DMZ setup on Oracle EBS R12

Creating an External Web Tier for E-Business Suite

Oracle E-Business Suite R12 Configuration in a DMZ (Doc ID 380490.1)

Clone the internal web tier to create a new external web tier
Pre-Clone Steps on Internal Server

- Run adpreclone.pl

As Database node :

cd $ORACLE_HOME/appsutil/scripts/DEV_Hostname

perl adpreclone.pl dbTier

As Application Node :

cd $ADMIN_SCRIPTS_HOME

perl adpreclone.pl appsTier

Take a backup of application mount point.

Restore the Backup into external server node.

Setup Host File:

Put the following entries in the Hosts File (/etc/hosts)

IP Addressh yourhostname

IP Addressh yourhostname

Change the owner Ship of /finerp/FINDEV folder and the file under it to apps

cd /dev

chown �R appdev:dba findev

Creating External Web Tier

Note: Your steps should be more

Create XML file for External Server:

su � appdev
cd �--/apps/apps_st/comn/clone/bin

perl adclonectx.pl
contextfile=---------------/inst/apps/dev_hostname/appl/admin/dev_hostname.xml

Enter the APPS password:

Target System Hostname (virtual or normal) [hostname]:

Do you want the inputs to be validated (y/n) [n]? :

Target System Database SID: dev

Target System Database Server Node [hostname]: extrenalhostname

Target System Base Directory: /dev/oradev/dev

Target System Forms ORACLE_HOME Directory [/dev/oradev/dev/apps/tech_st/10.1.2]:

Target System Web ORACLE_HOME Directory [/dev/oradev/dev/apps/tech_st/10.1.3]:

Target System APPL_TOP Mountpoint [/dev/oradev/dev/apps/apps_st/appl]:

Target System COMMON_TOP Directory [/dev/oradev/dev/apps/apps_st/comn]:

Target System Instance Home Directory [/dev/oradev/dev/inst]:

Username for the Applications File System Owner [appldev]:

Group for the Applications File System Owner [dba]:

Target System Root Service [enabled]:

Target System Web Entry Point Services [enabled]:

Target System Web Application Services [enabled]:

Target System Batch Processing Services [disabled]:

Target System Other Services [disabled]:

Do you want to preserve the Display [hostname:0.0] (y/n)? : n

Target System Display [extrenalhostname:0.0]:

Do you want the the target system to have the same port values as the source system
(y/n) [y]? : n

Target System Port Pool [0-99]: 1

Choose a value which will be set as APPLPTMP value on the target node [1]: 2

New context path and file name

[/dev/oradev/dev/inst/apps/dev_extrnalhost/appl/admin/dev_extrnalhost.xml]:

Cross Check if the Context File generated is correct or not, check with following
command if the respective components are enabled on extrenal hostname :
grep �i status $CONTEXT_FILE

Run adpreclone.pl to add the extrnal server as a node to dev:

su - appldev

cd /dev/appldev/dev/apps/apps_st/comn/clone/bin

perl adcfgclone.pl appsTier

/dev/appldev/dev/inst/apps/dev_extrnalhost/appl/admin/dev_extrnalhost.xml

Enter the APPS password:

Check the logfile for any error.

CONTEXT_FILE configuration:

Modify the following CONTEXT_FILE parameters:

Context File Variable

Existing Value

New Value

s_applcsf

/dev/appldev/dev/inst/apps/dev_extrnalhost/logs/appl/conc

/dev/appldev/dev/conc

s_appltmp

/dev/appldev/dev/inst/apps/dev_extrnalhost/temp

/dev_appltmp

s_applptmp

/dev/appldev/dev/inst/apps/dev_extrnalhost/ptemp

/dev_applptmp

s_formshost
extrnalhost

dev

s_chronosURL

http://extrnalhost.externalhost.com:8001/oracle_smp_chronos/oracle_smp_chronos_sdk.
gif

http://dev.externalhost.com:8001/oracle_smp_chronos/oracle_smp_chronos_sdk.gif

s_external_url

http://extrnalhost.externalhost.com:8001

http://dev.externalhost.com:8001

s_webentryhost

extrnalhost

dev

s_login_page

http://extrnalhost.externalhost.com:8001/OA_HTML/AppsLogin

http://dev.externalhost.com:8001/OA_HTML/AppsLogin

Run AutoConfig on all the Nodes.

Configuring extrnalhost for DMZ

Run the script txkChangeProfH.sql for the Profile option setup:

# Internal Node..

$ su � appldev

$ sqlplus apps/password
Update Hierarchy Type

@$FND_TOP/patch/115/sql/txkChangeProfH.sql SERVRESP

Run AutoConfig on all nodes.

Update Node Trust Level

To change the value of the Node Trust Level profile option value to External for a
particular node, perform the following steps:

1. Login to Oracle E-Bsonapness Suite as sysadmin user sonapng the internal URL

2. Select the System Administrator Responsibility

3. Select Profile / System

4. From the 'Find system profile option Values' window, select the server and get
the valie extrnalhost into it.

5. Query for %NODE%TRUST%. You will see a profile option named 'Node Trust Level'.
The value for this profile option at the site level will be Normal. Leave this
setting unchanged.

6. Set the value of this profile option to External at the server level. The site
level value should remain set to Normal

Update List of Responsibility

To change the value of the Responsibility Trust Level profile option at the
responsibility level for a particular responsibility, perform the following steps:

7. Login to Oracle E-Bsonapness Suite as sysadmin user sonapng the internal URL

8. Select System Administrator Responsibility

9. Select Profile / System

10. From the 'Find system profile option Values' window, select the responsibility
that you want to make available to users logging in via the external web tier

11. Query for %RESP%TRUST%. You will see a profile option named 'Responsibility
trust level'. The value for this profile option at site level will be Normal.
Leave this setting unchanged.

12. Set the value of this profile option for the chosen responsibility to External
at the responsibility level. The site-level value should remain Normal.

13. Repeat for all responsibilities that you want to make available from the
external web tier.

List of Responsibilities which can be enabled on External Server is as followed:

Product Name

Externally Accessible Responsibilites

Additional Profile Options

iSupplier

Do this as per your requirment

POS: External URL

POS: Internal URL

Oracle Sourcing

Sourcing Supplier

PON: External Applications Framework Agent

PON: External login URL

Oracle iProcurement

Self Registered Employee Default Responsibility

Self Registered New User Default Responsibility

q Enable Oracle E-Business Suite Application Server Security

1. Set the value of Application Server Security Authentication

(s_appserverid_authentication) to SECURE, in the CONTEXT_FILE on all the nodes.

2. Run AutoConfig on each Applications middle tier to complete the configuration.

3. After AutoConfig completes successfully, restart Oracle HTTP Server and OC4J
processe

Run Autoconfig

Run AutoConfig from ADMIN_SCRIPTS_HOME.

Internal Node and Extrenal node.

After start the service and check..