Oracle Access Manager Installation for Linux Part 4 (Configuration after Webpass)

Upgrading Oracle Access Manager from 10.1.4.1 to 10.1.4.3. (Step 2)

Upgrading Oracle Access Manager from 10.1.4.1 to 10.1.4.3. (Step 2)

 

1   <Upgrading Oracle Access Manager from 10.1.4.1 to 10.1.4.2>

 

•             Confirm that the following component are already at release 10g (10.1.4.2.0). For example:

                IdentityServer

                WebPass

                PolicyManager

                AccessServer

•             Stop the Oracle Access Manager component instance you are patching, for example, the Identity Server.

•             Back up your Oracle Access Manager component installation directory.

•             Move the backup directory to another location and record this so you can locate it later, if needed.

•             Change to the temporary component-specific directory you created, and run the patchinst program for your platform, for example:  All Unix Operating Systems: ./patchinst

•             Then prompted, type the name of the directory where you want to apply the new patch set. You must apply the new release in the same location as the component you are upgrading, for example:     installdir\identity or installdir\access.

•             Restart the component that you patched.

•             Repeat the steps above to patch any additional instance of the same component.

•             Repeat the steps above to patch any other Oracle Access Manager component instance.

 

2   <Upgrading Oracle Access Manager from 10.1.4.2 to 10.1.4.3>

 

•             Confirm that the following component are already at release 10g (10.1.4.2.0). For example:

                IdentityServer

                WebPass

                PolicyManager

                AccessServer

 

•             Stop the Oracle Access Manager component instance you are patching, for example, the Identity Server.

•             Back up your Oracle Access Manager component installation directory.

•             Move the backup directory to another location and record this so you can locate it later, if needed.

•             Change to the temporary component-specific directory you created, and run the patchinst program for your platform, for example: All Unix Operating Systems: ./patchinst

•             When prompted, type the name of the directory where you want to apply the new patch set. You must apply the new release in the same location as the component you are upgrading, for example:     installdir\identity or installdir\access.

•             Restart the component that you patched.

•             Repeat the steps above to patch any additional instance of the same component.

•             Repeat the steps above to patch any other Oracle Access Manager component instance.

Upgrading Oracle Access Manager from 10.1.4.1 to 10.1.4.3. (Step 1)

Upgrading Oracle Access Manager from 10.1.4.1 to 10.1.4.3. (Step 1)

 

You can not upgrade 10.1.4.1 to 10.1.4.3 directly, you need to upgrade it from 10.1.4.1 to 10.1.4.2 and then 10.1.4.2 will be upgraded to 10.1.4.3.

Upgrade will be in two phases.

• 10.1.4.1 to 10.1.4.2 <Apply patch 5957301>
  
• 10.1.4.2 to 10.1.4.3 <Apply patch 8276055>

How to Unlock an Account expired by Password Policy in Oracle Internet Directory

How to Unlock an Account expired by Password Policy in Oracle Internet Directory

• I created an account in Oracle Internet Directory as qasim.
  
• Implemented a password policy on this user that it should expire after 200 seconds.
  

After 200 seconds I tried to login with this user but got an error as below:

ldap_bind: DSA is unwilling to perform

ldap_bind: additional info: Account Policy Error :9050: GSL_ACCTDISABLED_EXCP :Your Account has been disabled. Please contact the administrator.

• This account can by unlocked through OIDDAS which is not present in my environment, so I had to use Directory Manager or command line tool. In the directory manager the option to unlock this account was disabled, so the only way was to use the command line tool.
  
• I created an ldif file as below
  

************unlock.ldif*****************



dn: cn=qasim,cn=users,dc=tap,dc=com

changetype: modify

add: orclpwdaccountunlock

orclpwdaccountunlock: 1

*************************************

• Executed below command and it successfully unlocked the account:
  

ldapmodify -h ldap.tap -p 389 -D cn=orcladmin -q -v -f unlock.ldif

Note: It will ask you orcladmin password, after you enter password it would unlock your account and output would be as below:.

Please enter bind password:

add orclpwdaccountunlock:

1

modifying entry cn=qasim,cn=users,dc=tap,dc=com

modify complete

Uninstalling Oracle WebPass

Restore the Web Server configuration file.

OAM : Create User Identity - You do not have sufficient rights

OAM : Create User Identity - You do not have sufficient rights



Solution:

You need to create a workflow in order to achieve this. Open Identity Console

Click on User Manager

After the User Manager click on Configuration:

In the Configuration click on Workflow Defination:

Select the options which best suits you.

Create a User now.

Verify in OID, it would be creatd here.

 

Oracle Access Manager Installation for Linux Part 3 (WebPass Installation)

Oracle Access Manager Installation for Linux Part 2 (Installing Identity Server)