Starting the Environment For OID Configuration

Connect with the OID Operating System User to check the Profile Option set for the OID Environment.

[oidmgr@oidserver ~]$ cat .bash_profile

# .bash_profile

# Get the aliases and functions if [ -f ~/.bashrc ];

then . ~/.bashrc fi

# User specific environment and startup programs

export MW_HOME=/u02/app/oracle/Middleware/Oracle_Home

export ORACLE_COMMON_HOME=$MW_HOME/oracle_common

export ORACLE_HOME=$MW_HOME/oid

export WL_HOME=$MW_HOME/wlserver

export JAVA_HOME=/u02/jdk1.8.0_361/

export DOMAIN_HOME=$MW_HOME/user_projects/domains/base_domain

Next we will untar the JDK

[oidmgr@oidserver u02]$ tar -xvzf jdk-8u361-linux-x64.tar.gz

[oidmgr@oidserver ~]$ cd /u02/jdk1.8.0_361/bin

1. Start the Administration Server and Node Manager

[oidmgr@oidserver ~]$ . ./oid_env.env [oidmgr@oidserver ~]$ cd $DOMAIN_HOME/bin

[oidmgr@oidserver bin]$ nohup ./startWebLogic.sh & [1] 6503

Check the nohup.out to check and make sure the Admin Server Process in Running Mode

[oidmgr@oidserver bin]$ tail -20 nohup.out

[oidmgr@oidserver ~]$ cd $DOMAIN_HOME/bin

[oidmgr@oidserver bin]$ nohup ./startNodeManager.sh &

[2] 7630

Check the nohup.out to check and make sure the Node Manager Process in Running Mode

[oidmgr@oidserver bin]$ tail -20 nohup.out

2. Initial Oracle Internet Directory(OID) Setup

Connect with Weblogic Scripting Tool for initial setup up of OID Instance

[oidmgr@oidserver bin]$ cd $ORACLE_HOME/oracle_common/common/bin

[oidmgr@oidserver bin]$ ./wlst.sh

WARNING: This is a deprecated script. Please invoke the wlst.sh script under oracle_common/common/bin. Initializing WebLogic Scripting Tool (WLST) … Welcome to WebLogic Server Administration Scripting Shell Type help() for help on available commands

wls:/offline> connect (‘weblogic’,’oracle123′,’t3://oidserver.com:7001′)

wls:/base_domain/serverConfig/> oid_setup(orcladminPassword=’oracle123′, odsPassword=’oracle123′, realmDN=’dc=us,dc=oracle,dc=com’)

This will start the oid instance automatically

3. Starting Managed Server (wls_ods1)

[oidmgr@oidserver bin]$ cd $DOMAIN_HOME/bin

[oidmgr@oidserver bin]$ ./startManagedWebLogic.sh wls_ods1

When prompted for username/password to Boot Weblogic

4. Access Weblogic Console

Login the Weblogic Console to check the Status

http://oidserver.com:7001/console/login/LoginForm.jsp

5. Access Oracle Directory Service Manager(ODSM) Console

Fill the Connection information as Below

•Directory Type: OID

•Name: oid1 (We can give any name )

•Server: oidserver.com

•Port : 3060

•Username: cn=orcladmin

•Password: Oracle_123

6. Access Enterprise Manager(EM) Console

Access WebLogic Server EM Console

http://oidserver.com:7001/em

Environment should be down for apply this patch

Unzip the Download Patches [oidmgr@oidserver ~]$ cd /home/oidmgr/30613424/ [oidmgr@oidserver 30613424]$ unzip p30613424_122140_Generic.zip [oidmgr@oidserver ~]$ cd /home/oidmgr/33903365/ [oidmgr@oidserver 33903365]$ unzip p33903365_122140_Generic.zip Set the Environment for Patching [oidmgr@oidserver ~]$ export ORACLE_HOME=/u02/app/oracle/Middleware/Oracle_Home [oidmgr@oidserver ~]$ export PATH=$ORACLE_HOME/OPatch:$PATH [oidmgr@oidserver ~]$ opatch version OPatch Version: 13.9.4.2.1 OPatch succeeded. Validate the OUI inventory with the following commands: [oidmgr@oidserver ~]$ opatch lsinventory -jre $ORACLE_HOME/oracle_common/jdk/jre Applying Patch 30613424 [oidmgr@oidserver ~]$ cd 30613424/30613424 [oidmgr@oidserver 30613424]$ opatch apply Applying Patch 33903365 [oidmgr@oidserver 30613424]$ cd /home/oidmgr/33903365/33903365 [oidmgr@oidserver 33903365]$ opatch apply

Now Again Try to Login EM Console

Access WebLogic Server EM Console as http://oidserver.com:7001/em

CONFIGURING Directory Integration Platform(DIP) 12.2.1.4 FOR OID

Adding Cipher Suites Configured for Oracle Internet Directory into ODIP

[oidmgr@oidserver ~]$ . ./oid_env.env [oidmgr@oidserver ~]$ cd $JAVA_HOME/jre/lib/security [oidmgr@oidserver security]$ vi java.security

Change the following given below in java.security From:

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL

TO:

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, NULL

Expand Configuration MBeans in the MBean navigation tree and then select bea > Server.

Expand the Server node and then expand the Managed Server node (wls_ods1).

From the Managed Server node, expand SSL and then select the Managed Server MBEAN.

The Configuration MBEAN page is displayed. Select Attributes tab and then select CipherSuites

TLS_DH_anon_WITH_AES_128_GCM_SHA256 TLS_DH_anon_WITH_3DES_EDE_CBC_SHA SSL_DH_anon_WITH_3DES_EDE_CBC_SHA

Click Apply.

Click Activate Changes in the Change Center

Security Features in Oracle Directory Integration Platform

Documentation: Security Features in DIP

Configuring Oracle Directory Integration Platform for Oracle Internet Directory SSL No Authentication Mode

1. Ensure that the Oracle WebLogic Administration Server and Oracle Directory Integration Platform managed server is running.
2. Run the manageDIPServerConfig utility to update the Oracle Directory Integration Platform SSL configuration to use the Oracle Internet Directory SSL No Authentication Mode

Note: Make sure before executing manageDIPServerConfig Utility you update your WL_HOME  Location [oidmgr@oidserver ~]$ . ./oid_env.env

[oidmgr@oidserver ~]$ cd $ORACLE_HOME/bin

[oidmgr@oidserver bin]$ $ORACLE_HOME/bin/manageDIPServerConfig set -attribute sslmode -val 1 -h oidserver.com -p 7005 -D “weblogic”

[Weblogic user password] Connection parameters initialized. Connecting at oidserver.com:7005, with userid “weblogic”.. Connected successfully.

The attribute sslmode is successfully changed to value 1.

[oidmgr@oidserver bin]$

Configuring Oracle Directory Integration Platform for Oracle Internet Directory

Set the WL_HOME and ORACLE_HOME environment variables for Oracle Directory Integration Platform

Run the dipConfigurator setup (<ORACLE_HOME>/bin) command on the command line. Note: You must create a dbconfigfile named as db.properties file with mentioned parameters under $ORACLE_HOME/bin You must set the WL_HOME and ORACLE_HOME environment variables before executing the dipStatus and dipConfigurator commands [oidmgr@oidserver ~]$ . ./oid_env.env

[oidmgr@oidserver ~]$ cd $ORACLE_HOME

[oidmgr@oidserver Oracle_Home]$ cd bin

[oidmgr@oidserver bin]$ vi db.properties DRIVER_NAME:oracle.jdbc.OracleDriver DRIVER_TYPE:thin DB_HOST:oidserver.com DB_PORT:1521 DB_SID:OIDDB DB_SERVICENAME:OIDDB

Running dipConfigurator

[oidmgr@oidserver bin]$./dipConfigurator setup -wlshost oidserver.com -wlsport 7001 -wlsuser weblogic -ldaphost oidserver.com -ldapport 3131 -ldapuser “cn=orcladmin” -isldapssl true -dbconfigfile db.properties

Enter password to contact WebLogic Server:

Enter password to contact LDAP Server :

Enter password to connect OID DB :

DIP Configuration completed

/u02/app/oracle/Middleware/Oracle_Home/ldap/log/dipConfig.log

Verifying Oracle Directory Integration Platform

ISSUE 1 (If Installing OID on OEL/RHEL 8)

If you are installing the OID 12.2.1.4 on Oracle Enterprise Linux(OEL) 8.x, you might face this issue as shown in below Snapshot while running the Installer. If you are installing it on below OEL 8.x  then run the Installer directly /u02/oid/fmw_12.2.1.4.0_oid_linux64.bin 

For resolving issue

Installation of Fusion Middleware 12.2.1.4.0 Distributions on Red Hat Linux or Oracle Linux Version 8 Fail Checking EL7 Package Requirements (Doc ID 2652061.1)

1. Make sure that all other OL/EL8 required Operating System packages are installed. Reference: 12.2.1.4 Fusion Middleware Requirements Guide
2. Download Patch 31190532 and follow the README instructions to install the Oracle Fusion Middleware Distribution.
3. Optional: If one plans to use $ORACLE_HOME/wlserver/server/native/linux/x86_64/libwlenv.so
4. Download and apply Patch 31090393 – OL8 12.2.1.4: EL7 COMPAT-LIBCAP NOT REQUIRED, EL7 LIBSTDC++ FOR LIBWLENV.SO

Download the Patch and Untar

[oidmgr@oidserver u02]$ unzip -qo p31190532_122140_Generic.zip [oidmgr@oidserver u02]$ cd 31190532 [oidmgr@oidserver 31190532]$ ls -l total 16 drwxr-xr-x. 2 oidmgr oinstall 4096 Apr 24 2020 jlib drwxr-xr-x. 28 oidmgr oinstall 4096 Apr 14 2020 prereq_metadata -rw-r–r–. 1 oidmgr oinstall 2752 Jun 25 2020 readme.txt drwxr-xr-x. 35 oidmgr oinstall 4096 Apr 14 2020 shiphome_checkin

Running Intaller for OID 12.2.1.4 on OEL/RHEL 8.x

[oidmgr@oidserver 31190532]$ /u02/oid/fmw_12.2.1.4.0_oid_linux64.bin -prereqConfigLoc /u02/31190532/prereq_metadata/oracle.as.install.oid.prerequisite/prereq

Standalone Mode:

If you do not require Oracle Fusion Middleware (FMW) Infrastructure and just wish to install Oracle Internet Directory, then it is referred to as Standalone Mode. In this mode, OID and DIP must be managed via the command line and not the GUI interface Oracle Directory Services Manager (ODSM) or Enterprise Manager Fusion Middleware Control (EM FMWc) associated with the FMW Infrastructure. The FMW Infrastructure also includes a full WebLogic Server, ADF, OPSS, and other components, generally not required for an LDAP server.  The advantage of OID Standalone may be to provide a database and LDAP server to many applications from a separately secured server with a minimal footprint.

Collocated Mode:

If you require Oracle Fusion Middleware Infrastructure and Oracle Internet Directory, then it is referred to as Collocated Mode.  In this case install Oracle Fusion Middleware Infrastructure 12c (12.2.1.4.0) first, followed by the Oracle Internet Directory 12c (12.2.1.4). Both Infrastructure and Oracle Internet Directory must be installed in the same Oracle Home, hence the collocated terminology.

 Oracle Fusion Middleware Infrastructure distribution provides Weblogic Server, ADF Runtime, and advanced features such as OPSS and Enterprise Manager Fusion Middleware Control (EM FMWc) along with supporting Metadata Repository schemas and configuration of Oracle Directory Services Manager (ODSM). The FMW Infrastructure is a prerequisite for all other FMW products, except those that offer a standalone option (e.g. Oracle HTTP Server and Oracle Internet Directory).

ISSUE 2 (If Installing OID on OEL/RHEL 8)

Another issue If you are installing the OID 12.2.1.4 on Oracle Enterprise Linux(OEL) 8.x, you might face as shown in below Snapshot while Installation.   This Issue is Related to the RPM which you can install by given command by Root User  dnf –enablerepo=ol8_codeready_builder install libnsl2-devel

Repository Creation Utility (RCU)