Monday, March 10, 2014

Fusion Applications P4FA Patches

 

High levels to apply P4FA:

  1. Shutdown FMW, IDM and DB (Transaction, OID and OIM database) services
  2. Backup Environment
  3. * Apply patches to FMW Oracle Homes (excluding ATGPF/Generic and ATGPF/Database patches)
  4. * Apply patches to IDM Oracle Homes
  5. * Apply RDBMS patches to Transaction, OID and OIM ** Oracle Homes
  6. Start DB (Transaction, OID and OIM database) services
  7. Apply RDBMS patches post steps (if any) on Transaction, OID and OIM databases
  8. Start IDM Middle-tier services
  9. Apply post steps on IDM Oracle Homes (if any)
  10. Bounce IDM Middle-tier services (ONLY if any post step on IDM Oracle Homes requires OID/OIM/AUTHOHS bounce)
  11. Apply ATG/Generic patches to ATGPF Oracle Home
  12. Apply ATGPF/Database patches to ATGPF Oracle Home
  13. Start FMW services (FA, BI, and other techstack components)
  14. Apply post steps on FMW Oracle Homes (if any)
  15. Bounce FA Domains (ONLY if any post steps on FMW Oracle Homes requires domain bounce)

* can be done in parallel
** If Transaction, OID, OIM databases share same Oracle Home, then apply RDBMS patches once and perform patch post steps (if any) on all databases.

 

CLASSIFICATION OF PATCHES:

FMW_HOME=${HOME}/APPTOP/fusionapps

P4FA Directory
ORACLE_HOME to be applied
Generic ORACLE_HOME Name

ecm_bucket2
FMW_HOME/ecm

biappsshiphome
FMW_HOME/bi

wc
FMW_HOME/webcenter

odi
FMW_HOME/odi

ses
FMW_HOME/ses

fusionapps/generic
FMW_HOME/applications

pfcore
FMW_HOME/applications

osn
FMW_HOME/osn

soa
FMW_HOME/soa
OIM - IDMTOP/products/app/soa
OIM - IDMTOP/products/app/soa

suwrapper
FMW_HOME/wlserver_10.3
OID - IDMTOP/products/dir/wlserver_10.3
OIM - IDMTOP/products/app/wlserver_10.3

weblogic
FMW_HOME/wlserver_10.3
OID - IDMTOP/products/dir/wlserver_10.3
OIM - IDMTOP/products/app/wlserver_10.3

webgate
FMW_HOME/../webtier_mwhome/webgate
AUTHOHS - IDMTOP/products/ohs/webgate
WEBGATE_ORACLE_HOME

webtier
ADMIN Host - FMW_HOME/../webtier_mwhome/webtier
APPOHS - FMW_HOME/../webtier_mwhome/webtier
AUTHOHS - IDMTOP/products/ohs/ohs
OHS_ORACLE_HOME

oracle_common
FMW_HOME/oracle_common
ADMIN Host - FMW_HOME/../webtier_mwhome/oracle_common
APPOHS - FMW_HOME/../webtier_mwhome/oracle_common
OID - IDMTOP/products/dir/oracle_common
OIM - IDMTOP/products/app/oracle_common
AUTHOHS - IDMTOP/products/ohs/oracle_common
OID_COMMON_HOME
OIM - IDMTOP/products/app/oracle_common
OHS_COMMON_HOME

pltsec
OID - IDMTOP/products/dir/oid
OID_ORACLE_HOME

idm
OIM - IDMTOP/products/app/iam
OIM - IDMTOP/products/app/iam

idmlcm/generic
OID - $HOME/Middleware/Oracle_IDMLCM1 (Only for Provisioned IDM and not for tarball based IDM)

oif
OIM - IDMTOP/products/app/idm
OIM - IDMTOP/products/app/idm

atgpf/generic
FMW_HOME/atgpf

atgpf/database
adpatch FMW_HOME/atgpf

rdbms_11.2.0.3.0
Transaction DB
IDM DBs

Thursday, September 26, 2013

EBS12.2 How does Online Patching work on the application tier?

 

During Release 12.2 installation, Rapid Install will lay down two copies of the application tier file system. One of the copies will be labeled as the run file system, and the other as the patch file system. Subsequently, when a patch is applied, adop will:

    1. Synchronize the contents of the run file system to the patch file system. This happens during the prepare phase.
    2. Perform patching actions on the patch file system. This happens during the apply phase.
    3. Finally, during the cutover phase, the adop utility restarts the application tier services. The patch file system is then promoted to be the new run file system, and the old run file system becomes the patch file system for the next patching cycle.

Note that a third file system, the non-editioned file system (fs_ne), is created to store files containing data that is needed across all file systems, such as log files.

What are the phases that make up the Online Patching cycle?
The Online Patching cycle consists of the following phases:

  1. Prepare a virtual copy (patch edition) of the running application (run edition).
  2. Apply patches to the patch edition of the application.
  3. Finalize the system in readiness for the cutover phase.
  4. Cutover to the patch edition and make it the new run edition.
  5. Cleanup obsolete definitions or data to recover space.

What are the space requirements for Online Patching?
Space required on the application tier file system is approximately double that of Release 12.1.3, to support the dual file system architecture. In the database there must be sufficient space to hold a duplicate copy of any code, seed data or table columns that are patched. Refer to Oracle E-Business Suite Installation Guide: Using Rapid Install for additional guidance.

Reference :-

Oracle E-Business Suite Release 12.2: Online Patching FAQ (Doc ID 1583902.1)

Stage R12 - 12.2 Software for Installation

 

As EBS R12 - 12.2 is released officially, for installing , Download all the software 12.2  from edelivery.oracle.com.


Here are the steps to stage 12.2. software

First unzip start CD parts in the staging directory “Stage” as in this example.

cd /u01/oracle/122/Stage
unzip ../V35215-01_1of3.zip
unzip ../V35215-01_2of3.zip
unzip ../V35215-01_3of3.zip


Go to startCD/Disk1/rapidwiz/bin

cd /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin

Launch buildStage.sh script which will stage the software. It prompts for
the downloaded the zips locations , All the zip files need to be downloaded to
the same location.

./buildStage.sh
                Build Stage Menu
------------------------------------------------------
1.     Create new stage area
2.     Copy new patches to current stage area.
3.     Display existing files in stage TechPatches.
4.     Exit menu
Enter your choice [4]: 1


         Rapid Install Platform Menu
------------------------------------------------------
1.    Oracle Solaris SPARC (64-bit)
2.    Linux x86-64
3.    IBM AIX on Power Systems (64-bit)
4.    HP-UX Itanium
5.    Exit Menu
Enter your choice [5]: 2


/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jre/Linux_x64/1.6.0/bin/java
-classpath /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jlib/emocmutl.jar:/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jlib/ewt-3_4_22.jar:/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jlib/share-1_1_18.jar:/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jlib/jnls.jar:/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jlib/ACC.JAR:/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jlib/netcfg.jar:/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jlib/ojdbc14.jar:/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jlib/OraInstaller.jar:/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../jlib/java
oracle.apps.ad.rapidwiz.util.StageBuilder /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin


Please enter the directory containing the zipped installation media:
/u01/oracle/122/


Unzipping V35805-01_1of2.zip
Unzipping V35803-01_2of3.zip
Unzipping V35231-01_3of5.zip
Unzipping V35806-01_3of3.zip
Unzipping V35812-01.zip
Unzipping V35215-01_3of3.zip
Unzipping V35215-01_1of3.zip
Unzipping V35231-01_5of5.zip
Unzipping V35810-01.zip
Unzipping V35809-01.zip
Unzipping V35803-01_3of3.zip
Unzipping V35813-01.zip
Unzipping V35811-01.zip
Unzipping V35806-01_2of3.zip
Unzipping V35231-01_4of5.zip
Unzipping V35802-01.zip
Unzipping V35806-01_1of3.zip
Unzipping V35231-01_1of5.zip
Unzipping V37515-01_3of6.zip
Unzipping V37515-01_6of6.zip
Unzipping V37515-01_1of6.zip
Unzipping V35805-01_2of2.zip
Unzipping V35804-01_2of2.zip
Unzipping V35230-01_1of2.zip
Unzipping V35231-01_2of5.zip
Unzipping V37515-01_5of6.zip
Unzipping V37515-01_4of6.zip
Unzipping V35803-01_1of3.zip
Unzipping V35804-01_1of2.zip
Unzipping V35230-01_2of2.zip
Unzipping V35807-01.zip
Unzipping V35215-01_2of3.zip
Unzipping V37515-01_2of6.zip
Unzipping V35808-01.zip
Applying one-off patches
All files have been unzipped.
Done Unzipping shiphome ...
StageBuilder will now stage the tech patches for Linux_x64...
Copying one-off patches to shiphome
/u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../unzip/Linux_x64/unzip -o /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../Xpatches/Linux_x64.zip
-d /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches
Archive:  /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../Xpatches/Linux_x64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16303726/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16303726/p16303726_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14123213/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14123213/p14123213_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/13923995/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/13923995/p13923995_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14751895/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14751895/p14751895_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16163946/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16163946/p16163946_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14207902/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14207902/p14207902_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/15967134/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/15967134/p15967134_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16438289/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16438289/p16438289_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/13931044/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/13931044/p13931044_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16342486/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16342486/p16342486_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14398795/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14398795/p14398795_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/12951696/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/12951696/p12951696_112030_Generic.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/12942119/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/12942119/p12942119_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14698700/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/14698700/p14698700_112030_Generic.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16587934/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16587934/p16587934_112030_Linux-x86-64.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16105745/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16105745/p16105745_112030_Generic.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16040940/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/DB/16040940/p16040940_112030_Linux-x86-64.zip
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/13583235/p13583235_1036_Generic.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14825718/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14825718/p14825718_10123_LINUX.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14353879/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14353879/p14353879_10123_LINUX.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14614795/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14614795/p14614795_101231_LINUX.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/16209520/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/16209520/p16209520_10123_GENERIC.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/16275529/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/16275529/p16275529_10105_LINUX.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14597598/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14597598/p14597598_1036_Generic.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14577216/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14577216/p14577216_101231_Generic.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/16784403/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/16784403/p16784403_101232_LINUX.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14386347/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14386347/p14386347_111160_Generic.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/16199894/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/16199894/p16199894_111160_Generic.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14374587/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/14374587/p14374587_10123_GENERIC.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/10152652/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/10152652/p10152652_10123_LINUX.zip
   creating: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/11669923/
extracting: /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin/../../../../TechPatches/MiddleTier/11669923/p11669923_10123_GENERIC.zip
Done Copying additional patches
Verifying stage area...
Directory /u01/oracle/122/Stage/TechInstallMedia is valid
Directory /u01/oracle/122/Stage/TechPatches/DB
is valid
Directory /u01/oracle/122/Stage/TechPatches/MiddleTier
is valid
Directory /u01/oracle/122/Stage/EBSInstallMedia/AppDB
is valid
Directory /u01/oracle/122/Stage/EBSInstallMedia/Apps
is valid
Directory /u01/oracle/122/Stage/EBSInstallMedia/AS10.1.2
is valid
Directory /u01/oracle/122/Stage/TechInstallMedia/database
is valid
Directory /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin
is valid
Directory /u01/oracle/122/Stage/startCD/Disk1/rapidwiz/bin
is valid
Stage area verified.
Press enter to continue...


When staging get completed, the directory structure looks like below.


EBSInstallMedia  startCD  TechInstallMedia  TechPatches

Monday, June 10, 2013

What's new in EBS 12.2?

New or changed technology-related features in EBS 12.2 include:

  • Streamlined installation:
    • Use of native installation tools for Oracle Fusion Middleware and Oracle Database technology stack components.
    • Option for installing EBS 12.2 on to existing database servers.
    • Capability of installation into existing Real Application Clusters environments.
    • Database deployment on Automatic Storage Management (ASM) and other file systems.
  • Support for online patching.
  • Use of Oracle WebLogic Server instead of AutoConfig for many (but not all) of AutoConfig's previous functions.
  • Use of Oracle WebLogic Server instead of Oracle Containers for Java (OC4J).
  • Integration between Oracle Enterprise Manager 11g Fusion Middleware Control and Oracle Applications Manager to monitor EBS environments with Oracle WebLogic Server technology.
  • Enhanced internationalization features, including new languages and calendars, and improved diagnostics.
  • Enhanced user interface features for Navigator menu, progress indicators, and table sorting.
  • Integration with AutoVue Document Print Services to print file attachments.
  • Undo and copy OA Framework personalizations.
  • Support for Mobile Safari on Apple iPads.
  • Enhanced Integrated SOA Gateway functionality for use with Oracle SOA Suite 11g and Oracle EBS Adapter.
  • Enhanced Workflow Worklist notification and management features.

For complete details for individual EBS products, see:

Concurrent Processing - CP Analyzer for E-Business Suite

The Concurrent Processing Analyzer is a Self-Service Health-Check script which reviews the overall Concurrent Processing Footprint, analyzes the current configurations and settings for the environment providing feedback and recommendations on Best Practices.

  • This is a non-invasive script which provides recommended actions to be performed on the instance it was run on and can be run at any time.  For production instances, always apply any changes to a recent clone to ensure an expected outcome.
Benefits
  • Immediate Analysis and Output of Concurrent Environment
    • E-Business Applications Concurrent Processing Analyzer Overview
      • Total Purge Eligible Records in FND_CONCURRENT_REQUESTS
      • E-Business Suite Version
      • Concurrent Processing Database Parameter Settings
      • Applied ATG Patches
      • Known 1-Off Patches on top of Rollups
    • E-Business Applications Concurrent Request Analysis
      • Long Running Reports During Business Hours
      • Elapsed Time History of Concurrent Requests
      • Requests Currently Running on a System
      • FND_CONCURRENT_REQUESTS Totals
      • Running Requests
      • Total Pending Requests by Status Code
      • Count Pending Regularly Scheduled/Non Regularly-Scheduled Requests
      • Count of Pending Requests on Hold/Not on Hold
      • Listing of Scheduled Requests
      • Listing of Pending Requests on Hold
      • Listing of Pending Requests Not on Hold
      • Volume of Daily Concurrent Requests for Last Month
      • Identify/Resolve the Pending/Standby Issue, if Caused by Run Alone Flag
      • Tablespace Statistics for the fnd_concurrent tables
    • E-Business Applications Concurrent Manager Analysis
      • Concurrent Managers Active and Enabled
      • Concurrent Manager Processes by Workshift
      • Active Manager for Applications that are not Installed/Used
      • Total Target Processes for Request Managers (Excluding Off-Hours)
      • Request Managers with Incorrect Cache Size
      • Concurrent Manager Request Summary by Manager
      • Check Manager Queues for Pending Requests
      • Check the Configuration of OPP
  • Identifies Concurrent System Setup and configurations
  • Identifies and recommends Concurrent Best Practices
  • Easy to add Tool for regular Concurrent Maintenance
  • Execute Analysis anytime to compare trending from past outputs
Audience
  • DBA's / System Administrator's should run the script and review the output
  • Pending the output, one may interact with the the following End-User types to resolve the identified Opportunity Improvement areas:
    • Apps Access (Toad or SQL Developer)
    • Filesystem access (apps logfiles) $APPLCSF/$APPLLOG
    • SYSADMIN access permissions
  • Output usually will be reviewed by a group of people pending the problems
  • This script was designed for Concurrent Processing in 11.5.x and later.

Where to Run Script & How to fix Items Identified in Script:
You may run the script on a Production environment as it's non-invasive.  We recommend fixing items identified from the output first in a clone of production to test/verify the expected outcome.

For script and more information, Concurrent Processing - CP Analyzer for E-Business Suite [ID 1411723.1]

Tuesday, March 8, 2011

Cloning SSO-Enabled Environments in E-Business Suite


This is already discussed in Steven Chan's Blog article http://blogs.oracle.com/stevenChan/2006/05/11/ and much of this note is a straight copy from this article.  Please review this blog article in it's entirety before proceeding.

If you're willing to experiment a bit, the following are general guidelines to point you in the right direction.  Some customers and Oracle Consultants have used the following approaches to get the job done but have reported that there was some trial-and-error involved.

These are neither detailed nor comprehensive instructions.  The following should be attempted only by system administrators who have a solid understanding of the principles outlined in Metalink Note 261914.1.

If you're going to experiment with these approaches, I strongly recommend that you take all sensible precautions, including backing up your environments at multiple stages, taking careful notes, and doing things in small, incremental steps to control your risk.

There is no single stop, supported or documented method to create a clone of your eBiz instance when integrated with SSO.   Please use this note with caution and make sure you thoroughly test any procedure you decide to use to ensure it fits with all aspects of your specific setup.

1- Use Rapid Clone to create a clone of your E-Business Suite, including the application-tier and database-tier.
   For 11i, please use:
     Note 230672.1 Cloning Oracle Applications Release 11i with Rapid Clone
  
   For R12 ,please use:
     Note 406982.1   Cloning Oracle Applications Release 12 with Rapid Clone

2- In the  newly-cloned E-Business Suite instance, set the APPS_SSO_LDAP_SYNC profile option to "Disabled" at the site level (since there's no new Oracle Internet Directory instance to synchronize with yet).

3 -  In your newly-cloned E-Business Suite instance, unlink all E-Business Suite users that were linked to the original Oracle Internet Directory 10g users (i.e. where FND_USER.USER_GUID is populated), since the those old links are no longer valid. Those E-Business Suite users will need to be linked to their corresponding accounts in the as-yet non-existent new Oracle Internet Directory instance.

To Unlink EBS users, you should execute the following Command for each individual user (For both 11i and R12):

$FND_TOP/patch/115/sql/fndssouu.sql

See Note 429375.1 for more information on this utility

4 -  In your newly-cloned E-Business Suite instance, remove all reference to the original OID/SSO instance

Use the “removereferences” to cleanup the previous registration information of SSO & OID

For R12 this is described in Note 376811.1 "Section 3: Remove References"

For 11i :  Note 233436.1  "Appendix D:  Advanced Configuration - Manual SSO/OID Registration" - Option 6

5 -  Create a fresh install of Single Sign-On and Oracle Internet Directory 10g on your new server.

6 - Assuming that you enabled bidirectional provisioning between the E-Business Suite and Oracle Internet Directory, do one of the following (but not all three):

a) Redo your bulkload from the E-Business Suite into Oracle Internet Directory.
   On Release 12, please refer to "System Administrator's Guide - Security" on Section 6 (Oracle Single Sign-On Integration )

Then  Reregister your E-Business Suite environment using the Bidirectional Provisioning Profile, and enable the APPS_SSO_AUTO_LINK_USER profile option, and set the profile option APPS_SSO_LDAP_SYNC back to Enabled at site level.

b) Export your LDAP namespace from your original Oracle Internet Directory instance into an LDIF file, and then import the LDIF file into the new Oracle Internet Directory instance. Reregister your E-Business Suite environment using the Bidirectional Provisioning Profile, and (assuming that the Oracle Internet Directory accounts are identical to the E-Business Suite accounts) enable the APPS_SSO_AUTO_LINK_USER profile option, and set the profile option APPS_SSO_LDAP_SYNC back to Enabled at site level.

c) Connect the original Oracle Internet Directory instance to your new Oracle Internet Directory instance via a connector, synchronizing the namespaces. Reregister your E-Business Suite environment using the Bidirectional Provisioning Profile, and (assuming that the Oracle Internet Directory accounts are identical to the E-Business Suite accounts) enable the APPS_SSO_AUTO_LINK_USER profile option, and set the profile option APPS_SSO_LDAP_SYNC back to Enabled at site level.

Is it Possible to Clone an SSL Enabled E-Business Suite Middle Tier?

The Rapidclone utility does not support like for like cloning of an SSL enabled E-business suite middle tier.
Note 230672.1 Cloning Oracle Applications Release 11i with Rapid Clone
Note 406982.1 Cloning Oracle Applications Release 12 with Rapid Clone

The problem can be broken down into 3 issues

1:- File system changes.

The location of the SSL files on the clone is different to that from the source. From the bug we can see the following were not the same between source and target.

s_frmWalletDir
s_web_ssl_directory
s_web_ssl_keyfile
s_web_ssl_certfile
s_web_ssl_certchainfile

2:- SSL Port is wrong in the clone.

s_webssl_port - Gets Defaulted to 443, ideally it should take Apache Port given during adcfgclone run.

3:- SSL certificates are the same on the clone as they are on source.

This might be a security issue depending on your security requirements.

However Rapidclone will create a clone of an SSL enabled middle tier, but the target will require additional configuration to allow it to function correctly. To progress the issue further you must decide if

A:- You want the middle tier clone to be SSL enabled.

Re-implement SSL on the clone following the note below.

Note 123718.1 11i: A Guide to Understanding and Implementing SSL for Oracle Applications

B:- You want the middle tier clone to be HTTP only.

Remove the SSL configuration added in

Note 123718.1 11i: A Guide to Understanding and Implementing SSL for Oracle Applications