install oca

8/2/2019 Install OCA

1/54

Skip Headers

Oracle Application Server InstallationGuide10 g (10.1.4.0.1) for Solaris Operating System(x86) and Solaris Operating System (x86-64)Part Number B32091-01

Home Contents Index

View PDF

4 Installing OracleAS Infrastructure

This chapter contains the following sections:

Table 4-1 Contents of This Chapter

Topics Procedures

Section 4.1, "Infrastructure InstallationTypes"

Section 4.2, "Why Would I Select theDifferent Infrastructure InstallationTypes?"

Section 4.3, "Order of Installation for the Infrastructure"

Section 4.4, "Can I Install Components on SeparateComputers?"

Section 4.5, "Tips for Installing OracleIdentity Management ComponentsSeparately"

Section 4.6, "Do I Need the OracleDelegated Administration Services or the Oracle Directory IntegrationPlatform Components?"

Section 4.7, "Can I ConfigureComponents After Installation?"

Section 4.8, "Can I Use an ExistingDatabase for the OracleAS MetadataRepository?"

Section 4.9, "Can I Use an ExistingOracle Internet Directory?"

Section 4.10, "Registration of OracleAS Metadata Repository inOracle Internet Directory andPassword Randomization"

Section 4.11, "Contents of the

Section 4.20, "InstallingOracleAS Infrastructure"

Section 4.21, "InstallingOracleAS Infrastructure

Against an Existing OracleInternet Directory"

Section 4.22, "InstallingOracleAS Metadata Repositoryin a New Database"

Section 4.23, "Installing OracleIdentity ManagementComponents Only (IncludingOracle Internet Directory)"

Section 4.24, "Installing OracleIdentity ManagementComponents Only (ExcludingOracle Internet Directory)"

Section 4.25, "Installing OracleInternet Directory Only"

Section 4.26, "Installing OCAand OracleAS MetadataRepository Only"

Section 4.27, "Install Fragment: The First Few Screens of theInstallation"

Section 4.28, "Install Fragment: The Last Few Screens of theInstallation"

Section 4.29, "Install Fragment:

PreviousNext
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BEGINhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091.pdfhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJJGBAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJJGBAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJEDHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJEDHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFIHBDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFIHBDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFIHBDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFIHBDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJDIIAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJDIIAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJDIIAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABHGBDJhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABHGBDJhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGJGFGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGJGFGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFJBHAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJJDJEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJJDJEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJJDJEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/oid.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/index.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/toc.htmhttp://docs.oracle.com/cd/B32265_01/index.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091.pdfhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJJGBAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJJGBAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJEDHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJEDHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFIHBDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFIHBDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFIHBDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJDIIAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJDIIAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJDIIAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABHGBDJhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABHGBDJhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGJGFGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGJGFGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFJBHAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJJDJEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJJDJEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJJDJEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BEGIN


2/54

Topics Procedures

OracleAS Metadata Repository" Section 4.12, "Can I Use Multiple

Metadata Repositories?" Section 4.13, "What High Availability

Options Does Oracle ApplicationServer Support?"

Section 4.14, "Restrictions on thePasswords for the SYS, SYSTEM,SYSMAN, and DBSNMP Users"

Section 4.15, "Support for NE8ISO8859P10 andCEL8ISO8859P14 Characters Sets"

Section 4.16, "What Do I Enter in the"Specify Namespace in InternetDirectory" Screen?"

Section 4.17, "How to Determine Port Numbers Used by Components"

Section 4.18, "Can I Add OCA After Installation?"

Section 4.19, "How to Deploy OracleDelegated Administration Services ona Separate Host"

Database Screens" Section 4.30, "Install Fragment:

OCA Screens"

4.1 Infrastructure Installation Types

Infrastructure components can be grouped into Oracle Identity Managementcomponents and the OracleAS Metadata Repository component. Table 4-2 describes these components:

Table 4-2 OracleAS Infrastructure Components

InfrastructureComponents Description

Oracle IdentityManagementcomponents

These components provide directory, security, and user management functionality. Some of these components haveschemas in the OracleAS Metadata Repository.

Oracle Internet Directory OracleAS Single Sign-On Oracle Delegated Administration Services
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFJBHAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDEEFAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDEEFAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDGIDGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDGIDGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDGIDGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJAFFEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJAFFEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJAFFEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CFHHECJAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CFHHECJAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CFHHECJAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEIEHChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEIEHChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDCAHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDCAHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDCAHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFDIGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFDIGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFJBHAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDEEFAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDEEFAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDGIDGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDGIDGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDGIDGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJAFFEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJAFFEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJAFFEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CFHHECJAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CFHHECJAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CFHHECJAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEIEHChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEIEHChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDCAHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDCAHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDCAHDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFDIGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFDIGC


3/54

InfrastructureComponents Description

Oracle Directory Integration Platform

OracleAS Certificate Authority

OracleAS MetadataRepository

OracleAS Metadata Repository is a collection of schemasused by other Oracle Application Server components. Theschemas can be grouped into these categories:

Product metadata Oracle Identity Management metadata Management metadata

See Section 4.11, "Contents of the OracleAS MetadataRepository" for details.

When you install the infrastructure, the installer asks if you want to install theOracle Identity Management components, OracleAS Metadata Repository, or both.These are the installation types for the OracleAS Infrastructure:

Oracle Identity Management and OracleAS Metadata Repository Oracle Identity Management OracleAS Metadata Repository

In addition to the components listed in Table 4-2 , when you install the OracleASInfrastructure, you also get the Oracle HTTP Server, Oracle Containers for J2EE,and Oracle Enterprise Manager 10 g components. These components are alwaysinstalled and configured, regardless of which installation type you selected.

See the next section, Section 4.2, "Why Would I Select the Different InfrastructureInstallation Types?"

4.2 Why Would I Select the Different InfrastructureInstallation Types?

By separating the infrastructure into Oracle Identity Management components andOracleAS Metadata Repository, the installer enables you to install the OracleASInfrastructure components over multiple computers. For example, you can installthe OracleAS Metadata Repository on one computer, and the Oracle IdentityManagement components on another computer. Within the Oracle IdentityManagement option, you can install Oracle Identity Management components over multiple computers as well.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFJBHAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFJBHAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFDIGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFJBHAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDFJBHAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFDIGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDGIHGF


4/54

These options also enable you to create a new database or use an existingdatabase for the OracleAS Metadata Repository. Selecting either the "OracleASMetadata Repository" or the "OracleAS Metadata Repository and Oracle IdentityManagement" option causes the installer to create a new database and populate itwith the OracleAS Metadata Repository.

To use an existing database, see Section 4.8, "Can I Use an Existing Database for the OracleAS Metadata Repository?"

4.3 Order of Installation for the Infrastructure

If you plan to install both OracleAS Metadata Repository and Oracle IdentityManagement components on the same computer, select the "Oracle IdentityManagement and OracleAS Metadata Repository" option. The installer installs thecomponents in the proper order. See Section 4.20, "Installing OracleASInfrastructure" for the step-by-step procedure.

If you plan to install the infrastructure components on separate computers, installthem in this order:

1. Install the OracleAS Metadata Repository.

You can have the installer create a new database and populate it with theOracleAS Metadata Repository, or you can run the Oracle ApplicationServer Repository Creation Assistant to install the OracleAS MetadataRepository in an existing database.

Note that you cannot register the OracleAS Metadata Repository withOracle Internet Directory at this point, because you do not have an OracleInternet Directory yet. The registration is done in the next step.

See:

Section 4.22, "Installing OracleAS Metadata Repository in a NewDatabase"For information on how to install the OracleAS Metadata Repositoryin an existing database, see the Oracle Application Server MetadataRepository Creation Assistant User's Guide .

2. Install the Oracle Identity Management components.

The installer prompts you to enter the connect information for the OracleASMetadata Repository database.

See Section 4.23, "Installing Oracle Identity Management Components Only(Including Oracle Internet Directory)" for the step-by-step procedure.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDEEGBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADB


5/54

The installer registers the OracleAS Metadata Repository with the newlycreated Oracle Internet Directory. See Section 4.10, "Registration of OracleAS Metadata Repository in Oracle Internet Directory and PasswordRandomization" for details about registration.

Installing Only the OracleAS Metadata Repository Does Not Give You anOracle Application Server Instance

If you install only the OracleAS Metadata Repository when installing theinfrastructure, the installer creates a new database and populates it with theOracleAS Metadata Repository schemas. This instance is different from other Oracle Application Server instances in the following ways:

The installer does not prompt you to name this Oracle Application Server instance.

At the end of installation, Oracle Enterprise Manager 10 g Application Server

Control is not started up, because it is not configured for this instance. Youdo not need it to manage this instance, which consists of only the metadatarepository database.

To manage this instance, you use database management tools. For moreinformation, see the chapter "Introduction to Administration Tools" inthe Oracle Application Server Administrator's Guide .

At the end of installation, Oracle HTTP Server is also not started up,because you do not need it to manage this instance.

4.4 Can I Install Components on Separate Computers?You already know that you can install Oracle Application Server instances onseparate computers. In addition, you can also distribute components over multiplecomputers. This is especially useful for infrastructure components. You might wantto do this to improve performance, security, scalability, and availability of infrastructure services.

Examples:

The OracleAS Infrastructure uses an Oracle database to contain the

OracleAS Metadata Repository. You can install this database on its owncomputer. You can install the Oracle Identity Management components in the

infrastructure on one or more computers.

Table 4-3 shows some possible OracleAS Infrastructure configurations:

Table 4-3 OracleAS Infrastructure Configurations
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABCBIEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDCHEEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABCBIED


6/54

Configuration Description / How to Install

Description of the illustration infra_simple.gif

In this configuration, the OracleASMetadata Repository and the OracleIdentity Management components runfrom the same Oracle home.

To install this configuration, install theOracleAS Metadata Repository andthe Oracle Identity Managementcomponents at the same time. For installation steps, see Section 4.20,"Installing OracleAS Infrastructure" .

Description of the illustration infra_mr_im.gif

In this configuration, the OracleASMetadata Repository and the OracleIdentity Management components run

on separate computers.

To install this configuration:

1. Install the OracleAS MetadataRepository first. See Section4.22, "Installing OracleASMetadata Repository in a NewDatabase" .

Alternatively, you can installthe OracleAS MetadataRepository in an existingdatabase. See the Oracle

Application Server MetadataRepository Creation Assistant User's Guide for details.

2. Then install the Oracle IdentityManagement components.

See Section 4.23, "InstallingOracle Identity ManagementComponents Only (IncludingOracle Internet Directory)" .
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_simple.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_mr_im.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_simple.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_mr_im.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAADB


7/54


Description of the illustration

infra_mr_im_oid.gif

In this configuration, the OracleASMetadata Repository runs on onecomputer, Oracle Internet Directoryruns on a second computer, and theremaining Oracle IdentityManagement components run on athird computer.


1. Install the OracleAS MetadataRepository first. See Section4.22, "Installing OracleASMetadata Repository in a NewDatabase" .

Alternatively, you can installthe OracleAS MetadataRepository in an existingdatabase. See the Oracle

Application Server MetadataRepository Creation Assistant User's Guide for details.

2. Install Oracle InternetDirectory. See Section 4.25,"Installing Oracle InternetDirectory Only" .

3. Install the remaining OracleIdentity Managementcomponents. See Section 4.24,"Installing Oracle IdentityManagement ComponentsOnly (Excluding Oracle Internet Directory)" .
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_mr_im_oid.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_mr_im_oid.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_mr_im_oid.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_mr_im_oid.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIB


8/54


Description of the illustration infra_oca.gif

In this configuration, you want OCA touse its own OracleAS MetadataRepository (for security reasons).Other Oracle Identity Managementcomponents use another OracleASMetadata Repository.


1. Install OracleAS MetadataRepository and Oracle IdentityManagement components, butnot OCA.

You can install all these itemsin the same Oracle home (seethe first configuration), or youcan distribute them. The figureshows a distributedconfiguration.

2. Install OCA with its ownOracleAS MetadataRepository. See Section 4.21,"Installing OracleASInfrastructure Against anExisting Oracle InternetDirectory" .

Note that if you install Oracle Identity Management components on a separatecomputer from OracleAS Metadata Repository, then the OracleAS MetadataRepository will need network access to the Oracle Identity Managementcomponents.

See also Chapter 1, "Product and Installation Overview" , which describesconfigurations involving multiple computers and distributed components.

4.5 Tips for Installing Oracle Identity ManagementComponents Separately
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_oca.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/topo.htm#BABIAFAHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/infra_oca.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/topo.htm#BABIAFAH


9/54

If you are installing Oracle Identity Management components separately, keep thefollowing guidelines in mind when choosing which components to configure in theSelect Configuration Options screen:

You cannot install and configure more than one OCA against the same

OracleAS Metadata Repository. You can install and configure more thanone OracleAS Single Sign-On, Oracle Delegated Administration Services, or Oracle Directory Integration Platform against the same OracleAS MetadataRepository. If you want to configure more than one Oracle Internet Directoryagainst the same OracleAS Metadata Repository, see the Oracle Internet Directory Administrator's Guide .

You must select at least one component to configure. Otherwise theinstallation will not succeed.

If you configure OracleAS Single Sign-On and Oracle Delegated Administration Services in separate installations against the same OracleInternet Directory, make sure you configure OracleAS Single Sign-On

before Oracle Delegated Administration Services. This is because OracleDelegated Administration Services depends on mod_osso, which will not beset up during installation unless the Oracle Internet Directory it points toalready has OracleAS Single Sign-On configured.

If you have an Oracle Identity Management installation that includes OracleDirectory Integration Platform but does not include Oracle Internet Directory,you will still see an Oracle Internet Directory process in the opmnctlstatus output. This is because oidmon must be installed and started inorder to start the Oracle Directory Integration Platform process.

4.6 Do I Need the Oracle Delegated Administration Servicesor the Oracle Directory Integration Platform Components?These components are optional, but you might want to install them because theyprovide the following services:

Oracle Delegated Administration Services provide a browser-basedinterface to Oracle Internet Directory. Users can use the interface to performtasks such as changing their passwords, searching for other users in thedirectory, and creating groups. Users can even create additional users (if they have the proper privilege).

Oracle Directory Integration Platform enables you to integrate applicationsand third-party LDAP directories with Oracle Internet Directory. You can useOracle Directory Integration Platform to synchronize data in all directories,and to send notifications to applications when data in Oracle InternetDirectory changes (for example, when you add users or groups to OracleInternet Directory).

4.7 Can I Configure Components After Installation?


10/54

If you did not configure a component during installation (that is, you did not selectthe component in the Select Configuration Options screen), you can configuresome components after installation.

You cannot configure Oracle Internet Directory after installation. You need to install

and configure Oracle Internet Directory through the installer.See Section 11.7, "Component Configuration After Installation" for details.

4.8 Can I Use an Existing Database for the OracleASMetadata Repository?

You can install the OracleAS Metadata Repository in a new database, or in anexisting database.

If you want to install the OracleAS Metadata Repository in an existing database,see Oracle Application Server Metadata Repository Creation Assistant User'sGuide for details.

4.9 Can I Use an Existing Oracle Internet Directory?

You can use an existing Oracle Internet Directory instead of having the installer create a new one. You might want to do this if your applications need toauthenticate users that are already stored in your Oracle Internet Directory. Duringthe infrastructure installation, do not select "Oracle Internet Directory" in the SelectConfiguration Options screen.

You need to provide the connect information (hostname, port, username,password) for the existing Oracle Internet Directory.

The Oracle Internet Directory must be version 9.0.4 or later. Note that OracleInternet Directory version 9.2.x is not supported.

To determine the Oracle Internet Directory version, make sure that Oracle InternetDirectory is up and running. Then run the following command:

prompt> oidldapd -version

The oidldapd command can be found in the ORACLE_HOME/bin directory,where ORACLE_HOME is the root directory where you installed Oracle InternetDirectory.

4.10 Registration of OracleAS Metadata Repository in OracleInternet Directory and Password Randomization
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/post.htm#BABJJIJEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/post.htm#BABJJIJEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm


11/54

The OracleAS Metadata Repository and the Oracle Internet Directory work closelytogether. Before you can use an OracleAS Metadata Repository (in most cases),ensure that it is registered with an Oracle Internet Directory.

An exception to this rule is when you want to use a J2EE and Web Cache middle

tier with the Database-Based Farm feature but without the Oracle IdentityManagement Access feature. In this case, you need an OracleAS MetadataRepository, but it need not be registered with an Oracle Internet Directory.

Table 4-4 shows the scenarios where the installer automatically registers theOracleAS Metadata Repository with an Oracle Internet Directory, and thescenarios where you decide whether to register or not.

Table 4-4 Database Registration Scenarios

Scenario Registration Schema Passwords

Install and configure the OracleASMetadata Repository and Oracle InternetDirectory in the same installation session

For steps, see Section 4.20, "InstallingOracleAS Infrastructure" .

Automatic Randomized

Install the OracleAS Metadata Repositoryagainst an existing Oracle InternetDirectory

See Section 4.21, "Installing OracleASInfrastructure Against an Existing OracleInternet Directory" .

Automatic Randomized

Install an Oracle Internet Directory againstan existing OracleAS MetadataRepository

See Section 4.25, "Installing OracleInternet Directory Only" .

Automatic Randomized (themetadata repositoryschemas are given newrandomized passwords)

Install the OracleAS Metadata Repository

only (without installing Oracle IdentityManagement components) and youchoose to register it with Oracle InternetDirectory

This scenario applies to installing it in anew database or in an existing database.

Yes Randomized
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJAIEBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDJAIEBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJCICEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGChttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEDEGC


12/54

Scenario Registration Schema Passwords

To install OracleAS Metadata Repositoryin a new database, see Section 4.22,"Installing OracleAS Metadata Repositoryin a New Database" .

To install OracleAS Metadata Repositoryin an existing database, see the Oracle

Application Server Metadata Repository Creation Assistant User's Guide .

Install the OracleAS Metadata Repositoryonly (without installing Oracle IdentityManagement components) and youchoose not to register it with Oracle

Internet Directory

This scenario applies to installing it in anew database or in an existing database.

No The schemas are locked,and the passwords areexpired.

In the last two scenarios, the installer asks you if you want to register the OracleASMetadata Repository with an Oracle Internet Directory. If you answer yes, youprovide connect information for the Oracle Internet Directory. If you answer no, theinstaller does not register the OracleAS Metadata Repository with an OracleInternet Directory.

Note:

If you did not register the OracleAS Metadata Repository with anOracle Internet Directory during installation, you can register it later using the Oracle Application Server Repository Creation Assistant.See the Oracle Application Server Metadata Repository Creation

Assistant User's Guide for details.

4.11 Contents of the OracleAS Metadata Repository

The OracleAS Metadata Repository contains schemas that can be grouped intothese categories:

Product Metadata schemas
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm


13/54

These schemas are used by middle-tier components, such as OracleASPortal and OracleAS Wireless.

Oracle Identity Management schemas

These schemas are used by Oracle Identity Management components, suchas Oracle Internet Directory, OracleAS Single Sign-On, and OCA.

Management schemas

These schemas are used by components such as DCM.

If you are interested in seeing the names of all the schemas, see the Oracle Application Server Metadata Repository Creation Assistant User's Guide .

4.12 Can I Use Multiple Metadata Repositories?

You can install multiple metadata repositories to increase performance. Thisenables different components in your topology to use different metadatarepositories. To use multiple metadata repositories, follow these guidelines:

To enable a Portal and Wireless or a Business Intelligence and Formsmiddle tier to use a second metadata repository for product metadata:

a. Install the second metadata repository and register it with the OracleInternet Directory.

You can do this using the installer or the OracleAS RepCA. Use the

installer to create a new database containing the OracleAS MetadataRepository, or use the OracleAS RepCA to install the OracleASMetadata Repository in an existing database. See the Oracle

Application Server Metadata Repository Creation Assistant User'sGuide for details.

b. When you install the Portal and Wireless or the Business Intelligenceand Forms middle tier, select the second metadata repository fromthe list of registered repositories. This is the metadata repository thatthe middle tier will use for its product metadata.

To use a second metadata repository for a J2EE and Web Cache middle

tier, you have different options, depending on which J2EE and Web Cachefeatures you need:

If you need both the Oracle Identity Management Access feature andthe Database-Based Farm feature, you need to register the secondmetadata repository with the Oracle Internet Directory.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm


14/54

If you need only the Database-Based Farm feature, you do not needto register the second metadata repository. The reason for this is thatyou might not have an Oracle Internet Directory.

Figure 4-1 shows a topology that involves two metadata repositories. It uses four

computers: Computer 1 runs a metadata repository and Oracle Identity Management

components. The Oracle Identity Management components use thismetadata repository.

Computer 2 has a metadata repository that is registered with the OracleInternet Directory running on Computer 1.

Computer 3 has a Portal and Wireless middle tier. This middle tier knows touse the metadata repository on Computer 1 for its product metadatabecause it was registered with that metadata repository during installation.

Computer 4 also has a Portal and Wireless middle tier. This middle tier

knows to use the metadata repository on Computer 2 for its productmetadata because it was registered with that metadata repository duringinstallation.

Figure 4-1 Multiple Metadata Repositories in Use

Description of "Figure 4-1 Multiple Metadata Repositories in Use"

Notes:
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDACEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/multiplemr.htmhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CHDDACEGhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/img_text/multiplemr.htm


15/54

If you are installing multiple metadata repositories on thesame computer, each metadata repository must have aunique global database name and system identifier (SID).

If you are registering multiple metadata repositories with thesame Oracle Internet Directory, each metadata repositorymust have a unique global database name and SID. If not,the Oracle Internet Directory Configuration Assistant will failwhen you install the second metadata repository with thesame name.

4.13 What High Availability Options Does Oracle ApplicationServer Support?

Oracle Application Server can run in the following high availability environments:

OracleAS Cold Failover Cluster OracleAS Cluster (Identity Management) OracleAS Disaster Recovery

See Chapter 7, "Installing in High Availability Environments: Overview" for details.

4.14 Restrictions on the Passwords for the SYS, SYSTEM,SYSMAN, and DBSNMP Users

When you install the OracleAS Metadata Repository in a new database, theinstaller prompts you to set the passwords for the SYS, SYSTEM, SYSMAN, andDBSNMP users, which are privileged users for the database. The passwords for these users have the following restrictions:

Passwords must be shorter than 30 characters. Passwords can contain only alphanumeric characters from your database

character set, the underscore ( _ ), the dollar sign ( $ ), and the number sign(# ).

Passwords must begin with an alphabetic character. Passwords cannotbegin with a number, the underscore ( _ ), the dollar sign ( $ ), or the number sign ( # ).

Passwords cannot be Oracle reserved words. The Oracle SQLReference lists the reserved words. You can find this guide on OracleTechnology Network ( http://www.oracle.com/technology/documentation ). Or you can just avoid using words that sound like they might be reservedwords.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/ha.htm#BGBCJEDJhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/ha.htm#BGBCJEDJhttp://www.oracle.com/technology/documentationhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/ha.htm#BGBCJEDJhttp://www.oracle.com/technology/documentation


16/54

Passwords cannot be the default passwords, whichare change_on_install and manager .

4.15 Support for NE8ISO8859P10 and CEL8ISO8859P14Characters Sets

If you use characters in the NE8ISO8859P10 or CEL8ISO8859P14 character sets,make sure that your database uses the Unicode character set AL32UTF8. If youare installing a new database, select "AL32UTF8" in the Specify DatabaseConfiguration Options screen.

The reason for this is that Java does not support the NE8ISO8859P10 or CEL8ISO8859P14 character sets. If you configure the database to use a character set not supported by Java, you will get an "Unsupported IANA character encoding"error in OracleAS Portal.

4.16 What Do I Enter in the "Specify Namespace in InternetDirectory" Screen?

The distinguished name (DN) that you specify on this screen will be designated asthe namespace in Oracle Internet Directory where users and groups areadministered.

Select the suggested namespace if it meets your deployment requirements. If not,enter a DN that you want in the custom namespace field. The installer determinesthe suggested namespace from the /etc/hosts file. See Section 2.11, "The

/etc/hosts File" .

If you plan to integrate your Oracle Identity Management components with a third-party directory, you should specify the DN of a namespace that matches the DN of the default namespace in the third-party directory. See the Oracle Internet Directory

Administrator's Guide for details on integration with third-party directories.

4.17 How to Determine Port Numbers Used by Components

During installation, you might need to know port numbers used by certain Oracle Application Server components. For example, if you install OracleAS Infrastructureagainst an existing Oracle Internet Directory, the installer prompts for the OracleInternet Directory hostname and port number.

You can get a list of port numbers in the following ways:

Use Oracle Enterprise Manager 10 g Application Server Control.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/reqs.htm#BABBJDFEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/reqs.htm#BABBJDFEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/reqs.htm#BABBJDFEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/reqs.htm#BABBJDFE


17/54

Click the Ports link on the Enterprise Manager home page. This takes you toa page that lists all ports in use and the suggested port ranges for differentcomponents.

Look in

the ORACLE_HOME/install/portlist.ini file. ORACLE_HOMErefers tothe directory containing the Oracle Application Server installation.

Note that if you change a component's port number after installation,the portlist.ini file is not updated. The portlist.ini file is notupdated after installation.

4.18 Can I Add OCA After Installation?

If you installed OracleAS Infrastructure but did not select to configure OCA, andlater decide that you want to use OCA, you have to install it in a separate Oracle

home. You cannot install it in an existing Oracle home.

When you install OCA in a new Oracle home, you can install it on the same or different computer as the OracleAS Infrastructure. You can also install it with itsown OracleAS Metadata Repository or install it against an existing OracleASMetadata Repository:

Install OCA only.

OCA will share the OracleAS Metadata Repository that you installed earlier.If you are installing OCA on the same computer as the OracleAS

Infrastructure instance, you might want to consider this option for performance reasons. (The second option requires running two databaseson the same computer; this could degrade performance.)

See Section 4.24, "Installing Oracle Identity Management Components Only(Excluding Oracle Internet Directory)" for details. In the Select ConfigurationOptions screen, select Oracle Application Server Certificate Authority(OCA) only.

Install OCA with its own OracleAS Metadata Repository.

4.19 How to Deploy Oracle Delegated AdministrationServices on a Separate Host

To configure Oracle Delegated Administration Services in a separate OracleHome, you perform a standalone installation of it. To do this, select the IdentityManagement installation type, and, on the Configuration Options screen, selectDelegated Administration Services.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIB


18/54

4.20 Installing OracleAS Infrastructure

Perform this procedure to install an OracleAS Metadata Repository and OracleIdentity Management components. This procedure provides a complete OracleASInfrastructure in a single Oracle home.

If you want to use an existing Oracle Internet Directory, see Section 4.21,"Installing OracleAS Infrastructure Against an Existing Oracle Internet Directory" .

If you want to use an existing database for the OracleAS Metadata Repository, seethe Oracle Application Server Metadata Repository Creation Assistant User'sGuide .

Table 4-5 Steps for Installing OracleAS Infrastructure

Screen Action

1. -- Start up the installer and complete the first few screens.See Section 4.27, "Install Fragment: The First Few Screensof the Installation" for details.

Notes:

In the Select Installation Type screen, select IdentityManagement and Metadata Repository .

2. SelectConfigurationOptions

Select Oracle Internet Directory .

Select Oracle Application Server Single Sign-On .

Select Oracle Application Server DelegatedAdministration Services .

Select Oracle Directory Integration Platform .

Select Oracle Application Server Certificate Authority(OCA) if you want to configure your own certificate authoritywhich can issue certificates for users and servers.

Do not select High Availability and Replication .

Click Next .

3. Specify PortConfigurationOptions

If you want to use default ports for the components,select Automatic .

If you do not want to use the default ports, and you have
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDBEEDhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFAD


19/54

Screen Action

created a staticports.ini file, select Manual and enter thefullpath to your staticports.ini file.

Click Next .

4. SpecifyNamespace inInternet Directory

Select the suggested namespace, or enter a customnamespace for the location of the default Oracle IdentityManagement realm.

Ensure the value shown in Suggested Namespace meetsyour deployment needs. If not, enter the desired valuein Custom Namespace . See Section 4.16, "What Do I Enter in the "Specify Namespace in Internet Directory" Screen?" .

Click Next .5. OCA screens If you select Oracle Application Server Certificate

Authority (OCA) in the Select Configuration Options screen,the installer displays screens where you need to enter OCAinformation. See Section 4.30, "Install Fragment: OCAScreens" .

6. Oracle Databasescreens

Enter information for the OracleAS Metadata Repositorydatabase. See Section 4.29, "Install Fragment: DatabaseScreens" .

7. Specify InstanceName andias_adminPassword

Instance Name : Enter a name for this infrastructure instance.Instance names can contain alphanumeric characters and the

_ (underscore) character. If you have more than one Oracle Application Server instance on a computer, the instancenames must be unique. See Section 3.5, "Oracle ApplicationServer Instances and Instance Names" for instance namedetails.

Example: infra

ias_admin Password and Confirm Password : Set thepassword for the ias_admin user. This is the administrativeuser for the instance. See Section 3.6, "The ias_admin User and Restrictions on its Password" for restrictions on thepassword.

Example: welcome99

Click Next .
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJH


20/54

Screen Action

8. -- Finish the installation. See Section 4.28, "Install Fragment:The Last Few Screens of the Installation" for details.

4.21 Installing OracleAS Infrastructure Against an ExistingOracle Internet Directory

Perform this procedure to install Oracle Identity Management components (exceptOracle Internet Directory) and the OracleAS Metadata Repository.

Prerequisite: Oracle Internet Directory version 9.0.4 or later

You would perform this procedure in cases where you already have an OracleInternet Directory (and its associated OracleAS Metadata Repository), and youwant to:

Install OCA with its own OracleAS Metadata Repository, or Install another OracleAS Metadata Repository for Oracle Internet Directory

replication.

You cannot use this procedure to install other Oracle Identity Managementcomponents (OracleAS Single Sign-On, Oracle Delegated Administration Services,or Oracle Directory Integration Platform). To install Oracle Identity Managementcomponents without OracleAS Metadata Repository, follow the procedurein Section 4.24, "Installing Oracle Identity Management Components Only(Excluding Oracle Internet Directory)" .

Table 4-6 Steps for Installing OracleAS Infrastructure Against an Existing Oracle Internet Directory

Screen Action


Notes:

In the Select Installation Type screen, select IdentityManagement and Metadata Repository .


Do not select Oracle Internet Directory because you wantto use an existing one.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDJIBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFAD


21/54

Screen Action

Do not select Oracle Application Server Single Sign-On .

Do not select Oracle Application Server DelegatedAdministration Services .

Do not select Oracle Directory Integration Platform .



Click Next .



If you do not want to use the default ports, and you havecreated a staticports.ini file, select Manual and enter thefullpath to your staticports.ini file.

Click Next .

4. Register withOracle InternetDirectory

Hostname : Enter the name of the computer where OracleInternet Directory is running.

SSL Port : Enter the SSL port at which Oracle InternetDirectory is listening. See Section 4.17, "How to DeterminePort Numbers Used by Components" if you do not know theport number.

Click Next .

5. Specify OracleInternet DirectoryLogin

Username : Enter the username to log in to Oracle InternetDirectory. You must log in as a user who belongs to thenecessary groups in Oracle Internet Directory. Which groups

are necessary depends on which components you areinstalling. See Section 5.3, "Groups Required to Configure or Deinstall Components" for details.

Password : Enter the password for the username.

Realm : Enter the realm against which to validate theusername. This field appears only if your Oracle Internet
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/oid.htm#BJECFECFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/oid.htm#BJECFECFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/oid.htm#BJECFECFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/oid.htm#BJECFECF


22/54

Screen Action

Directory has multiple realms.

Click Next .

6. OCA screens If you select Oracle Application Server CertificateAuthority (OCA) in the Select Configuration Options screen,the installer displays screens where you need to enter OCAinformation. See Section 4.30, "Install Fragment: OCAScreens" .

7. Oracle Databasescreens

Enter information for the OracleAS Metadata Repositorydatabase. See Section 4.29, "Install Fragment: DatabaseScreens" .

8. Specify Instance

Name andias_adminPassword

Instance Name : Enter a name for this infrastructure instance.

Instance names can contain alphanumeric characters and the _ (underscore) character. If you have more than one Oracle Application Server instance on a computer, the instancenames must be unique. See Section 3.5, "Oracle ApplicationServer Instances and Instance Names" for instance namedetails.

Example: infra

ias_admin Password and Confirm Password : Set thepassword for the ias_admin user. This is the administrative

user for the instance. See Section 3.6, "The ias_admin User and Restrictions on its Password" for restrictions on thepassword.

Example: welcome99

Click Next .


4.22 Installing OracleAS Metadata Repository in a NewDatabase

Perform this procedure to create a new database and populate it with the OracleASMetadata Repository. This procedure does not install any Oracle IdentityManagement components.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBB


23/54

Table 4-7 Steps for Installing OracleAS Metadata Repository in a New Database

Screen Action

1. -- Start up the installer and complete the first few screens.See Section 4.27, "Install Fragment: The First Few Screens of the Installation" for details.

Notes:

In the Select Installation Type screen, select MetadataRepository .



Click Next .

3. Register OracleASMetadataRepository

If you already have an Oracle Internet Directory and know itsconnect information, select Yes and enter the name of thecomputer where Oracle Internet Directory is running and theport number. See Section 4.17, "How to Determine PortNumbers Used by Components" if you do not know the portnumber.

Use Only SSL Connections with this Oracle InternetDirectory : Select this option if you want Oracle ApplicationServer components to use only SSL to connect to OracleInternet Directory.

If you do not have an Oracle Internet Directory, or do not knowits connect information, select No .

Click Next .

4. Specify OracleInternetDirectory Login

This screen appears only if you selected Yes in the previousscreen.

Username : Enter the username for logging into Oracle InternetDirectory. The user must belong to the iAS Admins group in

Oracle Internet Directory.

Password : Enter the password.

Realm : This field appears only if your Oracle Internet Directorycontains multiple realms. Enter the name of the realm againstwhich to authenticate the user.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIF


24/54

Screen Action

Click Next .

5. Oracle

Databasescreens

Enter information for the OracleAS Metadata Repository

database. See Section 4.29, "Install Fragment: DatabaseScreens" .

6. -- Finish the installation. See Section 4.28, "Install Fragment: TheLast Few Screens of the Installation" for details.

7. -- Unlock the dcm schema, and set its password. This step isrequired only if you want to use the metadata repository for database clustering of middle-tier instances.

1. Set the ORACLE_HOME environment variable to pointto the full path of the directory where you installed theOracleAS Metadata Repository.

2. Set the ORACLE_SID environment variable to the SID of the OracleAS Metadata Repository.

3. Unlock the dcm schema and set its password usingSQL*Plus.

The following alter user command sets the passwordto "welcome1", but you can set it to any value.

prompt> $ORACLE_HOME/bin/sqlplus"sys/ password as sysdba"SQL> alter user dcm identified by welcome1account unlock;

4.23 Installing Oracle Identity Management ComponentsOnly (Including Oracle Internet Directory)

Perform this procedure to install Oracle Identity Management components without

installing an OracleAS Metadata Repository.

Follow this procedure to configure Oracle Internet Directory against a remoteOracleAS Metadata Repository. You have installed the OracleAS MetadataRepository in an existing database (see the Oracle Application Server MetadataRepository Creation Assistant User's Guide ) or in a new database ( Section 4.22,"Installing OracleAS Metadata Repository in a New Database" ).
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFFGGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEIIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABGAEII


25/54

Prerequisite: OracleAS Metadata Repository that is not already registered with anyOracle Internet Directory

Table 4-8 Steps for Installing Oracle Identity Management Components Only (Including Oracle Internet Directory)

Screen Action


Notes:

In the Select Installation Type screen, select OracleIdentity Management .




Select Oracle Application Server Delegated AdministrationServices and/or Oracle Directory Integration Platform if you need the services provided by these components.See Section 4.6, "Do I Need the Oracle Delegated

Administration Services or the Oracle Directory IntegrationPlatform Components?"



Click Next .




Click Next .

4. SpecifyRepository

Username : Enter the username to use to log in to theOracleAS Metadata Repository database. The user must have
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAI


26/54

Screen Action

DBA privileges.

Password : Enter the user's password.

Hostname and Port : Enter the name of the computer wherethe database is running, and the port number at which it islistening. Use the format: host:port .

Service Name : Enter the service name of the database. Notethat the service name must include the database domainname.

Example: orcl.mydomain.com

Click Next .5. Specify

Namespace inInternet Directory



Click Next .

6. Enter informationto configure OCA

Provide the information as prompted by the OCA screens.See Section 4.30, "Install Fragment: OCA Screens" for details.




Example: id_mgmt

ias_admin Password and Confirm Password : Set thepassword for the ias_admin user. This is the administrativeuser for the instance. See Section 3.6, "The ias_admin User and Restrictions on its Password" for restrictions on the
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABEBIAEhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJH


27/54

Screen Action

password.

Example:welcome99

Click Next .


4.24 Installing Oracle Identity Management ComponentsOnly (Excluding Oracle Internet Directory)

Perform this procedure to install Oracle Identity Management components withoutinstalling an OracleAS Metadata Repository or Oracle Internet Directory.

Use this procedure to install additional OracleAS Single Sign-On, Oracle Delegated Administration Services, or Oracle Directory Integration Platform componentsagainst an existing Oracle Internet Directory.

Prerequisites: OracleAS Metadata Repository, Oracle Internet Directory version9.0.4 or later.

Table 4-9 Steps for Installing Oracle Identity Management Components Only

(Excluding Oracle Internet Directory)

Screen Action


Notes:

In the Select Installation Type screen, select Oracle

Identity Management .2. Select

ConfigurationOptions

Do not select Oracle Internet Directory .


Select Oracle Application Server DelegatedAdministration Services and/or Oracle Directory
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFAD


28/54

Screen Action

Integration Platform if you need the services provided bythese components. See Section 4.6, "Do I Need the OracleDelegated Administration Services or the Oracle DirectoryIntegration Platform Components?"



Click Next .

3. Specify Port

ConfigurationOptions

If you want to use default ports for the components,

select Automatic .


Click Next .

4. Register withOracle InternetDirectory

Hostname : Enter the name of the computer where OracleInternet Directory is running.

SSL Port : Enter the SSL port at which Oracle InternetDirectory is listening. See Section 4.17, "How to DeterminePort Numbers Used by Components" if you do not know theport number.

Click Next .

5. Specify OracleInternet DirectoryLogin

Username : Enter the username to log in to Oracle InternetDirectory. You must log in as a user who belongs to thenecessary groups in Oracle Internet Directory. Which groupsare necessary depends on which components you areinstalling. See Section 5.3, "Groups Required to Configure or

Deinstall Components" for details.

Password : Enter the password for the username.

Realm : Enter the realm against which to validate theusername. This field appears only if your Oracle InternetDirectory has multiple realms.
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/oid.htm#BJECFECFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/oid.htm#BJECFECFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABJAIAIhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#CIHEIIIFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/oid.htm#BJECFECFhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/oid.htm#BJECFECF


29/54

Screen Action

Click Next .

6. Specify ODS

Password

Enter the password for the ODS schema in the OracleAS

Metadata Repository. The ODS schema is the main schemaused by Oracle Internet Directory.

By default, the ODS password is the same as the ias_adminpassword (the password that you entered in the SpecifyInstance Name and ias_admin Password screen).

Click Next .

7. Enter informationto configure OCA

Provide the information as prompted by the OCA screens.See Section 4.30, "Install Fragment: OCA Screens" for details.




Example: id_mgmt

ias_admin Password and Confirm Password : Set thepassword for the ias_admin user. This is the administrativeuser for the instance. See Section 3.6, "The ias_admin User and Restrictions on its Password" for restrictions on thepassword.

Example: welcome99

Click Next .

9. -- Finish the installation. See Section 4.28, "Install Fragment:

The Last Few Screens of the Installation" for details.

4.25 Installing Oracle Internet Directory Only

Perform this procedure to install an Oracle Internet Directory.

Prerequisite: OracleAS Metadata Repository
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABECIADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDDGCGAhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/basic.htm#CHDJCIJHhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBBhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABDDFBB


30/54

Table 4-10 Steps for Installing Oracle Internet Directory

Screen Action


Notes:

In the Select Installation Type screen, select IdentityManagement .



Do not select Oracle Application Server Single Sign-On .

Do not select Oracle Application Server DelegatedAdministration Services .

Do not select Oracle Directory Integration Platform .

Do not select Oracle Application Server CertificateAuthority (OCA) .


Click Next .




Click Next .

4. SpecifyRepository

Username : Enter the username to use to log in to theOracleAS Metadata Repository database. The user must have

DBA privileges.

Password : Enter the user's password.

Hostname and Port : Enter the name of the computer wherethe database is running, and the port number at which it islistening. Use the format: host:port .
http://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFADhttp://docs.oracle.com/cd/B32265_01/install.1014/b32091/infra.htm#BABFGFAD


31/54

Screen Action

Service Name : Enter the service name of the database. Notethat the service name must include the database domainname.

Example: orcl.mydomain.com

Click Next .

5. SpecifyNamespace inInternet Directory



Click Next .




Example: infra

ias_admin Password and Confirm Password : Set thepassword for the ias_admin user. This is the administrativeuser for the instance. See Section 3.6, "The ias_admin User and Restrictions on its Password" for re

install oca

Documents