2009/02/09

Unsecure AS Control

OAS 10.1.2.0.2

1. Stop the AS Control

$ emctl stop iasconsole
2. Update AS Control's standalone OC4J container to support unsecure port in $ORACLE_HOME/sysman/j2ee/config/emd-web-site.xml.

Change the following line:

<web-site host="ALL" port="<port>" display-name="Oracle Enterprise Manager iAS Console Website" secure="true">

Into:

<web-site host="ALL" port="<port>" display-name="Oracle Enterprise Manager iAS Console Website" secure="false">

3. In the same file (emd-web-site.xml), you also need to modify the ssl-config section at the bottom of the file.

Change the following line:

<ssl-config needs-client-auth="true" keystore="server/keystore.test" keystore-password="%EMD_KEYSTORE_PASSWORD%" />

Into:

<ssl-config needs-client-auth="false" keystore="server/keystore.test" keystore-password="%EMD_KEYSTORE_PASSWORD%" />

4. Update AS Control Local Management Agent to support the unsecure HTTP protocol.
The EMD_URL property in $ORACLE_HOME/sysman/config/emd.properties needs to get switched back to the HTTP (non-secure) protocol.

Change:

EMD_URL=https://<hostname>:<port>/emd/main

Into:

EMD_URL=http://<hostname>:<port>/emd/main

5. Update the standAloneConsoleURL property of oracle_ias target. Edit the file $ORACLE_HOME/sysman/emd/targets.xml to change the StandaloneConsoleURL property of oracle_ias target to switch back to the HTTP (non-secure) protocol.

Change the following lines:

<Target TYPE="oracle_ias" NAME="EnterpriseManager.<hostname>" ...> ... <Property NAME="StandaloneConsoleURL" VALUE="https://<hostname>:<port>/emd/console"/>

Into:

<Target TYPE="oracle_ias" NAME="EnterpriseManager.<hostname>" ...> ... <Property NAME="StandaloneConsoleURL" VALUE="http://<hostname>:<port>/emd/console"/>

6. Start the AS Control Application:

$ emctl start iasconsole

No comments: