Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in the Oracle Application Server Release Notes?

• Chapter 2, "Installation and Upgrade Issues"
• Chapter 5, "Oracle Access Manager"
• Chapter 6, "Oracle Application Server Single Sign-On"
• Chapter 7, "Oracle Identity Federation"
• Chapter 9, "Oracle Internet Directory"

1 Introduction

• 1.1 Latest Release Information
• 1.2 Purpose of this Document
• 1.3 Operating System Requirements
• 1.4 Multiple Versions of Identity Management in this Release
• 1.5 Certification Information
• 1.6 Licensing Information

2 Installation and Upgrade Issues

• 2.1 Installation Issues
  • 2.1.1 Unique Global Database Name Required During Installation
  • 2.1.2 Do Not Use Turkish Locale During Installation
  • 2.1.3 Oracle Application Server Repository Creation Assistant Fails During Loading When the Database Uses Certain Chinese Character Sets
  • 2.1.4 OracleAS Cold Failover Cluster: Additional Configuration Steps for Oracle Delegated Administration Services
  • 2.1.5 Oracle Internet Directory SSL Connection Fail Intermittently
  • 2.1.6 Incorrect Location for Debug Message
  • 2.1.7 Illegible or Garbage Characters Output in a Russian Locale
  • 2.1.8 Application Server Control Console Link Not Operational in non-English Installations
  • 2.1.9 Set the NLS Parameter Before Installing
  • 2.1.10 Excessive Privileges for OracleAS Metadata Repository Installations
  • 2.1.11 Incorrect Guidelines for Online Help
  • 2.1.12 OIDCA Fails Due to Misconfigure in /ECT/HOSTS
  • 2.1.13 DB Console of Infrastructure IM+MR Cannot be Started
  • 2.1.14 Warning Messages After Running root.sh
• 2.2 Upgrade Issues
  • 2.2.1 Upgrade of Identity Management Installation to 10.1.4.0.1
  • 2.2.2 Additional Step Required When Upgrading OracleAS Metadata Repository Release 9.0.4.3 to 10.1.4.0.1
  • 2.2.3 Configuring Port Values for the Load Balancer and Oracle Internet Directory When Upgrading Oracle Application Server Cluster (Identity Management)
  • 2.2.4 Harmless Error Messages During OracleAS Metadata Repository Upgrade
  • 2.2.5 Metadata Repository Container Version
  • 2.2.6 Issues When Using the ldifwrite Command to Back Up the Oracle Internet Directory
  • 2.2.7 Upgrade of OracleAS Cold Failover Clusters Fails While Running Configuration Assistant
• 2.3 Documentation Errata
  • 2.3.1 Incorrect Line Breaks in MRUA Sample Output
  • 2.3.2 Incorrect Global Database Naming Standard

3 General Management and Security Issues

• 3.1 General Management Issues
  • 3.1.1 Modifying targets.xml After Enabling SSL for Oracle Identity Management 10g (10.1.4.0.1)
  • 3.1.2 Changing the IP Address of a Metadata Repository Created with Oracle Application Server Repository Creation Assistant
  • 3.1.3 Oracle Enterprise Manager Grid Control Does not Display all Integration Profiles
  • 3.1.4 Additional Information for Changing Hostname for Identity Management Installations
• 3.2 Documentation Errata
  • 3.2.1 References to OracleAS Web Cache and OracleAS Portal in the Application Server Control Console Online Help

4 High Availability

• 4.1 General Issues and Workarounds
  • 4.1.1 Problem Performing a Clone Instance or Clone Topology Operation
  • 4.1.2 OracleAS Guard Release 10.1.2.1.1 Cannot Be Used with Oracle RAC Databases
  • 4.1.3 OracleAS Guard Returned an Inappropriate Message When It Could Not Find the User Specified Database Identifier
• 4.2 Configuration Issues and Workarounds
  • 4.2.1 The asgctl shutdown topology Command Does Not Shut Down an MRCA Database That is Detected To Be of a repCa Type Database
• 4.3 Documentation Errata and Omissions
  • 4.3.1 Availability of a Previously Undocumented asgctl Command: create standby database
  • 4.3.2 Connecting to an OracleAS Guard Server May Return an Authentication Error
  • 4.3.3 All emagents Must Be Shut Down Before Performing OracleAS Guard Operations
  • 4.3.4 Procedure to Patch a 10.1.2.0.0 Disaster Recovery Setup with a 10.1.2.1.0 Patchset
  • 4.3.5 Running Instantiate Topology Across Nodes After Executing a Failover Operation Results in an ORA-01665 Error
  • 4.3.6 OracleAS Guard Is Unable to Shutdown the Database Because More Than One Instance of Oracle RAC is Running

5 Oracle Access Manager

• 5.1 General Issues
  • 5.1.1 Known Issue With JDK 1.1.7
  • 5.1.2 The Name "Query Builder" Is Not Always Translated
  • 5.1.3 Users Can Access Resources After Password Reset Without Logging In
• 5.2 Installation and Upgrade Issues and Workarounds
  • 5.2.1 Change the Transport Security Mode During Installation
  • 5.2.2 Special Considerations for adding Language Packs to an Installation area with Space Characters
  • 5.2.3 iPlanet Server Fails After Tuning
  • 5.2.4 Oracle Internet Directory Servers Require Tuning After Installation
  • 5.2.5 Support for DirX Has Been Deprecated
  • 5.2.6 "Enter Password" String Does Not Display Correctly During Installation
  • 5.2.7 Uninstalling a Language Pack With a "2" Designation Causes an Error
• 5.3 Removal Issues and Workarounds
  • 5.3.1 Removing Language Packs
  • 5.3.2 Removing the Default Administrator Language
  • 5.3.3 Removing Components and Reinstalling
• 5.4 Access System Issues and Workarounds
  • 5.4.1 WebGate Diagnostics URL Incorrectly Report the Access Server Is Down
  • 5.4.2 WebGate Is Unable to Connect to Its Associated Access Server
  • 5.4.3 Memory Usage Rises After Configuring a Directory Server Profile
  • 5.4.4 The Passthrough Challenge Parameter Does Not Work on a Domino Web Server
  • 5.4.5 Steps for Integrating the Access System with OracleAS Single Sign-On 10.1.2.0.2
  • 5.4.6 Return Type Parameters Are Case-Sensitive in This Release
  • 5.4.7 Single Sign-On with Oracle Identity Management Fails
• 5.5 Identity System Workarounds and Issues
  • 5.5.1 Identity System Deletes a User Entry When an RDN is Modified
  • 5.5.2 Identity System Deletes a User Entry When an RDN is Modified
  • 5.5.3 Auditing for the Identity System Ceases to Work
  • 5.5.4 Identity Server Crashes if It Cannot Find a Style Sheet
  • 5.5.5 WebPass Is Unable to Connect to Its Associated Identity Server
  • 5.5.6 Memory Usage Rises for an Identity Server After Configuring a Directory Server Profile
  • 5.5.7 Errors Are Found in the HTTP Logs After Setting Up the Identity System
  • 5.5.8 Reports With Non-ASCII Characters Are Not Imported Correctly in Excel
  • 5.5.9 Translation of Tab Names May be Incomplete
  • 5.5.10 Non-ASCII Values for Certain Display Types Are Corrupted in the Identity System Console
  • 5.5.11 Data Is Lost When Saving an Object Profile in Org. Manager
• 5.6 Directory Issues
  • 5.6.1 Error "There Is No Profile Configured for this Kind of Object"
  • 5.6.2 Issues With the Display of Messages in Some Languages
  • 5.6.3 Support for eDirectory 8.7.3
• 5.7 Documentation Issues
  • 5.7.1 Reference to Oracle Internet Directory Is Needed in Installation Preparation Checklist
  • 5.7.2 Help Mentions WebGateStatic.lst But No Such File Exists
  • 5.7.3 The obEnableCredentialCache Credential Mapping Parameter Is Misspelled
  • 5.7.4 Warning Regarding Retrieving Authorization Data From an External Source
  • 5.7.5 Active Directory MaxPageSize Parameter Stated as PageSize Parameter
  • 5.7.6 Missing Parameter in globalparams.xml Documentation

6 Oracle Application Server Single Sign-On

• 6.1 Installation, Installation and Upgrade Issues
  • 6.1.1 Directory Considerations During Installation
  • 6.1.2 Directory Considerations After Installation
  • 6.1.3 Identity Management Grid Control Considerations During Uninstallation
• 6.2 General Issues
  • 6.2.1 A "Host Unavailable" Entry Appears on Non-English Monitoring Pages
  • 6.2.2 Dynamic Global Logout Directives Must Pass the String "Oracle SSO"
  • 6.2.3 Multilevel Authentication Configuration May or May Not Require a Port Number

7 Oracle Identity Federation

• 7.1 General Issues and Workarounds
  • 7.1.1 Credential Re-entry When Accessing a SiteMinder Protected Resource
  • 7.1.2 Reauthentication after Session Timeout with OracleAS Single Sign-On and SAML 1.x or WS-Federation
  • 7.1.3 Attribute Sharing with the Microsoft Internet Information Server
  • 7.1.4 Redirection Loops with Oracle Access Manager
  • 7.1.5 Truncated Text in Japanese Version of Oracle Universal Installer
  • 7.1.6 Unused Assertion Profile With Invalid Attribute Mapping Can Cause SSO Failure
  • 7.1.7 Signed SAML 1.0 Assertions Can Cause SSO Failures
  • 7.1.8 Encrypting Network Connections
  • 7.1.9 Spurious Certificate Verification Failure in Debug Log
• 7.2 Configuration Issues and Workarounds
  • 7.2.1 Administration Console Is Not Accessible After Changing Transient Data Store
  • 7.2.2 Signing SAML Response with Assertion
  • 7.2.3 Assertions Using SAML 1.x POST Method Fail in Japanese Locale
  • 7.2.4 Using RDBMS as a User Data Store with a Login column ID of type CHAR
  • 7.2.5 Some Peer Providers Are Not Displayed in Administration Console
  • 7.2.6 SAML 2.0 Metadata AttributeRequesterDescriptor Not Supported
  • 7.2.7 Problems Disabling Protocol Profiles in Administration Console
  • 7.2.8 Metadata Service URLs With Query Parameters Not Supported
• 7.3 Documentation Errata
  • 7.3.1 Incorrect Header in Oracle Identity Federation Online Help
  • 7.3.2 Usage of Command-line Configuration Assistants

8 Oracle Security Developer Tools

• 8.1 General Issues and Workarounds
  • 8.1.1 Oracle XML Security Does Not Handle the InclusiveNamespaces Tag

9 Oracle Internet Directory

• 9.1 General Issues and Workarounds
  • 9.1.1 Perform Full Database Backup After Administrative Changes to Oracle Internet Directory
  • 9.1.2 Comment Out ACL Attributes Not Defined in the Schema
  • 9.1.3 Specify DN of the DIT When Dumping Directory Entries for an Advanced Replication Agreement
• 9.2 Configuration Issues and Workarounds
  • 9.2.1 Set Language Before Using bulkload
• 9.3 Documentation Errata
  • 9.3.1 Bad Links in Online Help Pages
  • 9.3.2 Missing Line Break in sqlplus Command
  • 9.3.3 Errors in oracle.ldap.util.Subscriber.createUser() Documentation
  • 9.3.4 Missing Example: How to Decode a Mime-Encoded Header Set by mod_sso
  • 9.3.5 Error in Identity Management Grid Control Plug-in Context-Sensitive Help
  • 9.3.6 Missing Note: The labeledURI Attribute host:port is for Syntax Purposes Only
  • 9.3.7 Missing Example: Listing All the Attributes in the Directory by Using ldapsearch
  • 9.3.8 Incorrect Environment Variables in Plug-in Debugging Examples
  • 9.3.9 Figure Errors in Replication Concepts Chapter

10 Oracle Application Server Certificate Authority

• 10.1 Documentation Errata
  • 10.1.1 Java Classes for Custom Policy Plug-in Must Use JDK 1.4.2
  • 10.1.2 Incorrect Class Name in Custom Policy Example

11 Oracle Delegated Administration Services

• 11.1 General Issues and Workarounds
  • 11.1.1 Installation Process Does Not Enable SSL for Oracle Delegated Administration Services
  • 11.1.2 Using Single Wildcard Characters to Search for Entries Fails to Return Results
  • 11.1.3 Oracle Internet Directory Self-Service Console Link Does Not Work in Oracle Identity Manager Grid Control Plug-in
• 11.2 Administration Issues and Workarounds
  • 11.2.1 Disabling Password Change and Reset Functionality
  • 11.2.2 Resetting Oracle Application Server Single Sign-On Passwords Redirects Users to Oracle Delegated Administration Services Home Page

12 Oracle Directory Integration Platform

• 12.1 Configuration Issues and Workarounds
  • 12.1.1 Configuration Requirements for Synchronizations with Domain-Level Mappings
  • 12.1.2 Directory Integration Assistant Throws "LDAP: error code 2 - Decoding Error" When Uploading an Additional Configuration Information File
  • 12.1.3 Reconfiguring the Oracle Password Filter for Microsoft Active Directory Generates Errors
  • 12.1.4 In a High Availability Environment Using Multimaster Replication, Provisioning Events May not Be Propagated or May Be Duplicated
  • 12.1.5 Manual Step Required After Configuring Oracle Directory Integration Platform from Oracle Enterprise Manager
  • 12.1.6 Securing the Windows Registry Before Installing the Oracle Password Filter for Microsoft Active Directory
• 12.2 Administration Issues and Workarounds
  • 12.2.1 Default Mapping Rule Can Be Simplified in Single-Domain Microsoft Active Directory Deployments
  • 12.2.2 Oracle Directory Integration Platform Not Sending Provisioning Events Due to Purged Change Log Entries
  • 12.2.3 Oracle Internet Directory Field Unavailable in Oracle Identity Manager Grid Control Plug-in
  • 12.2.4 Synchronizion from Novell eDirectory or OpenLDAP Fails When the Oracle Internet Directory Container is Within the Default Realm