ODSEE 11g & Solaris SMF

Hi experts,
I'm using ODSEE 11.1.1.7.2 and its DSCC on Solaris 10. Start/stop at reboot is provided by rc.
I'm guessing which would be the real benefits by integrating into SMF to manage ODSEE instances.
I know that I would miss start/stop of instance from DSCC...
What do you suggest?
Many thanks and best regards.
-rob

Hi Rob.
DSCC is able to manage ODSEE instances managed by SMF. For that, you need to use the enable-service command of dsadm. This will register your instance in SMF. At this point, dsam start/stop will go through SMF to start/stop the server. To be able to manage such instance, you just need a DSCC agent running as root (so that it can run svcadm command) and register your DS instance with this agent into DSCC. Then you can start/stop/configure your DS with DSCC.
Regards,
Carole.

Similar Messages

Can Oracle Database 11.2.0.3 authenticate with ldap (ODSEE 11g)??

Dear Experts,
I wanted to know if the Oracle DB 11.2.0.3 can authenticate with LDAP ODSEE 11g. I got to know that in order to authenticate to LDAP oracle DB needs to connect to Oracle Virtual Directory (OVD). Is this the correct statement. Any inputs will be appriciate it. thanks in advance.
Ibbi
Edited by: Ibbi2200 on Apr 29, 2013 11:30 AM

Yes i have looked into these Docs, It seems like Oracle DB does not connect directly with ODSEE 11g. It seems like you have to have OID (LDAP) not ODSEE (LDAP) for DB connection, and if you need to use ODSEEE, you have to use OVD to connect DB....Which is weird as OID is also an LDAP...and ODSEE is also an Oracle Ldap....
this is the error i get when i tried connecting DB to ODSEE.
"Error
Unable to connect to Oracle Internet Directory.
I am not using OID, we have ODSEE. Is there any pointers or workaround to connect ODSEE to DB? I am just trying to avoid OVD in the middle. Any help will be appriciated.
Thanks
ibbi

Solaris SMF configuration for Oracle CSS service

Below is the code to create oracle CSS service with solaris SMF, it will create smf service with instance name as "default" where as i need to change it to "css"
svc:/application/oracle/css:default
change service instance name to
svc:/application/oracle/css:css
i don't know about smf and xml, can somebody help me to change css service name ?
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>

<service_bundle type='manifest' name='oracle-database-css'>
<service
name='application/oracle/css'
type='service'
version='1'>
<create_default_instance enabled='false' />

<dependency
   name='multi-user'
   grouping='require_all'
   restart_on='error'
   type='service'>
   <service_fmri
    value='svc:/milestone/multi-user:default' />
</dependency>
<exec_method
   type='method'
   name='start'
   exec='$ORACLE_HOME/bin/ocssd'
   timeout_seconds='30' >
   <method_context>
    <method_credential
     user='oracle'
     group='dba'
     supp_groups=':default'
     privileges=':default'
     limit_privileges=':default' />
    <method_environment>
     <envvar name='ORACLE_HOME' value='/u01/app/oracle/product/10.2.0.1/asm_1' />
    </method_environment>
   </method_context>
</exec_method>
<exec_method
   type='method'
   name='stop'
   exec=':kill'
   timeout_seconds='60' >
   <method_context>
    <method_credential
     user='oracle'
     group='dba'
     supp_groups=':default'
     privileges=':default'
     limit_privileges=':default' />
    <method_environment>
     <envvar name='ORACLE_HOME' value='/u01/app/oracle/product/10.2.0.1/asm_1' />
    </method_environment>
   </method_context>
</exec_method>

<property_group name='startd' type='framework'>
   <propval name='duration' type='astring' value='child' />
   <propval name='modify_authorization' type='astring'
    value='solaris.smf.manage.oracle.database' />
</property_group>
<property_group name='general' type='framework'>
   <propval name='modify_authorization' type='astring'
    value='solaris.smf.manage.oracle.database' />
   <propval name='action_authorization' type='astring'
    value='solaris.smf.manage.oracle.database' />
</property_group>
<stability value='Unstable' />
<template>
   <common_name>
    <loctext xml:lang='C'>
     Oracle Cluster Synchronization Services (CSS)
    </loctext>
   </common_name>
   <documentation>
    <doc_link
     name='Intro to Oracle Clusterware and Oracle Real Application Clusters'
     uri='http://download-east.oracle.com/docs'/>
   </documentation>
</template>
</service>
</service_bundle>Edited by: sachinonnet on Jan 12, 2010 2:01 AM

Hi,
i got the solution as below
removed below line from service xml
<create_default_instance enabled='false' />
created another xml file for instance xml, where i specified the name of instance.
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>

<service_bundle type='manifest' name='oracle-database-instance'>
<service
name='application/oracle/database'
type='service'
version='1'>
<dependency name='oracle-asm' grouping='require_all' restart_on='none' type='service'>
    <service_fmri value='svc:/application/oracle/database:ASM' />
</dependency>

<instance name='PDB' enabled='false'>
   <method_context
    working_directory='/u01/app/oracle/product/10.2.0.1/db'
    project=':default'
    resource_pool=':default'>
    
    <method_credential
     user='oracle'
     group='dba'
     supp_groups=':default'
     privileges=':default'
     limit_privileges=':default'/>
    <method_environment>
     <envvar name='ORACLE_SID' value='pdb' />
     <envvar name='ORACLE_HOME' value='/u01/app/oracle/product/10.2.0.1/db' />
    </method_environment>
   </method_context>

<property_group name='options' type='application'>
   <stability value='External' />
   <propval name='instance_type' type='astring' value='RDBMS' />
   <propval name='modify_authorization' type='astring'
    value='solaris.smf.manage.oracle.database' />
</property_group>
</instance>
</service>
</service_bundle>

Weblogic Solaris SMF start/stop script

Does anyone have a Solaris SMF script to start/stop Weblogic they'd care to share? Thanks.
I don't think it matters but I'm running Solaris 10, Weblogic 10.3 and X86.

In /etc/rc3.d (all the files in this script are executed at the time of server boot) you can keep a script called S99weblogic and add below line that file,
#!/bin/ksh
su - wladmin -c "/etc/init.d/start_weblogic.sh start"
and in /etc/init.d you can write script start_weblogic.sh, as below
#!/bin/ksh
case "$1" in
'start')
# for admin server
if [ -f <init log path>/startadmin.log ]
then
print -n "\t\n\n deleting <init log path>/startadmin.log\n\n"
/usr/xpg4/bin/rm -rf <init log path>/startadmin.log
fi
### like above do for manged servers logs also ( if you have different script formats for admin and managed servers) and startadmin.log contains paths to all the admin server scripts)
# boot logs when the instances are started which will contains error while the instances are started
if [ -f init log path/boot.err.log ]
then
print -n "\t\n\n deleting init log path/boot.err.log\n\n"
/usr/xpg4/bin/rm -rf init log path/boot.err.log
#contians the list of domains in your physical or virtual server
if [ -f init log path/domain_list.log ]
then
print -n "\t\n\n deleting init log path/domain_list.log\n\n"
/usr/xpg4/bin/rm -rf init log path/domain_list.log
#list all domain names in domain_list.log
#use below command to find all the domians scripts home, for weblogic 8 in ur physical server
# for weblogic 8
ls -d <path to user projects untill scripts home>/* > inint log path/domain_list.log
#if ur domain are scattered then append other domains also -for weblogic 9.x, 10.x.........
ls -d <path to user projects untill scripts home>/*/bin >> initn log path/domain_list.log
# get start up sctiprs
for file in `/usr/bin/cat init log path/domain_list.log`
do
ls $file/startadm*.sh >> init log path/startadmin.log
ls $file/startwl*.sh >> init log path/startmgd.log
fi
done
#start startup scritps
for file in `/usr/bin/cat init log path/startadmin.log`
do
cd `/usr/bin/dirname $file`
nohup $file >> init log path/boot.err.log 2>&1 &
#do the same for manged server sctips
done

Migration from Oracle 8i/Windows to Oracle 11g/Solaris

Hi,
We got an client requirement to migarte the Oracle 8i/Windows 2000 platform to Oracle 11g/Solaris platform.
Whether anyone involed in migartion of windows to solaris.Also i would like to know the feasible steps for migarting.
Please help out.
With regards,
Surya

Hi,
Please refer to (Note: 238276.1 - Migrating to Linux with Oracle Applications Release 11i) to migrate the application tier. For the database tier, use export/import and upgrade the database then -- Please see old threads for similar discussion.
Linux Migration
http://forums.oracle.com/forums/search.jspa?threadID=&q=238276.1&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Thanks,
Hussein

ODSEE 11G VS DSEE 6.3.1 Classes

We are running Sun DSEE 6.3.1. I am a new admin and looking for classes on it. I was wondering if anyone knows if the ODSEE 11G courses will be helpful in this area or if too much has changed? I'm having trouble finding classroom courses for DSEE 6.3.1. We'll likely be upgrading to ODSEE anyways down the line.

user13471064 wrote:
We are running Sun DSEE 6.3.1. I am a new admin and looking for classes on it. I was wondering if anyone knows if the ODSEE 11G courses will be helpful in this area or if too much has changed? I'm having trouble finding classroom courses for DSEE 6.3.1. We'll likely be upgrading to ODSEE anyways down the line.??? http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getSchedPage?page_id=4&dc=D69253GC11
Or try starting at:
http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=402&p_nl=ORMM
to
http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getSearchResults?p_search_keyword=Directory%20Server&p_fuzzy_match=N&p_output_style=P&p_header_yn=N&p_search_category_id=&p_delivery_language=US
.... You may wel have been to these pages already. Its worth checking the course contents for the v6 and 11g and comparing yourself ....
Otherwise try contacting Oracle University for help.
You may have done these things already.

Solaris.smf.modify ? help me

hi
hope every one will be fine and enjoying real world of UNIX i am UNISYS in little bit trouble
i have a service named "mysvc" (let mysvc be the service FRMI) running under user "meunix" and group "other"
i want to give user "meunix" the privilage to delete the service using commmand
NOTE : Assume service is already stopped
#svccfg delete -f mysvc
but when run this command its prompted
svccfg: Permission denied
i have already assign right to the user "meunix" the following rights
first i added the folling line in the file /etc/security/auth_attr
solaris.smf.modify.mysvc::My Service RBAC-Management::
and then i run the command
usermod -A solaris.smf.modify.mysvc meunix
but it dos't work
i have also tried
solaris.smf.modify.*.mysvc::My Service RBAC-Management::
usermod -A solaris.smf.modify.mysvc meunix
but the same thing happend "svccfg:: Permission denied"
looking forward for +ve responses
Regards
UNIX out of Box

Sorry, but svccfg delete requires solaris.smf.modify, which allows the user to create or
delete any service or instance. Please file an RFE at bugs.opensolaris.org .

ODSEE 11g - DPS Directory proxy server suddenly increase load average

Hi all
Recently upgraded from directory server 5.2 to ODSEE 11g, one directory proxy configure to one master directory server and one consumer directory server.
all the three instances are in the same sparc t3 machine.
Directory proxy server alerts server load average on the machine is above 6.00 normally it is 0.66. I'm not sure what is causing the sudden burst in the load ? the traffic is normal there is no abnormal requests coming to the server. proxy performance degrades over the span of 24 hours ....and Once i restart the proxy services (dpsadm restart) all load averages comes to normal and directory proxy runs normal for the next two - three weeks. The same cycle continues ...I'm not sure what was causing the sudden load increase.
I increased the JVM heap size from 1GB to 2 GB still continue to have the problem ..did anyone else experience similar problem. How did you fix it....
Any input or advise in the right direction is much appreciated.
Thank you.

server load I'm referring to "prstat command" - server load average suddenly shoot up from 0.66 to 6.00 ie) the CPU usage. Alert is from our server monitoring tool not related to directory proxy.
Clients report connections time out (etime goes from etime=0 ..2..4.....) over 24 hours i can see the etime increases and eventually the proxy server get hung and non responsive. Once I restart all the performance back to normal at-least for another two weeks.
I suspect there might be a memory leak or JVM Garbage collection issue -- any expert input how to figure this out will help.
Here is the JVM args in the proxy server "Xms2g -Xmx2g -Xmn1g -XX:SurvivorRatio=4 -XX:+UseParNewGC -XX:+UseConcMarkSweepGC"
Here is a jstat during the problem
./jstat -gcutil -t 25365 2s 30
Timestamp S0 S1 E O P YGC YGCT FGC FGCT GCT
982106.4 0.00 26.17 4.26 92.25 59.52 523 60.979 689 1002.587 1063.566
982108.4 0.00 26.17 4.40 92.25 59.52 523 60.979 689 1002.587 1063.566
982110.4 0.00 26.17 4.80 92.25 59.52 523 60.979 689 1002.587 1063.566
982112.4 0.00 26.17 5.10 92.25 59.52 523 60.979 690 1002.719 1063.698
982114.4 0.00 26.17 5.15 92.25 59.52 523 60.979 690 1002.719 1063.698
982116.4 0.00 26.17 5.32 92.25 59.52 523 60.979 691 1003.009 1063.988
982118.4 0.00 26.17 5.72 92.25 59.52 523 60.979 691 1003.009 1063.988
982120.4 0.00 26.17 5.80 92.25 59.52 523 60.979 691 1003.009 1063.988
982122.4 0.00 26.17 5.93 92.25 59.52 523 60.979 692 1003.168 1064.146
982124.4 0.00 26.17 6.03 92.25 59.52 523 60.979 692 1003.168 1064.146
982126.4 0.00 26.17 6.15 92.25 59.52 523 60.979 693 1003.481 1064.460
982128.5 0.00 26.17 6.18 92.25 59.52 523 60.979 693 1003.481 1064.460
982130.5 0.00 26.17 6.25 92.25 59.52 523 60.979 693 1003.481 1064.460
982132.5 0.00 26.17 6.29 92.25 59.52 523 60.979 694 1003.656 1064.635
982134.5 0.00 26.17 6.31 92.25 59.52 523 60.979 694 1003.656 1064.635
982136.5 0.00 26.17 6.36 92.25 59.52 523 60.979 695 1003.988 1064.967
982138.5 0.00 26.17 6.89 92.25 59.52 523 60.979 695 1003.988 1064.967
982140.5 0.00 26.17 6.99 92.25 59.52 523 60.979 695 1003.988 1064.967
982142.5 0.00 26.17 7.08 92.25 59.52 523 60.979 696 1004.187 1065.165
982144.5 0.00 26.17 7.31 92.25 59.52 523 60.979 696 1004.187 1065.165
982146.5 0.00 26.17 7.82 92.25 59.52 523 60.979 697 1004.553 1065.531
982148.5 0.00 26.17 7.92 92.25 59.52 523 60.979 697 1004.553 1065.531
982150.5 0.00 26.17 8.01 92.25 59.52 523 60.979 697 1004.553 1065.531
982152.5 0.00 26.17 8.17 92.25 59.52 523 60.979 698 1004.786 1065.764
982154.5 0.00 26.17 8.26 92.25 59.52 523 60.979 698 1004.786 1065.764
982156.5 0.00 26.17 8.38 92.25 59.52 523 60.979 699 1005.174 1066.153
982158.5 0.00 26.17 8.74 92.25 59.52 523 60.979 699 1005.174 1066.153
982160.5 0.00 26.17 8.88 92.25 59.52 523 60.979 699 1005.174 1066.153
982162.5 0.00 26.17 8.96 92.25 59.52 523 60.979 700 1005.433 1066.412
982164.5 0.00 26.17 9.09 92.25 59.52 523 60.979 700 1005.433 1066.412
jstat after the restart
./jstat -gcutil -t 10084 2s 30
Timestamp S0 S1 E O P YGC YGCT FGC FGCT GCT
40312.6 0.00 25.13 88.49 1.98 63.68 21 2.366 0 0.000 2.366
40314.6 0.00 25.13 88.58 1.98 63.68 21 2.366 0 0.000 2.366
40316.6 0.00 25.13 88.71 1.98 63.68 21 2.366 0 0.000 2.366
40318.6 0.00 25.13 88.99 1.98 63.68 21 2.366 0 0.000 2.366
40320.6 0.00 25.13 89.31 1.98 63.68 21 2.366 0 0.000 2.366
40322.6 0.00 25.13 89.36 1.98 63.68 21 2.366 0 0.000 2.366
40324.6 0.00 25.13 89.42 1.98 63.68 21 2.366 0 0.000 2.366
40326.6 0.00 25.13 89.53 1.98 63.68 21 2.366 0 0.000 2.366
40328.6 0.00 25.13 89.60 1.98 63.68 21 2.366 0 0.000 2.366
40330.6 0.00 25.13 89.72 1.98 63.68 21 2.366 0 0.000 2.366
40332.6 0.00 25.13 90.11 1.98 63.68 21 2.366 0 0.000 2.366
40334.6 0.00 25.13 90.56 1.98 63.68 21 2.366 0 0.000 2.366
40336.6 0.00 25.13 90.67 1.98 63.68 21 2.366 0 0.000 2.366
40338.6 0.00 25.13 90.75 1.98 63.68 21 2.366 0 0.000 2.366
40340.6 0.00 25.13 91.09 1.98 63.68 21 2.366 0 0.000 2.366
40342.6 0.00 25.13 91.36 1.98 63.68 21 2.366 0 0.000 2.366
40344.6 0.00 25.13 91.47 1.98 63.68 21 2.366 0 0.000 2.366
40346.6 0.00 25.13 91.53 1.98 63.68 21 2.366 0 0.000 2.366
40348.7 0.00 25.13 91.64 1.98 63.68 21 2.366 0 0.000 2.366
40350.7 0.00 25.13 91.77 1.98 63.68 21 2.366 0 0.000 2.366
40352.7 0.00 25.13 91.87 1.98 63.68 21 2.366 0 0.000 2.366
40354.7 0.00 25.13 91.95 1.98 63.68 21 2.366 0 0.000 2.366
40356.7 0.00 25.13 92.11 1.98 63.68 21 2.366 0 0.000 2.366
40358.7 0.00 25.13 92.19 1.98 63.68 21 2.366 0 0.000 2.366
40360.7 0.00 25.13 92.24 1.98 63.68 21 2.366 0 0.000 2.366
40362.7 0.00 25.13 92.85 1.98 63.68 21 2.366 0 0.000 2.366
40364.7 0.00 25.13 93.19 1.98 63.68 21 2.366 0 0.000 2.366
40366.7 0.00 25.13 93.40 1.98 63.68 21 2.366 0 0.000 2.366
40368.7 0.00 25.13 93.44 1.98 63.68 21 2.366 0 0.000 2.366
40370.7 0.00 25.13 93.47 1.98 63.68 21 2.366 0 0.000 2.366
Any one else had similar behavior. Any input to the right direction is highly appreciated.
Thanks.

Introducing a custom Password policy to expire passwords. odsee 11g - what are the expected results

We have left the default Password Policy untouched. As a default password aging is off. Our DS compatibility mode is now DS6 so we can add Password Policies with max age!
Some users need to have their passwords changed regularly due to political reasons.
We have introduced a custom Password Policy which has a pwd_Max_age value of 180 days and allows the user to Change Password. Entry is cn=Custom Pwd Policy for ABC,dc=mycorp,dc=com
Ok. Now we get confused by the behaviour of this ODSEE 11g server. Now, we are ADDING a new custom Password Policy to just a few selected users!
1. When we add the Policy to the user by setting the passwordpolicysubentry attribute = "cn=Custom Pwd Policy for ABC,dc=mycorp,dc=com"
- Nothing seems to happen.
- WHEN IS THE PASSWORD EXPIRED?
2. After we change a password for a user who has the passwordpolicysubentry attribute, he gains a new attribute pwdChangedTime
- IS THIS THE ONLY TIME THE EXPIRY CLOCK STARTS TICKING? *AFTER* THE PASSWORD IS CHANGED?
3. Is it true, that if a user never changes his password, even if he gets the new custom password policy applied, his password never automatically expires????
I just cannot work out what is supposed to happen. I would have hoped that at the very least, the password begins to expires as soon as he gets a Password Policy with pwd_Max_age set.
How is ODSEE 11g designed/supposed to function.
Help!!!!!
*HH

Sylvain ,Many thanks for your reply and suggestions. Always good to have a choice!
So it seems the only way to get the password aging clock to tick is for the password to be changed after having the password policy applied.
Option1 is not really an option although it certainly would make the users change the password and set up the password aging...
The main difficulty with odsee 11g (Version 11.1.1.7.0) is that pwdChangedTime is a system read-only attribute linked to a modification to userPassword attribute, I cannot use ldapmodify to add/modify the pwdChangedTime attribute.
I was amazed that I can read/store the userpassword as the base64 string and replace the userpassword attribute with this value using ldapmodify. This is very easy (and works!) but will cause the pwdChangedTime attribute to contain the same time for all users. I can imagine helpdesk loving it when everyone calls them in 6 months time.
Using the LDIF backup/restore utility looks the best option, if it succeeds. At least we can randomize the actual value of pwdChangedTime with this approach.
Mercy Buckets.

How to Install oracle 11G Solaris 10 NO GUI using command line

Hello
I need to install oracle 11G R2 on Solaris 10 but cant use interactive mode i tried the following
/runInstaller -silent -force -debug FROM_LOCATION="/var/tmp/oracle/database/stageproducts.xml" ORACLE_HOME="/oracle/product"
As per oracle metalink documentation - however i get the following messages
[SEVERE] - My Oracle Support Username/Email Address Not Specified
has anyone installed oracle with no interactive mode how can i do so ?
thank you

Have you followed the needed steps in the Install Guide ? http://download.oracle.com/docs/cd/E11882_01/install.112/e17163/app_nonint.htm#BABFEECI
HTH
Srini

Oracle 11g - Solaris 10 on cisco UCS server

I would like to know if anyone has experience with installing Oracle databases on cisco UCS servers. I recently took over a dba shop and my client has purchased a cisco UCS server and is planning on migrating some databases currently on dedicated servers running on Solaris 10 and others running on Linux RH 5.4 platforms. I need to find out if Oracle 11g and Solaris 10 is compatible and covered by Oracle licenses. Does anyone have any specs and/or information on this topic? Thanks in advance.
Jonathan Begazo-Leon

Jonathan,
there's a dedicated Oracle database forum (Database) where you can post your issue. In this forum here only 3rd party to Oracle migrations using the Oracle tools migration workbench or SQL Developer will be covered. As I can't move your thread, please close this one here and post your issue again in the database forum.
Thanks,
Klaus

Oracle ODSEE 11g rel1 download, patches and additonal tools

Dear all,
Reading this site, I'm advised to build a DSEE system based on the latest release of the software.
Within the Oracle/Sun website, I keep finding many versions of the software and documentation, and I'm feeling a bit "lost".
I've managed to download a "package" version of odsee from the Oracle web site at
http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html - filename : ofm_odsee_pkg_sun_sparc_11.1.1.3.0_64_disk1_1of1.zip
I have the following questions:
1) is this the "correct" "latest" version
2) are there any patches that should be applied to this software after installation, but before configuration
3) where would I find the correct documentation for this release
4) where can I find a copy of the "Directory Server Resource Kit" that can be installed (and are there any notes for the installation)
Any help with these questions would be very useful
Regards
Pete Scrutton

Hi Pete,
on the page you mentioned, there are the latest releases available of the ODSEE (as of today); from that page you can choose which 'type' of installation:
- Archive
- Package
and of course that depends on your deployment/distribution needs [personally I prefer the 'archive' because it's more flexible and more suitable for my needs]
There are no patches released so far for that version, although there are already some hot-fixes. If you're experiencing some problems and you have a valid support contract (CSI) with Oracle, you can file a service request for that.
The official documentation for ODSEE 11gR1 could be found:
http://download.oracle.com/docs/cd/E19656-01/
Last, but not least, DSRK is included with the ODSEE, in the zip version it's available under: <INSTALL_ROOT>/dsrk
HTH,
marco

Simple plans for setting up WebLogic 10.3.3 to run at boot in Solaris SMF?

I need to set up WebLogic (AdminServer & NodeManager) to start at boot on a Solaris/X86 VM. They will be owned by a specific userid. Is there a shortcut guide to doing this with SMF on Solaris 10?
Just so it's clear, I know how to start the AdminServer and NodeManager, I just need it done automatically at boot.

Please remove <data-value name="LOCAL_JVMS"> tag, You are trying to install a JDK on /opt/JRE that for some reason this is being refused.
If this don't works please show us your silent.xml file.
Best regards.

Certificate problem in Proxy Server (ODSEE 11g)

I am having a problem adding a CA Certificate to the Proxy Server. I followed the steps in the documentation, however I get the error: "keytool error: java.lang.Exception: Public keys in reply and keystore don't match".
From what I have read, this error means that the alias name I am using when I add the new certificate is already being used. As per the documentation...
When you request a CA-signed certificate, a temporary self-signed certificate is created. When you receive and install the CA-signed certificate from the CA, the new certificate replaces the temporary self-signed certificate.
... and this does happen. However when I bring in the new cert to replace... I get the mentioned error.
If I use a different alias, it doesn't give me an error. However, I can't see it when I use the "dpadm list-certs" command (although it is there when I use the keytool command). More importantly, the "defaultservercert" is still the certificate being used when accessing the server.
So the big question is... How do I get the Proxy Server to use the new CA Certificate?
I've tried using the keytool command in many different ways, and it fails each time. Lesson learned: don't mess with the keystore via keytool. Any changes made are not recognized by the Proxy Server.
I don't have access to this Proxy Server via DSCC because I do not have the password for the account running the services (a restriction made by the client), so it all to be done via CLI.
The operating system is Oracle Solaris 10 8/11 s10s_u10wos_17b SPARC.
Here are some outputs:
$ ./dsee7/bin/dpadm list-certs ./dsee7/instances/PROXY01
Alias Valid from Expires on Self-signed? Issued by Issued to
defaultservercert 2012/06/18 09:23 2014/06/18 09:23 y CN=wpsun882:25389 Same as issuer
1 certificate found.
$ ./dsee7/bin/dpadm request-cert name devB2ADIRPROXY01.domain.com org 'COMPANY INC' org-unit IT city 'Eden Prairie' state Minnesota country US --keysize 2048 -o ./dsee7/ca-cert.csr ./instances/PROXY01 ca-cert
$ ./dsee7/bin/dpadm list-certs ./dsee7/instances/PROXY01
Alias Valid from Expires on Self-signed? Issued by Issued to
defaultservercert 2012/06/18 09:23 2014/06/18 09:23 y CN=wpsun882:25389 Same as issuer
ca-cert 2012/06/18 09:25 2014/06/18 09:25 y C=US, ST=Minnesota, L=Eden Prairie, O=COMPANY INC, OU=IT, CN=devB2ADIRPROXY01.domain.com Same as issuer
2 certificates found.
$ ./dsee7/bin/dpadm add-cert ./dsee7/instances/PROXY01 ca-cert ./dsee7/wpsun882.pem
keytool error: java.lang.Exception: Public keys in reply and keystore don't match
Thanks in advance!

I can elaborate it further
class GUI extends JFrame implements Runnable
public void updateGUI()
//update the GUI
class MailListener extends Thread
GUI refernce; // Reference to the GUI class
public MailListener(GUI g)
reference = g;
public void run
while(true)
//wait for a message and call the updateGUI() method of
GUI class when u get a message
}

VLV & Server Side Sort Query with ODSEE 11g

Hi
We are trying to integrate Microsoft FIM with ODSEE.. When FIM does a Full Import it with VLVControl and SortControl ON it gets the following error
1100 objects were returned on import, exceeding the configured page size in the Run Profile of 500. Only the first 500 objects were processed. Import aborted.
Now looking at ODSEE Logs it does the following
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 - SRCH base="<BASENAME>" scope=2 filter="<FILTER NAME>" attrs="<LONG LIST OF ATTRIBUTES>"
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 - SORT dn
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 - VLV 0:499:0:0 1:40 (0)
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 - SORT dn
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 - VLV 0:499:0:0 1:4 (0)
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 - SORT dn
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 - VLV 0:499:0:0 1:6412 (0)
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 - SORT dn
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 - VLV 0:499:0:0 1:685 (0)
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 - SORT dn
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 - VLV 0:499:0:0 1:232 (0)
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 - RESULT err=0 tag=101 nentries=1100 etime=1
[27/Mar/2015:08:29:55 +1100] conn=3 op=2 msgId=402744 - UNBIND
Ofcourse as we can see it is returning 1100 but FIM is expecting only 500.. Microsoft suggests that VLV index and server side sort is not correctly configured on our end. What could be going wrong here? We have both the supported controls ON in ODSEE. I have created a vlvindex entry in dse.ldif matching the SORT dn and vlvbase,vlvscope and vlvfilter
Not well versed with VLV and sort index..

Hello,
Could you try to perform an equivalent search with the ldapseatch that comes with DSEE and check how many entries are returned ?
See ldapsearch(1) (Sun Java System Directory Server Enterprise Edition 6.2 Man Page Reference) , option -G
If the ldapsearch returns more than 500 entries, I would encourage you to contact the Oracle Support.
-Sylvain
Please mark this response as correct or helpful when appropriate to make it easier for others to find it

ODSEE 11g & Solaris SMF

Similar Messages

Maybe you are looking for