CDH, PIM and AIA

Folks - Customer wants to implement CDH and PIM as part of their MDM startegy and they are interested to embrace AIA for their integration need.
Questions:
1) Does Oracle have any pre-built PIP in the areas on MDM (PIM, CDH)? -- as per my knowldege "not currently" then what is the roadmap?
2) Is AIA FP going to help in this case? I am sure yes ... what will be the version up for FP, customer can buy? Is it FP 2.1? or previous version?
Appreciate your prompt response !
Thanks...Suman
--> You can reply me @ [email protected] also.

Suman,
The Master Data Management application Oracle is standardizing on for Customers is the Universal Customer Master (UCM) application, not CDH.
We are working on an AIA PIP for UCM. Initially it will integrate UCM with E Business Suite and (Siebel) CRM. The PIP is designed to be extensible, both to additional applications, to meet the unique needs of selected industry groups, and to third-party data providers. Oracle will build some of these extensions, partners or customers may build others.
The first release will be on FP 2.X. The exact dot release is not finalized.
Erik

Similar Messages

OTV using Unicast adjacency does it still need pim and msdp

Hi
We have a working OTV enviroment. I have been asked to created a second overlay interface for a DMZ enviroment
Where currently using
otv adjacency-server unicast-only.
but i still see a number PIM interfaces and we also use the MSDP conficugration which i presumed to be only for the Multicast mode
Can some one please clarify if using unicast mode do i still provision all PIm and msdp confguration to get unicast configuration working
documentation is unclear
the
PIm information is on physical interface between both DC and interconnect between both 7k Switches
MX-N7K2-AGG2# show ip pim ne
PIM Neighbor Status for VRF "default"
Neighbor        Interface            Uptime    Expires   DR       Bidir- BFD
                                                         Priority Capable State
10.44.248.57    Ethernet1/19         8w3d      00:01:29 1        yes     n/a
10.44.248.49    port-channel61       36w3d     00:01:39 1        yes     n/a
OTV devices as are using igmp ver3
MX-N7K1-OTV1# show ip igmp interface brief
IGMP Interfaces for VRF "default", count: 0
ip msdp originator-id loopback0
ip msdp peer 10.51.0.7 connect-source loopback0

Hi,
I am not very sure on how Nexus works related to OTV unicast, but in case of ASR1K you definitely do not need any multicast configuration when bringing up OTV using "adjacency server unicast-only" option.
If you need configuration details related to ASR1K, I have a small blog wherein I have configured the same [both for unicast / multicast OTV cores].
Do have a look if needed: http://stayinginit.blogspot.in/2013/12/basic-unicast-overlay-transport.html

Intergration between Siebel and AIA in Comm PIP

I need your help in understanding “how interfacing is happening between Siebel and AIA in Comm Pack” for an outbound flow from Siebel. I will take an example of Order Synchronization flow between Siebel and BRM through AIA.
Step 1: When the order is confirmed / approved in Siebel, an event is captured and Sales Order ABM XML message is generated and put it into a JMS queue.
I have few doubts in Step 1 only where I need your help :
- What is the type of JMS Queue ? Is it OJMS (JMS Interface to Oracle Database Streams Advanced Queueing (AQ)) or OracleAS JMS (native Java implementation that provides file-based persistence).
- How the data is put into the JMS Queue? Is it through the “ProcessSalesOrderSiebelJMSConsumer” BPEL Service or through some other mechanism.
- If it is through “ProcessSalesOrderSiebelJMSConsumer” BPEL Service, does the Siebel call “ProcessSalesOrderSiebelJMSConsumer” as a Web Service or is it through JCA Resource Adapter.
- Other thing is if it is through WebService Call (Invoking “ProcessSalesOrderSiebelJMSConsumer” BPEL Service), then what if the SOA Server is down during the call ? This will mean that we have lost the data as we haven’t put in the queue yet. And I don’t think Order will be created / confirmed / approved in Siebel again. Also Siebel can directly invoke the “ProcessSalesOrderSiebelReqABCSImpl” BPEL Service directly rather the invoking JMS Producer if data has to be passed through webservice call.
Thanks.

- What is the type of JMS Queue ? Is it OJMS (JMS Interface to Oracle Database Streams Advanced Queueing (AQ)) or OracleAS JMS (native Java implementation that provides file-based persistence).
Siebel will call a WebService of AIA. AIA will store this into his JMS queue.- How the data is put into the JMS Queue? Is it through the “ProcessSalesOrderSiebelJMSConsumer” BPEL Service or through some other mechanism.
AIA Will handle this, out of the box functionality.- If it is through “ProcessSalesOrderSiebelJMSConsumer” BPEL Service, does the Siebel call “ProcessSalesOrderSiebelJMSConsumer” as a Web Service or is it through JCA Resource Adapter.
It will call the producer webservice.- Other thing is if it is through WebService Call (Invoking “ProcessSalesOrderSiebelJMSConsumer” BPEL Service), then what if the SOA Server is down during the call ?
Siebel gets an error back; server not reachable.Regards,
Marc
http://orasoa.blogspot.com

Patch Issues on JMS bridges configuration between OSM and AIA

Hi,
As mentioned in the OSM AIA Order to activate cartridge guide, we want confirm whether the below private patch is mantatory to create the JMS bridge between OSM and AIA.
Your Oracle Support ID is not sufficient to obtain the private patch. You will need the
following credentials to access it.
Patch identifier: 4CFJ
What will be the outcome if we doesn't install the above mentioned patch.
Regards,
Murali

Hi Murali,
I would encourage you to use the Oracle Community (via the My Oracle Support) for questions related to patches. Please post your question in the community and I will be happy to assist you.
- Deep
(OSM Product Management)

Changing CDP and AIA on internal CA

Good morning, I have a quick question:
I have an environment with 1 Root CA and 1 issuing CA, both are domain-joined and online. If I make changes to CDP and AIA, do I have to renew the CA-cert for both CA's? And if I have to do that, does it have any consequences for the certificates already
issued or will they keep on working as today? (we have quite a few issued manually so re-issue all certs is not done quickly)
Thank you in advance
Regards Per-Torben Sørensen http://pertorben.wordpress.com/

Deepdive for CA certificate renewal internal.
http://social.technet.microsoft.com/wiki/contents/articles/2016.root-ca-certificate-renewal.aspx
Regards~Biswajit
Disclaimer: This posting is provided & with no warranties or guarantees and confers no rights.
MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin
MY BLOG
Domain Controllers inventory-Quest Powershell
Generate Report for Bulk Servers-LastBootUpTime,SerialNumber,InstallDate
Generate a Report for installed Hotfix for Bulk Servers

What is the difference between SOA and AIA

Hi All,
Can you please let me know the need of SOA and AIA both ?
Regards
Kumar

SOA is an underlying backbone or an infrastructure that supports and provides for web services. AIA is another technology from Oracle which is based on SOA.
SOA offers different components such as BPEL, Mediator etc to build, test and publish web services. AIA is more of a framework which provides artifacts like the EBO, EBM which are standards based. These are part of a Foundation Pack. The artifacts can be used to build flows using BPEL and Mediator.
Oracle themselves have come up with pre-developed, tested BPEL/Mediator flows which execute a business scenatrio. These are called PIPs and one can install and integrate systems to execute the common industry business cases.
More information is available @
http://blogs.oracle.com/aia/entry/welcome_to_the_official_aia_bl
http://www.oracle.com/us/products/applications/application-integration-architecture/apps-integration-architecture-210164.html?origref=http://blogs.oracle.com/aia/entry/welcome_to_the_official_aia_bl (AIA Home)
http://blogs.oracle.com/aia/entry/why_its_all_up_to_aia
-AR
http://oracleaia.blogspot.com

PKI - Add LDAP path to CDP and AIA extensions?

Another question for our new PKI design.
Most of the issued certificates will be used by domain clients and users. However, we will also use certificates for DirectAccess, which means CRL and AIA checking must also work for internet clients.
As far I understand the documentation, the URL's defined for CDP and AIA checking are checked in order. Let's say a I configure the following CDP's paths, and enable the option "Include in CDP extension of issued certificates":
1. HTTP
2. LDAP
Is it true that all clients (internal and external) will use option 1 first, and do a fallback to option 2? Basically this means that domain clients will never check LDAP (well at least as URL 1 is accessible)?
When I change the order to LDAP first, so:
1. LDAP
2. HTTP
Will this mean the CRL and AIA checking for internet clients will take a lot of extra time? First it tries to access the LDAP path, and after some time it falls back to HTTP? Or are internet clients smart enough to skip the LDAP path?
Another thing I don't like of publish in the AD, is that your AD configuration comes back in every issued certificate.

On Fri, 24 Oct 2014 07:52:52 +0000, MD_1977 wrote:
Most of the issued certificates will be used by domain clients and users. However, we will also use certificates for DirectAccess, which means CRL and AIA checking must also work for internet clients.
As far I understand the documentation, the URL's defined for CDP and AIA checking are checked in order. Let's say a I configure the following CDP's paths, and enable the option "Include in CDP extension of issued certificates":
1. HTTP
2. LDAP
Is it true that all clients (internal and external) will use option 1 first, and do a fallback to option 2? Basically this means that domain clients will never check LDAP (well at least as URL 1 is accessible)?
Correct.
When I change the order to LDAP first, so:
1. LDAP
2. HTTP
Will this mean the CRL and AIA checking for internet clients will take a lot of extra time? First it tries to access the LDAP path, and after some time it falls back to HTTP? Or are internet clients smart enough to skip the LDAP path?
I wouldn't say a lot of extra time. For details check out this whitepaper
and search for "timeout" -
http://technet.microsoft.com/en-us/library/ee619754%28v=ws.10%29.aspx
Another thing I don't like of publish in the AD, is that your AD configuration comes back in every issued certificate.
There isn't a lot that a bad guy can really do with that information. The
current recommendation and best practice calls for only using HTTP URLs in
any event. This works much better in a number of scenarios including CRL
checking over the Internet, non-domain joined devices and clients,
non-Windows clients, etc. Just make sure that the HTTP CDP/AIA location is
highly available and is accessible both internally and externally.
Paul Adare - FIM CM MVP
MCSE: Microsoft Certified Shutdown Engineer -- Tomi Sarvela

PKI - CDP and AIA paths, why must the URL be so complex?

I'm currently desiging a new PKI infrastructure and thinking about the CPD and AIA extensions of the root and issuing CAs.
There is more than enough documention to find, but (almost) everyone is using the same kind of syntaxes to build the CDP and AIA urls. An AIA extension URL for example:
http://pki.fabrikam.com/CertEnroll/<ServerDNSName>_<CaName><CertificateName>.crt
This means that every issued certificate gets the following AIA URL in its extension:
http://pki.fabrikam.com/CertEnroll/myrootca_Fabrikam%20Ltd.%20Root%20Certification%20Authority.crt
I don't like this URL at all. First of all you expose the name of your CA server, second of all it contains illegal URL characters (.) and third of all, with the %20 in it (spaces) it looks ugly.
Is there any reason, why I just shouldn't skip all this variables and use the following name in the AIA/CDP extensions URL, e.g.:
http://pki.fabrikam.com/certenroll/contoso-rca.crt

On Fri, 24 Oct 2014 07:11:49 +0000, MD_1977 wrote:
I'm currently desiging a new PKI infrastructure and thinking about the CPD and AIA extensions of the root and issuing CAs.
There is more than enough documention to find, but (almost) everyone is using the same kind of syntaxes to build the CDP and AIA urls. An AIA extension URL for example:
http://pki.fabrikam.com/CertEnroll/<ServerDNSName>_<CaName><CertificateName>.crt
This means that every issued certificate gets the following AIA URL in its extension:
http://pki.fabrikam.com/CertEnroll/myrootca_Fabrikam%20Ltd.%20Root%20Certification%20Authority.crt
I don't like this URL at all. First of all you expose the name of your CA server, second of all it contains illegal URL characters (.) and third of all, with the %20 in it (spaces) it looks ugly.
Exposing the host name and CN of your CA is not a risk, and if you don't
want a "." in the URL, then don't use one when you create the CN for the CA
in the first place.
Is there any reason, why I just shouldn't skip all this variables and use the following name in the AIA/CDP extensions URL, e.g.:
http://pki.fabrikam.com/certenroll/contoso-rca.crt
There are a few reasons not to do this. First of all, the CA certificate
file name is always going to be
<ServerDNSName>_<CaName><CertificateName>.crt. Secondly, if you hard code
the CA certificate name in your URLs, you're going to run into problems
after renewals as there are index numbers added to the CA certificate file
name that you won't be able account for by hard coding the certificate
name.
Paul Adare - FIM CM MVP
void russian_roulette(void) { char *target; strcpy(target, "bullet"); }
-- Simon Cozens or Thorfinn

Difference between aia 2.5 and aia 3.0 (R1)

hi
what is the difference between aia 2.5 and aia 3.0 (R1) ?
Edited by: 807572 on May 22, 2011 11:56 AM
Can any one put some input on it .........
Thx in advance ...
Edited by: 807572 on Jul 28, 2011 5:51 AM

Hi,
There are numerous differences. You can refer http://www.oracle.com/us/corporate/press/316029 for details. Some that I can think of are:
1. SOA Suite 10g to 11g (SCA Architecture, Unified Console, Unified Development, Weblogic Server, Mediator instead of ESB etc.)
2. Huge no. of EBOs in AIA 3.x
3. AIA Artefacts (EBOs, EBSs) reside in MDS and referenced using MDS URL instead of direct URLs
4. New Programming/reference models
5. Extended Error handling framework
There are many more for which you can refer the documentation.
Regards,
Neeraj Sehgal

Can the same IIS web server be used for Web Enrollment and AIA and CDP?

I'm designing a PKI for my company and will need a web server accessible from outside for doing web enrollment as well as for publishing CRLs and AIAs. Can this be the same server?
Can anyone point me to a good article on how to set this up?
Thank you.
Kenny

yes, you can use the same web server to host CRT and CRL files. And there is nothing complex to create the site. Just create a web site and point it to a folder that contains your files, or add a virtual folder to existing web site.
My weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Check out new:
PowerShell FCIV tool.

What's the difference between AIA 3.0 and AIA FP 11g Release 1 (11.1.1.4.0)

Hi, experts,
Have a question need your great help and clarification, you know we have Oracle AIA Foundation Pack 2.5 based on SOA 10.1.3.4 installation, the new release for SOA has been released on this version Oracle Fusion Middleware 11g R1 (11.1.1.4.x) Released the other day, within this version, we have a Foundation Pack 11g Release 1 (11.1.1.4.0) based on SOA11g.
My questions are as below
1) What's difference between AIA 3.0 and Foundation Pack 11g Release 1 (11.1.1.4.0)?
2) We know, on the top of AIA 2.5, we have Foundation Pack 11g Release 1 (11.1.1.2.0) and Foundation Pack 11g Release 1 (11.1.1.4.0), doesn't mean that the Foundation Pack 11g Release 1 (11.1.1.4.0) has another nickname that is AIA3.0?
3) Does anyone provide AIA 3.0 installation and implementation guide?
Appreciated if you could provide some suggestions or comments based on above question, thanks in advance!

Please see the answers below...
#1 . AIA 3.0 is internal project name, AIA 11g R1 is an official release which is 11.1.1.2.0, then after two patch sets released they are 11.1.1.3.0 and 11.1.1.4.0
#2 hope the above answered your question.
#3 AIA 11g R1 x install and developer guides available on OTN.
Regards,
Narayana

Problem with Business Process Publisher and AIA

After installing AIA 11.1.1.5, I installed the Business Process Publisher following the instructions in the AIA Installation Guide at http://download.oracle.com/docs/cd/E21764_01/aia.htm, sec. 8.3: "Manually uploading reference process models to business process publisher".
Since I could not find the Publisher installation files in the AIAFP install I downloaded from OTN, I used the Publisher installation files from the BPA OTN download (files Oracle_BPA_Suite_11.1.1.4_OTN_1of2.zip and Oracle_BPA_Suite_11.1.1.4_OTN_2of2.zip - I did not install BPA before installing Publisher).
Now when I launch Publisher the login page says "Currently, no exports are available. You can only log in to the administration area at this time". If I login, the new page does not show any AIA contents, only the message "There are currently no profiles available". (I am not sure which “exports” and “profiles” it is talking about).
Evidently something is missing, but I cannot figure out what.
Thank you,
Ugo

"Todd Bradfute" <[email protected]> wrote:
>
I'm trying to run the Business Process Tutorial (http://e-docs.bea.com/workshop/docs81/doc/en/integration/tutorial/tutWLIProcessCreateApp.html?skipReload=true#1025634)
in WebLogic Workshop 8.1 (Build 2003.0710.190003) and I'm having trouble
with
the part that says:
In the New Application dialog box, select Tutorial in the left pane,
and select
Tutorial: Process Application in the right pane.
In my setup, the New Application window has only "All" in the left pane.
And it
doesn't have anything "Tutorial" related in the right pane.
Any suggestions?
Thanks
-TAB
Hi TAB--
When you installed the platform, did you install the whole thing, or just part
of it? If you chose not to install the examples, or if you chose not to install
Integration, that would explain this behavior. If not, we'll try to go from there...
Thanks,
Mike

Creating Bridge on weblogic to connect between OSM and AIA

Hi,
Am trying to create a messaging bridge in weblogic server to move msg from a queue to AIA's queue. I have created both Source & Target destinations and associated to bridge. My doubt is as both servers are different app servers, if i use initial context factory of AIA in target bridge destination will it be able to handle it or any steps needs to be done to handle it? Also how to set up global trust between two servers?
As per my knowledge turst credentials should be given in weblogic console as follows,
DomainName->Security->Advanced->Credential
This credential is the same credential that must match on AIA. Pls confirm this.
Can anybody Pls clarify on my queries asap....
Thanks in advance
Bharathi

Hi Naveen,
Thanks for your inputs.
Those 2 points are clear now. Can u please tell me is there anything to edit in the bridge configuration after ran that script in weblogic console.
I have followed the below mentioned steps after ran that script
1.
- Weblogic console,
- Services
- JDBC
- Data Sources
- Newly created JDBC Data Source which points to AIA AQ database
- Connection Pool: set user and password.
- Services -
- JDBC
- Data Sources
- Newly created JDBC Data Source which points to AIA AQ database: select the Target Server.
- Save changes.
2.
- AQ JMS Module (bridge_jms_module).
- Security Tab
- Role Tab: create new Role e.x JMSAQRole. Click on the role and Add Conditions "Access to Every One"
3.
Do the same thing for the "osm-jms-role", but the role is already created (also there is a condition already created "Group : OMS_client or OMS_ws_api or OMS_xml_api or OSM_automation or Cartridge_Management_WebService", but we to create the new condition)
Please remember that am not using latest AIA, so i have created queues in AIA DB manually.
can u please tell me why bridge is in Inactive state and shows warning as WARN: failed and will reconnect later.
Also weblogic server logs shows as below
<Warning> <MessagingBridge> <BEA-200026> <Br
idge "CFS_2_AIA_CreateCustomer" encountered some problems in one of its adapters
or underlying systems. It stopped transferring messages and will try to reconne
ct to the adapters shortly. (The exception caught was javax.resource.ResourceExc
eption: Failed to setup the Resource Adapter Connection for enlistment in the tr
ansaction, Pool = 'eis/jms/WLSConnectionFactoryJNDIXA', javax.transaction.System
Exception: start() failed on resource 'eis/jms/WLSConnectionFactoryJNDIXA': XA_O
K
javax.transaction.xa.XAException: method start should not be called on weblogic.
transaction.internal.IgnoreXAResource
at weblogic.jms.foreign.IgnoreXAResourceImpl.start(ForeignAQIntegration.
java:260)
at weblogic.connector.security.layer.AdapterLayer.start(AdapterLayer.jav
a:513)
at weblogic.connector.transaction.outbound.XAWrapper.start(XAWrapper.jav
a:466)
at weblogic.transaction.internal.XAServerResourceInfo.start(XAServerReso
urceInfo.java:1184)
at weblogic.transaction.internal.XAServerResourceInfo.xaStart(XAServerRe
sourceInfo.java:1117)
at weblogic.transaction.internal.XAServerResourceInfo.enlist(XAServerRes
ourceInfo.java:275)
at weblogic.transaction.internal.ServerTransactionImpl.enlistResource(Se
rverTransactionImpl.java:516)
at weblogic.transaction.internal.ServerTransactionImpl.enlistResource(Se
rverTransactionImpl.java:443)
at weblogic.connector.transaction.outbound.XATxConnectionHandler.enListR
esource(XATxConnectionHandler.java:118)
at weblogic.connector.outbound.ConnectionWrapper.invoke(ConnectionWrappe
r.java:218)
at $Proxy112.createMessage(Unknown Source)
at weblogic.jms.bridge.internal.MessagingBridge.onMessageInternal(Messag
ingBridge.java:1323)
at weblogic.jms.bridge.internal.MessagingBridge.onMessage(MessagingBridg
e.java:1251)
at weblogic.jms.adapter.JMSBaseConnection$29.run(JMSBaseConnection.java:
2269)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate
dSubject.java:363)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:
147)
at weblogic.jms.adapter.JMSBaseConnection.onMessage(JMSBaseConnection.ja
va:2265)
Please suggest how to resolve this issue.
Thanks in advance
Bharathi
Edited by: Bharathi on Nov 29, 2011 6:51 AM
Edited by: Bharathi on Nov 29, 2011 6:59 AM

Can AIA 2.0 and AIA 2.5 coexist?

We have a prior dump from AIA 2.0 over Linux . We intend to now have a new installation of AIA 2.5 over Linux
Can these two versions coexist? is there anything that i need to do?

Hi,
Even I have the AIA2.0 installed on the linux server and now plan to have AIA 2.5 installed. I have used the Order to Bill PIP so far. Will it be possible for both AIA2.0 and AIA2.5 to coexist?

CDP and AIA after CA Renewal w/ new key

After renewing a level 2 CA over the weekend, I notice something concerning. The HTTP CDP in newly-issued certificates appears as I would expect (http://[WEBSITE]/[CA NAME](1).crl) however, the HTTP AIA has not changed after the renewal. Right
now, the CA Certificate published in the HTTP AIA location is still the previous CA cert (still valid for a few more weeks). If I enter the http AIA value into a browser, it downloads that old certificate.
We are only using this CA for document signature. Interestingly enough, when I sign a document in Acrobat & check the certificate chain on the signature, it appears correct; the new CA certificate is in the chain. I'm guessing that Acrobat
is leveraging LDAP vs. HTTP to grab the CA chain & CRL.
Still, I'm wondering if there's something I need to do in order for the HTTP AIA to appear correctly.
Here's what the AIA definition looks like in my CA configuration script:
-setreg CA\CACertPublicationURLs "2:http://certs.contoso.com/%3.crt\n3:ldap:///CN=%7,CN=AIA,CN=Public Key Services,CN=Services,%6%11\n1:E:\CertLog\%3.crt"
Thanks in advance!

You want %3%4.crt
%3 is the CAName
%4 is CertificateName - this will give you the incremented filename upon renewal.

CDH, PIM and AIA

Similar Messages

Maybe you are looking for