Technical data

Multiple Single Sign-On Middle Tiers with One Oracle Internet Directory
3-4 Advanced Topologies for Enterprise Deployments
Metadata Repository." When presented with the component list for this installation
type, choose Oracle Internet Directory only.
3. Install the Oracle Application Server infrastructure on the middle tiers
sso1.mydomain.com and sso2.mydomain.com, again choosing the option "Identity
Management and Oracle Application Server Metadata Repository."
4. When presented with the component list for this installation type, choose Oracle
Application Server Single Sign-On only. When the Oracle Universal Installer asks
you to name the directory server associated with these single sign-on instances,
enter oid.mydomain.com.
Configure the Oracle HTTP servers on the single sign-on middle tiers
When a load balancer is placed between the user and the Oracle HTTP Server, the
effective URL of the single sign-on server changes. The Oracle HTTP configuration file
httpd.conf on both single sign-on middle tiers must be modified to reflect this
change. This file can be found at $ORACLE_HOME/Apache/Apache/conf.
1. Add the following lines to the httpd.conf file on sso1.mydomain.com and
sso2mydomain.com:
KeepAlive off
ServerName sso.mydomain.com
Port 80
This step configures the Oracle HTTP servers at the single sign-on middle tiers to
listen at the externally published name, which, in the scenario presented, is
sso.mydomain.com.
2. If you configure the HTTP load balancer to use SSL, configure mod_certheaders on
both sso1.mydomain.com and sso2.mydomain.com. This module enables the
Oracle HTTP Server to treat requests that it receives over HTTP as SSL requests.
The sequence is as follows:
a. In the httpd.conf file on both middle tiers, enter the following line:
LoadModule certheaders_module libexec/mod_certheaders.so
b. If you are using Oracle Application Server Web Cache as a load balancer, enter
the following line:
AddCertHeader HTTPS
If you are using a hardware load balancer, enter the following line:
SimulateHttps on
c. Synchronize system clocks between both middle tiers.
d. Execute the following command to update the Distributed Cluster
Management (DCM) schema with the changes:
$ORACLE_HOME/dcm/bin/dcmctl updateConfig -v -d
Note: The Oracle Application Server installer, by default, assigns
port numbers from a range of numbers. If you want to assign a
different port number to a component, see "Static Port Numbers" in
Oracle Application Server 10g Installation Guide