ZT: WEBUTIL Config in oas10.1.2.0.2

WEBUTIL installation in Oracle Application Server10.1.2.0.2

1.download http://www.oracle.com/technology/software/products/forms/files/webutil/webutil_106.zip

2.upzip webutil_106.zip
3.copy java\frmwebutil.jar to the directory [OraHome]\forms\java
4.copy all files in directory server\ to the directory [OraHome]\forms\server;
5.copy directory webutil to the directory [OraHome]\forms\;

6.unzip jacob_18.zip
http://prdownloads.sourceforge.net/jacob-project/jacob_18.zip
7.copy jacob.jar to the directory %ORACLE_HOME\forms\java;
8.copy jacob.dll to the directory %ORACLE_HOME\forms\webutil;
9.set environment variablePath :[OraHome]\jdk\bin

10.open command window,sign frmwebutil.jar and jacob.jar
cd [OraHome]\forms\webutil\
[OraHome]\forms\webutil\sign_webutil [OraHome]\forms\java\frmwebutil.jar
[OraHome]\forms\webutil\sign_webutil [OraHome]\forms\java\jacob.jar
note:Do not care if key is duplicated when signing
11.create webutil_db package;

login db as sysdba

CREATE USER webutil IDENTIFIED BY webutil
DEFAULT TABLESPACE users
TEMPORARY TABLESPACE temp;

GRANT CONNECT, resource, CREATE PUBLIC SYNONYM TO webutil;

grant execute on dbms_lob to webutil;

grant execute on utl_encode to webutil;

grant execute on utl_raw to webutil;

CONNECT webutil/webutil@orcl

@[OraHome]\forms\create_webutil_db.sql

CREATE PUBLIC SYNONYM webutil_db FOR webutil.webutil_db;
grant execute on webutil_db to public;

12.modify [OraHome]\forms\server\default.env
CLASSPATH=[OraHome]\forms\java\frmwebutil.jar;[OraHome]\jdk\jre\lib\jacob.jar;[OraHome]\jdk\jre\lib\rt.jar ;

13.modify [OraHome]\forms\server\formsweb.cfg

[webutil]

WebUtilArchive=frmwebutil.jar,jacob.jar,frmall.jar

14.modify [OraHome]\forms\server\webuitl.cfg

transfer.database.enabled=TRUE

transfer.appsrv.enabled=TRUE

15.modify webutil.pll

replace webutil.pll by webutil.pll in the directory Oracle Developer Suit-home/forms/webutil.pll

and rename webutil.pll to webutil_lib.pll

WEBUTIL installation in Oracle Developer Suit10.1.2.0.2

In Forms DS 10.1.2.0.2, almost all the required configurations are done by the Oracle Universal Installer itself, except for the part related to jacob.

1) Download http://prdownloads.sourceforge.net/jacob-project/jacob_18.zip
and extract to a temporary staging area. Do not attempt to use 1.7 or 1.9.

2) Copy or move jacob.jar and jacob.dll
C:\webutile is the folder where you extracted Jacob, and will end in …\jacob_18
cd C:\webutile
copy jacob.jar Oracle_Home\forms\java\.
copy jacob.dll Oracle_Home\forms\webutil\.
The Jacob staging area is no longer needed, and may be deleted.

3) Sign frmwebutil.jar and jacob.jar
Open a DOS command prompt.
Add Oracle_Home\jdk\bin to the PATH:
set PATH=C:\oracle\developer\jdk\bin;%PATH%
Sign the files, and check the output for success:
C:\oracle\developer\forms\webutil\sign_webutil C:\oracle\developer\forms\java\frmwebutil.jar
C:\oracle\developer\forms\webutil\sign_webutil C:\oracle\developer\forms\java\jacob.jar

4) If you already have a schema in your RDBMS which contains the WebUtil stored code,
you may skip this step. Otherwise,
Create a schema to hold the WebUtil stored code, and privileges needed to
connect and create a stored package. Schema name “WEBUTIL” is recommended
for no reason other than consistency over the user base.

Login as sysdba
CREATE USER webutil IDENTIFIED BY webutil
DEFAULT TABLESPACE users
TEMPORARY TABLESPACE temp;

GRANT CONNECT, resource, CREATE PUBLIC SYNONYM TO webutil;

grant execute on dbms_lob to webutil;

grant execute on utl_encode to webutil;

grant execute on utl_raw to webutil;

CONNECT webutil/webutil@orcl

@[OraHome]\forms\create_webutil_db.sql

CREATE PUBLIC SYNONYM webutil_db FOR webutil.webutil_db;
grant execute on webutil_db to public;

5) Modify Oracle_Home\forms\server\default.env, and append C:\oracle\developer\jdk\jre\lib\rt.jar
to the CLASSPATH entry.

6) Modify Oracle_Home\forms\server\formsweb.cfg insde [default] add :
archive_jini=frmall_jinit.jar,frmwebutil.jar,jacob.jar

also add :
[webutil]

WebUtilArchive=frmwebutil.jar,jacob.jar,frmall.jar
archive=frmwebutil.jar,frmall.jar
lookAndFeel=oracle

7) Modify Oracle_Home\forms\server\webutil.cfg and add :
transfer.database.enabled=TRUE
transfer.appsrv.enabled=TRUE

8)rename webutil.pll to webutil_lib.pll

8) Start the OC4J instance

9) Start Forms Builder and connect to a schema in the RDBMS used in step (4).
Open webutil.pll, do a “Compile ALL” (shift-Control-K), and generate to PLX (Control-T).
It is important to generate the PLX, to avoid the FRM-40039 discussed in
Note 303682.1
If the PLX is not generated, the Webutil.pll library would have to be attached with
full path information to all forms wishing to use WebUtil. This is NOT recommended.

10) Create a new FMB.
Open webutil.olb, and Subclass (not Copy) the Webutil object to the form.
There is no need to Subclass the WebutilConfig object.
Attach the Webutil.pll Library, and remove the path.
Add an ON-LOGON trigger with the code
NULL;
to avoid having to connect to an RDBMS (optional).
Create a new button on a new canvas, with the code
show_webutil_information (TRUE);
in a WHEN-BUTTON-PRESSED trigger.
Compile the FMB to FMX, after doing a Compile-All (Shift-Control-K).

11) Under Edit->Preferences->Runtime in Forms Builder, click on “Reset to Default” if
the “Application Server URL” is empty.
Then append “?config=webutil” at the end, so you end up with a URL of the form
http://server:port/forms/frmservlet?config=webutil

aritcle source : http://lyh7609.iteye.com/blog/423373

OID动态组实现方式

OID提供了三种对象类和属性的组合方式来实现动态组:

1. orclDynamicGroup对象类和labeleduri属性

2. orclDynamicGroup对象类和CONNECT_BY属性

3. orclDynamicList对象类和labeleduri

1. labeleduri方式

1. 首先在需要实现动态组的组里面加上orclDynamicGroup对象类

image

2.添加属性到用户用以存储所属组信息

image

将该属性添加到用户某一对象类的可选属性中:

image

3.选择某一测试用户,将其可选属性的custGroup的值设置为其所属组的cn

test

4. 将test组的labeleduri属性设置为

ldap://idmdev.xxxx.com.cn:3060/dc=xxxx,dc=com,dc=cn??sub?(custGroup =*test*)

image

5. 查看结果:

通过ldap browser查看:

image

2. Connect by

1. 添加动态组属性dynamicGroup

2. 设置connect by属性为:manager,以及orclConnectByStartingValue设置为User的baseDN

image

3. 在用户上的manager属性上添加该组

image

 

orclDynamicList方法和第一种方法类似

OID创建超级管理员

1.创建用户dick

cn=dick,cn=users,dc=xxxx,dc=com,dc=cn

2.进入到装有OID的oracle_home/bin下:

cd /u01/app/Oracle/Middleware/Oracle_IDM1/bin

3.执行查询,查出所有uniquemember为cn=orcladmin的条目,并将其输出到dn.txt文件中

ldapsearch -p 3060 -h oid_host -D "cn=orcladmin" -w pasword -L -b "" -s sub "(uniquemember=cn=orcladmin)" dn > dn.txt

4.编辑dn.txt文件

在查询到的所有的条目的下面都加上

changetype: modify

add: uniquemember

uniquemember: cn=dick,cn=users,dc=xxxx,dc=com,dc=cn

例如:

dn: cn=odisgroup,cn=odi,cn=oracle internet directory

changetype: modify

add: uniquemember

uniquemember: cn=dick, cn=users,dc=xxxx,dc=com,dc=cn

dn: cn=Provisioning admins,cn=changelog subscriber,cn=oracle internet director

y

changetype: modify

add: uniquemember

uniquemember: cn=dick, cn=users,dc=xxxx,dc=com,dc=cn

note:切记两个DN下面需要有回车

5.对文件中的所有条目执行修改操作

ldapmodify -p 3060 -h idmdev.xxxxx.com.cn -D "cn=orcladmin" -w password -f dn.txt

6.执行结果

不报任何错误表示执行成功。

7.测试:

使用cn=dick,cn=users,dc=xxxx,dc=com,dc=cn进行登录ODSM,登录成功,并可以进行任意操作

Oracle身份管理用户密码策略

这里描述简单的密码策略的设置,无任何密码过期以及警告策略

OIM密码策略:

     修改OIM密码策略:

          1.登录到designconsole

          2.访问Administration->Password Policies:

Image(1)

           3.点击toolbar的搜索:

Image(2)

           4.设置策略:

Image(3)

登录后修改密码可发现:

Image(4)

OIM密码策略更多请参考:

http://www.orastudy.com/oradoc/selfstu/fusion/doc.1111/e14308/oim_admin.htm

OID密码策略:

1.登录到ODSM

     2.选择:

Image(5)

     3.选择第二个default:

cn=default,cn=pwdPolicies,cn=Common,cn=Products,cn=OracleContext,dc=xxx,dc=com

Image(6)

     4.将第一个default的密码策略不启用:

cn=default,cn=pwdPolicies,cn=Common,cn=Products,cn=OracleContext

OID密码策略更多请参考:

http://download.oracle.com/docs/cd/E21764_01/oid.1111/e10029/pwdpolicies.htm#i1047430

OAM禁用用户策略

1.进入到

/u01/app/Oracle/Middleware/user_projects/domains/IDMDomain/config/fmwconfig

2.修改最大用户登录尝试次数

<Setting Name="MaxRetryLimit" Type="xsd:integer">5</Setting>

设置为希望的次数。