Introduction to the Maximum High Availability Identity Management Deployment Overview of Replication

10 Configuring Identity Management for Maximum High Availability 10-1 10 Configuring Identity Management for Maximum High Availability This chapter provides high-level instructions for setting up a maximum high availability deployment for Oracle Identity Management. This deployment includes two sites in different geographic locations. This is an active-active deployment where both sites are active at the same time when the deployment is functioning normally. If one site fails, the surviving site continues to function. Each site includes a two-node Oracle Internet Directory cluster configuration, which provides high availability for Oracle Internet Directory. The Oracle Internet Directory cluster configuration at each site uses an Oracle Real Applications Cluster Oracle RAC database as the security store, which provides high availability for the database. Chapter 8, Configuring High Availability for Identity Management Components provides an introduction to the high availability Oracle Internet Directory cluster configurations. Multimaster replication is used to replicate data from the master site to the replica site. This chapter includes the following topics: ■ Section 10.1, Introduction to the Maximum High Availability Identity Management Deployment ■ Section 10.2, Overview of Replication ■ Section 10.3, Setting up Multimaster Replication

10.1 Introduction to the Maximum High Availability Identity Management Deployment

Figure 10–1 shows the maximum high availability deployment for Oracle Identity Management. 10-2 Oracle Fusion Middleware High Availability Guide Figure 10–1 Maximum High Availability Multimaster Replication Deployment The master site is located in New York and the replica site is located in Los Angeles. Each site includes a highly available two-node Oracle Internet Directory cluster configuration that uses an Oracle RAC database as a highly available security store. Each two-node cluster has a load balancer. See Section 8.3.3, Oracle Internet Directory High Availability Configuration Steps for information on setting up a two-node Oracle Internet Directory cluster. The master site in New York consists of: ■ OIDHOST1 and OIDHOST2 These are the two clustered hosts on which Oracle Internet Directory is installed. ■ RAC_DB1 This is the Oracle RAC database which serves as the security store for the Oracle Internet Directory instances on OIDHOST1 and OIDHOST2. Multimaster replication is used to replicate data between RAC_DB1 in New York and RAC_ DB2 in Los Angeles. The replica site in Los Angeles consists of: ■ OIDHOST3 and OIDHOST4 These are the two clustered hosts on which Oracle Internet Directory is installed. ■ RAC_DB2 This is the Oracle RAC database which serves as the security store for the Oracle Internet Directory instances on OIDHOST3 and OIDHOST4. Multimaster OIDHOST1 OIDHOST2 RAC_DB1 Cluster OID OID New York Load Balancer OIDHOST3 OIDHOST4 RAC_DB2 Cluster OID OID Los Angeles Load Balancer Multimaster Replication Configuring Identity Management for Maximum High Availability 10-3 replication is used to replicate data between RAC_DB1 in New York and RAC_ DB2 in Los Angeles.

10.2 Overview of Replication

The following types of replication are available for Oracle Internet Directory: ■ LDAP multimaster replication Uses the industry-standard Lightweight Directory Access Protocol Version 3 as the replication transport mechanism. This is the recommended protocol to use for replication. ■ Oracle Advanced Database multimaster replication Uses the replication feature of Oracle Database. This is also called Advanced Replication. ■ Two-way fan-out replication With this replication method, the replicated data is readwrite at both the master site and replica site. Fan-out uses LDAP as its transport mechanism. ■ One-way fan-out replication With this replication method, the replicated data is read-only at the replica site. Fan-out uses LDAP as its transport mechanism. For more information about the replication types for Oracle Internet Directory, refer to Oracle Fusion Middleware Administrator’s Guide for Oracle Internet Directory. For the maximum availability deployment shown in Figure 10–1 , either LDAP or Oracle Advanced Database multimaster replication can be set up.

10.3 Setting up Multimaster Replication