Saturday, September 29, 2012

All About Oracle IDM



How to register virtual host with SSO.

$ORACLE_HOME/sso/bin/ssoreg.sh -site_name facebook -mod_osso_url https://facebook.com:443 -virtualhost -config_mod_osso TRUE -oracle_home_path $ORACLE_HOME -remote_midtier -config_file $ORACLE_HOME/Apache/Apache/conf/osso/osso_facebook.conf


Unlocking super user cn=orcladmin account.
go to /u01/app/oracle/product/OID/UAT2OIDAS/ldap/bin
./oidpasswd conn=MYORCLDB  unlock_su_account=true

Changing cn=orcladmin password if ODS password is known
oidpasswd  conn=Connect string   reset_su_password=true

Changing cn=orcladmin password if ODS password is unkown or forgotten.

Resetting the cn=orcladmin is bit lengthy and would require some down time on OID.

1. Shutdown the OID processes

$ opmnctl stopproc ias-component=OID

2. Verify that there is no OID process running

% ps -ef | grep -i oid

3. Rename ls oidpwd* files in $ORACLE_HOME/ldap/admin directory.

4. Login into OID database and change ODS password

SQL> alter user ods identified by password;

5. Verify that you are able to login to the database using following command.

$ sqlplus ods/password@connect_string

6. Execute the oidpasswd command to recreate the files renamed in step 3

%oidpasswd conn=connect_string create_wallet=true

Note: To use in this step the same password defined in step 4.

7. Verify that the files renamed in step 3 have been recreated under $ORACLE_HOME/ldap/admin directory

8. If the orcladmin account is locked then use following command

$ oidpasswd conn=connect_string unlock_su_acct=true

9. If the password for orcladmin needs to be changed then use following command

$ oidpasswd conn=connect_string reset_su_password=true
OID DB user password:
password: Enter password
confirm password: Enter Password
OID super user password reset successfully

10. Start the OID process

% opmnctl startproc ias-component=OID

11. Verify that the account orcladmin has been unlocked or that the password has been changed successfully
$ $ORACLE_HOME/bin/ldapbind -p port -D cn=orcladmin -w newpasswd

Importing profile in OID for Sync User/PWD Sync.

bash-3.2$ dipassistant  mp -h pvttap03 -port 389 -w 'PWD123$$' -profile UAT2UMDBImport odip.profile.configfile=/u01/app/oracle/product/OID/UAT/ldap/odi/conf/dbreader_ums.cfg
--Profile successfully modified.
bash-3.2$ dipassistant  mp -h pvttap03 -port 389 -w 'PWD123$$' -profile UAT2UMDBImport odip.profile.mapfile=/u01/app/oracle/product/OID/UAT/ldap/odi/conf/dbreader_ums.map
--Profile successfully modified.

Reference:
472752.1 : How to Unlock/Reset Super User cn=orcladmin When the ODS’s Password Has Been Forgotten or is Unknown?
251354.1:  OID Superuser Password Locked: How to Unlock the orcladmin Password

No comments:

Post a Comment