|
Windows
Integration: DIP Server Configuration Configuring the DIP Server for SSL In order for the DIP server to also communicate over SSL, we need to configure a wallet and wallet password file for the DIP server. In this exercise we will be using the same wallet we created on the previous page to complete the exercise. PREREQUISITES OID 10g AS infrastructure must be installed The OID server must be running Password Policy Plug-in must be configured An OID SSL configset has been created An SSL wallet has been created
Step 1. Change directory to $ORACLE_HOME/ldap/odi/conf Step 2. Examine the file "odi.properties" In this file you will see 3 default lines. They are: regWalletFile: conf/srvWallet certWalletFile: <Absolute Path of the Wallet Directory> certWalletPwdF: <Absolute Path of the WalletPasswordFile>/certWalletPwd In this file the first line reads: "regWalletFile: conf/srvWallet". Leave this line alone and do not change it at all. The middle line reads: "certWalletFile: <Absolute Path of the Wallet Directory>" Put the path to your "ewallet.p12" file. This is the wallet file that was created in the previous lesson. We will be copying this file to the $ORACLE_HOME/ldap/odi/conf directory later in this exercise. Example, if your wallet file is located in a directory called "/u01/app/oracle/product/904/ldap/odi/conf" then this line would look like this: certWalletFile: /u01/app/oracle/product/904/ldap/odi/conf Do not include the name of the wallet file in this line. The last line in the file looks like this by default: certWalletPwdF: <Absolute Path of the WalletPasswordFile>/certWalletPwd This is the location of the encrypted wallet password file (Not to be confused with the wallet file) that the DIP server will use to access the wallet. This file has not been generated yet but will be generated in the next step. However it is necessary for you to set the location of the file before it exists. For instance, if you plan to put the encrypted wallet password file in a directory called /u01/app/oracle/product/904/ldap/odi/conf and you want to name the encrypted wallet password file "certWalletPwd" then this last line will look like this: certWalletPwdF: /u01/app/oracle/product/904/ldap/odi/conf/certWalletPwd Step 3. Copy the ewallet.p12 file you created on the previous page to the directory $ORACLE_HOME/ldap/odi/conf Example: # cp /u01/ewallet.p12 $ORACLE_HOME/ldap/odi/conf
Step 4. Stop all odisrv server processes including the default process confgiset0. Step 5. Create the certWalletPwd file. Example: # dipassistant wpasswd This command will read the information in your "odi.properties" file for the location where it will create this file. When prompted, enter the password for the wallet you created previously. Step 6. Register the the odisrv servers. # odisrvreg -p port_num -h hostname.domain.com -D cn=orcladmin -w passwd Step 7. Start the odisrv server process for configset0. |
||||||||||