Quantcast
Channel: Cloud Training Program
Viewing all 1895 articles
Browse latest View live

[Troubleshooting] EBS (R12)-OAM Integration Failed to connect to OAM with given credentials while De-Registering

$
0
0

This Post Covers issue of EBS (R12) – OAM Integration, while doing De-registering EBS (R12) from OAM also it can come when you register EBS (R12) with OAM.

If you are new to EBS (R12), then check our previous blog on EBS (R12)-OAM/OID/OUD Integration for SSO: Architecture & Components (Click Here)

and for more information about How to Deregister SSO/OID from Oracle Apps 11i/R12/12i Click Here

Issue:

  1. We were executing the command to deregister Oracle E-Business Suite  R(12) from Oracle Access Manager and hit the below issue

          Exception in thread “main” java.lang.Exception: Failed to connect to OAM with the given credentials
          at oracle.apps.fnd.txk.oam.Configuration.<init>(Configuration.java.88)
          at oracle.apps.fnd.txk.oam.DeleteConfiguration.<init>(DeleteConfiguration.java.33)
          at oracle.apps.fnd.txk.oam.DeRegisterOAM.main(DeRegisterOAM.java.87)
         Failed while performing post de – registration tasks

Isue encountered

Note: In this situation, OAM Admin Server was getting started with running status and the console is also opening.

Fix:

  • If you hit an error like above then check first if you are able to access the OAM Console using http://Weblogic_Hostname:AdminPort/oamconsole

Error 404 Not found

  • OAM console is resulting in 404 Not Found, then check the status of an oam_admin application under deployments in WebLogic Admin Server Console (/console).
    Here Status of oam_admin(11.1.2.0.0) status is FAILED

Administration Console Oracle Weblogic Server

  • Then check OAM Admin server  log file at $DOMAIN_HOME/servers/AdminServer/log/AdminServer-diagnostic.log and error mentioned in log file

         <Feb 1, 2019 1:46:44 AM EST> <Error> <Deployer> <BEA-149231> <Unable to set the activation state to true              for the application ‘oam_admin [Version=11.1.2.0.0]’.weblogic.application.ModuleException:

at weblogic.servlet.internal.WebAppModule.startContexts(WebAppModule.java:1520)
at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:484)
at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:425)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
Truncated. see log file for complete stacktrace
         Caused By: oracle.security.am.install.AMInstallException: DB Policy not configured in mixed mode
          at                                 oracle.security.am.install.startup.AMBootstrapListener.checkDBPolicyStoreConfigured(AMBootstrapListener.java:161)

<Feb 1, 2019 1:46:45 AM EST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to      RUNNING>
<Feb 1, 2019 1:46:45 AM EST> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING         mode>
       <Feb 1, 2019 1:48:19 AM EST> <Error> <Default> <BEA-000000> <Failed to communicate with any of configured Access Server, ensure that it is up and running.>

This is real root cause error of this issue and you can safely ignore  Failed to communicate with any of configured Access Server, ensure that it is up and running error.Failed to communicate error

  • According to  AdminServer-diagnostic.log file DB Policy not configured properly and some Configuration had been missed out.
  • So now drop your OAM RCU Schema & reconfigure Oracle Access Manager (OAM), after doing this issue was solved successfully and able to access OAM Console (/oamconsole).

In our EBS-OAM/OID Integration training we provide the dedicated module for EBS – OAM/OID R12 Integration also we provide a module for  WebGateOHSEBS AccessgateDIPOAM, and OID Architecture Deployment Installation & Configuration & lot more..

Register for Free Master Class on Oracle EBS(R12) OAM/OID/OUD Integration For SSO

Related/Further Reading

  • Oracle EBS (R12) – OAM Integration for SSO Click Here
  • Oracle EBS (R12) – OAM/OID Integration for SSO: Self Study Click Here
  • Oracle EBS (R12) OAM/OID/OUD/SSO Integration: Activity Guides from Training Click Here
  • Integration of E-Business suite with Oracle Single Sign-on Click here
  • Oracle E-Business Suite (R12) Integration with OID/OAM 11g Click Here
  • Overview of Single Sign-On Integration Options for Oracle E-Business Suite Click Here
  • Integrate Oracle E-Business Suite (EBS) R12 with OAM/OID/OUD 12c (12.2.1.3.0) High-level Steps Click Here
  • Blog ([Video] Consoles in Oracle Access Manager (OAM) : OAM, WebLogic, EM) Click Here
  • Oracle EBS Integration with OIM (Identity Manager): Things you should know Click Here

If you have not yet downloaded FREE eBook – 7 Docs every Oracle Apps DBA must-read for EBS R12 integration with OAM/OID for SSO get a copy in your Email

Get these free 7 docs now

The post [Troubleshooting] EBS (R12)-OAM Integration Failed to connect to OAM with given credentials while De-Registering appeared first on Oracle Trainings.


[1Z0-932] Oracle Cloud Infrastructure (OCI):Week 1 Learning Path Cloud Concepts & IAM Concepts

$
0
0

I have joined K21 Academy as an Intern. I believe, Learning is the most important thing to grow your skills and being  an intern I have got this opportunity to be a part of OCI certification Exam.

So, If you are a fresher like me or just starting out in cloud or even working in cloud & are planning to get certify, you can start your  journey as I did.

For better learning, we need to have a definite path that would help in getting more specific about our knowledge.

In the subsequent post i have shared my week 1 learning so far according to the  learning path for OCI , on OCI Module 1: (Cloud Concepts) & Module 2: (Identity and Access Management)

In our 8 weeks Certification Programwe cover below Modules & step-by-step hands-on guides. to clear the Certification Exam

 

Learning Path for Oracle Cloud (OCI) Architect

 

Here are the basics of Module 1: Cloud OCI Concepts that we have covered in week one.

What is the Cloud?

In technical terms, Cloud is defined as computing services including  Storage, Server, Application, Networking, Database etc. It is virtual memory that resides on the server but physically on the system. We have access to the cloud through some physical means but all the data and information are stored in a virtual account.

Features of Cloud Computing

There are different features of cloud computing:

  • Tenancy: Every individual has its own cloud account.
  • Automated: Automatic backup and system upgrades
  • Access: It is accessible from any device and from anywhere
  • Coherent: One can pay by their own using criteria, or it’s a pay as you go.
  • Web-based: It is a modern web-based administration system.

If you want to learn more on Oracle Cloud Infrastructure (OCI): Region, AD, FD, Tenancy, Compartment, VCN, IAM, Storage Service, check our post here

Cloud Service Models

There are three cloud computing service models:

  • Infrastructure as a service(IAAS): In this model, Services like Application, Data, Runtime, Middleware, and Os are managed and maintained by the client and services like virtualization, servers, storage, and networking are managed by the server
  • Platform As a Service(PAAS): In this model, Services like Application and Data are managed by the client and rest are managed by the server.
  • Software As a Service(SAAS): In this model, all the services are managed by some third party reducing all efforts on a host.

To know more about Cloud service model   previous post on  Cloud Service Model: SaaS | PaaS | IaaS

Cloud Deployment Models

  • Private Model: This model provides access to only authorized users.
  • Public Model: This model provides access to clients and servers.
  • Hybrid Model: This model is a combination of both private and public cloud

Cloud Deployment Models

We cover all these basics of cloud computing in our Module 1 of Oracle Cloud Infrastructure (OCI)

OCI Module 1: Getting Started with cloud concepts

In week 1 ,We have also covered Module 2: Identity & Access Management , So here is all you need to know about IAM.

Identity & Access Management In OCI

Before getting into an explanation of IAM there are a few things that need to be understood

One should know, what exactly is Identity and Access Management?

There are different types of resources like Compute, Block Volume, Database, DNS, Networking, Email, Storage etc in OCI which are used to perform different functionalities.  IAM is a framework that provides access to a particular cloud resource in OCI.

In cloud services, a cloud account is salient only if it has access to all the resources in that account and coherent use of accessibility.

Infrastructure as a Service(IaaS)

Key Features of IAM

  • It gives more secure access to an individual account.
  • It includes all the necessary tools and controls which are used to capture and record user login, removing and adding privileges in an automated pattern.

IAM Components

  • Tenancy:-Its also called account and created at the initial stage. It contains all the OCI resources. When a Tenancy is created a ROOT Compartment is created in Home Region
  • Compartment:-Logical containers to isolate and organize OCI resources. There can be sub-compartment also called child compartment. A resource can span across multiple compartments. To know more about Compartment check our previous post Compartment In Oracle Cloud Infrastructure 
  • Principals:-Entity that interact with the OCI resources.

There are three principals to interact with and authenticate OCI resources.

  • Root users: These are the primary account users and hold administrative powers and they can’t be deleted.
  • IAM users: These are with the least privileges and can only have access to OCI resources when they are added to a group having some permission policy to tenancy and compartment.
  • Group: It is a collection of users requesting the same OCI resource. One user can be a member of multiple groups.
  • Instance Principle: It eliminates the need for storing user credentials for future use, Can make API calls to OCI resources like compute, VCN, Block Storage, etc.

Compartment in OCI

Authentication

  • To identify the identity of a person.
  • We can authenticate a principle by either using username and password or by API signing Keys.

Authorization

  • The process of identifying what actions an authenticated person can take.

Policy

  • A set of defined rules or statements that decides which user or group have access to a resource in tenancy and compartment.

Region & Home Region

  • Geographical location where the cloud data center resides.
  • Home Region is the location where we sign up and tenancy is created first.

OCI Module 2: Identity & Access Management(IAM) service

In this module 2 ,we have covered all the concepts of IAM .

Apart from all the theoretical concepts that we have covered until now, we need to revise our concepts through practical implementation. That’s why one should Perform Hands-on to clear the concepts for clearing [1Z0-932] Oracle Cloud Infrastructure Certification Exam.

Now It’s your turn to learn and share your thoughts & doubts in the comment box.

Related/Further Readings

Next Task For You

Begin your journey towards becoming an Oracle Cloud [1Z0-932] Certified Architect by Joining,
FREE Masterclass on How To Become Oracle Certified Cloud Architect [1Z0-932] in 8 Weeks, And start preparing today to clear the Exam for Oracle Cloud Infrastructure Architect Exam-(1Z0-932) Certification.

Click Down the image below to register for FREE.
FREE masterclass to become Oracle certified cloud architect

The post [1Z0-932] Oracle Cloud Infrastructure (OCI):Week 1 Learning Path Cloud Concepts & IAM Concepts appeared first on Oracle Trainings.

Oracle EBS R12 on Cloud (OCI) for Apps DBAs & Architects: Training [1901] Day 1 Q/As

$
0
0

This post covers some of the Q/As which were asked on Day 1 January of 2019 batch from our Build, Manage & Migrate EBS (R12) On Oracle Gen2 Cloud (OCI) Training.  Many questions were asked during the Day 1, but I am sharing a handful of them, that you should also come across when you work on Oracle Cloud Infrastructure (OCI).

New To The Cloud?

I would highly recommend you check our  previous post to kick start your journey to the cloud.

Topics Covered On Day1

  •  EBS (R12) Overview
  • IaaS (OCI VS OCI-C)
  • PaaS (DBCS: VM & BM, ExaCS)
  • EBS (R12) Architecture on Cloud
  • Provision EBS (R12) on OCI

Q1) Cloud Security, What controls are in place at the public cloud to protect customer resources across the tenancy in the multitenant environment?

As a customer, the services that you use determine the configuration work you must perform as part of your security responsibilities. Oracle Cloud infrastructure and platform services operate under a shared responsibility model, where Oracle is responsible for the security of the underlying cloud infrastructure, and you (customers) are responsible for securing your workloads as well as platform services such as Oracle Database and Oracle WebLogic Server. The following figure shows the shared security responsibilities.

  • Identity and Access Management (IAM):  You are responsible for securing your cloud account logins by creating individual credentials for your employees, managing & tracking what exactly they are doing on your cloud account. Wherein Oracle is responsible for providing effective IAM services such as identity management, authentication, authorization, and auditing.
  • Workload Security: You are responsible for protecting and securing the operating system and application layers of your compute instances from attacks and compromises.  Oracle is responsible for providing secured inbuilt images that are hardened and have the latest patches, also Oracle allows you to bring your own or third-party security solutions.
  • Host Infrastructure Security: You are responsible for securely configuring and managing you’re compute (virtual hosts, containers), storage (object, local storage, block volumes), and platform (database configuration) services. Oracle has a shared responsibility with you to ensure that the service is optimally configured and secured. This responsibility includes hypervisor security and the configuration of the permissions and network access controls required to ensure that hosts can communicate correctly and that device is able to attach or mount the correct storage devices.
  • Network Security: You are responsible for securely configuring network elements such as virtual networking, load balancing, DNS, and gateways, wherein Oracle is responsible for providing a secure network infrastructure.
  • Client and Endpoint Protection: Your enterprise/Company uses various hardware and software systems, such as mobile devices and browsers, to access your cloud resources. You are responsible for securing all clients and endpoints that you allow to access Oracle Cloud Infrastructure services.
  • Physical Security: Oracle is responsible for protecting the global infrastructure that runs all of the services offered in Oracle Cloud Infrastructure, which includes hardware, software, networking, and facilities that run Oracle Cloud Infrastructure services.

Shared Security Model In Oracle Cloud

Q2) What are DBAs Roles in IaaS, PaaS & SaaS?

for SaaS: No DBA tasks apart from SaaS Admin Tasks of creating the frontend Account/Users and securing environment (whitelisting). Loading Data via Integration tools that will be specific to SaaS environment. DBA’s don’t get backend access of database in SaaS.

for PaaS: for Autonomous Database its tasks like Start/Stop, Scale-Up, Load Data, Manual Backup, Restore etc. For USer Managed Database, its previous + backup & recovery, patching, upgrades, tuning etc

for IaaS: it’s Infra task so all tasks right from installing VM to managing Data. All you get is Compute, Network & Storage

To know more about IaaS, PaaS & SaaS, check here

Q3)  What is the advantage in KVM@OCI over Nimbula@OCI-C? 

There is 2 type of IaaS Offerings in Oracle Cloud (OCI & OCI Classic) where OCI uses KVM and OCI-C Uses Nimbul, In our training, we cover both IaaS offering, to know more about the differences between OCI & OCI-C click here. 

Coming to the question, what is the advantage of KVM in OCI over Nimbula in OCI-C, let us first understand, what is a Hypervisor?

hypervisor or virtual machine monitor (VMM) is computer software, firmware or hardware that creates and runs virtual machines. A computer on which a hypervisor runs one or more virtual machines is called a host machine, and each virtual machine is called a guest machine.

XEN Hypervisor: It is type I Hypervisor, which means it sits a single layer above bare metal.  It’s like a stripped down operating system, and it uses a function called “pass-through” to connect directly to PCI devices like RAM/CPU/NIC.

KVM Hypervisor: KVM is a Type II Hypervisor, which means that it is one layer above the OS.  So you have a bare metal machine, install an OS, and THEN install KVM. In Linux, it is installed in the form of a Kernel, and this kernel then turns the bare metal machine into a Hypervisor.

If your most the workload running on Linux-based solutions, You should go with KVM. Which doesn’t mean Xen is not good. It’s just there are chances are, you’ll find KVM will offer better performance with the Linux OS and if all your applications running on  Windows-based cloud servers, there are probably more advantages to hosting on Xen because of the near-native drivers.

Note: OCI-C is being phased out by Oracle & my recommendations are to move your applications & databases to Oracle Cloud Infrastructure

Q4)VMs in OCI-C and OCI have noisy neighbors. If so, why the customer should prefer VMs at OCI and not OCI-C?

VMs in OCI-C and OCI have noisy neighbors. If so, why the customer should prefer VMs at OCI and not OCI-C. The advantage in OCI over OCI-C is not just VM but underlying Network (check all networking options in OCI that is not in OCI-C), type of Storage (Block with faster Read/Write in OCI) and Shape (bigger shapes) etc.

Q5) Free/paid subscription  – After I subscribe to cloud, can I create logins for my colleagues in the same tenancy on my own? 

Yes, You can create it, by adding them as a user, then as per the requirement, you can grant access to the user by creating policy & groups within the same tenant.
As of Jan 2019 on both the cloud subscriptions ie.Monthly Universal Credits & Pay-as-You-Go or Promo you can create 250 users in tenancy. This is already covered in our step by step activity  Setup IAM: Users, Groups, Security Policy & Rules in our Oracle Cloud Architect Certification Training.

To know more about users, group, policy click here

Q6) OCI SDK – Is this similar to JDK? how do I get this service/install it? How it is different from CLI?

Oracle SDK

SDK stands for ‘Software Development Kit’, a developer’s tools that enable one to write the code with more ease, effectiveness, and efficiency. SDKs come for various languages. They provide a lot of APIs (Application Programming Interfaces) that makes the programmer’s work easy.  Yes, it is similar to JDK, SDK is more generic & SDK of Java is JDK (Java Development Kit). Oracle SDK (Software Development Kit) enables you to build up your own app which can be integrated with Oracle Cloud Infrastructure. As of now you can build and use below SDKs to build your own customized APP which can be integrated with OCI and then you can access Oracle Cloud Infrastructure resources via that Application

  • Java SDK
  • Python SDK
  • Ruby SDK
  • Go SDK

For Example, if you want to use JAVA SDKs in Oracle Cloud Infrastructure (OCI), you need to follow below steps:

To use the Java SDK, you must have the following:

  • An Oracle Cloud Infrastructure account.
  • A user created in that account, in a group with a policy that grants the desired permissions. This can be a user for yourself or another person/system that needs to call the API. For an example of how to set up a new user, group, compartment, and policy, see Adding Users. For a list of typical policies, you may want to use, see Common Policies.
  • A key pair used for signing API requests, with the public key uploaded to Oracle, Only the user calling the API should be in possession of the private key.
  • Java 8
  • A TTL value of 60.

Oracle CLI

Oracle Command Line Interface enables you to access & manage various Oracle Cloud Infrastructure resources (Compute, VCN, Storage etc) through CLI. In Oracle CLI you won’t need to create it, as it by default given by Oracle which is build on Python, you just need to install it and then you can manage your OCI Resources via CLI. The CLI is built on Python (version 2.7.5 or 3.5 or later), running on Mac, Windows, or Linux.

To know more about Oracle CLI click here

Q7) SSH Keys – If I am provisioning the server using my SSH keys then how will others access the VM? Do I need to share my keys to everyone or is there any alternate way?

No, we no need to share ssh keys with anyone, in that case, we can create SSH enabled users in that compute & every user has its own ssh key to login to compute

Q8)REST API – Are REST APIs and REST Endpoints same? If not, please throw some light.

A RESTful API is an application program interface (API) that uses HTTP requests to GET, PUT, POST and DELETE data. A RESTful API — also referred to as a RESTful web service — is based on representational state transfer (REST) technology, an architectural style, and approach to communications. Whereas rest endpoint is an endpoint or target location that hosts resource/service that you want to use or act on like create a Compute or Delete a Database.

To know more about Rest API’s in Oracle Cloud Infrastructure click here

Q9)How should I reach Oracle Support for the paid (metered/non-metered) subscription related queries (IaaS/PaaS)?

Yes, you can directly contact Oracle Support either via phone or chat and all your queries will be answered regarding Cloud Subscriptions.

Oracle Cloud Support

 

Overall, it was a fantastic session and got very good feedback. All are now excited to learn Cloud technology and transform from Apps DBA/DBA to Cloud Apps DBA.

Stay tuned for the further post. Many things to learn in Oracle Cloud!!

Related Post

Next Task For You

Want to Learn How to Manage and Migrate EBS R12 on Oracle Cloud?
Click on the Below image and Get Our Omniscient FREE Guide on 3 Docs Every Apps DBA Must Read to Manage & Migrate EBS R12 on Oracle Cloud.FREE Guide for every oracle Apps DBA by Industry expert

The post Oracle EBS R12 on Cloud (OCI) for Apps DBAs & Architects: Training [1901] Day 1 Q/As appeared first on Oracle Trainings.

[Video 1 of 5] Networking in Cloud: Who Should Learn & Why

$
0
0

This post is Part 1 from my FREE 5 Part Video Series On Networking in Oracle’s Gen 2 Cloud for beginners in which I have covered Who Should Learn Networking & Why?

Agenda of Free 5 Part Videos Series

  • Video I: Who Should Learn Networking & Why
  • Video II: 3 Ways to Connect to Oracle Cloud
  • Video III: VCN, Subnet, DRG, IGW, Routing in OCI
  • Video IV: Load Balancer (Public & Private)
  • Video V: Case Study: Enterprise Deployment

Who Should Learn Networking & Why

When you work with Oracle Cloud Infrastructure, Whether you are deploying Database or Application the very first thing you will do is create a Network (VCN & Subnet). You then will decide which part of Application/Database is in what Subnet, What Ports to open across Subnet, How Primary Database talks to DR, Where to Deploy LoadBalancer for HA & Networking across Region.

Networking is important for almost everyone working on the Cloud, including:

  • Apps DBA Working on E-Bussiness Suite, Peoplesoft, JD Edwards & Siebel
  • DBA’s working on RAC, Datagaurd & GoldenGate
  • Fusion Middleware Admin working on SOA|MFT|Weblogic|OBIEE
  • Security & System Admin
  • Architects designing HA & DR Application

Next Task For You

The post [Video 1 of 5] Networking in Cloud: Who Should Learn & Why appeared first on Oracle Trainings.

[Solved] RC-20200: Fatal: Could not find Unzip When Installing EBS R12.1

$
0
0

While installing EBS R12.1 on Linux x86-64, the following error appears RW-50004. This error is caused due to an error RC-20200.

If you are hitting this error RW-50004: Error code received when running external process. In Step 2 at 20-40%.

RW-50004, EBS R12.1,RC-20200, Native unzip

In this step, Rapid Wizard is creating Oracle Database including the copy of data files from the staging area to data top.

If you check the log file at $ORACLE_HOME/appsutil/log/$CONTEXT_NAME/installdbf.log

You find that this error is caused because of an error RC-20200:

Root Cause:

RC -20200: Fatal: Could not find Unzip. At this time only Native UnZip 5.X is supported.

RW-50004, EBS R12.1,RC-20200, Native unzip

 

Solution:

As root user, rename the default unzip (/usr/bin/unzip) to a temporary filename.(e.g. /usr/bin/unzip-ver6).

mv /usr/bin/unzip /usr/bin/unzip-ver6

Now continue with the installation.

RW-50004, EBS R12.1,RC-20200, Native unzip

And remember to rename unzip-ver6 to the original name when installation completed.

Stay tuned for our other blog on RW-50015: Error: – HTTP Listener is not responding. The service might not have started on the port yet. Please check the service and use the retry button.

You have identified an RC-Error message during an E-Business Suite Installation/Cloning action then follow Doc ID 1448417.2 to deep dive into RC_Error Identification.

Related/Further Readings

Our Training for Apps DBAs consists of 14 modules and each Module has around 3-12 Lessons. If you are new to Oracle E-Business, then visit our previous video on Architecture of Oracle E-Business Suite R12.2.

Or

Did you get a chance to download 6 Docs Every Apps DBA Must Read for EBS R12.2 ? If not, Check it out here

 

The post [Solved] RC-20200: Fatal: Could not find Unzip When Installing EBS R12.1 appeared first on Oracle Trainings.

[Video 2 of 5] 3 Ways to Connect to Oracle Cloud

$
0
0

This post is Part 2 from my FREE 5 Part Video Series On Networking in Oracle’s Gen 2 Cloud for beginners in which I have covered 3 Ways to Connect to Oracle Cloud

If you have not watched part 1 or completed task given in the first video then I suggest you to first check the Part 1

  1. [Video 1 of 5] Networking in Cloud: Who Should Learn & Why
  2. Register for Free series at here
  3. Create Cloud Trial Account using FREE Step by Step Guide 
  4. Confirm you created or already have Cloud trial account by leaving a comment in the community  

3 Ways to Connect to Oracle Cloud

3 Ways to Connect to Oracle Cloud

1) Public IP: 

A public IP address is an IPv4 address that is reachable from the internet. If a resource in your tenancy needs to be directly reachable from the internet, it must have a public IP address. Depending on the type of resource, there might be other requirements.

You can assign a public IP address to an instance to enable communication with the internet. The instance is assigned a public IP address from the Oracle Cloud Infrastructure address pool.

There are two types of public IPs:

  • Ephemeral: Think of it as temporary and existing for the lifetime of the instance.
  • Reserved: Think of it as persistent and existing beyond the lifetime of the instance it’s assigned to

Note: When you are creating an instance, make sure you create that inside Public Subnet. It will automatically be assigned to Public IP, or just go to the Advance options & under Networking make sure you have assigned Public IP

Public IP

Quiz Question:

Question: How did you differentiate that a particular IP is a Public IP or Private IP by just looking at that IP Address?
[Hint]: Check out RFC1918

Post your Answer in the comment box or in our Private Facebook Community

2) IPSec VPN Tunnel: 

The second way to connect is using IP Sec VPN Tunnel and typically used to extend OCI Network (i.e. VCN) as if this is an extension to your On-Premise Network so that your users in On-Premise Network can connect to Cloud using Secure Tunnel over the Internet but on Internal (or non -public IP).

If you look at the diagram over here you have one network with CIDR 10.0 /16 on Premise while other as 172.16 /16 on OCI. One end of this VPN Tunnel will be connected using CPE and another end using DRG (so you must know what is DRG).

I’ll cover this in part 3 of this video series. If you have not yet registered for this FREE 5 part video series then do so here

IPSec VPN Tunnel

3) FastConnect

FastConnect is the most expensive solution whereas connecting over IPSec VPN Tunnel is the most common method. Connecting via Public is more common when you just testing out to see connectivity.

FastConnect

Well that’s it for today and in the next video I’ll cover basic connectivity concepts like Virtual Cloud Network (VCN), Subnet, Firewalls, DRG, IGW, Routing Table etc

Action Plan For You

  • If you don’t have an Oracle Cloud Public Account then create one by using Step by Step Activity Guide (Register For Free)
  • Log in to Oracle Cloud Trial Account that you created in Part 1 of this series
  • Create a Network (VCN) this is the first thing you do before you perform any task.
  • Create a Linux Machine by going to Compute or Database to going to Database on VM, make sure you select Public IP (as we are going to use the first method to connect)
  • Once done check you can connect using putty (22) for Linux machine you created. 
  • Note: For accessing database port like 1521 from your laptop, you will need to open port from Security list that we are going to cover in part 3 of this video series

3 Ways to connect to oracle cloud action plan content

Get the copy of Action Plan Guide by clicking on the below Image


The post [Video 2 of 5] 3 Ways to Connect to Oracle Cloud appeared first on Oracle Trainings.

Oracle WebLogic Administration: Supported Maximum Availability Architectures (MAA)

$
0
0

This blog describes the Supported Maximum Availability Architectures (MAA) multi-datacenter solutions that can provide continuous availability to protect an Oracle WebLogic Server system against downtime across multiple data-center.

If you are a beginner and want to learn Oracle WebLogic Server Administration, then check our blog post here where we cover about WebLogic 12c Architecture & New Features.

The Supported MAA Solutions Include:

  • Active-Active Application Tier with Active-Passive Database Tier
  • Active-Passive Application Tier with Active-Passive Database Tier
  • Active-Active Stretch Cluster with Active-Passive Database Tier

Active-Active Application Tier with Active-Passive Database Tier:

The following figure shows a recommended continuous availability solution using an Active-Active application infrastructure tier with an Active-Passive database tier.

Figure 1 – Topology for Active-Active Application infrastructure Tier with Active-Passive Database Tier

Topology for Active Active Application

The key aspects of this sample topology include:

  • Two separate WebLogic domains configured in two different data centers, Site 1 and Site 2. The domains at both sites are active. The domains include:
    • A collection of Managed Servers (MS1, MS2, and MS3) in a WebLogic Server cluster, managed by the WebLogic Server Admin Server in the domain. In this sample, Active Gridlink (AG) is being used to connect the Managed Servers to the primary database. (Although generic DataSource or Multi DataSource can be used, Active Gridlink is preferable because it offers high-availability and improved performance). The Zero Downtime Patching (ZDT) arrows represent patching the Managed Servers in a rolling fashion.
    • A Coherence cluster (COH1, COH2, and COH3) managed by the WebLogic Server Admin Server in the domain.
  • A global load balancer.
  • WebLogic Server HTTP session replication across clusters.
  • Two instances of Oracle Traffic Director (OTD) at each site, one active and one passive. OTD can balance requests to the web tier or to the WebLogic Server cluster.
  • Oracle HTTP Server (OHS) Web Tier. (Optional component based on the environment.)
  • A file store for the configuration data, local binaries, logs, and so on that is replicated across the two sites using any replication technology.
  • Oracle Site Guard, a component of Oracle Enterprise Manager Cloud Control, that orchestrates fail-over and switchover of sites.
  • Two separate Oracle RAC database clusters in two different data centers. The primary active Oracle RAC database cluster is at Site 1. Site 2 contains an Oracle RAC database cluster in standby (passive) read-only mode. The clusters can contain transaction logs, JMS stores, and application data. Data is replicated using Oracle Active DataGuard. (Although Oracle recommends using Oracle RAC database clusters because they provide the best level of high availability, they are not required. A single database or multi-tenant database can also be used.)

Active-Passive Application Tier with Active-Passive Database Tier:

The following figure shows a recommended continuous availability topology using an Active-Passive application infrastructure tier with an Active-Passive database tier.

Figure 2 – Topology for Active-Passive Application infrastructure Tier with Active-Passive Database Tier

Topology for Active - Passive Application

The figure shows 2 sites in an MAA architecture: Site 1 on the left and Site 2 on the right. In Site 1, the application infrastructure is active and the database tier is passive. In Site 2, both the application infrastructure tier and the database tier are standby (passive). Additional description is provided in the surrounding text.

The key aspects of this topology include:

  • Two separate WebLogic domains configured in two different data centers, Site 1 and Site 2. The domain at Site 1 is active and the domain at Site 2 is in standby (passive) mode.
    • All active-passive domain pairs must be configured with symmetric topology; they must be identical and use the same domain configurations such as directory names and paths, port numbers, user accounts, load balancers and virtual server names, and the same versions of the software. Hostnames (not static IPs) must  specify the listen address of the Managed Servers.
  • The domains include:
    • A collection of Managed Servers (MS1, MS2, and MS3) in a WebLogic Server cluster, managed by the WebLogic Server Admin Server in the domain. In this sample, Active Gridlink (AG) is being used to connect the Managed Servers to the primary database. (Although generic DataSource or Multi DataSource can be used, Active Gridlink is preferable because it offers high-availability and improved performance).
    • The Zero Downtime Patching (ZDT) arrows represent patching the Managed Servers in a rolling fashion.
    • A Coherence cluster (COH1, COH2, and COH3) managed by the WebLogic Server Admin Server in the domain.
  • A global load balancer.
  • WebLogic Server HTTP session replication across clusters.
  • Two instances of Oracle Traffic Director (OTD) at each site. OTD can balance requests to the web tier or to the WebLogic Server cluster. At Site 1, one instance is active and one passive. On Site 2 they are both on standby. When Site 2 becomes active, the OTD instances on that site will route the requests.
  • Oracle HTTP Server (OHS) Web Tier. (Optional component based on the environment.)
  • A file store for the configuration data, local binaries, logs, and so on that is replicated across the two sites using any replication technology.
  • Oracle Site Guard, a component of Oracle Enterprise Manager Cloud Control, that orchestrates fail-over and switchover of sites.
  • Two separate Oracle RAC database clusters in two different data centers. The primary active Oracle RAC database cluster is at Site 1. Site 2 contains an Oracle RAC database cluster in standby (passive) read-only mode. The clusters can contain transaction logs, JMS stores, and application data. Data is replicated using Oracle Active DataGuard. (Although Oracle recommends using Oracle RAC database clusters because they provide the best level of high availability, they are not required. A single database or multi-tenant database can also be used.)

Active-Active Stretch Cluster with Active-Passive Database Tier:

The following figure shows a recommended continuous availability solution using an Active-Active stretch cluster application infrastructure tier with an Active-Passive database tier.

Figure 3 – Topology for Active-Active Stretch Cluster Application Infrastructure Tier and Active-Passive Database Tier

Active Passive Database Tier

The above figure shows 2 sites in an MAA architecture: Site 1 on the left and Site 2 on the right. The sites are configured as a stretch cluster. All servers are active in the cluster. In Site 1, the database tier is active. In Site 2, the database tier is on standby. Additional description is provided in the surrounding text.

The key aspects of this topology include:

  • WebLogic Server configured as a cluster that stretches across two different data centers, Site 1 and Site 2. All servers in the cluster are active.
  • The domain includes:
    • A WebLogic Server cluster that comprises a group of Managed Servers (MS1, MS2, and MS3) at Site 1 and another group of Managed Servers (MS4, MS5, and MS6) at Site 2. The Managed Servers are managed by the WebLogic Server Admin Server at Site 1. In this sample, Active Gridlink (AG) is being used to connect the Managed Servers to the primary database. (Although generic DataSource or Multi DataSource can be used, Active Gridlink is preferable because it offers high-availability and improved performance). The Zero Downtime Patching (ZDT) arrows represent patching the Managed Servers in a rolling fashion.
    • A Coherence cluster that comprises a group of Coherence instances (COH1, COH2, and COH3) at Site 1, and another group (COH4, COH5, and COH6) at Site 2, all managed by the WebLogic Server Admin Server at Site 1.
  • A global load balancer.
  • WebLogic Server HTTP session replication across clusters.
  • Two instances of Oracle Traffic Director (OTD) at each site, one active and one passive. OTD can balance requests to the web tier or to the WebLogic Server cluster.
  • Oracle HTTP Server (OHS) Web Tier. (Optional component based on the environment.)
  • A file store for the configuration data, local binaries, logs, and so on that is replicated across the two sites using any replication technology.
  • Oracle Site Guard, a component of Oracle Enterprise Manager Cloud Control, that orchestrates failover and switchover of sites.
  • Two separate Oracle RAC database clusters in two different data centers. The primary active Oracle RAC database cluster is at Site 1. Site 2 contains an Oracle RAC database cluster in standby (passive) read-only mode. The clusters can contain transaction logs, JMS stores, and application data. Data is replicated using Oracle Active DataGuard. (Although Oracle recommends using Oracle RAC database clusters because they provide the best level of high availability, they are not required. A single database or multi-tenant database can also be used.)

So this is all about Supported Maximum Availability Architectures (MAA) . Please watch the video to learn.

We offer Oracle WebLogic Training, where we discuss topics like Architecture, File System, JDBC, JMS, HA, Clustering, Security, Patching, Upgrade, Backup, and Recovery etc.

Are you planning to Learn WebLogic Server or would like to check some of the common Oracle WebLogic Interview Questions then get them from here (sent over email)

Related Posts

  • [Video] Oracle Weblogic Server: Weblogic Admin Tasks & Tools. Click Here
  • Troubleshooting Oracle Weblogic Server: Startup Issue: OutOfMemoryError PermGen Space. Click Here
  • [Video] Oracle WebLogic Administration: Weblogic Domain Topology. Click Here
  • [Video] Oracle WebLogic Administration: Weblogic Domain Home and Server, Click Here
  • Oracle Weblogic Administration: Introduction to Multitenancy, Click Here 
  • [Video-Blog] Oracle WebLogic Administration: Admin Server and Managed Server, Click Here
  • [Video] Oracle WebLogic Administration: Clusters and Dynamic Cluster, Click Here
  • [Video] Oracle WebLogic Administration: Data Sources (JDBC) & JMS, Click Here
  • [Video] Oracle WebLogic Administration: Machine and Node Manager, Click Here
  • Oracle Weblogic Administration: Weblogic 12c Architecture & New Features, Click Here

If You’ve not looked at Our Oracle Weblogic Administration Workshop & want to check what we cover in the Workshop then check here & Step By Step Hands-On Activity Guide we cover in Training.

Join Community

Join 3500+ Oracle Professionals like you to discuss Oracle Weblogic Server, Ask Questions or Help Others in Private Facebook Group for Oracle Weblogic Server

Join our free live webinar to polish your learnings and basics for weblogic.

Free Webina on Oracle Weblogic by Expert

Did You Find this Blog useful?

Leave a Comment.

The post Oracle WebLogic Administration: Supported Maximum Availability Architectures (MAA) appeared first on Oracle Trainings.

[Video 3 of 5] Oracle Cloud: Create VCN, Subnet, Firewall (Security List), IGW, DRG: Step By Step

$
0
0

This post is Part 3 from my FREE 5 Part Video Series On Networking in Oracle’s Gen 2 Cloud for beginners in which I have covered how to create VCN, Subnet (Public & Private), Internet Gateway (IGW), Security List (Ingress & Egress) & Dynamic Routing Gateway (DRG).

If you haven’t watched part 2 or completed task given in the second video, then I suggest you to first check the Part 2, where I have covered 3 Ways to Connect to Oracle Cloud

Virtual Cloud Network (VCN) & Subnet

  • The first thing you design when you plan to deploy an application on Premise or Cloud is to define the Network.
  • VCN is the bigger Network in which you deploy environment like TEST, DEV & UAT
  • Within each of these environments, you define Database Tier, Application Tier, Web or DMZ Tier.
  • This is where VCN & Subnet comes into the picture, so one way of setting this in the cloud is that create one VCN per environment and then break this bigger VCN in smaller Subnet (each Subnet hosting specific Tiers)

VCN & Subnet : Oracle Cloud Data Center Region

Security List

  • When you go from 1 Subnet to another or 1 Network to another these are protected by Firewall and in Oracle Cloud Terms we call Security List
  • if you want network traffic from application tier to database tier then in Database Subnet allow port 1521

Security List in OCI

Dynamic Routing Gateway (DRG)

  • let’s assume you want to connect VCN in Oracle Cloud with On-Premise Network using IP Sec VPN Tunnel or FastConnect (as discussed in Part 2 of this video series then DRG will be configured at the cloud side of the VPN tunnel
  • If you would like to connect VCN in One Region to VCN in another Region then you use Dynamic Routing Gateway

DRG In OCIInternet Gateway (IGW)

  • You can think of an Internet Gateway as a Virtual Router connecting the edge of the cloud network with the public internet.
  • Traffic that originates in your VCN and is destined for a public IP address outside the VCN goes through the Internet Gateway.

Internet Gateway In OCI

Sneak Peak of Next Video!

In my next video, I’ll be covering What are 2 Types of Load Balancers in Cloud, When to use which one & How to Create them in Cloud Console.

Quiz Question

Can you configure Public Load Balancer in one AD alone?

Leave your answer in the comment and I’ll answer this in the next video

Action Plan For You

  1. Log in to Oracle Cloud Trial Account that you created in Part 1 of this series
  2. Create a Network (VCN) this is the first thing you do before you perform any task using CIDR 10.0.0.0/16
  3. Create 4 Subnets 
    – 10.0.1.0 / 24 (Private) for hosting Database
    – 10.0.2.0 / 24 (Private) for hosting Application
    – 10.0.3.0 / 24 & 10.0.4.0 / 24 (Public) for hosting Public Load Balancer.
  4. Configure 2 Security lists 
    – To allow port 1521 from Application Tier 10.0.2.0 / 24 to Database Tier 10.0.1.0 / 2
    – To Allow Application 8000 from 2 Subnets to Application Tier
  5. Attach First Security list to Database Tier SubnetSecond to Application Tier Subnet.

And if you want to take your career to next level by becoming Oracle Certified Cloud Architect even if you are a beginner then I would like to invite you to Join my FREE Masterclass on How To Become Oracle Certified Cloud Architect [1Z0-932] in 8 Weeks. Click on the image below to register for FREE
Register this FREE Masterclass to Become Oracle Cloud Certified

The post [Video 3 of 5] Oracle Cloud: Create VCN, Subnet, Firewall (Security List), IGW, DRG: Step By Step appeared first on Oracle Trainings.


[Video 4 of 5] What Is Load Balancer In Oracle Cloud (OCI) & How To Create: Step By Step

$
0
0

This post is Part 4 from my FREE 5 Part Video Series On Networking in Oracle’s Gen 2 Cloud for beginners in which I have covered Load Balancer (Public & Private) in Oracle Cloud Infrastructure & steps to create & test Public Load Balancer in OCI.

If you haven’t watched part 3 or completed task given in the third video, then I suggest you to first check the Part 3, where I have covered Oracle Cloud: Create VCN, Subnet, Firewall (Security List), IGW, DRG: Step By Step

 

Overview Of Load Balancer In Oracle Cloud (OCI)

Load Balancer provides automated traffic distribution from one entry point to multiple servers in VCN or Load balancer automatically distributes traffic  to list healthy backend servers based on

  • Health Check Policy
  • Load Balancing Policy

Where Health Check Policy is a test to confirm the availability of backend servers & A load balancing policy tells the load balancer how to distribute incoming traffic to the backend servers.

Load Balancer In Oracle Cloid Infrastructure

Type Of Load Balancer In Oracle Cloud (OCI)

1)Public Load Balancer

  • Traffic Originating from Public Internet
  • Requires 2 subnets, each in a separate AD
  • Subnet1 – Primary LB
  • Subnet2 – Standby LB (in case of an outage at AD)
  • Public IP attached to subnet1
  • LB and IP switch to subnet2 in case of an outage
  • Service treats the two LB subnets as equivalent and you cannot denote one as “primary“
  • Public LB provides Redundant/Highly Available in a Region i.e. In two ADs

Public Load Balancer In OCI

 

2)Private Load Balancer

  • Traffic Originating from with-in OCI or On-Premise connected using VPN or FastConnect
  • The primary and standby load balancers each require a Private IP address from that subnet
  • Private IP assigned as per Subnet to which AD belongs
  • Private LB provides redundancy (Highly Available) within Availability Domain (AD)
  • No HA in case of AD outage

Private Load Balancer In OCI

A glance of Next Video!

In my next video, I’ll be covering  ORACLE EBS (R12)  High Availability  & Disaster Recovery ON GEN 2 CLOUD (OCI), even if you are not an EBS Consultant, you can use this logic to deploy PeopleSoft, JD Edwards or any third party application in Oracle Cloud Infrastructure (Gen2 Cloud).

Quiz Time!!

Q)When deploying a highly available, Internet-facing, 2-tier web application on Oracle Cloud Infrastructure (OCI), which design option would you use?

  1. Deploy all web servers into one Availability Domain and behind a public load balancer, and deploy two single-node OCI database systems in the same Availability Domain with Data Guard enabled.
  2. Deploy all web servers into multiple Availability Domains and behind a public load balancer, and deploy two single-node OCI database systems across two Availability Domains with Data Guard enabled.
  3. Deploy all web servers into multiple Availability Domains and behind a private load balancer, and deploy two single-node OCI database systems across two Availability Domains with Data Guard enabled.
  4. Deploy all web servers into one Availability Domain, and deploy a single-node OCI database system into a different Availability Domain.

Leave your answer in the comment and I’ll be discussing the answer in the last video of   FREE 5 Part Video Series On Networking in Oracle’s Gen 2 Cloud

Action Plan For You

  1. An assumption, you already have VCN, Subnets, Security List as covered in previous Video ( If not watch it at k21academy.com/1z093215 )
  2. Create two machines for Apps Tier Server assume running on port 8000, these will be created as backend or origin servers and will be added as part of backend set
  3. Create a Public Load Balancer
  4. Add backend Server to Backend Set
  5. Create HTTP Listener for Load Balancer
  6. Allow Load Balancer Listener Port via Security List for Internet
  7. Test Connection from the Internet 

Do you want to take your career to next level by becoming Oracle Certified Cloud Architect even if you are a beginner?

Then I would like to invite you to Join my FREE Masterclass on How To Become Oracle Certified Cloud Architect [1Z0-932] in 8 Weeks. Click on the image below to register for FREE


Register this FREE Masterclass to Become Oracle Cloud Certified

The post [Video 4 of 5] What Is Load Balancer In Oracle Cloud (OCI) & How To Create: Step By Step appeared first on Oracle Trainings.

Oracle Cloud (OCI): How To Recover SSH Keys In Compute Instance

$
0
0

This post covers the Steps for Recovering the SSH Keys in Compute Instance Oracle Cloud Infrastructure (OCI). 

To know more about Compute in Oracle Cloud Infrastructure, please check our previous post on  [Video] Oracle Cloud Infrastructure (OCI) | Compute CPU & Memory

Note:  An SSH key pair comprises of a private key and public key. You keep the private key on your computer and provide the public key every time you launch an instance.

Typical Scenarios When you need to recover your SSH Keys

  • If you get a Permission denied (publickey,gssapi-keyex,gssapi-with-mic)” error when trying to connect your instance via putty in windows or terminal in Linux.
  • Imagine you are trying to connect into your Oracle Cloud Infrastructure instance but either you forgot which key you used or, for some unknown reason, your OPC user SSH key got corrupted or deleted.

Process to Follow

Step 1: Stop the compute instance for you are to recover your ssh keys. In the Oracle Cloud Infrastructure Console, go to the details page for the instance and click Stop

Instance Page

Step 2: Detach the boot volume. In the Boot Volume section, click the Actions icon and choose Detach.

Navigate Block Volume

Block Volume Detach

Step 3: Attach the boot volume to another Linux instance by going to the details page of a different VM, clicking Attach Block Volume, and then selecting the boot volume that you just detached in the previous step. Be sure to select Read/Write access.

Block Volume Attach

Step 4: After the boot volume attachment is completed (the BV icon is green), connect through SSH in the running VM and run the iSCSI commands to make that new disk available and visible by the OS.

iSCSI Commands

Your boot-volume should appear as /dev/sdb.

BootVolume

  • Make /dev/sdb3, which is the root (/) partition where you can recover the OPC SSH key file, available to the local operating system using “mount” command. Be sure to use the -o nouuid option; otherwise, you will see the “mount: wrong fs type, bad option, bad superblock on /dev/sdb3” error message.

$ sudo mount -o nouuid /dev/sdb3 /mnt

  • Fix the OPC SSH key by editing the /mnt/home/opc/.ssh/authorized_keys file and adding your SSH key public file.

$ sudo vi /mnt/home/opc/.ssh/authorized_keys

  • After you add or change the SSH public key you need to use, save and exit it.
  • Run umount /mnt.

$ sudo umount /mnt

Step 5: Detach the iSCSI boot volume by running detach iSCSI commands.

Detach

Step 6: Ensure that the /dev/sdb disk is no longer available or visible through the SSH connection and then detach it.

Step 7: Reattach the boot volume to the instance where you wanted to recover the SSH key, wait for it to become operational (green icon) and start it.

Reattach Boot Volume

That’s it. You recovered your OPC user SSH key and you can now able to connect to your compute instance for which you are recovering your ssh keys.

Now, it is your turn to try this Solution & If you face any issues then post your doubts in the comment section!

Related/Further Readings

Next Task For You

if you want to take your career to next level by becoming Oracle Certified Cloud Architect even if you are a beginner then Join FREE Masterclass on How To Become Oracle Certified Cloud Architect [1Z0-932] in 8 Weeks 

Click on the image below to register for FREE

Register this FREE Masterclass to Become Oracle Cloud Certified

The post Oracle Cloud (OCI): How To Recover SSH Keys In Compute Instance appeared first on Oracle Trainings.

[Video 5 of 5] EBS (R12) High Availability & Disaster Recovery On Oracle Cloud (OCI): 3 Topology

$
0
0

This post covers, how to deploy Highly Available Oracle EBS (R12) & Database including Disaster Recovery in Oracle’s Gen 2 Cloud OCI. We also look at how Region, Availability Domain (AD) & Fault Domain (FD) play an important role in deploying HA & DR in Oracle’s Gen 2 Cloud i.e. OCI.

This post is part of my FREE 5 Part Video Series On Networking in Oracle’s Gen 2 Cloud in which I covered why networking is important for DBAs & Apps DBAs, 3 ways to connect to Oracle Cloud, VCN/Subnet/Security List and two type of Load Balancer In Oracle Cloud (OCI). If you have not registered for this FREE 5 part video series then Register Here

Overview EBS (R12) High Availability & Disaster Recovery On Oracle Cloud (OCI)

Oracle E-business suite (R12) can be highly deployed on Oracle Cloud Infrastructure (OCI) in 3 different ways based on your requirement.

  1. Single Availability Domain & Single Region
  2. Multiple Availability Domain but single Region
  3. Multiple Availability Domain and Multiple Region

Note: Here Oracle EBS is just an example here and the same approach is applicable for any 3 Tier application be it Peoplesoft or JDEdward or custom Java or .NET Application with Database.

[Option 1]: Single Availability Domain & Single Region

  • This type of deployment is suitable for Test/Dev Environment or non-critical application where business can afford to wait for some time to recover data in case of any issues with application or underlying infrastructure like  Servers, Storage, Network even or Database. 
  • Another reason why may have to pick this option if because you are in a Region and that region there is only 1 Availability Domain (like for now in Toronto there is only 1 AD as of Feb 2019) and Regulations/ Data Compliance enforces you to be only in this Region with just 1 Availability Domain

HA & DR In OCI

[Option 2]: Multiple Availability Domain but single Region

  • This is one of the most common deployments we see Cloud customers using and provides both high availability & disaster recovery but within a region.

Oracle Cloud Infrastructure Region

[Option 3]: Multiple Availability Domain and Multiple Region

  • This is for mission critical large deployment that provides disaster recovery solution across Region. This is, taking second option two to next level by replicating data across the region

HA & DR In OCI

So next time you have to deploy Highly Available Application then questions you should be asking from client/business is  

  1. Check recovery time objective like how quickly you want to recover in case of failure
  2. How many regions you can set up (consider compliance)
  3. Do you have multiple ADs or single AD
  4. Do you need RAC database or single node database is fine
  5. Is application public facing or internal only (would you need public LB or private is enough)

Here we come to the end of this FREE 5 Part Video Series On Networking in Oracle’s Gen 2 Cloud, If you enjoyed this series then don’t forget to share with your colleagues and subscribe to my blog so that you get weekly useful content related to Oracle Cloud by going to URL (http://k21academy.com/subscribe)

Next Task For You

if you want to take your career to next level by becoming Oracle Certified Cloud Architect even if you are a beginner then Join FREE Masterclass on How To Become Oracle Certified Cloud Architect [1Z0-932] in 8 Weeks 

Click on the image below to register for FREE

Register this FREE Masterclass to Become Oracle Cloud Certified

The post [Video 5 of 5] EBS (R12) High Availability & Disaster Recovery On Oracle Cloud (OCI): 3 Topology appeared first on Oracle Trainings.

Subnets Are Now Regional (OCI: New Feature)

$
0
0

Subnets & Load Balancers in the Oracle cloud now changed to Regional, Check more here

In this post, I will explain what is Subnets, What was Subnet scope earlier, what’s changed now, what Scope means, and How to create a Regional Subnet or Load Balancer.

What is Subnet?

A subnet is a bigger network(VCN) divided into smaller networks.

So if you see in below image We have a VCN (CIDR is 10.0.0.0/16) and in that, we have two smaller Network Subnet i.e (Subnet A 10.0.1.0/24) and (Subnet B 10.0.2.0/24)

Subnet Explained in Diagram

Note: If you are new to Networking, & want to learn more about the Networking Basic Concepts like VCN, Subnet, Security List, IGW, DRG. Then please check here and for Load Balancer check here

OCI Subnet Past & Now

Originally subnets were designed to cover only one Availability Domain (AD) in a region. They were all AD-specific, which means resources like compute will reside in a particular Availability Domain (AD). Now subnets can be either AD specific or Regional. This means any compute or database using this Regional Subnet can be created in any one Availability Domain (AD) of choice

If you are not familiar with Region, AD, or FD then check here

OCI Subnet diagram showing Earlier and Now

How to Create a Regional Subnet

You choose the type when you create the subnet. Both types of subnets can co-exist in the same VCN

Subnet Creation

Next Task for you

  1. If you don’t yet have an Oracle Cloud Account, you can create a FREE trial accountby using our Step by Step guide
  2. Create a Virtual Cloud Network (VCN), check here for more Info
  3. Create a Regional Subnet

Post your Doubts in the comments below. If you like this post, share it with your colleagues.

If you want to take your career to next level by becoming Oracle Certified Cloud Architect even if you are a beginner then I would like to invite you to Join my FREE Masterclass on How To Become Oracle Certified Cloud Architect [1Z0-932] in 8 Weeks. Click on the image below to register for FREE

Register this FREE Masterclass to Become Oracle Cloud Certified

The post Subnets Are Now Regional (OCI: New Feature) appeared first on Oracle Trainings.

[Solved] FRM-92095: Oracle Jnitiator version too low

$
0
0

This post covers one of issue that our trainee faced while accessing forms via Java Applet.

In Oracle E-Business Suite, there are self-service pages that are based on HTML and open as a web page and there are two ways to open forms:

One is an old way of using Java Applets while the other is the new way of using Java Web Start (JWS).

So let’s understand what is Java Applets and Java Web Start (JWS)

Java Applets are launched by the Java Plug-in using a browser that supports plug-ins via the Netscape Plug-in Application Programming Interface (NPAPI) protocol.

Java Web Start (JWS) provides a browser-independent architecture for deploying Java technology-based applications to the client desktop.

Java Web Start applications are launched from browsers using the Java Network Launching Protocol (JNLP).

java plug-in and java web start

The Oracle E-Business Suite migration to Java Web Start is primarily driven by modern web browsers ending support for the NPAPI, which is used by the Java Plug-in. Oracle plans to deprecate the Java Plug-in for web browsers starting with the release of Java SE 9.

Java Web Start applications can be launched independently of a browser since they do not rely on a browser plug-in, it provides a migration path from Java Applets.

In our training, one of trainee faced issue while accessing forms via Java Applets so to resolve this error  “FRM-92095: Oracle JInitiator version too low.” follow the below steps:

If you are looking for steps on how to configure Java for forms check here

Issue

While accessing Oracle EBS (R12) forms

FRM_92095

Cause

The cause is the JRE version is not compatible. Oracle made an internal changed in the Java plugin after Java 7 that causes Oracle Forms (Banner) to not recognize that Java is correctly installed.

Solution

1. Go to start and search for ‘Java’ 

2. Click on Java tab and then View

java_setting

3. Add the following text in the ‘Runtime Parameters’ box and then click OK

-Djava.vendor=”Sun Microsystems Inc.”

runtime parameters

4. Click Apply

Java control Panel

5. Close browser and retest, forms should be accessible now

After adding Runtime Parameters Djava.vendor=”Sun Microsystems Inc.” in Java Runtime Environment Settings, we could access forms with no issues.

Related/Further Readings

This post is from our Oracle Apps DBA (R12.2) Training, in which we cover  Architecture & Changes in Oracle E-Business Suite R12.2, Staging & Installation, File System & Important Files in R12.2, Start/Stop, Patching, AD Administration, Cloning, Concurrent Managers, AutoConfig, Password Management, and Troubleshooting and much more

Want to Know More about R12.2?

Click on the image below, and get your FREE Guide 6 Docs Every Oracle Apps DBA Must Read for R12.2

The post [Solved] FRM-92095: Oracle Jnitiator version too low appeared first on Oracle Trainings.

Oracle WebLogic Server Continuous Availability

$
0
0

This blog describes the Oracle WebLogic Server Continuous Availability.

Oracle has made enhancements to the Continuous Availability Offering in WebLogic 12.2.1.1 in the areas of Zero Downtime Patching, Cross Site Transaction Recovery, Coherence Federated Caching and Coherence Persistence.

Zero Downtime Patching Enhancements:

Zero Downtime Patching Enhancement

Enhancements in Zero Downtime Patching support updating applications running in a multi-tenant partition without affecting other
partitions that run in the same cluster. Coherence applications can now be updated while maintaining high availability of the Coherence data during the rollout process. We have also removed the dependency on Node Manager to upgrade the WebLogic Administration Server.

  • Multi-tenancy support
  • Application updates can use partition shutdown instead of server shutdowns.
  • Can update an application in a partition on a server without affecting other partitions.
  • Can update an application referenced by a Resource Group Template.
  • Coherence support – User can supply minimum safety mode for rollout to Coherence cluster.
  • Removed Administration Server dependency on Node Manager – The Administration Server no longer needs to be started by Node Manager

Cross-Site Transaction Recovery:

Cross Site Transaction RecoveryCross Site Transaction Recovery 2

  • We introduced a “Site Leasing” mechanism to do auto recovery when there is a site failure or mid-tier failure.
  • With site leasing, we provide a more robust mechanism to fail over and fail back transaction recovery without imposing dependencies on the TLog which affect the health of the Servers hosting the Transaction Manager. Every server in a site will update their lease.
  • When the lease expires for all servers running in a cluster in Site 1, servers running in a cluster in a remote site assume ownership of the TLogs, and recover the transactions while still continuing their transaction work.

Coherence Federated Caching and Coherence Persistence Administration Enhancements:

Coherence Fedarated

We have enhanced the WebLogic Server Administration Console to make it easier to configure Coherence Federated Caching and Coherence Persistence.

  • Coherence Federated Caching – Added the ability to set up Federation with basic active/active and active/passive configurations using the Administration Console and eliminated the need to use configuration files.
  • Coherence Persistence – Added a persistence tab in the Administration Console that provides the ability to configure Persistence related settings that apply to all services.

So this is all about Oracle WebLogic Server Continuous AvailabilityPlease go through the blog to know.

We offer Oracle WebLogic Training, where we discuss topics like Architecture, File System, JDBC, JMS, HA, Clustering, Security, Patching, Upgrade, Backup, and Recovery etc.

Are you planning to Learn WebLogic Server or would like to check some of the common Oracle WebLogic Interview Questions then get them from here (sent over email)

Related Posts

  • [Video] Oracle Weblogic Server: Weblogic Admin Tasks & Tools. Click Here
  • Troubleshooting Oracle Weblogic Server: Startup Issue: OutOfMemoryError PermGen Space. Click Here
  • [Video] Oracle WebLogic Administration: Weblogic Domain Topology. Click Here
  • [Video] Oracle WebLogic Administration: Weblogic Domain Home and Server, Click Here
  • Oracle Weblogic Administration: Introduction to Multitenancy, Click Here 
  • [Video-Blog] Oracle WebLogic Administration: Admin Server and Managed Server, Click Here
  • [Video] Oracle WebLogic Administration: Clusters and Dynamic Cluster, Click Here
  • [Video] Oracle WebLogic Administration: Data Sources (JDBC) & JMS, Click Here
  • [Video] Oracle WebLogic Administration: Machine and Node Manager, Click Here
  • Oracle Weblogic Administration: Weblogic 12c Architecture & New Features, Click Here

If You’ve not looked at Our Oracle Weblogic Administration Workshop & want to check what we cover in the Workshop then check here & Step By Step Hands-On Activity Guide we cover in Training.

Join Community

Join 3500+ Oracle Professionals like you to discuss Oracle Weblogic Server, Ask Questions or Help Others in Private Facebook Group for Oracle Weblogic Server

Join our free live webinar to polish your learnings and basics for weblogic.

Free Webinar on Oracle Weblogic by Expert

Did You Find this Blog useful?

Leave a Comment.

The post Oracle WebLogic Server Continuous Availability appeared first on Oracle Trainings.

How to Access My Services Dashboard: Oracle Cloud Updated Feature

$
0
0

Oracle Cloud has recently updated the Navigation for the My Services Dashboard.

As lots of our Cloud trainees are facing the issue while accessing My Services Dashboard. So, In this post, we have covered the steps to access My Services Dashboard.

Note: If you are new to Cloud & haven’t registered for the Cloud account yet, please check our post on How to Register For FREE Oracle Cloud Trial Account

Steps To Access My Service Dashboard

1) Once you have registered for Free Cloud Trial account, go to cloud.oracle.com/home & click on Sign In.

2) In the Next Window, enter your Cloud Account Name, then click on Next.

Oracle Cloud

3) Enter your Username & Password, & click on Sign In.

Cloud Account Sign- in

4) Earlier, When you Sign In you will directly get the Dashboard page. But now you will get land in OCI Console.

Oracle cloud dialog box

5) Click on the Hamburger menu on the top left side & in the bottom you will see Administration tab.

6) Hover your Mouse on it & you will see My Services Dashboard tab, click on it

Service Dashboard

Administration Services Dashboard

This will take you to the My Service Dashboard.

Customized Dashboard

Post your doubts in the Comment box & and share this post with your colleagues.

Stay Tuned for more further informative blogs.

Related/Further Readings

Next Task For You

If you want to take your career to next level by becoming Oracle Certified Cloud Architect even if you are a beginner then I would like to invite you to Join my FREE Masterclass on How To Become Oracle Certified Cloud Architect [1Z0-932] in 8 Weeks. Click on the image below to register for FREE

Register this FREE Masterclass to Become Oracle Cloud Certified

The post How to Access My Services Dashboard: Oracle Cloud Updated Feature appeared first on Oracle Trainings.


[Solved] APP-FND-01564: ORACLE error 8102 in request

$
0
0

This post covers one issue that our trainee faced while running Purge Concurrent Request and/or Manager Data.

This Data program ‘Purge Concurrent Request and/or Manager Data‘ to purge:

  • Request log files,
  • Concurrent manager log files,
  • Report output files from product directories maintained by the operating system and Application Object Library tables

If you are looking for Concurrent Managers : Overview & Concepts Oracle EBS R12 for Apps DBAs then check here

To resolve this error ‘APP-FND-01564: ORACLE error 8102 in request’ while running Purge Concurrent Request and/or Manager Data.” follow the steps mentioned below:

Issue 

While running Purge Concurrent Request and/or Manager Data as

1. Login as SYSADMIN -> Responsibility System Administrator

2. Run Concurrent Program “Purge Concurrent Request and/or Manager Data”

Purge Concurrent Manager

Error in logs: 

$APPLCSF/$APPLLOG

+—————————————————————————+
Application Object Library: Version : 12.0.0

Copyright (c) 1979, 1999, Oracle Corporation. All rights reserved.

FNDCPPUR module: Purge Concurrent Request and/or Manager Data
+—————————————————————————+

Current system time is 27-DEC-2018 10:38:00

+—————————————————————————+

APP-FND-01564: ORACLE error 8102 in request

Cause: request failed due to ORA-08102: index key not found, obj# 34563, file 25, block 24555 (2).

The SQL statement being executed at the time of the error was: and was executed from the file.
+—————————————————————————+
Start of log messages from FND_FILE
+—————————————————————————+
+—————————————————————————+
End of log messages from FND_FILE
+—————————————————————————+

+—————————————————————————+
Executing request completion options…

Finished executing request completion options.

+—————————————————————————+
Concurrent request completed
Current system time is 27-DEC-2018 10:40:47

Cause

The issue is caused by a mismatch between the key(s) stored in the index and the values stored in the table, because of corruption.

Solution

Please run the following steps

SQL> select owner,object_name, object_type from dba_objects where object_id=34563;

OWNER OBJECT_NAME OBJECT_TYPE
—————————— ———————————-
APPLSYS FND_CONCURRENT_REQUESTS_N1 INDEX

SQL> Analyze Index APPLSYS.FND_CONCURRENT_REQUESTS_N1 validate structure online;

Index analyzed.

SQL> select dbms_metadata.get_ddl(‘INDEX’,’FND_CONCURRENT_REQUESTS_N1′,’APPLSYS’) from dual;

DBMS_METADATA.GET_DDL(‘INDEX’,’FND_CONCURRENT_REQUESTS_N1′,’APPLSYS’)
——————————————————————————–

CREATE INDEX “APPLSYS”.”FND_CONCURRENT_REQUESTS_N1″ ON “APPLSYS”.”FND_CONCURR

SQL> select TABLE_NAME,INDEX_NAME,COLUMN_NAME,COLUMN_POSITION from dba_ind_columns where TABLE_NAME in (‘FND_CONCURRENT_REQUESTS’) order by 1,2,COLUMN_POSITION;

ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N1 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N2 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N3 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N4 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N5 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N6 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N7 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N8 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N9 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N10 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_N11 rebuild online;
ALTER INDEX APPLSYS.FND_CONCURRENT_REQUESTS_U1 rebuild online;

Related/Further Readings

This post is from our Oracle Apps DBA (R12.2) Training, in which we cover  Architecture & Changes in Oracle E-Business Suite R12.2, Staging & Installation, File System & Important Files in R12.2, Start/Stop, Patching, AD Administration, Cloning, Concurrent Managers, AutoConfig, Password Management, and Troubleshooting and much more

Next Tasks For You

Did you get a chance to download 6 Concurrent Manager CM Must Read Docs For Oracle Apps DBAs EBS R12? If not, then get it now by clicking on the link below.

Get Docs for Oracle Apps DBA

The post [Solved] APP-FND-01564: ORACLE error 8102 in request appeared first on Oracle Trainings.

DBA To Cloud DBA Training (OCI): Step By Step Activity Guides/Hands-On Lab Exercise

$
0
0

This post covers Step by Step Hands-On Guides from our  DBA to Cloud DBA Training that you must perform in order to become expert from DBA to Cloud DBA.  You can use these exact steps to bring you and your team of DBAs up-to-speed quickly for supporting Customers Moving to Cloud.

Here’s the Quick Sneak Peek of What You should do and know as Cloud Apps DBA:

1. Lab Activity Guide I: Create Cloud Account, Generate SSH Keys & DB System Console Console walkthrough

The first thing you must do is to get a Trial Account for Oracle Cloud (You get 300 USD FREE Credit from Oracle to practice, that must be used within 30 Days).

You should know how to Register for the Oracle Cloud, Get FREE 300 USD Credit to Practice, generate SSH Keys to connect to Linux Servers on Cloud and Shop Compute (IaaS) for Application Tier & DBCS (PaaS) for Database Tier.

Register Cloud Free Trial

Once you register for Oracle Cloud Trial, you should get an Email Like below from Oracle:

Confirmation mail

Note: Get this first step by step activity guide absolutely FREE from here

2. Lab Activity Guide II: Create DB In OCI

With the Second Activity Guide, You will be creating your first Oracle Database  on Oracle Cloud Infrastructure using default Virtual Cloud Network, Connecting to Database Server Using Putty & Stopping Cloud Database to Avoid Being Charged (When starting, there are few tricks & tweaks that might not look that big, but these are things that you would want to know when learning Oracle Cloud ).

Create DB In OCI 3. Lab Activity Guide III: Configure VCN, Security List, IAM Policies & Connecting To DB System

In this activity, we will be configuring Network which is also known as Virtual Cloud Network, the very first thing you configure before deploying your database on Oracle Cloud Infrastructure. Once VCN is configured we will be defining Security list List through which we will be specifying what type of traffics flow within the VCN  and much more.

To know more about VCN, Security List, IAM Policies check here

Configure VCN, Security List, IAM Policies & Connecting To DB System4. Lab Activity Guide IV: Managing DB System (Start, Stop Scale Up/DOwn) & DBCLI

Then we learn how to Manage Database on Oracle Cloud Infrastructure (OCI) which includes  Start / Stop Database, Scale Up & Scale Down database and will also see how will you manage the database from  DBCLI a command line utility.

Managing DB System (Start, Stop Scale Up/DOwn) & DBCLI5. Lab Activity Guide V: Patching DB System Using Console & CLI

In this activity guide, you will be performing one of the common tasks for DBA’s which is patching from Oracle Cloud Infrastructure Console and from command line interface both.

Patching DB System Using Console & CLI6. Lab Activity Guide VI: Backup & Restore DB System

We then move to how you can Backup & Restore Database that is On Cloud to Cloud Object Storage, Creating an On-Demand Backup of Database, and Restoring from the Backup.

Backup & Restore DB System

 

7. Lab Activity Guide VII: Configuring EM Express

By Default for Security reasons ports are disabled when you create your database in Oracle Cloud Infrastructure, in this activity guide we will be opening port for EM express, configuring and accessing EM Express in DB System in OCI.

Configuring EM Express8. Lab Activity Guide VIII: Migrate (Lift & Shift) On-Prim Database to CLoud (OCI)

We now move to, How we can Lift Shift On-Premise To Cloud Migration (OCI)Using DataPump Export/Import, A variety of methods exist for migrating data from on-premises databases to databases in the  DB System in OCI.
These include Data Pump export and import, exporting to external tables, remote cloning, and unplugging and plugging databases. Some of these methods support migrating on-premises 11g to cloud 11g, some support migrating on-premises 12c to cloud 12c, and some methods support migrating and upgrading on-premises 11gR2 to cloud12c.

Configuring EM Express

You can get above Step by Step hands-on guide to learn Oracle Identity Cloud Service (IDCS) when you register for DBA To Cloud DBA Training.

What Benefits You’ll Get:

  1. Live Instructor-led Online Interactive Sessions
  2. FREE unlimited retake for next 1 Years
  3. FREE On-Job Support for next 1 Years
  4. Latest Updated Training Material (Presentation + Videos) with Hands-on Lab Exercises mentioned
  5. Recording of Live Interactive Session for Lifetime Access
  6. 100% Money Back Guarantee (If you attend sessions, practice and don’t get results, We’ll do full REFUND, check our Refund Policy)

 

 

 

 

The post DBA To Cloud DBA Training (OCI): Step By Step Activity Guides/Hands-On Lab Exercise appeared first on Oracle Trainings.

Configuring Security in Weblogic Domain

$
0
0

This blog describes the Configuring Security in Weblogic Domain.

After you have created your domain and have started it, perform the following tasks to optimize the domain’s security:

  1. Configure the Password Validation provider to manage and enforce password composition rules. The Password Validation provider is configured out-of-the-box to work with several WebLogic authentication providers.
  2. As you create or add users to the security realm, check that the User Lockout options on user accounts are set for maximum protection. Note that the configuration of User Lockout is defined on a per-realm basis. Therefore, if the default User Lockout settings are not suitable for your needs, you might need to customize these settings whenever you create a new security realm.
  3. If you have configured Node Manager to start, shut down and restart the Administration Server and Managed Server instances distributed across multiple machines, make sure that Node Manager security is properly configured.
  4. Enable auditing, which provides an automated way of collecting and storing information about events and other activity occurring in the system. Auditing is available through either of the following means:
  • Configuration auditing — When this is enabled, the Administration Server emits log messages and generates audit events when a user changes the configuration of any resource within a domain or invokes management operations on any resource within a domain.
  • WebLogic Auditing provider — Optional security provider that collects, stores, and distributes information about operating requests and the outcome of those requests for non-repudiation. When configuration auditing is enabled, the WebLogic Auditing provider also logs configuration auditing events.

Note that auditing may impose a performance overhead that should be taken into consideration. However, by adjusting how auditing is configured, this additional overhead can be minimized. When enabling auditing, make sure that sufficient disk space is available for the audit log to make sure that the JVM platform MBean server cannot be accessed remotely.

5. Create and configure the key stores used for holding identity and trust; the key stores containing identity certificates and the key store containing trusted Certificate Authority (CA) certificates.

Configure certificate validation and revocation checking to ensure that:

Each certificate in a certificate chain was issued by a certificate authority revocation status of each certificate WebLogic Server validates is current.

6. Configure a hostname verifier. When making an SSL connection, the hostname verifier ensures that the hostname in the URL to which the client connects matches the hostname in the digital certificate that the server sends back.

7. Configure SSL for the administration port, network channels, database connections, LDAP server connections, and other resources handling communication that must be secured. In particular, make sure that connections to remote server instances in the domain are secured with SSL. The specific components for which either one- or two-way SSL needs to be configured depends on the overall topology of the production environment. For details, see the following topics:

SSL Configuration Topics

 

Details to keep in mind and reference below.
An overview of using SSL to secure communications in a basic WebLogic domain
Where to use one-way and two-way SSL in a basic WebLogic domain
Steps to configure SSL in a basic WebLogic domain
Configuring an administration port for secure communication with the domain Administration Server
Securing database connections
An overview of using SSL in Oracle Fusion Middleware to secure components in web, middle, and data tiers
Best practices for configuring SSL in WebLogic Server

Notes:

  • By default, WebLogic Server is configured for one-way SSL authentication; however, the SSL port is disabled. Oracle strongly recommends enabling the SSL port in all server instances in a production domain.
  • The demonstration digital certificates, private keys, and trusted CA certificates provided in WebLogic Server should never be used in a production environment.
  1. Restrict the size and the time limit of requests on external channels to prevent Denial of Service attacks
  2. If you use multiple Authentication providers, be sure to set the JAAS control flag correctly.
  3. Ensure that you have correctly assigned users and groups to the default WebLogic Server security roles.

Getting Private Keys, Digital Certificates, and Trusted Certificate Authority Certificates:

You have multiple choices for getting private keys, digital certificates, and trusted CA certificates for your WebLogic Server environment. When choosing, note the following considerations:

  • For production environments, Oracle strongly recommends obtaining private keys and digital certificates only from a reputable certificate authority such as Entrust or Symantec Corporation.
  • For development environments only, you can use the digital certificates, private keys, and trusted CA certificates provided by WebLogic Server. You can also use the key tool or the CertGen utility to generate self-signed certificates.

Storing Private Keys, Digital Certificates, and Trusted Certificate Authority Certificates:

Once you have got private keys, digital certificates, and trusted CA certificates, you need to store them so that WebLogic Server can use them to find and verify identity. Private keys, their associated digital certificates, and trusted CA certificates are stored in key stores. Then you need to configure those key stores with WebLogic Server.

Steps to Creating

A key store creating
Configuring a key store to be used with WebLogic Server
A step-by-step example of using the key tool utility to create a key store and store keys and certificates in it
Displaying the certificates in a key store
Updating certificates due to expire

Protecting User Accounts:

WebLogic Server defines a set of configuration options to protect user accounts from intruders. In the default security configuration, these options are set for maximum protection. You can use the WebLogic Server Administration Console to change these options using the Configuration > User Lockout page, which is available for each security realm.

As a system administrator, you have the option of turning off all the configuration options, increasing the number of login attempts before a user account is locked, increasing the time in which invalid login attempts are made before locking the user account and changing the time a user account is locked. Remember that changing the configuration options lessens security and leaves user accounts vulnerable to security attacks.

Notes:

The User Lockout options apply to the default security realm and all its security providers. User Lockout works in all security realms, is layered on top of all configured providers, including custom ones, and is enabled by default.

If you are using an Authentication provider that has its own mechanism for protecting user accounts, consider if disabling User Lockout on the security realm is appropriate because other Authentication providers might be configured in the security realm.

If a user account becomes locked and you delete the user account and add another user account with the same name and password, the User Lockout configuration options will not be reset.

So this is all about Configuring Security in Weblogic DomainPlease go through the blog to know.

We offer Oracle WebLogic Training, where we discuss topics like Architecture, File System, JDBC, JMS, HA, Clustering, Security, Patching, Upgrade, Backup, and Recovery etc.

Are you planning to Learn WebLogic Server or would like to check some of the common Oracle WebLogic Interview Questions then get them from here (sent over email)

Related Posts

  • [Video] Oracle Weblogic Server: Weblogic Admin Tasks & Tools. Click Here
  • Troubleshooting Oracle Weblogic Server: Startup Issue: OutOfMemoryError PermGen Space. Click Here
  • [Video] Oracle WebLogic Administration: Weblogic Domain Topology. Click Here
  • [Video] Oracle WebLogic Administration: Weblogic Domain Home and Server, Click Here
  • Oracle Weblogic Administration: Introduction to Multitenancy, Click Here 
  • [Video-Blog] Oracle WebLogic Administration: Admin Server and Managed Server, Click Here
  • [Video] Oracle WebLogic Administration: Clusters and Dynamic Cluster, Click Here
  • [Video] Oracle WebLogic Administration: Data Sources (JDBC) & JMS, Click Here
  • [Video] Oracle WebLogic Administration: Machine and Node Manager, Click Here
  • Oracle Weblogic Administration: Weblogic 12c Architecture & New Features, Click Here
  • [Video] Oracle WebLogic Administration: Security Realm, Click Here
  • Oracle WebLogic Server Continuous Availability, Click here

If You’ve not looked at Our Oracle Weblogic Administration Workshop & want to check what we cover in the Workshop then check here & Step By Step Hands-On Activity Guide we cover in Training.

Join Community

Join 3500+ Oracle Professionals like you to discuss Oracle Weblogic Server, Ask Questions or Help Others in Private Facebook Group for Oracle Weblogic Server

Join our free live webinar to polish your learnings and basics for WebLogic.

Free Webinar on Oracle Weblogic by Expert

Did You Find this Blog useful?

Leave a Comment.

The post Configuring Security in Weblogic Domain appeared first on Oracle Trainings.

The Heartbeat Table of Oracle GoldenGate (12.2)

$
0
0

This post covers the Heartbeat table of Oracle Goldengate (12.2).

Monitoring lag in GoldenGate has always been an important part of monitoring GoldenGate.  Lags are reported in several ways.  When using the ggsci LAG command only the latest lag is reported with a 1-second resolution providing the last reported lag.  This isn’t trustworthy and nothing significant could be derived out of it!.

In the past, GoldenGate implementer has created heartbeat tables manually.

In Oracle GoldenGate 12.2 a built-in heartbeat table feature has been added.  This heartbeat table allows for more accurate heartbeats and heartbeat history.  It works by creating an artificial transaction every minute that contains timing information that is used for heartbeats.

ogg heartbeat tableThe heartbeat tables are accessed via views that provide accurate lag data and lag history.

Note: If you would like to set up the older version of the heartbeat, use Oracle Support (MOS Note: 1299679.1) to reference the items needed.

Issue a “help” command from the GGSCI prompt, to notice there are now options to add a heartbeat table (similar to setting up the checkpoint table).

The image below shows the commands that are now available in GGSCI.

GGSCI> help

To create the heartbeat table, you need to run ADD HEARTBEATTABLE from GGSCI after logging into the database as the GoldenGate user.

After logging into the database and issuing the ADD HEARTBEATTABLE command, GoldenGate will create all the items needed for the heartbeat process to work.

ggsci help command summary

ADD HEARTBEATTABE on target

GGSCI > add heartbeattable

Above command creates heartbeat table with the default name GG_HEARTBEAT under GOLDENGATE User. You can change the name of heartbeat table by defining under GLOBALS File of Goldengate.

You should see below output

2017-11-14 12:18:51  INFO    OGG-14001  Successfully created heartbeat seed table [“GG_HEARTBEAT_SEED”].

2017-11-14 12:18:51  INFO    OGG-14032  Successfully added supplemental logging for heartbeat seed table [“GG_HEARTBEAT_SEED”].

2017-11-14 12:18:51  INFO    OGG-14000  Successfully created heartbeat table [“GG_HEARTBEAT”].

2017-11-14 12:18:51  INFO    OGG-14033  Successfully added supplemental logging for heartbeat table [“GG_HEARTBEAT”].

2017-11-14 12:18:51  INFO    OGG-14016  Successfully created heartbeat history table [“GG_HEARTBEAT_HISTORY”].

2017-11-14 12:18:51  INFO    OGG-14023  Successfully created heartbeat lag view [“GG_LAG”].

2017-11-14 12:18:51  INFO    OGG-14024  Successfully created heartbeat lag history view [“GG_LAG_HISTORY”].

2017-11-14 12:18:51  INFO    OGG-14003  Successfully populated heartbeat seed table with [PDB2].

2017-11-14 12:18:51  INFO    OGG-14004  Successfully created procedure [“GG_UPDATE_HB_TAB”] to update the heartbeat tables.

2017-11-14 12:18:51  INFO    OGG-14017  Successfully created procedure [“GG_PURGE_HB_TAB”] to purge the heartbeat history table.

2017-11-14 12:18:51  INFO    OGG-14005  Successfully created scheduler job [“GG_UPDATE_HEARTBEATS”] to update the heartbeat tables.

2017-11-14 12:18:51  INFO    OGG-14018  Successfully created scheduler job [“GG_PURGE_HEARTBEATS”] to purge the heartbeat history table.

You will notice that the ADD HEARTBEAT command creates the following database objects under Goldengate user ggadmin:

Tables:
<heartbeat_table>_SEED (default GG_HEARTBEAT_SEED)
<heartbeat_table> (default GG_HEARTBEAT)
<heartbeat_table>_HISTORY (default GG_HEARTBEAT_HISTORY)

Views:
GG_LAG
GG_LAG_HISTORY

Stored Procedures:
GG_UPDATE_HB_TAB
GG_PURGE_HB_TAB

Scheduler Jobs:
GG_UPDATE_HEARTBEATS
GG_PURGE_HEARTBEATS

ADD HEARTBEATTABLE on Source

GGSCI > add heartbeattable

2017-11-14 01:07:51  INFO    OGG-14001  Successfully created heartbeat seed table [“GG_HEARTBEAT_SEED”].

2017-11-14 01:07:52  INFO    OGG-14032  Successfully added supplemental logging for heartbeat seed table [“GG_HEARTBEAT_SEED”].

2017-11-14 01:07:52  INFO    OGG-14000  Successfully created heartbeat table [“GG_HEARTBEAT”].

2017-11-14 01:07:52  INFO    OGG-14033  Successfully added supplemental logging for heartbeat table [“GG_HEARTBEAT”].

2017-11-14 01:07:52  INFO    OGG-14016  Successfully created heartbeat history table [“GG_HEARTBEAT_HISTORY”].

2017-11-14 01:07:52  INFO    OGG-14023  Successfully created heartbeat lag view [“GG_LAG”].

2017-11-14 01:07:52  INFO    OGG-14024  Successfully created heartbeat lag history view [“GG_LAG_HISTORY”].

2017-11-14 01:07:52  INFO    OGG-14003  Successfully populated heartbeat seed table with [PDB1].

2017-11-14 01:07:52  INFO    OGG-14004  Successfully created procedure [“GG_UPDATE_HB_TAB”] to update the heartbeat tables.

2017-11-14 01:07:52  INFO    OGG-14017  Successfully created procedure [“GG_PURGE_HB_TAB”] to purge the heartbeat history table.

2017-11-14 01:07:52  INFO    OGG-14005  Successfully created scheduler job [“GG_UPDATE_HEARTBEATS”] to update the heartbeat tables.

2017-11-14 01:07:52  INFO    OGG-14018  Successfully created scheduler job [“GG_PURGE_HEARTBEATS”] to purge the heartbeat history table.

Once the heartbeat table was created it should have been an easy matter to go to the target system and query the ggadmin.gg_heartbeat and ggadmin.gg_heartbeat_history tables to see the automated heartbeats.

Managing Heartbeat Data

As seen above the heartbeat table is created via the ADD HEARTBEATTABLE command within GGSCI.  By default a heartbeat is generated every minute, kept for 30 days then purged.

The frequency of the heartbeat, the history retention and how often the purge process runs is configurable.  This is done via the ALTER HEARTBEATTABLE command.

Viewing Heartbeat Data

Viewing the heartbeat table is done via the two heartbeat views; GG_LAG and GG_LAG_history.  These views provide information on lags for each set of ext -> pump -> replicat that is configured.

This information, as well as the history, is valuable for monitoring the performance of the GoldenGate configuration.

GG_LAG View

col local_database format a10

col current_local_ts format a30

col remote_database format a10

col incoming_path format a30

col incoming_lag format 999,999.999999

SQL>select local_database, current_local_ts, remote_database, incoming_path, incoming_lag from gg_lag;

LOCAL_DATA CURRENT_LOCAL_TS               REMOTE_DATA INCOMING_PATH                                             INCOMING_LAG

———- —————————— ———- —————————— ————————————————————————————–

PDB1                   14-NOV-17 01.20.30.778127 PM   PDB2                   EXT14OCT ==> DP14OCT ==> REP14OCT        8.372888

 

GG_LAG_HISTORY View

set pagesize 100

col local_database format a10

col heartbeat_received_ts format a30

col remote_database format a10

col incoming_path format a32

col incoming_lag format 999,999.999999

SQL> select local_database, heartbeat_received_ts, remote_database, incoming_path, incoming_lag from gg_lag_history;

PDB1      14-NOV-17 01.30.40.678817 PM   PDB2      EXT14OCT ==> DP14OCT ==> REP14OCT          5.826291

PDB1      14-NOV-17 01.31.41.702019 PM   PDB2      EXT14OCT ==> DP14OCT ==> REP14OCT          6.791604

PDB1      14-NOV-17 01.32.41.724873 PM   PDB2      EXT14OCT ==> DP14OCT ==> REP14OCT          2.700153

PDB1      14-NOV-17 01.33.41.747616 PM   PDB2      EXT14OCT ==> DP14OCT ==> REP14OCT          8.729306

The output of the lag history can monitor lags over long periods of time and be used for alerting and monitoring.  The lag history can be imported into a spreadsheet and graphed.

Unlike the old way of creating a heartbeat where GoldenGate used triggers; it is now using stored procedures to populate the tables. Then just like the old way, a scheduler job is used to execute the stored procedures to update or purge the tables. The main difference compared to the old heartbeat way is that there are views used to calculate the lag between processes.

Related/Further Reading:

This post is from our Oracle GoldenGate 12c Administration Training, in which we cover  Architecture, Installation, Configuring & Preparing the Environment, DML Replication – Online Change Synchronization, Initial Load, Zero Downtime Migration & Upgrading using GoldenGate, Oracle GoldenGate Security, Performance of Oracle GoldenGate and Troubleshooting and much more.

Did You Register For FREE GoldenGate Masterclass?

NO! So your next task is to get yourself register for our FREE Masterclass on Learn Oracle GoldenGate 12c for Replication & Migration to start your Goldengate journey. Click on the image below to register for FREE.

Have a question related to Oracle GoldenGate? If yes, Post them in comments below.

The post The Heartbeat Table of Oracle GoldenGate (12.2) appeared first on Oracle Trainings.

How To Create Database on Oracle’s Gen2 Cloud (OCI)

$
0
0

This post covers How To Create Database & Connect to host on Oracle’s Gen2 Cloud (OCI).

Database Types

In Oracle Cloud Infrastructure Database is  divided into two types:

1.  Autonomous Database: Oracle Cloud Infrastructure‘s Autonomous Database is fully managed by Oracle such as patching and another administrating task.  Autonomous Database is further divided into types:

  • ADW: ADW stands for Autonomous Data Warehouse and used for decision support or data warehouse workload.
  • ATP: ATP stands for Autonomous Transaction Processing and used for a transactional workload.

To know more about Autonomous Database check here

2. User-Managed Database: User-Managed database is fully managed by users such as patching, cloning, backup & restore. It is further divided into three types.

  • Virtual Machine DB Systems: Database is running on Virtual Machine&It supports both 1 -node, and 2-node RAC DB systems on Virtual Machine.
  • Bare Metal DB System: Database is running on Bare Metal &It only supports only  1-node DB systems (RAC is not supported)
  • Exadata DB System: Exadata DB systems runs on Exadata on Cloud and consist of a quarter rack, half rack, or full rack of compute nodes and storage servers, tied together by a high-speed, low-latency InfiniBand network and intelligent Exadata software and it is always a 2-node RAC only.

To know more about various Database Offerings check here

Database_In_OCIDatabase Deployment

We can deploy User-managed Database In Oracle Gen2 Cloud (OCI) either on Virtual machine (VM), Bare Metal (BM) or on Exadata CS, In this post, I have covered the steps for VM-DB but concepts remain more or less same for BM & Exadata CS too. 

So Let’s look at Deployment on Cloud so two main Deployment Model on Public Subnet. In order to understand this, there is VCN (this is network) & Subnet which is VCN divided into smaller parts.

  • Database Deployed  On Private Subnet

Database Host on a private subnet listen on a Private IP, We recommend Deploying database on a private subnet & you will be able to access the database within the Virtual Cloud Network. You can also access it from the on-premise network using DRG (Dynamic Routing Gateway). 

 

Database_In_Private_Subnet

  • Database Deployed On Public Subnet

Database running on Public Subnet will get both Private IP & Public IP, you will be able to access it via Public IP & Internet Gateway is required for connectivity.

Database_In_Public_Subnet

We only recommend creating a database on the public subnet only when you are using this database for testing purpose or if you want to expose your database to the internet.

To know more about VCN, Subnet, Firewall (Security List), IGW, DRG & how to create it, check here

How To Connect

In order to connect to Database Host deployed in Oracle Gen2 Cloud (OCI), you need to open port 22, which is SSH port and you will be able to connect to your database Instance and port 1521 which is database port, so that your database will be able to talk to application or other services over internet.

Note: When you create VCN using default options various resources is by default created by Oracle (Security List, IGW, Route Table).

To know how to create a security list and open port in Oracle Gen2 Cloud check here

Task  For You

  1. If you don’t have an Oracle Cloud account yet, register using my Step by Step FREE Guide Get my FREE Guide at https://k21academy.com/cloud01
  2. Create a VCN & Public Subnet, More on VCN & Subnet: https://k21academy.com/1z093215
  3. Create Database in Public Subnet
  4. Connect to Database Server using Putty

Related/Further Readings

Next Task

Now if you want to go further deep and become Oracle Certified Cloud DBA, then next, Register for FREE Masterclass Click on the image below to register for FREE

Free masterclass on oracle cloud by industry expert

The post How To Create Database on Oracle’s Gen2 Cloud (OCI) appeared first on Oracle Trainings.

Viewing all 1895 articles
Browse latest View live