UCM users cannot reset their passwords!!!

I had an issue that I was trying to avoid, until I worked in a project that needs it. I cannot imagine how Oracle guys missed it, USERS CANNOT RESET THEIR PASSWORDS.

I don't care about how the new UCM has been structured, Users must have the ability to change their passwords. Guys most of the time LDAPS are only used as a repository (it is database) and users are not accessing them, that's beside a lot of customers doesn't have LDAP to work with or integration is not part of the scope.

Do you think this is a minor issue or not an issue at all?

At the end I want to thank Raj from Oracle support for his support.

Active Directory Notes

I was working on integration on Active Directory with Oracle UCM 11g and I have the following notes that may be helpful:

- Change DefaultAuthenticator's Control Flag from REQUIRED to SUFFICIENT

- We are not using Oracle UCM LDAP Providers for integration with Active Directory anymore

- Users mapping between Oracle UCM and Weblogic embedded LDAP is done using JpsUserProvider provider

- In Oracle UCM 11g, you can give default roles and accounts for authenticated users, to do that from Oracle UCM Providers page edit a provider called JpsUserProvider and in Default Network Roles field add the default roles separated with commas, for default accounts use Default Network Accounts field

- Any weblogic ldap user assigned to administrators group, he will have Oracle UCM admin role

Oracle UCM 11g clustered (continued)

I forgot to mention two things about clustering in my previous post.

- After creating a domain on the first physical machine, and you want to transfer the configuration to the other physical machine, do the following:

On the first machine

$ cd /u01/oracle/middleware/user_projects/domains/
$ ../../wlserver_10.3/common/bin/pack.sh -managed=true -domain=my_domain -template=my_domain.jar template_name="my_domain"
$ scp my_domain.jar oracle@node2.mydomain.com:/u01/oracle/middleware/user_projects/domains

on the second machine

$ cd /u01/oracle/middleware/user_projects/domains/
$ ../../wlserver_10.3/common/bin/unpack.sh -domain=my_domain -template=my_domain.jar

Note, when configuring weblogic machine on linux,  it is better to use Unix Machine (you can accept the defualts)

- Now you have UCM clustered on two machines, so what about load balancing? you have several options like using another weblogic instance to do load balancing, but in my case I used apache HTTP server for doing that (this was because I wanted to minimize licenses required)

To do load balancing
- Download weblogic plugin for Apache from http://www.oracle.com/technetwork/middleware/ias/downloads/wls-plugins-096117.html
- Ensure that Apache is up and working on the server
- Extract the plugin in a directory on  your server
- add the following to httpd.conf (I assume here we are installing on linux)

#Weblogic Proxy Plugin
LoadModule weblogic_module /root/wlsplugin/lib/mod_wl.so

#Weblogic Proxy Plugin

SetHandler weblogic-handler
WebLogicCluster node1.mydomain.com:16200,node2.mydomain.com:16200

I hope you will have a good picture about how to accomplish that

Oracle UCM 11g clustered

One of the biggest advantages we got with UCM 11g is that it is being hosted inside Weblogic Application Server. That allows us to create a clustered UCM without big efforts and in my opinion it doesn't need any expert to do that.

I think most of you guys remember clustering with UCM 10g, it was really silly :)

In next lines I will explain to you how to do that, but I will assume that you installed Weblogic Server 10.3.3,  Oracle ECM 11g, and middleware home is "/u01/oracle/middleware":

- $ cd /u01/oracle/middleware/Oracle_ECM1/common/bin
- $ ./config.sh

- Create new weblogic domain (or use an existing one if you have)



- Configure domain to support UCM, IBR, and Site Studio



- Name the new domain in this case I named it for demonstration my_domain



- Add the Weblogic admin password



- Choose Production environment



- Configure database connection information, if you are using Oracle database 11gR2 you will gain major feature which using one host name (scan name) and DNS will automatically will take care of load balancing and failover for RAC nodes.



- Next choose the following to configure clustered nodes for UCM and IBR



- Accept the default for the admin server



- In the managed servers page, you will have by default UCM_server1 and IBR_server1, we will add two other managed servers UCM_server2 and IBR_server2



- Next will create two clusters one for UCM and one for IBR



- Under UCM cluster we will add UCM managed servers and under IBR cluster we ill add IBR managed servers



- Next will add two Machines representing two physical machines, and they responsible for communicating with Node Managers on the two nodes we have here



- Add the managed servers and admin server to the Weblogic machines



- Next we can see the UCM cluster is automatically configured to support the required libraries and applications



- JDBC and the other required services is configured automatically



- At the end accept the configurations and you will have a ready UCM cluster on two nodes

The remaining part here is to have a shared storage like SAN for storing vault and weblayout repoistories, in this case also you need to have OS file system cluster. On linux you can use Oracle File System Cluster for doing that.