« July 2007 | Main | October 2007 »

August 28, 2007

Archiving Oracle Applications

Archiving Oracle Applications

In my current post i will be touching upon one of the least talked about but extremely vital topic of data archiving in Oracle Applications. This post will talk about the need to archive and the pit falls of not archiving a production environment.
We will also briefly touch upon the various methods available to implement a effective archival policy for oracle applications.

Why Archive?
After an implementation of Oracle Application which has been around from some years, you would see a substantial growth in the database size.
As your Oracle Application continues to grow and upgrade the database also grows with it. A lot of data which resides in this database would no longer be needed to be updated and a significat amount of this data would rarely be used for any kind of Reporting. Nevertheless we cannot simply go ahead and purge or trash this data for obvious compliance and regulatory reasons. Another added advantage of archiving is that you can implement data masking in your non production environment while in the process of archiving, this reduces the risks from exposing your production data after subsequent clones.

There are many challenges associated with a large growing database like

  • Increase in storage costs.
  • Decrease in system responsiveness.
  • Increase in times taken to complete cloning cycles.
  • Increase in recovery times in cases of system failures.


What to archive ?
This is the most difficult when it came to implement an archive policy. Fortunately most of the archive solutions available in the market came with an out of box solution for Oracle Applications which made sure to preserve the referential integrity of the data. since data in an application is in its normalized form its important to ensure that the archived data is valid enough to be reported from when required. To ensure this a meta data repository is bundled along with the solution which  defines the rules for archiving and the associated constraints.

Archiving Options
when it came to archiving options available with the ebusiness suite. these were quite a few of them available. Most of these solutions adopted a similar approach to archiving.
After going through the popular ones solutions available i can categorize them in the following groups.

  • Proprietary File Type Based Solutions.
  • Archive Database Based Solutions.

Proprietary File Type Based Solutions
Under these kinds of archiving solution the data is archived from Oracle Applications and stored in a flat file system which is generally in a proprietary format. The main and the biggest advantage of adopting such kind of the solution is that the  need to maintain a large database is reduced. Also the archived data in the file system can be further compressed further to  
shrink the size.
The major disadvantage of this approach is that you loose the capacity to do a seemless reporting from within your application. That is in order to be able to report from your archived data you would need to be depended on the proprietary reporting tool, rather than being able to do so from with oracle applications.

Archive Database  Solutions
In the archive database based solutions, the archived data is stored in a separate database as opposed to a file system. This archive database could reside on a low cost second tire storage system. The main advantage in this structure is that you have  the ability to a get to your archive data from within the application itself, in other words you do not need any third party  
tools to access your data.
One of the disadvantages of this approach is that, this would result in atleast one more database to maintain apart from the production system despite of the fact that this database would be on a lost cost second tier storage.

Limitations.
One of the main limitations that most of these archiving solutions had that, although most of them were able to archive the data from your application they failed to do a database reorg.
After the archiving cycle the database would need to be reorged manually to reclaim the space and see an increase in the  system performance.
Also in the even of applications upgrade when the structure of your database tables changed the process of propagating the changes in the archives, though available was a complex process.

August 10, 2007

Implementing SSL for Discoverer 10g

Implementing SSL for Discoverer 10g

One of the things that you would require to do after an SSL implementation in Oracle Applications is to implement SSL in your Discoverer instance as well.
To use discoverer with Oracle Applications, you must integrate discoverer 10g wihch comes bundled with the 10 g application server.

Middle Tier SSL Only
As mentioned in my earlier posts the 10 application server comes with the infrastructure Tier and middle tier products. The  discoverer is a part of the middle tier products. While implementing SSL with Discoverer it is not required to implement SSL on the infrastructure also. Its sufficient to have SSL implementation in your middle tier.in other word infrastructure SSL is
optional.

Current Architecture
Oracle Applications 11.5.10.2 with SSL
Oracle Applications Server 10g
Oracle Discoverer 10g Integrated With Oracle Applications
Operating System Sun Solaris 5.8 64 bit

Oracle Wallet and Certificate Provisioning
To implement the SSL on the middle tier we would need an Oracle Wallet. You have the option to use the default wallet or  create your own wallet. Here we choose to create a new wallet.

To implement SSL for the discoverer you can either provision new certificates or you can use the certificates from our Oracle  Applications instance.
In the current scenario we will be using the existing certificate from the Oracle Applications.

Set you environment to the 10g middle tier
export ORACLE_HOME=/d01/sam/Mid10g
export PATH=$ORACLE_HOME/bin:$PATH
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$ORACLE_HOME/lib

Create a wallet dir in your ORACLE_HOME
cd $ORACLE_HOME
mkdir wallet

Copy Certificate from your Oracle Applications
Copy the following cert files from your application tier to your wallet directory (in my case it was a same server you might have to do a binary FTP)
cp $COMMON_TOP/admin/certs/apache/certs/apache/ssl.crt/server.crt /d01/sam/Mid10g/wallet/
cp $COMMON_TOP/admin/certs/apache/certs/apache/ssl.crt/ca.crt /d01/sam/Mid10g/wallet/
cp $COMMON_TOP/admin/certs/apache/certs/apache/ssl.crt/server.key /d01/sam/Mid10g/wallet/

Convert Certificates
Execute the follwoing from the wallet directory to convert the certificates
$ORACLE_HOME/Apache/Apache/bin/ssl2ossl -cert ./server.crt -key ./server.key -cafile ./ca.crt -wallet . -ssowallet yes

This will create two new files in your wallet
-rw-r--r--   1 sammid  dba         6697 Aug  6 10:57 ewallet.p12
-rw-------   1 sammid  dba         7441 Aug  6 10:57 cwallet.sso

Run SSL Config
Run the SSL config tool to configure SSL for your middle tier discoverer

SSLConfigTool -config_w_default -secure_admin -opwd <orcladmin password> -ptl_inv_pwd <password>

ssl.conf Change
You must set the Listen and Port directives manually to be the same as this does not get updated as a part of the SSLConfigTool.

Update the repository for DCM
Update the distributed cluster repository using
$ORACLE_HOME/dcm/bin/dcmctl updateConfig -v -d

Set up Secure Tunneling Communication
Log on to the Enterprise Manager IAS Console and navigate to
Server->Discoverer->Discoverer Plus->Communication Protocol and choose 'Secure Tunneling' option.



Oracle Applications Profile Options.
Make sure the following profile options in Oracle Application reffer to the correct port and protocol (HTTPS)
ICX_DISCOVERER_LAUNCHER
ICX_DISCOVERER_VIEWER_LAUNCHER
ICX_DISCOVERER_PARAMETERS

August 02, 2007

A Year Old Today - Thank You

A Year Old Today - Thank You




The AppsDbaBlog is a year old today. Would like to take this opprutunity to thank my readers whose comments have been the single most important factor to keep this site up and running.

When i start out this blog a year and 75 posts ago i of course did not realize it would be have such a long and exciting journey. A journey during which i met many new bloggers and made some kool friends.
All thought out this time i am glad that i was able to keep the promises i made of keeping the blog simple clean and advert free.

Also would like to Steven and the Oracle Blogs team for linking up the AppsDbaBlog.

So keep your comments coming and i promise to keep posting whatever I find exciting interesting or new (and of course somethings weird) in the Oracle Applications DBA world.

A Big Thank You & Cheers!!

Sam