Category: Fusion Middleware

This section related to Oracle Fusion middleware

Clone Weblogic Software from One Machine to another

Posted on by Osama Mustafa in Fusion Middleware
Cloning is the process of copying an existing entity to a different location while preserving its state. Some situations in which cloning Oracle Fusion Middleware is useful are:

  • Creating a Middleware home or Oracle home that is a copy of a production, test, or development environment. Cloning enables you to create a new Middleware home or an Oracle home with all patches applied to it in a single step. This is in contrast to separately installing, configuring and applying any patches to separate Oracle homes.
  • Preparing a “gold” image of a patched home and deploying it to many hosts.
When you move a Middleware home, you create an archive of the source Middleware home and use the archive to create the copy of the Middleware home:
  • ./copyBinary.sh -javaHome /u01/jdk -archiveLoc /u01/test.jar -sourceOracleHomeLoc /u01/Oracle/Middleware/fmw_soa
After this copy the jar file to new location and run the following command :-
  • ./pasteBinary.sh -javaHome /u01/jdk -archiveLoc /u01/test.jar -targetOracleHomeName /u01/osama/
It’s very simple and useful
Reference:-
Oracle Doc here.
Cheers
Osama

Integrate Weblogic With Active Directory Using LDAPS

Posted on by Osama Mustafa in Fusion Middleware
In this post i will show how to integrate weblogic with active directory under LDAPS Port 636 and now using the 389, This is usually will work on different version of weblogic in my case i am using weblogic 12C.

I tried to make this article as simple as it’s, since i faced different issue during this and couldn’t find any articles or Oracle Support document that related to any of the issue i faced so i am writing this blog to share it and could be useful for people.

Weblogic Server comes with an Embedded LDAP Server which acts as the Default Provider for authentication, authorization and role mapping .Since authentication is based on JAAS ( Java Authentication and Authorization Service), we can have external providers as well one of these external provider is Active directory authentication. 

Important note :- Before start any of these steps you should ask your system administrator to create active directory user the purpose of this use only to read active directory information and system administrator should provide you with distinguished name (DN) for this user, and Assign it to Administrator Group. This is required as Active Directory gives connection only to Admin User.

Steps:



  • to enable the port you have to do different things before start doing the configuration from weblogic side, since we are using SSL Port and not the unsecured one you have to import the certificate first, the certificate could be provided to you by the system administrator, in my case to avoid any wasting of time i used Jdeveloper to import the certificate because the Jdeveloper having the capability to connect to the LDAP server in both way (636 or 389 ) once you are connected you can import the certificate.
  •  Now after importing the certificate go the weblogic server and run the below command i choose to save my certificate under #WLS_HOME/wlserver/server/lib :

keytool -import -trustcacerts -alias NEWAD -file Certifcate_name  -keystore NEWAD.jks -storepass Oracle123

    •  Alias  : the alternative name for the certificate you can choose yours but make it clear.
    • file : the certificate location where you imported from Jdeveloper or by system admin.
    • keystore : the output file and should be JKS format.
    • storepass : the password for the imported certificate.
  • once you are done from the above steps, shutdown the adminserver and managed server using the console of the weblogic and edit the setDomainEnv.sh or setDomainEnv.cmd depend on your operating system then add the below lines ( the location of the JKS file)

JAVA_OPTIONS=”${JAVA_OPTIONS} -Djavax.net.ssl.trustStore=/u01/Oracle/Middleware/fmw_soa/wlserver/server/lib/NEWAD.jks

  • Now start the AdminServer, the following steps should be done before testing anything.
  • as you see from the below picture choose custom keystore and start fill the information which is the location for the JKS without putting the file, the password for the certificate that you choose it while importing. 
  • After that you should modify the SSL part, this time you have to remember the alias and the password like the below :-
  • Under Security Realms on the left panel choose providers > New providers 
  • Weblogic having different external provider > but we want Active Directory, make sure to choose the right one.
  • Some changes should be done after the provider created which is the order and flag of the  provider , for the order the Active directory provider should come first and flag should be SUFFICIENT.
  • Start fill the information like the below which AD Host, Active directory user ( Should be created first ), Password for the user, User Base DN and in the last Group Base DN ” Don’t change anything else” and check on SSL enabled.
  • For testing and if the provider working or not, under user and groups you should be able to see the AD users and groups now in the weblogic.
Some of the errors that i face during the configuration which is related to certificate in general, i shared these error to allow people to understand what kind of errors they will face and how to solve it:


  • Error [Security:090834]No LDAP connection could be established. ldaps://HOST:636 Cannot connect to the LDAP server 

  • weblogic.security.providers.authentication.LDAPAtnDelegateException: [Security:090294]could not get connection

  • Caused by: java.lang.reflect.InvocationTargetException

  • Caused by: netscape.ldap.LDAPException: General SSLEngine problem (91); Cannot connect to the LDAP server
  • Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
  • Caused by: sun.security.validator.ValidatorException: PKIX path building failed
  • Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Thank you
Osama 

Oracle Data Integrator repository is not accessible.

Posted on by Osama Mustafa in Fusion Middleware
When trying to access to the http://hostname:9704/biacm

the following warning appeared on the Dashboard :-

Oracle Data Integrator repository is not accessible.

Possible causes:

  1. Bad user credentials and/or type of Authentication.
  2.  Incorrect Database connection configuration from WLS to ODI DB Repositories.
OBIA 11g: BIACM – Unable To Access Oracle Data Integrator Repository. You Will Not Be Able Generate Or Execute (Doc ID 2115096.1)

Solution :-

Login to ODI Studio with a Supervisor user and in the ODI Security, open the user used to login to BIACM and the one with the problem with accessing ODI. Select the Retrieve GUID button and select the Supervisor check box, if not already done.

If this ‘Retrieve GUID’ button is not present, then the ODI Repository Authentication has been changed to “internal”, meaning that it is not anymore as the OBIA out of the box installation configures it, where the users are managed by the WLS LDAP. This is not to be confused with external authentication with OID. Every OBIA installation has what ODI calls “External Authentication”, as the users are not managed internally by ODI. If this is the case, disconnect from the Repository and switch back to External Authentication from ODI Studio menu ODI > Change Authentication Mode.

therefore you have to chance the authentication in ODI studio.

Thanks
Osama

OBIEE Oracle Support Notes – Useful One.

Posted on by Osama Mustafa in Fusion Middleware
A list of Information Centers:

  • Note 1378677.2 – Information Center: Enterprise Performance Management and BI Index (EPM/BI)
  • Note 1349989.2 – Information Center: Installing and Configuring Oracle Business Intelligence Enterprise Edition Release 10g and Later
  • Note 1349996.2 – Information Center: Optimizing Performance for Oracle Business Intelligence Enterprise Edition Release 10g and Later
  • Note 1349983.2 – Information Center: Oracle Business Intelligence Enterprise Edition (OBIEE) Release 10g and Later
  • Note 1350005.2 – Information Center: Security Information for Oracle Business Intelligence Enterprise Edition Release 10g and Later

List of Notes that may be useful :-

Note 1210310.1 – Master Note for Answers and Dashboards Issues in OBIEE
Note 1292894.1 – Master Note for BI Publisher Issues in OBIEE
Note 1292859.1 – Master Note for Briefing Book Issues in OBIEE
Note 1292904.1 – Master Note for Cache Issues in OBIEE
Note 1292936.1 – Master Note for Clustering Issues in OBIEE
Note 1293348.1 – Master Note for Crash/Hang Issues in OBIEE
Note 1293505.1 – Master Note for Data Warehouse Issues in OBIEE
Note 1293334.1 – Master Note for Disconnected Analytics Issues in OBIEE
Note 1265441.1 – Master Note for OBIEE 10g and 11g Essbase Integration issues (Doc ID )
Note 1293329.1 – Master Note for Integrated Security Issues in OBI Applications
Note 1248939.1 – Master Note for OBIEE 10g Integration with EBS, Siebel, SSO, Portal Server, Peoplesoft
Note 1301946.1 – Master Note for Internationalization and Globalization Issues in OBIEE
Note 1293391.1 – Master Note for iPhone BI Apps Issues in OBIEE
Note 1293337.1 – Master Note for Mapviewer Issues in OBIEE
Note 1293391.1 – Master Note For Oracle Business Intelligence Mobile Applications (iPhone/iPad) Issues in OBIEE
Note 1293344.1 – Master Note for Multi-user Development Issues in OBIEE
Note 1293301.1 – Master Note for Office Integration Issues in OBIEE
Note 1364889.1 – Master Note For OBIEE use with OPatch
Note 1293374.1 – Master Note for Performance Issues in OBIEE
Note 1293435.1 – Master Note for Presentation Server Administration Issues in OBIEE
Note 1293384.1 – Master Note for Repository Design Issues in OBIEE
Note 1293351.1 – Master Note for Scorecard & KPI Issues in OBIEE
Note 1293407.1 – Master Note for Security/Access Control Issues in OBIEE
Note 1293411.1 – Master Note for Server Execution Issues in OBIEE
Note 1293394.1 – Master Note for SOAP API Issues in OBIEE
Note 1293424.1 – Master Note for System Configuration EM/JMX Issues in OBIEE
Note 1293415.1 – Master Note for Usage Tracking Issues in OBIEE
Note 1293477.1 – Master Note for Webcat Replication Issues in OBIEE
Note 1293490.1 – Master Note for Write Back Issues in OBIEE
Note 1307975.1 – Summary Note About OBIEE 10.1.3.4.1 Patch 9492821: Information Applicable Prior To, Or After, Install
Note 1391648.1 – OBIEE11g: Installation, Migration and Upgrade Hints and Tips
Note 1589028.1 – Master Note For Oracle Hyperion Smart View For Office Issues in OBIEE

NOTE:1293490.1 – Master Note for Write Back Issues in OBIEE
NOTE:1293505.1 – Master Note for Data Warehouse Issues in OBIEE
NOTE:1301946.1 – Master Note for Internationalization and Globalization Issues in OBIEE
NOTE:1349983.2 – Information Center: Oracle Business Intelligence Enterprise Edition (OBIEE) Release 10g and Later
NOTE:1349989.2 – Information Center: Installing and Configuring Oracle Business Intelligence Enterprise Edition Release 10g and Later
NOTE:1349996.2 – Information Center: Optimizing Performance for Oracle Business Intelligence Enterprise Edition Release 10g and Later
NOTE:1350005.2 – Information Center: Security Information for Oracle Business Intelligence Enterprise Edition Release 10g and Later
NOTE:1364889.1 – Master Note For OBIEE use with OPatch
NOTE:1378677.2 – Information Center: Business Analytics Index (EPM/BI)
NOTE:1293391.1 – Master Note For Oracle Business Intelligence Mobile Applications (iPhone/iPad) Issues in OBIEE
NOTE:1293394.1 – Master Note for SOAP API Issues in OBIEE
NOTE:1293407.1 – OBIEE 11g: Master Note for Security/Access Control Issues
NOTE:1293411.1 – Master Note for Server Execution Issues in OBIEE
NOTE:1293415.1 – Master Note for Usage Tracking Issues in OBIEE
NOTE:1293424.1 – Master Note for System Configuration EM/JMX Issues in OBIEE
NOTE:1293435.1 – Master Note for Presentation Server Administration Issues in OBIEE
NOTE:1293477.1 – Master Note for Webcat Replication Issues in OBIEE
NOTE:1210310.1 – Master Note for Answers and Dashboards Issues in OBIEE
NOTE:1248939.1 – Master Note for OBIEE 10g Integration with EBS, Siebel, SSO, Portal Server, Peoplesoft
NOTE:1265441.1 – Master Note for OBIEE 10g and 11g Essbase Integration issues
NOTE:1267009.1 – Oracle Business Intelligence Enterprise Edition (OBIEE) Product Information Center (PIC)
NOTE:1292859.1 – Master Note for Briefing Book Issues in OBIEE
NOTE:1292894.1 – Master Note for BI Publisher Issues in OBIEE
NOTE:1292904.1 – Master Note for Cache Issues in OBIEE 10g and 11g
NOTE:1292936.1 – Master Note for Clustering Issues in OBIEE 10g and 11g
NOTE:1293301.1 – Master Note for Office Integration Issues in OBIEE
NOTE:1293329.1 – Master Note for Integrated Security Issues in OBI Applications
NOTE:1293334.1 – Master Note for Disconnected Analytics Issues in OBIEE
NOTE:1293337.1 – OBIEE: Master Note for Mapviewer Issues
NOTE:1293344.1 – Master Note for Multi-user Development Issues in OBIEE
NOTE:1293348.1 – Master Note for Crash/Hang Issues in OBIEE 10g and 11g
NOTE:1293351.1 – Master Note for Scorecard & KPI Issues in OBIEE
NOTE:1293374.1 – Master Note for Performance Issues in OBIEE
NOTE:1293384.1 – Master Note for Repository Design Issues in OBIEE
NOTE:1589028.1 – Master Note For Oracle Hyperion SmartView (Smart View) For Office Issues in OBIEE

Cheers
And Enjoy Reading 
Osama mustafa

Remove Conflict Patch From Weblogic

Posted on by Osama Mustafa in Fusion Middleware
When trying to apply new patch to the weblogic the following error shown up :-

[oracle@ebsnew bsu]$ ./bsu.sh -prod_dir=/u01/oracle/EBSTST/fs1/FMW_Home/wlserver_10.3/ -patch_download_dir=/u01/oracle/EBSTST/fs1/FMW_Home/utils/bsu/cache_dir/                                 -patchlist=EJUW -verbose -install
Checking for conflicts…

Conflict(s) detected – resolve conflict condition and execute patch installation again
Conflict condition details follow:
Patch EJUW is mutually exclusive and cannot coexist with patch(es): Y5AP,BLTG,FCX7,1LRI,VKXF,2GYW,CW9T

To solve this issue you have to remove the patch and reapply the one again;-

[oracle@ebsnew bsu]$ ./bsu.sh -prod_dir=/u01/oracle/EBSTST/fs1/FMW_Home/wlserver_10.3/ -patchlist=Y5AP,BLTG,FCX7,1LRI,VKXF,2GYW,CW9T -verbose -remove
Checking for conflicts……….

After this try to apply the patch again.
Thanks
Osama

Apply Weblogic Patch Offline mode

Posted on by Osama Mustafa in Fusion Middleware

  1. Shutdown all the services for weblogic.
  2. unzip the patch under $MW_HOME/utils/bsu/cache_dir
  3. run the following command :-

./bsu.sh -prod_dir=$weblogic_home  -patch_download_dir=Patch_location -patchlist=patch_id -verbose -install

The final Result 

Or you can apply the weblogic patch using smart update

Thanks
Osama Mustafa

Difference between OIM , OAM And OID ?

Posted on by Osama Mustafa in Fusion Middleware
OAM :- Oracle Access manager 

Regarding to Oracle Documentation

Oracle Access Management is a Java, Enterprise Edition (Java EE)-based enterprise-level security application that provides a full range of Web-perimeter security functions and Web single sign-on services including identity context, authentication and authorization; policy administration; testing; logging; auditing; and more. It leverages shared platform services including session management, Identity Context, risk analytic, and auditing, and provides restricted access to confidential information.

From the above picture as you see OAM provides single point to control all resource grants in an enterprise where multiple applications exist on different platform.

You can refer to oracle Doc here.

OAM provides:

  • Single Sign On (SSO)
  • Authentication
  • Authorization
  • Access Auditing
  • Policy Administration
There is more but you can refer to the above documentation.
OIM : Oracle Identity manager 
enables enterprises to manage the entire user life cycle across all enterprise resources both within and beyond a firewall. An Oracle identity management solution provides a mechanism for implementing the user management aspects of a corporate policy. It can also be a means to audit users and their access privileges.
The best best example to understand OIM is employee.
if the new employee joining the company the HR handle everything for him emails, permission … etc, with OIM it’s different and all of this can be done automatically
Refer to Oracle Documentation here 
Finally OID : Oracle Internet Directory.
Simply it’s LDAP, 
An online directory is a specialized database that stores and retrieves collections of information about objects. The information can represent any resources that require management, for example:

Employee names, titles, and security credentials
Information about partners
Information about shared resources such as conference rooms and printers.
The information in the directory is available to different clients, such as single sign-on solutions, email clients, and database applications. Clients communicate with a directory server by means of the Lightweight Directory Access Protocol (LDAP). Oracle Internet Directory is an LDAP directory that uses an Oracle Database for storage.
OID Oracle Documentation here
Thanks
Osama