4
Postinstallation Configuration Tasks

This chapter identifies postinstallation configuration tasks. Where appropriate, this chapter references other guides for procedures on performing these configuration tasks.

Specific topics discussed are:

• Setting NTFS File System and Windows NT Registry Permissions

• Oracle Internet Directory Postinstallation Configuration Tasks

Setting NTFS File System and Windows NT Registry Permissions

Oracle Corporation recommends that you configure Oracle8i database files, directories, and registry settings to allow only authorized database administrators (DBAs) to have full control. These topics describe how to perform these tasks:

• NTFS File System Security

• Windows NT Registry Security

  See Also: Your Windows NT documentation for more information about modifying NTFS file system and Windows NT registry settings

NTFS File System Security

The Oracle8i database uses files to store database data, backup data, log information, and so on. To do this, the Oracle8i database process runs under a security account. This security account (the Windows NT LocalSystem account called SYSTEM) includes the ability to create and access these files. The security account is assigned to the service that the Oracle8i database uses (in the Control Panel). This account requires full file system permissions to create, read, write, delete, and execute files.

To ensure that only authorized users have full file system permissions:

1. Go into Windows NT Explorer.

2. Right-click Oracle8i database files (in the ORACLE_BASE\ORADATA\DB_NAME directory), executables and dynamic link libraries (in the ORACLE_BASE\ORACLE_HOME\BIN directory), and directories.

3. Select Properties from the menu that appears.

4. Adjust the file and directory permissions to ensure that:
   • Only the security account that the Oracle8i database is configured to use has full control permissions to these files

   • User accounts that must run Oracle applications (for example, SQL*Plus, Server Manager, and Pro*C) have read privileges on their executables (for example, SQLPLUS.EXE for SQL*Plus)

     Note: The Oracle8i database uses the Windows NT LocalSystem built-in security account. Therefore, file permissions must be granted to the SYSTEM account of the local computer running the Oracle8i database.

Windows NT Registry Security

Oracle Corporation recommends that you remove write permissions from users who are not Oracle8i DBAs or system administrators. You perform this operation in the Windows NT registry, in the directory HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE.

To remove write permissions:

1. Open the registry.

2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE.

3. Select Permissions from the Security main menu.

   The Registry Key Permissions dialog box appears.

4. Remove write permissions from any users who are not Oracle8i DBAs or system administrators. Note that the SYSTEM account must have Full Control, because this is the account with which the Oracle8i database runs.

5. Ensure that user accounts that must run Oracle applications have read privileges.

6. Choose OK.

7. Exit the registry.

Oracle Internet Directory Postinstallation Configuration Tasks

Table 4-1 describes the postinstallation tasks required for Oracle Internet Directory.

Table 4-1  Postinstallation Configuration Tasks for Oracle Internet Directory

Task	Description	See Also...
Run a UNIX emulation utility	You must download a UNIX emulation utility for Windows NT to run Oracle Internet Directory's shell script tools on Windows NT (BULKLOAD.SH, BULKDELETE.SH, BULKMODIFY.SH, CATALOG.SH, and LDAPREPL.SH). Two certified third-party software vendors provide this utility: Cygnus (open source) http://sourceware.cygnus.com/cygwin/ MKS Toolkit (commercially available) http://www.datafocus.com/products/	Oracle Internet Directory Administrator's Guide
Reencrypt the password	If you are upgrading from Oracle Internet Directory release 2.0.6, you must upgrade the password to support multiple hash schemes.	Chapter 3 of Oracle Internet Directory Administrator's Guide