script to shutdown/start Weblogic components(oid, discoverer...)

startup:
# Set environment variables

MW_HOME=/oracle/FMW11
DOMAIN_HOME=$MW_HOME/user_projects/domains/Forms
ORACLE_INSTANCE=$MW_HOME/instances/forms
export MW_HOME DOMAIN_HOME ORACLE_INSTANCE

# +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# WEBLOGIC SERVER DOMAIN STARTUP
#
# If required, start up WebLogic Domain Servers
# This section can be commented if you working with a FMW 11g AS Instance
# (for example Web Tier) which has no dependency on a WebLogic Domain
# +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

# The following files need to exist in order to startup automatically
# $DOMAIN_HOME/servers/AdminServer/security/boot.properties
# $DOMAIN_HOME/servers/<managed server name>/security/boot.properties
# Each file must contain:
# username=weblogic
# password= <= This password is automatically obfuscated the next time the
# Weblogic Server is started up
#

# Optionally start up the WebLogic Domain Admin Server
# The Admin Server does not need to be up and running for the
# individual managed servers to start up
# However, if Admin Server is not up and running, Fusion Middleware Control (EM)
# and WebLogic Admin Console will not function.

echo "Starting up the AdminServer ..."

# Note although we redirect stdout and stderr to /dev/null they are redirected to
# the AdminServer.log

nohup $DOMAIN_HOME/startWebLogic.sh >/dev/null 2>/dev/null &

#
# Wait for some seconds to make sure the AdminServer is listening
# before we attempt to start up the individual managed servers.
# The managed servers will need to connect to the Admin Server in order
# to for the EM applications to be able to "see" these instances

#
sleep 120

#
# In this example we are starting WLS_FORMS and WLS_REPORTS,
# just replace these names by the managed servers corresponding
# to your installation
# e.g. wls_ods1
#
# The example also assumes the AdminServer is listening on port 7001,
# replace the port in "t3://localhost:7001/" if AdminServer is
# listening on a different port
# Replace "localhost" by the actual hostname where the AdminServer is running. e.g. in a cluster
# environment
#

echo "Starting up WLS_FORMS ..."
nohup $DOMAIN_HOME/bin/startManagedWebLogic.sh WLS_FORMS t3://localhost:7001/ >/dev/null 2>/dev/null &

echo "Starting up WLS_REPORTS ..."
nohup $DOMAIN_HOME/bin/startManagedWebLogic.sh WLS_REPORTS t3://localhost:7001/ >/dev/null 2>/dev/null &


# ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# SYSTEM COMPONENTS STARTUP
# If required, start up OPMN managed processes
# This section can be commented if you working with a FMW 11g AS Instance
# (for example SOA / WebCenter) which has no dependency on system components
# ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

echo "Starting up the OPMN managed components ..."
$ORACLE_INSTANCE/bin/opmnctl startall


Shutdown:
# Set environment variables

MW_HOME=/oracle/FMW11
DOMAIN_HOME=$MW_HOME/user_projects/domains/Forms
ORACLE_INSTANCE=$MW_HOME/instances/forms
export MW_HOME DOMAIN_HOME ORACLE_INSTANCE

# ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# SYSTEM COMPONENTS STOP
# If required, stop the OPMN managed processes
# This section can be commented if you working with a FMW 11g AS Instance
# (for example SOA / WebCenter) which has no dependency on system components
# ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

echo "Stopping the OPMN managed components ..."
$ORACLE_INSTANCE/bin/opmnctl stopall


# +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# WEBLOGIC SERVER DOMAIN STOP
#
# If required, stop the WebLogic Domain Servers
# This section can be commented if you working with a FMW 11g AS Instance
# (for example Web Tier) which has no dependency on a WebLogic Domain
# +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

# The following files need to exist in order to stop automatically
# $DOMAIN_HOME/servers/AdminServer/security/boot.properties
# $DOMAIN_HOME/servers/<managed server name>/security/boot.properties
# Each file must contain:
# username=weblogic
# password= <= This password is automatically obfuscated the next time the
# Weblogic Server is started up
#


#
# In this example we are stopping WLS_FORMS and WLS_REPORTS,
# just replace these names by the managed servers
# corresponding to your installation
# e.g. wls_ods1
# Note: The Admin Server must be up and running!
# The example also assumes the AdminServer is listening on port 7001,
# replace the port in "t3://localhost:7001/" if AdminServer is
# listening on a different port
# Replace "localhost" by the actual hostname where the AdminServer is running. e.g. in a cluster
# environment
#

echo "Shutting down WLS_FORMS ..."
nohup $DOMAIN_HOME/bin/stopManagedWebLogic.sh WLS_FORMS t3://localhost:7001/ >/dev/null 2>/dev/null &
# In busy environments you may want to a different command to perform a forceful shutdown instead stopManagedWebLogic.sh
# Note the preferred option is stopManagedWebLogic.sh as it performs a graceful shutdown (i.e. wait for current requests to finish).
# This is the command to run instead of stopManagedWebLogic.sh
# java weblogic.Admin -url localhost:7001 -username weblogic -password welcome1 FORCESHUTDOWN WLS_FORMS
#
sleep 60
echo "Shutting down WLS_REPORTS ..."
nohup $DOMAIN_HOME/bin/stopManagedWebLogic.sh WLS_REPORTS t3://localhost:7001/ >/dev/null 2>/dev/null &

#
# We wait 120 seconds before stopping the AdminServer to allow enough time for WLS_FORMS and WLS_REPORTS to shutdown
# If you see 120 seconds may not be enough just change the sleep 120 by a bigger value like sleep 300


sleep 120

# Stop the WebLogic Domain Admin Server

echo "Shutting down the AdminServer ..."

# Note although we redirect stdout and stderr to /dev/null they are redirected
# to the AdminServer.log

nohup $DOMAIN_HOME/stopWebLogic.sh >/dev/null 2>/dev/null &

Unlock orcladmin account

If the superuser, cn=orcladmin account is locked(when you try to run diptester or oidadmin), use the oidpasswd utility to unlock the super user orcladmin account, you need to set you env first, then:

oidpasswd  unlock_su_acct=true

Connect Discoverer 11g to EBS

When config the connection between Discoverer 10g to EBS, we need to copy the dbc file to the discoverer $ORACLE_HOME/discoverer/secure, also add entry into $ORACLE_HOME/network/admin/tnsnames.ora.
But in Discoverer 11g, we have to copy the dbc file to
$ORACLE_INSTANCE/config/Discoverer/Discoverer_asinst/
(note: don't know what's the reason, but I find out we'd better have two dbc files, one has upper case SID another has lower case SID, ie. PROD.dbc and prod.dbc under this directory)
and add entry into
$ORACLE_INSTANCE/config/tnsnames.ora

Oracle EBS R12 with OID 11g and SSO 10gR2

The Oracle premier support for this configuration will be end at Dec 2011, if you are using Oracle Discoverer, Portal then the premier support will be end at Dec 2012(http://blogs.oracle.com/stevenChan/entry/why_does_ebs_integration_with). This means Oracle won't come out certification with new products like Windows8. The replacement for this is Oracle Access Manager 11g.

The MOS notes that I am followed are:

• Using the Latest Oracle Internet Directory 11gR1 Patchset with Single Sign-on and Oracle E-Business Suite (Doc ID 876539.1)
• Active Directory OID 11g Synchronization Quick Start Guide (Doc ID 1263918.1)
• Oid 11g: Source Attribute 'SamAccountName' Doesn't Belong To Object Class 'User' (Doc ID 1186999.1)
• How to Setup Java External Authentication Plugins in OID 11g (Doc ID 1270329.1)
• Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On (Doc ID 376811.1)
• WNA OC4J_SECURITY...Unable To Communicate With The Directory Or Naming Service (Doc ID 468705.1)
• How to use the 'ssoca wna...' command to configure SSO WNA (338560.1)

My steps:
 step 1-8 are in Doc ID 876539.1
1. create database
2. install rcu   go to rcuHome/bin
   ./rcu
    Run RCU 11.1.1.4.0 to create the necessary database schema: In the 'Select Component' page:
    Expand 'Identity Management' and select only 'Oracle Internet Directory' ('Oracle Identity Federation' is not required)
    And select discoverer.
3. install weblogic 11.1.4.0    download and install jdk
    export PATH=jdk_install_dir/bin:$PATH
    java -d64 -jar wls1034_generic.jar
4. Install (but do not configure) Oracle Internet Directory and Oracle Directory Integration Platform 11gR1 (11.1.1.2.0)
5. Patch IDM, patch 11060980
6. config IDM   http://download.oracle.com/docs/cd/E17904_01/install.1111/e12002/oid002.htm#BABGDJFC
   set the environment, go to wls_home/server/bin
   . setWLSEnv.sh
  
   During the configuration, in the 'Configure Components' screen:
 Select Oracle Internet Directory and Oracle Directory Integration Platform (the Oracle Directory Services Manager and Fusion Middleware Control          management components are automatically selected for this installation):
 (i.e. UNSELECT 'Oracle Identity Federation Components' and UNSELECT 'Oracle Virtual Directory')
 Ensure that only 'Oracle Internet Directory' and 'Oracle Directory Integration Platform' are selected and click Next.
 In the 'Installation Summary' screen, ensure that only the following are in the list of 'Applications Selected for Configuration':
 •Oracle Internet Directory
 •Oracle Directory Integration Platform
 •Enterprise Manager
 •Oracle Directory Services Manager
        Click the 'Configure' button
7. Install SSO server
    run op1
   export PATH=/oracle/middleware/wls/Oracle_IDM1/perl/bin:$PATH
   export ORACLE_HOME=/oracle/middleware/wls/Oracle_IDM1
   export ORACLE_INSTANCE=/oracle/middleware/wls/asinst_1
   cd $ORACLE_HOME/ldap/bin
   perl inspre11.pl host port -ssl oid1 oiddb ods_password orcladmin_password -op1
   Install repository MRCA,
   download the MRCA into windows, and run on windows.
   and you may need to change some database settings.
   alter system set db_cache_size=145M scope=both;
   alter system set java_pool_size=120M scope=both;
   alter system set shared_pool_size=175M scope=both;
   alter system set pga_aggregate_target=96m scope=both;
  
   reset ods password
   alter user ods identified by password
   /oracle/middleware/wls/Oracle_IDM1/ldap/bin/oidpasswd  connect=OIDDB create_wallet=true
  
   restart the OID server
   cd $ORACLE_INSTANCE/bin
   ./opmnctl stopall
   ./opmnctl startall
   run op2
   cd $ORACLE_HOME/ldap/bin
   perl inspre11.pl host port -ssl oid1 oiddb ods_password orcladmin_password -op2

   Install sso server
   linux32 bash
   ./runInstaller -ignoreSysPrereqs
   before run root.sh
   export ORACLE_HOME=/oracle/middleware/wls/sso_10g
   export PATH=/oracle/middleware/wls/sso_10g/OPatch:$PATH
   apply patches:
   p6880880_101000_LINUX.zip
   p5649850_10105_GENERIC.zip
  

   alter index xdb.XDB$ACL_XIDX rebuild
 

8 patch sso server to 10.1.4.3
  apply patch 6265268
         For IAS 10.1.4.3 :
          DBConnectQueries.jar 
      Disk1/stage/Queries/DBConnectQueries/8.4/1/DBConnectQueries.jar
          IP_DBQueries.jar
             Disk1/stage/Queries/IP_DBQueries/3.0/1/IP_DBQueries.jar
    cp DBConnectQueries.jar $10.1.4.3_SSO_OH/inventory/Queries21/DBConnectQueries/8.4
    cp IP_DBQueries.jar $10.1.4.3_SSO_OH/inventory/Queries21/IP_DBQueries/3.0
 
9 Document TitleActive Directory OID 11g Synchronization Quick Start Guide (Doc ID 1263918.1)
  Oid 11g: Source Attribute 'SamAccountName' Doesn't Belong To Object Class 'User' (Doc ID 1186999.1)
  How to Setup Java External Authentication Plugins in OID 11g (Doc ID 1270329.1)

  force enable profile:
   oidhome/manageSyncProfiles activate -h host -p port -D weblogic -pf profile_name -fa true

  Bootstrap: 
   oidhome/syncProfileBootstrap -host host -port port -D weblogic -profile profile_name -lp 5
 
10 config wna: How to use the 'ssoca wna...' command to configure SSO WNA (338560.1)

  if not working, checn sso_oracle_home/opmn/log, and if it says something like this:
   Authentication Failed
   Broken pipe
  then go to: WNA OC4J_SECURITY...Unable To Communicate With The Directory Or Naming Service (Doc ID 468705.1)
  and when restart opmn, the dcm may not start at same time, start it using: opmnctl startproc ias-component=dcm-daemon

11. follow note: Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On (Doc ID 376811.1)
     to configure the EBS R12.

OID table stores account attributes

This table stores all users attributes that have been imported into OID.
ODS.DS_ATTRSTORE
The password for ODS in OID 10g should be same as the orcladmin password.
The password for ODS in OID 11g is the one you entered when you create the OID database.

here is an example:

select * from ODS.DS_ATTRSTORE where entryid in (
select entryid from ODS.DS_ATTRSTORE
where attrname='uid'
and UPPER (attrval) = upper('&user_name'));