You are on page 1of 44

11/19/13

Configuring DRM with Shared Services

Configuring Data Relationship Management with Hyperion Shared Services


This tutorial contains the following sections: Purpose Time to Complete Overview Software and Hardware Requirements Prerequisites Installing Oracle Internet Directory Configuring Oracle Internet Directory Configuring Shared Services to Use OID Configuring CSS Mode for Data Relationship Management Summary Resources

Purpose
This tutorial covers steps to configure Data Relationship Management with Hyperion Shared Services to enable external authentication with Oracle Internet Directory.

Time to Complete
Approximately 30 min.

Overview
Data Relationship Management (DRM) supports users that are natively authenticated by the application using stored password information or users that are authenticated by an external user directory. DRM administrators set up the authentication method in DRM Console by specifying one of the following methods: Internal configures authentication by DRM CSS configures authentication by an external user directory supported by Hyperion Shared Services (Shared Services) Mixed enables you to specify an authentication option (Internal or CSS) for each user In this tutorial, you install and configure Oracle Internet Directory (OID) as an external user directory for Shared Services and configure DRM to enable external user authentication.

Software and Hardware Requirements


The following is a list of software requirements: Oracle Database 11g 11.1.0.7.0 Oracle Hyperion Foundation Services 11.1.2.1.0 Oracle Hyperion Data Relationship Management, Fusion Edition 11.1.2.1.0

Prerequisites
Before starting this tutorial, you should: 1. Have access to or have installed Oracle Hyperion Enterprise Performance Management 11.1.2.1.0 and Oracle Hyperion Data Relationship Management, Fusion Edition 11.1.2.1.0. 2. Have access to edelivery.oracle.com for software download.

Installing Oracle Internet Directory


In this topic, you download and install Oracle Internet Directory. Setting up the OID schema using RCU Installing Oracle Identity Management 11g (11.1.1.2.0) Upgrading Oracle Identity Management 11g to 11.1.1.4.0

Setting up the OID schema using RCU


1. From edelivery.oracle.com, access the Oracle Enterprise Performance Management 11.1.2.1.0 Media Pack for Windows 32 bit and download Oracle Fusion Middleware Repository Creation Utility 11g (11.1.1.4.0) for Microsoft Windows (32-bit).

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

1/44

11/19/13

Configuring DRM with Shared Services

For example, download the V 2 4 3 1 2 0 1 . z i pfile into the C : \ S o f t w a r e \ R C Udirectory

2. Extract the V 2 4 3 1 2 0 1 . z i parchive and then run the utility from the command line: C : \ S o f t w a r e \ R C U \ r c u H o m e \ B I N \ r c u . b a t

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

2/44

11/19/13
3. Click Next.

Configuring DRM with Shared Services

4. Select Create and click Next. In the Database Connection Details page, specify database connection details including host name, port number, service name, username, and password.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

3/44

11/19/13

Configuring DRM with Shared Services

5. Click Next. The utility performs prerequisites check. Click OK to close the Checking Prerequisites dialog box.

6. In the Select Components page, expand Identity Management and select Oracle Internet Directory.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

4/44

11/19/13

Configuring DRM with Shared Services

7. Click Next. The utility performs prerequisites check. Click OK to close the Checking Prerequisites dialog box.

8. In the Schema Passwords page, leave Use same passwords for all schemas selected and set the password to oracle.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

5/44

11/19/13

Configuring DRM with Shared Services

9. Click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

6/44

11/19/13

Configuring DRM with Shared Services

10. In the Map Tablespaces page, click Next. The utility displays a warning dialog box with the following message: Any tab lespaces that do not already exist in the selected schemas will b e created. Click OK to create tablespaces.

The utility validates and creates tablespaces and displays a confirmation dialog box. Click OK.

11. In the Summary page, verify the operations about to be performed based on your selections from the previous steps and click Create.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

7/44

11/19/13

Configuring DRM with Shared Services

12. In the Completion Summary page, verify that the operations have been completed successfully and click Close.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

8/44

11/19/13

Configuring DRM with Shared Services

Installing Oracle Identity Management 11g (11.1.1.2.0)


1. From edelivery.oracle.com, access the Oracle Fusion Middleware 11g Media Pack for Microsoft Windows (32-bit) and download Oracle Identity Management 11g (11.1.1.2.0) for Microsoft Windows (32-bit).

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

9/44

11/19/13

Configuring DRM with Shared Services

2. Extract the V 1 8 6 9 1 0 1 . z i parchive and then run the s e t u p . e x ein the D i s k 1folder. In the Welcome page, click Next.

3. In the Select Installation Type page, select Install Software - Do Not Configure and click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

10/44

11/19/13

Configuring DRM with Shared Services

4. In the Prerequisite Checks page, verify that all prerequisites are met and click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

11/44

11/19/13

Configuring DRM with Shared Services

5. In the Specify Installation Location page, specify location for Oracle Middleware Home directory (for example, C : \ O r a c l e \ M i d d l e w a r e ) and Oracle Home directory (for example, O r a c l e _ I D M 1 ) and click Next. Note: The Oracle Home directory will be created under the Oracle Middleware Home directory.

6. In the Specify Security Updates page, clear the I wish to receive security updates via My Oracle Support and click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

12/44

11/19/13

Configuring DRM with Shared Services

7. In the Installation Summary page, verify applications that you have selected for installation and click Install.

The installer performs installation of the selected applications. When finished click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

13/44

11/19/13

Configuring DRM with Shared Services

8. In the Installation Complete page, verify that the installation was successful and click Finish.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

14/44

11/19/13

Configuring DRM with Shared Services

Upgrading Oracle Identity Management 11g to 11.1.1.4.0


1. From edelivery.oracle.com, access the Oracle Fusion Middleware 11g Media Pack for Microsoft Windows (32-bit) and download Oracle Identity Management 11g Patch Set 3 (11.1.1.4.0) for Microsoft Windows (32-bit).

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

15/44

11/19/13

Configuring DRM with Shared Services

2. Extract the V 2 4 3 2 3 0 1 . z i parchive and then run the s e t u p . e x ein the D i s k 1folder. In the Welcome page, click Next.

3. In the Specify Installation Location page, , specify location for Oracle Middleware Home directory C : \ O r a c l e \ M i d d l e w a r eand Oracle Home directory O r a c l e _ I D M 1and click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

16/44

11/19/13

Configuring DRM with Shared Services

4. In the Specify Security Updates page, clear I wish to receive security updates via My Oracle Support and click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

17/44

11/19/13

Configuring DRM with Shared Services

5. In the Installation Summary page, verify applications that you have selected for installation and click Install.

The installer performs installation of the selected applications. When finished click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

18/44

11/19/13

Configuring DRM with Shared Services

6. In the Installation Complete page, verify that the installation was successful and click Finish.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

19/44

11/19/13

Configuring DRM with Shared Services

Configuring Oracle Internet Directory


In this topic you configure OID as an external user directory. 1. Run C : \ O r a c l e \ M i d d l e w a r e \ O r a c l e _ I D M 1 \ b i n \ c o n f i g . b a tto launch Oracle Identity Management 11g Configuration Wizard. In the Welcome page, click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

20/44

11/19/13

Configuring DRM with Shared Services

2. In the Select Domain page, select Configure Without A Domain and click Next.

3. In the Specify Installation Location page, specify Oracle Instance Location (for example, C : \ O r a c l e \ M i d d l e w a r e \ o i d i n s t _ 1 ) and Oracle Instance Name (for example, o i d i n s t _ 1 ) and click Next. Note: The Oracle Instance name may only contain alphanumeric and underscore (_) characters. It must begin with an alphabetic (a-z or A-Z) character, and must be from 4 to 30 characters in length

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

21/44

11/19/13

Configuring DRM with Shared Services

4. In the Specify Security Updates page, clear I wish to receive security updates via My Oracle Support and click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

22/44

11/19/13

Configuring DRM with Shared Services

5. In the Configure Components page, select Oracle Internet Directory only and click Next.

6. In the Configure Components page, select Oracle Internet Directory only and click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

23/44

11/19/13

Configuring DRM with Shared Services

7. In the Configure Ports page, select Auto Port Configuration and click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

24/44

11/19/13

Configuring DRM with Shared Services

8. In the Specify Schema Database page, select the Use Existing Schema option because the Oracle Internet Directory schema has already been loaded using RCU. Enter the database connection information to access the OID schema and click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

25/44

11/19/13

Configuring DRM with Shared Services

9. In the Create Oracle Internet Directory page, enter Realm (for example, dc=us,dc=oracle,dc=com) and the administrator password (for example, oracle1) and click Next.

10. In the Installation Summary page, verify applications that you have selected for configuration and click Configure.

The installer performs configuration of the selected applications. In the Configuration Progress page, click Next when finished.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

26/44

11/19/13

Configuring DRM with Shared Services

11. In the Installation Complete page, verify that the configuration completed successfully and click Finish.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

27/44

11/19/13

Configuring DRM with Shared Services

12. Verify Oracle Internet Directory a. Verify that OID processes are alive. At the command prompt, enter: $ O R A C L E _ I N S T A N C E / b i n / o p m n c t ls t a t u s

b. Bind the orcladmin user to OID by executing the following command on the OID non-SSL port: $ O R A C L E _ H O M E / b i n / l d a p b i n dD" c n = o r c l a d m i n "w" o r a c l e 1 "h" d r m o b e "p3 0 6 0

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

28/44

11/19/13

Configuring DRM with Shared Services

13. Create a script for adding a new OID user script in Notepad and save the script as C : \ o r c l . l d i f : d n :c n = j s m i t h , c n = U s e r s , d c = u s , d c = o r a c l e , d c = c o m o b j e c t c l a s s :t o p o b j e c t c l a s s :p e r s o n o b j e c t c l a s s :o r g a n i z a t i o n a l P e r s o n o b j e c t c l a s s :i n e t O r g P e r s o n c n :j s m i t h g i v e n N a m e :J o h n s n :S m i t h u s e r p a s s w o r d :o r a c l e 1

14. Add the new OID user by entering the following command: $ O R A C L E _ H O M E / b i n / l d a p a d dD" c n = o r c l a d m i n "w" o r a c l e 1 "h" d r m o b e "p3 0 6 0f" C : \ o r c l . l d i f "

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

29/44

11/19/13

Configuring DRM with Shared Services

15. Test the new user by entering the following command: $ O R A C L E _ H O M E / b i n / l d a p b i n dD" c n = j s m i t h , c n = U s e r s , d c = u s , d c = o r a c l e , d c = c o m "w" o r a c l e 1 "h " d r m o b e "p3 0 6 0

Configuring Shared Services to Use OID


In this topic, you add a user directory named OID in Shared Services and configure it to access installed Oracle Internet Directory. 1. In Windows Services Control panel ensure that the following services are started: OracleServiceORCL Oracle Process Manager (oidinst_1) Hyperion Foundation Services - Managed Server

2. Log on to Shared Services by navigating to the following URL in the browser, entering administrator credentials, and clicking Log On: h t t p : / / d r m o b e : 2 8 0 8 0 / i n t e r o p / i n d e x . j s p

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

30/44

11/19/13

Configuring DRM with Shared Services

3. Select Administration and then Configure User Directories.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

31/44

11/19/13

Configuring DRM with Shared Services

4. Click New .

5. In the Directory Type page, select Lightweight Directory Access Protocol(LDAP) and click Next. In the LDAP Connection Information tab, perform the following steps: In the Directory Server drop-down list, select Oracle Internet Directory. In the Name field, enter OID. In the Host Name field, enter name of the server that host OID (for example, drmobe). In the Port field, enter 3060. In the Base DN field, enter dc=us,dc=oracle,dc=com. In the Used DN field, enter cn=orcladmin, cn=Users. Select the Append Base DN check box. Enter the password for the orcladmin user.

Click Next.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

32/44

11/19/13

Configuring DRM with Shared Services

6. In the LDAP User Configuration tab, enter the unique identifier of a user in the directory (for example, cn=jsmith) and click Auto Configure. The remaining fields are populated with the user configuration.

Click Next.

7. In the LDAP Group Configuration tab, deselect Support Groups.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

33/44

11/19/13

Configuring DRM with Shared Services

Click Save.

8. In the Status Message page, verify that the OID directory has been successfully configured and click OK.

The OID directory is now listed in the Defined User Directories tab.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

34/44

11/19/13

Configuring DRM with Shared Services

9. Log off the Shared Services Console and restart the Shared Services (Hyperion Foundation Services - Managed Server) service.

Configuring CSS Mode for Data Relationship Management


In this topic, you configure Data Relationship Management with Shared Services to enable external user authentication. 1. Launch DRM Configuration Console and ensure that the EDEN application is selected in the Application pane.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

35/44

11/19/13

Configuring DRM with Shared Services

2. Select the Host Machines, CSS subtab, and General subtab.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

36/44

11/19/13

Configuring DRM with Shared Services

3. Select Enable CSS Bridge and enter your hostname in the CSS Bridge Host field (for example, drmobe). Leave the default values for the JVM Path field and the Oracle Instance field.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

37/44

11/19/13

Configuring DRM with Shared Services

4. Select the Class Path subtab. Leave paths to required .jar files as is.

5. Select the Authentication Settings tab.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

38/44

11/19/13

Configuring DRM with Shared Services

6. Click Load Settings to populate the current settings as saved in the DRM system preferences.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

39/44

11/19/13

Configuring DRM with Shared Services

7. Select Mixed to allow internal or CSS (Common Security Services) mode for authentication.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

40/44

11/19/13

Configuring DRM with Shared Services

8. Select Save Settings and click OK in the Message dialog box.

9. Click Save Configuration and Restart service. Click Yes in the Configuration Warning dialog box.

10. Restart the Shared Services (Hyperion Foundation Services - Managed Server service).

11. Log in to the DRM Web Client as administrator and define the OID user using the following credentials: In the Username field, enter jsmith. In the Full Name field, enter John Smith. In the Authentication option, select CSS (External). In the Options, select Login session does not expire. In the Available Roles, select Data Manager.

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

41/44

11/19/13

Configuring DRM with Shared Services

12. Click Save. The user jsmith is added to the list of users.

13. Log off and log on Web Client as the OID user (jsmith/oracle1).

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

42/44

11/19/13

Configuring DRM with Shared Services

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

43/44

11/19/13

Configuring DRM with Shared Services

Summary
In this tutorial, you should have learned how to: Install and configure Oracle Internet Directory as an external user directory Configure Shared Services to use Oracle Internet Directory Configure Data Relationship Management with Shared Services to enable external user authentication

Resources
Oracle EPM System, Fusion Edition 11.1.2.1 Documentation Library To learn more about Data Relationship Management, refer to additional OBEs in the OLL Web site

About Oracle | Oracle and Sun |

| Subscribe | Careers | Contact Us | Site Maps | Legal Notices | Terms of Use | Your Privacy Rights

www.oracle.com/webfolder/technetwork/tutorials/obe/hyp/DRM11.1.2-ConfiguringDRMwithSharedServices/index.htm?print=preview&imgs=visible

44/44