Tuesday, August 18, 2009

Oracle Applications 11i Clone SSO Registration

We had cloned Oracle Apps development instance JAID from production instance JAIP. After clone completion we had to deregister SSO integration with Production SSO (10giAs) server and register with development SSO (10giAS server).

Login to oracle applications middle tier and perform given below activities.

  1. Deregister SSO (Reference to Production SSO server)

    $txkrun.pl -script=SetSSOReg -deregistersso=Yes -appspass=<apps password> -orassopass=<orassop password of SSO production server> -ssosdkpass=<ssosdk password of apps, default ssosdk>

    Checking preferences in the database.

    *** ALL THE FOLLOWING FILES ARE REQUIRED FOR RESOLVING RUNTIME ERRORS

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_12_08_2009.log

    Program : /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl started @ Tue Aug 18 14:12:12 2009

     

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_12_08_2009.log

     

    Beginning input parameter validation for SSO de-registration.

    Input parameters validation for SSO de-registration completed.

     

    BEGIN SSO DE-REGISTRATION:

     

    Partner application not found to be removed.

    End of /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl : No Errors encountered

     

  2. Deregister OID (Reference to Production SSO server)

    $txkrun.pl -script=SetSSOReg -deregisteroid=Yes -appspass=<apps password> orcladminpass=<orcladmin password of production SSO>

    Checking preferences in the database.

    Enter the Oracle Internet Directory Administrator (orcladmin) Bind password ? ss0p1dminusr

    *** ALL THE FOLLOWING FILES ARE REQUIRED FOR RESOLVING RUNTIME ERRORS

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_13_38_2009.log

    Program : /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl started @ Tue Aug 18 14:13:57 2009

     

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_13_38_2009.log

     

    Beginning input parameter validation for OID de-registration.

    Following is the number of user subscriptions found to be deleted : 5904

     

    ******************************** WARNING **********************************

     

    For better performance it is advisable to use bulk delete utility as

    described in Oracle Internet Directory Administrator's Guide, before

    continuing with the de-registration.

    This script will delete the subscriptions one at a time. Depending upon number of

    subscriptions, this action might take a long time but you can watch the progress

    in the log file in another terminal window.

     

    ******************************** WARNING **********************************

     

    Do you want to continue <Y/N> ? Y

    Input parameters validation for OID de-registration completed.

     

    BEGIN OID DE-REGISTRATION:

     

    No dangling provisioning profiles found.

    Beginning to delete provisioning profile for this application.

    Provisioning profile for this application has been deleted successfully.

    Following is the number of user subscriptions found to be deleted : 5904

     

    USER SUBSCRIPTION DELETE LOG FILE : /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/usrDelSubs_Tue_Aug_18_14_13_38_2009.out

     

    All user subscriptions have been deleted successfully.

    Beginning to de-register this application from Oracle Internet Directory.

    This application has been de-registered successfully from Oracle Internet Directory.

    End of /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl : No Errors encountered

     

  3. Register SSO (New Reference to Development SSO server)

    $txkrun.pl -script=SetSSOReg -registersso=Yes -appspass=network1 -infradbhost=ios10901e.idc.ikon.org -infradbport=1510 -infradbsid=SSOD -orassopass=N16FKR0g -systempass=network1 -ssosdkpass=ssosdk

    *** ALL THE FOLLOWING FILES ARE REQUIRED FOR RESOLVING RUNTIME ERRORS

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_28_52_2009.log

    Program : /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl started @ Tue Aug 18 14:28:53 2009

     

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_28_52_2009.log

     

    ######################## WARNING ########################################

    This application works with SSOSDK version 9.0.2 or higher. If lower version

    (3.0.9) of SSOSDK was installed in your system and you have a registered

    partner application, this process will remove the 3.0.9 version of the SSOSDK

    schema and install the 9.0.2 version.

    ######################## WARNING ########################################

    Beginning input parameter validation for SSO registration.

    Beginning loading SSO SDK into database if necessary.

    Loading of SSO SDK into database is not required.

    Input parameter validation for SSO registration completed.

     

    BEGIN SSO REGISTRATION:

     

    Beginning to register partner application.

    Partner application has been registered successfully.

    Single Sign-On partner application registered successfully.

     

  4. Register to OID (New Reference to Development SSO server)

    $ txkrun.pl -script=SetSSOReg \

    > -provtmp=$FND_TOP/admin/template/ProvOIDToApps.tmp \

    > -registeroid=Yes \

    > -appspass=<appspassword> \

    > -infradbhost=ios10901e.idc.ikon.org \

    > -orcladminpass=<orcladmin password> \

    > -instpass=<instance registeration password> \

    > -ldapport=3030 \

    > -appname="JAID" \

    > -svcname="JAID"

    *** ALL THE FOLLOWING FILES ARE REQUIRED FOR RESOLVING RUNTIME ERRORS

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_30_13_2009.log

    Program : /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl started @ Tue Aug 18 14:30:13 2009

     

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_30_13_2009.log

     

    Beginning input parameter validation for OID registration.

     

    Registration failed with given below error.

    Oid Registration Fails With "Can not register a service which is already registered"

     

    I had to deregister and reregister again.

     

    Reference :

    Subject: Oid Registration Fails With "Can not register a service which is already registered"

    Doc ID: 565246.1

     

    $ txkrun.pl -script=SetSSOReg -deregister=Yes

    Enter Oracle E-Business apps database user password ? ******            ß apps password

    Checking preferences in the database.

    Enter Oracle iAS Infrastructure database ORASSO schema password ? ******    ß Development orasso schema password

    Enter E-Business Suite SSOSDK schema password ? SSOSDK

    Enter the application name used for registration of this application instance in OID ( 24 chars or less ) ? JAID        ß Instance_Name

    Enter the descriptive service name used for registration of this application instance in OID ( 80 chars or less ) ? JAID    ß Service Name

    Enter the LDAP Port on Oracle Internet Directory server ? 3030                                ß Port

    Enter the Oracle Internet Directory Administrator (orcladmin) Bind password ? *******                    ß orcladmin password

    *** ALL THE FOLLOWING FILES ARE REQUIRED FOR RESOLVING RUNTIME ERRORS

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_59_14_2009.log

    Program : /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl started @ Tue Aug 18 15:00:35 2009

     

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_14_59_14_2009.log

     

    Beginning input parameter validation for SSO de-registration.

    Input parameters validation for SSO de-registration completed.

    Beginning input parameter validation for OID de-registration.

    Following is the number of user subscriptions found to be deleted : 1352

     

    ******************************** WARNING **********************************

     

    For better performance it is advisable to use bulk delete utility as

    described in Oracle Internet Directory Administrator's Guide, before

    continuing with the de-registration.

    This script will delete the subscriptions one at a time. Depending upon number of

    subscriptions, this action might take a long time but you can watch the progress

    in the log file in another terminal window.

     

    ******************************** WARNING **********************************

     

    Do you want to continue <Y/N> ? Y

    Input parameters validation for OID de-registration completed.

     

    BEGIN SSO DE-REGISTRATION:

     

    Partner application found and will be removed.

    Partner application has been removed successfully.

     

    BEGIN OID DE-REGISTRATION:

     

    No dangling provisioning profiles found.

    Beginning to delete provisioning profile for this application.

    Provisioning profile for this application has been deleted successfully.

    Following is the number of user subscriptions found to be deleted : 1352

     

    USER SUBSCRIPTION DELETE LOG FILE : /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/usrDelSubs_Tue_Aug_18_14_59_14_2009.out

    All user subscriptions have been deleted successfully.

    Beginning to de-register this application from Oracle Internet Directory.

    This application has been de-registered successfully from Oracle Internet Directory.

    End of /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl : No Errors encountered

     

    Registered Again SSO

     

    $ txkrun.pl -script=SetSSOReg -registersso=Yes -appspass=***** -infradbhost=ios10901e.idc.ikon.org -infradbport=1510 -infradbsid=SSOD -orassopass=****** -systempass=***** -ssosdkpass=*****

     

    *** ALL THE FOLLOWING FILES ARE REQUIRED FOR RESOLVING RUNTIME ERRORS

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_15_02_47_2009.log

    Program : /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl started @ Tue Aug 18 15:02:47 2009

     

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_15_02_47_2009.log

     

    ######################## WARNING ########################################

    This application works with SSOSDK version 9.0.2 or higher. If lower version

    (3.0.9) of SSOSDK was installed in your system and you have a registered

    partner application, this process will remove the 3.0.9 version of the SSOSDK

    schema and install the 9.0.2 version.

    ######################## WARNING ########################################

    Beginning input parameter validation for SSO registration.

    Beginning loading SSO SDK into database if necessary.

    Loading of SSO SDK into database is not required.

    Input parameter validation for SSO registration completed.

     

    BEGIN SSO REGISTRATION:

     

    Beginning to register partner application.

    Partner application has been registered successfully.

    Single Sign-On partner application registered successfully.

     

    End of /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl : No Errors encountered

     

    Registered Again OID

    $ txkrun.pl -script=SetSSOReg \

    > -provtmp=$FND_TOP/admin/template/ProvOIDToApps.tmp \        ß Provision template from OID to Apps Only

    > -registeroid=Yes \

    > -appspass=network1 \                            ß Apps password

    > -infradbhost=ios10901e.idc.ikon.org \                    ß OID infrastructure host

    > -orcladminpass=ssodpoc123 \                        ß orcladmin password

    > -instpass=welcome123 \                            ß Registration Password

    > -ldapport=3030 \                                ß OID Port

    > -appname="JAID" \                            ß Application Name

    > -svcname="JAID"                            ß Service Name

    *** ALL THE FOLLOWING FILES ARE REQUIRED FOR RESOLVING RUNTIME ERRORS

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_15_03_25_2009.log

    Program : /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl started @ Tue Aug 18 15:03:25 2009

     

    *** Log File = /opt11/app/jaidcomn/rgf/JAID_osijaid/sso/txkSetSSOReg_Tue_Aug_18_15_03_25_2009.log

     

    Beginning input parameter validation for OID registration.

    Input parameters validation for OID registration completed.

     

    BEGIN OID REGISTRATION:

     

    Beginning to register Application and Service containers if necessary.

    Application and Service containers were found and thus not created.

    Beginning to register application in Oracle Internet Directory.

    Registration of application in Oracle Internet Directory completed successfully.

    Beginning to register instance password in Oracle Internet Directory.

    Registration of instance password in Oracle Internet Directory completed successfully.

    Beginning to test application registration in Oracle Internet Directory.

    Testing of application registration in Oracle Internet Directory completed successfully.

    Beginning to register provisioning profile in Oracle Internet Directory.

    Registration of provisioning profile in Oracle Internet Directory completed successfully.

    Application is now registered successfully with provisioning in Oracle Internet Directory.

    End of /opt01/app/jaidappl/fnd/11.5.0/patch/115/bin/txkSetSSOReg.pl : No Errors encountered

     

  5. Perform validationLogin to 11i environment and navigate to screens listed below to perform validation.

    http://<>URL>/OA_HTML/jtflogin.jsp è diagnostic è "Application Object Library" è "SSO Setup Test".

     

    Status for following component should be "SUCCEED"

     

    SSO SDK Version and Files     

    ATG SSO File Versions 

    SSO Settings 

     

  6. Make sure given below system profile should be set as given below.

    Profile                        Value

    Application SSO LDAP Synchronization         enabled

    Applications SSO Auto Link User            enabled

    Applications SSO Enable OID Identity Add Event        enabled

    Applications SSO Login Types                SSO (SYSADMIN and GUEST should be LOCAL)

    Applications SSO Type                Sswa w/sso

    Applications SSO Linking Source of Truth        Oracle internet directory

     

  7. I tried to login to application using SSO login using given below link and it prompted for user id and password. This was expected behavior. As I mentioned support apps instance was cloned from production so APPS. USER_GUID value was from Production integrations. In order to make Development apps instance (JAID) integrated with SSO development server. I heed to nullify USER_GUID value so at runtime it can update value.

    http://URL/oa_servlets/AppsLogin

     

    $sqlplus apps/<password>

    SQL>create table apps.fnd_user_bkp as select * from apps.fnd_user;

    SQL>update apps.fnd_user set user_guid=null where user_name not in

    (

    'APPSMGR',

    'AUTOINSTALL',

    'CR_SCHEDULER',

    'GUEST',

    'IBE_GUEST',

    'PORTAL30',

    'PORTAL30_SSO',

    'SYSADMIN',

    'OP_CUST_CARE_ADMIN',

    'OP_SYSADMIN',

    'SYSADMIN',

    'WIZARD',

    'ANONYMOUS',

    'AUTOINSTALL',

    'CONCURRENT MANAGER',

    )

     

  8. After above update I again tried to login to applications using given below URL and I could login to oracle applications.

    http://URL/oa_servlets/AppsLogin

No comments: