How to Remove an OID Realm (Doc ID 604884.1)

Last updated on AUGUST 31, 2017

Applies to:

Oracle Internet Directory - Version 9.0.4 to 11.1.1 [Release 10gR1 to 11g]
Information in this document applies to any platform.

Goal

This document explains how a realm can be properly deleted from OID 10.1.2.2 through 11g, so that OIDDAS and SSO still function correctly.

During installation a default realm is created.
The entry "cn=Common,cn=Products,cn=OracleContext" contains information about the default realm and the default realm searchbases. Use the following command to check the settings:

ldapsearch -h <OID_host> -p <OID_port> -D "cn=orcladmin" -w <pwd> -b "cn=Common,cn=Products,cn=OracleContext" -s base "objectclass=*" orcldefaultsubscriber orclsubscribersearchbase

Example output:
orcldefaultsubscriber=dc=us,dc=oracle,dc=com
orclsubscribersearchbase=dc=oracle,dc=com



In this example "dc=us,dc=oracle,dc=com" is the default realm. Any additional realm created in OID would be created under the entry "dc=oracle,dc=com".

Multiple Realms are used to enable support for Application Service Providers, or used by Virtual Private Portals. If Virtual Private Portal is used, then an additional realm could be deleted using the rmsub.csh script. The script is documented in the Oracle Application Server Portal Configuration Guide 10g Release 2 (10.1.2) > Table J-4 rmsub.csh

OIDDAS contains only an option to install additional realms but not to delete them.
The bulkdelete command can be used to remove an unnecessary realm, however as it deletes a whole subtree, without performing any checks if the data in the realm is still needed by any product, the default realm must *NEVER* be deleted in this way. If you are uncertain as to whether a realm may be deleted, please contact Oracle Support before issuing the bulkdelete command.

NOTE: These instructions may NOT be used to delete the default realm that was created when OID was installed, for example when a new realm is desired. The problem is that when OID is installed, there are entries registered in the default oraclecontext (e.g., under cn=Realms,cn=JAZNContext,cn=Products,cn=OracleContext). The best solution to delete then create a new default realm is to reinstall.


In the case where the new realm being created is in 11g and has the same name with a different attribute (e.g., o=internal vs ou=internal) as a realm which previously existed, additional steps will also be necessary. See the steps at the bottom of this note when a realm was created in ADDITION to the default realm, then it was deleted using bulkdelete.

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms