|
"Intuition
will tell the thinking mind where to look next."
-Jonas
Salk (1914-1995)
|
How to unlock orcladmin
You should use the "oidpasswd" utility to unlock the orcladmin account. Do not confuse this account with the default realm administrator "cn=orcladmin,cn=users,dc=xxxxx,dc=yyyyy".
1. Unlock the orcladmin
$ oidpasswd connect=your-database-sid unlock_su_acct=true
OID DB user password:
OID super user account unlocked successfully.
This unlocks the OID Super User account, cn=orcladmin ONLY. They are two separate accounts. After resetting the orcladmin super user account, you will still not be able to login to SSO using the orcladmin account until you perform the next step.
2. Launch the Oracle Directory Manager:
On unix: run the oidadmin command
On Windows: Start/Programs/Oracle AS10g/Integrated Management Tools/Oracle Directory Manager
Note: the ODM tool must be a 10g client.
Using the left menu tree, navigate to Password Policy Management. You will see TWO entries:
cn=PwdPolicyEntry
Password Policy for Realm
3. Edit each of these and change the Password Expiry Time (pwdmaxage) to an appropriate value
5184000 = 60 days (default)
7776000 = 90 days
10368000 = 120 days
15552000 = 180 days
31536000 = 1 year
999999999 = never expire
4. Launch the Oracle Directory Manager and navigate to the realm specific orcladmin account... Entry Management > your_realm > cn=Users where all the users a
re located. Click on the + next to cn=Users. The list is in alphabetical order.
Locate the cn=orcladmin entry. Find the userpassword attribute and reset the value.
5. Try the ldapbind again.
$ /u01 $ldapbind -p 13061 -D cn=orcladmin,cn=Users,dc=organization,dc=gov -w xxxxxxx7orcl
bind successful
$ /u01 $ldapbind -p 13061 -D cn=orcladmin -w xxxxxxx7ias
bind successful
6. Know after testing all binding is successful you can add an entry to OID.
How to add name service (an OID entry) to oid in command
line
1. first, create a file called net.ldif with the following information. Make sure to change the information accordingly so it matches your tnsnames entries.
2. (NOTICE: the last attribute "orclnetdescstring" is one long line)
#### begins here ####
dn: cn=selfschool,cn=OracleContext,dc=oracle,dc=com
cn: selfschool
objectclass: top
objectclass: orclNetService
orclnetdescstring:
(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=eitsys)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=eitsys)))
##### ends here ######
3. Then add it using the following command:
ldapadd -h <host> -p <port> -D cn=orcladmin -w <password> -v -f net.ldif
How can you change an entry in oid?
The following are few ways you can change the OID entries:
# oidadmin
# netmgr
http://youhost.domain:7777/oiddas
What is Oracle Containers for J2EE (OC4J)?
In general, OC4J is a J2EE certified application server. It provides the performance, scalability, and features such as HTTP clustering and load balancing. OC4J in Oracle Application Server is an attractive option for developing and deploying J2EE applications. Oracle Application Server includes complete support for Enterprise JavaBeans (EJB), Servlets, JavaServer Pages (JSP), JTA, JNDI, JMS, JDBC, JavaMail, JAF, JAXP, connector, and JAAS.
How to install OC4J
You can either install OC4J from Oracle Application Server software distribution or download it from the Oracle Technology management Web site. Before installation, make sure that you have installed JDK 1.2.2 or higher and java binaries' path in your profile.
The following show the steps to install OC4J in your server:
# cd $ORACLE_HOME/ias
# unzip oc4j.zip
OR
# jar xvf oc4j.zip
# cd j2ee/home
# java -jar orion.jar -install
Enter an admin password to use: oc4jadmin
Confirm admin password: oc4jadmin
Installation done.
Notice that the application server configuration files will be in $ORACLE_HOME/ias/j2ee/home/config directory.
The following is some of the configuration files:
server.xml - Main configuration file containing directives that apply globally across the container.
default-web-site.xml - It is the default HTTP listener.
data-sources.xml - It allows generic naming for data sources to access.
data-jms.xml - It is java messaging service.
rmi.xml - It is for remote method invocation with ports.
application.xml - It is the default application.
global-web-application.xml - list all directives for all web applications deployed.
|