Skip Headers
Oracle® Application Server Upgrade and Compatibility Guide
10g Release 2 (10.1.2) for UNIX
Part No. B14090-05
  Go To Documentation Library
Home
Go To Table Of Contents
Contents
Go To Index
Index

Previous
Previous
Next
Next
 

9 Upgrading High Availability Configurations

This chapter describes considerations, restrictions, and recommended procedures for upgrading an Oracle Application Server environment that has been configured for high availability.

This chapter contains the following sections:

9.1 Summary of High Availability Upgrade Options, Restrictions, and Prerequisites

Oracle Application Server 10g (9.0.4) introduced high availability configurations that you could install as part of the Oracle Application Server installation procedure.

Table 9-1 shows the upgrade paths supported for the 10g (9.0.4) high availability configurations.

Table 9-1 Summary of the High Availability Upgrade Options

10g (9.0.4) Configuration Upgrade Path More Information

Oracle Application Server Cold Failover Cluster


Upgrade to Oracle Application Server Cold Failover Cluster for 10g Release 2 (10.1.2.0.2).

Section 9.2, "Upgrading an OracleAS Cold Failover Cluster Infrastructure"


OracleAS Active Failover Cluster


Transform the environment into an 10g Release 2 (10.1.2.0.2) OracleAS Cluster (Identity Management) environment.Foot 1 

Section 9.3, "Transforming OracleAS Active Failover Cluster to OracleAS Cluster (Identity Management)"


Rack-Mounted Identity Management

Transform the environment into a 10g Release 2 (10.1.2.0.2) OracleAS Cluster (Identity Management) environment.

Section 9.4, "Transforming 10g (9.0.4) Rack-Mounted Identity Management to OracleAS Cluster (Identity Management)"


Disaster Recovery

Upgrade the production site and the standby site separately.

"Oracle Application Server Disaster Recovery" in the Oracle Application Server High Availability Guide


Footnote 1 For Oracle Application Server 10g Release 2 (10.1.2.0.2), OracleAS Active Failover Cluster has been replaced with the new OracleAS Cluster (Identity Management) high availability solution.

The procedures provided in this chapter assume that you used the Oracle Application Server 10g (9.0.4) installation guide to install and configure your high availability configuration and that you have met all of the prerequisites described in the 10g (9.0.4) installation guide.

For example, these procedures assume you have already installed and configured clusterware such as Sun Cluster, VERITAS Cluster Server, or Fujitsu-Siemens PrimeCluster. For the official list of certified clusterware, visit the Certify section of OracleMetaLink:

http://metalink.oracle.com

To check that the clusterware is running, use the command appropriate for your clusterware. For example, if you are running Sun Cluster, use the scstat command to get the status of the nodes in the cluster.

These procedures also assume you are using the seed database that was installed automatically with the 10g (9.0.4) installation procedure.


See Also:

The Oracle Application Server 10g (9.0.4) installation guide for your platform, which is available as part of the platform-specific documentation library on the Oracle Technology Network:
http://www.oracle.com/technology/documentation/appserver10g.html

9.2 Upgrading an OracleAS Cold Failover Cluster Infrastructure

To upgrade a 10g (9.0.4) OracleAS Cold Failover Cluster Infrastructure installation:

  1. If vendor clusterware agents or packages are being utilized to automatically monitor and manage the OracleAS Cold Failover Cluster environment, these should be stopped before you perform the 10g Release 2 (10.1.2) upgrade.

    In addition, to re-enable vendor cluster agents or packages after the upgrade has been completed, verify that certification has been provided by the appropriate vendor for the 10g Release 2 (10.1.2) OracleAS Cold Failover Cluster environment.

  2. Make sure that the OracleAS Metadata Repository database and database listener are up and running.

  3. Log in to the computer on which the 10g (9.0.4) OracleAS Cold Failover Cluster is installed, as the same operating system user that performed the 10g (9.0.4) installation.


    Note:

    You must be logged in as a member of the dba operating system group.

  4. Make sure the Oracle Internet Directory server is up and running.

    To verify that Oracle Internet Directory is running, enter one of the following commands.


    Note:

    You may have to temporarily set the ORACLE_HOME environment variable to the Oracle Internet Directory Oracle home before running the ldapbind command.

    After you verify that the Oracle Internet Directory is running, you must then make sure the ORACLE_HOME environment variable is not defined before you start the 10g Release 2 (10.1.2) installer, as directed in Step 5.


    If you are running Oracle Internet Directory on a non-secure port:

    SOURCE_ORACLE_HOME/bin/ldapbind -p Non-SSL_port
    
    

    If you are running Oracle Internet Directory on a secure port:

    SOURCE_ORACLE_HOME/bin/ldapbind -p SSL_port -U 1
    
    

    These commands should return a "bind successful" message.


    See Also:

    "Syntax for LDIF and Command-Line Tools" in the Oracle Internet Directory Administrator's Guide for more information about the ldapbind utility


    Note:

    Oracle Internet Directory 10g (9.0.4) allows you to start and stop the directory service using OPMN or the oidctl utility.

    Before upgrading an OracleAS Identity Management Oracle home that contains Oracle Internet Directory, start the Oracle Internet Directory instance using the opmnctl utility or the Application Server Control Console. Do not use the oidctl utility; otherwise, Oracle Universal Installer will not be able to start and stop Oracle Internet Directory automatically during the upgrade process.

    The correct use of opmnctl and oidctl is described in the Chapter "Oracle Internet Directory Process Control–Best Practices" in the Oracle Internet Directory Administrator's Guide.


  5. Be sure to set the environment variables, as defined in the section "Environment Variables" in the "Requirements" chapter of the Oracle Application Server Installation Guide.

    In particular, be sure to set following variables so they do not reference any Oracle home directories:

    • PATH

    • CLASSPATH

    • LD_LIBRARY_PATH

    In addition, be sure the following environment variables are not set:

    • TNS_ADMIN

    • ORACLE_HOME

    • ORACLE_SID

  6. Mount the Oracle Application Server 10g Release 2 (10.1.2) CD–ROM and start the installer.


    See Also:

    Oracle Application Server Installation Guide for detailed instructions about starting Oracle Universal Installer on your platform

  7. Refer to Table 9-2 for information on the options you should select on each screen.

  8. After the End of Installation screen appears, exit Oracle Universal Installer and then verify that Oracle Internet Directory and Oracle Application Server Single Sign-On are functioning and accessible in the new 10g Release 2 (10.1.2) Oracle home.


    See Also:

    Oracle Application Server Administrator's Guide, Chapter 1, "Accessing the Single Sign-On Server"

  9. Review Section 5.6, "Task 5: Complete the OracleAS Identity Management Upgrade" and perform any post-upgrade tasks that are required for your configuration.

  10. The following step is required only if you meet both of these requirements:

    • You plan to use the Automatic Storage Management (ASM) feature of Oracle Database 10g for the OracleAS Metadata Repository.

    • Your computer does not have an existing Oracle Database 10g.

    If you meet these requirements, you need to configure the CSS daemon on the other node. The CSS daemon synchronizes ASM instances with the database instances that use the ASM instances for database file storage.

    To configure the CSS daemon:

    1. Stop all the processes in the Oracle Application Server Cold Failover Cluster (Infrastructure) home.

    2. Stop the CSS daemon. You can do this by running the following command as root.

      # /etc/init.d/init.cssd stop
      
      
    3. Fail over the IP and the disk to the other node.

    4. On the other node, run the following command as root:

      # $ORACLE_HOME/root.sh
      
      

      ORACLE_HOME is where you installed the Oracle Application Server Cold Failover Cluster (Infrastructure).

  11. After you upgrade OracleAS Identity Management in a colocated Infrastructure, refer to the following sections for information about post-upgrade tasks you should consider performing to help you manage and maintain the upgraded database:

  12. If you have installed or upgraded any 10g Release 2 (10.1.2) middle tiers that use the OracleAS Metadata Repository for components such as OracleAS Portal, OracleAS Wireless, or Oracle Application Server Certificate Authority, then run the Metadata Repository Upgrade Assistant (MRUA) to upgrade the component schemas in the OracleAS Metadata Repository.

    Complete instructions for running MRUA, including prerequisites and post-upgrade tasks, are included in Chapter 7, "Upgrading the OracleAS Metadata Repository".

  13. Complete the 10g Release 2 (10.1.2) Oracle Application Server Cold Failover Cluster Post-Installation instructions described in "Post-Installation Steps for OracleAS Cold Failover Cluster" in the Oracle Application Server Installation Guide.

Table 9-2 Summary of the Oracle Universal Installer Screens During the OracleAS Cold Failover Cluster Infrastructure Upgrade

Screen Description and Recommended Options to Select

Welcome

Welcomes you to Oracle Universal Installer and the Oracle Application Server 10g Release 2 (10.1.2) installation procedure.

Specify File Locations

Enter a name and path for the new Oracle home.

This new Oracle home will be the destination Oracle home for your Oracle Application Server 10g Release 2 (10.1.2) upgrade.

Notes:

  • You must enter a directory in the file system that can be mounted from either node in the OracleAS Cold Failover Cluster configuration.

  • You must enter a new Oracle home name and directory. Do not select an existing Oracle home from the drop down list. If you select an existing Oracle home, the installer will not display the next screen, Specify Hardware Cluster Installation Mode.

    Example: /mnt/app/oracle/OraInfra_10_1_2

Specify Hardware Cluster Installation Mode

This screen appears only if you have Oracle Cluster Ready Services installed. It is okay if you do not see this screen; Oracle Cluster Ready Services is not required for OracleAS Cold Failover Cluster.

Select Local Installation because you are installing OracleAS Infrastructure on the shared storage. Click Next.

Select a Product to Install

Select OracleAS Infrastructure 10g.

If multiple languages are used in the OracleAS Infrastructure you are upgrading, then click Product Languages.

Language Selection

The screen appears only if you clicked Product Languages on the Select a Product to Install screen.

If multiple languages are used in the OracleAS Infrastructure you are upgrading, select those languages.

If you are not sure which languages were installed, but want languages other than English, click the double arrow button (>>) to select all languages.

Select Installation Type

Select Identity Management and OracleAS Metadata Repository.

Note: It is very important that you select the same installation type that is used in the Oracle home you are upgrading.

Upgrade Existing Infrastructure

This screen appears when Oracle Universal Installer detects an existing Oracle Application Server installation of the same type as the one you selected on the Select Installation Type screen.

Select the option to upgrade an existing OracleAS Infrastructure, and then select the Oracle home you want to upgrade from the drop-down list. (If there is only one Infrastructure of the selected time on the computer, then the drop-down list is inactive.)

Specify Login for Oracle Internet Directory

Enter the Oracle Internet Directory superuser distinguished name (DN) in the Username field. The superuser DN cn=orcladmin is the default for this field; change this value if the Oracle Internet Directory superuser DN is not cn=orcladmin.

Enter the password for the superuser DN in the Password field.

Specify Infrastructure Database Connection

Enter SYS in the Username field and the SYS user's password in the Password field.

Warning dialog box

This dialog box warns you that all the clients of the OracleAS Metadata Repository database must now be stopped. Oracle Universal Installer will automatically stop any clients within the current Oracle home.Foot 1 

However, you must manually stop any database clients and OracleAS Metadata Repository clients that reside in another Oracle home.

Clients of the OracleAS Metadata Repository include:

  • OracleAS Identity Management components that use this OracleAS Metadata Repository.

  • Middle tier instances that use this OracleAS Metadata Repository

Within each middle tier that uses this OracleAS Metadata Repository, you must be sure to stop all components, including Oracle HTTP Server and OracleAS Web Cache.

For more information, see the chapter "Starting and Stopping " in the Oracle Application Server Administrator's Guide.

Database Listener Warning Dialog Box

If a database listener is running on the host, a warning dialog box displays. Review the dialog box determine whether or not you need to stop the listener manually.

For more information, see Section 5.3.3, "Stopping the Database Listener When Prompted During the OracleAS Identity Management Upgrade".

Specify Instance Name and ias_admin Password

Enter a name for the new Oracle Application Server 10g Release 2 (10.1.2) instance and a password for the ias_admin Administrator account.

You use the ias_admin password to log on to the Application Server Control Console to manage the Oracle Application Server instance.

In general, the minimum length of the ias_admin password is five alphanumeric characters. At least one of the characters must be a number and the password cannot start with a number.

For more information, see the section "The ias_admin User and Restrictions on its Password" in the Oracle Application Server Installation Guide.

Summary

Use this screen to confirm the choices you've made. Click Install to begin upgrading to the new 10g Release 2 (10.1.2) Oracle home.

A dialog box appears when the copying is complete. This dialog box prompts you to run a configuration script as the root user. Follow the instructions in the dialog box and click OK when script is finished.

The Configuration Assistants

After the initial software is installed, a set of configuration assistants automatically set up the components in the new 10g Release 2 (10.1.2) Oracle home. Use this screen to follow the progress of each assistant and to identify any problems during this phase of the installation.

Notes:

  • The Database Upgrade Assistant (DBUA) can take a significant amount of time to upgrade the database. For more information how long it takes to upgrade your database, see Section 3.3, "Planning for System Downtime".

  • While Database Upgrade Assistant is running, do not use the Stop button to interrupt the execution of Database Upgrade Assistant. If you press Stop, the underlying processes for Database Upgrade Assistant will continue to run. Also, Oracle Universal Installer will wait until those processes complete before returning control to the user.

End of Installation

When the installation and upgrade is complete, this screen provides important details about the 10g Release 2 (10.1.2) Oracle home, such as the URL for the Application Server Control Console and the location of the setupinfo.txt file.

After you review the information on this screen, you can exit Oracle Universal Installer and proceed to the post-upgrade tasks.


Footnote 1 You can access a log of the automated shutdown procedure executed by Oracle Universal Installer in the following directory: ORACLE_HOME/cfgtoollogs/shutdownprocesses.log

9.3 Transforming OracleAS Active Failover Cluster to OracleAS Cluster (Identity Management)

The following sections describe how to transform a 10g (9.0.4) OracleAS Active Failover Cluster environment into the new OracleAS Cluster (Identity Management) environment:

9.3.1 Overview of the Transformation Procedure

Table 9-3 provides a summary of the steps involved with transforming an Oracle Application Server 10g (9.0.4) OracleAS Active Failover Cluster environment into an Oracle Application Server 10g Release 2 (10.1.2.0.2) OracleAS Cluster (Identity Management) environment.

Table 9-3 Overview of Transforming a 10g (9.0.4) OracleAS Active Failover Cluster into a 10g Release 2 (10.1.2) OracleAS Cluster (Identity Management)

Step Number Description

1

Back up the entire OracleAS Active Failover Cluster environment

2

Upgrade the Database That Hosts the OracleAS Metadata Repository.

Before you can upgrade OracleAS Identity Management or the OracleAS Metadata Repository schemas, the database must be upgraded to a supported version. The resulting, upgraded database is installed in its own Oracle home.

3

Upgrade OracleAS Identity Management on Node 1.

This procedure upgrades OracleAS Identity Management in the original OracleAS Active Failover Cluster Oracle home, which previously was a colocated Oracle home. However, after the database upgrade, this Oracle home--as well as the upgraded 10g Release 2 (10.1.2) OracleAS Identity Management Oracle home--now hosts only the OracleAS Identity Management components.

3

Install new OracleAS Identity Management Oracle homes on the other nodes in the cluster.

When you install the new 10g Release 2 (10.1.2) OracleAS Identity Management software on the other cluster nodes, you can associate the new installations with the existing OracleAS Cluster (Identity Management) environment and the existing OracleAS Metadata Repository.

4

Upgrade the middle tiers.

You must upgrade the middle tiers before you upgrade the component schemas in the OracleAS Metadata Repository. For more information, see Section 1.4, "Upgrade Rules to Follow".

5

Upgrade the component schemas in the OracleAS Metadata Repository.

When you upgraded OracleAS Identity Management in step 3, you upgraded the OracleAS Identity Management schemas. This step upgrades the other Oracle Application Server component schemas in the OracleAS Metadata Repository to 10g Release 2 (10.1.2).

6

Optionally Decommission and Deinstall the Source Oracle homes.


The remaining sections describe each of these overview steps in more detail.

9.3.2 Back Up the Entire Environment, Including the Middle-Tier and Infrastructure Installations

Before you transform your 10g (9.0.4) OracleAS Active Failover Cluster environment to a 10g Release 2 (10.1.2) OracleAS Cluster (Identity Management) environment, it is important that you back up all the Oracle home installations.

Executing a backup of the current environment prior to any changes such as an upgrade is critical in order to ensure the system can be restored back to its original state in case of any errors or problems during the actual upgrade procedures. Ideally a restore test of the backup to a test environment should also be performed to further ensure the backup copy is valid and working as expected. These steps should all be done before starting the actual upgrade and can help minimize downtime in case a restore is required.

9.3.3 Upgrade the Database That Hosts the OracleAS Metadata Repository

Before you can upgrade the OracleAS Metadata Repository, you must be sure the database that hosts the repository is upgraded to a version supported by 10g Release 2 (10.1.2).


See Also:

Section 7.1, "Task 1: Upgrade the Database That Hosts the OracleAS Metadata Repository" for information on the supported database versions for Oracle Application Server 10g Release 2 (10.1.2.0.2)

When you installed the Oracle Application Server 10g (9.0.4) OracleAS Active Failover Cluster, Oracle Universal Installer automatically installed and configured an Oracle9i (9.0.1.5) database to host the OracleAS Metadata Repository.

To upgrade this database to Oracle9i Release 2 (9.2.0.6), you must install a new Oracle9i Release 2 (9.2.0.1) database in a new Oracle home, patch the database to Oracle9i Release 2 (9.2.0.6), and then run the Database Upgrade Assistant from the Oracle9i Release 2 (9.2.0.6) Oracle home.

The database upgrade procedure involves the following steps.


Note:

For the purposes of this procedure, the new Oracle9i Release 2 (9.2.0.6) Oracle home is referred to as the destination Oracle home.


Step 1 Stop the Middle Tiers, the OracleAS Identity Management Services, and the 10g (9.0.4) Metadata Repository Database

For information on starting and stopping Oracle Application Server components, see "Starting and Stopping" in the Oracle Application Server Administrator's Guide.

Step 2 Install a New Oracle9i Release 2 (9.2.0.1) Oracle Home

Use the following procedure to install a Oracle9i Release 2 (9.2.0.1) in a new Oracle home on the same host as the 10g (9.0.4) OracleAS Metadata Repository database:

  1. Log in to the computer on which 10g (9.0.4) OracleAS Metadata Repository database instance is installed, as the same operating system user that performed the 10g (9.0.4) installation.


    Note:

    You must be logged in as a member of the dba operating system group.

  2. Set the required environment variables, as defined in the section "Environment Variables" in the "Requirements" chapter of the Oracle Application Server Installation Guide.

    In particular, be sure to set following variables so they do not reference any Oracle home directories:

    • PATH

    • CLASSPATH

    • LD_LIBRARY_PATH

    • SHLIB_PATH

    In addition, be sure the following environment variables are not set:

    • TNS_ADMIN

    • ORACLE_HOME

    • ORACLE_SID

  3. Mount the CD-ROM and start the installer.


    See Also:

    Oracle Application Server Installation Guide for detailed instructions about starting Oracle Universal Installer on your platform

  4. Refer to Table 9-4 for information on the options you should select on each screen.

  5. After the End of Installation screen appears, exit Oracle Universal Installer and then verify that Oracle Internet Directory and Oracle Application Server Single Sign-On are functioning and accessible in the new 10g Release 2 (10.1.2) Oracle home.


    See Also:

    Oracle Application Server Administrator's Guide, Chapter 1, "Accessing the Single Sign-On Server"

Table 9-4 Summary of the Oracle Universal Installer Screens During the Oracle9i Release 2 (9.2.0.1) Software-Only Installation

Screen Description and Recommended Options to Select

Welcome

Welcomes you to Oracle Universal Installer and the installation procedure.

Cluster Node Selection

Select the nodes where you want to install the Oracle software. The local node will always be selected.

Specify File Locations

Enter a name and path for the new Oracle home.

Note that you must install the new Oracle9i Release 2 (9.2.0.1) database in a new Oracle home. Do not install it into the existing 10g (9.0.4) Oracle home.

This new Oracle home will be the destination Oracle home for your database upgrade.

Select a Product to Install

Select Oracle9i Database 9.2.0.1.0.

If multiple languages are used in the OracleAS Infrastructure you are upgrading, then click Product Languages.

Language Selection

The screen appears only if you clicked Product Languages on the Select a Product to Install screen.

If multiple languages are used in the OracleAS Infrastructure you are upgrading, select those languages.

If you are not sure which languages were installed, but want languages other than English, click the double arrow button (>>) to select all languages.

Select Installation Type

Select Enterprise Edition.

Database Configuration

Select Software Only. Do not install a starter database.

Summary

Review the settings you made and confirm that they are correct for your installation.

Click Install.


Step 3 Apply the Oracle9i Release 2 (9.2.0.6) Patchset

Before you install the patchset, carefully review the patchset release notes.

Note that the Oracle UNIX Distributed Lock Manager (UDLM) 3.3.4.8 patch might be required before applying the patchset in an Oracle Real Application Clusters with Sun Clusterware environment.

Start Oracle Universal Installer and use the information in Table 9-5 to perform the patchset installation.

Table 9-5 Summary of the Oracle Universal Installer Screens During the Oracle9i Database Patchset Installation

Screen Description and Recommended Options to Select

Welcome

Welcomes you to Oracle Universal Installer and the patchset installation procedure.

Specify File Locations

In the Destination Name field, enter the name of the Oracle9i Release 2 (9.2.0.1) Oracle home that you want to patch.

Selected Nodes

The Selected Nodes page lists the existing Oracle9i Release 2 (9.2.0.1) Real Application Clusters nodes. The first node in the list is the node from where Real Application Clusters was installed. You must install the patch set software from this node.

If this is not the node where you are running the Installer, exit the Installer and install the patch set software from the first node in the list of nodes.

Select a Product to Install

Select Oracle9i Database 9.2.0.1.0.

If multiple languages are used in the OracleAS Infrastructure you are upgrading, then click Product Languages.

Prompt to run root.sh

When prompted, run the ORACLE_HOME/root.sh command as the root user on each node of the cluster.

End of Installation

Click Exit, and then click Yes to exit from the installer.


Step 4 Prepare to Upgrade the Database

Perform the following steps to prepare for the database upgrade:

  1. Review Chapter 2, "Preparing to Upgrade," in Oracle9i Database Migration, which is available as part of the Oracle9i Database Release 2 Documentation Library on the Oracle Technology Network (OTN):

    http://www.oracle.com/technology/documentation/oracle9i.html
    
    
  2. Read and perform the steps in the following subsections of the section, "Upgrade the Database Manually," in Oracle9i Database Migration:

    • "System Considerations and Requirements"

    • "Prepare the Database to Be Upgraded"

  3. Copy configuration files from the Oracle9i (9.0.1.5) Oracle home to the destination Oracle home.

    Specifically, be sure to perform the following tasks on all nodes in which this cluster database has instances configured:

    • If your parameter files reside within the Oracle9i (9.0.1.5) Oracle home (as opposed to outside the Oracle home), then copy the parameter files to the new Oracle home.

      By default, Oracle looks for the parameter file in ORACLE_HOME/dbs on UNIX platforms. The parameter file can reside anywhere you wish, but it should not reside in the Oracle9i (9.0.1.5) Oracle home after you upgrade to the new database release.

    • If your initdb_name.ora file resides within the destination Oracle home, then move or copy the file to the new Oracle home.

      By default, initdb_name.ora should reside in ORACLE_HOME/admin/db_name/pfile directory.

    • If you have a password file that resides within the Oracle9i (9.0.1.5) Oracle home, then move or copy the password file to the new Oracle home.

      The name and location of the password file are operating system specific. On UNIX platforms, the default password file is ORACLE_HOME/dbs/orapwsid.

    • Copy the following file from the Oracle9i (9.0.1.5) Oracle home to the new destination Oracle home:

      ORACLE_HOME/network/admin/tnsnames.ora
      
      
  4. Adjust the database initialization parameters in your parameter file for use with the newly upgraded database, as shown in Table 9-6.

    Table 9-6 Summary of Initialization Parameters to Modify Before Upgrading to Oracle9i Release 2 (9.2.0.6)

    Parameter Value for the New Oracle9i Release 2 (9.2.0.6) Database

    SHARED_POOL_SIZE

    At least 48 MB

    PGA_AGGREGATE_TARGET

    At least 24 MB

    LARGE_POOL_SIZE

    At least 8 MB

    COMPATIBLE

    9.0.1.3

    USER_DUMP_DEST

    Make sure this parameter points to the new Oracle9i Release 2 (9.2.0.6) Oracle home.

    BACKGROUND_DUMP_DEST

    Make sure this parameter points to the new Oracle9i Release 2 (9.2.0.6) Oracle home.

    CORE_DUMP_DEST

    Make sure this parameter points to the new Oracle9i Release 2 (9.2.0.6) Oracle home.


  5. Temporarily adjust the database initialization parameters shown in Table 9-7 during the duration of the upgrade.

    After the upgrade, you must return these parameters to their pre-upgrade values.

    Table 9-7 Initialization Parameters to Modify During the Upgrade to the Oracle9i Release 2 (9.2.0.6) Database

    Parameter Value for the Duration of the Oracle9i Release 2 (9.2.0.6) Upgrade

    REMOTE_LOGIN_PASSWORDFILE

    NONE

    CLUSTER_DATABASE

    FALSE; after the upgrade, you must set this parameter to TRUE.


  6. Make sure that the following environment variables point to the destination Oracle home:

    • ORACLE_HOME

    • PATH

    • ORA_NLS33

    • LD_LIBRARY_PATH

  7. Make sure the ORACLE_SID environment variable is set to the System Identifier (SID) of the 10g (9.0.4) Infrastructure database.

Step 5 Perform the Database Upgrade

Perform the manual upgrade procedure, using the following steps:

  1. Read and perform the steps in the following "Upgrade the Database" subsection of the section, "Upgrade the Database Manually," in Oracle9i Database Migration.

  2. Log in to the system using the account that owns the new Oracle9i Release 2 (9.2.0.1) Oracle home.At the system prompt, change directory to the following directory in the destination Oracle home that you just installed and patched:

    DESTINATION_ORACLE_HOME/rdbms/admin
    
    
  3. Start SQL*Plus and connect to the destination database instance as a user with SYSDBA privileges.

  4. Start up the database by issuing the following command:

    SQL> STARTUP MIGRATE
    
    

    You may need to use the PFILE option to specify the location of your initialization parameter file.

  5. Set the system to spool results to a log file for later verification of success:

    SQL> SPOOL upgrade.log
    
    
  6. Run u0900010.sql to perform the database upgrade operation, as follows:

    SQL> @u0900010.sql
    
    

    Make sure you follow these guidelines when you run the script:

    • You must use the version of the script installed in new Oracle home.

    • You must run the script in the new Oracle home.

    The u0909910.sql script creates and alters certain dictionary tables. It also runs the catalog.sql and catproc.sql scripts that come with the Oracle9i Release 2 (9.2.0.6) patchset. These scripts create the system catalog views and all the necessary packages for using PL/SQL.

  7. Run the cmpdbmig.sql script to upgrade components that can be upgraded while connected with SYSDBA privileges:

    SQL> @cmpdbmig.sql
    
    
  8. Turn off the spooling of script results to the log file:

    SQL> SPOOL OFF
    
    

    Then, check the contents of the upgrade.log file that was generated by the SPOOL command. Verify that the packages and procedures compiled successfully. Correct any problems you find in this file and rerun the appropriate upgrade scripts, if necessary. You can rerun the scripts as many times as necessary.

  9. Shutdown and restart the instance to reinitialize the system parameters for normal operation:

    SQL> SHUTDOWN IMMEDIATE
    SQL> STARTUP
    
    

    The restart will also initialize the Jserver JAVA Virtual Machine and other components.

Step 6 Upgrade the Required Database Components

Use the following guidelines to upgrade the components that existed in the Oracle9i (9.0.1.5) database.


Note:

only the components listed in this section must be upgraded. By default, the OracleAS Metadata Repository database instance requires these database components. Unless you have manually enabled other database components in the Oracle Application Server database instance, there is no need to upgrade database components that are not listed in this section.

  • Oracle Spatial

    Perform the following steps to upgrade Oracle Spatial:

    1. Connect to the database instance as a user with SYSDBA privileges.

    2. Unlock the MDSYS account and reset the password.

    3. Grant the required privileges to the MDSYS user by running the following script:

      SQL> @$ORACLE_HOME/md/admin/mdprivs.sql
      
      
    4. Connect as MDSYS.

    5. Perform the migration by running the following procedure:

      SQL> @$ORACLE_HOME/md/admin/c901u920.sql
      
      
  • Oracle Intermedia

    Upgrade instructions for Oracle interMedia can be found in the following directory in the destination Oracle home:

    DESTINATION_ORACLE_HOME/ord/im/admin/README.txt
    
    
  • Oracle Text

    Use the following procedure to upgrade the Oracle Text database component:

    1. Connect to the database instance as a user with SYSDBA privileges.

    2. If the instance is running, shut it down using the following command:

      SQL> SHUTDOWN IMMEDIATE
      
      
    3. Start up the instance in RESTRICT mode:

      SQL> STARTUP RESTRICT
      
      

      You may need to use the PFILE option to specify the location of your initialization parameter file.

    4. Set the system to spool results to a log file for later verification of success:

      SQL> SPOOL text_upgrade.log
      
      
    5. Unlock the CTXSYS account and reset the password.

    6. Run s0902000.sql to grant new, required database privileges to the user CTXSYS.

      SQL> @$ORACLE_HOME/ctx/admin/s0902000.sql
      
      
    7. Connect to the database instance as user CTXSYS.

    8. Run u0902000.sql to upgrade the CTXSYS schema:

      SQL> @$ORACLE_HOME/ctx/admin/u0902000.sql
      
      
    9. Turn off the spooling of script results to the log file:

      SQL> SPOOL OFF
      

Step 7 Database Post-Upgrade Tasks

You must perform the following post-upgrade tasks on the upgraded database before you can upgrade the OracleAS Identity Management components:

  1. Run the initxml.sql and utlrp.sql scripts on the upgraded database.

    The following procedure is necessary to make sure that no invalid objects remain in the database after the upgrade to Oracle9i Release 2 (9.2.0.6):

    1. Log in to the system as the owner of the Oracle home directory of the new Oracle9i Release 2 (9.2.0.6)

    2. At the system prompt, change to the ORACLE_HOME/rdbms/admin directory.

    3. Start SQL*Plus and connect to the database instance as a user with SYSDBA privileges.

    4. Start up the database by issuing the following command:

      SQL> STARTUP
      
      

      You may need to use the PFILE option to specify the location of your initialization parameter file.

    5. Set the system to spool results to a log file for later verification of success:

      SQL> SPOOL initxml.log
      
      
    6. Run initxml.sql, as follows:

      SQL> @initxml.sql
      
      
    7. Run the utlrp.sql as follows:

      SQL> @utlrp.sql
      
      
    8. Turn off the spooling of script results to the log file:

      SQL> SPOOL OFF
      
      

    After going through all necessary steps, if you find invalid JAVA CLASS or UNDEFINED objects, you may recompile them individually.

  2. Adjust the following initialization parameters back to their pre-upgrade settings:

    1. Set REMOTE_LOGIN_PASSWORDFILE to EXCLUSIVE in the parameter file.

    2. Set CLUSTER_DATABASE initialization parameter to TRUE.

  3. Upgrade SRVM in the Oracle9i (9.0.1.5) Real Application Clusters environment to Oracle9i Release 2 (9.2.0.6):

    1. Set your ORACLE_HOME environment variable to your Oracle9i (9.0.1.5) Oracle home.

    2. Stop the GSD processes on all nodes.

      ps -ef |grep jre
      kill JRE_PID
      
      
    3. Backup the SRVM configuration information.

      ORACLE_HOME/bin/srvconfig -exp /tmp/srvconfig_9iR1
      
      
    4. Set your ORACLE_HOME environment variable to your Oracle9i Release 2 (9.2.0.6) Oracle home.

    5. Re-initialize and restore the SVRM configuration information.

      ORACLE_HOME/bin/srvconfig -imp /tmp/srvconfig_9iR1
      ORACLE_HOME/bin/srvconfig -init -f
      
      
    6. Start the Oracle9i Release 2 (9.2.0.6) GSD on all nodes.

      ORACLE_HOME/bin/gsdctl start
      
      
    7. Verify that srvctl works.

      ORACLE_HOME/bin/srvctl status database -d dbname
      
      
  4. Apply patch 4015165 to the newly upgraded Oracle9i Release 2 (9.2.0.6) database.

    The patch is available from OracleMetaLink (http://metalink.oracle.com).

  5. Configure the database listener on each node of the Real Application Clusters environment, as follows:

    1. Shutdown the database and the database listener:

    2. Copy the listener.ora file from the Oracle9i (9.0.1.5) Oracle home to the following directory in the destination Oracle home:

      DESTINATION_ORACLE_HOME/network/admin directory
      
      
    3. Edit the listener.ora file and replace all occurrences of the Oracle9i (9.0.1.5) Oracle home path with the destination Oracle home path.

    4. Start the listener and OracleAS Metadata Repository database from destination Oracle home.

  6. Start OPMN and OPMN managed processes, and then start the Oracle Application Server Control console on all nodes:

    ORACLE_HOME/opmn/bin/opmnctl startall
    ORACLE_HOME/bin/emctl start iasconsole
    

9.3.4 Use Oracle Universal Installer to Upgrade OracleAS Identity Management

The following sections describe how to upgrade OracleAS Identity Management after you have upgraded the database to a supported version.

The instructions in these sections apply to the first OracleAS Identity Management installation that resides in the source Oracle home where the Oracle9i (9.0.1.5) database was installed:

9.3.4.1 Overview of the OracleAS Identity Management Components

OracleAS Identity Management is part of the Oracle Application Server Infrastructure. It consists of:

  • OracleAS Single Sign-On

  • Oracle Internet Directory

  • Oracle Delegated Administration Services

  • Oracle Directory Integration and Provisioning

  • Oracle Application Server Certificate Authority


Note:

Oracle Application Server Certificate Authority is not a supported Identity Management component for OracleAS 10g (9.0.4) Active Failover Cluster Infrastructure or OracleAS 10g (10.1.2.0.2) Cluster (Identity Management).

9.3.4.2 OracleAS Identity Management Pre-Upgrade Tasks

From the OracleAS 10g (9.0.4) Infrastructure Oracle home, prepare for the OracleAS Identity Management upgrade by performing the following tasks:

9.3.4.2.1 Change the Installation Type for the Oracle Home

After you upgrade the OracleAS Metadata Repository database, the database resides in a new Oracle9i Release 2 (9.2.0.7) Oracle home. However, the OracleAS Identity Management components still resides in the original Oracle home. As a result, the Oracle home is no longer considered a colocated OracleAS Identity Management and OracleAS Metadata Repository Oracle home.

When you run Oracle Universal Installer to upgrade the OracleAS Identity Management components, Oracle Universal Installer performs different tasks based on the installation type of the Oracle home.

Therefore, before you run Oracle Universal Installer to upgrade the OracleAS Identity Management components, you must manually modify the ias.properties file to specify that the Oracle home is no longer a colocated OracleAS Identity Management and Oracle Application Server Metadata Repository Oracle home. Instead, it is now an OracleAS Identity Management Oracle home that is using a OracleAS Metadata Repository installed in a separate Oracle home.

To update the ias.properties file:

  1. Backup the ias.properties, which is located in the following directory in the OracleAS Identity Management Oracle home:

    ORACLE_HOME/config/ias.properties
    
    
  2. Open the ias.properties file with a text editor and change the entries as shown in Table 9-8.

    Table 9-8 Changing the Installation Type in the ias.properties File

    Original Entry Modified Entry

    InstallType=Infrastructure

    InstallType=Infrastructure_ID

    VirtualHostName=virtual_hostname

    VirtualHostName=physical_hostname


9.3.4.2.2 Verify That Required Components Are Up and Running

Before you upgrade the OracleAS Identity Management components, verify that the following requirements are met:

  1. Make sure that the OracleAS Metadata Repository database and the database listener are up and running.

  2. Make sure the Oracle Internet Directory server is up and running.

    To verify that Oracle Internet is running, enter one of the following commands:

    • If you are running Oracle Internet Directory on a non-secure port:

      ORACLE_HOME/bin/ldapbind –p Non-SSL_port
      
      
    • If you are running Oracle Internet Directory on a secure port:

      ORACLE_HOME/bin/ldapbind –p SSL_port –U 1
      
      

    These commands should return a Òbind successfulÓ message.

9.3.4.2.3 Configure the OracleAS Cluster (Identity Management) Environment and the Server Load Balancer

Use the following steps to configure the cluster environment and the server load balancer:

  1. Read and Perform the steps in Section 12.2, ÒPre-Installation Steps for OracleAS Cluster (Identity Management)" in the Oracle Application Server Installation Guide for 10g Release 2 (10.1.2).

  2. When you configure the virtual server name for LDAP SSL and non-SSL connections, note that the virtual server name and port numbers should match those specified in the following entries in the ORACLE_HOME/config/ias.properties file:

    • OIDhost

    • OIDport

    • OIDsslport

  3. When you configure the virtual server name for HTTP SSL and non-SSL connections, note that following:

    • The virtual server name should match the value of the OIDhost entry in the following configuration file:

      ORACLE_HOME/config/ias.properties
      
      
    • The port numbers you specify should match the values of the Oracle HTTP Server port and Oracle HTTP Server SSL port entries in the following configuration file:

      ORACLE_HOME/install/portlist.ini
      
      
  4. Configure your virtual server to direct requests to Node 1 initially.

    Before you start the installation, configure your virtual servers to direct requests to node 1 only. After you complete an installation on a node, then you can add that node to the virtual server.

9.3.4.3 Using Oracle Universal Installer to Upgrade OracleAS Identity Management

After you have upgraded the OracleAS Metadata Repository database and performed the pre-upgrade tasks, upgrade the OracleAS Identity Management on the first node as follows:

  1. Log in to the computer which hosts the database you just upgraded, as the same operating system user that performed the 10g (9.0.4) installation.


    Note:

    You must be logged in as a member of the dba operating system group.

  2. Be sure to set the environment variables, as defined in the section "Environment Variables" in the "Requirements" chapter of the Oracle Application Server Installation Guide.

    In particular, be sure to set following variables so they do not reference any Oracle home directories:

    • PATH

    • CLASSPATH

    • LD_LIBRARY_PATH

    In addition, be sure the following environment variables are not set:

    • TNS_ADMIN

    • ORACLE_HOME

    • ORACLE_SID

  3. Mount the Oracle Application Server 10g Release 2 (10.1.2) CD–ROM and start the installer.


    See Also:

    Oracle Application Server Installation Guide for detailed instructions about starting Oracle Universal Installer on your platform

  4. Refer to Table 9-9 for information on the options you should select on each screen.

  5. After the End of Installation screen appears, exit Oracle Universal Installer and then verify that Oracle Internet Directory and Oracle Application Server Single Sign-On are functioning and accessible in the new 10g Release 2 (10.1.2) Oracle home.


    See Also:

    Oracle Application Server Administrator's Guide, Chapter 1, "Accessing the Single Sign-On Server"

Table 9-9 Summary of the Oracle Universal Installer Screens During the OracleAS Identity Management Upgrade in an OracleAS Cluster (Identity Management) Environment

Screen Description and Recommended Options to Select

Welcome

Welcomes you to Oracle Universal Installer and the Oracle Application Server 10g Release 2 (10.1.2) installation procedure.

Specify File Locations

Enter a name and path for the new Oracle home.

This new Oracle home will be the destination Oracle home for your Oracle Application Server 10g Release 2 (10.1.2) upgrade.

Select a Product to Install

Select OracleAS Infrastructure 10g.

If multiple languages are used in the OracleAS Infrastructure you are upgrading, then click Product Languages.

Language Selection

The screen appears only if you clicked Product Languages on the Select a Product to Install screen.

If multiple languages are used in the OracleAS Infrastructure you are upgrading, select those languages.

If you are not sure which languages were installed, but want languages other than English, click the double arrow button (>>) to select all languages.

Select Installation Type

Select Identity Management because the Oracle home you are upgrading is now a non-colocated Oracle home containing only OracleAS Identity Management.

This Oracle home no longer contains the OracleAS Metadata Repository, which was upgraded into its own Oracle home in Section 9.3.3, "Upgrade the Database That Hosts the OracleAS Metadata Repository".

Upgrade Existing Infrastructure

This screen appears when Oracle Universal Installer detects an existing Oracle Application Server installation of the same type as the one you selected on the Select Installation Type screen.

Select the option to upgrade an existing OracleAS Infrastructure, and then select the Oracle home you want to upgrade from the drop-down list. (If there is only one Infrastructure of the selected time on the computer, then the drop-down list is inactive.)

Specify Infrastructure Database Connection

Enter SYS in the Username field and the SYS user's password in the Password field.

Warning dialog box

This dialog box warns you that the OracleAS Identity Management instance will now be stopped. Oracle Universal Installer will automatically stop any clients within the current Oracle home.Foot 1 

The installer will prompt you if you need to stop any processes manually.

Database Listener Warning Dialog Box

If a database listener is running on the host, a warning dialog box displays. Review the dialog box determine whether or not you need to stop the listener manually.

For more information, see Section 5.3.3, "Stopping the Database Listener When Prompted During the OracleAS Identity Management Upgrade".

Specify Instance Name and ias_admin Password

Enter a name for the new Oracle Application Server 10g Release 2 (10.1.2) instance and a password for the ias_admin Administrator account.

You use the ias_admin password to log on to the Application Server Control Console to manage the Oracle Application Server instance.

In general, the minimum length of the ias_admin password is five alphanumeric characters. At least one of the characters must be a number and the password cannot start with a number.

For more information, see the section "The ias_admin User and Restrictions on its Password" in the Oracle Application Server Installation Guide.

Summary

Use this screen to confirm the choices you've made. Click Install to begin upgrading to the new 10g Release 2 (10.1.2) Oracle home.

A dialog box appears when the copying is complete. This dialog box prompts you to run a configuration script as the root user. Follow the instructions in the dialog box and click OK when script is finished.

The Configuration Assistants

After the initial software is installed, a set of configuration assistants automatically set up the components in the new 10g Release 2 (10.1.2) Oracle home. Use this screen to follow the progress of each assistant and to identify any problems during this phase of the installation.

End of Installation

When the installation and upgrade is complete, this screen provides important details about the 10g Release 2 (10.1.2) Oracle home, such as the URL for the Application Server Control Console and the location of the setupinfo.txt file.

After you review the information on this screen, you can exit Oracle Universal Installer and proceed to the post-upgrade tasks.


Footnote 1 You can access a log of the automated shutdown procedure executed by Oracle Universal Installer in the following directory: ORACLE_HOME/cfgtoollogs/shutdownprocesses.log

9.3.4.4 Performing Post-Upgrade Tasks for the First OracleAS Identity Management Oracle Home

Perform the following tasks after you upgrade OracleAS Identity Management on the first node of the cluster:

  1. Re-register mod_osso using the OracleAS Single Sign-On registration tool.

    After upgrading OracleAS Identity Management, the host name and port number of the Oracle HTTP Server on the Identity Management node must be changed to use the virtual server name that was used during the OracleAS 10g (9.0.4) Active Failover Cluster installation:

    ORACLE_HOME/sso/bin/ssoreg.sh
        -oracle_home_path orcl_home_path
        -site_name instance_name_you_specified_during_upgrade
        -config_mod_osso TRUE
        -mod_osso_url effective_URL_of_the_partner_application
    
    

    in this example, the effective_URL_of_the_partner_application is in this URL format:

    http://virtual_servername:port
    
    
  2. The Oracle HTTP Server has to be reconfigured with the virtual hostname as the ServerName in ORACLE_HOME/Apache/Apache/conf/httpd.conf

    After updating the httpd.conf file, restart HTTP Server.

    ORACLE_HOME/opmn/bin/opmnctl stopproc ias-component=HTTP_Server
    ORACLE_HOME/opmn/bin/opmnctl startproc ias-component=HTTP_Server
    
    
  3. Create and join the Identity Management instance to a DCM cluster.

    ORACLE_HOME/dcm/bin/dcmctl createcluster clustername
    ORACLE_HOME/dcm/bin/dcmctl joincluster clustername
    ORACLE_HOME/dcm/bin/dcmctl listcomponents
    
    

    After creating and joining the cluster, the OC4J_Security instance needs to to be restarted.

    ORACLE_HOME/opmn/bin/opmnctl startproc ias-component=OC4J
    

9.3.5 Use Oracle Universal Installer to Install OracleAS Identity Management on the Other Cluster Nodes

After you have upgraded the OracleAS Metadata Repository database and the OracleAS Identity Management installation on Node 1, you can then install a new 10g Release 2 (10.1.2) OracleAS Identity Management Oracle home on each of the OracleAS Cluster (Identity Management) nodes.

These new installations will operate as members of the OracleAS Cluster (Identity Management) cluster and share the same OracleAS Metadata Repository as the OracleAS Identity Management installation on Node 1.

Refer to the following sections for more information:

9.3.5.1 Installing OracleAS Identity Management on a Cluster Node

Use the following procedure to install OracleAS Identity Management Oracle home on a cluster node:

  1. Log in to the cluster node as the same operating system user that performed the previous OracleAS Identity Management installations.


    Note:

    You must be logged in as a member of the dba operating system group.

  2. Be sure to set the environment variables, as defined in the section "Environment Variables" in the "Requirements" chapter of the Oracle Application Server Installation Guide.

    In particular, be sure to set following variables so they do not reference any Oracle home directories:

    • PATH

    • CLASSPATH

    • LD_LIBRARY_PATH

    In addition, be sure the following environment variables are not set:

    • TNS_ADMIN

    • ORACLE_HOME

    • ORACLE_SID

  3. Mount the Oracle Application Server 10g Release 2 (10.1.2) CD–ROM and start the installer.


    See Also:

    Oracle Application Server Installation Guide for detailed instructions about starting Oracle Universal Installer on your platform

  4. Refer to Table 9-10 for information on the options you should select on each screen.

  5. After the End of Installation screen appears, exit Oracle Universal Installer.

  6. Verify that Oracle Internet Directory and Oracle Application Server Single Sign-On are functioning and accessible in the new 10g Release 2 (10.1.2) Oracle home.


    See Also:

    Oracle Application Server Administrator's Guide, Chapter 1, "Accessing the Single Sign-On Server"

Table 9-10 Summary of the Oracle Universal Installer Screens During the OracleAS Identity Management Installation in an OracleAS Cluster (Identity Management) Environment

Screen Description and Recommended Options to Select

Welcome

Welcomes you to Oracle Universal Installer and the Oracle Application Server 10g Release 2 (10.1.2) installation procedure.

Specify File Locations

Enter a name and path for the new Oracle home.

This new Oracle home will be the destination Oracle home for your new Oracle Application Server 10g Release 2 (10.1.2) OracleAS Identity Management installation.

Select a Product to Install

Select OracleAS Infrastructure 10g.

If multiple languages are used in the OracleAS Infrastructure you are upgrading, then click Product Languages.

Language Selection

The screen appears only if you clicked Product Languages on the Select a Product to Install screen.

If multiple languages are used in the OracleAS Infrastructure you are upgrading, select those languages.

If you are not sure which languages were installed, but want languages other than English, click the double arrow button (>>) to select all languages.

Select Installation Type

Select Identity Management.

There is no need to install another OracleAS Metadata Repository because this installation of OracleAS Identity Management will share the same OracleAS Metadata Repository repository in the database that you upgraded previously.

Select Configuration Options

Select the following options on this screen:

  • Oracle Internet Directory

  • OracleAS Single Sign-On

  • OracleAS Delegated Administration Services

  • OracleAS Directory Integration and Provisioning

  • Select High Availability and Replication.

Do not select OracleAS Certificate Authority (OCA).

Specify Port Configuration Options

Select Manual and enter the full path to your staticports.ini file in the provided field.

Oracle recommends that you use staticports.ini file for OracleAS Cluster (Identity Management) configurations.

For more information, see "Using Custom Port Numbers (the "Static Ports" Feature)" in the Oracle Application Server Installation Guide.

Specify Repository

Use the following guidelines when entering information on this screen:

  • Username: Enter the username to use to log into the OracleAS Metadata Repository database. The user must have DBA privileges.

  • Password: Enter the user's password.

  • Hostname and Port: Enter the names of all the nodes where the Real Application Clusters OracleAS Metadata Repository database is running, and the port numbers.

    Use the format:

    host1.domain.com:port1, host2.domain.com:port2,…
    
  • Service Name: Enter the service name of the database. Note that the service name must include the database domain name.

    Example: asdb.mydomain.com

Warning dialog box

This warning reminds you that you are installing this instance as part of an OracleAS Cluster (Identity Management), and that you need to synchronize the clocks on the nodes in the cluster.

Specify Existing OracleAS Cluster Name

Specify an existing OracleAS Cluster (Identity Management) for the current instance to join. The cluster was created as part of the post-upgrade step during the Identity Management upgrade procedure.

Example: imcluster

Specify ODS Password

Enter the password for the ODS schema in the OracleAS Metadata Repository. The ODS schema is the main schema used by Oracle Internet Directory.

By default, the ODS password is the same as the ias_admin password (the password that you entered in the Specify Instance Name and ias_admin Password screen) when you installed the first instance of OracleAS Identity Management on Node 1.

Specify LDAP Virtual Host and Ports

The values you enter in this screen depend on your scenario. There are two possible scenarios:

Scenario 1: You have configured a virtual server on your load balancer to handle LDAP traffic from Oracle Delegated Administration Services and OracleAS Single Sign-On to Oracle Internet Directory.

Scenario 2: You do not have a load balancer.

Hostname: In scenario 1, enter the name of the virtual server in this field. In scenario 2, enter the name of the computer running Oracle Internet Directory.

Notes on the port values (see "Configure Virtual Server Names and Ports for the Load Balancer" in the Oracle Application Server Installation Guide for details):

  • The port numbers specified on this screen take precedence over the Oracle Internet Directory port numbers specified in the staticports.ini file.

  • The same port numbers will be used for the Oracle Internet Directory on subsequent nodes and for the load balancer.

SSL Port: In scenario 1, enter the port configured on the virtual server to handle SSL LDAP connections. In scenario 2, enter the port that you want Oracle Internet Directory to use for SSL connections. The standard port number for SSL LDAP connections is 636, but you can use any port that you want.

Non-SSL Port: In scenario 1, enter the port configured on the virtual server to handle non-SSL LDAP connections. In scenario 2, enter the port that you want Oracle Internet Directory to use for non-SSL connections. The standard port number for non-SSL LDAP connections is 389, but you can use any port that you want.

Warning Dialog Box

This dialog box reminds you that you are installing OracleAS Identity Management as part of a cluster and to configure your LDAP virtual server accordingly.

Specify OID Login

Username: Enter the username to log into Oracle Internet Directory. You need to log in as the Oracle Internet Directory superuser (cn=orcladmin).

Password: Enter the password for the username.

Specify HTTP Load Balancer Host and Ports

HTTP Listener: Port: Enter the port number that you want Oracle HTTP Server to listen on.

Enable SSL: Select this option if you want to configure Oracle HTTP Server for SSL on this port.

HTTP Load Balancer: Hostname: Enter the name of the HTTP virtual server configured on your load balancer.

HTTP Load Balancer: Port: Enter the port of the HTTP virtual server.

Enable SSL: Select this option if this port is for SSL communications only.

Specify Instance Name and ias_admin Password

Enter a name for the new Oracle Application Server 10g Release 2 (10.1.2) instance and a password for the ias_admin Administrator account.

You use the ias_admin password to log on to the Application Server Control Console to manage the Oracle Application Server instance.

In general, the minimum length of the ias_admin password is five alphanumeric characters. At least one of the characters must be a number and the password cannot start with a number.

For more information, see the section "The ias_admin User and Restrictions on its Password" in the Oracle Application Server Installation Guide.

Summary

Use this screen to confirm the choices you've made. Click Install to begin upgrading to the new 10g Release 2 (10.1.2) Oracle home.

A dialog box appears when the copying is complete. This dialog box prompts you to run a configuration script as the root user. Follow the instructions in the dialog box and click OK when script is finished.

The Configuration Assistants

After the initial software is installed, a set of configuration assistants automatically set up the components in the new 10g Release 2 (10.1.2) Oracle home. Use this screen to follow the progress of each assistant and to identify any problems during this phase of the installation.

Note: If the OPMN Configuration Assistant fails, do not exit the Installation. Instead, refer to Section 9.3.5.2, "Manually Copying the osso.conf Configuration File".

End of Installation

When the installation and upgrade is complete, this screen provides important details about the 10g Release 2 (10.1.2) Oracle home, such as the URL for the Application Server Control Console and the location of the setupinfo.txt file.

After you review the information on this screen, you can exit Oracle Universal Installer and proceed to the post-upgrade tasks.


9.3.5.2 Manually Copying the osso.conf Configuration File

If the OPMN Configuration Assistant fails during the OracleAS Identity Management installation, copy the following file from the Oracle home of the first OracleAS Identity Management installation to the current OracleAS Identity Management Oracle home and then try running the configuration assistant again:

ORACLE_HOME/Apache/Apache/conf/osso/osso.conf

9.3.5.3 Reconfiguring the Server Load Balancer

After upgrading and installing Identity Management components on all nodes, reconfigure your load balancer to direct requests to all nodes where OracleAS Identity Management has been installed.

9.3.6 Upgrade the Middle Tiers

Refer to Chapter 4, "Upgrading the Middle Tier" for complete instructions on upgrading your Oracle Application Server middle-tier installations.

9.3.7 Upgrade the Component Schemas in the OracleAS Metadata Repository

After you have upgraded the database that hosts the OracleAS Metadata Repository, upgraded and installed the OracleAS Identity Management installations, and upgraded the middle-tier installations, you can then use the Metadata Repository Upgrade Assistant (MRUA) to upgrade the component schemas in the repository.

Refer to Section 7.4, "Task 4: Run the Metadata Repository Upgrade Assistant (MRUA)" for complete instructions on running MRUA.

In addition, refer to the following known problems and workarounds when upgrading the OracleAS Metadata Repository in an OracleAS Cluster (Identity Management) environment:

9.3.7.1 Manually Creating the B2B Tablespaces Before Running MRUA

There is a known problem where MRUA is unable to create the B2B tablespaces required by certain Oracle Application Server components.

To address this problem, manually create the tablespaces shown in Table 9-11 in the OracleAS Metadata Repository database before running MRUA.

Table 9-11 B2B Schemas to Create Manually Before Running MRUA in an OracleAS Cluster (Identity Management) Environment

B2B Tablespace Name Size

B2B_DT

system_datafile_path/B2B_DT.dbf

128M

B2B_RT

system_datafile_path/B2B_RT.dbf

128M

B2B_IDX

system_datafile_path/B2B_IDX.dbf

128M

B2B_LOB

system_datafile_path/B2B_LOB.dbf

128M


9.3.7.2 Oracle Ultra Search Component Schema Not Upgraded Successfully

When you use the instructions in Chapter 7, "Upgrading the OracleAS Metadata Repository" to verify the upgrade of the component schemas, you may find that the Oracle Ultra Search schema has not been upgraded successfully.

This is a known issue. No workaround is available at this time.

9.3.8 Optionally Decommission and Deinstall the Source Oracle Homes

Refer to the instructions in the following sections for more information on decommissioning and deinstalling your source Oracle homes:

9.4 Transforming 10g (9.0.4) Rack-Mounted Identity Management to OracleAS Cluster (Identity Management)

The following sections describe how to transform a 10g (9.0.4) Rack-Mounted Identity Management environment to OracleAS Cluster (Identity Management):

9.4.1 About Rack-Mounted Identity Management and OracleAS Cluster (Identity Management)

Following the release of Oracle Application Server 10g (9.0.4), a procedure was released for deploying multiple Identity Management instances against one Infrastructure Metadata Repository. This procedure was released in the form of a whitepaper titled Highly Available Identity Management example - Rack Mounted Identity Management and it was made available to customers on the Oracle Technology Network (OTN) at:

http://www.oracle.com/technology/products/ias/hi_av/index.html

Note that the link to the whitepaper on OTN might actually be shown as Highly Available Identity Management Deployment Example - Multi-box Identity Management.

With the release of Oracle Application Server 10g Release 2 (10.1.2), an "out-of-the-box" Multiple Identity Management solution is now available. This configuration is known as OracleAS Cluster (Identity Management).


See Also:

"Installing in High Availability Environments: OracleAS Cluster (Identity Management)" in the Oracle Application Server Installation Guide

The following sections provide step-by-step instructions for customers who wish to upgrade their 10g (9.0.4) Multiple Identity Management deployment to an OracleAS 10.1.2 Clusters (Identity Management) deployment.

The testing and steps provided in this document are based upon an OracleAS Identity Management implementation deployed on RedHat Linux 3.0. The steps provided in this document, however, apply to any Unix platform.

9.4.2 OracleAS Cluster (Identity Management) Upgrade Requirements

The following sections describe the requirements you must meet in order to transform your highly available environment from 10g (9.0.4) Rack-Mounted Identity MAnagement to OracleAS Cluster (Identity Management):

9.4.2.1 OracleAS Identity Management Configuration Requirements

Before you use this procedure, you must consider the following configuration requirements:

  • You must have followed the exact set of steps outlined in the paper Highly Available Identity Management example - Rack Mounted Identity Management

  • The Identity Management instances you are upgrading must be 10g (9.0.4) intances; previous releases of OracleAS are not supported for this configuration.

  • The Metadata Repository must have been created in an Oracle9i Release 2 (9.2.0.1) or greater database, using the 10g (9.0.4) OracleAS Metadata Repository Creation Assistant (MRCA).

9.4.2.2 Requirements for Colocated Versus Distributed OracleAS Identity Management

OracleAS Identity Management consists of components that can also be installed separately:

  • Oracle Internet Directory (OID)

  • OracleAS Single Sign-On (SSO)

  • Oracle Delegated Administration Services (DAS)

  • Oracle Directory Integration and Provisioning (DIP)

This procedure does not include support for Oracle Application Server Certificate Authority (OCA).

In this procedure, the primary focus is on installations where all Identity management components are installed in one Oracle home. This is known as a colocated OracleAS Infrastructure, which includes Oracle Internet Directory, Oracle Delegated Administration Services, and OracleAS Single Sign-On, all installed within the same Oracle home.

To upgrade a distributed OracleAS Identity Management configuration where the Identity Management components are separated into two tiers, see Section 9.4.9, "About Upgrading a Distributed OracleAS Cluster (Identity Management) Environment". Such a configuration might be required, for example, where an organization needs the OracleAS Single Sign-On and Oracle Delegated Administration Services components running in a the DMZ and the Oracle Internet Directory running on the internal network inside the firewall.

9.4.2.3 OracleAS Metadata Repository Storage Requirements

This procedure assumes the database that hosts the OracleAS Metadata Repository is an Oracle Real Application Clusters (RAC) Database. Specifically, the procedure described in this section was tested on a two-node RAC environment. However, it is assumed that this procedure also applies to:

  • A single-instance database

  • A Real Application Clusters database consisting of more than two nodes

The requirement for Real Application Clusters is a shared-storage configuration. The implementation of the shared volume is vendor-specific. The procedures in this section should be applicable to all Operating systems and clusters but were developed and tested in a Linux environment. Specifically, the following shared storage options are supported:

  • Raw devices

  • Cluster filesystem (for example, OCFS on Linux)

  • Network filesystem (for example, supported NAS devices)

Although cluster and volume management software is vendor-specific, the steps and considerations provided in this section apply specifically to customers wishing to optionally implement Oracle's Automated Storage Management (ASM).

9.4.2.4 OracleAS Cluster (Identity Management) Backup Requirements

Before you begin this transformation procedure, take a complete, full software backup of everything in the Oracle Home and related directories for the OracleAS Metadata Repository and the OracleAS Identity Management instances.

In addition, shut down all processes and perform a full cold database backup of the middle tiers and Infrastructure Oracle homes.

9.4.3 Overview of the OracleAS Cluster (Identity Management) Transformation Process

The General steps for transforming an OracleAS 10g (9.0.4) Identity Management implementation to an OracleAS 10g (10.1.2.0.2) Clusters (Identity Management) implementation are shown in Table 9-12.

Table 9-12 Summary of the OracleAS Cluster (Identity Management) Transformation

Step No. Description More Information

1

Upgrade the Database to a supported version, if required.

Section 9.4.4, "Upgrading the Database That Hosts the OracleAS Metadata Repository"


2

Upgrade any existing middle tiers to 10g Release 2 (10.1.2).

Section 9.4.5, "Upgrading the Middle Tiers"


3

Upgrade one of the Identity Management instances from 9.0.4 to 10.1.2 using the Oracle Universal Installer (OUI)

Section 9.4.6, "Upgrading the First OracleAS Identity Management Instance"


4

Upgrade the existing 10g (9.0.4) OracleAS Metadata Repository to 10g Release 2 (10.1.2) Metadata Repository using the Metadata Repository Upgrade Assistant (MRUA).

Section 9.4.7, "Using Metadata Repository Upgrade Assistant to Upgrade the Component Schemas in the OracleAS Metadata Repository"


5

Install new Identity Management instances against the upgraded Metadata Repository and Identity Management schemas

Section 9.4.8, "Installing Subsequent OracleAS Cluster (Identity Management) Instances"



9.4.4 Upgrading the Database That Hosts the OracleAS Metadata Repository

Before you can upgrade to OracleAS Cluster (Identity Management), you must upgrade the database that hosts the OracleAS Metadata Repository to a supported database.

For detailed instructions on upgrading the database that hosts the OracleAS Metadata Repository, see Section 7.1, "Task 1: Upgrade the Database That Hosts the OracleAS Metadata Repository".


Note:

When applying database patchsets, be sure to carefully review the patchset README for your specific platform. The instructions for installing patchsets can vary significantly from platform to platform. For example, some platforms, such as Linux, might require you to install a specific version of Oracle Universal Installer before proceeding with the patschset installation.

9.4.5 Upgrading the Middle Tiers

After you upgrade the database that hosts the OracleAS Metadata Repository, you should upgrade any middle-tier installations that use the Rack-Mounted Identity Management Infrastructure.

Refer to Chapter 4, "Upgrading the Middle Tier" for more information.

9.4.6 Upgrading the First OracleAS Identity Management Instance

After the database that hosts the OracleAS Metadata Repository has been upgraded to a supported version, and after the middle tiers have been upgraded to 10g Release 2 (10.1.2), you can now upgrade the first OracleAS Identity Management Oracle home in the Rack-Mounted Identity Management configuration.

When you upgrade the first OracleAS Identity Management Oracle home, you also upgrade the OracleAS Identity Management schemas in the OracleAS Metadata Repository.

Note that in an OracleAS Cluster (Identity Management), the Identity Management instances are clustered together in a Distributed Configuration Management (DCM) Cluster. This ensures synchronization between the configurations of the different Identity Management components on all of the Identity Management instances.

To upgrade the first OracleAS Identity Management Oracle home, use the following steps.

  1. Make sure that the other OracleAS Identity Management Instances in the Rack-Mounted Identity Management environment are down.

    Only the OracleAS Identity Management instance that you are upgrading first should be up and running. If necessary, shut down the other OracleAS Identity Management instances.

  2. Configure the Load Balancer to direct traffic only to the OracleAS Identity Management instance you are about to upgrade

    All Requests should be directed only to the OracleAS Identity Management instance you are about to upgrade. The other OracleAS Identity Management instances in the Rack-Mounted Identity Management environment should be shut down.

  3. Use the Oracle Application Server 10g Release 2 (10.1.2) installation procedure to upgrade the OracleAS Identity Management instance.

    Refer to Section 5.5.2, "Upgrading OracleAS Identity Management in a Non-Colocated 10g (9.0.4) Infrastructure" for complete instructions on upgrading the first OracleAS Identity Management Oracle home.

  4. Perform any post-upgrade procedures that apply to your OracleAS Identity Management environment.

    Refer to Section 5.6, "Task 5: Complete the OracleAS Identity Management Upgrade" for more information.

  5. Make sure that the Oracle HTTP Server listener is configured correctly.

    Edit the following Oracle HTTP Server configuration file and make sure that the ServerName directive is set to the virtual host (for example, imhost.domain.com) and not to the physical host:

    ORACLE_HOME/Apache/Apache/conf/httpd.conf
    
    
  6. Configure OracleAS Single Sign-On to accept authentication requests.

    Run the following command to verify that OracleAS Single Sign-On is configured correctly:

    ORACLE_HOME/sso/bin/ssocfg.sh http imhost.domain.com 7777
    
    

    In this example, imhost.domain.com is the address configured at the load balancer for HTTP requests. The default HTTP Listener port is 7777, but this port may differ for your specific installation.

  7. Re-register the instance with OracleAS Single Sign-On:

    Run the following command:

    ORACLE_HOME/sso/bin/ssoreg.sh
        -oracle_home_path orcl_home_path
        -site_name instance_name_you_specified_during_upgrade
        -config_mod_osso TRUE
        -mod_osso_url effective_URL_of_the_partner_application
        -u userid 
    
    

    In this example:

    • The effective_URL_of_the_partner_application is in this URL format:

      http://virtual_servername:port
      
      
    • Replace userid with the Oracle owner.

    Note that at this point in the procedure, the upgraded OracleAS Identity Management Oracle home should be a fully working 10g Release 2 (10.1.2) OracleAS Identity Management instance running against the Real Application Clusters database. The load balancer is still pointing to only this new, upgraded instance.

  8. Create a Distributed Configuration Management (DCM) cluster that the other OracleAS Identity Management instances can join:

    1. Enter the DCM command-line shell:

      ORACLE_HOME/dcm/bin/dcmctl shell
      
      
    2. Create a new Cluster:

      DCM> createcluster -cl IMcluster
      
      

      In this example, IMCluster is the name you assign to the cluster.

    3. Join the DCM cluster as the first instance:

      DCM> joincluster -cl IMcluster
      
      

      At this point the instance will be stopped.

    4. Restart the instance:

      opmnctl startall
      
      

      A new cluster has now been created with the upgraded IM instance as its sole member.

9.4.7 Using Metadata Repository Upgrade Assistant to Upgrade the Component Schemas in the OracleAS Metadata Repository

  1. Make sure that the OracleAS Identity Management instance (including Oracle Internet Directory) that you upgraded in Section 9.4.6, "Upgrading the First OracleAS Identity Management Instance" is up and running.

    If it is not running, start the Identity Management instance (including Oracle Internet Directory) as follows:

    ORACLE_HOME/opmn/bin/opmnctl startall
    
    
  2. Upgrade the Metadata Repository in the newly upgraded database as described in Section 7.4, "Task 4: Run the Metadata Repository Upgrade Assistant (MRUA)", with the following exception:

    On the MRUA command line, enter the address of the load balancer in place of the oid_host and oid_ssl_port arguments.

    Note that the values you enter for the -oid_host argument and -oid_ssl_port arguments must match the value of the corresponding properties defined in following configuration file in the Identity Management Oracle home:

    IDENTITY_MANAGEMENT_HOME/config/ias.properties
    
    

    For example:

    OIDhost=sys42.acme.com
    OIDsslport=636
    
    
  3. When MRUA finishes processing, verify that the schemas have been upgraded, as described in Section 7.4.9, "Using a SQL Query to Verify the Success of the OracleAS Metadata Repository Upgrade"

  4. Complete the OracleAS Metadata Repository upgrade using the instructions in the following sections:

9.4.8 Installing Subsequent OracleAS Cluster (Identity Management) Instances

After you upgrade the first OracleAS Identity Management instance in the cluster, and after you upgrade the OracleAS Metadata Repository, you can then install the additional OracleAS Identity Management instances in the OracleAS Cluster (Identity Management):

  1. Make sure that the Oracle Internet Directory is up and running on the first OracleAS Identity Management instance.

  2. Make sure that the OracleAS Metadata Repository database and listener are up and running.

  3. Make sure that the Load Balancer is configured to direct traffic only to the first Identity Management instance.

  4. Install the new 10g Release 2 (10.1.2) OracleAS Identity Management Oracle home by following the instructions in the section "Installing OracleAS Cluster (Identity Management) on Subsequent Nodes," in the Oracle Application Server Installation Guide.

  5. Reconfigure Load Balancer and test the installation.

    After a successful installation of the subsequent OracleAS Identity Management Oracle home, configure the Load Balancer to route requests to the new instance.

  6. Repeat this procedure for any additional and subsequent OracleAS Identity Management installations that will be part of the cluster.

9.4.9 About Upgrading a Distributed OracleAS Cluster (Identity Management) Environment

In a distributed OracleAS Cluster (Identity Management) environment, the Oracle Internet Directory is installed in a separate Oracle home from the other OracleAS Identity Management components.

The procedure for upgrading a distributed OracleAS Identity Management components is the same as that for upgrading colocated OracleAS Identity Management installations, with the following exception:

  1. Upgrade the Internet Directory (OID) Oracle Home as described in Steps 1-5 of Section 9.4.6, "Upgrading the First OracleAS Identity Management Instance".

  2. Create the Distributed Configuration Management cluster, as described in step 8 of Section 9.4.6, "Upgrading the First OracleAS Identity Management Instance".

  3. Verify that the OID has been upgraded and works successfully.

  4. Upgrade the OracleAS Single Sign-On and Oracle Delegated Administration Services Oracle Home, as described in Section 9.4.8, "Installing Subsequent OracleAS Cluster (Identity Management) Instances".

  5. Re-associate OracleAS Single Sign-On as described in Step 7 of Section 9.4.6, "Upgrading the First OracleAS Identity Management Instance".