Install Webgate, Deploy AccessGate, Register EBS with OAM

In this article we will see how to Install webgate, Deploy Access Gate and Register EBS with OAM.


1. Install Webgate and apply patch to Webgate Home Directory
Firstly copy the webgate patch p21118593 and webgate software to node 1 EBS server and then install using txkrun.pl script


# scp -rp p21118593_111230_Linux-x86-64.zip webgate appluat@ed-olraclin3:/home/appluat/ssoPatches
# txkrun.pl -script=SetOAMReg -installWebgate=yes -webgatestagedir=/home/appluat/ssoPatches/webgate

Now apply WEBGATE Patch to webgate HOME Directory
[appluat@ed-olraclin3 FMW_Home]$ export ORACLE_HOME=/u03/eruat/fs1/FMW_Home/Oracle_OAMWebGate1
[appluat@ed-olraclin3 FMW_Home]$ export PATH=/u03/eruat/fs1/FMW_Home/Oracle_OAMWebGate1/OPatch/:$PATH
[appluat@ed-olraclin3 ssoPatches]$ unzip p21118593_111230_Linux-x86-64.zip
[appluat@ed-olraclin3 21118593]$ pwd
/home/appluat/ssoPatches/21118593
[appluat@ed-olraclin3 21118593]$ opatch apply

2. Deploy Access Gate
[appluat@ed-olraclin3 21118593]$ wget http://uatoam.qa.qia.net:7014 (test the connection)--2017-06-18 10:44:45--  http://uatoam.qa.qia.net:7014/
Resolving uatoam.qa.qia.net (uatoam.qa.qia.net)... 192.168.1.10
Connecting to uatoam.qa.qia.net (uatoam.qa.qia.net)|192.168.1.10|:7014... connected.
HTTP request sent, awaiting response... 404 Not Found
2017-06-18 10:44:45 ERROR 404: Not Found.


On EBS Node 1 (ed-olraclin3) server execute the below command,
# perl $AD_TOP/patch/115/bin/adProvisionEBS.pl ebs-create-oaea_resources -contextfile=$CONTEXT_FILE -deployApps=accessgate -SSOServerURL=http://uatoam.qa.qia.net:7014 -managedsrvname=oaea_server1 -managedsrvport=6801 -logfile=/tmp/deployeag.log

On EBS Node 2 (ed-olraclin4) server execute the below command,
# perl $AD_TOP/patch/115/bin/adProvisionEBS.pl ebs-create-oaea_resources -contextfile=$CONTEXT_FILE -deployApps=accessgate -SSOServerURL=http://uatoam.qa.qia.net:7014 -managedsrvname=oaea_server2 -managedsrvport=6802 -logfile=/tmp/deployeag.log

On EBS Node 1 (ed-olraclin3) server execute the below command,
#perl $FND_TOP/patch/115/bin/txkSetAppsConf.pl -contextfile=$CONTEXT_FILE -configoption=addMS -accessgate=ed-olraclin3.qa.qia.net:6801

On EBS Node 2 (ed-olraclin4) server execute the below command,
#perl $FND_TOP/patch/115/bin/txkSetAppsConf.pl -contextfile=$CONTEXT_FILE -configoption=addMS -accessgate=ed-olraclin4.qa.qia.net:6802

--> Now Start Accessgate managed servers and make sure that accessgate + datasource are up and running. Test the datasource too from weblogic console datasources link.
3. Register EBS with OAM
Execute below command on EBS Node 1 ed-olraclin3 server
# txkrun.pl -script=SetOAMReg -registeroam=yes -oamHost=http://uatadmin.qa.qia.net:7012 -oamUserName=weblogic -ldapUrl=ldap://uatoid.qa.qia.net:3060 -oidUserName=cn=orcladmin -skipConfirm=yes -ldapSearchBase=cn=Users,dc=qa,dc=qia,dc=net -ldapGroupSearchBase=cn=Groups,dc=qa,dc=qia,dc=net

Execute below command on EBS Node 2 ed-olraclin4 server
#txkrun.pl -script=SetOAMReg -registeroam=yes -oamHost=http://uatadmin.qa.qia.net:7012 -oamUserName=weblogic -ldapUrl=ldap://uatoid.qa.qia.net:3060 -oidUserName=cn=orcladmin -ldapSearchBase=cn=Users, dc=qa,dc=qia,dc=net - ldapGroupSearchBase=cn=Groups, dc=qa,dc=qia,dc=net -authScheme=EBSAuthScheme -authSchemeMode=reference




Note: If you are setting up SSO for EBS then firstly you should be ready with OID, OAM setup and then do this article steps, set required EBS profile settings and finally restart all EBS Services and test EBS Single Sign On SSO.
Moreover, kindly follow my previously posted articles to do setup for OID, OAM, Windows Native Authentication WNA Zero Sign-on, etc.


For any further queries please email me on samiappsdba@gmail.com

AD - OID Plug-in (oidexplg_bind_ad) configuration For Passwords Sync

Below plugin configuration is required for Microsoft Active Directory AD and Oracle Internet Directory OID passwords to be in Sync. This is small but required configuration during the Oracle Single Single on SSO setup using Oracle Access Manager integration with Oracle E-Business Suite. 

Login to Oracle Directory Services Manager ODSM as "cn=orcladmin" user.

http://ed-olraclin1.samiora.com:7035/odsm

In ODSM console, Go to Advance tab as shown below, 

Change values as in the above screen shot for oidexplg_bind_ad and oidexplg_compare_ad plugins,

Under Plug-in Section

   -Select oidexplg_bind_ad and set below two properties as mentioned.
   -Select oidexplg_compare_ad and set below two properties as mentioned.

on Mandatory Properties tab

    Plug-in Enable -> checked
    Plug-in Is Replacement -> checked
    keep the rest of the parameters as default 
 

on Optional Properties tab

    Minimum need to set the following parameters.
    Plug-in Subscriber DN List: (for example) cn=Users,dc=samiora,dc=com
    Flex Fields -> port (AD port, for example) 389
    Flex Fields -> host (AD host, for example) MSAD.samiora.com

Create New User in AD to check or check existing users with

# ldapbind -h ed-olraclin1.samiora.com -p 3090 -D "cn=samimalik,cn=users,cn=users,dc=samimalik,dc=com" -w xyz12345

If ldapbind is successful then the setup is perfect.

Setup through Command Utility:

1. Log into OID Server

2.  export  CLASSPATH=$ORACLE_HOME/ldap/jlib/oidexcfg.jar:$ORACLE_HOME/ldap/jlib/ldapjclnt11.jar:$CLASSPATH 
3. java -classpath $CLASSPATH oracle.ldap.extplg.oidexcfg -h oidhost  -p 3060  -D cn=orcladmin  -w xyz12345 -t ad

Note : Command utility some times fails so GUI is normally good for the subject setup. 

Reference: How to Integrate AD to OID 11g (Doc ID 1389833.1) - This note has very good videos explaining the setup of AD - OID integration. 

For any further queries, don't hesitate to contact me on samiappsdba@gmail.com