Monday, September 2, 2013

How to setup multimaster replication into OID 11G

I am using my day-off(Labor day) to show you how to setup step by step Multimaster replication into OID.

Multimaster replication includes multiple master 'sites', where each master 'site' operates as an equal peer. So, with OID it uses database advanced replication feature and also It uses asynchronous data propagation between ,what I call, 'supplier' and 'consumer'.


As a requirement I have 2 databases (thiagoleoncio_orcl and thiagoleoncio_orcl2) and 2 OID instances. So, please take this note and follow these 'step-by-step' pictures below in order to complete your setup:


Fig1: Go to you /em farm where you have your oracle internet directories deployed. Right-click, select Administration and Replication Management.



Fig2: Provide your host,port and password where you will have your replication entry setup.

Fig3: Under type, select 'Multi-Master replication'



Fig4: Select your primary and secondary nodes.


Fig6: Select your primary context(where replication will be 'based')


Fig7: If you want to exclude any entry that should not be replicated, add it into 'Excluded Attributes' as above.

Fig8: If you want to exclude the entire name context do this into this picture above. This allows you to avoid some entries under the undesired context. 


Fig10: Review your configuration above.



Fig12: Under your primary oid, shared properties above, you will see an option to Inactivate or activate your replication as it is showing into the next picture(below).



Fig14: Under your OID1 tree you will be able now to compare with OID2.

Fig15: So adding one simple entry as example.



Fig18: Entry added into oid1.

Then login into other OID server to see if it replicated it to there:

Fig19: Above I am connecting into instance oid3

Fi20: As you can see into OID instance 3 the entry that I added into node1 is already created into node3.




It is pretty simple and straight forward. It becomes more complex when you add your business rules. So, feel free to reach me out if you have any question regarding this feature.


I hope this helps all ORCL IDM lovers as myself,
Thiago Leoncio.
















Sunday, August 11, 2013

How to unlock superuser orcladmin into OID11G

Hey everyone,

 Today III give you a good tip on how to unlock superuser orcladmin into OID 11g version.


1)First of all the behavior, doing a simple ldapsearch:
[oracle@thiagoleoncioserver ~]$ ldapsearch -p 3060 -D cn=orcladmin -w **** -b "" -s base "(objectclass=*)"
ldap_bind: DSA is unwilling to perform
ldap_bind: additional info: Password Policy Error :9001: cn=orcladmin : Your account is locked. Contact your OID administrator.

2) Then let's unlock this guy. Go to [$ORACLE_HOME]/ldap/bin and run command oidpasswd as below:

./oidpasswd connect=OIDDBInstance unlock_su_acct=true
OID super user account unlocked successfully.

NOTE: this connect parameter is the OID DB Instance that you have for your Pmon("Process Monitor") ldap.

3)Then, after successfully unlock it, try to bind your superuser again, as below:

ldapbind -p 3060 -D "cn=orcladmin" -w *****
bind successful


That's it! I hope it helps you,
THiago Leoncio.