{"id":7699,"date":"2020-08-13T14:33:41","date_gmt":"2020-08-13T14:33:41","guid":{"rendered":"https:\/\/rax-stg-wp-aws.com\/blogs\/restore-sso-and-oid-services-after-a-server-crash\/"},"modified":"2026-11-03T19:28:59","modified_gmt":"2026-11-03T19:28:59","slug":"restore-sso-and-oid-services-after-a-server-crash","status":"publish","type":"blogs","link":"https:\/\/www.rackspace.com\/de\/blogs\/restore-sso-and-oid-services-after-a-server-crash\/","title":{"rendered":"Restore SSO and OID services after a server crash"},"content":{"rendered":"

Introduction<\/strong><\/p>\n

This post describes how to restore single sign-on (SSO) and Oracle Internet Directory (OID) services after a server crash or disk corruption.<\/p>\n

SSO, an authentication process, permits you to enter your username and password once to enable access to multiple applications. Because the process authenticates you for all the applications for which you have rights, the applications don’t issue further prompts when you switch applications during a session.<\/p>\n

\"SSO<\/p>\n

Image Source<\/a> <\/p>\n

Restore OID 10G services and enable SSO after a server crash or disk corruption<\/strong><\/p>\n

Use the following steps to restore the services and enable SSO:<\/p>\n

1. Restore the server<\/strong><\/p>\n

a. Work with your systems team to restart the server.<\/p>\n

b. Make sure `df -h` <\/em>shows the same output as before the server crash.<\/p>\n

c. Ensure that all the Unix users are present.<\/p>\n

d. Add the `ldap`<\/em> server entry in the \/etc\/hosts<\/strong> file.<\/p>\n

2. Restore the OID home<\/strong><\/p>\n

a. Restore the OID home from the last backup. You can use the `tar\/gunzip` <\/em>command to restore the OID binaries.<\/p>\n

b. Copy the last completed `rman` backup for the OID database.<\/p>\n

c. After the restore of OID binaries completes, use the following commands to
\n   prepare the environment file, if the system did not restore it:<\/p>\n

\n        [<user>@servername ~]$ cat <SID>.env
\n        export ORACLE_HOME=\/<LOC>\/product\/infra
\n        export ORACLE_SID=<SID>
\n        export PATH=$ORACLE_HOME\/bin:$ORACLE_HOME\/opmn\/bin:$ORACLE_HOME\/OPatch:$ORACLE_HOME\/jdk\/bin:$PATH
\n        export TNS_ADMIN=<$ORACLE_HOME>\/network\/admin<\/em><\/p>\n

d. Run the following command to source the environment file:<\/p>\n

                                                            [<User>@servername ~]$ . SID.env<\/em><\/p>\n

3. Start the listener service<\/strong><\/p>\n

Run the following command to start the listener:<\/p>\n

                                     [<User>@<Server> ~]$ lsnrctl start <SID><\/em><\/p>\n

4. Restore the OID database<\/strong><\/p>\n

a. <\/strong>Use the following commands to connect to the `rman` prompt:<\/p>\n

  <\/strong>     RMAN> SET DBID 12345;
\n       RMAN> STARTUP NOMOUNT;
\n       RMAN> RESTORE CONTROLFILE FROM “<Backup_Location>\/<Backup_file_name>”;
\n       RMAN> ALTER DATABASE MOUNT;
\n       RMAN> RESTORE DATABASE;
\n       RMAN> RECOVER DATABASE;
\n       RMAN> ALTER DATABASE OPEN RESETLOGS;<\/em><\/p>\n

b. Set the DBID. You can find your DBID in one of the following locations:<\/p>\n

   – The autobackup control file uses the DBID in its file name. Use the `show all`<\/em>
\n     command to display the files. The autobackup naming convention uses the
\n     following format: IIIIIIIIII-YYYYMMDD-QQ<\/p>\n

       – IIIIIIIIII<\/strong>: The DBID.
\n       – YYYYMMDD<\/strong>: The day the backup generated.
\n       – QQ<\/strong>: A hex sequence that starts with 00 and has a maximum value of FF.<\/p>\n

   – The `rman<\/em>` client displays the DBID in any text files that preserve the output from an RMAN session when it starts up and connects to your database,
\n     as shown in the following example:<\/p>\n

        [<User>@<Server> ~]$ rman target \/<\/em><\/p>\n

        Recovery Manager: Release 10.1.0.5.0 – Production<\/em><\/p>\n

        Copyright (c) 1995, 2004, Oracle.  All rights reserved.<\/em><\/p>\n

        connected to target database: <ORACLE_SID>(DBID=134587536)<\/em><\/p>\n

        RMAN><\/em><\/p>\n

5. Start the OID services<\/strong><\/p>\n

In this case, nothing came up other than the OID and HTTP_Server server.<\/p>\n

       [<user>@servername ]$ opmnctl status<\/p>\n

        Processes in Instance: PM***.pmp***1.*****.com
\n        ——————-+——————–+———+———
\n        ias-component   | process-type   |  pid | status
\n        ——————-+——————–+———+———
\n        DSA           | DSA                  |  N\/A      | Down
\n        LogLoader         | logloaderd              |  N\/A      | Down
\n        dcm-daemon     | dcm-daemon          |  N\/A      | Down
\n        OC4J         | OC4J_SECURITY       |  N\/A      | Down
\n        HTTP_Server     | HTTP_Server            | 11738 | Alive
\n        OID            | OID                  | 11758 | Alive<\/p>\n

 <\/p>\n

Possible errors<\/strong><\/p>\n

You might encounter the following errors while performing the preceding steps.<\/p>\n

Connecting LDAP server<\/strong><\/p>\n

You might get the following error while connecting the LDAP server:<\/p>\n

    [<user>@servername ]$ ldapbind -p 389
\n    Cannot connect to the LDAP server
\n    [<user>@servername ]$<\/em><\/p>\n

Use the following command to ping the ldap server, which is reachable:<\/p>\n

    [<user>@servername ]$  ping D**1.***eon.com
\n     PING D**1.***eon.com (<IP ADDRESS>) 56(84) bytes of data.
\n     64 bytes from D**1.***eon.com (<IP ADDRESS>): icmp_seq=1 ttl=126 time=2.48 ms
\n     64 bytes from D**1.***eon.com (<IP ADDRESS>): icmp_seq=2 ttl=126 time=1.63 ms<\/em><\/p>\n

Errors in ssoServer and oidmon logs<\/strong><\/p>\n

While debugging issues, you might see the following errors in log files:<\/p>\n

–ssoServer.log<\/strong>:<\/p>\n

    Mon Mar 09 06:59:25 EDT 2020 [ERROR] Orion Launcher SSO: DB Error. Please make sure the database is available and restart SSO Server<\/em>
\n    oracle.security.sso.server.util.DBException: Empty DB connect string. Could not create DB connection pool
\n    at oracle.security.sso.server.util.DBConnectionPool.init(DBConnectionPool.java:148)<\/em><\/p>\n

–oidmon.log<\/strong>:<\/p>\n

    2020\/03\/11:22:42:53 * oidmon_<SID>.***eon.com:0 *
\n    sgslupsCheckProcess: sigsend to pid 10683 failed, os error = 3
\n    2020\/03\/11:22:42:53 * oidmon__<SID>.***eon.com:0 *
\n    Retry count exceeded for OIDLDAPD instance 1
\n                      Check OIDLDAPD1.log for more details.
\n                      After fixing the problem execute the following command
\n                      oidctl connect=<SID> host=<SID>.***eon.com server=OIDLDAPD inst=1 start<\/em><\/p>\n

\nTry the following steps to address these issues:<\/p>\n

1. Use the following command to check permission for the oidldapd<\/strong> file:<\/p>\n

        [<user>@servername ]$ ls -tlr oidldapd
\n        -rwx–x— 1 root apppo 2743487 Sep 1 2012 oidldapd
\n        [<user>@servername ]$<\/em><\/p>\n

2. Start the oidldapd processes with debug enabled:<\/p>\n

        oidctl connect=<SID> server=oidldapd instance=1 flags=”-p 389 -debug 117440511″ start<\/em><\/p>\n

Errors in the oidldapd01 log<\/strong><\/p>\n

You might then see the following issue in the oidldapd01.log file:<\/p>\n

 2020\/03\/11:22:12:22 * Main:0 * sgslunlListen: Bind failed (port=389), OS error=(13)
\n    2020\/03\/11:22:12:22 * Main:0 * FATAL * main * Dispatcher Process unable to bind to port
\n    2020\/03\/11:22:12:32 * Main:0 * sgslunlListen: Bind failed (port=389), OS error=(13)
\n    2020\/03\/11:22:12:32 * Main:0 * FATAL * main * Dispatcher Process unable to bind to port
\n    2020\/03\/11:22:12:42 * Main:0 * sgslunlListen: Bind failed (port=389), OS error=(13)
\n    2020\/03\/11:22:12:42 * Main:0 * FATAL * main * Dispatcher Process unable to bind to port
\n    2020\/03\/11:22:12:52 * Main:0 * sgslunlListen: Bind failed (port=389), OS error=(13)<\/p>\n

To fix this, run the following command in $ORACLE_HOME\/root.sh<\/strong>:<\/p>\n

 [root@servername ~]# \/u01\/app\/apppo\/product\/infra\/root.sh
\n    Running Oracle 10g root.sh script…<\/em><\/p>\n

    The following environment variables are set as:
\n    ORACLE_OWNER= ap***
\n    ORACLE_HOME= \/u01\/****\/****\/product\/infra<\/em>
\n <\/p>\n

 Enter the full pathname of the local bin directory: [\/usr\/local\/bin]:
\n    The file “dbhome” already exists in \/usr\/local\/bin. Overwrite it? (y\/n)
\n    [n]:
\n    The file “oraenv” already exists in \/usr\/local\/bin. Overwrite it? (y\/n)
\n    [n]:
\n    The file “coraenv” already exists in \/usr\/local\/bin. Overwrite it? (y\/n)
\n    [n]:<\/p>\n

    Entries will be added to the **\/etc\/oratab** file as needed by Database Configuration Assistant when a database is created
\n    Finished running generic part of root.sh script. Now product-specific root actions will be performed.<\/p>\n

    Entering Oracle Internet Directory Root Installation Section<\/p>\n

——<\/p>\n

   OiD Server Installation
\n    Checking LDAP binary file protections
\n    Setting oidmon file protections
\n    Setting oidldapd file protections
\n    Setting oidrepld file protections
\n    Setting oidemdpasswd file protections
\n    Setting remtool file protections
\n    Setting oiddiag file protections
\n    Leaving Oracle Internet Directory Root Installation Section<\/p>\n

—<\/p>\n

After you debug the issue and start the opmn<\/strong> services, they should behave as shown in the following example:<\/p>\n

 [<user>@servername ]$ opmnctl status<\/p>\n

    Processes in Instance: PM***.pmp***1.*****.com
\n    ——————-+——————–+———+———
\n    ias-component      | process-type       |
\n     pid | status
\n    ——————-+——————–+———+———
\n    DSA                     | DSA                           |
\n    N\/A | Down
\n    LogLoader          | logloaderd                 |     N\/A | Down
\n    dcm-daemon     | dcm-daemon             |   31430 | Alive
\n    OC4J                    | OC4J_SECURITY       |
\n    31349 | Alive
\n    HTTP_Server      | HTTP_Server             |   31254 | Alive
\n    OID                      | OID                            |
\n    31271 | Alive
\n <\/p>\n

Conclusion<\/strong>
\nBy implementing the preceding steps, you can follow a systematic approach for debugging and restoring the services in case of SSO\/OID 10G server restore. Further, you also learn to debug various errors while performing the SSO\/OID 10G server restore.<\/p>\n","protected":false},"excerpt":{"rendered":"

Restore SSO and OID services after a server crash<\/p>\n","protected":false},"author":2,"featured_media":7701,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","format":"standard","meta":{"content-type":"","nid":"26479","content_type":"blog","created_by":"10130","authored_on":"2024-01-12T15:33:41+00:00","field_article_industries":"","tag_category":"Technical","field_blog_author_text":"by Abhishek Shukla, Oracle Applications Database Administrator, Rackspace Technology","seo_description":"Learn how to create a Database-as-a-Service (DBaaS) database in Oracle Cloud. Set up DBaaS without physical hardware.\r\n","field_featured_image":"","insights_image":"\/wp-content\/uploads\/2026\/blog_technical_images\/26479-insights_image-oracle-technical-blog-1-insights.jpg","field_partners":"","rxt_platforms":"Oracle","product":"","publisheddate":"2020-08-13T14:33:41","rxt_solutions":"Data Protection, Elastic Engineering for Security","opengraph_tag":"","x_tag":"","teaser_flag":"Technical Blog","seo_titile":"Restore SSO and OID Services after Server Crash | Rackspace","field_topics":"","field_slug":"restore-sso-and-oid-services-after-a-server-crash","footnotes":""},"categories":[178],"tags":[204],"class_list":["post-7699","blogs","type-blogs","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-technical"],"_links":{"self":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs\/7699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs"}],"about":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/types\/blogs"}],"author":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/comments?post=7699"}],"version-history":[{"count":3,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs\/7699\/revisions"}],"predecessor-version":[{"id":9617,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs\/7699\/revisions\/9617"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/media\/7701"}],"wp:attachment":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/media?parent=7699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/categories?post=7699"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/tags?post=7699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}