Managing Integration with Microsoft Windows

This section contains these topics:

• Typical Management Tasks

• Managing the Active Directory External Authentication Plug-in

Typical Management Tasks

Typical ongoing management tasks include:

• Managing synchronization profiles and mapping rules. This includes:
  • Creating new profiles

  • Changing configurations (attributes) in the profile

  • Disabling profiles to allow maintenance and then re-enabling them. Disabling profiles stops synchronization related to that profile.

• Managing mapping rules. This includes:
  • Creating new rules when additional attributes needs to be synchronized

  • Changing existing rules when the way attributes are synchronized needs to change

  • Deleting or commenting out rules not required when a particular attribute is not required to be synchronized

• Managing Access Controls

• Starting and stopping the Oracle directory server and the Oracle directory integration and provisioning server

  See Also: "Customizing the Active Directory Connector" for instructions on managing profiles, mapping rules, and access controls "Starting, Stopping, Restarting, and Monitoring Oracle Internet Directory Servers" for instructions on starting and stopping servers

Managing the Active Directory External Authentication Plug-in

This section explains how to delete, disable, and re-enable the Active Directory external authentication plug-in.

Deleting the Active Directory External Authentication Plug-in

To delete the Active Directory external authentication plug-in, use these commands.

ldapdelete -h host -p port -D cn=orcladmin -w password
"cn=adwhencompare,cn=plugin,cn=subconfigsubentry"

ldapdelete -h host -p port -D cn=orcladmin -w password
"cn=adwhenbind,cn=plugin,cn=subconfigsubentry"

Disabling the Active Directory External Authentication Plug-ins

To disable the Microsoft Active Directory external authentication plug-ins, use these two commands:

ldapmodify -h host -p port -D cn=orcladmin -w password <<EOF
dn: cn=adwhencompare,cn=plugin,cn=subconfigsubentry
changetype: modify
replace: orclpluginenable
orclpluginenable: 0
EOF

ldapmodify -h host -p port -D cn=orcladmin -w password <<EOF
dn: cn=adwhenbind,cn=plugin,cn=subconfigsubentry
changetype: modify
replace: orclpluginenable
orclpluginenable: 0
EOF

Re-enabling the Active Directory External Authentication Plug-ins

To re-enable the Active Directory external authentication plug-ins, use these two commands:

ldapmodify -h host  -p port  -D cn=orcladmin -w password  <<EOF
dn: cn=adwhencompare,cn=plugin,cn=subconfigsubentry
changetype: modify
replace: orclpluginenable
orclpluginenable: 1
EOF

ldapmodify -h host  -p port  -D cn=orcladmin -w password  <<EOF
dn: cn=adwhenbind,cn=plugin,cn=subconfigsubentry
changetype: modify
replace: orclpluginenable
orclpluginenable: 1
EOF

See Also: "Configuring The Active Directory External Authentication Plug-in"