Contents

Title and Copyright Information

List of Figures

List of Tables

Send Us Your Comments

Preface

Audience

Organization

Related Documentation

Conventions

Documentation Accessibility

1 The Oracle Directory Environment

The Importance of LDAP to Oracle Products

What Directories Do Oracle Products Work With?

LDAP-Enabled Oracle Products

Oracle Internet Directory

Integrating Oracle Products with Third-Party Directories

2 Directory Server Concepts

What Is a Directory?

What Is an Online Directory?

Directories and Relational Databases Compared

Read-to-Write Ratio

Data Units

Distribution

Entries

Typical Directory Applications

The Benefits of Standards-Based Online Directories

What Is LDAP?

The Benefits of LDAP

LDAP Version 3

C LDAP API

LDIF

Directory Information Flow: An Example

Directory Components and Features

Entries

Attributes

Types of Attributes

Attribute Syntaxes and Matching Rules

Foreign-Language Options for Attributes

Object Classes

Types of Object Classes

Structural Object Classes

Auxiliary Object Classes

Abstract Object Classes

Creating New Object Classes and Redefining Old Ones

Naming Contexts

Schema

Security

Authentication

Access Control Lists

The Oracle Context

3 Planning and Deployment Guidelines

What Do You Put in a Directory?

Designing an Effective Directory Tree and Choosing Entry Names

Physically Distributing the Directory: Partitions and Replicas

Reasons to Replicate

Reasons to Partition

Designing for High Availability and Failover

Capacity Planning, Sizing, and Tuning

Capacity Planning

Sizing

Tuning

Designing Directory Security

4 Deploying Oracle Products with Oracle Internet Directory

Oracle Net Services

How Oracle Net Services Uses Oracle Internet Directory

Oracle Net Services Entries Under the Oracle Context

Security Measures for Oracle Net Services Entries

Directory Deployment Factors for Oracle Net Services

Oracle Advanced Security

How Oracle Advanced Security Uses Oracle Internet Directory

Central Management of User Authentication Credentials

Central Management of User Authorizations

Mappings to Shared Schemas

Single Password Authentication

Single Sign-On

Central Storage of PKI Credentials

Oracle Advanced Security Entries Under the Oracle Context

Security Measures for Oracle Advanced Security Entries

Directory Deployment Factors for Oracle Advanced Security

Application Context

How Application Context Uses Oracle Internet Directory

Application Context Entries Under the Oracle Context

Security Measures for Application Context Entries

Oracle Advanced Queuing

How Oracle Advanced Queuing Uses Oracle Internet Directory

Oracle Advanced Queuing Entries Under the Oracle Context

Security Measures for Oracle Advanced Queuing Entries

Directory Deployment Factors for Oracle Advanced Queuing

Oracle Dynamic Services

How Oracle Dynamic Services Uses Oracle Internet Directory

Oracle Dynamic Services Entries Under the Oracle Context

Security Measures for Oracle Dynamic Services Entries

Directory Deployment Factors for Oracle Dynamic Services

5 Completing Directory Usage Configuration

Prerequisites for Directory Use

Options for Directory Usage Configuration

Configuring Directory Usage After Installing the Database

Using Oracle Net Configuration Assistant to Configure Directory Usage

Using Database Configuration Assistant to Register a Database

Configuring Directory Usage During a Custom Database Installation

Administrative Groups

Configuring Directory Usage During a Client Installation

Product-Specific Configuration Tasks

A Oracle-Specific LDAP Schema Extensions

Oracle Net Services

Structural Object Classes

Attributes

Oracle Advanced Security

Structural Object Classes

Attributes

Application Context

Oracle Advanced Queuing

Structural Object Classes

Attributes

Oracle Dynamic Services

Structural Object Classes

Attributes

B LDAP Command-Line Tools

LDAP Command-Line Tools

Optional Arguments for Command-Line Tools

Index