Contents

List of Examples

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in This Guide?

• New Features Introduced with Oracle Unified Directory 11g Release 2 PS2 (11.1.2.2.0)
• New Features Introduced with Oracle Unified Directory 11g Release 2 PS1 (11.1.2.1.0)
• New Features Introduced with Oracle Unified Directory 11g Release 2 (11.1.2.2)

Part I Introduction to Oracle Unified Directory

1 Overview of Oracle Unified Directory

• 1.1 What is Oracle Unified Directory?
  • 1.1.1 Components of Oracle Unified Directory
  • 1.1.2 Oracle Unified Directory Installation Types
    • 1.1.2.1 Setting Up the Directory Server
    • 1.1.2.2 Setting Up the Proxy Server
    • 1.1.2.3 Setting Up the Replication Gateway Server
  • 1.1.3 Synchronizing Oracle Unified Directory with Other Directories
    • 1.1.3.1 Synchronization between Oracle Unified Directory and Oracle Internet Directory
    • 1.1.3.2 Synchronization between Oracle Unified Directory and Third-Party Directories
• 1.2 Overview of Directory Server
• 1.3 Overview of Proxy Server
  • 1.3.1 What Is the Proxy Server?
  • 1.3.2 Why Use the Proxy Server?
• 1.4 Overview of the Replication Gateway
  • 1.4.1 What Is the Replication Gateway?
  • 1.4.2 The Role of the Replication Gateway
  • 1.4.3 Limitations of the Replication Gateway

2 Example Deployments Using the Directory Server

• 2.1 Small Replicated Topology
  • 2.1.1 The Role of Directory Servers in a Topology
  • 2.1.2 The Role of Replication Servers in a Topology
• 2.2 Multiple Data Center Topology
  • 2.2.1 Multiple Data Centers and Replication Groups
  • 2.2.2 Multiple Data Centers and the Window Mechanism

3 Example Deployments Using the Proxy Server

• 3.1 Deciding Your Proxy Deployment Type
• 3.2 Supported Proxy Deployments
  • 3.2.1 Configuration 1: Simple Load Balancing
  • 3.2.2 Configuration 2: Simple Distribution
  • 3.2.3 Configuration 3: Failover Between Data Centers
  • 3.2.4 Configuration 4: Distribution with Load Balancing
  • 3.2.5 Configuration 5: Distribution with Failover Between Data Centers
  • 3.2.6 Configuration 6: Enterprise User Security
  • 3.2.7 Configuration 7: Multiple Replicated Proxies

4 Example Mixed Deployments

• 4.1 Considerations For Mixed Deployment Scenarios
  • 4.1.1 Installing Oracle Unified Directory as a Directory Server
  • 4.1.2 Installing Oracle Unified Directory as a Proxy
• 4.2 Configuration 1: Pass-Through Authentication
• 4.3 Configuration 2: Shadow Joiner

Part II Oracle Unified Directory Concepts and Architecture

5 Understanding Oracle Unified Directory Concepts and Architecture

• 5.1 Oracle Unified Directory Components
  • 5.1.1 Network Groups
  • 5.1.2 Workflows
  • 5.1.3 Workflow Elements
• 5.2 Architecture of Oracle Unified Directory

6 Understanding Oracle Unified Directory High Availability Deployments

• 6.1 What is High Availability?
• 6.2 Availability and Single Points of Failure
  • 6.2.1 Types of SPOFs
    • 6.2.1.1 Hardware Failure
    • 6.2.1.2 Software Failure
  • 6.2.2 Common Approach to Mitigate SPOFs - Redundancy
• 6.3 Using Redundancy for High Availability
  • 6.3.1 Redundancy at the Hardware Level
  • 6.3.2 Redundancy at Directory Server Level Using Replication
  • 6.3.3 Using Directory Proxy Server as Part of a Redundant Solution
  • 6.3.4 Using Application Isolation for High Availability
  • 6.3.5 Using Replication Gateway for High Availability
• 6.4 Sample Topologies Using Redundancy for High Availability

7 Understanding the Oracle Unified Directory Replication Model

• 7.1 Overview of the Replication Architecture
  • 7.1.1 Basic Replication Architecture
  • 7.1.2 Replication Servers
  • 7.1.3 Replication Change Numbers
  • 7.1.4 Replication Server State
  • 7.1.5 Operation Dependencies
• 7.2 How Replication Works
  • 7.2.1 Replication Initialization
    • 7.2.1.1 Replicating Configuration Data Manually
  • 7.2.2 Directory Server Change Processing
  • 7.2.3 Replication Server Selection
    • 7.2.3.1 Replication Server Selection Algorithm
    • 7.2.3.2 Replication Server Load Balancing
  • 7.2.4 Change Replay
  • 7.2.5 Auto Repair
  • 7.2.6 Directory Server Crashes
  • 7.2.7 Replication Server Crashes
• 7.3 Historical Information and Conflict Resolution
  • 7.3.1 What is a Replication Conflict?
  • 7.3.2 Resolving Modify Conflicts
  • 7.3.3 Resolving Naming Conflicts
  • 7.3.4 Purging Historical Information
• 7.4 Schema Replication
  • 7.4.1 Schema Replication Architecture
• 7.5 Replication Status
  • 7.5.1 Replication Status Definitions
  • 7.5.2 Degraded Status
  • 7.5.3 Full Update Status and Bad Generation ID Status
• 7.6 Replication Groups
• 7.7 Assured Replication
  • 7.7.1 Assured Replication Modes
    • 7.7.1.1 Safe Data Mode
    • 7.7.1.2 Safe Read Mode
    • 7.7.1.3 Safe Read Mode and Replication Groups
  • 7.7.2 Assured Replication Connection Algorithm
  • 7.7.3 Assured Replication and Replication Status
  • 7.7.4 Assured Replication Monitoring
• 7.8 Fractional Replication
  • 7.8.1 Fractional Data Set Identification
  • 7.8.2 Fractional Replication Filtering
  • 7.8.3 Fractional Replication and Local Operations

8 Understanding the Oracle Unified Directory Indexing Model

• 8.1 Overview of Indexes
  • 8.1.1 What is an Index?
  • 8.1.2 Understanding the Importance of Indexing
• 8.2 Index Types
  • 8.2.1 Approximate Indexes
  • 8.2.2 Equality Indexes
  • 8.2.3 Ordering Indexes
  • 8.2.4 Presence Indexes
  • 8.2.5 Substring Indexes
• 8.3 Index Entry Limit
• 8.4 Search Evaluation
• 8.5 Maintaining Indexes

9 Understanding the Oracle Unified Directory Access Control Model

• 9.1 Access Control Principles
  • 9.1.1 Access Control Overview
  • 9.1.2 ACI Structure
  • 9.1.3 Directory Server Global ACIs
  • 9.1.4 ACI Evaluation
  • 9.1.5 ACI Limitations
  • 9.1.6 Access Control and Replication
• 9.2 ACI Syntax
  • 9.2.1 ACI Syntax Overview
  • 9.2.2 Defining Targets
    • 9.2.2.1 Targeting a Directory Entry
    • 9.2.2.2 Targeting Attributes
    • 9.2.2.3 Targeting Both an Entry and Attributes
    • 9.2.2.4 Targeting Entries or Attributes Using LDAP Filters
    • 9.2.2.5 Targeting Attribute Values Using LDAP Filters
    • 9.2.2.6 Targeting a Single Directory Entry
    • 9.2.2.7 Specifying the Scope of an ACI
    • 9.2.2.8 Targeting LDAP Controls
    • 9.2.2.9 Targeting LDAP Extended Operations
  • 9.2.3 Defining Permissions
    • 9.2.3.1 Allowing or Denying Access
    • 9.2.3.2 Assigning Rights
    • 9.2.3.3 Rights Required for LDAP Operations
    • 9.2.3.4 Permissions Syntax
• 9.3 Bind Rules
  • 9.3.1 Bind Rules Overview
  • 9.3.2 Using Boolean Bind Rules
• 9.4 Bind Rule Syntax
  • 9.4.1 Bind Rule Syntax Overview
  • 9.4.2 Defining User Access (userdn Keyword)
    • 9.4.2.1 Defining General Access (all Keyword)
    • 9.4.2.2 Defining Anonymous Access (anyone Keyword)
    • 9.4.2.3 Defining Self Access (self Keyword)
    • 9.4.2.4 Defining Parent Access (parent Keyword)
    • 9.4.2.5 Specifying Users With LDAP URLs
    • 9.4.2.6 Specifying Users With Wildcards
    • 9.4.2.7 Specifying Users With a Logical OR of LDAP URLs
    • 9.4.2.8 Excluding Specific LDAP URLs
  • 9.4.3 Defining Group Access (groupdn Keyword)
    • 9.4.3.1 Specifying a Group With a Single LDAP URL
    • 9.4.3.2 Specifying a Group With a Logical OR of LDAP URLs
  • 9.4.4 Defining Access Based on Value Matching (userattr Keyword)
    • 9.4.4.1 Bind-Type Format
    • 9.4.4.2 Attribute-Value Format
    • 9.4.4.3 USERDN Bind Type Example
    • 9.4.4.4 GROUPDN Bind Type Example
    • 9.4.4.5 LDAPURL Bind Type Example
    • 9.4.4.6 Attribute Value Example
    • 9.4.4.7 Inheritance
    • 9.4.4.8 Inheritance Example
    • 9.4.4.9 Add Permissions
  • 9.4.5 Defining Access From a Specific IP Address (ip Keyword)
  • 9.4.6 Defining Access From a Specific Domain (dns Keyword)
  • 9.4.7 Defining Access at a Specific Time of Day or Day of Week (timeofday and dayofweek Keywords)
  • 9.4.8 Defining Access Based on Authentication Method (authmethod Keyword)
    • 9.4.8.1 Authentication Method Examples
  • 9.4.9 Defining Access Based on a Connection's Security Strength Factor (ssf Keyword)
    • 9.4.9.1 DIGEST-MD5 QOP Key Size Mapping
    • 9.4.9.2 TLS Cipher Key Size Mapping
    • 9.4.9.3 Example
• 9.5 Compatibility With the Oracle Directory Server Enterprise Edition Access Control Model
  • 9.5.1 Global ACI
  • 9.5.2 Distinguished Name (DN) Wildcard Matching
  • 9.5.3 Privilege Subsystem Impact
  • 9.5.4 The targetscope Keyword
  • 9.5.5 LDAP Modify Increment
  • 9.5.6 Macro Support
  • 9.5.7 The roledn Keyword
• 9.6 Using Macro ACIs for Advanced Access Control
  • 9.6.1 What are Macros?
  • 9.6.2 Macro ACI Example
  • 9.6.3 Macro ACI Syntax
    • 9.6.3.1 Matching for ($dn) in the Target
    • 9.6.3.2 Macro Matching for ($attr.attrName)
• 9.7 Understanding Virtual ACIs
  • 9.7.1 Virtual ACI Overview
  • 9.7.2 Virtual ACI Syntax
  • 9.7.3 Virtual ACI Configuration Model
  • 9.7.4 Virtual ACI Usage Considerations

10 Understanding the Oracle Unified Directory Schema Model

• 10.1 Understanding Matching Rules
  • 10.1.1 Matching Rule Description Format
  • 10.1.2 Commonly Used Matching Rules
  • 10.1.3 Relative Time Matching Rules
  • 10.1.4 Partial Date Or Time Matching Rules
  • 10.1.5 Value Normalization
• 10.2 Understanding Attribute Syntaxes
  • 10.2.1 The Attribute Syntax Description Format
  • 10.2.2 Commonly Used Attribute Syntaxes
  • 10.2.3 The Pattern-Matching Syntax Extension
  • 10.2.4 The Enumeration Syntax Extension
  • 10.2.5 Substitution Syntax Extension
• 10.3 Understanding Attribute Types
  • 10.3.1 Attribute Type Description Format
  • 10.3.2 Attribute Type Inheritance
  • 10.3.3 Attribute Type Implementation
• 10.4 Understanding Object Classes
  • 10.4.1 Object Class Description Format
  • 10.4.2 Object Class Kinds
  • 10.4.3 Object Class Inheritance
  • 10.4.4 Directory Server Object Class Implementation
• 10.5 Understanding Name Forms
  • 10.5.1 Name Form Description Format
• 10.6 Understanding DIT Content Rules
  • 10.6.1 DIT Content Rule Description Format
  • 10.6.2 DIT Content Rule Implementation
• 10.7 Understanding DIT Structure Rules
  • 10.7.1 DIT Structure Rule Description Format
  • 10.7.2 DIT Structure Rules and Multiple Schemas
• 10.8 Understanding Matching Rule Uses

11 Understanding Root Users and the Privilege Subsystem

• 11.1 Root User Accounts
• 11.2 Privilege Subsystem
• 11.3 Assigning Privileges to Normal Users
• 11.4 Assigning Privileges to Root Users

12 Understanding the Proxy Functionality

• 12.1 Load Balancing Using the Proxy
  • 12.1.1 Failover Load Balancing
  • 12.1.2 Optimal Load Balancing
    • 12.1.2.1 Determining Saturation Level
  • 12.1.3 Proportional Load Balancing
  • 12.1.4 Saturation Load Balancing
  • 12.1.5 Search Filter Load Balancing
• 12.2 Data Distribution Using the Proxy
  • 12.2.1 Numeric Distribution
  • 12.2.2 Lexico Distribution
  • 12.2.3 Capacity Distribution
  • 12.2.4 DN Pattern Distribution
• 12.3 Global Index Catalog
• 12.4 DN Renaming Using the Proxy
  • 12.4.1 How the DN Renaming Workflow Element Works
• 12.5 RDN Changing
• 12.6 Understanding the Transformation Framework
  • 12.6.1 Overview of Transformation
    • 12.6.1.1 Transformation Models
    • 12.6.1.2 Implementing Transformation in Oracle Unified Directory
  • 12.6.2 Components of Transformation
    • 12.6.2.1 Transformation Types
    • 12.6.2.2 Transformation Conditions
    • 12.6.2.3 Defining Attribute Values for Transformation
  • 12.6.3 Configuring Transformation
    • 12.6.3.1 Overview of the Configuration Model
    • 12.6.3.2 Example of Configuring Transformation Using CLI
• 12.7 Understanding Pass-Through Authentication
  • 12.7.1 Using Pass-Through Authentication Mechanism
  • 12.7.2 Features of Pass-Through Authentication Workflow Element
  • 12.7.3 Pass-Through Workflow Element Considerations
  • 12.7.4 Pass-Through Authentication Configuration Model
  • 12.7.5 Pass-Through Authentication Configuration Parameters
  • 12.7.6 Handling LDAP Operations Using Pass-Through Authentication Workflow Element
    • 12.7.6.1 ADD
    • 12.7.6.2 BIND
    • 12.7.6.3 COMPARE
    • 12.7.6.4 DELETE
    • 12.7.6.5 MODIFY
    • 12.7.6.6 MODIFY_DN
    • 12.7.6.7 SEARCH
  • 12.7.7 Best Practices for Configuring Pass-Through Authentication

13 Understanding Oracle Unified Directory Mapping

• 13.1 An Overview of Identity Mappers
• 13.2 Supported Identity Mappers
  • 13.2.1 Exact Match Identity Mapper
  • 13.2.2 Match And Replace Identity Mapper
• 13.3 Components of Identity Mappers
  • 13.3.1 Global Configuration
  • 13.3.2 Network Group
• 13.4 Configuring Identity Mappers
  • 13.4.1 Configuring Global Identity Mappers
  • 13.4.2 Configuring Network Group Identity Mappers
• 13.5 Selecting Identity Mappers
• 13.6 Ordering Identity Mappers

14 Understanding Oracle Unified Directory Virtualization

• 14.1 Understanding Join Workflow Element
• 14.2 Features of Join Workflow Element
• 14.3 Understanding Join Participants
• 14.4 Join Rules
  • 14.4.1 Attribute-based Join Rules
  • 14.4.2 DN Join Rules
• 14.5 Join Workflow Element Configuration Model
• 14.6 Joiner Types
  • 14.6.1 One-to-One Joiner Type
  • 14.6.2 One-To-Many Joiner Type
  • 14.6.3 Many-To-One Joiner Type
  • 14.6.4 Shadow Joiner Type
• 14.7 Join Condition
• 14.8 Handling Attribute Flow Settings
  • 14.8.1 Retrievable Attributes
  • 14.8.2 Non-Retrievable Attributes
  • 14.8.3 Storable Attribute
  • 14.8.4 Non-Storable Attributes
• 14.9 Handling Bind Operations
• 14.10 Handling Translation of DN Attributes
• 14.11 Determining the Criticality of Join Participants
• 14.12 Managing Operations that are Enabled
• 14.13 Handling Cascading Write Operations to Secondary Participants
• 14.14 Implementing Pass-Through Authentication Using Join Workflow Element
• 14.15 Handling LDAP Operations in Join Workflow Elements
  • 14.15.1 ADD
  • 14.15.2 DELETE
  • 14.15.3 MODIFY
  • 14.15.4 MODDN
  • 14.15.5 COMPARE
  • 14.15.6 BIND
  • 14.15.7 SEARCH
• 14.16 Creating and Configuring Join Workflow Elements Using dsconfig Command
  • 14.16.1 Prerequisites for Creating a Join Workflow Element
  • 14.16.2 Configuring a Join Workflow Element Topology

15 Understanding Data Encryption in Oracle Unified Directory

• 15.1 What is Attribute Encryption?
• 15.2 Encrypting Attributes
• 15.3 Supported Algorithms for Attribute Encryption
• 15.4 Support for Indexes Encryption
• 15.5 Support for Encryption in Replication Topology
• 15.6 Attribute Encryption Usage Considerations
• 15.7 Configuring Attribute Encryption
  • 15.7.1 Configuration Parameters
  • 15.7.2 Configuring Attribute Encryption Using dsconfig Command
  • 15.7.3 Configuring Attribute Encryption Using the dsconfig Interactive Mode
  • 15.7.4 Configuring Attribute Encryption Using ODSM
  • 15.7.5 Sample Configuration Scenarios
    • 15.7.5.1 Enabling Encryption for Attributes of Specific Suffixes
    • 15.7.5.2 Disabling Encryption
    • 15.7.5.3 Enabling Encryption for a Specific Attribute Using an Algorithm
    • 15.7.5.4 Modifying Attributes
    • 15.7.5.5 Fetching Attributes

Part III Basic Administration

16 Starting and Stopping the Server

• 16.1 Starting the Server
  • 16.1.1 To Start the Server by Using start-ds
  • 16.1.2 To Start the Server as a Foreground Process
  • 16.1.3 To Restart the Server
  • 16.1.4 To Start the Server by Using a Script (UNIX/Linux)
• 16.2 Stopping the Server
  • 16.2.1 To Stop the Server by Using stop-ds
  • 16.2.2 To Stop the Server that is Running in the Foreground
  • 16.2.3 To Stop the Server by Using a Script (UNIX/Linux)
• 16.3 Checking if the Server is Started or Stopped
  • 16.3.1 To Check the Server Status
• 16.4 Running the Server as a Non-Root User
  • 16.4.1 Reasons for Running the Server as a Non-Root User
  • 16.4.2 How to Run as a Non-Root User on the Standard LDAP Ports

17 Configuring the Server Instance

• 17.1 Managing the Server Configuration With dsconfig
  • 17.1.1 Overview of the dsconfig Command
    • 17.1.1.1 dsconfig and Certificate Checking
    • 17.1.1.2 dsconfig Sub-Commands
    • 17.1.1.3 dsconfig Advanced Properties
  • 17.1.2 Using dsconfig in Interactive Mode
  • 17.1.3 Getting Help With dsconfig
    • 17.1.3.1 Global Usage
    • 17.1.3.2 Finding the Correct Subcommand
    • 17.1.3.3 Getting Help for an Individual Subcommand
    • 17.1.3.4 Displaying a Summary of a Component's Properties
    • 17.1.3.5 Displaying Detailed Help on a Property
  • 17.1.4 Configuring a Server Instance With dsconfig
    • 17.1.4.1 To Display the Properties of a Component
    • 17.1.4.2 To List Components
    • 17.1.4.3 To Create a Component
    • 17.1.4.4 To Modify the Properties of a Component
    • 17.1.4.5 To Modify the Values of a Multi-Valued Property
    • 17.1.4.6 To Delete a Component
    • 17.1.4.7 To Use dsconfig in Batch Mode
  • 17.1.5 Configuring Connection Handlers With dsconfig
    • 17.1.5.1 To Display All Connection Handlers
    • 17.1.5.2 Configuring the LDAP Connection Handler
    • 17.1.5.3 Configuring the LDIF Connection Handler
    • 17.1.5.4 Configuring the JMX Connection Handler
  • 17.1.6 Configuring Network Groups With dsconfig
    • 17.1.6.1 Creating a Network Group
    • 17.1.6.2 Modifying Network Group Properties
    • 17.1.6.3 Creating a Network Group Quality of Service Policy
    • 17.1.6.4 Modifying a Network Group Quality of Service Policy
    • 17.1.6.5 Relocating the Root DSE Entry for a Network Group
    • 17.1.6.6 Customizing the Root DSE Entry for a Network Group
  • 17.1.7 Configuring Workflows With dsconfig
    • 17.1.7.1 Listing Existing Workflows
    • 17.1.7.2 Viewing Workflow Properties
    • 17.1.7.3 Creating a Workflow
  • 17.1.8 Configuring Workflow Elements With dsconfig
    • 17.1.8.1 Listing Workflow Elements
    • 17.1.8.2 Creating Workflow Elements
    • 17.1.8.3 Modifying Workflow Elements
  • 17.1.9 Configuring Plug-Ins With dsconfig
    • 17.1.9.1 Overview of Plug-In Types
    • 17.1.9.2 Modifying the Plug-In Configuration
  • 17.1.10 Configuring Suffixes with dsconfig
    • 17.1.10.1 Configuring Suffixes with dsconfig During Setup
    • 17.1.10.2 Configuring Suffixes with dsconfig on a Running Server
  • 17.1.11 Configuring Access Control Groups With dsconfig
    • 17.1.11.1 Creating Access Control Groups
    • 17.1.11.2 Deleting Access Control Groups
• 17.2 Managing the Server Configuration With Oracle Directory Services Manager
  • 17.2.1 Selecting a Configuration View
  • 17.2.2 Shortcuts to Configuring Objects With ODSM
  • 17.2.3 Configuring Suffixes With ODSM
    • 17.2.3.1 Create a Suffix
    • 17.2.3.2 Display and Edit Suffix Properties
    • 17.2.3.3 Delete a Suffix
  • 17.2.4 Configuring Workflow Elements With ODSM
    • 17.2.4.1 Create a Workflow Element
    • 17.2.4.2 Display and Edit Workflow Element Properties
    • 17.2.4.3 Delete a Workflow Element
  • 17.2.5 Configuring Workflows With ODSM
    • 17.2.5.1 Create a Workflow
    • 17.2.5.2 Display and Edit Workflow Properties
    • 17.2.5.3 Delete a Workflow
  • 17.2.6 Configuring Connection Handlers With ODSM
    • 17.2.6.1 Create a Connection Handler
    • 17.2.6.2 Modify a Connection Handler
    • 17.2.6.3 Delete a Connection Handler
  • 17.2.7 Configuring Network Groups With ODSM
    • 17.2.7.1 Create a Network Group
    • 17.2.7.2 Modify a Network Group
    • 17.2.7.3 Delete a Network Group
  • 17.2.8 Modify the General Server Configuration
• 17.3 Managing Administration Traffic to the Server
  • 17.3.1 Overview of the Administration Connector
  • 17.3.2 Accessing Administrative Suffixes
  • 17.3.3 To Configure the Administration Connector
  • 17.3.4 Key Managers and Trust Managers for the Administration Connector
• 17.4 Configuring Commands As Tasks
  • 17.4.1 Commands That Can Schedule Tasks
  • 17.4.2 Controlling Which Tasks Can Be Run
  • 17.4.3 Scheduling and Configuring Tasks
    • 17.4.3.1 To Schedule a Task
    • 17.4.3.2 To Schedule a Recurring Task
    • 17.4.3.3 To Configure Task Notification
    • 17.4.3.4 To Configure Task Dependencies
  • 17.4.4 Managing and Monitoring Scheduled Tasks
    • 17.4.4.1 To Obtain Information About Scheduled Tasks
    • 17.4.4.2 To Cancel a Scheduled Task
    • 17.4.4.3 To Cancel a Recurring Task
• 17.5 Deploying and Configuring the DSML Gateway
  • 17.5.1 Deploying the DSML Gateway
    • 17.5.1.1 Deploying the DSML Gateway in Oracle WebLogic Server
    • 17.5.1.2 Deploying the DSML Gateway in IBM WebSphere
  • 17.5.2 Confirming the DSML Gateway Deployment
    • 17.5.2.1 To Confirm the DSML Gateway Deployment with JXplorer
    • 17.5.2.2 Confirming the DSML Gateway Deployment with the Directory Server Resource Kit

18 Configuring the Proxy Components

• 18.1 Managing the Proxy Configuration With dsconfig
  • 18.1.1 Configuring Communication With Remote LDAP Servers
    • 18.1.1.1 Components of Communication with the Remote Server
    • 18.1.1.2 Configuring LDAP Server Extensions
    • 18.1.1.3 Configuring Proxy LDAP Workflow Elements
  • 18.1.2 Configuring the Bind Mode
    • 18.1.2.1 Configuring the Bind Mode Parameters to Optimize the Server
  • 18.1.3 Configuring Load Balancing With dsconfig
    • 18.1.3.1 To Configure Load Balancing
    • 18.1.3.2 Creating a Load Balancing Workflow Element
    • 18.1.3.3 Creating a Load Balancing Algorithm
    • 18.1.3.4 Creating Load Balancing Routes
    • 18.1.3.5 Modifying Load Balancing Properties
  • 18.1.4 Configuring Proxy Instance to Monitor Back-End Servers
  • 18.1.5 Configuring Distribution With dsconfig
    • 18.1.5.1 To Configure Distribution
    • 18.1.5.2 Creating a Distribution Workflow Element
    • 18.1.5.3 Creating a Distribution Algorithm
    • 18.1.5.4 Creating Distribution Partitions
    • 18.1.5.5 Managing Modify DN Requests
    • 18.1.5.6 Configuring Criticality in Workflows
    • 18.1.5.7 Configuring Criticality in Workflow Elements
    • 18.1.5.8 Deleting a Distribution Configuration
  • 18.1.6 Configuring DN Renaming With dsconfig
    • 18.1.6.1 Modifying a DN Renaming Configuration
  • 18.1.7 Configuring RDN Changing With dsconfig
    • 18.1.7.1 Modifying a RDN Renaming Configuration
  • 18.1.8 Configuring Global Indexes By Using the Command Line
    • 18.1.8.1 Configuring Global Index Catalogs by Using gicadm
    • 18.1.8.2 Replication of Global Index Catalogs
    • 18.1.8.3 Configuring Controls Required by the Global Index Catalog with Oracle Unified Directory
  • 18.1.9 Configuring Microsoft Active Directory Paging
    • 18.1.9.1 Configuring Active Directory Paging Workflow Elements
    • 18.1.9.2 Scanning Specific Attributes Returned by an Active Directory
  • 18.1.10 Configuring Pass-Through Authentication With dsconfig
    • 18.1.10.1 Prerequisites for Configuring Pass-Through Authentication
    • 18.1.10.2 Configuring Pass-Through Authentication Using dsconfig command
  • 18.1.11 Configuring Virtual ACIs With dsconfig
    • 18.1.11.1 Enabling Virtual ACIs for a Workflow
    • 18.1.11.2 Disabling Virtual ACIs for a Workflow
    • 18.1.11.3 Configuring Replication for Virtual ACIs
• 18.2 Managing the Proxy Configuration With ODSM
  • 18.2.1 Configuring Load Balancing With ODSM
  • 18.2.2 Configuring Distribution With ODSM
  • 18.2.3 Configuring Criticality in Workflows With ODSM
  • 18.2.4 Configuring Access Control Groups With ODSM
  • 18.2.5 Configuring Transformations With ODSM
    • 18.2.5.1 Create Transformations
    • 18.2.5.2 Modifying Transformations
    • 18.2.5.3 Deleting Transformations
    • 18.2.5.4 Selecting Values from Value Definition Screen

19 Example Proxy Configurations

• 19.1 Configuring Load Balancing
  • 19.1.1 To Configure Simple Load Balancing
• 19.2 Configuring Distribution
  • 19.2.1 To Configure Simple Distribution
• 19.3 Configuring Distribution and Load Balancing
  • 19.3.1 To Configure Distribution with Load Balancing
• 19.4 Configuring Failover Between Data Centers
• 19.5 Configuring Distribution with Failover Between Data Centers

20 Managing Directory Data

• 20.1 Importing and Exporting Data
  • 20.1.1 Populating a Stand-Alone Directory Server With Data
  • 20.1.2 Importing Data Using import-ldif
    • 20.1.2.1 import-ldif Operation Modes
    • 20.1.2.2 To Import Data in Offline Mode
    • 20.1.2.3 To Replace Existing Data During an Offline Import
    • 20.1.2.4 To Append Imported Data to Existing Data
    • 20.1.2.5 To Import Fractional Files
    • 20.1.2.6 To Import Fractional Files by Using Filters
    • 20.1.2.7 To Include or Exclude Attributes During Import
    • 20.1.2.8 To Import a Compressed LDIF File
    • 20.1.2.9 To Record Rejected or Skipped Entries During Import
    • 20.1.2.10 To Import Data From a MakeLDIF Template
    • 20.1.2.11 To Run an Import in Online Mode
    • 20.1.2.12 To Schedule an Import
  • 20.1.3 Exporting Data Using export-ldif
    • 20.1.3.1 export-ldif Operation Modes
    • 20.1.3.2 To Export Data to LDIF
    • 20.1.3.3 To Export Partial Data
    • 20.1.3.4 To Export Part of a Back End by Using Filters
    • 20.1.3.5 To Include or Exclude Attributes During Export
    • 20.1.3.6 To Export to LDIF and Then Compress the File
    • 20.1.3.7 To Run an Export in Online Mode
    • 20.1.3.8 To Schedule an Export
  • 20.1.4 Creating MakeLDIF Template Files
    • 20.1.4.1 The Template File Format
    • 20.1.4.2 make-ldif Template File Tags
    • 20.1.4.3 Defining Custom Tags
• 20.2 Importing Large Data Sets
  • 20.2.1 Setting the Import Options
  • 20.2.2 Tuning the JVM and Java Arguments
• 20.3 Backing Up and Restoring Data
  • 20.3.1 Overview of the Backup and Restore Process
  • 20.3.2 Backing Up Data
    • 20.3.2.1 To Back Up All Back Ends
    • 20.3.2.2 To Back Up All Back Ends with Encryption and Signed Hashes
    • 20.3.2.3 To Perform an Incremental Backup on All Back Ends
    • 20.3.2.4 To Back Up a Specific Back End
    • 20.3.2.5 To Perform an Incremental Backup on a Specific Back End
    • 20.3.2.6 To Schedule a Backup as a Task
  • 20.3.3 Backing Up the Server Configuration
  • 20.3.4 Backing Up for Disaster Recovery
    • 20.3.4.1 To Back Up the Directory Server For Disaster Recovery
  • 20.3.5 Backing up and Restoring Data Using File System Snapshots
    • 20.3.5.1 To Take a ZFS Snapshot On a Dedicated Backup Server
    • 20.3.5.2 To Restore a Directory Server From a ZFS Snapshot
  • 20.3.6 Restoring Data
    • 20.3.6.1 To Restore a Back End
    • 20.3.6.2 To Restore a Back End From Incremental Backups
    • 20.3.6.3 To Schedule a Restore as a Task
    • 20.3.6.4 To Restore the Configuration File
    • 20.3.6.5 To Restore a Directory Server During Disaster Recovery
  • 20.3.7 Restoring Replicated Directory Servers
  • 20.3.8 Deleting Backup Data
    • 20.3.8.1 To Delete Backup Files
• 20.4 Searching Directory Data
  • 20.4.1 Overview of the ldapsearch Command
  • 20.4.2 ldapsearch Location and Format
    • 20.4.2.1 Common ldapsearch Options
  • 20.4.3 Understanding Search Criteria
    • 20.4.3.1 Specifying Filter Types and Operators
    • 20.4.3.2 Using Compound Search Filters
    • 20.4.3.3 Using UTF-8 Encoding in Search Filters
    • 20.4.3.4 Using Special Characters in Search Filters
  • 20.4.4 ldapsearch Examples
    • 20.4.4.1 To Return All Entries
    • 20.4.4.2 To Search For a Specific User
    • 20.4.4.3 To Search for Specific User Attributes
    • 20.4.4.4 To Perform a Search With Base Scope
    • 20.4.4.5 To Perform a Search With One-Level Scope
    • 20.4.4.6 To Perform a Search With Subtree Scope
    • 20.4.4.7 To Return Attribute Names Only
    • 20.4.4.8 To Return User Attributes Only
    • 20.4.4.9 To Return Base DNs Only
    • 20.4.4.10 To Search For Specific Object Classes
    • 20.4.4.11 To Return A Count of Matching Entries in the Directory
    • 20.4.4.12 To Perform a Search With a Compound Filter
    • 20.4.4.13 To Perform a Search Using a Filter File
    • 20.4.4.14 To Limit the Number of Entries Returned in a Search
  • 20.4.5 Searching Data With Oracle Directory Services Manager
    • 20.4.5.1 Perform a Complex LDAP Search
• 20.5 Using Advanced Search Features
  • 20.5.1 Searching for Special Entries and Attributes
    • 20.5.1.1 To Search for Operational Attributes
    • 20.5.1.2 To Search the Root DSE Entry
    • 20.5.1.3 To Search for ACI Attributes
    • 20.5.1.4 To Search the Schema Entry
    • 20.5.1.5 To Search the Configuration Entry
    • 20.5.1.6 To Search the Monitoring Entry
  • 20.5.2 Searching Over SSL
    • 20.5.2.1 To Search Over SSL With Blind Trust
    • 20.5.2.2 To Search Over SSL Using a Trust Store
    • 20.5.2.3 To Search Over SSL With No Trust Store
    • 20.5.2.4 To Search Over SSL Using a Keystore
    • 20.5.2.5 To Search Using StartTLS
    • 20.5.2.6 To Search Using SASL With DIGEST-MD5 Client Authentication
    • 20.5.2.7 To Search Using SASL With the GSSAPI Mechanism
    • 20.5.2.8 To Search Using SASL With the PLAIN Mechanism
  • 20.5.3 Searching Using Controls
    • 20.5.3.1 Viewing the Available Controls
    • 20.5.3.2 Searching Using the Join Search Control
    • 20.5.3.3 Searching Using the Proximity Search Control
    • 20.5.3.4 Searching Using the Account Usability Request Control
    • 20.5.3.5 Searching Using the Authorization Identity Request Control
    • 20.5.3.6 Searching Using the Get Effective Rights Control
    • 20.5.3.7 Searching Using the LDAP Assertion Control
    • 20.5.3.8 Searching Using the LDAP Subentry Control
    • 20.5.3.9 Searching Using the Manage DSA IT Control
    • 20.5.3.10 Searching Using the Matched Values Filter Control
    • 20.5.3.11 Searching Using the Password Policy Control
    • 20.5.3.12 Searching Using the Persistent Search Control
    • 20.5.3.13 Searching Using the Proxied Authorization Control
    • 20.5.3.14 Searching Using the Server-Side Sort Control
    • 20.5.3.15 Searching Using the Simple Paged Results Control
    • 20.5.3.16 Searching Using the Virtual List View Control
  • 20.5.4 Searching in Verbose Mode and With a Properties File
    • 20.5.4.1 To Search in Verbose Mode
    • 20.5.4.2 To Search Using a Properties File
  • 20.5.5 Searching Internationalized Entries
    • 20.5.5.1 Examples
    • 20.5.5.2 Supported Collation Rules
• 20.6 Adding, Modifying, and Deleting Directory Data
  • 20.6.1 Adding Directory Entries
    • 20.6.1.1 To Create a Root Entry
    • 20.6.1.2 To Add an Entry Using the --defaultAdd Option With ldapmodify
    • 20.6.1.3 To Add Entries Using an LDIF Update Statement With ldapmodify
  • 20.6.2 Adding Attributes
    • 20.6.2.1 To Add an Attribute to an Entry
    • 20.6.2.2 To Add an ACI Attribute
    • 20.6.2.3 To Add an International Attribute
  • 20.6.3 Modifying Directory Entries
    • 20.6.3.1 To Modify an Attribute Value
    • 20.6.3.2 To Modify an Attribute With Before and After Snapshots
    • 20.6.3.3 To Delete an Attribute
    • 20.6.3.4 To Change an RDN
    • 20.6.3.5 To Move an Entry
  • 20.6.4 Deleting Directory Entries
    • 20.6.4.1 To Delete an Entry With ldapmodify
    • 20.6.4.2 To Delete an Entry With ldapdelete
    • 20.6.4.3 To Delete Multiple Entries by Using a DN File
• 20.7 Indexing Directory Data
  • 20.7.1 Configuring Indexes on the Local DB Back End
    • 20.7.1.1 To Create a New Local DB Index
  • 20.7.2 Configuring VLV Indexes
    • 20.7.2.1 To Create a New VLV Index
• 20.8 Reducing Stored Data Size
  • 20.8.1 To Enable or Disable Compact Encoding
  • 20.8.2 To Enable or Disable Entry Compression
• 20.9 Ensuring Attribute Value Uniqueness
  • 20.9.1 Overview of the Unique Attribute Plug-In
  • 20.9.2 Configuring the Unique Attribute Plug-In Using dsconfig
    • 20.9.2.1 To Ensure Uniqueness of the Value of the uid Attribute
    • 20.9.2.2 To Ensure Uniqueness of the Value of Any Other Attribute
  • 20.9.3 Replication and the Unique Attribute Plug-In
• 20.10 Configuring Virtual Attributes
  • 20.10.1 To List the Existing Virtual Attributes
  • 20.10.2 To Create a New Virtual Attribute
  • 20.10.3 To Enable or Disable a Virtual Attribute
  • 20.10.4 To Display the Configuration of a Virtual Attribute
  • 20.10.5 To Change the Configuration of a Virtual Attribute
• 20.11 Using LDAP Subentries
  • 20.11.1 Relative Subtrees
• 20.12 Using Collective Attributes
  • 20.12.1 Extensions to the Collective Attributes Standard
    • 20.12.1.1 Naming Collective Attributes
    • 20.12.1.2 Collective Attributes and Conflict Resolution
    • 20.12.1.3 Excluding Collective Attributes From Specific Entries
  • 20.12.2 Configuring Collective Attributes
    • 20.12.2.1 To Create a New Collective Attribute
    • 20.12.2.2 To Delete a Collective Attribute
    • 20.12.2.3 To List the Collective Attributes That Apply to an Entry
  • 20.12.3 Inherited Collective Attributes
    • 20.12.3.1 Specifying Inherited Collective Attributes
• 20.13 Configuring Referrals
  • 20.13.1 Referrals in a Replicated Topology
  • 20.13.2 Configuring the Referral List Manually
  • 20.13.3 Smart Referrals
    • 20.13.3.1 To Configure a Smart Referral
    • 20.13.3.2 To Modify a Smart Referral
    • 20.13.3.3 To Delete a Smart Referral
  • 20.13.4 LDAP URLs
    • 20.13.4.1 Example LDAP URLs
• 20.14 Managing Virtual Attributes With Oracle Directory Services Manager
  • 20.14.1 Display Existing Virtual Attributes
  • 20.14.2 Create Virtual Attributes
• 20.15 Managing Data With Oracle Directory Services Manager
  • 20.15.1 Display Entries
  • 20.15.2 View the Attributes of an Entry
  • 20.15.3 Search for Entries
  • 20.15.4 Add an Entry
  • 20.15.5 Add an Entry Based on an Existing Entry
  • 20.15.6 Delete an Entry
  • 20.15.7 Delete an Entry and its Subtree
  • 20.15.8 Modify an Entry's RDN
  • 20.15.9 Import Data From an LDIF File
  • 20.15.10 Export Data to an LDIF File

21 Accessing Oracle Unified Directory by Using Oracle Directory Services Manager

• 21.1 Invoking Oracle Directory Services Manager
• 21.2 Connecting to the Server From Oracle Directory Services Manager
• 21.3 Displaying Server Information With Oracle Directory Services Manager
  • 21.3.1 View Version Information
  • 21.3.2 View the Server Role
  • 21.3.3 View Server Statistics
  • 21.3.4 View the Configured Connection Handlers
  • 21.3.5 View the Configured Naming Contexts
  • 21.3.6 View the Configured Data Sources

22 Managing Users and Groups

• 22.1 Managing User Accounts
  • 22.1.1 Changing Passwords
    • 22.1.1.1 To Change the Directory Manager's Password
    • 22.1.1.2 To Reset and Generate a New Password for a User
    • 22.1.1.3 To Change a User's Password
  • 22.1.2 Managing a User's Account Information
    • 22.1.2.1 To View a User's Account Information
    • 22.1.2.2 To View Account Status Information
    • 22.1.2.3 To Disable an Account
    • 22.1.2.4 To Enable an Account
    • 22.1.2.5 To Enable an Account Using orclIsEnabled
  • 22.1.3 Setting Resource Limits on a User Account
    • 22.1.3.1 To Set Resource Limits on an Account
• 22.2 Configuring Root Users
  • 22.2.1 Configuring Root Users by Using the Command-Line Utilities
    • 22.2.1.1 To Change the Global Root User Privileges
    • 22.2.1.2 To Create a New Root User
    • 22.2.1.3 To Edit an Existing Root User
  • 22.2.2 Configuring Root Users by Using ODSM
    • 22.2.2.1 Configure the Global Root User Privileges
    • 22.2.2.2 Create a New Root User
    • 22.2.2.3 Edit an Existing Root User
• 22.3 Defining Groups
  • 22.3.1 Defining Static Groups
    • 22.3.1.1 To Create a Static Group With groupOfNames
    • 22.3.1.2 To Create a Static Group With groupOfUniqueNames
    • 22.3.1.3 To Create a Static Group With groupOfEntries
    • 22.3.1.4 To List All Members of a Static Group
    • 22.3.1.5 To List All Static Groups of Which a User Is a Member
    • 22.3.1.6 To Determine Whether a User is a Member of a Group
  • 22.3.2 Defining Dynamic Groups
    • 22.3.2.1 To Create a Dynamic Group
    • 22.3.2.2 To List All Members of a Dynamic Group
    • 22.3.2.3 To List All Dynamic Groups of Which a User Is a Member
    • 22.3.2.4 To Determine Whether a User Is a Member of a Dynamic Group
  • 22.3.3 Defining Virtual Static Groups
    • 22.3.3.1 To Create a Virtual Static Group
    • 22.3.3.2 To List All Members of a Virtual Static Group
    • 22.3.3.3 To List All Virtual Static Groups of Which a User Is a Member
    • 22.3.3.4 To Determine Whether a User is a Member of a Virtual Static Group
  • 22.3.4 Defining Nested Groups
    • 22.3.4.1 To Create a Nested Group
• 22.4 Maintaining Referential Integrity
  • 22.4.1 Overview of the Referential Integrity Plug-In
  • 22.4.2 To Enable the Referential Integrity Plug-In
• 22.5 Simulating ODSEE Roles in an Oracle Unified Directory Server
  • 22.5.1 To Determine Whether a User is a Member of a Role
  • 22.5.2 To Alter Membership by Using the nsRoleDN Attribute

Part IV Advanced Administration: Security, Access Control, and Password Policies

23 Configuring Security Between Clients and Servers

• 23.1 Getting SSL Up and Running Quickly
  • 23.1.1 To Accept SSL-Based Connections Using a Self-Signed Certificate
• 23.2 Configuring Key Manager Providers
  • 23.2.1 Key Manager Provider Overview
  • 23.2.2 Using the JKS Key Manager Provider
    • 23.2.2.1 To Generate the Private Key
    • 23.2.2.2 To Self-Sign the Certificate
    • 23.2.2.3 To Sign the Certificate by Using an External Certificate Authority
    • 23.2.2.4 To Configure the JKS Key Manager Provider
  • 23.2.3 Using the PKCS #12 Key Manager Provider
  • 23.2.4 Using the PKCS #11 Key Manager Provider
  • 23.2.5 Replacing a Certificate in a Production Server
  • 23.2.6 Configuring Key Managers With ODSM
• 23.3 Configuring Trust Manager Providers
  • 23.3.1 Overview of Certificate Trust Mechanisms
  • 23.3.2 Using the Blind Trust Manager Provider
  • 23.3.3 Using the JKS Trust Manager Provider
  • 23.3.4 Using the PKCS #12 Trust Manager Provider
  • 23.3.5 Configuring Trust Managers With ODSM
• 23.4 Configuring Certificate Mappers
  • 23.4.1 Using the Subject Equals DN Certificate Mapper
  • 23.4.2 Using the Subject Attribute to User Attribute Certificate Mapper
  • 23.4.3 Using the Subject DN to User Attribute Certificate Mapper
  • 23.4.4 Using the Fingerprint Certificate Mapper
• 23.5 Configuring SSL and StartTLS for LDAP and JMX
  • 23.5.1 Configuring the LDAP and LDAPS Connection Handlers
    • 23.5.1.1 To Enable a Connection Handler
    • 23.5.1.2 To Specify a Connection Handler's Listening Port
    • 23.5.1.3 To Specify a Connection Handler's Authorization Policy
    • 23.5.1.4 To Specify a Nickname for a Connection Handler's Certificate
    • 23.5.1.5 To Specify a Connection Handler's Key Manager Provider
    • 23.5.1.6 To Specify a Connection Handler's Trust Manager Provider
    • 23.5.1.7 To Enable StartTLS Support
    • 23.5.1.8 To Enable SSL-Based Communication
  • 23.5.2 Enabling SSL in the JMX Connection Handler
• 23.6 Using SASL Authentication
  • 23.6.1 Supported SASL Mechanisms
  • 23.6.2 Authorization IDs
  • 23.6.3 SASL Options for the ANONYMOUS Mechanism
  • 23.6.4 SASL Options for the CRAM-MD5 Mechanism
  • 23.6.5 SASL Options for the DIGEST-MD5 Mechanism
  • 23.6.6 SASL Options for the EXTERNAL Mechanism
  • 23.6.7 SASL Options for the GSSAPI Mechanism
  • 23.6.8 SASL Options for the PLAIN Mechanism
• 23.7 Configuring SASL Authentication
  • 23.7.1 Configuring SASL External Authentication
    • 23.7.1.1 Configuring the LDAP Connection Handler to Allow SASL EXTERNAL Authentication
    • 23.7.1.2 Configuring the EXTERNAL SASL Mechanism Handler
  • 23.7.2 Configuring SASL DIGEST-MD5 Authentication
  • 23.7.3 Configuring SASL GSSAPI Authentication
• 23.8 Configuring Kerberos and the Oracle Unified Directory Server for GSSAPI SASL Authentication
  • 23.8.1 To Configure Kerberos V5 on a Host
  • 23.8.2 To Specify SASL Options for Kerberos Authentication
  • 23.8.3 Example Configuration of Kerberos Authentication Using GSSAPI With SASL
    • 23.8.3.1 Assumptions for This Example
    • 23.8.3.2 All Machines: Edit the Kerberos Client Configuration File
    • 23.8.3.3 All Machines: Edit the Administration Server ACL Configuration File
    • 23.8.3.4 KDC Machine: Edit the KDC Server Configuration File
    • 23.8.3.5 KDC Machine: Create the KDC Database
    • 23.8.3.6 KDC Machine: Create an Administration Principal and Keytab
    • 23.8.3.7 KDC Machine: Start the Kerberos Daemons
    • 23.8.3.8 KDC Machine: Add Host Principals for the KDC and Oracle Unified Directory Machines
    • 23.8.3.9 KDC Machine: Add an LDAP Principal for the Directory Server
    • 23.8.3.10 KDC Machine: Add a Test User to the KDC
    • 23.8.3.11 Directory Server Machine: Install Oracle Unified Directory
    • 23.8.3.12 Directory Server Machine: Create and Configure the Directory Server LDAP
    • 23.8.3.13 Directory Server Machine: Configure the Directory Server to Enable GSSAPI
    • 23.8.3.14 Directory Server Machine: Add a Test User to the Directory Server
    • 23.8.3.15 Directory Server Machine: Obtain a Kerberos Ticket as the Test User
    • 23.8.3.16 Client Machine: Authenticate to the Directory Server Through GSSAPI
  • 23.8.4 Creating a Kerberos Workflow Element Using dsconfig
  • 23.8.5 Troubleshooting Kerberos Configuration
• 23.9 Testing SSL, StartTLS, and SASL Authentication With ldapsearch
  • 23.9.1 ldapsearch Command Line Arguments Applicable To Security
  • 23.9.2 Testing SSL
  • 23.9.3 Testing StartTLS
  • 23.9.4 Testing SASL External Authentication
• 23.10 Debugging SSL Using OpenSSL s_client Test Utility
  • 23.10.1 Scenario 1- Connection Refused
  • 23.10.2 Scenario 2- Verify Return Code: 18 (Self Signed Certificate)
  • 23.10.3 Scenario 3 - Verify Return Code: 0 (ok)
  • 23.10.4 Scenario 4 - SSLHandshakeException
  • 23.10.5 Scenario 5 - SASL EXTERNAL Bind Request Could Not Be Processed
• 23.11 Debugging SSL or TLS Using Java Debug Information
  • 23.11.1 Enabling SSL Debug Recording
  • 23.11.2 Disabling SSL Debug Recording
• 23.12 Controlling Connection Access Using Allowed and Denied Rules
  • 23.12.1 Property Syntax of Allowed and Denied Client Rules
  • 23.12.2 Configuring Allowed and Denied Client Rules
• 23.13 Configuring Unlimited Strength Cryptography

24 Configuring Security Between the Proxy and the Data Source

• 24.1 How the Proxy Manages Secure Connections
• 24.2 Modes of Secure Connection
  • 24.2.1 The always Secure Mode
  • 24.2.2 The never Secure Mode
  • 24.2.3 The user Secure Mode
• 24.3 Configuring Security Between the Proxy and Data Source Using dsconfig
  • 24.3.1 To Configure Security Between the Proxy and Directory Servers Using dsconfig
  • 24.3.2 Configurable LDAP Extension Properties Relevant to Security

25 Controlling Access To Data

• 25.1 Managing Global ACIs With dsconfig
  • 25.1.1 Default Global ACIs
  • 25.1.2 To Display the Global ACIs
  • 25.1.3 To Delete a Global ACI
  • 25.1.4 To Add a Global ACI
• 25.2 Managing ACIs With ldapmodify
  • 25.2.1 To View ACI Attribute Values
  • 25.2.2 To Add an ACI
  • 25.2.3 To Remove an ACI
• 25.3 Managing Access Control With Oracle Directory Services Manager
  • 25.3.1 Display the Configured ACIs
  • 25.3.2 Create an Access Control Point
  • 25.3.3 Create an Access Control Point Based on an Existing Access Control Point
  • 25.3.4 Delete an Access Control Point
  • 25.3.5 Add an ACI
  • 25.3.6 Add an ACI Based on an Existing ACI
  • 25.3.7 Modify an ACI
• 25.4 Managing Macro ACIs With Oracle Directory Services Manager
  • 25.4.1 Editing a Target
  • 25.4.2 Editing a Target Filter
  • 25.4.3 Editing Bind Rules for User DN or Group DN
  • 25.4.4 Editing Bind Rules for User Attributes
• 25.5 Access Control Usage Examples
  • 25.5.1 Disabling Anonymous Access
  • 25.5.2 Granting Write Access to Personal Entries
    • 25.5.2.1 Granting Write Access Based on DNS
    • 25.5.2.2 Granting Write Access Based on Authentication Method
  • 25.5.3 Granting a Group Full Access to a Suffix
  • 25.5.4 Granting Rights to Add and Delete Group Entries
    • 25.5.4.1 Creating a "Create Group" ACI
    • 25.5.4.2 Creating a "Delete Group" ACI
  • 25.5.5 Allowing Users to Add or Remove Themselves From a Group
  • 25.5.6 Granting Conditional Access to a Group
  • 25.5.7 Denying Access
  • 25.5.8 Defining Permissions for DNs That Contain a Comma
• 25.6 Proxy Authorization ACIs
• 25.7 Viewing Effective Rights
  • 25.7.1 The Get Effective Rights Control
  • 25.7.2 Using the Get Effective Rights Control
  • 25.7.3 Understanding Effective Rights Results
    • 25.7.3.1 Rights Information
    • 25.7.3.2 write, selfwrite_add, and selfwrite_delete Permissions
    • 25.7.3.3 Logging Information
  • 25.7.4 Restricting Access to the Get Effective Rights Control

26 Managing Administrative Users

• 26.1 Working With Multiple Root Users
• 26.2 Root Users and the Privilege Subsystem
• 26.3 Managing Root Users With dsconfig
  • 26.3.1 To View the Default Root User Privileges
  • 26.3.2 To Edit the Default Root User Privileges
  • 26.3.3 To Create a Root User
  • 26.3.4 To Change a Root User's Password
  • 26.3.5 To Change a Root User's Privileges
• 26.4 Setting Root User Resource Limits
• 26.5 Managing Administrators
  • 26.5.1 To Create a New Administrator
  • 26.5.2 To Create an Administrator with Root User Privileges
• 26.6 Managing Global Administrators

27 Managing Password Policies

• 27.1 Password Policy Components
• 27.2 Default Password Policy Properties
  • 27.2.1 To View the Properties of the Default Password Policy
  • 27.2.2 To Modify the Default Password Policy
• 27.3 Attributes for Password Policy State Information
• 27.4 Attributes Used in the pwdPolicy ObjectClass
• 27.5 Password Policies in a Replicated Environment
• 27.6 Configuring Password Policies by Using the Command Line
  • 27.6.1 Configuring the Default Password Policy
  • 27.6.2 To Create a New Password Policy
  • 27.6.3 To Create a First Login Password Policy
  • 27.6.4 To Assign a Password Policy to an Individual Account
  • 27.6.5 To Prevent Password Policy Modifications
  • 27.6.6 To Assign a Password Policy to a Group of Users
  • 27.6.7 To Define a Password Policy as an LDAP Subentry
  • 27.6.8 To Delete a Password Policy
• 27.7 Configuring Password Policies by Using Oracle Directory Services Manager
  • 27.7.1 List the Configured Password Policy Subentries
  • 27.7.2 Create a Password Policy Subentry
  • 27.7.3 Create a Password Policy Subentry Based on an Existing Password Policy Subentry
  • 27.7.4 Delete a Password Policy Subentry
  • 27.7.5 Display the Configured Password Policies
  • 27.7.6 Modify a Password Policy
  • 27.7.7 Create a Password Policy
  • 27.7.8 Create a Password Policy Based on an Existing Password Policy
  • 27.7.9 Delete a Password Policy
  • 27.7.10 Display the Supported Password Storage Schemes
  • 27.7.11 Enable or Disable a Password Storage Scheme
• 27.8 Password Validators
  • 27.8.1 Managing Password Validators
    • 27.8.1.1 To Display the Available Password Validators
    • 27.8.1.2 To Display the Properties of a Password Validator
    • 27.8.1.3 To Enable or Disable a Password Validator
    • 27.8.1.4 To Configure the Values of a Password Validator
    • 27.8.1.5 To Associate a Password Validator With a Password Policy
• 27.9 Password Generators
  • 27.9.1 To Display the Configured Password Generators
  • 27.9.2 To Display the Properties of a Password Generator
  • 27.9.3 To Enable or Disable a Password Generator
  • 27.9.4 To Configure the Values of a Password Generator
  • 27.9.5 To Associate a Password Generator With a Password Policy

28 Integrating Oracle Unified Directory with Oracle Enterprise User Security

• 28.1 What's New in this Release
• 28.2 Introduction to the Integration Scenarios
• 28.3 Oracle Unified Directory Used as a Directory Server with Enterprise User Security
  • 28.3.1 Task 1: Preparing Oracle Unified Directory for Enterprise User Security Integration
    • 28.3.1.1 Enabling Enterprise User Security During Installation
    • 28.3.1.2 Enabling Enterprise User Security With ODSM for an Existing Instance
  • 28.3.2 Task 2: Configuring Users and Groups Location
  • 28.3.3 Task 3: Configuring Oracle Database for Oracle Unified Directory
    • 28.3.3.1 Configuring Your Database to Use the Oracle Unified Directory
    • 28.3.3.2 Registering Your Database with the Oracle Unified Directory
    • 28.3.3.3 Mapping Enterprise Users
    • 28.3.3.4 Connecting to the Database as an Enterprise User
    • 28.3.3.5 Using Enterprise Roles
    • 28.3.3.6 Using Proxy Permissions
• 28.4 Oracle Unified Directory Used as a Proxy Server for an External LDAP Directory with Enterprise User Security
  • 28.4.1 Task 1: Preparing the External Directories for Integration
    • 28.4.1.1 User Identities in Microsoft Active Directory
    • 28.4.1.2 User Identities in Oracle Directory Server Enterprise Edition
    • 28.4.1.3 User Identities in Novell eDirectory
    • 28.4.1.4 User Identities in Oracle Unified Directory
  • 28.4.2 Task 2: Preparing the Oracle Unified Directory for Integration
    • 28.4.2.1 Configuring Enterprise User Security for an Oracle Unified Directory Proxy Server
    • 28.4.2.2 Performing Post Configuration Steps
  • 28.4.3 Task 3: Configuring Users and Groups Location
  • 28.4.4 Task 4: Configuring Oracle Database for Enterprise User Security
• 28.5 Connecting to the Database as an Enterprise User
• 28.6 Password Policies

Part V Advanced Administration: Data Replication, Schema Management, and Moving Across Environments

29 Replicating Directory Data

• 29.1 Before You Begin Configuring Replication
• 29.2 Configuring Data Replication With dsreplication
  • 29.2.1 To Enable Replication Between Two Servers
    • 29.2.1.1 Controlling Where Replication Servers are Created
  • 29.2.2 To Initialize a Replicated Server
  • 29.2.3 To Initialize an Entire Topology
  • 29.2.4 To Test Replication
  • 29.2.5 To Obtain the Status of a Replicated Topology
  • 29.2.6 To Merge Two Existing Replicated Topologies
  • 29.2.7 To Disable Replication For a Specific Replication Domain
    • 29.2.7.1 Notes About Disabling the Replication Server
• 29.3 Configuring Data Replication Using ODSM
  • 29.3.1 To View or Modify Configuration for an Existing Replication Server
  • 29.3.2 To View or Modify Configuration for a Replicated Suffix
  • 29.3.3 Launching the Replication Configuration Wizard from the Directory Manager Tab
    • 29.3.3.1 To Create a New Topology from Scratch
    • 29.3.3.2 To Add a Server to an Existing Topology
  • 29.3.4 Launching the Replication Configuration Wizard from the Topology Manager Tab
    • 29.3.4.1 To Create a New Topology from Scratch
    • 29.3.4.2 To Manage an Existing Replication Topology
• 29.4 Configuring Large Replication Topologies
  • 29.4.1 To Configure a Dedicated Replication Server
• 29.5 Modifying the Replication Configuration With dsconfig
  • 29.5.1 Retrieving the Replication Domain Name
  • 29.5.2 Changing the Replication Purge Delay
    • 29.5.2.1 How Replication Changes Are Purged
    • 29.5.2.2 To Change the Replication Purge Delay
  • 29.5.3 Changing the Window Size
    • 29.5.3.1 To Change the Window Size
  • 29.5.4 Changing the Initialization Window Size
    • 29.5.4.1 To Change the Initialization Window Size
  • 29.5.5 Changing the Heartbeat Interval
    • 29.5.5.1 To Change the Heartbeat Interval
  • 29.5.6 Changing the Isolation Policy
    • 29.5.6.1 To Change the Isolation Policy
  • 29.5.7 Configuring Encrypted Replication
  • 29.5.8 Configuring Replication Groups
    • 29.5.8.1 To Configure a Replication Group
  • 29.5.9 Configuring Assured Replication
    • 29.5.9.1 To Configure Assured Replication in Safe Data Mode
    • 29.5.9.2 To Configure Assured Replication in Safe Read Mode
  • 29.5.10 Configuring Fractional Replication
    • 29.5.10.1 To Configure Exclusive Fractional Replication
    • 29.5.10.2 To Configure Inclusive Fractional Replication
    • 29.5.10.3 To Configure and Initialize a Fractional Domain
  • 29.5.11 Configuring Replication Status
    • 29.5.11.1 To Configure the Degraded Status Threshold
  • 29.5.12 Configuring the Replication Server Weight
• 29.6 Initializing a Replicated Server With Data
  • 29.6.1 Initializing a Single Replicated Server
  • 29.6.2 Initializing a New Replicated Topology
  • 29.6.3 Adding a Directory Server to an Existing Replicated Topology
  • 29.6.4 Changing the Data Set in an Existing Replicated Topology
    • 29.6.4.1 To Change the Data Set With import-ldif or Binary Copy
  • 29.6.5 Appending Data in an Existing Replicated Topology
• 29.7 Using the External Change Log
  • 29.7.1 Enabling the External Change Log
  • 29.7.2 External Change Log APIs
  • 29.7.3 How a Client Application Uses the External Change Log in Cookie Mode
  • 29.7.4 Format of External Change Log Entries
  • 29.7.5 Specifying the Attributes to be Included in the External Change Log
  • 29.7.6 Specifying the Attributes to be Excluded in the External Change Log
  • 29.7.7 Initializing Client Applications to Use the External Change Log
    • 29.7.7.1 To Initialize a Client Application to Use the External Change Log
    • 29.7.7.2 Reinitializing a Client Application When a Domain is Added
    • 29.7.7.3 Reinitializing a Client Application When a Domain is Removed or Disabled
  • 29.7.8 Controlling Access to the External Change Log
  • 29.7.9 Purging the External Change Log
  • 29.7.10 Disabling the External Change Log on a Server
  • 29.7.11 Disabling the External Change Log for a Specific Domain
  • 29.7.12 Retrieving the last Change Number
  • 29.7.13 Porting Applications That Rely on Other Change Logs
    • 29.7.13.1 Differences Between the ECL and the LDAP Change Log Draft
    • 29.7.13.2 Additional Differences Between the ECL and the Oracle Directory Server Enterprise Edition Retro Change Log
    • 29.7.13.3 API for Compatibility With the LDAP Change Log Draft and the Oracle Directory Server Enterprise Edition Retro Change Log
• 29.8 Configuring Schema Replication
  • 29.8.1 Specifying the Schema Source
  • 29.8.2 Disabling Schema Replication
    • 29.8.2.1 To Specify That Schema Should Not Be Replicated
    • 29.8.2.2 To Disable Schema Replication
• 29.9 Replicating to a Read-Only Server
  • 29.9.1 Configuring a Replica as Read-Only
• 29.10 Detecting and Resolving Replication Inconsistencies
  • 29.10.1 Types of Replication Inconsistencies
  • 29.10.2 Detecting Inconsistencies
  • 29.10.3 Resolving Inconsistencies
  • 29.10.4 Solving Naming Conflicts
• 29.11 Purging Historical Replication Data
• 29.12 Using Isolated Replicas
  • 29.12.1 Deployment Scenarios for Isolated Replicas
    • 29.12.1.1 Using Isolated Replicas in a DMZ
    • 29.12.1.2 Using Isolated Replicas for Testing
• 29.13 Replicating Between Oracle Directory Server Enterprise Edition and Oracle Unified Directory
  • 29.13.1 To Migrate the Oracle Directory Server Enterprise Edition Schema and Configuration
  • 29.13.2 To Configure Replication Between Oracle Directory Server Enterprise Edition and Oracle Unified Directory
  • 29.13.3 To Initialize the Oracle Unified Directory with Oracle Directory Server Enterprise Edition Data

30 Managing Directory Schema

• 30.1 Oracle Unified Directory Schema Overview
  • 30.1.1 Designing and Extending the Schema
  • 30.1.2 Default Schema Files
• 30.2 Configuring Schema Checking
• 30.3 Working With Object Identifiers (OIDs)
  • 30.3.1 Obtaining a Base OID
• 30.4 Extending the Schema
  • 30.4.1 Managing Attribute Types
    • 30.4.1.1 To View Attribute Types
    • 30.4.1.2 To Create an Attribute Type
    • 30.4.1.3 To Delete an Attribute Type
  • 30.4.2 Managing Object Classes
    • 30.4.2.1 To View Object Classes
    • 30.4.2.2 To Create an Object Class
    • 30.4.2.3 To Delete an Object Class
• 30.5 Replicating the Schema
• 30.6 Managing the Schema With Oracle Directory Services Manager
  • 30.6.1 Add a New Attribute Type
  • 30.6.2 Add an Attribute Based on an Existing Attribute
  • 30.6.3 Modify an Attribute
  • 30.6.4 Delete an Attribute
  • 30.6.5 View All Directory Attributes
  • 30.6.6 Search for Attributes
  • 30.6.7 View the Indexing Details of an Attribute
  • 30.6.8 Add a New Object Class
  • 30.6.9 Add an Object Class Based on an Existing Object Class
  • 30.6.10 View the Properties of an Object Class
  • 30.6.11 Modify an Object Class
  • 30.6.12 Delete an Object Class
  • 30.6.13 Search for Object Classes
  • 30.6.14 Display a List of LDAP Syntaxes
  • 30.6.15 Search for a Syntax
  • 30.6.16 Display a List of LDAP Matching Rules
  • 30.6.17 Search for a Matching Rule
  • 30.6.18 Display a List of Content Rules
  • 30.6.19 Search for a Content Rule
  • 30.6.20 Create a New Content Rule
  • 30.6.21 Create a Content Rule Based on an Existing Content Rule
  • 30.6.22 Modify a Content Rule
  • 30.6.23 Delete a Content Rule

31 Moving From a Test to a Production Environment

• 31.1 Introduction to Moving Across Environments
• 31.2 Limitations in Moving From Test to Production
• 31.3 Overview of the Test to Production Process
  • 31.3.1 Moving the Binaries
  • 31.3.2 Moving the Configuration
    • 31.3.2.1 Copying the Configuration
    • 31.3.2.2 Editing the Configuration
    • 31.3.2.3 Pasting the Configuration
  • 31.3.3 Moving the Data

Part VI Advanced Administration: Monitoring and Tuning Performance

32 Monitoring Oracle Unified Directory

• 32.1 Monitoring Overview
• 32.2 Configuring Monitor Providers
  • 32.2.1 To View Monitor Providers
  • 32.2.2 To Disable a Monitor Provider
• 32.3 Configuring Logs
  • 32.3.1 Configuring Logs by Using dsconfig
    • 32.3.1.1 Configuring Log Publishers
    • 32.3.1.2 Configuring Log Retention Policies
    • 32.3.1.3 Configuring Log Rotation Policies
  • 32.3.2 Configuring Logs by Using ODSM
    • 32.3.2.1 Modify Logger Properties
    • 32.3.2.2 Modify Log Rotation Policies
    • 32.3.2.3 Modify Log Retention Policies
  • 32.3.3 Logging Operations to Access Log Publishers
    • 32.3.3.1 Overview of the Admin Logger
    • 32.3.3.2 Configuring Logged Operations in Access Log Publishers Using ODSM
• 32.4 Configuring Alerts and Account Status Notification Handlers
  • 32.4.1 Managing Alert Handlers
    • 32.4.1.1 Managing Alert Handlers by Using dsconfig
    • 32.4.1.2 Managing Alert Handlers by Using ODSM
    • 32.4.1.3 Supported Alert Types
  • 32.4.2 Managing Account Status Notification Handlers
    • 32.4.2.1 To View the Configured Account Status Notification Handlers
    • 32.4.2.2 To Enable Account Status Notification Handlers
    • 32.4.2.3 To Create a New Account Status Notification Handler
    • 32.4.2.4 To Delete an Account Status Notification Handler
• 32.5 Monitoring the Server With LDAP
  • 32.5.1 Viewing Monitoring Information Using the cn=monitor Entry
    • 32.5.1.1 Monitored Attributes in the Proxy
    • 32.5.1.2 To View the Available Monitoring Information
    • 32.5.1.3 To Monitor General-Purpose Server Information
    • 32.5.1.4 To Monitor System Information
    • 32.5.1.5 To Monitor Version Information
    • 32.5.1.6 To Monitor the User Root Back End
    • 32.5.1.7 To Monitor the Backup Back End
    • 32.5.1.8 To Monitor the Tasks Back End
    • 32.5.1.9 To Monitor the monitor Back End
    • 32.5.1.10 To Monitor the Schema Back End
    • 32.5.1.11 To Monitor the adminRoot Back End
    • 32.5.1.12 To Monitor the ads-truststore Back End
    • 32.5.1.13 To Monitor Client Connections
    • 32.5.1.14 To Monitor the LDAP Connection Handler
    • 32.5.1.15 To Monitor LDAP Connection Handler Statistics
    • 32.5.1.16 To Monitor Connections on the LDAP Connection Handler
    • 32.5.1.17 To Monitor the Administration Connector
    • 32.5.1.18 To Monitor Administration Connector Statistics
    • 32.5.1.19 To Monitor Connections on the Administration Connector
    • 32.5.1.20 To Monitor the LDIF Connection Handler
    • 32.5.1.21 To Monitor the Work Queue
    • 32.5.1.22 To Monitor JVM Stack Trace Information
    • 32.5.1.23 To Monitor the JVM Memory Usage
    • 32.5.1.24 To Monitor the userRoot Database Environment
    • 32.5.1.25 To Monitor the Database Cache
    • 32.5.1.26 To Monitor the Entry Cache
    • 32.5.1.27 To Monitor Network Groups
    • 32.5.1.28 To Monitor Distribution
    • 32.5.1.29 To Monitor Load Balancing
    • 32.5.1.30 To Monitor Remote LDAP Servers
    • 32.5.1.31 To Monitor a Global Index
    • 32.5.1.32 To Monitor a Global Index Catalog
  • 32.5.2 Monitoring Using the manage-tasks Command
  • 32.5.3 Monitoring the Server With JConsole
    • 32.5.3.1 To Configure JMX on a Server Instance
    • 32.5.3.2 Starting JConsole
    • 32.5.3.3 Accessing a Server Instance From JConsole
    • 32.5.3.4 Viewing Monitoring Information With JConsole
  • 32.5.4 Accessing Logs
    • 32.5.4.1 To View the Access Logs
    • 32.5.4.2 To View the Audit Logs
    • 32.5.4.3 To View the Debug Logs
    • 32.5.4.4 To View the Error Logs
    • 32.5.4.5 To View the Replication Repair Logs
    • 32.5.4.6 To View the server.out Logs
    • 32.5.4.7 To View the Setup Logs
• 32.6 Monitoring the Server With SNMP
  • 32.6.1 Configuring the SNMP Connection Handler and Its Dependencies
    • 32.6.1.1 To Configure SNMP in the Server
    • 32.6.1.2 To View the SNMP Connection Handler Properties
    • 32.6.1.3 To Access SNMP on a Server Instance
    • 32.6.1.4 SNMP Security Configuration
• 32.7 Monitoring a Replicated Topology
  • 32.7.1 Monitoring Basic OUD Replication Status Using dsreplication
    • 32.7.1.1 To Return Minimal Basic Replication Status Information
    • 32.7.1.2 To Return Additional Basic Replication Status Information
  • 32.7.2 Monitoring Advanced OUD Replication Status Using dsreplication
    • 32.7.2.1 To Return a Comprehensive List of Available Replication Status Information
    • 32.7.2.2 To Monitor the Topology and Its Connections
    • 32.7.2.3 To Monitor Replication Latency
    • 32.7.2.4 To Monitor Data Consistency
    • 32.7.2.5 To Monitor Replication Security
    • 32.7.2.6 To Monitor Replicated Updates
    • 32.7.2.7 To Monitor Replication Conflicts
  • 32.7.3 Monitoring OUD and ODSEE Replication Status in Deployments Using Replication Gateways
    • 32.7.3.1 Using dsreplication to Monitor Changes Made on the OUD Topology
    • 32.7.3.2 Using the DSCC to Monitor a Replication Gateway
• 32.8 General Purpose Enterprise Monitoring Solutions
  • 32.8.1 General UNIX Monitoring Tools
  • 32.8.2 Solaris Monitoring Tools
  • 32.8.3 HP-UX Monitoring Tools

33 Tuning Performance

• 33.1 Assessing Performance Problems
• 33.2 General Performance Tuning
• 33.3 Tuning Java Virtual Machine Settings Using dsjavaproperties Utility
• 33.4 Tuning Java Virtual Machine Settings Using dstune Utility
  • 33.4.1 Using the dstune Utility
    • 33.4.1.1 Tuning Options Provided by the dstune Utility
    • 33.4.1.2 Displaying the Current Tuning Mode
  • 33.4.2 Examples with the Interactive Mode of the dstune Utility
    • 33.4.2.1 Memory-Based Tuning
    • 33.4.2.2 Data-Based Tuning
    • 33.4.2.3 Runtime Tuning
    • 33.4.2.4 Displaying the Current Tuning Mode
• 33.5 Determining the Database Cache Size
• 33.6 Tuning the Server Configuration
  • 33.6.1 Back End Tuning Parameters
  • 33.6.2 Core Server Tuning Parameters
  • 33.6.3 Additional Tuning Recommendations

A Oracle Unified Directory Command-Line Interface

• A.1 General Command-Line Usage Information
  • A.1.1 Summary of Server Commands and Their Use
  • A.1.2 Using a Properties File With Server Commands
    • A.1.2.1 Locating the Properties File
    • A.1.2.2 Order of Precedence of Options and Properties
• A.2 Server Administration Commands
  • A.2.1 create-rc-script
    • A.2.1.1 Synopsis
    • A.2.1.2 Description
    • A.2.1.3 Options
    • A.2.1.4 General Options
    • A.2.1.5 Examples
    • A.2.1.6 Code Generated by the create-rc-script Command
    • A.2.1.7 Exit Codes
    • A.2.1.8 Location
    • A.2.1.9 Related Commands
  • A.2.2 dps2oud
    • A.2.2.1 Synopsis
    • A.2.2.2 Description
    • A.2.2.3 Options
    • A.2.2.4 LDAP Connection Options
    • A.2.2.5 General Options
    • A.2.2.6 Examples
    • A.2.2.7 Exit Codes
    • A.2.2.8 Location
    • A.2.2.9 Related Commands
  • A.2.3 ds2oud
    • A.2.3.1 Synopsis
    • A.2.3.2 Description
    • A.2.3.3 Options
    • A.2.3.4 Oracle Directory Server Enterprise Edition LDAP Connection Options
    • A.2.3.5 Oracle Unified Directory LDAP Connection Options
    • A.2.3.6 Command Input/Output Options
    • A.2.3.7 General Options
    • A.2.3.8 Examples
    • A.2.3.9 Exit Codes
    • A.2.3.10 Location
    • A.2.3.11 Related Commands
  • A.2.4 dsconfig
    • A.2.4.1 Synopsis
    • A.2.4.2 Description
    • A.2.4.3 Help Subcommands
    • A.2.4.4 General Subcommands
    • A.2.4.5 Distribution Subcommands
    • A.2.4.6 General Configuration Subcommands
    • A.2.4.7 Load Balancing Subcommands
    • A.2.4.8 Local Data Source Subcommands
    • A.2.4.9 Integration Subcommands
    • A.2.4.10 Remote Data Source Subcommands
    • A.2.4.11 Replication Subcommands
    • A.2.4.12 Schema Subcommands
    • A.2.4.13 Security Subcommands
    • A.2.4.14 Virtualization Subcommands
    • A.2.4.15 Options
    • A.2.4.16 LDAP Connection Options
    • A.2.4.17 Command Input/Output Options
    • A.2.4.18 General Options
    • A.2.4.19 Examples
    • A.2.4.20 Exit Codes
    • A.2.4.21 Using a Properties File
    • A.2.4.22 Location
    • A.2.4.23 Related Commands
  • A.2.5 dsjavaproperties
    • A.2.5.1 Synopsis
    • A.2.5.2 Description
    • A.2.5.3 Options
    • A.2.5.4 Example
    • A.2.5.5 Exit Codes
    • A.2.5.6 Location
  • A.2.6 dsreplication
    • A.2.6.1 Synopsis
    • A.2.6.2 Description
    • A.2.6.3 Server Subcommands
    • A.2.6.4 Options
    • A.2.6.5 Configuration Options
    • A.2.6.6 LDAP Connection Options
    • A.2.6.7 Command Input/Output Options
    • A.2.6.8 General Options
    • A.2.6.9 Examples
    • A.2.6.10 Exit Codes
    • A.2.6.11 Using a Properties File
    • A.2.6.12 Location
    • A.2.6.13 Related Commands
  • A.2.7 dstune
    • A.2.7.1 Synopsis
    • A.2.7.2 Description
    • A.2.7.3 Subcommands
    • A.2.7.4 Utility Input/Output Options
    • A.2.7.5 General Options
    • A.2.7.6 Examples
    • A.2.7.7 Exit Codes
    • A.2.7.8 Location
    • A.2.7.9 Related Commands
  • A.2.8 gicadm
    • A.2.8.1 Synopsis
    • A.2.8.2 Description
    • A.2.8.3 Options
    • A.2.8.4 LDAP Connection Options
    • A.2.8.5 Command Input/Output Options
    • A.2.8.6 General Options
    • A.2.8.7 Examples
    • A.2.8.8 Exit Codes
    • A.2.8.9 Location
    • A.2.8.10 Related Commands
  • A.2.9 manage-tasks
    • A.2.9.1 Synopsis
    • A.2.9.2 Description
    • A.2.9.3 Options
    • A.2.9.4 LDAP Connection Options
    • A.2.9.5 Command Input/Output Options
    • A.2.9.6 General Options
    • A.2.9.7 Examples
    • A.2.9.8 Exit Codes
    • A.2.9.9 Using a Properties File
    • A.2.9.10 Location
    • A.2.9.11 Related Commands
  • A.2.10 oudCopyConfig
    • A.2.10.1 Synopsis
    • A.2.10.2 Description
    • A.2.10.3 Options
    • A.2.10.4 Examples
    • A.2.10.5 Location
    • A.2.10.6 Related Commands
  • A.2.11 oudExtractMovePlan
    • A.2.11.1 Synopsis
    • A.2.11.2 Description
    • A.2.11.3 Options
    • A.2.11.4 Examples
    • A.2.11.5 Location
    • A.2.11.6 Related Commands
  • A.2.12 oudPasteConfig
    • A.2.12.1 Synopsis
    • A.2.12.2 Description
    • A.2.12.3 Options
    • A.2.12.4 Examples
    • A.2.12.5 Location
    • A.2.12.6 Related Commands
  • A.2.13 oud-replication-gateway-setup
    • A.2.13.1 Synopsis
    • A.2.13.2 Description
    • A.2.13.3 Options
    • A.2.13.4 Replication Gateway Configuration Options
    • A.2.13.5 Oracle Directory Server Enterprise Edition Server Options
    • A.2.13.6 Replication Gateway Security Options
    • A.2.13.7 Oracle Unified Directory Server Options
    • A.2.13.8 Secure Connection Options
    • A.2.13.9 Command Input/Output Options
    • A.2.13.10 General Options
    • A.2.13.11 Examples
    • A.2.13.12 Exit Codes
    • A.2.13.13 Using a Properties File
    • A.2.13.14 Log Files
    • A.2.13.15 Location
    • A.2.13.16 Related Commands
  • A.2.14 oud-setup
    • A.2.14.1 Synopsis
    • A.2.14.2 Description
    • A.2.14.3 Options
    • A.2.14.4 Command Input/Output Options
    • A.2.14.5 General Options
    • A.2.14.6 Examples
    • A.2.14.7 Exit Codes
    • A.2.14.8 Using a Properties File
    • A.2.14.9 Log Files
    • A.2.14.10 Location
    • A.2.14.11 Related Commands
  • A.2.15 oud-proxy-setup
    • A.2.15.1 Synopsis
    • A.2.15.2 Description
    • A.2.15.3 Options
    • A.2.15.4 Command Input/Output Options
    • A.2.15.5 General Options
    • A.2.15.6 Examples
    • A.2.15.7 Exit Codes
    • A.2.15.8 Log Files
    • A.2.15.9 Location
    • A.2.15.10 Related Commands
  • A.2.16 start-ds
    • A.2.16.1 Synopsis
    • A.2.16.2 Description
    • A.2.16.3 Options
    • A.2.16.4 Command Input/Output Options
    • A.2.16.5 General Options
    • A.2.16.6 Examples
    • A.2.16.7 Exit Codes
    • A.2.16.8 Location
    • A.2.16.9 Related Commands
  • A.2.17 status
    • A.2.17.1 Synopsis
    • A.2.17.2 Description
    • A.2.17.3 LDAP Connection Options
    • A.2.17.4 Command Input/Output Options
    • A.2.17.5 General Options
    • A.2.17.6 Examples
    • A.2.17.7 Exit Codes
    • A.2.17.8 Using a Properties File
    • A.2.17.9 Location
  • A.2.18 stop-ds
    • A.2.18.1 Synopsis
    • A.2.18.2 Description
    • A.2.18.3 Options
    • A.2.18.4 LDAP Connection Options
    • A.2.18.5 Command Input/Output Options
    • A.2.18.6 General Options
    • A.2.18.7 Examples
    • A.2.18.8 Exit Codes
    • A.2.18.9 Using a Properties File
    • A.2.18.10 Location
    • A.2.18.11 Related Commands
  • A.2.19 uninstall
    • A.2.19.1 Synopsis
    • A.2.19.2 Description
    • A.2.19.3 Removing a Directory Server
    • A.2.19.4 Removing a Proxy Server
    • A.2.19.5 Removing a Replication Gateway Server
    • A.2.19.6 Command Input/Output Options
    • A.2.19.7 General Options
    • A.2.19.8 Examples
    • A.2.19.9 Exit Codes
    • A.2.19.10 Using a Properties File
    • A.2.19.11 Log Files
    • A.2.19.12 Location
    • A.2.19.13 Related Commands
  • A.2.20 windows-service
    • A.2.20.1 Synopsis
    • A.2.20.2 Description
    • A.2.20.3 Command Options
    • A.2.20.4 General Options
    • A.2.20.5 Examples
    • A.2.20.6 Exit Codes
    • A.2.20.7 Location
    • A.2.20.8 Related Commands
• A.3 Data Administration Commands
  • A.3.1 backup
    • A.3.1.1 Synopsis
    • A.3.1.2 Description
    • A.3.1.3 Options
    • A.3.1.4 Task Back End Connection Options
    • A.3.1.5 Task Scheduling Options
    • A.3.1.6 Command Input/Output Options
    • A.3.1.7 General Options
    • A.3.1.8 Examples
    • A.3.1.9 Exit Codes
    • A.3.1.10 Using a Properties File
    • A.3.1.11 Location
    • A.3.1.12 Related Commands
  • A.3.2 base64
    • A.3.2.1 Synopsis
    • A.3.2.2 Description
    • A.3.2.3 Subcommands
    • A.3.2.4 Global Options
    • A.3.2.5 Examples
    • A.3.2.6 Exit Codes
    • A.3.2.7 Location
  • A.3.3 dbtest
    • A.3.3.1 Synopsis
    • A.3.3.2 Description
    • A.3.3.3 Subcommands
    • A.3.3.4 Global Options
    • A.3.3.5 Examples
    • A.3.3.6 Exit Codes
    • A.3.3.7 Location
    • A.3.3.8 Related Commands
  • A.3.4 encode-password
    • A.3.4.1 Synopsis
    • A.3.4.2 Description
    • A.3.4.3 Options
    • A.3.4.4 Examples
    • A.3.4.5 Exit Codes
    • A.3.4.6 Location
  • A.3.5 export-ldif
    • A.3.5.1 Synopsis
    • A.3.5.2 Description
    • A.3.5.3 Options
    • A.3.5.4 Task Back End Connection Options
    • A.3.5.5 Task Scheduling Options
    • A.3.5.6 Command Input/Output Options
    • A.3.5.7 General Options
    • A.3.5.8 Examples
    • A.3.5.9 Exit Codes
    • A.3.5.10 Using a Properties File
    • A.3.5.11 Location
    • A.3.5.12 Related Commands
  • A.3.6 import-ldif
    • A.3.6.1 Synopsis
    • A.3.6.2 Description
    • A.3.6.3 Options
    • A.3.6.4 Task Back End Connection Options
    • A.3.6.5 Task Scheduling Options
    • A.3.6.6 Command Input/Output Options
    • A.3.6.7 General Options
    • A.3.6.8 Examples
    • A.3.6.9 Exit Codes
    • A.3.6.10 Using a Properties File
    • A.3.6.11 Location
    • A.3.6.12 Related Commands
  • A.3.7 ldif-diff
    • A.3.7.1 Synopsis
    • A.3.7.2 Description
    • A.3.7.3 Options
    • A.3.7.4 Examples
    • A.3.7.5 Exit Codes
    • A.3.7.6 Location
    • A.3.7.7 Related Commands
  • A.3.8 ldifmodify
    • A.3.8.1 Synopsis
    • A.3.8.2 Description
    • A.3.8.3 Options
    • A.3.8.4 Examples
    • A.3.8.5 Exit Codes
    • A.3.8.6 Location
    • A.3.8.7 Related Commands
  • A.3.9 ldifsearch
    • A.3.9.1 Synopsis
    • A.3.9.2 Description
    • A.3.9.3 Options
    • A.3.9.4 Examples
    • A.3.9.5 Exit Codes
    • A.3.9.6 Location
    • A.3.9.7 Related Commands
  • A.3.10 list-backends
    • A.3.10.1 Synopsis
    • A.3.10.2 Description
    • A.3.10.3 Options
    • A.3.10.4 Command Options
    • A.3.10.5 General Options
    • A.3.10.6 Examples
    • A.3.10.7 Exit Codes
    • A.3.10.8 Location
  • A.3.11 make-ldif
    • A.3.11.1 Synopsis
    • A.3.11.2 Description
    • A.3.11.3 Options
    • A.3.11.4 Examples
    • A.3.11.5 Exit Codes
    • A.3.11.6 Locations
    • A.3.11.7 Related Commands
  • A.3.12 manage-account
    • A.3.12.1 Synopsis
    • A.3.12.2 Description
    • A.3.12.3 Subcommands
    • A.3.12.4 Options
    • A.3.12.5 LDAP Connection Options
    • A.3.12.6 General Options
    • A.3.12.7 Examples
    • A.3.12.8 Exit Codes
    • A.3.12.9 Location
    • A.3.12.10 Related Commands
  • A.3.13 rebuild-index
    • A.3.13.1 Synopsis
    • A.3.13.2 Description
    • A.3.13.3 Options
    • A.3.13.4 Command Options
    • A.3.13.5 Task Back End Connection Options
    • A.3.13.6 Task Scheduling Options
    • A.3.13.7 Utility Input/Output Options
    • A.3.13.8 General Options
    • A.3.13.9 Examples
    • A.3.13.10 Exit Codes
    • A.3.13.11 Location
    • A.3.13.12 Related Commands
  • A.3.14 restore
    • A.3.14.1 Synopsis
    • A.3.14.2 Description
    • A.3.14.3 Options
    • A.3.14.4 Task Back End Connection Options
    • A.3.14.5 Task Scheduling Options
    • A.3.14.6 Command Input/Output Options
    • A.3.14.7 General Options
    • A.3.14.8 Examples
    • A.3.14.9 Exit Codes
    • A.3.14.10 Using a Properties File
    • A.3.14.11 Location
    • A.3.14.12 Related Commands
  • A.3.15 split-ldif
    • A.3.15.1 Synopsis
    • A.3.15.2 Description
    • A.3.15.3 Options
    • A.3.15.4 Global Index Options
    • A.3.15.5 Split Options
    • A.3.15.6 General Options
    • A.3.15.7 Examples
    • A.3.15.8 Location
    • A.3.15.9 Related Commands
  • A.3.16 verify-index
    • A.3.16.1 Synopsis
    • A.3.16.2 Description
    • A.3.16.3 Options
    • A.3.16.4 Command Options
    • A.3.16.5 General Options
    • A.3.16.6 Examples
    • A.3.16.7 Exit Codes
    • A.3.16.8 Location
    • A.3.16.9 Related Commands
• A.4 LDAP Client Commands
  • A.4.1 ldapcompare
    • A.4.1.1 Synopsis
    • A.4.1.2 Description
    • A.4.1.3 Options
    • A.4.1.4 Command Options
    • A.4.1.5 LDAP Connection Options
    • A.4.1.6 Command Input/Output Options
    • A.4.1.7 General Options
    • A.4.1.8 Examples
    • A.4.1.9 Exit Codes
    • A.4.1.10 Using a CLI Properties File
    • A.4.1.11 Location
    • A.4.1.12 Related Commands
  • A.4.2 ldapdelete
    • A.4.2.1 Synopsis
    • A.4.2.2 Description
    • A.4.2.3 Before You Begin
    • A.4.2.4 Options
    • A.4.2.5 Command Options
    • A.4.2.6 LDAP Connection Options
    • A.4.2.7 Command Input/Output Options
    • A.4.2.8 General Options
    • A.4.2.9 Examples
    • A.4.2.10 Exit Codes
    • A.4.2.11 Using a CLI Properties File
    • A.4.2.12 Location
    • A.4.2.13 Related Commands
  • A.4.3 ldapmodify
    • A.4.3.1 Synopsis
    • A.4.3.2 Description
    • A.4.3.3 Before You Begin
    • A.4.3.4 Options
    • A.4.3.5 Command Options
    • A.4.3.6 LDAP Connection Options
    • A.4.3.7 Command Input/Output Options
    • A.4.3.8 General Options
    • A.4.3.9 Examples
    • A.4.3.10 Exit Codes
    • A.4.3.11 Using a CLI Properties File
    • A.4.3.12 Location
    • A.4.3.13 Related Commands
  • A.4.4 ldappasswordmodify
    • A.4.4.1 Synopsis
    • A.4.4.2 Description
    • A.4.4.3 Options
    • A.4.4.4 Command Options
    • A.4.4.5 LDAP Connection Options
    • A.4.4.6 Command Input/Output Options
    • A.4.4.7 General Options
    • A.4.4.8 Examples
    • A.4.4.9 Exit Codes
    • A.4.4.10 Using a CLI Properties File
    • A.4.4.11 Location
    • A.4.4.12 Related Commands
  • A.4.5 ldapsearch
    • A.4.5.1 Synopsis
    • A.4.5.2 Description
    • A.4.5.3 Before You Begin
    • A.4.5.4 Options
    • A.4.5.5 Command Options
    • A.4.5.6 LDAP Connection Options
    • A.4.5.7 Command Input/Output Options
    • A.4.5.8 General Options
    • A.4.5.9 Examples
    • A.4.5.10 To Search by Using a Properties File
    • A.4.5.11 Search Attributes
    • A.4.5.12 Exit Codes
    • A.4.5.13 Location
    • A.4.5.14 Related Commands

B Supported Controls and Operations

• B.1 Supported LDAP Controls
• B.2 Supported Extended Operations

C Troubleshooting Enterprise User Security

• C.1 Net Configuration Assistant (NetCA) Tool Problems and Solutions
  • C.1.1 LDAP Server Connection Error
  • C.1.2 Schema Error
  • C.1.3 Naming Context Error
• C.2 Database Configuration Assistant (DBCA) Problems and Solutions
  • C.2.1 TNS-04409 error / TNS-04427: SSL access to the Directory Server
  • C.2.2 TNS-04409 error / TNS-04431: Required suffixes
  • C.2.3 TNS-04411 error when registering the DB with a user different from cn=directory manager
  • C.2.4 TNS-04409 error / TNS-04405
• C.3 Oracle SQL Problems and Solutions
  • C.3.1 ORA-28030: Server encountered problems accessing LDAP directory service
  • C.3.2 ORA-01017: invalid username/password; logon denied
  • C.3.3 ORA-28274: No ORACLE password attribute corresponding to user nickname exists
  • C.3.4 ORA-28051: the account is locked

D Standards and Specifications Supported by Oracle Unified Directory

• D.1 RFCs Supported by Oracle Unified Directory
• D.2 Internet Drafts Supported by Oracle Unified Directory
• D.3 Other Specifications Supported by Oracle Unified Directory
• D.4 Protocols and Cipher Suites Supported by Oracle Unified Directory

E Glossary of terms for Oracle Unified Directory

• E.1 A
  • E.1.1 abandon operation
  • E.1.2 abstract object class
  • E.1.3 Abstract Syntax Notation One
  • E.1.4 access control
  • E.1.5 access control instruction (ACI)
  • E.1.6 access control rule
  • E.1.7 access log
  • E.1.8 account expiration
  • E.1.9 account lockout
  • E.1.10 account status notification
  • E.1.11 account usability control
  • E.1.12 ACID
  • E.1.13 add operation
  • E.1.14 alias
  • E.1.15 AND search filter
  • E.1.16 anonymous bind
  • E.1.17 ANONYMOUS SASL mechanism
  • E.1.18 approximate index
  • E.1.19 approximate search filter
  • E.1.20 ASN.1
  • E.1.21 assertion value
  • E.1.22 attribute
  • E.1.23 attribute description
  • E.1.24 attribute option
  • E.1.25 attribute syntax
  • E.1.26 attribute type
  • E.1.27 attribute usage
  • E.1.28 attribute value
  • E.1.29 attribute value assertion
  • E.1.30 audit log
  • E.1.31 authentication
  • E.1.32 authentication ID
  • E.1.33 authentication password syntax
  • E.1.34 authorization
  • E.1.35 authorization ID
  • E.1.36 authorization identity control
  • E.1.37 auxiliary object class
  • E.1.38 AVA
• E.2 B
  • E.2.1 back end
  • E.2.2 backup
  • E.2.3 base64 encoding
  • E.2.4 Basic Encoding Rules
    • E.2.4.1 Basic Encoding Rules Overview
    • E.2.4.2 The BER Type
    • E.2.4.3 The BER Length
    • E.2.4.4 The BER Value
    • E.2.4.5 BER Encoding Examples
  • E.2.5 BER
  • E.2.6 Berkeley DB Java Edition
  • E.2.7 binary copy
  • E.2.8 bind operation
• E.3 C
  • E.3.1 cancel extended operation
  • E.3.2 CDDL
  • E.3.3 certificate
  • E.3.4 certificate mapper
  • E.3.5 chaining
  • E.3.6 changelog
  • E.3.7 cn=Directory Manager
  • E.3.8 collective attribute
  • E.3.9 Common Development and Distribution License
  • E.3.10 compare operation
  • E.3.11 connection handler
  • E.3.12 connection ID
  • E.3.13 control
  • E.3.14 CRAM-MD5 SASL mechanism
  • E.3.15 crypt algorithm
• E.4 D
  • E.4.1 database
  • E.4.2 database cache
  • E.4.3 debug log
  • E.4.4 delete operation
  • E.4.5 deprecated password storage scheme
  • E.4.6 dereference policy
  • E.4.7 DIGEST-MD5 SASL mechanism
  • E.4.8 directory information tree
  • E.4.9 directory manager
  • E.4.10 directory server
  • E.4.11 directory server agent
  • E.4.12 Directory Services Markup Language
  • E.4.13 distinguished name
  • E.4.14 distribution
  • E.4.15 DIT
  • E.4.16 DIT content rule
  • E.4.17 DIT structure rule
  • E.4.18 DN
  • E.4.19 DSA
  • E.4.20 DSA-specific entry
  • E.4.21 DSE
  • E.4.22 DSML
  • E.4.23 DSML gateway
  • E.4.24 duration
  • E.4.25 dynamic group
• E.5 E
  • E.5.1 entry
  • E.5.2 entry cache
  • E.5.3 entry change notification control
  • E.5.4 entryDN
  • E.5.5 entry ID
  • E.5.6 entryUUID
  • E.5.7 equality index
  • E.5.8 equality search filter
  • E.5.9 error log
  • E.5.10 export
  • E.5.11 extended operation
  • E.5.12 extensible match index
  • E.5.13 extensible match search filter
  • E.5.14 EXTERNAL SASL mechanism
• E.6 F
  • E.6.1 failover algorithm
  • E.6.2 false filter
• E.7 G
  • E.7.1 generalized time
  • E.7.2 get effective rights control
  • E.7.3 global index
  • E.7.4 global index catalog
  • E.7.5 greater than or equal to search filter
  • E.7.6 group
  • E.7.7 GSSAPI SASL mechanism
• E.8 I
  • E.8.1 ID list
  • E.8.2 id2entry database
  • E.8.3 identity mapper
  • E.8.4 idle account lockout
  • E.8.5 in-core restart
  • E.8.6 index
  • E.8.7 index entry limit
  • E.8.8 intermediate response
  • E.8.9 Internet Draft
• E.9 J
  • E.9.1 Java Management Extensions
  • E.9.2 JMX
• E.10 K
  • E.10.1 key manager provider
• E.11 L
  • E.11.1 last login time
  • E.11.2 lastmod plug-in
  • E.11.3 LDAP assertion control
  • E.11.4 ldapcompare command
  • E.11.5 LDAP Data Interchange Format
  • E.11.6 ldapdelete command
  • E.11.7 LDAP false filter
  • E.11.8 LDAP intermediate response
  • E.11.9 LDAP message
  • E.11.10 LDAP modify DN operation
  • E.11.11 LDAP modify operation
  • E.11.12 ldapmodify command
  • E.11.13 LDAP no-op control
  • E.11.14 LDAP post-read control
  • E.11.15 LDAP pre-read control
  • E.11.16 LDAP result
  • E.11.17 LDAPS
  • E.11.18 LDAP search filter
  • E.11.19 ldapsearch command
  • E.11.20 LDAP true filter
  • E.11.21 LDAP Subentry
  • E.11.22 LDAP URL
  • E.11.23 LDIF export
  • E.11.24 LDIF import
  • E.11.25 leaf entry
  • E.11.26 less than or equal to search filter
  • E.11.27 lexico algorithm
  • E.11.28 Lightweight Directory Access Protocol
  • E.11.29 load balancing
  • E.11.30 lookthrough limit
• E.12 M
  • E.12.1 MakeLDIF command
  • E.12.2 manage DSA IT control
  • E.12.3 matched DN
  • E.12.4 matched values control
  • E.12.5 matching rule
  • E.12.6 matching rule use
  • E.12.7 MD5
  • E.12.8 message
  • E.12.9 message ID
  • E.12.10 modification
  • E.12.11 modification type
  • E.12.12 modify DN operation
  • E.12.13 modify operation
  • E.12.14 monitor entry
• E.13 N
  • E.13.1 name form
  • E.13.2 naming context
  • E.13.3 network group
  • E.13.4 non-leaf entry
  • E.13.5 normalized value
  • E.13.6 notice of disconnection unsolicited notification
  • E.13.7 NOT search filter
  • E.13.8 numeric algorithm
  • E.13.9 nsuniqueid
• E.14 O
  • E.14.1 object class
  • E.14.2 object class type
  • E.14.3 object identifier
  • E.14.4 operation ID
  • E.14.5 operational attribute
  • E.14.6 ordering index
  • E.14.7 OR search filter
  • E.14.8 OID Search Count Request Control
  • E.14.9 OID Search Count Response Control
• E.15 P
  • E.15.1 partition
  • E.15.2 password
  • E.15.3 password expiration
  • E.15.4 password generator
  • E.15.5 Password Modify extended operation
  • E.15.6 password policy
  • E.15.7 password policy control
  • E.15.8 password reset
  • E.15.9 password storage scheme
  • E.15.10 password validator
  • E.15.11 persistent search control
  • E.15.12 PLAIN SASL mechanism
  • E.15.13 plug-in
  • E.15.14 presence index
  • E.15.15 presence search filter
  • E.15.16 privilege
  • E.15.17 proportional algorithm
  • E.15.18 protocol data unit
  • E.15.19 protocol op
  • E.15.20 proxied authorization control
• E.16 Q
  • E.16.1 quality of protection
• E.17 R
  • E.17.1 real attributes only control
  • E.17.2 referential integrity
  • E.17.3 referral
  • E.17.4 relative distinguished name
  • E.17.5 replica
  • E.17.6 replication
  • E.17.7 replication repair control
  • E.17.8 request for comments
  • E.17.9 restore
  • E.17.10 result
  • E.17.11 result code
  • E.17.12 root DN
  • E.17.13 root DSE
  • E.17.14 route
• E.18 S
  • E.18.1 salt
  • E.18.2 saturation algorithm
  • E.18.3 saturation alert
  • E.18.4 saturation threshold
  • E.18.5 schema
  • E.18.6 schema checking
  • E.18.7 search attributes
  • E.18.8 search base DN
  • E.18.9 search filter
  • E.18.10 search operation
  • E.18.11 search result done
  • E.18.12 search result entry
  • E.18.13 search result reference
  • E.18.14 search scope
  • E.18.15 Secure Hash Algorithm
  • E.18.16 Secure Sockets Layer
  • E.18.17 server-side sort control
  • E.18.18 simple authentication
  • E.18.19 Simple Authentication and Security Layer
  • E.18.20 simple paged results control
  • E.18.21 size limit
  • E.18.22 smart referral
  • E.18.23 StartTLS extended operation
  • E.18.24 static group
  • E.18.25 structural object class
  • E.18.26 subentry
  • E.18.27 subschema subentry
  • E.18.28 substring assertion
  • E.18.29 substring index
  • E.18.30 substring search filter
  • E.18.31 subtree
  • E.18.32 subtree delete control
  • E.18.33 supported control
  • E.18.34 supported extension
  • E.18.35 supported feature
  • E.18.36 synchronization
• E.19 T
  • E.19.1 task
  • E.19.2 time limit
  • E.19.3 transaction
  • E.19.4 Transport Security Layer
  • E.19.5 true filter
  • E.19.6 trust manager provider
  • E.19.7 typesOnly flag
• E.20 U
  • E.20.1 unbind operation
  • E.20.2 unindexed search
  • E.20.3 UNIX crypt algorithm
  • E.20.4 unsolicited notification
  • E.20.5 URL
  • E.20.6 user attribute
• E.21 V
  • E.21.1 virtual attribute
  • E.21.2 virtual attributes only control
  • E.21.3 virtual directory
  • E.21.4 virtual list view control
  • E.21.5 virtual static group
  • E.21.6 VLV index
• E.22 W
  • E.22.1 "Who Am I?" extended operation
  • E.22.2 work queue
  • E.22.3 worker thread
  • E.22.4 workflow
  • E.22.5 workflow element
  • E.22.6 writability mode