Skip Headers
Oracle® Access Manager Deployment Guide
10
g
(10.1.4.0.1)
Part Number B25344-01
Home
Book List
Index
Master Index
Contact Us
Next
View PDF
Contents
List of Figures
List of Tables
Title and Copyright Information
Preface
Audience
Documentation Accessibility
Related Documents
Conventions
What's New in Oracle Access Manager?
Product and Component Name Changes
Tuning the Directory
Tuning the Access Server
Tuning Workflows
Tuning Your Network
Failover and Load Balancing
Reconfiguring Oracle Access Manager
1
Capacity Planning
1.1
About Capacity Planning
1.2
Estimating Peak Load
1.2.1
General Guidelines for Estimating Peak Load
1.2.2
Complex Estimates of Peak Load
1.2.3
Predictions of Concurrency and Throughput
1.3
Capacity Planning for Multiple Environments
1.4
Example from an Actual Deployment
2
Performance Tuning
2.1
Guidelines for Directory Tuning
2.1.1
Check the Performance of the Directory
2.1.2
Directory Connection Pool Size
2.1.2.1
Differences Between Configured and Actual Connection Pool Size
2.1.2.2
Configuring the Connection Pool
2.1.3
Storing Workflow Tickets in the Directory
2.1.3.1
Writing Workflow Tickets to the Directory
2.1.4
Indexing Attributes in the Directory
2.1.4.1
Limitations of Indexing
2.1.4.2
Indexing and User Deactivation
2.1.4.3
Indexing and Workflows
2.1.4.4
Indexing and Groups
2.1.4.5
Indexing and Search Constraints
2.1.5
Changing the Number of Access Server-to-Directory Server Connections
2.1.6
Deleting and Archiving Workflows
2.1.7
Setting Read and Write Permissions for Administrators
2.1.8
Configuring the Searchbase
2.1.8.1
Setting a Searchbase Filter
2.1.9
Applying Search Constraints
2.1.10
Increasing Connections to the Directory in the Identity System
2.1.11
Changing Directory Content
2.1.11.1
Ordering the Columns in a Search Results List
2.1.11.2
Changing the Bind DN
2.1.12
Adjusting Cache Settings
2.1.13
Deleting ObSyncRecord Entries from the Directory---assess for other changes
2.2
LDAP Tools
2.2.1
Viewing Directory Content in LDIF Files
2.2.1.1
LDAPSEARCH Command-Line Format
2.2.1.2
LDAPSEARCH Command-Line Parameters
2.2.1.3
LDAPSEARCH Examples
2.2.2
Changing Directory Content with LDAPMODIFY
2.2.2.1
LDAPMODIFY Command-Line Format
2.2.2.2
LDAPMODIFY Command-Line Parameters
2.2.2.3
LDAPMODIFY Examples
2.3
Access Server Performance Tuning
2.3.1
Configuring Password Validation by the Access Server
2.3.1.1
The ObCredValidationByAS Parameter
2.3.2
Changing the Number of Request Queues and Threads
2.3.2.1
About Threads and Queues
2.3.2.2
Estimating the Current Number of Threads
2.3.2.3
Estimating the Required Number of Threads and Queues
2.3.3
Performance Considerations when Using ObMyGroups
2.3.4
Limiting the Number of Authorization Queries from WebGate
2.4
Tuning the Caches
2.4.1
Tuning the Policy Cache
2.4.1.1
Calculating Maximum Elements in a Policy Cache
2.4.1.2
Calculating Memory Requirements for the Policy Cache Elements
2.4.1.3
Calculating Policy Cache Timeout
2.4.2
User Cache Tuning
2.4.2.1
Calculating the User Cache Timeout
2.4.2.2
Calculating Maximum Elements in the User Cache
2.4.2.3
Calculating Memory Requirements for User Caches
2.4.3
Tuning the URL Prefix Cache
2.4.4
WebGate Cache Tuning
2.4.5
Sizing the Maximum Elements in Cache
2.5
Tuning the Identity System
2.6
Tuning the Group Manager
2.6.1
Tuning the My Groups Page
2.6.2
Tuning the View Members Page
2.6.3
Tuning the Group Expansion Page
2.7
Tuning Workflows
2.7.1
Tuning workflowdbparams.xml
2.7.2
Configuring Workflow Search Parameters
2.8
Tuning Your Network
2.8.1
Be Sure Your Machines Are Working Properly
2.9
Resource-Intensive Operations
2.9.1
Login Forms
2.9.2
Password Management
2.9.3
Plug-Ins
3
Failover and Load Balancing
3.1
About Load Balancing with Oracle Access Manager
3.1.1
About Load Balancing of LDAP Data
3.2
Configuring Load Balancing for Web Components
3.2.1
Configuring Simple Round-Robin Load Balancing
3.2.2
Configuring Weighted Round-Robin Load Balancing
3.3
Configuring Load Balancing among Oracle Access Manager and Directory Servers
3.3.1
Configuring Load Balancing for User Data
3.3.2
Configuring Load Balancing of Configuration & Policy Data
3.3.3
Adjusting Connection Pooling for a Directory Server Instance
3.4
About Failover with Oracle Access Manager
3.4.1
Primary Versus Secondary Servers
3.5
Setting the Polling Interval
3.6
Configuring Failover of Web Components
3.7
About Failover Between Oracle Access Manager and Directory Servers
3.8
Configuring Directory Failover for User Data
3.9
Configuring Directory Failover for Configuration and Policy Data
3.9.1
Configuring Identity Server Failover for Configuration Data
3.9.2
Configuring Access Server Directory Failover for Configuration and Policy Data
4
Caching and Cloning
4.1
Cloned and Synchronized Components
4.2
About Caching Recent Information
4.2.1
Triggering Cache Flush Events
4.2.2
Cache Timeout
4.3
Caching System Information
4.3.1
Caching Group Objects
4.3.2
Turning Off the Credential Mapping Cache
4.4
Caching Access System Information
4.4.1
Access Server Cache Configuration
4.4.1.1
Information in a Policy Cache
4.4.1.2
Caching User Information
4.4.2
Automatically Flushing Access Server Caches
4.4.3
Manually Flushing Access Server Caches
4.4.4
Cache Configuration Using Replicated Directories
4.4.4.1
Timeouts That Ensure Correct Behavior
4.4.5
AccessGate Cache Configuration
5
Reconfiguring the System
5.1
What Can Be Reconfigured
5.2
Performing the Reconfiguration
6
Synchronizing System Clocks Across Time Zones
6.1
About Synchronization
6.2
Synchronization With NTP
6.3
Synchronization with a GPS-based System
Index