OK. So if you didn't see my entry on my little mishap with beeadmin, you might not know what I mean when I say:
We're back on track people!
OID is back as the Authentication Store type...
[orabee@radium ~]$ beectl modify_property --component _AuthenticationService --name AuthStoreType --value ldap
Which means beeadmin is no longer available. So (going in the opposite direction of what Richard and I talked about in the last entry...) I'll just give flast1 the same privileges as beeadmin and carry on...
Which was harder that I expected. Not having Beekeeper installed I couldn't just follow ML Note 738077.1, I thought, "no probs, I'll just do the same thing from the beectl command line and that'll be that."
I started my investigations at the "Managing and Provisioning Oracle Beehive Users" chapter of the Beehive 1.3 Administrator's Guide. Good a place as any.
I'm always on the look out for little gems of information, I found a good one:
[orabee@radium ~]$ beectl list_commands --category users
Gives you all the commands you could run to do with users. (in this case) ie
[orabee@radium ~]$ beectl list_commands --category users
----------------------------+---------------------------------------------------
Name | Description
----------------------------+---------------------------------------------------
add_external_contact | Creates an external contact in the given scope
add_group | Adds a group containing users
add_preference_property | Adds a new preference property to a preference set
add_preference_set | Adds a preference set to a preference profile.
add_user | Creates a user in the given scope
.
.
.
modify_group | Modifies group
modify_preference_set | Modifies the preference set by setting the extends
modify_user | Modifies a user present in an enterprise or organization
Pretty nifty I thought as I tested a few more categories.
Getting back on track, I skipped down to "Managing User Accounts"
Roles are an intrinsic part of Oracle Beehive access control.
Hmmm, sounds ominous..
It sent me across to Managing Oracle Beehive Access Control to continue investigating..
OK. I'm not going to go too far into it, coz it gets pretty hairy around the privileges and roles and role definitions and assigned roles and access control entities, did my head in... but to summarise...
I wanted to give my user flast1 the same privileges as beeadmin......right
I found out the role is called enterprise-system......right
I figured the way to see any details on this role is to look at the currently assigned roles coz it IS currently assigned to beeadmin.....
[orabee@radium seed]$ beectl list_assigned_roles
Lots of good information, look for the enterprise-system role, and whatever the ID which includes ....acar... in it
Which theoretically means I can assign that same role to flast1 by doing....
[orabee@radium seed]$ beectl modify_assigned_role --assigned_role 5C66:6F68:acar:AC85D09E2F5247D08F0E60DB12F57335000000000001 --add_accessor loginid=flast1
(You're obviously going to have a different role id...)
done.
DO YOU KNOW HOW LONG IT TOOK ME TO FIGURE THAT OUT!! And here I am giving it to you for free...
All because I want to hurry up and get the 1.4.1 installed, so I can install Beekeeper 1.4.1 and stop my brain hurting like that again...
Anyway. As my blog title says. Onward and Upgrade...
Upgrade Beehive 1.3.1 to Beehive 1.4.1
It was pretty straight forward really. Extract out the Beehive141 installer, run it.
It'll say "hey, I've found an old install, wanna upgrade it" (ok, not in those words exactly..)
You say "Yes, Yes I would thankyou".
It shows you the old ORACLE_HOME path, (just to show off,) you say "Yep, that's the one.)
It then wanders off for a few seconds, to come back and say "hey, shut it down for me, oh and by the way, I can't tell if your DMZ install is down, since it's on the other side of a firewall, so click here when you reckon it's down." (again, not quite the same words)
The summary tab, and then we're off and running.
BTW, I did end up jumping in Thunderbird and sending a few emails between my two users... so I've now got heaps of data to have upgraded... (all of 4 emails and a draft...)
OK, File updates done, now onto the config..
And there you go. Upgraded. Now to go test it.
Interesting that SMTP and IMAP aren't listening on the ports I specified earlier (25,143)...
Lets see why.. first port of call.. hasbind..
[orabee@radium bin]$ cd $ORACLE_HOME/beehive/bin
[orabee@radium bin]$ ls -l hasbind*
-rwx------ 1 orabee oinstall 32530 Oct 24 21:51 hasbind
-rws--s--x 1 root oinstall 32538 Aug 18 19:02 hasbind.orig
There you go, new binary without the root permissions. Let's change it and restart..
Yep, All looks good. All three of my emails are there too :-)
Oh, and by the way. Guess what I found after all this...
This, here it is if you're too lazy to click a link...
Note: If you configure Oracle Beehive with an external, LDAP-based user directory, unless there is a BEEadmin account in that external directory which is marked to synchronize with Oracle Beehive, the BEEadmin account will be deleted when you first synchronize. This is because all Oracle Beehive accounts must be mastered in the external directory.
So does that mean I can just create a beeadmin account in OID and viola. hmmm. I'll have to try that later...
