Re: SSO/OID in a 9i RAC Environment?

From: Mort <toftnews_at_yahoo.ie>
Date: Sat, 21 Jun 2003 22:33:29 +0100
Message-ID: <Da4Ja.19472$pK2.27986@news.indigo.ie>

Jitendra Patel wrote:

>>We are in the planning stages for a 9i AS deployment and are looking
>>for feedback regarding running the SSO/OID pieces in a 9i RAC
>>environment.  Is this configuration supported?

>
>
> Do you mean running the infrastructure instance on RAC, or the
> back-end database on RAC?
>
> If you mean the infra instance, there is no reason why you could not
> use RAC, especially because an OID or SSO failure stops the whole
> Oracle9iAS.

Hi again,

Btw. in relation to running the OID repository in a RAC environment, I'm not sure whether it is supported. However, the shortcomings of the OID kind of defies the purpose of RAC anyway. As is stated in the Oracle Internet Directory 9.0.2.1.0 Release Notes document:

4.4 Running Multiple Instances of the Directory Server You can now run multiple instances of the directory server on the same computer, each in its own distinct ORACLE_HOME directory. For example, one instance might be running in SSL mode while the other may be running in non-SSL mode (although with Oracle Internet Directory Release 9.0.2.1.0, separate instances are not necessary to do this). If you are using the Oracle Internet Directory server software (binaries) on a
computer other than the one where your database binaries are located, then all directory server instances using a given database instance must be co-located.
For example, running a directory server instance on Computer A and another on Computer B, both using a common SID defined on Computer C is not supported. However, running two distinct directory server instances on Computer A against a database on Computer B is supported. Configurations as described above require two separate installations of the complete Oracle Internet Directory component on both the intended "LDAP server" computer and the "database" computer. On the LDAP server machine, the database installed with it is never used and, after installation,
may be safely removed. On the database machine, the LDAP server binaries are never used and, after installation, may also be safely removed.

So, basically you may ONLY have ALL the OID processes (oidmon and oidldapd) running from the ONE system (although the OID repository database can run from another) - it's not supported to spread OID processes across multiple systems. So basically there's no support for HA.

In relation to SSO, I haven't tried it - but you may be able to deploy the SSO component in two separate IAS instances - but again, because of the HA shortcomings of OID, this is probably not worth the effort.

Hope this helps answering your questions.

Best regards,

Mort Received on Sat Jun 21 2003 - 16:33:29 CDT