Monday, January 6, 2014

Bundle Patching OIM 11.1.2.1.x to 11.1.2.1.3

Description:  This guide will show you how to patch Oracle Identity Manager 11g R2 to Bundle Patch 3 (BP3 Patch: 17532765). The bundle patch requires you to apply the patch using OPatch, fill out "patch_oim_wls.profile" file, and run patch_oim_wls.sh script. You can download the patch at My Oracle Support. Read the README given in the patch for a detailed version of the entire process and additional post patching steps.


Prerequisites:
Before applying the bundle patch, you need to meet the following requirements.
  1. OPatch version 11.1.0.8.3 or later is required. OIM 11.1.2.1.0 comes with 11.1.0.9.0.
  2. Patch 17032764 must be applied. This patch is a super set of patch 16478722. This is to be applied in the oracle common home directory and to jdeveloper home directory (only if you have jdevleoper installed in the middleware directory).
  3. Backup the following items:
    •  OIM, MDS, and SOA schemas
    •  Entire oracle home directory (E.g. Oracle_IDM1)
    •  WebLogic domain (E.g. user_projects/domains/oim_domain)
Stage 1: OPatch Apply
Apply the patch with opatch will make file system changes in the oracle home and WebLogic domain directories. Many files will be added, deleted, or updated.
  1. Shutdown all WebLogic server instances.
  2. Temporarily Set opatch path and oracle home directory.
    #IDM Oracle Home
    export PATH=/home/oracle/Oracle/Middleware/Oracle_IDM1/OPatch:$PATH
    export ORACLE_HOME=/home/oracle/Oracle/Middleware/Oracle_IDM1
  3. Navigate inside the patch directory and apply patch.
    cd /home/oracle/Desktop/OIM_Patch_112130/17532765
    opatch apply
  4. You can view all the logs of each patch that has been applied.
    /home/oracle/Oracle/Middleware/Oracle_IDM1/cfgtoollogs/opatch/
Stage 2: Fill out patch_oim_wls.profile

ant_home=/home/oracle/Oracle/Middleware/modules/org.apache.ant_1.7.1
java_home=/home/oracle/java/jrockit64
mw_home=/home/oracle/Oracle/Middleware
oim_oracle_home=/home/oracle/Oracle/Middleware/Oracle_IDM1
soa_home=/home/oracle/Oracle/Middleware/Oracle_SOA1
weblogic.server.dir=/home/oracle/Oracle/Middleware/wlserver_10.3

#weblogic configuration variables
weblogic_user=weblogic
weblogic_password=Password1

soa_host=localhost
soa_port=8001

#DB configuration variables    
operationsDB.user=DEV_OIM
OIM.DBPassword=Password1
operationsDB.host=localhost
operationsDB.serviceName=orcl
operationsDB.port=1521

mdsDB.user=DEV_MDS
mdsDB.password=Password1
mdsDB.host=localhost
mdsDB.port=1521
mdsDB.serviceName=orcl

oim_username=xelsysadm
oim_password=Password1
oim_serverurl=t3://localhost:14000

Stage 3: Execute patch_oim_wls_.sh
This step makes changes to the database by running sql scripts. The patch_oim_wls.sh uses the patch_oim_wls.profile file.
  1. Start AdminServer, SOA, and OIM WebLogic server instances.
  2. Navigate to "$MW_HOME/Oracle_IDM1/server/bin" and execute the patch_oim_wls.sh script.
    cd /home/oracle/Oracle/Middleware/Oracle_IDM1/server/bin
    ./patch_oim_wls.sh
  3. View the "patch_oim_wls.log" log file in the same directory given in step 2 to validate if the script ran successfully.
Post-Patching
  1. Remove the follwing directory in your domain home:
    cd /home/oracle/Oracle/Middleware/user_projects/domains/oim_domain/servers/oim_server1/tmp/_WL_user
    rm -rf oracle.iam.console.identity.self-service.ear_V2.0           
    
  2. You may need to recreate the boot.properties files for the managed server instances (E.g OIM and SOA) since the patch removes them. Refer to Enabling Auto Login by Using the Boot Identity File

No comments:

Post a Comment