Skip Headers
Oracle® Fusion Middleware Administrator's Guide for Oracle Directory Integration Platform
11g Release 1 (11.1.1)

Part Number E10031-06
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Index
Index
Go to Master Index
Master Index
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
PDF · Mobi · ePub

23 Managing Integration with a Connected Directory

This chapter contains information about post-configuration and ongoing administration tasks. It contains these topics:

23.1 Tasks After Configuring with a Connected Directory

Once configuration is complete, do the following:

  1. Migrate data from one directory to the other as needed. This is described in "Bootstrapping Data Between Directories".

  2. Use the activate operation of the manageSyncProfiles command to enable the synchronization profile by entering the following command:

    manageSyncProfiles activate -profile profile_name
    

23.2 Typical Management of Integration with a Connected Directory

Management tasks typically include:

This section contains these topics:

See Also:

Oracle Fusion Middleware Getting Started with Oracle Identity Management for instructions about how to use the Identity Management Grid Control Plug-in to manage integration with a connected directory.

23.2.1 Bootstrapping Data Between Directories

Bootstrapping is sometimes called data migration. To bootstrap data, perform the following steps after the third-party directory connector and plug-in configurations are complete:

  1. Identify the data you want to migrate. You can choose to migrate all data in the directory or only a subset of data.

  2. Use the following command to disable the import and export synchronization profile:

    manageSyncProfiles deactivate -profile profile_name
    
  3. Bootstrap from one directory to another using the syncProfileBootstrap command. Refer to Chapter 8, " Bootstrapping a Directory in Oracle Directory Integration Platform" for more information about bootstrapping.

    Once bootstrapping is accomplished, the profile status attributes are appropriately updated in the synchronization profile by the manageSyncProfiles command.

  4. If you used LDIF file-based bootstrapping, then initialize the lastchangekey value with updatechgnum operation of the manageSyncProfiles command as follows:

    manageSyncProfiles updatechgnum -profile profile_name
    

    This lastchangekey attribute should be set to the value of the last change number in the source directory before you started the bootstrap.

  5. If two-way synchronization is required, then enable the export profile and make sure the change logging option is enabled for the Oracle directory server.

    For Oracle Internet Directory, change logging is controlled by the -l option while starting Oracle Internet Directory. By default, it is set to TRUE, meaning that change logging is enabled. If it is set to FALSE, then use the OID Control Utility to shut down the Oracle Internet Directory server, and then to start the server again with the change log enabled.

23.2.2 Managing a Third-Party Directory External Authentication Plug-in

This section explains how to delete, disable, and re-enable a third-party external authentication plug-in.

23.2.2.1 Deleting a Third-Party Directory External Authentication Plug-in

To delete a third-party external authentication plug-in, enter the following commands. After executing the commands, you will be prompted for a password.

ldapdelete -h host -p port -D binddn -q \
"cn=adwhencompare,cn=plugin,cn=subconfigsubentry"

ldapdelete -h host -p port -D binddn -q \
"cn=adwhenbind,cn=plugin,cn=subconfigsubentry"

23.2.2.2 Disabling a Third-Party External Authentication Plug-in

To disable a third-party external authentication plug-in:

  1. Create an LDIF file with the following entries:

    dn: cn=adwhencompare,cn=plugin,cn=subconfigsubentry
    changetype: modify
    replace: orclpluginenable
    orclpluginenable: 0
    
    dn: cn=adwhenbind,cn=plugin,cn=subconfigsubentry
    changetype: modify
    replace: orclpluginenable
    orclpluginenable: 0
    
  2. Load the LDIF file with the ldapmodify command, as follows:

    ldapmodify -h host -p port -D binddn -q -f fileName
    

    Note:

    You will be prompted for the password.

23.2.2.3 Re-enabling a Third-Party External Authentication Plug-in

To re-enable a third-party external authentication plug-in, use these two commands:

  1. Create an LDIF file with the following entries:

    dn: cn=adwhencompare,cn=plugin,cn=subconfigsubentry
    changetype: modify
    replace: orclpluginenable
    orclpluginenable: 1
    
    dn: cn=adwhenbind,cn=plugin,cn=subconfigsubentry
    changetype: modify
    replace: orclpluginenable
    orclpluginenable: 1
    
  2. Load the LDIF file with the ldapmodify command, as follows:

    ldapmodify -h host -p port -D binddn -q -f fileName
    

    Note:

    You will be prompted for the password.