for the SYS, SYSTEM, SYSMAN, and DBSNMP Users724.15 Support for NE8ISO8859P10 and CEL8ISO8859P14 Characters Sets734.16 What Do I Enter in the "Specify Namespace in Internet Directory" Screen?734.17 How to Determine Port Numbers Used by Components734.18 Can I Add OCA After Installation?744.19 How to Deploy Oracle Delegated Administration Services on a Separate Host744.20 Installing OracleAS Infrastructure744.21 Installing OracleAS Infrastructure Against an Existing Oracle Internet Directory764.22 Installing OracleAS Metadata Repository in a New Database774.23 Installing Oracle Identity Management Components Only (Including Oracle Internet Directory)784.24 Installing Oracle Identity Management Components Only (Excluding Oracle Internet Directory)804.25 Installing Oracle Internet Directory Only824.26 Installing OCA and OracleAS Metadata Repository Only834.27 Install Fragment: The First Few Screens of the Installation854.28 Install Fragment: The Last Few Screens of the Installation874.29 Install Fragment: Database Screens884.30 Install Fragment: OCA Screens895 Configuring Oracle Internet Directory for Oracle Application Server Installation Privileges915.1 Default Users in Oracle Internet Directory915.2 Groups in Oracle Internet Directory925.2.1 "Global" Groups925.2.2 Groups for Each Metadata Repository935.2.3 Groups for Each Component935.3 Groups Required to Configure or Deinstall Components945.4 Groups Required to Install Middle Tiers975.4.1 Groups Required to Install Against the Desired Metadata Repository975.4.2 Groups Required to Install Middle-tier Components975.4.3 Example975.5 Groups Required to Install Additional Metadata Repositories985.6 Example of Installation with Different Users985.7 How to Create Users in Oracle Internet Directory1005.8 How to Add Users to Groups in Oracle Internet Directory1005.8.1 Using Oracle Directory Manager to Add Users to Groups1015.8.1.1 Navigating to "Global" Groups1015.8.1.2 Navigating to Metadata Repository Groups1025.8.1.3 Navigating to Component Groups1035.8.2 Using Deployment Delegation Console to Add Users to Groups1045.9 Contents of a New Oracle Internet Directory1065.10 On the Specify Login for Oracle Internet Directory Screen, What Username and Realm Do I Enter?1066 Installing Oracle Internet Directory in Replicated Mode1096.1 Oracle Internet Directory Replication Overview1096.1.1 Fan-Out Replication (LDAP Replication)1106.1.2 Multimaster Replication (Advanced Replication)1106.2 Requirements1116.2.1 Database Requirements1116.2.2 Clock Synchronization1126.3 Installation Order1126.4 Installing a Master Oracle Internet Directory1126.5 Installing an Oracle Internet Directory Replica1136.5.1 Overview of Installing a Replica1136.5.2 Installing an Oracle Internet Directory Replica with a New Database1136.5.3 Installing an Oracle Internet Directory Replica against an Existing Database1166.6 Accessing OracleAS Single Sign-On and Oracle Delegated Administration Services1187 Installing in High Availability Environments: Overview1197.1 Overview of High Availability Configurations1197.1.1 OracleAS Cold Failover Cluster1197.1.2 OracleAS Clusters1217.1.3 OracleAS Disaster Recovery1227.1.4 Summary of Differences1227.2 Installation Order for High Availability Configurations1227.3 Requirements for High Availability Configurations1237.3.1 Check Minimum Number of Nodes1237.3.2 Check That Groups Are Defined Identically on All Nodes1237.3.3 Check the Properties of the oracle User1237.3.4 Check for Previous Oracle Installations on All Nodes1248 Installing in High Availability Environments: OracleAS Cold Failover Cluster1258.1 OracleAS Cold Failover Cluster: Introduction1258.2 Pre-Installation Steps for OracleAS Cold Failover Cluster1268.2.1 Map the Virtual Hostname and Virtual IP Address1268.2.2 Set Up a File System That Can Be Mounted from Both Nodes1288.2.3 Review Recommendations for Automatic Storage Management (ASM)1298.2.4 Check That Clusterware Is Running (Automated Failovers only)1298.2.5 Modify listener.ora file for Existing Database1298.3 Installing an OracleAS Cold Failover Cluster (Infrastructure) Configuration1308.3.1 OracleAS Cold Failover Cluster (Infrastructure): Overview of Installation Steps1328.3.2 OracleAS Cold Failover Cluster (Infrastructure): Details of Installation Steps1328.4 Installing a Distributed OracleAS Cold Failover Cluster (Infrastructure) Configuration1358.4.1 Distributed OracleAS Cold Failover Cluster (Infrastructure): Overview of Installation Steps1378.4.2 Distributed OracleAS Cold Failover Cluster (Infrastructure): Details of Installation Steps1378.5 Installing an OracleAS Cold Failover Cluster (Identity Management) Configuration1388.5.1 OracleAS Cold Failover Cluster (Identity Management): Overview of Installation Steps1408.5.2 OracleAS Cold Failover Cluster (Identity Management): Details of Installation Steps1418.6 Installing a Distributed OracleAS Cold Failover Cluster (Identity Management) Configuration1438.6.1 Distributed OracleAS Cold Failover Cluster (Identity Management): Overview of Installation Steps1458.6.2 Distributed OracleAS Cold Failover Cluster (Identity Management): Details of Installation Steps1468.7 Installing Oracle Delegated Administration Services and OracleAS Single Sign-On in an OracleAS Cold Failover Cluster1488.7.1 Oracle Delegated Administration Services and OracleAS Single Sign-On in OracleAS Cold Failover Cluster: Overview of Installation Steps1508.7.2 Oracle Delegated Administration Services and OracleAS Single Sign-On in OracleAS Cold Failover Cluster: Details of Installation Steps1508.8 Installing Only the OracleAS Metadata Repository in an OracleAS Cold Failover Cluster Environment1548.9 Post-Installation Steps for OracleAS Cold Failover Cluster1558.9.1 Edit the ORACLE_HOME/Apache/Apache/htdocs/index.html File1558.9.2 Copy the /var/opt/oracle Directory to the Other Node1558.9.3 Running Database Console against a Cold Failover Cluster Database1558.9.4 Create a Clusterware Agent for Automatic Failover1568.10 Installing Middle Tiers Against an OracleAS Cold Failover Cluster Infrastructure1568.10.1 If You Plan to Install Middle Tiers on OracleAS Cold Failover Cluster Nodes1568.10.1.1 Create a staticports.ini File for the Middle Tier1568.10.1.2 Rename the /var/opt/oracle Directory Used for the Infrastructure1578.10.2 Procedure for Installing Middle Tiers Against an OracleAS Cold Failover Cluster Infrastructure1578.11 Installing Regular Middle-Tiers on OracleAS Cold Failover Cluster Nodes1589 Installing in High Availability Environments: OracleAS Cluster (Identity Management)1599.1 OracleAS Cluster (Identity Management): Introduction1599.2 Pre-Installation Steps for OracleAS Cluster (Identity Management)1609.2.1 Use the Same Path for the Oracle Home Directory (recommended)1609.2.2 Synchronize Clocks on All Nodes1619.2.3 Configure Virtual Server Names and Ports for the Load Balancer1619.2.4 Configure Your LDAP Virtual Server1619.2.4.1 Load Balancer Supports LDAP Service Monitoring1629.2.4.2 Load Balancer Does Not Support LDAP Service Monitoring1629.3 About Oracle Internet Directory Passwords1629.4 About Configuring SSL and Non-SSL Ports for Oracle HTTP Server1639.4.1 Case 1: Client ---[HTTP]---> Load Balancer ---[HTTP]---> Oracle HTTP Server1639.4.2 Case 2: Client ---[HTTPS]---> Load Balancer ---[HTTPS]---> Oracle HTTP Server1649.4.3 Case 3: Client ---[HTTPS]---> Load Balancer ---[HTTP]---> Oracle HTTP Server1649.5 Installing an OracleAS Cluster (Identity Management) Configuration1659.5.1 Installation Order1669.5.2 Installing OracleAS Metadata Repository1679.5.3 Installing OracleAS Cluster (Identity Management) on the First Node1679.5.3.1 Create staticports.ini File1679.5.3.2 Disable TCP Monitoring on Load Balancer for First Node1689.5.3.3 Configure the Load Balancer to Return Immediately to the Calling Client1689.5.3.4 Ensure that the OracleAS Metadata Repository Is Not Registered with any Oracle Internet Directory1689.5.3.5 Select the Same Components for Each Node1689.5.3.6 Run the Installer1689.5.4 Installing OracleAS Cluster (Identity Management) on Subsequent Nodes1709.6 Installing a Distributed OracleAS Cluster (Identity Management) Configuration1739.6.1 Installation Order1759.6.2 Installing OracleAS Metadata Repository1759.6.3 Installing Oracle Internet Directory on the First Node1759.6.3.1 Set up staticports.ini File1759.6.3.2 Select the Same Components for Each Installation1769.6.3.3 Start the Installer1769.6.4 Installing Oracle Internet Directory on Subsequent Nodes1779.6.4.1 Staticports.ini File Not Needed1779.6.4.2 Select the Same Components for Each Installation1779.6.4.3 Start the Installer1779.6.5 Installing OracleAS Single Sign-On and Oracle Delegated Administration Services on Each Node1799.6.5.1 Set up staticports.ini File1799.6.5.2 Start the Installer1809.7 Post-Installation Steps1829.7.1 Cluster the OC4J_Security Instance for State Replication (First Oracle Delegated Administration Services node only)1829.7.2 Changing the Ports for Oracle Internet Directory1839.7.3 Update targets.xml (Case 2 only)1839.8 Installing Middle Tiers Against OracleAS Cluster (Identity Management) Configurations18410 Installing in High Availability Environments: OracleAS Disaster Recovery18510.1 OracleAS Disaster Recovery: Introduction18510.2 Setting up the OracleAS Disaster Recovery Environment18710.2.1 Ensure Nodes Are Identical at the Operating System Level18710.2.2 Set Up staticports.ini File18710.2.3 Set Up Identical Hostnames on Both Production and Standby Sites18810.2.4 If You Want to Use OracleAS Cold Failover Cluster on the Production Site19210.3 Installing Oracle Application Server in an OracleAS Disaster Recovery Environment19210.3.1 Installing the OracleAS Infrastructure19310.3.2 Installing Middle Tiers19310.4 Installing the OracleAS 10g (10.1.2.0.2) Standalone Install of OracleAS Guard into Oracle Homes19310.5 Patching OracleAS Guard Release 10.1.2.0.0 with Release 10.1.2.0.219410.6 What to Read Next19511 Post-Installation Tasks19711.1 State of Oracle Application Server Instances After Installation19711.2 Passwords for Oracle Application Server Components19711.3 NFS Installations19811.4 Backup and Recovery19811.5 SSL19811.6 Operating System Locale and NLS_LANG Environment Variable19811.6.1 Check the Operating System Locale19811.6.2 Check the NLS_LANG Setting19811.7 Component Configuration After Installation19911.7.1 Configuring mod_osso (Required for Oracle Delegated Administration Services)19911.8 Components that Require Post-Installation Tasks20111.9 What to Do Next201A Installing the Oracle Identity Management Grid Control Plug-in203A.1 Installation Requirements203A.2 Starting the Grid Control Plug-in Installer203A.3 Installing Oracle Identity Management Grid Control Plug-in204A.4 Installing Oracle Identity Management Grid Control Plug-in Agent205B Silent and Non-Interactive Installation207B.1 Silent Installation207B.2 Non-Interactive Installation208B.3 Pre-Installation208B.4 Notes for Silent and Non-Interactive Installations208B.4.1 Installing OracleAS Certificate Authority208B.5 Create the Response File209B.5.1 Creating Response Files from Templates209B.5.2 Creating Response Files by Using the Record Mode in the Installer209B.5.3 Variables to Modify in the Response Files209B.5.4 Example Response Files210B.5.4.1 Example Response File for OracleAS Infrastructure: Oracle Identity Management Only210B.5.4.2 Example Response File for OracleAS Infrastructure: OracleAS Metadata Repository Only212B.5.4.3 Example Response File for OracleAS Infrastructure: Identity Management and OracleAS Metadata Repository214B.5.4.4 Example Response File for Oracle Identity Federation215B.6 Start the Installation216B.7 Post-Installation217B.8 Security Tips for Silent and Non-Interactive Installations217B.9 Deinstallation218C Default Port Numbers219C.1 Method of Assigning Default Port Numbers219C.2 Default Port Numbers219C.3 Ports to Open in Firewalls221D Deinstallation and Reinstallation223D.1 Deconfig Tool223D.1.1 Parameters224D.1.2 Log Files Generated by the Deconfig Tool225D.2 Deinstallation Procedure: Overview225D.3 Deinstalling OracleAS Cold Failover Cluster Installations226D.4 Deinstalling OracleAS Single Sign-On Instances in OracleAS Cluster (Identity Management)226D.5 Deinstalling OracleAS Cluster (Identity Management)227D.6 Deinstalling OracleAS Infrastructure227D.6.1 Deinstallation Order227D.6.2 Deinstallation Steps227D.7 Harmless Errors in the Log File229D.8 Cleaning Up Oracle Application Server Processes230D.9 Reinstallation230D.10 Troubleshooting230E Configuration Assistants231E.1 Troubleshooting Configuration Assistants231E.1.1 General Tips231E.1.2 Configuration Assistant Result Codes232E.2 Description of Oracle Application Server Configuration Assistants232F Troubleshooting239F.1 Log Files239F.2 General Troubleshooting Tips239F.3 Installation Problems and Solutions240F.3.1 Location of Log Files240F.3.2 Linking Failed, ORA Errors241F.3.3 Prerequisite Checks Fail at the Start of Installation241F.3.4 Message About Installing in a Non-Empty Directory241F.3.5 Messages About SHMMAX and SEMMSL242F.3.6 Installer Disappears After Running the Pre-Installation Checks242F.3.7 Unable to Clean Up a Failed Installation243F.3.8 Forgot the Password for the cn=orcladmin Account243F.3.9 cn=orcladmin Account Becomes Locked243F.3.10 User Interface Does Not Display in the Desired Language, or Does Not Display Properly243F.3.11 Installer Does Not Display Correct Database Name for OracleAS Metadata Repository244F.3.12 Configuration Assistant Failures - General244F.3.13 OracleAS Randomize Password Configuration Assistant Failures245F.3.14 Database Configuration Assistant (DBCA) Failures245F.3.15 Harmless Error Message from Database Configuration Assistant (DBCA)246F.3.16 OPMN Configuration Assistant - Start HTTP Server Failures246F.3.17 OPMN Configuration Assistant - Start DAS Instance Failures247F.3.18 OPMN Configuration Assistant - Start OCA Failures247F.3.19 WARNING: DCM service may not be available at this time247F.3.20 OracleAS Cluster (Identity Management)- Cluster Configuration Assistant Fails248F.3.21 OracleAS Cluster (Identity Management) - Installation Fails on Second Oracle Internet Directory Node248F.3.22 OracleAS Cluster (Identity Management) - Installation Fails on Second Oracle Delegated Administration Services and OracleAS Single Sign-On Node248F.4 Deinstallation Problems and Solutions249F.4.1 Obsolete Partner URLs Still Remain on the OracleAS Single Sign-On Administration Screen249F.4.2 Unable to Reuse Instance Name of a Deleted Instance250F.4.3 Unable to Reuse Database Name250F.4.4 Deconfiguration Failed on Distributed OracleAS Cluster (Identity Management)251F.5 Need More Help?252Index253A253B253C253D253E254F254G254H254I254K255L255M255N255O255P257R257S258T258U258V258W258Größe: 4,47 MBSeiten: 258Language: EnglishHandbuch öffnen
