Friday, March 28, 2014

EBS R1213 Integration with OAM 11gR2 and OID 11g with Microsoft AD

Note : This is master Doc for OAM Install , configure , OID Install and configure , AD –Oid sync setup , EBS Integration with OAM .

Reffer the sequence specified in this .Also this doc is prepared from reference note and my labs.

Integrating Oracle E-Business Suite Release 12 with Oracle Access Manager 11gR2 (11.1.2) using Oracle E-Business Suite AccessGate (Doc ID 1484024.1)


1. Install Vanilla DB and migrate to ASM
2. Install JDK on all Boxes (OAM/OID/EBS)
3. Create RCU Schemas for OAM and OID
4. Install WLS for OAM and OID
5. Install and configure OAM
6. Install and configure webgate and ohs on ebs node
7. Install and configure OID
8. Do AD-OID Sync setup
9. Integrate OAM with OID and Setup Policy for EBS Authentication

Note : Till this point its independent of EBS and all above setups should work independently on its own domain functionality.

10. Install weblogic , ADF , Accessgate and perform EBS Integration


Detailed Instruction for these coming shortly on blogggggg

Helpful Documents

Below are the metalink notes used for references


Integrating Oracle E-Business Suite Release 12 with Oracle Access Manager 11gR2 (11.1.2) using Oracle E-Business Suite AccessGate (Doc ID 1484024.1)
Registering Oracle E-Business Suite Release 12 with Oracle Internet Directory 11gR1 and Single Sign-On (Doc ID 1370938.1)
How to Configure or Setup Java External Authentication Plugins in OID 11g (Doc ID 1270329.1)

OID 11gR2 enabling java plugin for AD authentication

Login to your odsm console
1. Login to ODSM ->advanced ->oidexpkg_bind_ad->optional properties

put the value of ad host in host1 field and port value in port 1 field .
Incase you have multiple ad boxes integrated with oid you can define those values in host2 , port2 and so on .

2. Same to be repeated for  
Login to ODSM ->advanced ->oidexpkg_compare_ad


 3.Now validate you ldapbind with ad user 


bind successful


You can also see ML note :
How to Configure or Setup Java External Authentication Plugins in OID 11g (Doc ID 1270329.1)

Weblogic Install 10.3.6

1. Download 64 bit/32 bit  wls software from otn/edelivery for your platform
2.  download jdk (6 update 24 or above) from sun website
3. include jdk in your path
4. execute java -jar wls**.jar
Follow instructions on your screen and it will guide you to completye install .Unselect quick run at last slide and you are done

Changing weblogic password when password is corrupted

a.    Shut down managed and admin server
b.    cd $MW_HOME/user_projects/domains/base_domain/security
c.     Reset the password  using java command .It modifies file DefaultAuthenticatorInit.ldift

java weblogic.security.utils.AdminAccount weblogic   .

  Don’t forget the period “ .” at the end of the above command, it is required.

d. Rename the data directory(s) to data_bak:
$MW_HOME/user_projects/domains/base_domain/server/AdminServer/data/
$MW_HOME/user_projects/domains/base_domain/server/wls_ods1/data/


*This step will remove all existing users/groups from WebLogic’s embedded LDAP server.
f .  Validate you can log in with the weblogic user.

 g .Go to console -> my realms ->lockout properties and make user weblogic no lockout .

11i profile options recently changed

SELECT pot.user_profile_option_name "Profile"
 , DECODE( a.profile_option_value
          , '1', '1 (may be "Yes")'
          , '2', '2 (may be "No")'
          , a.profile_option_value) "Value"
 , DECODE( a.level_id
          , 10001, 'Site'
          , 10002, 'Appl'
          , 10003, 'Resp'
          , 10004, 'User'
          , '????') "Level"
 , DECODE( a.level_id
          , 10002, e.application_name
          , 10003, c.responsibility_name
          , 10004, d.user_name
          , '-') "Location", a.LAST_UPDATE_DATE
FROM applsys.fnd_application_tl e
 , applsys.fnd_user d   , applsys.fnd_responsibility_tl c
 , applsys.fnd_profile_option_values a   , applsys.fnd_profile_options b
 , applsys.fnd_profile_options_tl pot
WHERE pot.profile_option_name = b.profile_option_name
AND UPPER(pot.user_profile_option_name) LIKE UPPER('BNE%')
 AND b.application_id = a.application_id (+)
 AND b.profile_option_id = a.profile_option_id (+)
 AND a.level_value = c.responsibility_id (+)
 AND a.level_value = d.user_id (+)   AND a.level_value = e.application_id(+)
 AND e.LAST_UPDATE_DATE is not null
 --AND( UPPER( e.application_name) LIKE UPPER( 'username%')
 --OR UPPER( c.responsibility_name) LIKE UPPER( 'username%')
 --OR UPPER( d.user_name) LIKE UPPER( '%username%'))
 ORDER BY a.LAST_UPDATE_DATE desc, "Profile", "Level", "Location", "Value";