Oracle Apps 11i 11.5.10.2 configuration on DMZ

You can refer 380490.1 for Oracle E-Business Suite Release 12 Configuration in a DMZ, which is almost similar to the 11i done below,

1. Following patches required,

Required Patch: 3240000
Description: 11.5.10 Oracle EBS Consolidated Update 1Comments: This patch is not required if Upgraded your EBS instance to 11.5.10. Oracle EBS consolidated update 2 (3460000)

Required Patch: 4204335Description: WTI LITE PATCHComments: This patch is not required if Upgraded your EBS instance to 11.5.10. Oracle EBS consolidated update 2 (3460000)

Required Patch: 3942483Description: Autoconfig support for reserver proxy, URL firewall and DMZ configuration (Phase 1)Comments: This patch is not required if your EBS instance have been upgraded to 11.5.10 CU2 or later and also it has been upgraded to TXK.M (4709948) or later.

SQL>SELECT PATCH_LEVEL FROM FND_PRODUCT_INSTALLATIONS WHERE PATCH_LEVEL LIKE '%TXK%';

Required Patch: 5478710Description: TXK (FND & ADX) Autoconfig Rollup Patch O (Dec 2006)

Run the following script to check if already the patches are applied or not.

SQL>select * from ad_bugs where bug_number in ('3240000','3460000','4204335','4125550','3942483','4709948','5478710');

Note: Apply the above patches in the order shown.

2. Ask System administrator to update the external DNS entry and add the correct domain name on the DMZ server, Also update the \etc\hosts file. On DMZ server update \etc\hosts file and enter the ipaddress and the hostname for the database server, since you will be accessing it.
eg: 192.168.2.67 testdb

3. Install all the pre-requisit softwares Visual Studio 6, vc++, MKS toolkit, xmlsdk.

Eg: Install MKS toolkit to c:\prog\mks directory
create prog and mks directories before installing and select the correct path while installing.

Install VC++ in c:\VC98 directory, create VC98 directory before installing and select the correct path while installing

Copy gnumake.exe to c:\VC98\bin and C:\prog\mksnt directories

Install xmlsdk.msi in default path c:\Program files\Microsoft XML Parser SDK.

4. Now you MUST stop all application services (web apache, forms, reports, conc manager, 806 listener)
recompile apps schema using adadmin (optional)
run cmclean.sql script (optional)

5. On internal application server,
perl adpreclone.pl appsTier

Copy appltop,commontop,oratop and iastop from Internal to External DMZ server.

6. Now run config clone on DMZ External server,

SET path=e:\oracle\qatestora\iAS\Apache\perl\5.00503\bin\MSWin32-x86\;%PATH%
then rerun adcfgclone.pl

%common_top%\clone\bin>perl adcfgclone.pl appsTier

7. Now if Internal is giving error on page while logging and external is working so after the DEP for IE Explorer and installing Jinitiator and running autoconfig on database and internal appication tier servers will resolve the issue.
HERE I RAN AUTOCONFIG ON INTERNAL APPS TIER THEN STARTED ONLY FORMS,806 AND APACHE TO START APPLICATION AND UPDATE THE FOLLOWING PROFILES,

8. There are a number of user profiles that are used to construct various URLs in an E-Business Suite 11i environment. These user profiles are as follows:
Application developer responsibility---->profile--->FOLLOWING ALL TO BE SET TO SECURITY(HIERARCHY TYPE).

User Profile Name Internal Name
------------------------------------------------------------------------------
1. Applications Web Agent APPS_WEB_AGENT
2. Applications Servlet Agent APPS_SERVLET_AGENT
3. Applications JSP Agent APPS_JSP_AGENT
4. Applications Framework Agent APPS_FRAMEWORK_AGENT
5. ICX:Forms Launcher ICX_FORMS_LAUNCHER
6. ICX: Oracle Discoverer Launcher ICX_DISCOVERER_LAUNCHER
7. ICX: Oracle Discoverer Viewer Launcher ICX_DISCOVERER_VIEWER_LAUNCHER
8. Applications Help Web Agent HELP_WEB_AGENT
9. Applications Portal APPS_PORTAL
10. BOM:Configurator URL of UI Manager CZ_UIMGR_URL
11. ASO : Configurator URL ASO_CONFIGURATOR_URL
12. QP: Pricing Engine URL QP_PRICING_ENGINE_URL
13. TCF:HOST TCF:HOST

9. Stop all services.
cmclean and adadmin recompile apps schema.

Now run the following script,
The configuration of the EBS environment for DMZ requires these profile options hierarchy type to be set to SERVRESP.
To change the profile options hierarchy type values to SERVRESP, execute the following SQL script,

Better run from DB Tier after sourcing appsora,

SQLPLUS> CONN APPS/PWDSQL
SQL> SPOOL C:\spoolfile.TXT
SQL> @/patch/115/sql/txkChangeProfH.sql SERVRESP

Now check the log file spoolfile.TXT for any errors. If no error then proceed.

10. Make copy of NET80 tnsnames.ora, listener.ora and sqlnet.ora files before autoconfig.

After the above script in step 9 successfully completed run AUTOCONFIG on the application nodes including the database server (i.e. 3 servers).
[Firstly on TESTDB then on External DMZ server and lastly on Internal Applicaiton Server]

11. Start db server services (conc after invalid objects checking and cmclean)
>>start internal app server
>>check application before starting external
>>Now Update node trust level profile value for responsibilities that has to be exposed ouside.

12. Ask the netowork administrator to publish the DMZ URL to a public IP. Test the applicaiton access from internet.