Running the Oracle Fusion Middleware RCU for Oracle Identity Management

Since most of the customers have implemented Oracle Fusion and demand for Fusion DBA’s are growing, lets have a look at what Oracle Fusion is, what does the architecture look like and how to install and manage it.

Note : Fusion application is very new, our study and understanding about this product will increase as we learn and practice. This document is solely based on my understanding and can vary from other DBA’s or organization.

I have followed Oracle documentation library to read and understand about Oracle Fusion.Also have explored other blogs who have successfully completed this setup.

Using the latest technology and incorporating the best practices gathered from Oracle’s customers, Oracle Fusion Applications is a suite of 100% open standards-based business applications that provide a new standard for the way businesses innovate, work, and adopt technology.

Oracle Fusion Applications is built on Oracle Fusion Middleware, providing an established, powerful framework the offers complete support for development, deployment, and management. Oracle Fusion Middleware enables embedding business intelligence, activity monitoring, and managed content and provides the framework for providing a collaborative, multi-channel user interface.

Oracle Fusion Applications is standards-based, making it highly adaptable. This standards-based technology enables you to respond effectively to change with flexible, modular, user-driven business software that is powered by best-in-class business capabilities built on open standards.

  • Oracle WebCenter Portal provides design-time and runtime tools for building enterprise portals, transactional websites, and social networking sites.
  • Oracle Business Intelligence provides a full range of business intelligence capabilities that enable you to analyze, present, report, and deliver organizational data.
  • Oracle WebCenter Content enables you to leverage document management, Web content management, digital asset management; and records retention functionality to build and complement your business applications.
  • Oracle SOA Suite provides a complete set of service infrastructure components for designing, deploying, and managing SOA composite applications. Oracle SOA Suite enables services to be created, managed, and orchestrated into SOA composite applications.
  • Oracle WebLogic Server is a scalable, enterprise-ready application server based on Java Enterprise Edition (Java EE).
  • Oracle JDeveloper is an integrated development environment with end-to-end support for modeling, developing, debugging, optimizing, and deploying Java applications and web services.
  • Oracle Enterprise Manager offers business-driven applications management, integrated application to disk management, integrated systems management, and support experience.
  • Oracle Identity Management enables organizations to manage the end-to-end lifecycle of user identities and to secure access to enterprise resources and assets.

 

Oracle_Fusion_arch

Oracle Fusion Applications is a deployment of application product offerings built on Oracle Fusion Middleware technology stack components and connected to Oracle Database. A successful installation draws on a combination of the application and the middleware components, the database, as well as the installers, scripts, and utilities required to set up and configure them.

Preparing for an Installation

To provision a new Oracle Fusion Applications environment, you must ensure that your system meets certain requirements and that you perform the necessary prerequisite tasks in preparation for an installation of Oracle Fusion Applications

Review the following prerequisites:

  • System Requirements

We will be installing Fusion on a 2 node system. One for IDM application with idm database having 500 GB Hard disk and minimum 32 GB RAM + Fusion application and  database having 128 GB RAM and 1 TB Hard disk.

If you are downloading Oracle Fusion Applications 11g Media Pack for the following platforms, then use the following versions of the 64-bit UnZip utility to extract the Oracle software. UnZip is freeware that is available at:

http://www.info-zip.org

.

  • IBM AIX on POWER Systems (64-bit) – Info-ZIP unzip version 6.10
  • Oracle Solaris on SPARC (64-bit) – Info-ZIP unzip version 6.0
  • Oracle Solaris on x86-64 (64-bit) – Info-ZIP unzip version 6.0

 

If you are downloading Oracle Fusion Applications 11g Media Pack for the Microsoft Windows x64 (64-Bit) platform, then use 7zip v9.20 to extract the Oracle software.

  • Supported Platforms

Oracle Fusion Applications is supported on the following platforms:

  1. Linux x86-64
  2. Oracle Solaris
  3. IBM AIX on POWER Systems (64-Bit)
  4. Microsoft Windows x64 (64-Bit)
  • Installing Oracle Database

Oracle Fusion Applications supports only Oracle Database 11.2.0.3 for storing transactional data. You can install either a single-instance Oracle Enterprise Edition Database or Oracle Real Application Clusters.

DB Name 1 : OFADB – Oracle Fusion Applications
DB Nam 2 : IDMDB – Oracle Identity Management

    • Installing Oracle Identity Management Components

You must install Oracle Identity Management and Oracle Fusion Applications on different hosts. Installing Oracle Identity Management and Oracle Fusion Applications on the same host is not a supported topology.

You should not share the same database instance for Oracle Identity Management and Oracle Fusion Applications. Oracle Fusion Applications should have a separate database instance.

These components must be installed and configured specifically for use with Oracle Fusion Applications.

One instance of Oracle Database 11.2.0.3 where the Identity Store and the Policy Store are in the same OID in a dedicated setup.

Oracle Internet Directory 11g (OID)

Oracle Virtual Directory 11g (OVD)

Oracle Identity Manager 11g (OIM)

Oracle Access Manager 11g (OAM)

Download Oracle Fusion Applications 11.1.8 software from http://edelivery.oracle.com

OFA_Download

 

High level steps to install Oracle Fusion

Setting up Identity and Access Management Node

  1.     Install Fusion Applications Provisioning Framework
  2.     Install Oracle 11g Database (IAM)
  3.     Repository creation utility for IAM
  4.     Install Identity Management Provisioning Wizard
  5.     Create IAM provisioning Response File
  6.     Provision Identity Management
  7.     Perform Post-Provisioning Configuration

Setting up Fusion Applications Node

  1.  Install Fusion Applications Provisioning Framework
  2.  Install Oracle 11g Database (Fusion Apps Database)
  3.  Run Oracle Fusion Applications Repository Creation Utility (Applications RCU)
  4.  Create new Applications Provisioning Response File
  5.  Provision an Applications Environment
  • Creating Oracle Fusion Applications provisioning repository / Staging directory

When planning the Oracle Identity Management deployment, ensure that the Software Installation Location directory path is 45 characters or fewer in length. You specify this directory on the Installation and Configuration page when you create the provisioning profile

  • Preparing the Oracle Identity Management Server

IDM Host : 136.243.14.212
Operating System : Linux x86-64 6.6
Hostname : fusionidm.ods.com
RAM : 64 GB
HDD : 1 TB
Configure Kernel Parameters

vi /etc/sysctl.conf
kernel.sem = 256 32000 100 142
kernel.shmmax = 10 GB
 

Set Shell Limits
Login as root and edit the /etc/security/limits.conf file

* soft nofile 150000
* hard nofile 150000
* soft nproc 16384
* hard nproc 16384

Install Following RPM packages

binutils-2.17.50.0.6
compat-libstdc++-33-3.2.3-x86_64
compat-libstdc++-33-3.2.3-61-i386
elfutils-libelf-0.137-3.el5-x86_64.
elfutils-libelf-devel-0.137-3.el5-x86_64
gcc-4.1.2-54.el5-x86_64
gcc-c++-4.1.2-54.el5-x86_64
glibc-2.5-107.el5_9.5-x86_64
glibc-2.5-107.el5_9.5-i686
glibc-common-2.5-107.el5_9.5-x86_64
glibc-devel-2.5-107.el5_9.5-x86_64
glibc-devel-2.5-12-i386
libaio-0.3.106-5-x86_64
libaio-0.3.106-5-i386
libaio-devel-0.3.106-5-i386
libgcc-4.1.2-54.el5-x86_64
libgcc-4.1.2-54.el5-i386
libstdc++-4.1.1-x86_64
libstdc++-4.1.2-54.el5-i386
libstdc++-devel-4.1.2-54.el5-x86_64
make-1:3.81-3.el5-x86_64
sysstat-7.0.2-12.0.1.el5-x86_64
compat-libstdc++-33-3.2.3-69.el6.i686.rpm
glibc-devel-2.12-1.149.el6.i686.rpm

Unzip the software  — Images will be uploaded soon..This is only a draft as I am trying my hands on the installation and configuration…
Start Fusion application provision framework installer

fusion_idm_start

fusion_idm_start_1

fusion_idm_start_2

 

fusion_idm_start_3

 

fusion_idm_start_4

fusion_idm_start_5
fusion_idm_start_6
fusion_idm_start_7

fusion_idm_start_8

fusion_idm_start_9

Install IDM database

idmdb_1

 

idmdb2
idmdb3
idmdb4

idmdb5idmdb6idmdb7idmdb8

 

idmdb9idm_db_20idm_db_21

Running the Oracle Fusion Middleware RCU for Oracle Identity Management

Unzip the Oracle Fusion Middleware RCU zip file

Linux: REPOSITORY_LOCATION/installers/fmw_rcu/linux/rcuHome.zip

The Oracle Fusion Middleware RCU needs to be set up for the following components:
ODS, OIF, OIM, OAM. You must use FA as the prefix for the schema names.
Optionally, you can use two database instances for Oracle Identity Management. If
you do this, install ODS in one database instance and other components in the second database instance. You must select a single password for all the schema while running the RCU.

The Oracle Fusion Middleware RCU is available only on Windows and Linux platforms. For other platforms, such as Solaris and AIX, you must install and run the Oracle Fusion Middleware RCU from a Windows or Linux machine.

 

fmw_rcu_1 fmw_rcu_2 fmw_rcu_3 fmw_rcu_4

 

fmw_rcu_5 fmw_rcu_6 fmw_rcu_7 fmw_rcu_8 fmw_rcu_9

fmw_rcu_10 fmw_rcu_11

Validating the Oracle Identity Management Database Installation

To verify if the Oracle Identity Management database installation has been completed
successfully, check the following:

  • The database is up and running on all nodes.
  • The database listener is up and running.
  • The database installation includes the required components.
  • Use SQL*Plus or another tool to check that the system user is able to connect to the database remotely.
  • Run opatch -lsinventory on the database to verify that patches have been applied according to the
    document for the specific platform.
  • Manual patch Post-Installation steps have been performed for all the patches.
  • The password policy has been defined and the passwords defined for the Oracle Identity Management database schemas are in line with the policy.

Oracle Identity Management Provisioning

Install Identity Management Lifecycle Management Tools

idm_lifecycle_tool_1 idm_lifecycle_tool_2 idm_lifecycle_tool_3 idm_lifecycle_tool_4 idm_lifecycle_tool_5 idm_lifecycle_tool_6 idm_lifecycle_tool_7

Creating an Oracle Identity Management Provisioning Profile

idm_provisioning_1 idm_provisioning_2 idm_provisioning_3 idm_provisioning_4idm_provisioning_5idm_provisioning_6idm_provisioning_7idm_provisioning_8
idm_provisioning_9 idm_provisioning_10 idm_provisioning_11 idm_provisioning_12 idm_provisioning_13
idm_provisioning_14 idm_provisioning_15 idm_provisioning_16 idm_provisioning_17 idm_provisioning_18
idm_provisioning_19 idm_provisioning_20
idm_provisioning_21

All server machines in an Oracle Identity Management  Provisioning environment must be running the same operating  system major version and patch level. Heterogeneous operating  system deployments are not supported.
Before running the provisioning tool, set the following environment variables:

Set Java Home

Select Create a New Identity Management Environment Provisioning Response File if you are creating a response file for the first time.

Update an Existing Identity Management Environment Provisioning Response File is not supported.

The Product List page is purely informational. It displays the list of products that are installed and configured by the Oracle Identity Management Provisioning Wizard.

Response File Name: The Oracle Identity Management Provisioning Wizard provides the default title Oracle Identity Management Provisioning Response File. You can change this.

■ Response File Version: The Oracle Identity Management Provisioning Wizard provides a default value, which you can change. You can use this to keep track of different file versions.

■ Created By: Defaults to the operating system user who invoked the Provisioning Wizard. Set when the response file is initially created and cannot be modified for the current response file.

■ Created Date: Defaults to the date that the response file was initially created. Set when the response file was initially created and cannot be modified for the current response file.

■ Response File Description: Provide a description of this response file. This is an optional field.

Change following values manually in provisioning.rsp

#IDStore UserNames Configuration
IDSTORE_OAMADMINUSER=oamadmin
IDSTORE_OAMSOFTWAREUSER=oamLDAP
IDSTORE_OIMADMINUSER=oimLDAP
Performing Oracle Oracle Identity Management Provisioning

After you create the provisioning response file, you use it to provision an Oracle Identity Management environment

There are eight stages to provisioning. These stages must be run in the following order:

1. Preverify

2. Install

3. Preconfigure

4. Configure

5. Configure-secondary

6. Postconfigure

7. Startup

8. Validate

You specify the stage using the -target option to the runIDMProvisioning.sh command. Each stage must be completed before the next stage can begin. Failure of a stage will necessitate a cleanup and restart.

./runIDMProvisioning.sh -responseFile /u01/middleware/IDMLCM1/provisioning/bin/provisioning.rsp -target preverify

provisioning_idm_preverify

provisioning_idm_install_1

provisioning_idm_install_2
provisioning_idm_install_complete
provisioning_idm_preconfigure
provisioning_idm_preconfigure_complete
provisioning_idm_configure

provisioning_idm_configure_complete

provisioning_idm_configure_secondary provisioning_idm_configure_secondary_complete provisioning_idm_postconfigure provisioning_idm_postconfigure_complete

provisioning_idm_validate provisioning_idm_validate_complete

Installing Oracle Fusion Applications Transaction Database

 

 

 

 

 

 

 

 

Recommended Installation for Security

Tagged with →  
Share →
1 comments
systemsplususa
systemsplususa

Helping step by step oracle installation support with snapshots... Really beneficial thank you so much for such descriptive explanation.....

Skip to toolbar