OID사용시 LDAP SERVER의 IP ADDRESS 및 PORT 변경시 절차 (OID 9.0이상)

제품 : ORACLE SERVER
작성날짜 : 2004-07-30
OID사용시 LDAP SERVER의 IP ADDRESS 및 PORT 변경시 절차 (OID 9.0이상)
========================================================
PURPOSE
OID를 사용하는 경우 경우에 따라 ldap data가 저장된 시스템, 혹은 ldap process가
구동되는 시스템의 ip나 hostname이 변경되거나 혹은 oid service를 위한 port번호를
수정해야할 필요가 있다. 이러한 경우의 조치 방법을 정리한다.
Explanation
1. hostname 및 ip address 변경
OID는 hostname이나 ip address와의 dependency가 존재하지 않는다.
단지 oid관련 process와 ldap db를 stop한 상태에서 ip address를 변경하고
다시 start하기만 하면 된다.
단, ldap process를 start시킬때 ldap db와 연결하기 위해 sqlnet을 이용하는 경우,
즉, oidctl과 oidmon command에서 connect option을 지정하는 경우 connect=부분에
지정된 connect string에 대한 system information은 수정이 필요하다.
이것은 일반적인 sqlnet이용시 ip변경 방법으로, db가 위치한 곳의
listener.ora와 client (이 경우는 ldap process가 구동되는 쪽)의
tnsnames.ora내에 host=부분이 ip address로 지정된 경우 변경된
정보에 맞게 수정하면 된다.
2. oid port변경
(1) default configset의 port변경
먼저 기존의 port를 이용해 OID manager에 연결한다.
'서버 관리'->'디렉토리 서버'-> '기본 구성 집합' 선택 후 나타나는 오른쪽
화면에서 일반사항/SSL 설정 tab을 선택하여 원하는 port로 기본 구성 집합을
수정한다.
수정 후 ldap process를 stop시킨 상태에서 oidctl, oidmon command를 이용하여
새로 ldap process를 start시키면 변경된 port로 서비스가 된다.
(2) 추가적인 configset등록
기존 port를 이용해 oid manager에 연결한다.
'서버 관리'->'디렉토리 서버'-> '기본 구성 집합' 부분에 mouse를 두고 mouse의
오른쪽 button을 click후 '다음과 같이 생성' 을 선택한다.
'구성집합1' 과 같은 이름으로 새로운 구성집합이 생성되면 구성집합1을 선택후,
오른쪽 화면에서 일반사항과 SSL설정에 대해서 원하는 port를 지정한다.
ldap process를 모두 stop한 상태에서, oidctl, oidmon command를 이용하여
다시 ldap process를 start시키는데 oidctl command시 configset option을
지정한다. configset은 default인 기본구성집합에 대해서는 0값을 가지며,
예를 들어 구성집합1을 이용하는 경우, configset=1로 지정한다.
oidctl command의 예는 다음과 같다.
oidctl start server=oidldapd instance=1 configset=1
수정된 내용이 잘 반영되었는지를 확인하려면, oidctl start 후 ldap db내의
ods.ods_process table을 조회해 보거나, 혹은 다음과 같이 ldap bind를 통해 변경된
port로 oid가 서비스 되는지 확인해 볼 수 있다.
D:\ora9i\bin>ldapbind -h 152.69.45.201 -p 4032
bind successful
Reference Documents
-------------------

Similar Messages

  • Need help setting up LDAP server for Address Book

    I've set up Panther servers before for AFP which is pretty simple but now the office I work at wants me to setup an LDAP server so they can share the same contact information, probably about 2,000+ entries. I'm guessing that this will have to be entered in the LDAP server entry by entry.
    I need to know how to setup the server and what settings need to be on the clients' computers, such as in Address Book.
    The server is an older G4 tower and I've got 8 computers hooked up to it on a simple network. I don't think I'll need to make the LDAP server accessible from outside the network but it's something I'll have to worry about for the future.
    Thanks for any help you can offer.

    bump

  • Error in OID ldap integration

    I'm trying to integrate Portal and OID authentication.
    I followed all the documentation in conf_ldap.pdf but I get the error:Unexpected errors (WWC-41400).
    Both the tnsping exproc_connection_data
    and lsnrctl status give the right result as stated in the document.
    So I've tryed to launch from portal30_sso user this command:
    select WWSSO_AUTH_EXTERNAL.authenticate_user('portal30','portal30') from dual
    and I get the error:
    ORA-28576: lost RPC connection to external procedure agent
    ORA-06512: at "PORTAL30_SSO.WWSSO_AUTH_EXTERNAL", line 281
    ORA-06512: at line 1
    Both tnsnames.ora and lisner.ora seems to be configures fine.
    I'm using OID coming from Oracle 8.1.7.0 and OiAS 1.0.2.1 for NT on a win 2000 sp1,
    Where is the problem?
    Thank's in advance
    Mauro
    null

    Here are some things to check:
    I beleive that some of the newer versions of Portal have a user
    called "portal309_sso" instead of "portal30_sso". My examples
    below use portal30_sso". Use whatever user is appropriate for
    your version of Portal.
    If you have not yet installed OID (Oracle's LDAP server) none of
    this will work. Make sure OID is installed and running. OID can
    be installed in the same database that Portal uses.
    All of the following sql command steps must be executed as
    portal30_sso schema user, NOT portal30.
    Examples for NT:
    Copy the appropriate library file (ssoxldap.dll) used for the
    LDAP API callouts from the $PORTAL_HOME/portal30/admin/plsql/sso
    directory of the product installation into the appropriate place
    on the Login Server machine:
    Examples for NT copy:
    F:\>copy \PORTAL_HOME\portal30\admin\plsql\sso\ssoxldap.dll
    ORACLE_HOME\bin
    F:\>sqlplus portal30_sso/portal30_sso create or replace library
    auth_ext as F:\Oracle\Ora8db\bin\ssoxldap.dll';
    Notice that you must type a forward slash on a line by itself
    after you execute the command.
    Make sure that your network connectivity is working.
    Make sure you have at least 1 service handler for PLSExtProc:
    Example:
    F:\>set ORACLE_HOME=F:\Oracle\Ora8db
    F:\>lsnrctl status
    PLSExtProc has 1 service handler(s)
    Make sure you can tnsping extproc_connection_data.
    Example:
    F:\>tnsping extproc_connection_data
    Attempting to contact (ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC0))
    OK (80 msec)
    F:\>
    If either of these two network connectivity checks fail nothing
    else will work.
    Next make sure you enter the correct information for the
    ssoldap.sql script. One small typing error will cause the problem
    you had. In the example below there are a couple of common
    mistakes people make. Make sure you type the full Search base.
    The value for the search base should be "cn=Login Server
    (portal30_sso)". Don't forget the cn= and be sure to put in the
    spaces and capitol letters where you see them. In the "Bind DN"
    make sure you dont forget to put in the "cn=" in front of the
    "orcladmin".
    Example:
    sqlplus portal30_sso/portal30_sso
    @\oracle\isuites9i\portal30\admin\plsql\sso\ssoldap
    Host: 144.25.95.92
    Port: 389
    Search Base: cn=Login Server (portal30_sso)
    Unique Attribute: cn
    Bind DN: cn=orcladmin
    Bind Password: welcome
    Note: If you have already changed the password for cn=orcladmin
    in the OID LDAP server you must use that password instead of
    "welcome" for the "Bind Password:".
    Creating the users.ldif file for migrating existing users in the
    portal30 database schema.
    sqlplus portal30_sso/portal30_sso
    @f:\oracle\isuites9i\portal30\admin\plsql\sso\ssoldif
    Generating 'users.ldif' file for existing Portal users.
    Enter the desired file location.
    F:\oracle\admin\oiddb2\udump
    NOTE: The file location must be specified in the appropriate
    parameter in the init.ora file.
    Example (you should see a line like this in the init.ora file):
    UTL_FILE_DIR = F:\Oracle\admin\oid2111\udump
    This line specifies where to dump data the you want to migrate.
    If this line was not present in the init.ora file before you
    started your database you will have to restart the database for
    this step to succeed.
    Using the file that was created in the last step (users.ldif),
    add the entries to the LDAP directory. This example uses Oracle
    Internet Directory's ldapadd command line utility:
    Note. The following command is one long line. If you have already
    done this next step before you may want to go into OID and delete
    the existing data that is already in OID. Use the ODM (Oracle
    Directory Manager) tool to do this. Under "Entry management" make
    sure you delete any entries that you may have already created. If
    the directory entries already exist you will get an error when
    you run the next command indicating that the entries already
    exist. Because any previous entries you may have created may not
    be good those entries should be deleted.
    ldapadd -h 144.25.95.92 -p 389 D cn=orcladmin -w welcome f
    f:\oracle\admin\oiddb2\udump\users.ldif
    Once these users are successfully added, you are ready to log
    into the Portal through the Login Server, authenticating against
    this LDAP directory.
    Make sure you login as a valid user that is under the "cn=Login
    Server (portal30_sso)" directory of your LDAP server.
    Example:
    Open your browser and go to the URL:
    http://ip_or_hostname:80/pls/portal30
    Click on the Login link
    Login as portal30_sso/portal30_sso
    Note: Assuming portal30_sso is a valid user in the LDAP server. I
    beleive that some of the newer versions of Portal have a user
    called "portal309_sso" instead of "portal30_sso".
    Hope this helps.
    Jay

  • OC4J 9.0.4.0.1 doesn't connect to OID LDAP

    I'm trying to have an application using basic authentication with JAZN LDAP (the LDAP is an OID in an Oracle 9iAS 9.0.2 Infrastructure) for authentication/authorization but without any success. The same application works fine on OC4J 9.0.3 and 9.0.2.
    I get no errors or exceptions, simply I don't get authenticated.
    Sniffing TCP traffic I noticed that OC4J 9.0.4.0.1 doesn't contact OID(LDAP) server at all.
    The documentation says it should work, but my suspect is this standalone OC4J version doesn't really support JAZN with LDAP.
    My jazn.xml is like this:
    <jazn provider="LDAP" location="ldap://myserver:4032">
    <property name="ldap.user" value="cn=orcladmin"/>
    <property name="ldap.password" value="{903}encryptedpassword"/>
    </jazn>
    Luciano

    FYI:
    If you take a look at Oracle AS v 9.0.3 standalone in the /j2ee/home directory, you notice an ldap.jar that is no longer present in the 9.0.4 product, in addition to the fact that the jazn.jar file in the 9.0.4 product is about half the size of the prior release.
    It seems as if they moved this LDAP functionality into other more OS-dependent libraries. In 10g Enterprise, it appears as if OPMN somehow controls LDAP.
    I've read that it's somehow possible to get LDAP working in standalone, but it's not published because it's too complicated to explain.
    I personally think this is rediculous. It's waaaayyyy too much trouble to install developer workstations with 10g enterprise -- esp. since it doesn't even do windows -- and the linux version is very picky and troublesome to install.
    So we are left we a very crappy development environment.
    Thanks Oracle.

  • Linux authentication against OID ldap

    Hi,
    How to use OID as an authentication server for linux users. So when a users logs on the linux machine get's his information from the OID /ldap server?
    What are the step to do this?
    Regards

    This link should help:
    http://www.oracle.com/technology/products/oid/pdf/unix_pam_oid_wp.pdf

  • Format Of LDAP Server List for Netmail

    Could anyone please explain what the format for using an ldap server for address lookups in Netmail. ie:
    servername:port/searchbase or ldap://servername:port/searchbase. I have tried a few but can't seem to get it to work. Everytime I try to add a server to this list, the Java Netmail will not allow me compose a message.. anyone have any ideas..

    Chris -
    Each entry is a comma separated list of name/value pairs in the following format: name="value". Quotation marks are not allowed in any value. The valid names and corresponding preference are:
    name the user-friendly name for the server; this is what the user sees in the NetMail Address Search tab.
    server the host name of the LDAP server. If a port is needed, use host:port.
    base the search base expression, e.g., ou=People
    searchin the list of attributes to search in, e.g., cn,givenname
    result the attribute to use as the result, defaults to mail
    filter additional search filters to be applied
    referral whether or not to follow referrals, true or false
    Only the server value is required, all others are filled in with defaults if necessary. A typical entry might be:
    name="Company Address Book", server="ourldap.xyz.com", base="dc=xyz,dc=com"
    Stephen

  • Solaris 10 client - ldap_search: Can't connect to LDAP server

    Hello
    I have following configuration:
    - openLDAP server in Solaris 10 zone called ldap
    - native LDAP client in different Solaris 10 zone called mail on the same SPARC machine
    I can't get ldapsearch results after ldapclient initialization.
    [root@mail ~]# ldapsearch -b dc=pov,dc=pl objectclass=*
    ldap_search: Can't connect to the LDAP server - Connection refused
    But I am able to get data from LDAP server if address of the server is specified:
    [root@mail ~]# ldapsearch -b dc=pov,dc=pl -h 192.168.1.40 objectclass=*
    version: 1
    dn: ou=users,dc=pov,dc=pl
    objectClass: organizationalUnit
    ou: Users
    Here is ldapclient config:
    [root@mail ~]# ldapclient list
    NS_LDAP_FILE_VERSION= 2.0
    NS_LDAP_SERVERS= 192.168.1.40
    NS_LDAP_SEARCH_BASEDN= dc=pov,dc=pl
    NS_LDAP_AUTH= none
    NS_LDAP_CACHETTL= 0
    What am I missing?

    Hi, I'm no exprert but I will try to help you. Are you still working on this?
    This what my stuff looks like:
    # ldapclient list
    NS_LDAP_FILE_VERSION= 2.0
    NS_LDAP_BINDDN= uid=proxyagent,ou=People,dc=deathnote,dc=net
    NS_LDAP_BINDPASSWD= {NS1}ecfa88f3a945c411
    NS_LDAP_SERVERS= 10.0.1.21:389
    NS_LDAP_SEARCH_BASEDN= dc=deathnote,dc=net
    NS_LDAP_AUTH= none
    NS_LDAP_CACHETTL= 0
    NS_LDAP_CREDENTIAL_LEVEL= proxy
    NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=People,dc=deathnote,dc=net
    NS_LDAP_SERVICE_SEARCH_DESC= shadow:ou=People,dc=deathnote,dc=net
    NS_LDAP_SERVICE_SEARCH_DESC= group:ou=People,dc=deathnote,dc=net
    NS_LDAP_SERVICE_AUTH_METHOD= pam_ldap:simple
    [root@light migration]# cat user00.ldif
    dn: uid=user00,ou=People,dc=deathnote,dc=net
    uid: user00
    cn: user00
    objectClass: account
    objectClass: posixAccount
    objectClass: shadowAccount
    objectClass: top
    loginShell: /bin/bash
    uidNumber: 805
    gidNumber: 501
    homeDirectory: /home/user00
    gecos: ldap user
    Also update you hosts file and add your server to the domain.
    I hope this helps.
    Edited by: CyberNinja on Oct 22, 2011 12:37 PM

  • Why the LDAP server does not accept any connection upon the installation of iPlanet Application Server Enterprise Edition 6.0 Test Drive Phase II

    "I am carrying my tests under W2000 with all the default installation options. I've checked the user ID (admin), password and port are correct. However, I was not able to start the Netscape Console and also, the kregedit exited with messages:
    Could not connect to LDAP server on cr7260et017 port 389 as user cn=Directory Manager: Can't contact LDAP server
    GXBindInit: GXBindBasic failed
    GXContextInit: GXBindInit failed 2
    [18/Jan/2002 13:56:48:3] error: ENGINE-context_init_failed: EngineClassSpace ContextModule.createContextInit failed:
    error: could not get context
    *** Errors in initialization from registry ***
    Errors in initialization, exiting ..."
    (previously submitted to Portal Services/Wireless)

    Hi,
    I'm not sure if there are known issues with iAS test drive and Windows 2000 howevere I would like to help you in cracking the error.
    The GXBIND error appears only when the iAS is not able to communicate with the directory server. In our case, let us proceed by the following...
    1. Check if the directory server is running. Verify this by checking the services and look for an entry for directory server and it must look something like
    "Netscape Directory Server 4.1 (machine name)" and the status is started.
    2. Next, if you are not able to start the console of directory server, then you must check if the directory administrative server is running. This is also verified with the services and look for the entry...
    "Netscape Administration Server 4.2" and the status is started.
    3. Next, if both of the above are running, then you need to login to directory server console by using cn=Directory Server and issuing the password. If you are able to login successfully then, iAS will work, if not, then rectify the problem with directory server and I'm sure iAS will work.
    4. If you have forgotten the password for cn=Directory Manager, then there is a work around for fixing the password in directory server and iAS.
    Please let the outcome once you have done this.
    Regards
    Raj

  • Getting LDAP server name?

    How can I find the LDAP server name and port?
    I presume that the first 2 values are LDAP server name and port?
    InitialDirContext ctx = ConnectionUtil.getDefaultDirCtx("host", "port", "orcladmin", "pwd");
    Please help.
    Thanks

    Logon to Portal schema and run the below query:
    select wwsec_oid.get_oid_host "LDAP Host",wwsec_oid.get_oid_port "LDAP Port" from dual;

  • Error : LDAP Server down connecting OID

    Hi friends,
    I have installed Infrastructure 10g, When I try to connect to OID it says LDAP server is downand not running.
    Earlier, I added one server with name as my system name and it worked and today it is not working. I want to know Where this LDAP server is and hw we can start it.

    Hi friends,
    I have installed Infrastructure 10g, When I try to connect to OID it says LDAP server is downand not running.
    Earlier, I added one server with name as my system name and it worked and today it is not working. I want to know Where this LDAP server is and hw we can start it.

  • Advantaged of SUN LDAP Server over OID

    Hi all,
    Can any body tell me the use of SUN LDAP Server instead of Oracle Directory Server......What all advantages we have to use SUN LDAP Server instead of OID....
    Regards
    Kumar

    If no one tells you can assume there is no advantage, simple.

  • Adding LDAP-server (OID) to Cloud Control

    Hi ,
    we have installed the LDAP-server (Oracle Fusion Middleware) on a host without the WebLogic - therefore it's just the LDAP-server running on that host.
    Now we would like to add the LDAP-server as a target to the Cloud Control - but haven't found a way to do that through the GUI (when using the GUI you always need to add informations about the WebLogic, e.g. Domain, ...).
    Is it possible just to add the LDAP-server to the Cloud Control?
    Any help will be appreciated!
    Rgds
    Jan

    HI VivaLaVida,
    Please take a look at the following EM12c documentation:
    http://docs.oracle.com/cd/E24628_01/doc.121/e24473/security.htm#BABGAGIJ
    You can connect EM12c with the following authentication systems:
    •Oracle Access Manager (OAM) SSO
    •Repository-Based Authentication
    •SSO-Based Authentication
    •Enterprise User Security Based Authentication
    •LDAP Authentication Options: Oracle Internet Directory and Microsoft Active Directory
    for OID there are non-GUI configuration methods:
    http://docs.oracle.com/cd/E24628_01/doc.121/e24473/security.htm#autoId12

  • Problem OIM OID Ldap Sync Configuration in 11g.

    Hi Team,
    I am doing OIM and OID LDAP Sync configuration There It is failed in "Configuration Process" Step.
    and also in weblogic OIM Maganaged server in ADMIN mode not in running mode.
    please find the both logs.
    *********************************Weblogic Logs**********************************************
    Enter username to boot WebLogic server:weblogic
    Enter password to boot WebLogic server:
    <28-Sep-2012 14:07:44 o'clock BST> <Info> <Management> <BEA-141107> <Version: We
    bLogic Server 10.3.5.0 Fri Apr 1 20:20:06 PDT 2011 1398638 >
    <28-Sep-2012 14:07:47 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Serve
    r state changed to STARTING>
    <28-Sep-2012 14:07:47 o'clock BST> <Info> <WorkManager> <BEA-002900> <Initializi
    ng self-tuning thread pool>
    <28-Sep-2012 14:07:48 o'clock BST> <Notice> <Log Management> <BEA-170019> <The s
    erver log file E:\Oracle\Middleware\user_projects\domains\IAM_domain\servers\oim
    server1\logs\oimserver1.log is opened. All server side log events will be writ
    ten to this file.>
    28-Sep-2012 14:07:56 oracle.security.am.common.nap.util.NAPLogger log
    SEVERE: Failed to communicate with any of configured Access Server, ensure that
    it is up and running.
    <28-Sep-2012 14:07:57 o'clock BST> <Notice> <Security> <BEA-090082> <Security in
    itializing using security realm myrealm.>
    <28-Sep-2012 14:08:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Serve
    r state changed to STANDBY>
    <28-Sep-2012 14:08:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Serve
    r state changed to STARTING>
    <28-Sep-2012 14:08:20 o'clock BST> <Warning> <oracle.jps.upgrade> <JPS-06003> <C
    annot migrate credential folder/key ADF/anonymous#oimBpelCredKey.Reason oracle.s
    ecurity.jps.service.credstore.CredentialAlreadyExistsException: JPS-01007: The c
    redential with map ADF and key anonymous#oimBpelCredKey already exists..>
    <28-Sep-2012 14:08:21 o'clock BST> <Warning> <oracle.adf.share.ADFContext> <BEA-
    000000> <Automatically initializing a DefaultContext for getCurrent.
    Caller should ensure that a DefaultContext is proper for this use.
    Memory leaks and/or unexpected behaviour may occur if the automatic initializati
    on is performed improperly.
    This message may be avoided by performing initADFContext before using getCurrent
    To see the stack trace for thread that is initializing this, set the logging lev
    el of oracle.adf.share.ADFContext to FINEST>
    <28-Sep-2012 14:08:24 o'clock BST> <Error> <Deployer> <BEA-149205> <Failed to in
    itialize the application 'oim [Version=11.1.1.3.0]' due to error oracle.iam.plat
    form.utils.OIMAppInitializationException:
    OIM application intialization failed because of the following reasons:
    oim-config.xml was not found in MDS Repository.
    Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
    Password for OIMSchemaPassword is not seeded in CSF.
    Password for xell is not seeded in CSF.
    Password for DataBaseKey is not seeded in CSF.
    Password for JMSKey is not seeded in CSF.
    Password for .xldatabasekey is not seeded in CSF.
    Password for default-keystore.jks is not seeded in CSF.
    Password for SOAAdminPassword is not seeded in CSF.
    oracle.iam.platform.utils.OIMAppInitializationException:
    OIM application intialization failed because of the following reasons:
    oim-config.xml was not found in MDS Repository.
    Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
    Password for OIMSchemaPassword is not seeded in CSF.
    Password for xell is not seeded in CSF.
    Password for DataBaseKey is not seeded in CSF.
    Password for JMSKey is not seeded in CSF.
    Password for .xldatabasekey is not seeded in CSF.
    Password for default-keystore.jks is not seeded in CSF.
    Password for SOAAdminPassword is not seeded in CSF.
    at oracle.iam.platform.utils.OIMAppInitializationListener.preStart(OIMAp
    pInitializationListener.java:145)
    at weblogic.application.internal.flow.BaseLifecycleFlow$PreStartAction.r
    un(BaseLifecycleFlow.java:282)
    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate
    dSubject.java:321)
    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:
    120)
    at weblogic.application.internal.flow.BaseLifecycleFlow$LifecycleListene
    rAction.invoke(BaseLifecycleFlow.java:199)
    Truncated. see log file for complete stacktrace
    Caused By: oracle.iam.platform.utils.OIMAppInitializationException:
    OIM application intialization failed because of the following reasons:
    oim-config.xml was not found in MDS Repository.
    Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
    Password for OIMSchemaPassword is not seeded in CSF.
    Password for xell is not seeded in CSF.
    Password for DataBaseKey is not seeded in CSF.
    Password for JMSKey is not seeded in CSF.
    Password for .xldatabasekey is not seeded in CSF.
    Password for default-keystore.jks is not seeded in CSF.
    Password for SOAAdminPassword is not seeded in CSF.
    at oracle.iam.platform.utils.OIMAppInitializationListener.preStart(OIMAp
    pInitializationListener.java:145)
    at weblogic.application.internal.flow.BaseLifecycleFlow$PreStartAction.r
    un(BaseLifecycleFlow.java:282)
    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate
    dSubject.java:321)
    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:
    120)
    at weblogic.application.internal.flow.BaseLifecycleFlow$LifecycleListene
    rAction.invoke(BaseLifecycleFlow.java:199)
    Truncated. see log file for complete stacktrace
    >
    <28-Sep-2012 14:08:24 o'clock BST> <Warning> <Munger> <BEA-2156203> <A version a
    ttribute was not found in element application in the deployment descriptor in E:
    \Oracle\Middleware\Oracle_IDM1\server\apps\spml-xsd.ear/META-INF/application.xml
    . A version attribute is required, but this version of the Weblogic Server will
    assume that the JEE5 is used. Future versions of the Weblogic Server will reject
    descriptors that do not specify the JEE version.>
    <28-Sep-2012 14:08:24 o'clock BST> <Warning> <Munger> <BEA-2156203> <A version a
    ttribute was not found in element application in the deployment descriptor in E:
    \Oracle\Middleware\user_projects\domains\IAM_domain\servers\oim_server1\tmp\_WL_
    user\spml-xsd\s8d2b9/META-INF/application.xml. A version attribute is required,
    but this version of the Weblogic Server will assume that the JEE5 is used. Futur
    e versions of the Weblogic Server will reject descriptors that do not specify th
    e JEE version.>
    <28-Sep-2012 14:08:24 o'clock BST> <Emergency> <Deployer> <BEA-149259> <Server '
    oim_server1' in cluster 'OIM_Cluster' is being brought up in administration stat
    e due to failed deployments.>
    Loading xalan.jar for XPathAPI.
    14:08:30 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] -
    ----------------- NEXAWEB SERVER LICENSE ------------------
    - Customer ID : 122
    - License type : Enterprise
    - Max unique IPs : unlimited
    - Max XUL sessions : unlimited
    - Max CPUs/server : unlimited
    - Clustering allowed : true
    - Expiration date : none
    Nexaweb Technologies Inc.(C)2000-2004. All Rights Reserved.
    Nexaweb Technologies Inc.
    10 Canal Park
    Cambridge, MA 02141
    Tel: 617.577.8100. Email: [email protected]
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Clustering is OFF.
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Servlet Engine: WebLogic Server 10.3.5.0 Fri Apr 1 20:20:06 PD
    T 2011 1398638 Oracle WebLogic Server Module Dependencies 10.3 Thu Mar 3 14:37:5
    2 PST 2011 Oracle WebLogic Server on JRockit Virtual Edition Module Dependencies
    10.3 Thu Feb 3 16:30:47 EST 2011
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Servlet API Version: 2.5
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Nexaweb Server Info = Nexaweb Server 3.3.1072
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Nexaweb Server initialized successfully.
    <28-Sep-2012 14:08:34 o'clock BST> <Notice> <Log Management> <BEA-170027> <The S
    erver has established connection with the Domain level Diagnostic Service succes
    sfully.>
    <28-Sep-2012 14:08:34 o'clock BST> <Notice> <Cluster> <BEA-000197> <Listening fo
    r announcements from cluster using unicast cluster messaging>
    <28-Sep-2012 14:08:34 o'clock BST> <Notice> <Cluster> <BEA-000133> <Waiting to s
    ynchronize with other running members of OIM_Cluster.>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "Defa
    ult[2]" is now listening on 127.0.0.1:14000 for protocols iiop, t3, CLUSTER-BROA
    DCAST, ldap, snmp, http.>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "Defa
    ult[3]" is now listening on 0:0:0:0:0:0:0:1:14000 for protocols iiop, t3, CLUSTE
    R-BROADCAST, ldap, snmp, http.>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "Defa
    ult[1]" is now listening on fe80:0:0:0:0:5efe:a2f:f22a:14000 for protocols iiop,
    t3, CLUSTER-BROADCAST, ldap, snmp, http.>
    <28-Sep-2012 14:09:04 o'clock BST> <Warning> <Server> <BEA-002611> <Hostname "UK
    SHWTOAP03A.skandia.co.uk", maps to multiple IP addresses: 10.47.242.42, 0:0:0:0:
    0:0:0:1>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "Defa
    ult" is now listening on 10.47.242.42:14000 for protocols iiop, t3, CLUSTER-BROA
    DCAST, ldap, snmp, http.>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000330> <Start
    ed WebLogic Managed Server "oim_server1" for domain "IAM_domain" running in Prod
    uction Mode>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Serve
    r state changed to ADMIN>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000360> <Serve
    r started in ADMIN mode>
    **********************************OIM OID Ldap Sync Configuration Logs****************************
    [2012-09-28T14:49:11.171+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [[
    [OIM_CONFIG] Updating Ldap Sync Configuration
    [2012-09-28T14:49:11.171+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: configurationLdap] ENTRY
    [2012-09-28T14:49:11.171+01:00] [as] [TRACE] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: oracle.as.install.oim.config.util.LdapSync] [SRC_METHOD: configurationLdap] Create the Database connection
    [2012-09-28T14:49:11.171+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: createDBConnection] ENTRY
    [2012-09-28T14:49:11.296+01:00] [as] [TRACE] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: oracle.as.install.oim.config.util.LdapSync] [SRC_METHOD: configurationLdap] isLIBOVD:true
    [2012-09-28T14:49:11.312+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: closeDBConnection] ENTRY
    [2012-09-28T14:49:11.312+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: closeDBConnection] RETURN
    [2012-09-28T14:49:11.312+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: configurationLdap] RETURN
    [2012-09-28T14:49:11.312+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [[
    Updated LDAP Server Details in mds schema
    [2012-09-28T14:49:11.312+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: configurationLdap] RETURN
    [2012-09-28T14:49:11.812+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [OIM_CONFIG] Updated LDAPContainerRules.xml.
    [2012-09-28T14:49:11.812+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: mdsMetadata] [SRC_METHOD: loadEventhandler] RETURN
    [2012-09-28T14:49:14.687+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [[
    [OIM_CONFIG] Created jobs using seedSchedulerData. Log location C:\Program Files\Oracle\Inventory\logs
    [2012-09-28T14:49:14.687+01:00] [as] [ERROR] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] File not found[[
    java.io.FileNotFoundException: File not found
         at java.util.zip.ZipFile.open(Native Method)
         at java.util.zip.ZipFile.<init>(ZipFile.java:117)
         at java.util.jar.JarFile.<init>(JarFile.java:135)
         at java.util.jar.JarFile.<init>(JarFile.java:72)
         at oracle.as.install.oim.config.util.RoleSODJarUtil.updateFile(RoleSODJarUtil.java:32)
         at oracle.as.install.oim.config.OIMConfigManager.configureOIM(OIMConfigManager.java:783)
         at oracle.as.install.oim.config.OIMConfigManager.doExecute(OIMConfigManager.java:538)
         at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:335)
         at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:87)
         at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:104)
         at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
         at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:63)
         at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:158)
         at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
         at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:83)
         at java.lang.Thread.run(Thread.java:662)
    [2012-09-28T14:49:14.687+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [[
    [OIM_CONFIG] Failed configuration step Configure OIM Server
    [2012-09-28T14:49:14.702+01:00] [as] [ERROR] [] [oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] One or More configurations failed. Exiting
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:CONFIG
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:INTERVIEW
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:INSTALL
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:COPY
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:LINK
    [2012-09-28T14:49:14.765+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Setting valueOf(IS CONFIGURATION SUCCESSFUL) to:false. Value obtained from:USER
    [2012-09-28T15:11:21.461+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine] [tid: 11] [ecid: 0000JcD2jfD9pYjpp0_AiY1GPQHh000002,0] Setting valueOf(IS CONFIGURATION SUCCESSFUL) to:false. Value obtained from:USER
    [2012-09-28T15:11:27.914+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine] [tid: 11] [ecid: 0000JcD2jfD9pYjpp0_AiY1GPQHh000002,0] Setting valueOf(IS CONFIGURATION SUCCESSFUL) to:false. Value obtained from:USER
    Regards,
    Ravi.

    Your log files too give some hint... Please verify whether following files like .xldatabasekey are present in your environment:-
    OIM application intialization failed because of the following reasons:
    oim-config.xml was not found in MDS Repository.
    Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
    Password for OIMSchemaPassword is not seeded in CSF.
    Password for xell is not seeded in CSF.
    Password for DataBaseKey is not seeded in CSF.
    Password for JMSKey is not seeded in CSF.
    Password for .xldatabasekey is not seeded in CSF.
    Password for default-keystore.jks is not seeded in CSF.
    Password for SOAAdminPassword is not seeded in CSF.
    I doubt whether OIM is properly installed in your environment otherwise .xldatabasekey would have been present in <DOMAIN_HOME>/config/fmwconfig..
    Also, as far as Weblogic starting in ADMIN mode is concerned, you may try to do the following...
    ps -eaf| grep AdminServer
    Kill the process
    Then remove the lok file. i.e. Lock files...
    rm -rf /home/oracle/Oracle/Middleware/user_projects/domains/oimdomain/servers/oim_server1/tmp/*oim_server1.lok*
    rm -rf /home/oracle/Oracle/Middleware/user_projects/domains/oimdomain/servers/soa_server1/tmp/*soa_server1.lok*
    rm -rf /home/oracle/Oracle/Middleware/user_projects/domains/oimdomain/servers/AdminServer/tmp/*AdminServer.lok*
    After that
    Take the backup of /home/oracle/Oracle/Middleware/user_projects/domains/<DOMAIN_HOME>/servers/AdminServer/data/ldap/ldapfiles (I mean CUT this folder and save it in Backup folder..
    Share the result with us....

  • Monitoring status of OID Integration Server

    Does anyone know anything about the best practices of monitoring the status of OID integration server. I'm writing a small plugin for Nagios and I was hoping to be able to pull a single attribute out of LDAP that tells me the status of Integration server. We have it running against iPlanet, and we need to make sure it's always in sync (and when it's not, notification is sent.)
    Is this what the attribute orclodipinstancestatus does? Anyone have any info on the possible values of this (I presume 1 means everything is OK, although this may be the wrong attribute.)
    I could just look at the odi/log/AGENTNAME.trc file, but if OID Manager can see the status (sync success or failure) I'm pretty sure it's some value in ldap... somewhere...

    I'll answer my own question... I believe this should do the trick.
    Using ldapsearch:
    ldapsearch -h localhost -D "<SOME ADMIN USER>" -w <PASSWORD> -b "orclodipagentname=<AGENT NAME>, cn=subscriber profile,cn=changelog subscriber,cn=oracle internet directory" -s sub "objectclass=*"
    A nice text attribute:
    orclodipsynchronizationstatus=Synchronization Successful
    reveals the status.

  • Setting up OID/LDAP with SQL Developer?

    I have over 100 databases to add to SQL Developer. I use OID and would like to allowd SQL Developer use that. How do I set it up? Parameter file somewhere?

    I have installed SQL Developer on my laptop (windows XP pro), and we have LDAP server and other database servers on unix. I have done following and is working for me using OID/LDAP 9.2.0.7.
    TO use OID based name resolution,
    copy ojdbc14.jar from ORACLE_HOME(10.x) /jdbc/lib (windows client)
    to /<SQL Developer home>/jdev/lib/patches
    Hope this helps.

Maybe you are looking for