INTRODUCTION Oracle Internet Directory(OID)

What is OID?

Oracle Internet Directory (OID) is a scalable LDAP-based directory service that acts like a centralized address book for businesses. It stores and manages user identities, application data, and system information securely in one place, simplifying operations for enterprises.

What Can It Do?

• Centralized Storage: Keeps all user and system data in one secure, easily accessible location.
• LDAP Support: Fully compliant with LDAP v3 standards, ensuring compatibility with many systems.
• Integration-Friendly: Works seamlessly with Oracle software (e.g., Oracle Fusion Middleware, Oracle E-Business Suite) and third-party tools like Active Directory.
• Handles Large Data Volumes: Manages millions of records without compromising speed or performance.
• Secure and Reliable: Offers encryption, access controls, and high availability with replication and clustering.

How It Works

• Directory Information Tree (DIT): Organizes data like a family tree, making it easy to locate users or systems.
• Oracle Directory Server: Processes user requests, such as logins or data updates.
• Synchronization: Oracle Directory Integration Platform (ODIP) ensures data is always up-to-date across systems.

• Single Sign-On (SSO): Simplifies logins by letting users access multiple systems with one set of credentials.
• Streamlined Identity Management: Centralizes user accounts and permissions, reducing administrative burden.
• Enhanced Security: Protects sensitive information with strict controls and encrypted connections.
• Enterprise Integration: Allows smooth interaction with both Oracle and non-Oracle tools.

Summary

Oracle Internet Directory is a powerful, secure, and efficient solution for businesses that need to manage large amounts of user and system data. It’s particularly beneficial for companies using Oracle products, helping them streamline operations, boost security, and ensure smooth system performance.

INTRODUCTION Oracle Directory Integration Platform(ODIP)

What is ODIP?

ODIP is a component of Oracle Internet Directory (OID) that ensures smooth data synchronization between OID and other directories, databases, or applications. It helps keep user information consistent and up-to-date across different systems.

Key Features

• Data Synchronization: Automatically syncs data like user profiles, passwords, and group memberships between systems.
• Two-Way Integration: Supports both import (pulling data into OID) and export (pushing data from OID to other systems).
• Support for Multiple Directories: Works with other directories, such as Microsoft Active Directory or Sun Directory.
• Flexible Configuration: Allows customization of synchronization rules based on organizational needs.

How ODIP Works

• Connectors: Prebuilt or custom connectors link OID to other directories or databases.
• Synchronization Profiles: Define rules for what data should be synced, how often, and in which direction.
• Real-Time Updates: Ensures changes made in one system are reflected instantly or on schedule in others.

Use Cases

• User Onboarding/Offboarding: Automatically propagates changes in user accounts to all connected systems.
• Password Sync: Keeps passwords synchronized across multiple directories for seamless login.
• Hybrid Environments: Bridges on-premise and cloud systems, ensuring data consistency.

Summary

Oracle Directory Integration Platform (ODIP) is essential for organizations that need to synchronize identity data across multiple systems, ensuring data consistency, automation, and streamlined identity management. It complements OID by connecting it with the broader IT ecosystem.

Benefits of OID and ODIP Together:

• Centralized Management: OID acts as a single source of truth for user and system data.
• Data Consistency: ODIP keeps all connected systems synchronized.
• Enhanced Security: Unified control over access and data policies.
• Automation: Reduces manual effort in managing user data.
• Seamless Integration: Bridges diverse systems for smooth operations.

Summary:

OID simplifies identity management by centralizing data, while ODIP ensures data consistency across systems. Together, they enable secure, efficient, and automated identity and directory management for modern enterprises.

Starting the Environment For OID Configuration

Connect with the OID Operating System User to check the Profile Option set for the OID Environment.

[oidmgr@oidserver ~]$ cat .bash_profile

# .bash_profile

# Get the aliases and functions if [ -f ~/.bashrc ];

then . ~/.bashrc fi

# User specific environment and startup programs

export MW_HOME=/u02/app/oracle/Middleware/Oracle_Home

export ORACLE_COMMON_HOME=$MW_HOME/oracle_common

export ORACLE_HOME=$MW_HOME/oid

export WL_HOME=$MW_HOME/wlserver

export JAVA_HOME=/u02/jdk1.8.0_361/

export DOMAIN_HOME=$MW_HOME/user_projects/domains/base_domain

Next we will untar the JDK

[oidmgr@oidserver u02]$ tar -xvzf jdk-8u361-linux-x64.tar.gz

[oidmgr@oidserver ~]$ cd /u02/jdk1.8.0_361/bin

1. Start the Administration Server and Node Manager

[oidmgr@oidserver ~]$ . ./oid_env.env [oidmgr@oidserver ~]$ cd $DOMAIN_HOME/bin

[oidmgr@oidserver bin]$ nohup ./startWebLogic.sh & [1] 6503

Check the nohup.out to check and make sure the Admin Server Process in Running Mode

[oidmgr@oidserver bin]$ tail -20 nohup.out

[oidmgr@oidserver ~]$ cd $DOMAIN_HOME/bin

[oidmgr@oidserver bin]$ nohup ./startNodeManager.sh &

[2] 7630

Check the nohup.out to check and make sure the Node Manager Process in Running Mode

[oidmgr@oidserver bin]$ tail -20 nohup.out

2. Initial Oracle Internet Directory(OID) Setup

Connect with Weblogic Scripting Tool for initial setup up of OID Instance

[oidmgr@oidserver bin]$ cd $ORACLE_HOME/oracle_common/common/bin

[oidmgr@oidserver bin]$ ./wlst.sh

WARNING: This is a deprecated script. Please invoke the wlst.sh script under oracle_common/common/bin. Initializing WebLogic Scripting Tool (WLST) … Welcome to WebLogic Server Administration Scripting Shell Type help() for help on available commands

wls:/offline> connect (‘weblogic’,’oracle123′,’t3://oidserver.com:7001′)

wls:/base_domain/serverConfig/> oid_setup(orcladminPassword=’oracle123′, odsPassword=’oracle123′, realmDN=’dc=us,dc=oracle,dc=com’)

This will start the oid instance automatically

3. Starting Managed Server (wls_ods1)

[oidmgr@oidserver bin]$ cd $DOMAIN_HOME/bin

[oidmgr@oidserver bin]$ ./startManagedWebLogic.sh wls_ods1

When prompted for username/password to Boot Weblogic

4. Access Weblogic Console

Login the Weblogic Console to check the Status

http://oidserver.com:7001/console/login/LoginForm.jsp

5. Access Oracle Directory Service Manager(ODSM) Console

Fill the Connection information as Below

•Directory Type: OID

•Name: oid1 (We can give any name )

•Server: oidserver.com

•Port : 3060

•Username: cn=orcladmin

•Password: Oracle_123

6. Access Enterprise Manager(EM) Console

Access WebLogic Server EM Console

http://oidserver.com:7001/em

Environment should be down for apply this patch

Unzip the Download Patches [oidmgr@oidserver ~]$ cd /home/oidmgr/30613424/ [oidmgr@oidserver 30613424]$ unzip p30613424_122140_Generic.zip [oidmgr@oidserver ~]$ cd /home/oidmgr/33903365/ [oidmgr@oidserver 33903365]$ unzip p33903365_122140_Generic.zip Set the Environment for Patching [oidmgr@oidserver ~]$ export ORACLE_HOME=/u02/app/oracle/Middleware/Oracle_Home [oidmgr@oidserver ~]$ export PATH=$ORACLE_HOME/OPatch:$PATH [oidmgr@oidserver ~]$ opatch version OPatch Version: 13.9.4.2.1 OPatch succeeded. Validate the OUI inventory with the following commands: [oidmgr@oidserver ~]$ opatch lsinventory -jre $ORACLE_HOME/oracle_common/jdk/jre Applying Patch 30613424 [oidmgr@oidserver ~]$ cd 30613424/30613424 [oidmgr@oidserver 30613424]$ opatch apply Applying Patch 33903365 [oidmgr@oidserver 30613424]$ cd /home/oidmgr/33903365/33903365 [oidmgr@oidserver 33903365]$ opatch apply

Now Again Try to Login EM Console

Access WebLogic Server EM Console as http://oidserver.com:7001/em

CONFIGURING Directory Integration Platform(DIP) 12.2.1.4 FOR OID

Adding Cipher Suites Configured for Oracle Internet Directory into ODIP

[oidmgr@oidserver ~]$ . ./oid_env.env [oidmgr@oidserver ~]$ cd $JAVA_HOME/jre/lib/security [oidmgr@oidserver security]$ vi java.security

Change the following given below in java.security From:

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL

TO:

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, NULL

Expand Configuration MBeans in the MBean navigation tree and then select bea > Server.

Expand the Server node and then expand the Managed Server node (wls_ods1).

From the Managed Server node, expand SSL and then select the Managed Server MBEAN.

The Configuration MBEAN page is displayed. Select Attributes tab and then select CipherSuites

TLS_DH_anon_WITH_AES_128_GCM_SHA256 TLS_DH_anon_WITH_3DES_EDE_CBC_SHA SSL_DH_anon_WITH_3DES_EDE_CBC_SHA

Click Apply.

Click Activate Changes in the Change Center

Security Features in Oracle Directory Integration Platform

Documentation: Security Features in DIP

Configuring Oracle Directory Integration Platform for Oracle Internet Directory SSL No Authentication Mode

1. Ensure that the Oracle WebLogic Administration Server and Oracle Directory Integration Platform managed server is running.
2. Run the manageDIPServerConfig utility to update the Oracle Directory Integration Platform SSL configuration to use the Oracle Internet Directory SSL No Authentication Mode

Note: Make sure before executing manageDIPServerConfig Utility you update your WL_HOME  Location [oidmgr@oidserver ~]$ . ./oid_env.env

[oidmgr@oidserver ~]$ cd $ORACLE_HOME/bin

[oidmgr@oidserver bin]$ $ORACLE_HOME/bin/manageDIPServerConfig set -attribute sslmode -val 1 -h oidserver.com -p 7005 -D “weblogic”

[Weblogic user password] Connection parameters initialized. Connecting at oidserver.com:7005, with userid “weblogic”.. Connected successfully.

The attribute sslmode is successfully changed to value 1.

[oidmgr@oidserver bin]$

Configuring Oracle Directory Integration Platform for Oracle Internet Directory

Set the WL_HOME and ORACLE_HOME environment variables for Oracle Directory Integration Platform

Run the dipConfigurator setup (<ORACLE_HOME>/bin) command on the command line. Note: You must create a dbconfigfile named as db.properties file with mentioned parameters under $ORACLE_HOME/bin You must set the WL_HOME and ORACLE_HOME environment variables before executing the dipStatus and dipConfigurator commands [oidmgr@oidserver ~]$ . ./oid_env.env

[oidmgr@oidserver ~]$ cd $ORACLE_HOME

[oidmgr@oidserver Oracle_Home]$ cd bin

[oidmgr@oidserver bin]$ vi db.properties DRIVER_NAME:oracle.jdbc.OracleDriver DRIVER_TYPE:thin DB_HOST:oidserver.com DB_PORT:1521 DB_SID:OIDDB DB_SERVICENAME:OIDDB

Running dipConfigurator

[oidmgr@oidserver bin]$./dipConfigurator setup -wlshost oidserver.com -wlsport 7001 -wlsuser weblogic -ldaphost oidserver.com -ldapport 3131 -ldapuser “cn=orcladmin” -isldapssl true -dbconfigfile db.properties

Enter password to contact WebLogic Server:

Enter password to contact LDAP Server :

Enter password to connect OID DB :

DIP Configuration completed

/u02/app/oracle/Middleware/Oracle_Home/ldap/log/dipConfig.log

Verifying Oracle Directory Integration Platform

ISSUE 1 (If Installing OID on OEL/RHEL 8)

If you are installing the OID 12.2.1.4 on Oracle Enterprise Linux(OEL) 8.x, you might face this issue as shown in below Snapshot while running the Installer. If you are installing it on below OEL 8.x  then run the Installer directly /u02/oid/fmw_12.2.1.4.0_oid_linux64.bin 

For resolving issue

Installation of Fusion Middleware 12.2.1.4.0 Distributions on Red Hat Linux or Oracle Linux Version 8 Fail Checking EL7 Package Requirements (Doc ID 2652061.1)

1. Make sure that all other OL/EL8 required Operating System packages are installed. Reference: 12.2.1.4 Fusion Middleware Requirements Guide
2. Download Patch 31190532 and follow the README instructions to install the Oracle Fusion Middleware Distribution.
3. Optional: If one plans to use $ORACLE_HOME/wlserver/server/native/linux/x86_64/libwlenv.so
4. Download and apply Patch 31090393 – OL8 12.2.1.4: EL7 COMPAT-LIBCAP NOT REQUIRED, EL7 LIBSTDC++ FOR LIBWLENV.SO

Download the Patch and Untar

[oidmgr@oidserver u02]$ unzip -qo p31190532_122140_Generic.zip [oidmgr@oidserver u02]$ cd 31190532 [oidmgr@oidserver 31190532]$ ls -l total 16 drwxr-xr-x. 2 oidmgr oinstall 4096 Apr 24 2020 jlib drwxr-xr-x. 28 oidmgr oinstall 4096 Apr 14 2020 prereq_metadata -rw-r–r–. 1 oidmgr oinstall 2752 Jun 25 2020 readme.txt drwxr-xr-x. 35 oidmgr oinstall 4096 Apr 14 2020 shiphome_checkin

Running Intaller for OID 12.2.1.4 on OEL/RHEL 8.x

[oidmgr@oidserver 31190532]$ /u02/oid/fmw_12.2.1.4.0_oid_linux64.bin -prereqConfigLoc /u02/31190532/prereq_metadata/oracle.as.install.oid.prerequisite/prereq

Standalone Mode:

If you do not require Oracle Fusion Middleware (FMW) Infrastructure and just wish to install Oracle Internet Directory, then it is referred to as Standalone Mode. In this mode, OID and DIP must be managed via the command line and not the GUI interface Oracle Directory Services Manager (ODSM) or Enterprise Manager Fusion Middleware Control (EM FMWc) associated with the FMW Infrastructure. The FMW Infrastructure also includes a full WebLogic Server, ADF, OPSS, and other components, generally not required for an LDAP server.  The advantage of OID Standalone may be to provide a database and LDAP server to many applications from a separately secured server with a minimal footprint.

Collocated Mode:

If you require Oracle Fusion Middleware Infrastructure and Oracle Internet Directory, then it is referred to as Collocated Mode.  In this case install Oracle Fusion Middleware Infrastructure 12c (12.2.1.4.0) first, followed by the Oracle Internet Directory 12c (12.2.1.4). Both Infrastructure and Oracle Internet Directory must be installed in the same Oracle Home, hence the collocated terminology.

 Oracle Fusion Middleware Infrastructure distribution provides Weblogic Server, ADF Runtime, and advanced features such as OPSS and Enterprise Manager Fusion Middleware Control (EM FMWc) along with supporting Metadata Repository schemas and configuration of Oracle Directory Services Manager (ODSM). The FMW Infrastructure is a prerequisite for all other FMW products, except those that offer a standalone option (e.g. Oracle HTTP Server and Oracle Internet Directory).

ISSUE 2 (If Installing OID on OEL/RHEL 8)

Another issue If you are installing the OID 12.2.1.4 on Oracle Enterprise Linux(OEL) 8.x, you might face as shown in below Snapshot while Installation.   This Issue is Related to the RPM which you can install by given command by Root User  dnf –enablerepo=ol8_codeready_builder install libnsl2-devel

Repository Creation Utility (RCU)

curl -o oracle-database-preinstall-19c-1.0-2.el8.x86_64.rpm https://yum.oracle.com/repo/OracleLinux/OL8/appstream/x86_64/getPackage/oracle-database-preinstall-19c-1.0-2.el8.x86_64.rpm

dnf -y localinstall oracle-database-preinstall-19c-1.0-2.el8.x86_64.rpm

# Oracle Settings
export TMP=/tmp
export TMPDIR=$TMP

export ORACLE_HOSTNAME=oidserver.com
export ORACLE_UNQNAME=OIDDB
export ORACLE_BASE=/u01/app/oracle
export ORACLE_HOME=$ORACLE_BASE/product/19.0.0/dbhome_1
export ORA_INVENTORY=/u01/app/oraInventory
export ORACLE_SID=OIDDB
export DATA_DIR=/u01/oradata

export PATH=/usr/sbin:/usr/local/bin:$PATH
export PATH=$ORACLE_HOME/bin:$PATH

export LD_LIBRARY_PATH=$ORACLE_HOME/lib:/lib:/usr/lib
export CLASSPATH=$ORACLE_HOME/jlib:$ORACLE_HOME/rdbms/jlib
[oracle@oidserver ~]$

You can find the log of this install session at:
 /u01/app/oraInventory/logs/InstallActions2024-11-30_10-01-36PM/installActions2024-11-30_10-01-36PM.log

Click Next

Click Next

Click Next

Click Next

[root@oidserver ~]# /u01/app/oracle/product/19.0.0/dbhome_1/root.sh

Click OK

Database Creation through DBCA

[oracle@oidserver ~]$ dbca

Click Next

Select Template Name General Purpose or TransactionProcessing

Click Next

Uncheck Option Create as Container database

Click Next

Click Next

To change entries, Click BACK to the pertinent screen.

Once satisfied with the settings, click the Finish button to begin the installation.

Alter Database Parameters