Deploying Siebel Application to a Single Instance VM Mid Tier Using Oracle Compute Cloud Service with Demo Database or Base Database

1. Run the ssh-keygen command.

   ssh-keygen -b 2048 -t rsa

2. The command prompts you to enter the path to the file in which you want to save the key. A default path and file name are suggested in parentheses. For example: /home/user_name/.ssh/id_rsa. To accept the default path and file name, press Enter. Otherwise, enter the required path and file name, and then press Enter.
3. The command prompts you for a passphrase. Enter a passphrase.
   Note that the passphrase isn't displayed when you type it in. Remember the passphrase. If you forget the passphrase, you can't recover it.
4. When prompted, enter the passphrase again to confirm it.
   The command generates an SSH key pair consisting of a public key and a private key, and saves them in the specified path. The file name of the public key is created automatically by appending .pub to the name of the private key file. For example, if the file name of the SSH private key is id_rsa, then the file name of the public key would be id_rsa.pub.
5. Make a note of the path where you've saved the SSH key pair.
   When you create instances, you must provide the SSH public key. When you log in to an instance, you must specify the corresponding SSH private key and enter the passphrase when prompted.

1. Find puttygen.exe in the PuTTY folder on your computer and double-click it. (If you do not have PuTTY.exe on your computer you can find it on web here http://www.putty.org/)
2. Accept the default key type, SSH-2 RSA, and set the Number of bits in a generated key to 2048, if it is not already set. Then click Generate.

   

3. Move your mouse around the blank area to generate randomness. The SSH key pair is generated.

   

4. Save your private key.
   1. The key comment is the name of the key. You can keep the generated key comment or create your own.
   2. Enter a passphrase in the Key passphrase and the Confirm passphrase fields.

      Note: Remember the passphrase. You can't recover a passphrase if you forget it.

   3. To save the private key in the PuTTY PPK format, click Save private key. Enter the same name as you used for the key comment so that you know which public key to use this private key with. The private key is saved in PuTTY's Private Key (PPK) format, which is a proprietary format that works only with the PuTTY toolset. You can use this key whenever you use PuTTY for SSH.

      

5. Next, save your SSH public key.
   1. To save the public key, in the PuTTY Key Generator, select all of the characters in the Public key for pasting into OpenSSH authorized_keys file field.

      Note: Make sure you select all the characters, not just the ones you can see in the narrow window. If there is a scroll bar next to the characters, you aren't seeing all the characters.

   2. Right-click somewhere in the selected text and select Copy from the menu.

      

   3. Open a text editor and paste the characters. Ensure that you paste the text at the first character in the text editor, and don't insert any line breaks.
   4. Save the key using the same root name that you used for the private key. Add a .pub extension. You can give it any extension you want, but .pub is a useful convention to indicate that this is a public key.
   5. Exit PuTTY Key Generator.
6. Make a note of the public and private key names and where they are saved.
   When you create instances, you must specify the SSH public key. When you log in to an instance, you must provide the path to the corresponding SSH private key and enter the passphrase when prompted.

A security list is a set of instances that can communicate with each other across all protocols and ports. When you create a security rule, you specify a security list as a destination. This allows traffic from a specified source to access instances that are part of the destination security list over a specified protocol and port. To open port 7780 for a specific instance, you must first group those instances in a security list.

To create a security list:

1. On the Oracle Compute Cloud Service console, click the Network tab.
2. Click the Security Lists tile, and then click Create Security List.
3. In the Create Security List dialog box, select or enter the following information:
   • Name: Enter a name for the new security list. For the purpose of this tutorial, enter sebl_webserver_seclist. Note this name. You'll use it later in this tutorial.
   • Inbound Policy: Accept the default option, Deny (Drop packets, no reply).
   • Outbound Policy: Select Permit (Allow packets).
   • Description: Enter a description for the new security list if desired.

     

4. Click Create.

Next, you add the instances hosting your web server to the security list that you just created.

1. Click the Overview tab and then the Instances tile.
2. From the list of instances displayed, click the SEBLMTVM1 instance name.
3. On the resulting page, click Add to Security List. The Add to Security List dialog box is displayed.
4. Select the sebl_webserver_seclist security list that you created earlier.
5. Click Attach. The SEBLMTVM1 instance is attached to the security list.

Next, create a security application for port 7780. A security application is a mapping between a port number and port type (TCP, UDP, or ICMP). To open port 7780, you must create a security application for that port.

1. Click the Network tab and then the Security Applications tile.
2. Click Create Security Application.
3. In the Create Security Application dialog box, select or enter the following information:
   • Name: Enter a name for the new security application. For the purpose of this tutorial, enter tcp_7780. Note this name. You'll use it later in this tutorial.
   • Port Type: Select tcp.
   • Port Range Start and Port Range End: In both of these fields, enter the port that you want to open, port 7780.
   • Description: Enter a description for the new security application (for example, Allow TCP traffic to SBL web server on port 7780).
4. Click Create.

   

When you create a security list, the instances in the security list are isolated from hosts outside the group. Security rules enable you to override the default access settings of security lists. Each security rule defines a specific communication path, which consists of a source, a destination, and a protocol-port combination over which communication is allowed. Next, create a security rule to allow TCP traffic from the Internet on port 7780.

To create a security rule:

1. Click the Network tab.
2. Click the Security Rules tile.
3. Click Create Security Rule.
4. In the Create Security Rule dialog box, select or enter the following information:
   • Name: Enter an appropriate name for the rule. For the purpose of this tutorial, enter allow_seblwebserver_tcp_7780.
   • Status: Select Enabled.
   • Security Application: Select tcp_7780, which is the security application that you created earlier.

     Note: Many of the commonly used protocol and port combinations are provided as predefined security applications in Oracle Compute Cloud Service. However, if you wish to specify a particular protocol-port mapping that is not in the list of predefined security applications, you can create the required security application by going to the Security Applications tile.

   • Source: From the Security IP Lists drop-down list, select public-internet.
   • Destination: Select the sebl_webserver_seclist security list that you created earlier.
   • Description: Enter a description for the rule (for example, Allow TCP traffic to web servers on port 7780).

     

5. Click Create.

Port 7780 on the instances in the sebl_webserver_seclist is now open to HTTP requests. At any time, you can temporarily suspend security rules by disabling them. You can also delete security rules that you no longer need.

1. Enter the following command:

   ssh -o ServerAliveInterval=5 -o ServerAliveCountMax=1 $HOST -i/path/to/<private_key_name> opc@<public ip address of instance>

   Note. If you don't know the public IP address of your instance, you can find it by going to the Instances tile on the Oracle Compute Cloud Service console and clicking your instance to get to the details page.

   Important! The command text ServerAliveInterval=5 –o ServerAliveCountMax=1 $HOST is mandatory to prevent the SSH connection from receiving a timeout while running the Siebel DPK.

2. If you entered a passphrase when creating your SSH key pair, enter the passphrase when prompted.
3. The first time you connect to your instance, the ssh utility prompts you to confirm the public key. In response to the prompt, enter yes.

1. Start PuTTY. The PuTTY Configuration window is displayed, showing the Session panel.
2. In the Host Name (or IP address) field, enter the public IP address of your instance.

   Note. If you don't know the public IP address of your instance, you can find it by going to the Instances tile on the Oracle Compute Cloud Service console and clicking your instance to get to the details page.

3. In the Connection type field, select SSH if it is not already selected.

   

4. In the Category pane, expand Connection, and then click Data. The Data panel is displayed.
5. In the Auto-login username field, enter opc. Confirm that the When username is not specified option is set to Prompt.

   

6. In the Category pane, click Connection. Enter 5 in the Seconds between keepalives (0 to turn off) text box.
   Ensure that the Enable TCP keepalives (SO_KEEPALIVE option) check box is selected.

   

7. In the Category pane, expand SSH, and then click Auth. The Auth panel is displayed.
8. In the Private key file for authentication field, click Browse and select the private key file that you saved earlier, rsa-key-1.ppk in this example.

   

9. In the Category tree, click Session.
   The Session panel is displayed.
10. In the Saved Sessions field, enter a name for this connection configuration, and then click Save.
11. Click Open to open the connection.
    The PuTTY Configuration window is closed and the PuTTY window is displayed.
12. Enter the passphrase you had provided for your SSH key pair.
13. The first time you connect to your instance, the PuTTY Security Alert window is displayed, prompting you to confirm the public key. Click Yes to continue.