Click Save. Authorization Policy Manager High Availability

8-204 Oracle Fusion Middleware High Availability Guide Configure server migration by following these steps: a. Log into the Administration Console.

b. In the left pane, expand Environment and select Servers.

c. Select the server represented as a hyperlink for which you want to configure migration. The Settings page for that server appears. d. Click the Migration tab. e. In the Available field, in the Migration Configuration section, select the machines to which to allow migration and click the right arrow.

f. Select the Automatic Server Migration Enabled option. This enables the Node

Manager to start a failed server on the target node automatically.

g. Click Save.

h. Restart the Administration Server, managed servers, and Node Manager. 16. Test server migration for this new server. Follow these steps from the node where you added the new server: a. Stop the WLS_SOAn managed server. To do this, run kill -9 pid on the PID of the managed server. You can identify the PID of the node using ps -ef | grep WLS_SOAn. b. Watch the Node Manager Console: you should see a message indicating that WLS_SOA1s floating IP has been disabled. c. Wait for the Node Manager to try a second restart of WLS_SOAn. Node Manager waits for a fence period of 30 seconds before trying this restart. d. Once Node Manager restarts the server, stop it again. Now Node Manager should log a message indicating that the server will not be restarted again locally.

8.10 Authorization Policy Manager High Availability

This section provides an introduction to Authorization Policy Manager 11gR1 and describes how to design and deploy a high availability environment for Authorization Policy Manager. To use Authorization Policy Manager in a high availability active-passive Cold Failover Cluster, follow the instructions for setting up WebLogic Server in an Note: Since this new node is using an existing shared storage installation, the node is already using a Node Manager and environment configured for server migration that includes netmask, interface, wlsifconfig script superuser privileges. The floating IP for the new SOA managed server is already present in the new node. Note: Specify the least-loaded machine as the migration target for the new server. The required capacity planning must be completed so that this node has enough available resources to sustain an additional managed server. Configuring High Availability for Identity Management Components 8-205 active-passive Cold Failover Cluster in Section 12.2.2.3, Transforming the Administration Server for Cold Failover Cluster. Authorization Policy Manager is not used in high availability active-active deployments because it is deployed to the WebLogic Administration Server JVM. Authorization Policy Manager is a graphical interface tool for administering application policies. The intended users of Authorization Policy Manager are security administrators. With this tool, an administrator can view and manage policies across enterprise applications. Administrators can be specified to manage all applications running in the domain or just a subset of them. Authorization Policy Manager requires that: ■ The domain policy store be LDAP-based; the supported policy store is Oracle Internet Directory. ■ The domain identity store be LDAP-based; the supported identity store types are Oracle Internet Directory, Oracle Virtual Directory, Oracle WebLogic Server Embedded LDAP, Sun Java System Directory Service version 6.3, Active Directory 2003 and 2008, Novell eDirectory 8.8, and OpenLDAP 2.2 and 2.4. ■ Two particular data sources be set: mds-ApplicationMDSDB and apm-DBDS. These data sources can be configured with the WebLogic Console under JDBC Data Sources . For more information about using Authorization Policy Manager, see Oracle Fusion Middleware Authorization Policy Manager Administrators Guide.

8.11 Oracle Identity Navigator High Availability