Wednesday, February 26, 2014

OBIEE 11g(11.1.1.7.0) Installation & Configuration

Pre-requisites: 
  • Windows 2008 Server 64-bit
  • Weblogic Server
  • OBIEE Repository Creation 
Software is available at https://edelivery.oracle.com

Steps:






























Application can be accessible using "http://sp.demo.com:9704/xmlpserver/" and login with weblogic credentials.



OBIEE 11g(11.1.1.7.0) Repository Creation















Sunday, February 23, 2014

Oracle Access Manager(OAM) 11g user not able to login to a protected resource intermittently


Hi All,

Recently I came across a weird intermittent login issue in OAM 11g protected resource when it's integrated with OAAM 11g. 

As far as I know there is only one place(OAM Admin console >> System configuration >> common settings) where we can change the max session timeout. By default, Max session value will be 480 min. I got requirement to change the max session timeout from 8 hrs to 12 hrs. So I just changed the setting accordingly and bounced the services.

After increasing the max timeout setting user is not able to login all of sudden.

After so much struggle i found the pattern of the issue. User will not be able to login starting from 8th hour of user last login and before 12th hour(Essentially, user will not be able to login for period of 4 hrs). Once clock hits 12th hour user can login as usual. 

Then finally after discussing with Oracle support there they provided a fix for this issue.

Here is the solution:

1. On the Admin Server, take a backup of the $DOMAIN_HOME/config/fmwconfig/oam-config.xml
2. Edit the oam-config.xml file, searching for CredentialValidityInterval (this defaults to 480 minutes, or 8 hours)
3. Change this field to match the configured OAM session timeout
4. Find the Version field, eg:

<Setting Name="NotificationLockWait" Type="xsd:integer">20000</Setting>
<Setting Name="Version" Type="xsd:integer">120</Setting>
<Setting Name="DataCenterConfiguration" Type="htf:map">

and increment the version value:

<Setting Name="NotificationLockWait" Type="xsd:integer">20000</Setting>
<Setting Name="Version" Type="xsd:integer">121</Setting>
<Setting Name="DataCenterConfiguration" Type="htf:map">

Then, Bounce OAM services and test the scenario.

Thanks
Siva Pokuri




Sunday, February 16, 2014

Tuesday, February 11, 2014

Oracle Access Manager PS2 Authentication Policy Advanced Option




Oracle Access Manager PS2 Authentication Policy Advanced Rules feature


New feature added in PS2 release. Authentication Policy Advanced Rules.
Using Jython script we can create a multiple conditions. Based on the conditions we can switch Authentication schema. For example we can validate IP address and type of browsers and etc.



Sunday, February 9, 2014

Deleting Application Instance - Oracle Identity Manager(OIM) 11g R2 PS2

Deleting application instance in OIM 11g R2 PS2 is just a soft delete but it will leave some foot prints in the backend database.

If you try to recreate the same application instance you will get error "IAM-4070002 : Application Instance already created".

Error Screen:


Solution:

In order to remove application instance completely first you will have to run "Application Instance Post Delete Processing Job" and "Catalog Synchronization Job" schedule jobs as shown in the below screen shot.




-- Thanks


Oracle Adaptive Access Manager(OAAM) 11g R1 Upgrade issue

In OAAM 11g Upgraded environment you might see below error message frequently in <<Managed_Server>>.OUT file.

java.sql.SQLSyntaxErrorException: ORA-00904: "T1"."PATTERN_ID": invalid identifier"

In upgradded OAAM 11g database PATTERN_ID field missed in VT_WF_HOURS, VT_WF_DAYS, VT_WF_MONTHS and VT_WF_YEARS table.

Solution:

Environment: OAAM 11g 11.1.1.5.0 (Upgraded from OAAM 10g 10.1.4.5.0 BP07), Windows 2008 Server

Pre-Requesits: Stop all OAAM services.

Fix:

Login the OAAM Oracle Database.

Execute below SQL scripts.

alter table VT_WF_HOURS add (PATTERN_ID NUMBER(16,0));
DROP INDEX VT_WF_HOURS_IDX0;
CREATE INDEX VT_WF_HOURS_IDX0 ON VT_WF_YEARS(PATTERN_ID,ENTITY_DEF_ID,FPRINT_ID,OBJECT_ID,UPDATE_TIME) LOGGING TABLESPACE &&indx_tbs INITRANS 16 MAXTRANS 255 NOPARALLEL;

alter table VT_WF_DAYS add (PATTERN_ID NUMBER(16,0));
DROP INDEX VT_WF_DAYS_IDX0;
CREATE INDEX VT_WF_DAYS_IDX0 ON VT_WF_YEARS(PATTERN_ID,ENTITY_DEF_ID,FPRINT_ID,OBJECT_ID,UPDATE_TIME) LOGGING TABLESPACE &&indx_tbs INITRANS 16 MAXTRANS 255 NOPARALLEL;

alter table VT_WF_MONTHS add (PATTERN_ID NUMBER(16,0));
DROP INDEX VT_WF_MONTHS_IDX0;
CREATE INDEX VT_WF_MONTHS_IDX0 ON VT_WF_YEARS(PATTERN_ID,ENTITY_DEF_ID,FPRINT_ID,OBJECT_ID,UPDATE_TIME) LOGGING TABLESPACE &&indx_tbs INITRANS 16 MAXTRANS 255 NOPARALLEL;

alter table VT_WF_YEARS add (PATTERN_ID NUMBER(16,0));
DROP INDEX VT_WF_YEARS_IDX0;
CREATE INDEX VT_WF_YEARS_IDX0 ON VT_WF_YEARS(PATTERN_ID,ENTITY_DEF_ID,FPRINT_ID,OBJECT_ID,UPDATE_TIME) LOGGING TABLESPACE &&indx_tbs INITRANS 16 MAXTRANS 255 NOPARALLEL;

Now restart the services you shouldn't get the error log. It worked in my environment.

Cheers!!

Siva Pokuri.

Saturday, February 8, 2014

Oracle Enterprise Manager(OEM) 12c Windows 2008 Server Agent Installation


Note: This post assumes that OEM Grid Control 12c Installed and configured.

Now, Lets see how to install OEM agent to a target machine to monitor the services.
  • Access https://<<OEM GC Host Name>>:7800/em/console/emcli/download
  • Download the emcli SDK kit
  • Create folder C:\EMClisetup
  • Extract SDK downloaded using
  • java -jar emclikit.jar client -install_dir=<emcli client dir>


Setup Emcli

  • Navigate to EMClisetup folder (where emcli SDK kit is downloaded) and execute below command.
      • emcli setup -url="https://<<OEM GC Host Name>>:7800/em" -username="sysman" -trustall


  • Now execute "emcli sync" command




  • Check supported platform agent using command below
      • emcli get_supported_platforms



  • Download the Agent using below command
      • dmcli get_agentimage -destination="C:\AgentInstallables" -version="12.1.0.3.0" -platform="Microsoft Windows x64 (64-bit)"



  • Copy the downloaded agent to the remote server where you have to install agent
  • Now, Open agent.rsp file and update the below details.
      • OMS_HOST=<<OEM GC Host Name>>
      • EM_UPLOAD_PORT=4899
      • AGENT_REGISTRATION_PASSWORD=<<Agent Password>>
      • AGENT_INSTANCE_HOME=<<Agent Installation Directory>>Ex: C:/EMAgent/agent_inst
      • AGENT_PORT=3872
      • b_startAgent=true
      • ORACLE_HOSTNAME=<<Agent Installation server host name>> 
      • s_agentHomeName=EMAgent


  • Now install the agent



  • Check agent status
      • emctl.bat status agent




In the next post, I will discuss about how to monitor services.

-- Thanks