Role Manager Documentation

Oracle Identity Analytics (formerly Sun Role Manager) still has its documentation in a Sun wiki at http://wikis.sun.com/display/OIA11gDocs/Home.

Recently there have been some improvements made to that documentation, especially in the area of integrating with Oracle Identity Manager and Oracle Waveset (formerly Sun Identity Manager) provisioning systems. See the System Integrator's Guide.

HOWEVER, these changes appear to have only been made to the online wiki pages and NOT to the PDF documents. For the time being, check the wiki pages for the latest and greatest information.

I would expect that at some time, Oracle will take the info off of the wiki and package it to match the Oracle documentation standards.

Sun Waveset IDM Migration to Oracle Identity Manager

If you are running Sun/Waveset Identity Manager, you should be watching for what you options will be in the future.

Here is the first migration discussion I've seen from Oracle, about migrating from Waveset to OIM. The white paper explains what Waveset features map to which OIM features and suggest for the most part that, if you plan to migrate to OIM, you try to avoid any Wavset function that does NOT map to an OIM function.

If you happen to go to one of the live sessions, feel free to add any comments you feel may interest the group.

http://www.oracle.com/us/products/middleware/identity-management/upgrade/index.html

Valuable Sun Web Server Links

Spent the last week focused on the Sun Web Server. Sure has come a long way since version 1! (There were two versions you could choose from: one with SSL and one without!)

Here are some links you might find interesting about Sun Web Server.

- Reference Deployment: Sun Forums 
http://www.sun.com/bigadmin/features/articles/sun_forums_ref.jsp

- Reference Deployment: Sun Blogs (w. usage stats) 
http://www.oracle.com/technetwork/systems/articles/sunblogs-jsp-139034.html

- Tuning and Sizing 
http://wikis.sun.com/display/WebServerdocs/Performance+Tuning,+Sizing+and+Scaling+Guide

- Web Application Tuning 
http://wikis.sun.com/display/WebServerdocs/Tuning+Java+Web+Application+Performance

And don't forget Bill Nelson's book "Sun Web Server: The Essential Guide"
http://www.amazon.com/Sun-Web-Server-Essential-Guide/dp/0137128924/ref=sr_1_1?s=books&ie=UTF8&qid=1302438807&sr=1-1

Finding Sun Stuff, Part 3

If you are looking for previous versions of Sun middleware (such as DSEE7, Waveset 8.0.1, OpenSSO, etc.) now that the Sun download locations have been moved under the Oracle web space:

- Connect to http://edelivery.oracle.com.

- Fill in the Export and License Form.

- Select "Sun Products" and select your choice of platform. Select "Go" and then "Continue"

- See  the products available for download!

Note that the products are listed by the names you know. However, the name of the actual downloaded file is the Oracle part number. For example, the file to download for Sun DSEE 7 for Linux is named "V19711-01.zip. I found it helpful to change that file name back to a name that will be easier to recognize.

Running DSCC as Non-root User

A student in a recent class complained that he could not start or stop Directory Servers (DS) or read the logs using the Directory Server Control Center (DSCC). After a few more questions, it became obvious that he did not have root access to that machine.

Background: Sun Directory Server Enterprise Edition 6.3 and 7.0 as well as the re-branded Oracle Directory Server Enterprise Edition 11gR1 come with two sets of administrative tools, the command-line tools and the Web-based DSCC. Users authenticate to the DSCC using accounts stored in the DSCC Registry directory server (default: port 3998). However, when the admin tries to execute certain operations, they are challenged for the authentication of the owner of the DS process. In this student's example, the process was owned by root, the student could not provide the root authentication and so could not execute the particular operation.

To avoid this issue, on a new installation create a service account and service group; assume they are "dsuser" and "dsgroup". To run the DSCC as a non-root user, you need to make sure dsuser and dsgroup own a) the installation directory and all of its files and subdirectories, b) the instance directory and all of its files and subdirectories, and c) the DSCC Registry DS must installed using dsuser. (Depending on which brand of web container you are using, you MAY need to make ownership adjustments on the dscc.war file and/or its deployment. I usually use TomCat and have seen no ownership issues.)

Step c above is often done as part of executing the "dsccsetup initialize" command. However, this command can only be run as root. So, instead of running this command, run the individual commands called by initialize, remembering to run the "dsccsetup ads-create" command as dsuser (Step 2 in the following documentation):

http://download.oracle.com/docs/cd/E19424-01/820-4807/deploy-war/index.html

Remember, any ldif file you intend on importing using the DSCC must be readable by dsuser and/or dsgroup!

Finding Sun Stuff, Part 2

More links to Sun middleware stuff now that they have been moved into the Oracle Technology Network:

Software Downloads

• ODSEE 11gR1 - Oracle Directory Server Enterprise Edition (rebranded from Sun Directory Server Enterprise Edition)
  http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html
  
• Oracle Identity Analytics (formerly Sun Role Manager)
  http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html
  
• Oracle Waveset (formerly Sun Identity Manager)
  http://www.oracle.com/technetwork/middleware/ias/downloads/101401-099957.html
  
• Oracle OpenSSO (formerly Sun OpenSSO)
  http://www.oracle.com/technetwork/middleware/ias/downloads/101401-099957.html
  
• OpenSSO Fedlet
  http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html
  
• Glassfish 2.1.1 and 3.0.1
  http://www.oracle.com/technetwork/middleware/glassfish/downloads/index.html
  
• Java EE 6 Reference Implimentation
  http://www.oracle.com/technetwork/middleware/glassfish/downloads/index.html
  
• Oracle iPlanet Web Server 7.0.9 (formerly Sun Web Server 7.0.9; Oracle's web server is called Oracle HTTP Server)
  http://www.oracle.com/technetwork/java/webtier/downloads/index.html
  
  Note: Oracle has decided to release 7.0 Update 10 through http://support.oracle.com. You will need to sign-in to support.oracle.com and click on Patches & Updates link at the top and search for the following patch-id corresponding to your platform:
  145843-01 Oracle iPlanet Web Server 7.0 Sun Solaris SPARC (32-bit)
  145844-01 Oracle iPlanet Web Server 7.0 Sun Solaris x86 (32-bit)
  145845-01 Oracle iPlanet Web Server 7.0 Linux x86
  145846-01 Oracle iPlanet Web Server 7.0 Linux (amd64)
  145847-01 Oracle iPlanet Web Server 7.0 Microsoft Windows (32-bit)
  145848-01 Oracle iPlanet Web Server 7.0 IBM_AIX_POWER32 IBM AIX on POWER Systems
  145849-01 Oracle iPlanet Web Server 7.0 HP-UX PA-RISC

Product Documentation

• Sun Middleware:
  http://www.oracle.com/technetwork/documentation/legacy-sun-identity-mgmt-193462.html
  
• Other Sun Products
  Brad Diggs has done a great job putting together a list of links to all Sun Products Documentation (formerly docs.sun.com):
  http://www.thezonemanager.com/2011/01/docssuncom-otn-docs.html

Finding Sun Stuff, Part 1

Some customers seem to be having a problem finding the newer Oracle course numbers for their favorite Sun courses. Here are the courses that are most important to me, grouped by product name:


Sun Directory Server Enterprise Edition (now called Oracle Directory Server Enterprise Edition)

• D61874GC10 (was DIR 2217: Sun Directory Server 6.x: Analysis and Planning)
  http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getCourseDesc?dc=D61874GC10&p_org_id=1001&lang=US
• D68336GC10 (was DIR 2340: Sun Directory Server 7.x: Maintenance & Operations
  http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getCourseDesc?dc=D68336GC10&p_org_id=1001&lang=US

Sun Identity Manager (now called Waveset Identity Manager)

• D61770GC10 (was IDM 345: Sun Identity Manager 8.x: Deployment Fundamentals I)
  http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getcoursedesc?dc=D61770GC10&p_org_id=27&lang=US
• D61800GC10 (was IDM 4485: Sun Identity Manager 8.x: Deployment Fundamentals II)
  http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getCourseDesc?dc=D61800GC10&p_org_id=1001&lang=US
• D61864GC10 (was IDM 2455: Sun Identity Manager 8.x: Administration and Maintenance)
  http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getCourseDesc?dc=D61864GC10&p_org_id=1001&lang=US

Sun Role Manager (now called Oracle Identity Analytics)

• D6834GC10 (was IDM 2010: Sun Role Manager: Administration)
  http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getCourseDesc?dc=D68340GC10&p_org_id=1001&lang=US

Sun OpenSSO

• D61942GC10 (was AM 3800: Sun OpenSSO Enterprise 8.0: Deployment Essentials
  http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getCourseDesc?dc=D61942GC10&p_org_id=1001&lang=US

Sun Java Web Server

• D61956GC10 (was ECR 3469: Sun Java Web Server 7.x: Web Server Workshop)
  http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getCourseDesc?dc=D61956GC10&p_org_id=1001&lang=US