Oracle Internet Directory Administrator's Guide Release 2.1.1 Part Number A86101-01 |
|
This chapter introduces the various administration tools of Oracle Internet Directory. It discusses the online administration tool, called Oracle Directory Manager, and tells you how to launch it, navigate through it, and connect to directory servers with it. It also introduces the command line and bulk tools.
This chapter contains these topics:
Oracle Directory Manager is a Java-based tool for administering Oracle Internet Directory. This section describes some of its basic features. More specific instructions are found in sections throughout this book that explain how to perform various tasks.
This section contains these topics:
Before you can launch Oracle Directory Manager, you must have a directory server instance running.
See Also:
|
To start Oracle Directory Manager, follow the instructions for your operating system:
The first time you start Oracle Directory Manager, an alert tells you that you must connect to a server. Click OK.
To connect to a directory server:
The default port is 389. You can change the port if you wish. However, if you have an Oracle directory server running on a non-default port, be sure that any clients that use that server are informed of the correct port.
Click OK. The Oracle Directory Manager Connect dialog box appears.
Field | Description |
---|---|
User |
The first time you log in, do so either as the superuser or anonymously. If you intend to configure SSL features during this session, login as the super user.
If you are logging in as the super user, in the User box, type If you are logging in anonymously, leave the User box empty. If you have already set up the user's entry by using LDAP command line tools, you can enter that user's entry in one of two ways: |
Password |
If you are logging in as the super user and you specified a password for the super user during installation, in the Password box, type the password you specified. Otherwise, type the default password, namely, If you are logging in anonymously, leave the Password box empty. If you want to login as a specific directory user, enter the corresponding password. See Also: "Managing Super, Guest, and Proxy Users" for instructions on how to change the password |
Server |
From the Server list, select the host containing the directory server to which you want to connect. If you are already connected to a directory server, and you want to connect to a directory server on a different host:
To add a directory server: |
Port |
The default port (389) appears in this field. If there is more than one directory server instance on the same host, each directory server instance has a different port, and that port number appears in this field when you select the directory server instance. To change this port number: |
SSL Enabled |
Selecting this check box causes all commands you issue by using Oracle Directory Manager to be sent over Secure Sockets Layer (SSL). You can connect to a directory server either with or without SSL. If you connect by using SSL, then Oracle Directory Manager becomes an SSL client. You can connect in this way if both of the following two conditions are met: |
See Also:
|
This section provides an overview of Oracle Directory Manager, and explains the items in the menu bar and the buttons on the toolbar.
Like the directory itself, the navigator pane (left side of the double window interface) has a tree-like structure. When Oracle Directory Manager first opens, the navigator pane shows only one tree item, Oracle Internet Directory Servers. By clicking the plus sign(+) next to the tree item, subcomponents of that tree item appear.
In the right pane, some windows contain buttons labeled Apply and OK. If you press Apply, the changes you have made are committed, and the window remains available for more changes. If you press OK, the changes you have made are committed, and the window closes.
Similarly, some windows have buttons that are labeled Revert and Cancel. If you press Revert, the changes you have made in that window do not take effect, and the window stays open for further work. If you press Cancel, the changes you have made in that window do not take effect, and the window closes.
The next table lists and describes the menus you can access by using the menu bar. Menu items become enabled or disabled depending on the pane or tab page you are displaying.
Figure 4-1 and the accompanying table illustrate and describe the Oracle Internet Directory toolbar. Buttons become enabled or disabled depending on the pane or tab page you are displaying in Oracle Directory Manager.
You can connect to more than one directory server at a time, and then view and modify the data, schema, and security for each directory server. If you do this, then each server is listed in the navigator pane under Oracle Internet Directory Servers.
To connect to an additional directory server:
To disconnect from a directory server by using Oracle Directory Manager, choose File > Disconnect. Also, when you exit Oracle Directory Manager, connections between all directory servers and the directory are automatically disconnected.
All connection information is stored in the user's home directory in the file osdadmin.ini
.
When you restart Oracle Directory Manager, all previously connected server connections appear in the Directory Server Login dialog box.
You can perform most of the Oracle Internet Directory administrative tasks through Oracle Directory Manager. Tasks that you cannot perform through Oracle Directory Manager involve running processes, such as starting and stopping the OID Monitor (oidmon) process and starting and stopping server instances. To perform tasks that you cannot perform with Oracle Directory Manager, use the appropriate LDAP command line tool.
The following table lists the task areas managed by Oracle Directory Manager and where to find instructions for using it in each area.
Task Area | Instructions |
---|---|
Schema administration |
|
Entries management |
|
ACP administration |
|
Partitioning and replication |
Oracle Internet Directory provides several command line tools for manipulating directory entries and attributes. This section explains the kind of tasks you can perform with each tool.
The command line tools act on objects that are in text files written in the LDAP Data Interchange Format (LDIF).
The following table lists each command line tool, the task(s) you can perform with it, and where to find syntax and usage notes.
Bulk tools enable you to create and manage large numbers of directory entries from data residing in, or created by, other applications.
The table that follows lists each bulk tool, the task(s) you can perform with it, and where to find syntax and usage notes.
OID Control Utility is a command line tool for starting and stopping the server. The commands are interpreted and executed by the OID Monitor process.
See Also:
|
Oracle Internet Directory uses indexes to make attributes available for searches. When Oracle Internet Directory is installed, the entry cn=catalogs
lists available attributes that can be used in a search. Only those attributes that have an equality matching rule can be indexed.
If you want to use additional attributes in search filters, you must add them to the catalog entry. You can do this at the time you create the attribute by using Oracle Directory Manager. However, if the attribute already exists, then you can index it only by using the Catalog Management tool.
Oracle Internet Directory uses a password when connecting to an Oracle database. The default for this password when you install Oracle Internet Directory is ODS
. You can change this password by using the OID Database Password Utility.
When a replication conflict arises, Oracle directory replication server places the change in the retry queue and tries to apply it from there for a specified number of times. If it fails after that specified number, then the replication server puts the change in the human intervention queue. From there, the replication server repeats the change application process at less frequent intervals while awaiting your action.
At this point, you need to:
The following replication tools assist you in this process:
The OID database statistics collection tool, located in $ORACLE_HOME/ldap/admin/
, assists in capacity planning. It helps you analyze the various database ods
schema objects so that you can estimate the statistics.
Oracle Internet Directory administration tasks are described throughout this manual. Table 4-1 points you to the information you need for some of the more common tasks.
Task | Information |
---|---|
Managing Attributes |
|
Add, modify, or delete an attribute by using command line tools |
|
Add, modify, or delete an attribute by using the Oracle Directory Manager |
|
Managing Entries |
|
Add, modify, or delete a directory entry by using command line tools |
|
Add, modify, or delete a directory entry by using Oracle Directory Manager |
|
Import bulk data files |
|
View Directory Information Tree (DIT) hierarchy of entries |
|
Managing Object Classes |
|
Add, modify, or delete object classes by using command line tools |
|
Add, modify, or delete object classes by using Oracle Directory Manager |
|
Managing Security |
|
Set up an Access Control Policy Point (ACP) |
|
Set up security |
|
Managing Servers |
|
Configure server instance parameters by using command line tools |
"Managing Server Configuration Set Entries by Using Command Line Tools" |
Configure server instance parameters by using the Oracle Directory Manager |
"Managing Server Configuration Set Entries by Using Oracle Directory Manager" |
Connect to a directory by using Oracle Directory Manager |
|
Run the directory server processes |
|
Stop the directory server processes |
|
View system operational attributes |
"Setting System Operational Attributes by Using Oracle Directory Manager" |
Managing Replication |
|
Set up replication |
|
Resolve replication change conflicts |
|
Move replication changes from human intervention queue to either the retry queue or the purge queue |
|
![]() Copyright © 1996-2000, Oracle Corporation. All Rights Reserved. |
|