Portal 11G: Change Portal OID Realm after the installation process completes

In the recent 11G Portal installation and configuration, it was found out at the very end of the process that the portal OID realm needs some change.  In order not to re-start the whole process, which is quite lengthy, I used the following way to fix the issue.

The following describes the steps I used and it succeeded. This was traveling at no man's land. It took quite an effort.

(1) create the new, desired realm. use oidrealm, an Oracle utility. It is discussed in an early post of mine.

(2) Go to the portal repository schema. In our case, it is INTF_Portal Update the following tables in INTF_Portal schema to replace the old realm with the new realm.
 $WWPRE_VALUE, $WWSEC_User, $WWSEC_group, $WWSEC_member

(3) lastly, go to portal Builder to ensure that you can log in using one of the users under cn=Users under the new realm. During the above process, a few issues have been encountered, I have highlighted these issues and described briefly of the solution to them.

Portal 11G: A few OID related errors and how to resolve them

		Error
		internal error (WWC-00006) Unexpected error encountered in wwsec_app_priv.process_signon (User-Defined Exception) (WWC-41417) An exception is raised when accessing the Oracle Internet Directory: 32: No such object Entry to be modified not found. Details Operation: dbms_ldap.modify_s Entry DN: cn=AUTHENTICATED_USERS,cn=intf_portal.130107.111156.694332000,cn=groups,dc=itsso,dc=gc,dc=ca Changes uniquemember: Add: cn=dct_user,cn=users,dc=ncr,dc=pwgsc,dc=gc,dc=ca. (WWC-41743)

Solution:
The course of this problem: the realm, dc=ncr,dc=pwgsc,dc=gc,dc=ca, is not updated in table $WWPRE_VALUES in the portal schema.

Also check the following tables in the portal schema to ensure they have the correct realm data:

WWSEC_User, WWSEC_group, WWSEC_member

How to Reinstall Portal 11G Repository?

Note: REPCA: Repository Creation Tool  is an Oracle utility used to help creating/configuring database schemas.

Solution:

(1)use REPCA to remove Portal Schema in the 11g database

Expand V29675-01.zip (this contains the REPCA installation files) to c:\sw\V29675-01 (this will take about 15 minutes)

In a command shell:

cd c:\sw\V29675-01\rcuHome\bin rcu.bat

expand “create database”, then select “drop database”.

     (2) use the same utility REPCA to re-install Portal Schema in the 11g database.

Oracle 11g New Installation

Some very good discussion on the step of installing the new Oracle 11g (11.1.1.6 in our case).

https://forums.oracle.com/forums/thread.jspa?messageID=10581430

We used the following solution:
use OAM instead of SSO. This is a new option where you will be installing Oracle Portal with OAM (Document 1436807.1.  or use this link: https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1436807.1). You will still need IDM 10.1.4 software if you want to use this new direction.

Installation overview :

Step	Description	More Information
Install Oracle Identity Management 10.1.4.3 Infrastructure (OID/SSO)	Identity Management Infrastructure 10.1.4.3 - will be used for copying SSO related information only at installation time	Document 961735.1, "Oracle Identity Management 10g (10.1.4) Support Status and Alerts"
Instal Oracle Identity Management 11g (11.1.1.6+) in a new 11g (11.2.0.3+) database	Oracle Internet Directory 11g Installation for Oracle Portal 11g	Chapter 6 - Installing and Configuring Oracle Identity Management (11.1.1.6.0)
Install Oracle Access Management 11g (11.1.1.5+)	Oracle Access Management installation for Oracle Portal 11g	Chapter 13 - Installing Oracle Identity and Access Management (11.1.1.5.0)
Copy OSSO 10g related details from OID 10g to OID 11g	SSO related information is retrieved from the IDM 10.1.4.3 installation and copied to the 11g OID installation. IDM 10.1.4.3 is not going to be used after this step anymore.
Configure portal with the Oracle Identity Management 11g install	Oracle Portal, Forms, Reports and Discover Installation and Configuration	Oracle® Fusion Middleware Installation Guide for Oracle Portal, Forms, Reports and Discoverer 11g Release 1 (11.1.1.6.0)
Configure Oracle Access Management with Oracle Portal	Oracle Portal is configured with Oracle Access Management for Authentication Services

OID 11g – Oracle Directory Services Manager (ODSM)

ODSM- Oracle Directory Services Manager (11g OID)
OID  – Oracle Internet Directory
ODSM provides a graphic interface for a user to browse, update, delete OID objects.

How to access ODSM ? 
1. Start Managed Server wls_ods1 using the following command:
     startManagedWebLogic.cmd wls_ods1

2. Access ODSM from URL
     http://host:port/odsm  where default managed server (wls_ods1) port is 7005 (ucn=orcladmin)


Refer to http://onlineappsdba.com/index.php/2009/09/30/oid-11g-oracle-directory-services-manager-odsm/  for more detail.



Oracle Directroy Service Manager  (ODSM) - is Java application (introduced in 11g OID/OVD) to manage OID and OVD.
a)  ODSM is java application which runs on WebLogic Server (Managed Server – wls_ods1)
b) Oracle Directory Manager (tool to manage OID in 10g) is now deprecated in 11g OID.
c) ODSM uses JNDI to connect to OID & OVD
d) You can install and configure ODSM with OID/OVD during installation or later

IDM OID realm creation

 I created IDM realm in Oracle IDM 11g 11.1.1.6. The following are the steps I followed. They are originally from this link: http://oracamp.com/how-create-new-realm-oid-11g

• Set the ORACLE_HOME environment variable. 

          set ORACLE_HOME= e:\oracle\idm\idm_home

• Run the ldapsearch command to list the existing default subscriber. 

            $ORACLE_HOME/bin/ldapsearch -h ldap_host -p port -D cn=orcladmin -w password -b “cn=common, cn=oraclecontext”-s base “objectclass=*” orcldefaultsubscriber

• The results would be like as shown below

cn=Common,cn=Products,cn=OracleContext
orcldefaultsubscriber=dc=oracle,dc=com

• Goto $ORACLE_HOME/ldap/bin

              Run oidrealm command as shown below to create a new realm. Enter the OID Admin password when it prompts.
./oidrealm ldap_host ldap_port dc=mydomain,dc=com
Check for the message Realm Updated as shown below which ensures that new realm dc=mydomain,dc=com is created.

• Check for the new realm using the ldapsearch command as shown below.
$ORACLE_HOME/bin/ldapsearch -h ldap_host -p port -D cn=orcladmin -w password -b “dc=mydomain,dc=com”-s base “objectclass=*”

LDAP Modify, Delete

 The following link provides good info on ldapmodify, ldapsearch, and ldapdelete
http://docs.oracle.com/cd/E19199-01/816-6400-10/lmodify.html

You can also use OID Access Manager to connect to the OID server, and use the graphic user interface to do that. 

How to delete a Domain in WLS?

If you want to safely remove a Domain, you can go to oracle/portal/user_project/Domains to delete the domain from the file system. 

then go to Oracle/portal/wlservice_10.3/common/nodemanager/, remove the domain from nodemanager.domains.

How do I add weblogic node manager as a service into the Windows "services" list?

How do I add weblogic node manager  as a service into the Windows "services" list?

Weblogic node manager service is added into the Windows "Services" list by running the installNodeMgrSvc.cmd

The following is an example:

Perform the following in an administrative command prompt:

       cd E:\oracle\portal\wlserver_10.3\server\common\bin

       installNodeMgrSvc.cmd

Running uninstallNodeMgrSvc.cmd under wlserver_10.3\server\bin will remove the node manager service from the Windows "Services" list.

How to fix Certificate Error in IE or other browser

Go to  "Tools\Internet Options",
Go to "Content" tab

Select "Certificate", select " import" button. browser to the proper certificates in your file system, and import them.

Weblogic Classloading: How to do Child classloading first?

How to do Child (application) first classloading in weblogic?

Answer: specify the following in weblogic.xml  and package the file into your application ear file.

  xml version="1.0" ?>

     <container-descriptor>

         <prefer-web-inf-classes>true</prefer-web-inf-classes>

  </container-descriptor>

This could help solving the   NoClassDefFoundError exception.

Suggest to read more on classloading issues here:http://javarevisited.blogspot.ca/2011/06/noclassdeffounderror-exception-in.html

One explanation for NoCleassDefFoundError and when Child loading first can resolve it: Maybe your class depends on another class which is on both parent and you application, but different version.

Refer to the following link on weblogic classloading:

http://docs.oracle.com/cd/E11035_01/wls100/programming/classloading.html