Reassociating the Policy and Credential Store

10-4 Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management

10.3.2 Reassociating the Policy and Credential Store

To reassociate the policy and credential store with Oracle Internet Directory, use the WLST reassociateSecurityStore command. Follow these steps:

1. From IDMHOST1, start the wlst shell from the ORACLE_COMMON_

HOME commonbin directory. For example, on Linux and UNIX-based systems, you would type: .wlst.sh On Windows you would type: .wlst.cmd

2. Connect to the WebLogic Administration Server using the following wlst

connect command. connectAdminUser,AdminUserPassword,t3:hostname:port For example: connectweblogic,admin_password,t3:ADMINVHN.mycompany.com:7001

3. Run the reassociateSecurityStore command as follows:

Syntax: reassociateSecurityStoredomain=domainName,admin=cn=orcladmin, password=orclPassword,ldapurl=ldap:LDAPHOST:LDAPPORT,servertype=OID, jpsroot=cn=jpsRootContainer For example: wls:IDMDomainserverConfig reassociateSecurityStoredomain=IDMDomain, admin=cn=orcladmin,password=password, ldapurl=ldap:policystore.mycompany.com:389,servertype=OID, jpsroot=cn=jpsroot The output for the command is as follows: {servertype=OID, jpsroot=cn=jpsroot, admin=cn=orcladmin, domain=IDMDomain, ldapurl=ldap:policystore.mycompany.com:389, password=password} Location changed to domainRuntime tree. This is a read-only tree with DomainMBean as the root. For more help, use helpdomainRuntime Starting policy store reassociation. The store and ServiceConfigurator setup done. Schema is seeded into the store Data is migrated to the store See Also: Oracle Fusion Middleware Integration Overview for Oracle Identity Management Suite for more information about the idmConfigTool command. Note: The admin value is the DN of the LDAP administrator, that is, the user that has administrative level privileges to the Oracle Internet Directory instance that is used as the Policy Store. Preparing Identity and Policy Stores 10-5 Data in the store after migration has been tested to be available Update of in-memory jps configuration is done Policy store reassociation done. Starting credential store reassociation The store and ServiceConfigurator setup done. Schema is seeded into the store Data is migrated to the store Data in the store after migration has been tested to be available Update of in-memory jps configuration is done Credential store reassociation done Starting Keystore reassociation The store and ServiceConfigurator setup done. Schema is seeded into the store Data is migrated to the store Data in the store after migration has been tested to be available Update of in-memory jps configuration is done Keystore reassociation done Jps Configuration has been changed. Please restart the application server. 4. Restart the WebLogic Administration Server, as described in Section 20.1, Starting and Stopping Oracle Identity Management Components, after the command completes successfully.

10.4 Preparing the Identity Store