Installing OIM 10g (9.1.0.2)

The steps required to install OIM 9.1.x on a RHEL environment using weblogic and an Oracle DB
March 21, 2013
OIM-11g

Pre-requisites


Domain Location: /home/oracle/Oracle/910Middleware/user_projects/domains/91x_domain (WLS Domain was created prior to the next steps)
Admin Server URL: http://localhost.localdomain:7001

-- Weblogic + java version Version: WebLogic Server 10.3.6.0
starting weblogic with Java version: java version "1.6.0_26"
Java(TM) SE Runtime Environment (build 1.6.0_26-b03)

-- Database Version
[oracle@localhost bin]$ sqlplus / as sysdba

SQL*Plus: Release 11.2.0.1.0 Productionon Mon Aug 27 12:19:00 2012

Copyright (c) 1982, 2009, Oracle. All rights reserved.

Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options


Preparing the Database for OIM Installation

[oracle@localhost oracle]$ pwd
/home/oracle/Oracle/910Middleware/OIM9101/installServer/Xellerate/db/oracle
[oracle@localhost oracle]$ ./prepare_xl_db.sh

## Enter the ORACLE HOME directory or Press [Enter] to accept the default /home/oracle/app/oracle/product/11.2.0/dbhome_1 as ORACLE_HOME.


## Current database is orcl
Do you want to continue with this database [y,Y,n,N] ?
y

## Enter the Oracle Identity Manager user name
xelsysadm
## Enter the password for Oracle Identity Manager (xelsysadm) user

## Enter the tablespace to hold the Oracle Identity Manager user data
OIMTS01

## Enter the directory to store the datafile for the Oracle Identity Manager tablespace
/home/oracle/Oracle/910Middleware/OIM9101/xeltspace

## Enter the name of the datafile without the extension .dbf
(For e.g. xeltspace_01)
xeltspace_01

## Enter the Temporary tablespace for Oracle Identity Manager User
TEMP

Validating the given inputs...
Validating the given inputs is done.

Preparing the database for Oracle Identity Manager. Please wait...

Database preparation is successful. Please check the log
file prepare_xell_db.lst for more info.


Installing OIM

[ ] 1 - Bulgarian
[ ] 2 - Croatian
[ ] 3 - Czech
[ ] 4 - Danish
[ ] 5 - Dutch
[ ] 6 - English
[ ] 7 - Finnish
[ ] 8 - French
[X] 9 - German
[ ] 10 - Greek
[ ] 11 - Hungarian
[ ] 12 - Italian
[ ] 13 - Japanese
[ ] 14 - Korean
[ ] 15 - Norwegian
[ ] 16 - Polish
[ ] 17 - Portuguese
[ ] 18 - Portuguese (Brazil)
[ ] 19 - Romanian
[ ] 20 - Russian
[ ] 21 - Simplified Chinese
[ ] 22 - Slovak
[ ] 23 - Slovenian
[ ] 24 - Spanish
[ ] 25 - Swedish
[ ] 26 - Traditional Chinese
[ ] 27 - Turkish

To select an item enter its number, or 0 when you are finished: [0] 0

To select an item enter its number, or 0 when you are finished: [0] 0


Oracle Identity Manager Server Installer: Welcome Message

Welcome to Oracle Identity Manager [Variable "productver" is not defined]


Oracle Identity Manager[Variable "productver" is not defined] is the most
advanced, secure enterprise provisioning system available for automatically
granting and revoking user access to enterprise applications and managed
systems.

Before you install Oracle Identity Manager, you must complete the
preinstallation steps. Review the Oracle Identity Manager Installation Guide ,
and ensure that you have completed these steps. After you install the software,
there are postinstallation steps that you must complete before you can use
Oracle Identity Manager.

Press 1 for Next, 3 to Cancel or 5 to Redisplay [1] 1

Oracle Identity Manager Server Installer: Admin User Information

Enter the password for System Administrator (xelsysadm).

User Password:

Confirm User password:

Press 1 for Next, 2 for Previous, 3 to Cancel or 5 to Redisplay [1] 1

Oracle Identity Manager Server Installer: Oracle Identity Manager Application Options

Press 1 for Next, 2 for Previous, 3 to Cancel or 5 to Redisplay [1]

Select the Oracle Identity Manager application that you want to install:

[X] 1 - Oracle Identity Manager
[ ] 2 - Oracle Identity Manager with Audit and Compliance Module

To select an item enter its number, or 0 when you are finished: [0]

Oracle Identity Manager Server Installer: Target directory

Oracle Identity Manager Install Location

Please specify a directory or press Enter to accept the default directory.
Destination Directory: [//home/oracle/Oracle] /home/oracle/Oracle/910Middleware/OIM9101

Press 1 for Next, 2 for Previous, 3 to Cancel or 5 to Redisplay [1] 1

Oracle Identity Manager Server Installer: Database Information

Provide database connectivity information:

Database Host name or IP Address: [localhost]
Port Number: [1521]
Database SID: orcl
User Name: xelsysadm
Password (Enter the password; DO NOT paste it):

Press 1 for Next, 2 for Previous, 3 to Cancel or 5 to Redisplay [1]

Oracle Identity Manager Server Installer: Authentication Information

Oracle Identity Manager [Variable "productver" is not defined] Server - Select Authentication

Select the Authentication mode for the Oracle Identity Manager Web Application.
If the SSO mode is selected, then enter the header value in the space provided.

[X] 1 - Oracle Identity Manager Default Authentication
[ ] 2 - SSO Authentication

To select an item enter its number, or 0 when you are finished: [0]


Press 1 for Next, 2 for Previous, 3 to Cancel or 5 to Redisplay [1]

Oracle Identity Manager Server Installer: Application Server

Select the application server to be used to deploy Oracle Identity Manager:

[X] 1 - Oracle Weblogic
[ ] 2 - Oracle Application Server
[ ] 3 - JBoss Application Server
[ ] 4 - IBM WebSphere

To select an item enter its number, or 0 when you are finished: [0]


Press 1 for Next, 2 for Previous, 3 to Cancel or 5 to Redisplay [1]

Oracle Identity Manager Server Installer: Cluster Information

Enter information about application server clustering.

The Application Server is clustered:

[ ] 1 - Yes
[X] 2 - No

To select an item enter its number, or 0 when you are finished: [0]


Press 1 for Next, 2 for Previous, 3 to Cancel or 5 to Redisplay [1]

Oracle Identity Manager Server Installer : Oracle Weblogic Directory Information

Provide the following information for the Oracle Weblogic Application
Server:
Enter the path of the directory.

Provide the location where the application server is installed:
[/opt/bea/wlserver_10.3]/home/oracle/Oracle/Middleware11120/wlserver_10.3
Provide the location of the JDK used to run the Application Server:
[/opt/bea/jdk160_05]/home/oracle/Oracle/Middleware11120/jdk1.6.0_26

Press 1 for Next, 2 for Previous, 3 to Cancel or 5 to Redisplay [1]
The selected JDK version is not supported by Oracle Identity Manager.
Oracle Identity Manager may not function correctly if you continue installation with this unsupported version of JDK.
Do you want to proceed with this unsupported version?y/n
y

Oracle Identity Manager Server Installer: Oracle Weblogic Application Server Information

Enter the following information for Oracle Weblogic:

Host Name or IP Address: [localhost]

Admin Port: [7001]

WebLogic Server Name: [AdminServer]

WebLogic Server Port: [7001]

Login Name: [weblogic]

Password (Enter the password; DO NOT paste it):

Confirm Password (Enter the password; DO NOT paste it):

Press 1 for Next, 2 for Previous, 3 to Cancel or 5 to Redisplay [1]
Oracle Identity Manager Installer has found Oracle Weblogic is not running. Start Oracle Weblogic, and then proceed with Oracle Identity Manager installation.

About the author

Daniel is a Technical Manager with over 10 years of consulting expertise in the Identity and Access Management space.
Daniel has built from scratch this blog as well as technicalconfessions.com
Follow Daniel on twitter @nervouswiggles

Comments

Other Posts

AWS-PHP integration - Email not sent. SMTP Error: Could not authenticate.

phpsmtpaws

February 6, 2020
Created by: Daniel Redfern
AS I was migrating my environment into an S3 environment, I wanted to leverage off the SES services that AWS provide, more specifically, to leverage the off the SMTP functionality by sending an email via PHP
Read More...

SOLUTION: no headers files (.h) found in softwareserial - Arduino

Arduino

February 24, 2019
Created by: Daniel Redfern
The WeMos D1 is a ESP8266 WiFi based board is an extension to the current out-of-the-box library that comes with the Arduino installation. Because of this, you need to import in the libraries as well as acknowledging the specific board. This process is highly confusion with a number of different individuals talking about a number of different ways to integrate.
Read More...

NameID element must be present as part of the Subject in the Response message

ShibbolethSAML

August 7, 2018
Created by: Daniel Redfern
NameID element must be present as part of the Subject in the Response message, please enable it in the IDP configuration.
Read More...

HOW TO provision AD group membership from OpenIDM

OpenIDMICFAD-connector

June 15, 2018
Created by: Daniel Redfern
For what I see, there's not too many supportive documentations out there that will demonstrate how provision AD group membership with the ICF connector using OpenIDM. The use of the special ldapGroups attribute is not explained anywhere in the Integrators guides to to the date of this blog. This quick blog identifies the tasks required to provision AD group membership from OpenIDM to AD using the LDAP ICF connector. However this doesn't really explain what ldapGroups actually does and there's no real worked example of how to go from an Assignment to ldapGroups to an assigned group in AD. I wrote up a wiki article for my own reference: AD group memberships automatically to users This is just my view, others may disagree, but I think the implementation experience could be improved with some more documentation and a more detailed example here.
Read More...

ForgeRock OpenIDM - InvalidCredentialException: Remote framework key is invalid

ICFIDMOpenIDMOpenICF

November 8, 2017
Created by: Daniel Redfern
In the past, the similar error occurred though for the Oracle Identity Management solution. invalidcredentialexception remote framework key is invalid Because they all share the ICF connector framework, the error/solution would be the same.
Read More...

org.forgerock.script.exception.ScriptCompilationException: missing ; before statement

IDMsync.confforgerockopenidm

November 8, 2017
Created by: Daniel Redfern
org.forgerock.script.exception.ScriptCompilationException: missing ; before statement
Read More...

ForgeRock IDM - org.forgerock.script.exception.ScriptCompilationException: missing ; before statemen

OpenIDMsync.confForgeRock

September 17, 2017
Created by: Daniel Redfern
ForgeRock IDM - org.forgerock.script.exception.ScriptCompilationException: missing ; before statement
Read More...

Caused by: org.forgerock.json.resource.BadRequestException: Target does not support attribute groups

OpenIDMForgeRockICFConnector

September 17, 2017
Created by: Daniel Redfern
When performing the attempt of a reconciliation from ForgeRock IDM to Active Directory, I would get the following error
Read More...

ForgeRock OpenIDM - InvalidCredentialException: Remote framework key is invalid

OpenIDMForgeRockICFConnectorAD

September 17, 2017
Created by: Daniel Redfern
In the past, the similar error occurred though for the Oracle Identity Management solution. invalidcredentialexception remote framework key is invalid Because they all share the ICF connector framework, the error/solution would be the same.
Read More...

ERROR Caused by com.google.api.client.auth.oauth2.TokenResponseException 400 Bad Request - invalid_g

OpenIDMIDMGoogleGoogle-AppsICFreconciliation

September 12, 2017
Created by: Daniel Redfern
During the reconcilation from OpenIDM to the ICF google apps connector, the following error response would occur. ERROR Caused by com.google.api.client.auth.oauth2.TokenResponseException 400 Bad Request - invalid_grant
Read More...