神奇的傑克

change node manager from SSL to plain C:\>pack.cmd -managed=true -domain=c:\Oracle\Middleware\Oracle_Home\user_project s\domains\base_domain -template=c:\domain.jar -template_name=base_domain unpack.cmd  -domain=$DOMAIN_HOME -template=${DOMAIN_HOME}-template.jar ****restart domain after unpack wls:/base_domain/serverConfig> nmEnroll('C:/Oracle/Middleware/Oracle_Home/user_projects/domains/base_doamin','C:/Oracle/ Middleware/Oracle_Home/wlserver/common/nodemanager') Enrolling this machine with the domain directory at C:/Oracle/Middleware/Oracle_Home/user_projects/domains/base_doamin . .. Successfully enrolled this machine with the domain directory at C:\Oracle\Middleware\Oracle_Home\user_projects\domains\b ase_doamin.

產生ldif file install opendj copy schema file dsconfig set-password-policy-prop --set allow-pre-encoded-passwords:true --policy-name "Default Password Policy" -p 4444 -j /tmp/pwd -X -n dsconfig get-password-policy-prop --property "allow-pre-encoded-passwords" --policy-name "Default Password Policy" --advanced -p 4444 -j /tmp/pwd dsconfig set-global-configuration-prop --set check-schema:false -p 4444 -j /tmp/pwd -X -n dsconfig set-global-configuration-prop --set single-structural-objectclass-behavior:warn -p 4444 -j /tmp/pwd -X -n create index rebuild index import file

Topology for distributed Deployment  Machine1 : Database Machine2 : OID1 (Install  Identity Management  software only ,  NO  WebLogic installation required on this machine) Machine3 : OID2 (config for OID cluster) Machine4 : ODSM & DIP (Install  WebLogic  &  Identity Management  software) on Machine 2 run  config. sh  from Oracle_Home/bin (…/Oracle_IDM1/bin) directory Select  configure without domain (We will register OID with WebLogic server later) Select Instance Name on next screen ( Note* Instance Name for OID on Machine2 should be different than Instance Name for ODS/ODSM on Machine4  ) on Machine 3 On Machine4 (for ODSM & DIP) - Install WebLogic Server (This will create Middleware Home MW_HOME) Install Oracle Identity Management 11.1.1.7.0 on Machine3 under MW_HOME (select  Install Software – Do Not Configure ) : on Machine4 run  confi...

Database configuration: sqlplus / as sysdba SQL> alter system set processes=500 scope=spfile; SQL> alter system set sessions=500 scope=spfile; SQL> alter system set open_cursors=1000 scope=spfile; Install JDK 1.7 Install WebLogic 10.3.6 Create Schema in database using RCU 11.1.2.2 Install SOA 11.1.1.7 unzip OIM_11.1.2.2_SOAPS6_PREREQS.zip (under OIM src Disk1) cd SOAPATCH export PATH=$PATH:/u01/Oracle/Middleware/Oracle_SOA1/OPatch opatch napply SOAPATCH -oh /u01/Oracle/Middleware/Oracle_SOA1 -jdk /usr/local/jdk1.7.0 install patch p19953598  export ORACLE_HOME=$MW_HOME/ Oracle_SOA1 opatch appply export ORACLE_HOME=$MW_HOME/oracle_common opatch apply Install IAM 11.1.2.2  ok config for IAM OPSS Update: cd /u01/Oracle/Middleware/oracle_common/bin ./psa Create Security Store: cd /u01/Oracle/Middleware/oracle_common/common/bin ./wlst.sh /u01/Oracle/Middleware/Oracle_IDM1/common/tools/configureSecurityStore.py -d /u01/Oracle/Middlew...

 Configure Oracle Internet Directory to return operational attributes dn: cn=dsaconfig, cn=configsets,cn=oracle internet directory changetype: modify add: orclallattrstodn orclallattrstodn:cn=orcladmin Enforce Attribute Uniqueness for UID in Oracle Internet Directory 11gR1 Enter the following values to ensure that the UID field is unique in Oracle Internet Directory: Enter 'UID_UNIQUE' in 'Attribute Uniqueness Constraint Name' Ensure that 'Enable Unique Attribute' is Checked (i.e. Yes) Enter 'uid' in 'Unique Attribute Name' Enter ' inetorgperson' in ' Unique Attribute Objectclass' Select 'One Level' in 'Unique Attribute Scope' Enter the Realm Distinguished Name (DN), e.g. 'cn=Users,dc=us,dc=oracle,dc=com' in 'Unique Attribute Subtree' Choose OK. The entry you just created appears in the list of attribute uniqueness constraint entries in the left frame. Click on the ...

cd /u01/weblogic2/oracle_common/common/bin/ [oracle@oam bin]$ ./wlst.sh CLASSPATH=/u01/weblogic2/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/u01/weblogic2/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/usr/java/jdk1.7.0_67/lib/tools.jar:/u01/weblogic2/wlserver_10.3/server/lib/weblogic_sp.jar:/u01/weblogic2/wlserver_10.3/server/lib/weblogic.jar:/u01/weblogic2/modules/features/weblogic.server.modules_10.3.6.0.jar:/u01/weblogic2/wlserver_10.3/server/lib/webservices.jar:/u01/weblogic2/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/u01/weblogic2/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar::/u01/weblogic2/oracle_common/modules/oracle.jrf_11.1.1/jrf-wlstman.jar:/u01/weblogic2/oracle_common/common/wlst/lib/adfscripting.jar:/u01/weblogic2/oracle_common/common/wlst/lib/adf-share-mbeans-wlst.jar:/u01/weblogic2/oracle_common/common/wlst/lib/mdswlst.jar:/u01/weblogic2/oracle_common/common/wlst/resources/auditwlst.jar:/u01/web...

OAM config WNA with Windows 2003 AD need to install support tool at windows server for ktpass create a user for mapping run ktpass to create SPN SPN domain name must use upper case ****** Windows 2003 Server Syntax -   C:\Program Files\Support Tools>ktpass.exe -princ HTTP/oam.acer.com@AD.ACER.COM ****** mapuser AD\aaa -pass aaa -out c:\src\oam.keytab Targeting domain controller: acer.ad.acer.com Using legacy password setting method Successfully mapped HTTP/oam.acer.com to aaa. WARNING: pType and account type do not match. This might cause  problems. Key created. Output keytab to c:\src\oam.keytab: Keytab version: 0x502 keysize 64 HTTP/oam.acer.com@AD.ACER.COM ptype 0 (KRB5_NT_UNKNOWN) vno 5 etype 0 x17 (RC4-HMAC) keylength 16 (0xe24106942bf38bcf57a6a4b29016eff6) Windows 2008 R2 Server Syntax - ktpass -princ HTTP/oam.server.com@FOREST1.SPRITE.COM / -mapuser oamkrb5 / -pass Oracle123 / -ptype KRB5_NT_PRINCIPAL / -crypto ALL / -out forest1.k...