Skip Headers
Oracle® Identity Management Integration Guide
10g Release 2 (10.1.2)
B14085-02
  Go To Documentation Library
Home
Go To Product List
Solution Area
Go To Table Of Contents
Contents
Go To Index
Index

Previous
Previous
Next
Next
 

3.3 Command-Line Tools for Oracle Directory Integration and Provisioning Administration

The following command-line tools are available for administering Oracle Directory Integration and Provisioning:


See Also:

Oracle Identity Management User Reference for the required syntax for each of the tools discussed in this section, along with information on other command-line tools that you can use to administer Oracle Internet Directory and Oracle Directory Integration and Provisioning

3.3.1 OID Control and OID Monitor

OID Control and OID Monitor enable you to start, stop, and monitor the Oracle directory integration and provisioning server.

In Oracle Internet Directory, you can use OID Control and OID Monitor to control the directory integration and provisioning server in the ORACLE_HOME where either the Oracle directory server or Oracle directory integration and provisioning server are installed.

If the Oracle Internet Directory installation is client-only, then the OID Control Utility and OID Monitor are not installed. In this case, start Oracle directory integration and provisioning server manually. In this configuration you can still use Oracle Directory Integration and Provisioning Server Administration tool to learn the status of Oracle directory integration and provisioning server.

3.3.2 The Oracle Directory Integration and Provisioning Server Registration Tool (odisrvreg)

The Oracle Directory Integration and Provisioning Server Registration tool (odisrvreg) registers an Oracle directory integration and provisioning server with the directory. It does this by creating an entry in the directory and setting the password for the Oracle directory integration and provisioning server. If the registration entry already exists, then you can use the odisrvreg tool to reset the existing password. The odisrvreg tool also creates a local file named odisrvwallet_hostname, at $ORACLE_HOME/ldap/odi/conf. This file acts as a private wallet for the Oracle directory integration and provisioning server, which uses it on startup to bind to the directory.

3.3.3 Directory Integration and Provisioning Assistant (dipassistant)

The Directory Integration and Provisioning Assistant (dipassistant) is the command-line version of the Oracle Directory Integration and Provisioning Server Administration tool. Some of the tasks you can perform with the Directory Integration and Provisioning Assistant include:

  • Creating, modifying, and deleting synchronization profiles

  • Viewing all synchronization profile names in Oracle Internet Directory

  • Viewing the details of a specific synchronization profile

  • Migrating data (or "bootstrapping") between a connected directory and Oracle Internet Directory

  • Setting the wallet password for Oracle directory integration and provisioning server

  • Resetting the password of the Oracle Directory Integration and Provisioning administrator

  • Moving integration profiles to a different Oracle Internet Directory node

3.3.4 The Provisioning Subscription Tool (oidprovtool)

You use the Provisioning Subscription tool (oidprovtool) to administer provisioning profile entries in the directory. More specifically, you can use Provisioning Subscription tool to:

  • Create new provisioning profiles

  • Enable/disable existing provisioning profiles

  • Modify existing provisioning profiles

  • Delete existing provisioning profiles

  • Get the current status of a provisioning profile

  • Clear all errors in an existing provisioning profile

3.3.5 Entry and Attribute Management Command-Line Tools

Table 3-3 lists the entry and attribute management command-line tools that you can use with Oracle Directory Integration and Provisioning.

Table 3-3 Entry and Attribute Management Command-Line Tools

Tool Description

Catalog Management Tool (catalog.sh)

Indexes attributes

ldapadd

Add entries and their object classes, attributes, and values to the directory

ldapaddmt

Supports multiple threads for concurrently adding entries and their object classes, attributes, and values to the directory

ldapbind

Determines whether you can authenticate a client to a server

ldapcompare

Matches specified attribute values with an entry's attribute values

ldapdelete

Removes entries from the directory

ldapmoddn

Modifies an entry's DN or RDN

ldapmodify

Modifies an entry's attributes

ldapmodifymt

Supports multiple threads for modifying entries concurrently

ldapsearch

Searches for entries in the directory


3.3.6 The schemasync Tool

The schemasync tool enables you to synchronize schema elements—namely attributes and object classes—between Oracle Internet Directory and third-party LDAP directories.