R12 DMZ Configuration

DMZ Configuration on R12

Approach
The following is the approach to achieve the required configuration
 OS verification
 Backup the source (prodcution instance)
 Copy the source application tier to the DMZ machine
 Create user and group for the DMZ machine
 Create directories for the target DMZ and give them the required grant and ownership
 Configure the DMZ
 Run autoconfig on both application tiers and the database tier
 Start and check the services
OS Verification
i) Create OS user
ii) Host file format
The “/etc/hosts” file should use the following format and Hostname length should be less than
255 characters.
IP Address Full Qualified Hostname alias
Example:
10.10.19.39 irecruit.oracle.com irecruit
10.10.11.31 internal.oracle.com internal

iii) Mount Point / Storage Details

All disks in a disk group should have the same I/O density (Megabytes per second of transfer rate
per Gigabyte of capacity)
Metalink note id: Oracle E-Business Suite R12 Configuration in a DMZ (380490.1)
iv) Software Requirement
Ar,ld,make ,X Display Server
v) Login into the Source and shut the application services
vi) Take a backup of the application directories and transfer it to the target server
Configuring DMZ
vii) login as: appldmz
viii) Check the below settings
echo $PATH
which make
which ld

ix) Navigate to the location where the files have been transfered.
x) And further navigate to the clone bin diretory and run the adcfgclone.pl with appsTier
pwd
/oracle/appldmz
apps inst
cd apps/apps_st/comn/clone/bin

perl adcfgclone.pl appsTier

Copyright (c) 2002 Oracle Corporation
Redwood Shores, California, USA
Oracle Applications Rapid Clone
Version 12.0.0
adcfgclone Version 120.20.12000000.11
Enter the APPS password :
Running:
/oracle/appldmz/apps/apps_st/comn/clone/bin/../jre/bin/java -Xmx600M -cp
/oracle/appldmz/apps/apps_st/comn/clone/jlib/java:/oracle/appldmz/apps/apps_s
t/comn/clone/jlib
/xmlparserv2.jar:/oracle/appldmz/apps/apps_st/comn/clone/jlib/ojdbc14.jar
oracle.apps.ad.context.CloneContext -e
/oracle/appldmz/apps/apps_st/comn/clone/bin/../context/apps/CTXORIG.xml -
validate -pairsfile
/tmp/adpairsfile_28117.lst -stage /oracle/appldmz/apps/apps_st/comn/clone
2>
/tmp/adcfgclone_28117.err; echo $? > /tmp/adcfgclone _28117.res
Log file located at
/oracle/appldmz/apps/apps_st/comn/clone/bin/CloneContext_10272126.log
Provide the values required for creation of the new APPL_TOP Context file.
Target System Hostname (virtual or normal) [irecruit] :
Target System Database SID : RAC1
Target System Database Server Node [irecruit] : internal
Target System Base Directory : /oracle/appldmzTarget System Forms ORACLE_HOME
Directory [/oracle/appldmz/apps/tech_st/10.1.2] :Target System Web
ORACLE_HOME Directory [/oracle/appldmz/apps/tech_st/10.1.3] :
Target System APPL_TOP Mountpoint [/oracle/appldmz/apps/apps_st/appl] :
Target System COMMON_TOP Directory [/oracle/appldmz/apps/apps_st/comn] :
Target System Instance Home Directory [/oracle/appldmz/inst] :
Username for the Applications File System Owner [appldmz] :
Target System Root Service [enabled] :
Target System Web Entry Point Services [enabled] :
Target System Web Application Services [enabled] :
Target System Batch Processing Services [enabled] :
Target System Other Services [disabled] :
Do you want to preserve the Display [internal:0.0] (y/n) ? : n
Target System Display [irecruit:0.0] :
Do you want the the target system to have the same port values as the source
system (y/n)[y] ? : n
Target System Port Pool [0-99] : 10
Checking the port pool 10
done: Port Pool 10 is free
Report file located at
/oracle/appldmz/inst/apps/RAC1_irecruit/admin/out/portpool.lst
appctxtg=/oracle/appldmz/inst/apps/RAC1_irecruit/appl/admin/RAC1_irecruit.xml
showProgress
contextValidated=true

APPS Password :
Beginning application tier Apply - Tue Oct 27 21:27:47 2009
/oracle/appldmz/apps/apps_st/comn/clone/bin/../jre/bin/java -Xmx600M -
DCONTEXT_VALIDATED=true -Doracle.installer.oui_loc=/oui -classpath
APPS Password : Log file located at
/oracle/appldmz/inst/apps/RAC1_irecruit/admin/log/ApplyAppsTier_10272127.log
/ 3% completed

xi) Once this process completes succesfully shut down the services change the following
parameters in the .xml file

<oa_system_config>
<TIER_DB oa_var="s_isDB">NO</TIER_DB>
<TIER_ADMIN oa_var="s_isAdmin">NO</TIER_ADMIN>
<TIER_WEB oa_var="s_isWeb">YES</TIER_WEB>
<config_option oa_var="s_tnsmode">generateTNS</config_option>
<config_option oa_var="s_apps_version">12.0.4</config_option>
<config_option oa_var="s_apache_mode">NORMAL</config_option>
<ias_version oa_var="s_ias_version">10.1.3.0.0</ias_version>
</oa_system_config>
xii) Run the node clean package as apps user
Sqlplus apps/********
exec fnd_conc_clone.setup_clean;
commit;
exit
Run autoconfig in the series as stated below
a) database tier
b) primary apps tier (prodcution)
c) DMZ (irecruit tier)
xiii) After the completion of the autoconfig run the following script as apps from the primary
node

This would change the profile options hierarchy type values to SERVRESP.
Run autoconfig again on the primary node. As seen in the following lines

@txkChangeProfH.sql SERVRESP
Changing the hierarchy type for the Profile APPS_WEB_AGENT
Profile APPS_WEB_AGENT hierarchy type has been
Changing the hierarchy type for the Profile ICX_DISCOVERER_LAUNCHER
Profile ICX_DISCOVERER_LAUNCHER hierarchy type has been
successfully changed to SERVRESP
successfully changed to SERVRESP
Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 -
64bit
Production
With the Partitioning, OLAP and Data Mining options

xiv) After the completion of the script start the primary isntnace and login as sysadmnin
And change the following profiles at server level
Server : iRecruit
Profile : Node Trust Level
Make the changes at the server level to external
This Completes the DMZ Configuration !!!
xv) Expose the responsibility to the external tier as per the requirement as seen in the following
screen shot.
xvi) Once the above process is completed the DMZ node can be started with the sequence given
below
xvii) Startup and shutdown of DMZ Applications
We can start the iRecruit node with the following sequence
adopmnctl.sh start
adoafmctl.sh start
adformsctl.sh start
adoacorectl.sh start
adapcctl.sh start

To stop the DMZ follow the sequence stated below

adapcctl.sh stop
adoacorectl.sh stop
adformsctl.sh stop
adoafmctl.sh stop
adopmnctl.sh stop

URL : http://irecruit.oracle.com:8010/OA_HTML/IrcVisitor.jsp