Moving from Off-Network to On-Network DHCP

Changing Network Configurations 15-13 UNIX ORACLE_HOMEsysmanemd Windows ORACLE_HOME\sysman\emd Open the file and find the target type oracle_sso_server. Within this target type, locate and edit the three attributes that you passed to ssocfg: – HTTPMachine: The HTTP server host name – HTTPPort: The SSL port number of the Oracle HTTP server – HTTPProtocol: The server protocol c. Add the lines that follow to the httpd.conf file on the single sign-on middle tier. The file is in the directory ORACLE_HOMEApacheApacheconf. These lines change the directive ServerName from the name of the actual server to the name of the proxy: KeepAlive off ServerName proxy_host_name Port proxy_port Note that if you are using SSL, the port must be an SSL port such as 4443. d. SSL only If you have configured SSL communication between just the browser and the proxy server, configure mod_certheaders on the middle tier. This module enables the Oracle HTTP Server to treat HTTP proxy requests that it receives as SSL requests. Add the lines that follow to httpd.conf. You can place them at the end of the file; where they appear is unimportant. Enter this line to load the module: UNIX LoadModule certheaders_module libexecmod_certheaders.so Windows LoadModule certheaders_module modulesApacheModuleCertHeaders.dll If you are using Oracle Web Cache as a proxy, enter this line: AddCertHeader HTTPS If you are using a proxy other than Oracle Web Cache, enter this line: SimulateHttps on e. Reregister mod_osso on the single sign-on middle tier. This step configures mod_osso to use the proxy host name instead of the actual host name. For example, on Linux: ORACLE_HOMEssobinssoreg.sh -oracle_home_path ORACLE_HOME -site_name example.mydomain.com -config_mod_osso TRUE -mod_osso_url http:example.mydomain.com f. Update the Distributed Configuration Management schema: ORACLE_HOMEdcmbindcmctl updateconfig g. Restart the single sign-on middle tier: ORACLE_INSTANCEopmnbinopmnctl restartproc process-type=HTTP_Server ORACLE_INSTANCEopmnbinopmnctl restartproc process-type=OC4J_SECURITY h. Log in to the single sign-on server, using the single sign-on login URL: http:proxy_host_name:proxy_portsso