SOA Suite Install

1. This document outlines the activities to be performed in setting up the environment for WebPortal project. The details identified in this document can be used for installing various Oracle Fusion Middleware components required for implementing WebPortal project.

2 Assumptions

• This document does not describe / address the procurement details for the hardware components required. It assumes the hardware resources are obtained and in place.
• This document does not describe setting up of the operating system and other software other than the Oracle Fusion Middleware components required for WebPortal project
• This document does not and should not replace any of the install documentation from Oracle. This document details steps to install and setup an environment for the WebPortal infrastructure platform and draws everything from the install docs provided by Oracle for all the middleware components included for the WebPortal platform.
• This document makes the following assumptions
o Server: Linux system
o Processor type: Linux x86-64
o O/S: Red Hat Enterprise Linux 5.3 (RHEL 5.3)


3 Middleware Components
• The following table gives a list of middleware components that this document covers from an install perspective for the Data Services integrated platform

Component Name Version
Oracle SOA Suite 11gR1 Patch Set2 11.1.1.3.0
WebLogic Server 10.3.3
Oracle Service Bus 11.1.1.3.0
BAM 11.1.1.3.0
Adapters and Connectors 11.1.1.2.0
Enterprise Repository 11.1.1.2.0
Service Registry 11.1.1.2.0


4 Software Requirements Matrix

BAM 11gR1 (11.1.1.3.0) Oracle 11.1.0.7 JDK 1.6.14
Oracle Enterprise Repository 11.1.1.2.0 Oracle 11.1.0.7 JDK 1.6.14
Oracle Service Registry 11.1.1.2.0 Oracle 11.1.0.7 JDK 1.6.14

5 Binaries for install

Please refer to the vendor link http://edelivery.oracle.com to download the binaries for all the m/w components for the WebPortal platform. Select the “Oracle Fusion Middleware 11g Media Pack” for “Linux x86-64” platform. Download the software/binaries for the following components:

• Oracle WebLogic Server 11gR1 (10.3.3) Generic
• Oracle SOA Suite 11g (11.1.1.2.0)
• Oracle SOA Suite 11g Patch Set 2 (11.1.1.3.0)
• Repository Creation Utility 11g (11.1.1.3.0) for Linux x86
• Application Adapters v11.1.1.2.0 (Part 1 of 2)
• Application Adapters v11.1.1.2.0 (Part 2 of 2)
• Oracle Service Bus 11g (11.1.1.3.0)
• Oracle Enterprise Repository 11g (11.1.1.2.0)
• Oracle Service Registry 11g (11.1.1.2.0)

6 Install Components
Some of the components listed below are optional. During the configuration, don’t select the components that are not required.

• Oracle SOA Suite 11g - 11.1.1.3.0
o Oracle SOA Suite with Oracle Business Process Execution Language (BPEL) Process Manager
o Mediator
o Rules
o B2B
o Human Workflow
o Oracle Business Activity Monitoring (BAM)
• Sun JDK 1.6.0_14


7 Pre-Install Steps.

It is recommended to install the operating system patches suggested by Oracle before installing SOA suite and Registry/Repository. Refer Appendix A for the list of OS patches. (I will add that later !)

8 Major Install Steps – SOA Suite

The major steps for installing and configuring Oracle SOA suite in Linux OS are given below. WebLogic has to be installed before installed SOA Suite.

• Operating System: Linux OS 64 bit (or 32 bit OS)
• Download Location: TBD

1. Create Database
2. Install WebLogic Server
3. Install SOA Suite
4. Start Admin server and Managed Server.

Oracle SOA Suite

This section describes the steps for installing the Oracle SOA Suite.

Note: Oracle SOA Suite 11.1.1.3.0 is a Sparse Release and requires the Full Release Oracle SOA Suite 11.1.1.2.0 to be installed first.

At a high level, below are the steps to install the Oracle SOA Suite 11.1.1.3.0.
1. Install Oracle Database (11.1.0.7) for Oracle SOA Suite and create necessary schemas.
2. Install Oracle WebLogic Server 10.3.3. This will create the Middleware home and WebLogic Server home directories
3. Install Oracle SOA Suite. This creates the SOA Oracle Home and Oracle Common (oracle_common) home directories.
4. Run the Patch Set installer (11.1.1.3.0) to update Oracle SOA Suite to 11.1.1.3.0. This will install the Oracle Business Process Management Suite as well.
5. Run the Configuration Wizard to create the WebLogic Domain and configure Oracle SOA Suite.

8.1 STEP 1 - Create Database

Purpose: Create oracle database for Oracle SOA Suite Services (Metadata Services, SOA Infrastructure, and User Messaging). The RCU utility is located under RCU_HOME\bin. Check the listener.ora file oracle database details.

1. Run Repository Creation Utility (RCU) for BPEL and BAM
>./rcu

2. Provide database Connection Details:

HostName Eg. host.domain.name
Port Eg. 1521
Database Name
UserName Eg. Sysdba
Password
Role

3. Set new Prefix as - Dev

4. Select required Oracle Schemes and set username and password.

a. Oracle SOA Suite
DEV_MDS (Metadata Services)
DEV_SOAINFRA (SOA Infrastructure)
DEV_ORASDPM (User Messaging)

5. Map Table Spaces.

8.2 Step 2 - Install WebLogic Server

Purpose: Create middleware home and WebLogic Server home

1. Ensure that /etc/hosts configured to resolve host names
127.0.0.1 hostname.domainname hostname
127.0.0.1 localhost.localdomain localhost

2. Run Installer files

a. For 32 bit OS - ./wls1031_linux32.bin
For 64 bit OS - Install JDK and then execute JAVA_HOME/bin/java -jar wls1031_generic.jar

b. Create new middleware home.

8.3 Step 3 - Install SOA Suite

Purpose: Create SOA Oracle home Directory

1. ./runInstaller -jreLoc JRE_LOCATION – Completed

2. Configure Oracle SOA Suite

Run Oracle Fusion Middleware Configuration Wizard - Create User project directory and SOA Domain.
a. ./SOA_ORACLE_HOME/common/bin/config.sh

b. Create a New WebLogic Domain.Specify Domain name, Domain location, and application location.

Domain Name: base_domain
Domain Location: MW_HOME/user_projects/domains
Application location:MW_HOME/user_projects/applications

c. Configure Admin username,Password, Server Startmode, JDK and JDBC Component Scheme.


8.4 Step 4 - Start Servers

1. Start Admin Server: MW_HOME/user_projects/domains/domain_name/startWebLogic.sh
2. Start Managed Server: ./startManagedWebLogic.sh soa_server1

Admin Console: http://host:admin_server_port/console

SOA Technologies

Important UDDI APIs:  (Universal Description Discovery and Integration)

1. Inquiry API - Locate and obtain detailed entries from UDDI registry
2. Publicatin API - Publish and update information in UDDI Registry

It is a set of webservices that support description and discovery of webservices. This can be done using the GUI as well. url

Oracle SOA Products

Oracle SOA applications Stack for a Typical SOA project:

• Web server Apache httpd 2.2.15 RH Linux 5 64bit
• Application Server Oracle WebLogic Server 11g Rel 1 (10.3.2) Enterprise Edition with Sun JDK 1.6.0_14 RH Linux 5 64bit
• Service bus Oracle Service Bus 10gR3 (10.3.1.0) RH Linux 5 64bit
• Oracle SOA Suite 11g - 11.1.1.2.0 Oracle BPEL Process Manager (11.1.1.2.0) RH Linux 5 64bit
• SOA Governance Oracle Enterprise Repository (11.1.1.2.0)
• Oracle Service Registry (11.1.1.2.0) RH Linux 5 64bit
• Identity Manager Identity Management (11.1.1.2.0) RH Linux 5 64bit
• Database Oracle Database 11g Enterprise Edition with Real Application Clusters (RAC) RH Linux 5 64bit/HP UX 11i
• Oracle E-Billing Oracle Self-Service
• E-Billing Version 6.0.2
• WebLogic 10.0 MP1 RH Linux 5 64bit

Oracle Entitlements Server : Remove security decision from applications

Entitlements—Sets of privileges that govern what a user is authorized to do or see from multiple applications. Authorized administrators can easily define access control policies and security configurations at the Policy Administration Point (PAP). Using a web-based administration console, entitlement policies for all applications can be managed in a single location.

OES can define access control polic. Eg. For example, “Onlysalespersons and sales executives can view the monthly revenue reports for their region”.

PACP export Oracle Entitlements Server policies in XACML 2.0 format. Developers can use Java and Web services APIs to access all Oracle Entitlements

XACML : OASIS eXtensible Access Control Markup Language (XACML)

• PAP Policy Administration Point - Point which manages policies
• PDP Policy Decision Point - Point which evaluates and issues authorization decisions
• PEP Policy Enforcement Point - Point which intercepts user's access request to a resource and enforces PDP's decision.
• PIP Policy Information Point - Point which can provide external information to a PDP, such as LDAP attribute information

 http://www.oracle.com/technology/products/id_mgmt/oes/pdf/ds_oes.pdf

Oracle WebService Manager

 
WebService Security: Autheticaion for SOA services can do by using Oracle WebService Manager:

Oracle Access Manager (OAM)

Single Sign on solution using webgate plugin for Apache. use SPML webservice for adding users to identity manager.

Access System: The Access System provides access control and single sign-on to Web applications and J2EE resources (EJBs, servlets, etc.) running on a variety of Web and Application servers.

The Identity System provides delegated administration of user profiles and workflow for creating, updating, and deleting these profiles. It also provides applications for user selfregistration, password management and dynamic group management.

Web server plugins - WebGate and WebPass.A WebGate is an out-of-the-box Access Server client for web servers, which specializes in protecting HTTP resources. An AccessGate is a custom or general purpose Access Server client that processes user requests for Web and non-Web resources and is developed using the Access Manager SDK.

http://www.oracle.com/technology/products/id_mgmt/coreid_acc/pdf/oracle-access-manager-10gr3-faq-ext-update.pdf

Oracle Identity Manager:

• Oracle Identity Management
• Oracle Access Manager (OAM) 10.1.4.3.0
• Oracle Identity Management 10gR3 (10.1.4)
• Oracle Internet Directory 11gR1

The Oracle Identity Management components will be the system of record for all web user accounts containing credentials as well as central user data.The IM can also contain a map of the user profile to existing accounts

 

The Identity Manager will further contain all required flows to create, activate, de-activate, and delete users (as far as applicable).

Oracle Access Manager can be utilized to provide single-sign-on (SSO) and will have to be integrated into the web servers (WebGate plugin).

Oracle Identity Manager can be responsible for user provisioning, containing all the required workflows to manage the user lifecycle (creation, modification, password reset, etc). Required Identity Manager functionality can be exposed via web services. An administrative console allows the administrator to manage the identities.

Oracle Access Manager is responsible for managing the user’s access rights at a URL as well as resource level. The Policy Manager Console allows the administrator to manage access policies. The policy information is propagated to Apache web server plug-ins, controlling authentication (Web Gate) and authorization (Access Gate).

 

SOA Suite install:

http://www.oracle.com/technology/products/soa/soasuite/collateral/downloads.html

SOA Pattern and SCA

One of the best SOA pattern in industry is VETRO Pattern (Validate, Enrich, Transform, Routing, Operate) !.

SCA - Service Component Architecture. Service Component Architecture (SCA) is a set of specifications which describe a model for building applications and systems using a Service-Oriented Architecture.

Apache Tuscany simplifies the task of developing SOA solutions by providing a comprehensive infrastructure for SOA development and management that is based on Service Component Architecture (SCA) standard.

The value proposition of SCA, is to offer the flexibility for true composite applications, flexibly incorporating reusable components in an SOA programming style.

SCA Specification  - http://www.osoa.org/display/Main/Service+Component+Architecture+Specifications

Assembly model, annotation and policy framework are the main specifications.One basic artifact of SCA is the component, which is the unit of construction for SCA.SCA describes the content and linkage of an application in assemblies called composites.