Installation and Upgrade Guides › Policy Server Installation Guide › Configuring SiteMinder Data Stores in a Relational Database › Configure an Oracle Policy Store

Configure an Oracle Policy Store

A single Oracle database can function as a:

• policy store
• key store
• logging database

Using a single database simplifies administrative tasks. The following sections provide instruction on how to configure a single database server to store SiteMinder data.

You can configure an Oracle policy store manually or use the Policy Server installer to configure the policy store automatically.

Prerequisites for an Oracle 10g Database

After installing the Oracle 10g database, complete the following prerequisites:

• Create a table space for the policy store.
• Create a user with appropriate privileges to manage this table space in the database.

Create an Oracle 10g Table Space for the Policy Store

Creating a table space for the policy store is a prerequisite for an Oracle 10g database only.

To create an Oracle 10g table space for the policy store

1. In the Oracle Enterprise Manager 10g Database Control, log in as the SYSDBA user with appropriate privileges to manage the Oracle database.
2. On the Oracle global database’s configuration screen, select Administration, Tablespaces.
3. On the Tablespaces screen, click Create.
4. On the Create Tablespaces screen, enter a table space name, and click ADD.

   Example: NETE_TB

5. On the Create Tablespaces: Add Datafile screen:
   1. Enter a file name.

      Example: NETE_TB

   2. Specify the file size.

      Example: 100 MB

   3. Click Continue.

   Oracle creates the table space and displays it on the Tablespaces screen.

Complete the prerequisites by creating a user to manage the table space for the policy store.

More Information:

Create an Oracle 10g User to Manage the Policy Store’s Table Space

Create an Oracle 10g User to Manage the Policy Store’s Table Space

Creating a user to manage table space for the policy store is a prerequisite for an Oracle 10g database only.

To create a user to manage table space for the policy store

1. On the Oracle global database’s configuration screen, select Administration, Users.
2. On the Create Tablespaces screen, click Create.
3. On the Create User screen, enter the:
   • Name for the user.

     Example: NETE

   • Password for the user.
   • Default Tablespace that you created.
   • Temporary tablespace.

     Example: TEMP

4. Click Roles.
5. Select Modify.
6. On the Modify Roles screen:
   1. Select CONNECT and RESOURCE as a roles for this user.
   2. Click Apply.
7. Start sqlplus in a command window, by entering:
   1. sqlplus
   2. the credentials for the policy store user created on the Create User screen.

   You have completed the prerequisites for an Oracle 10g database, and can now configure a SiteMinder data store for the database.

Gather Database Information

Configuring a single Oracle database to function as a policy store or any other type of SiteMinder data store requires specific database information.

Information prefixed with (U) indicates that the information is only required if the Policy Server is installed on a UNIX system. This information is required when configuring Oracle data source for UNIX.

Note: Policy and data store worksheets are provided to help you gather and record information before configuring or upgrading a SiteMinder data store. You can print the applicable worksheet and can use it to record required information before beginning.

More information:

Oracle Information Worksheet

Oracle RAC Information Worksheet

Required Information

Gather the following required information before configuring a supported Oracle or Oracle RAC database as a policy store or any other type of SiteMinder data store:

• (U) Policy Server installation path—Identify the explicit path to where the Policy Server is installed.
• Data source—Determine the name you will use to identify the Oracle data source.

  Example: SM Oracle Server Wire DS.

• Database administrative account—Determine the user name of an account with privileges to create, read, modify, and delete objects in the database.

  Note: Ensure the administrative account does not have the DB role. Audit-based reports will not return correct results if the administrative account has the DB role.

• Database administrative Password—Determine the password for the Administrative account.

Oracle Database Information

Gather the following information only if you are configuring a supported Oracle database as a policy store or any other type of SiteMinder data store:

• Oracle machine name—Determine the name of the machine on which the Oracle database is installed.
• Oracle instance service name—Determine the service name of the database instance to which you will connect. The tnsnames.ora file specifies service names.
• Oracle port number—Determine the port number on which the Oracle database is listening.

Oracle RAC Database Information

Gather the following information only if you are configuring a supported Oracle RAC database as a policy store or any other SiteMinder data store:

• Oracle RAC system service name—Determine the service name for the entire system.

  Example: In the following tnsnames.ora file, SMDB is the service name for the entire system:

  SMDB=
  (Description =
  (ADDRESS = PROTOCOL = TCP)(HOST = nete_servername1)(PORT=1521
  (ADDRESS = PROTOCOL = TCP)(HOST = nete_servername2)(PORT=1521)
  (ADDRESS = PROTOCOL = TCP)(HOST = nete_servername3)(PORT=1521))
  (LOAD_BALANCE = yes)
  (CONNECT_DATA=
  (SERVER = DEDICATED)
  (SERVER_NAME = SMDB))
  )
  

• Oracle RAC node service names—Determine the service names for each node in the system.
• Oracle RAC node IP addresses—Determine the IP Address of each node in the Oracle RAC system.

  Note: If you are using Oracle RAC 10g, determine the virtual IP address of each node in the system.

• Oracle RAC node port numbers—Determine the port number for each node in the Oracle RAC system.