Managing Super Users, Guest Users, and Proxy Users

A super user is a special directory administrator who typically has full access to directory information. The default user name of the super user is orcladmin; the default password is welcome. Oracle Corporation recommends that you change the password immediately.

A guest user is one who is not an anonymous user, and, at the same time, does not have a specific user entry. The default user name for a guest user is guest; the default password is guest.

A proxy user, as described in "Indirect Authentication", is typically used in an environment with a middle tier such as a firewall, an application such as Oracle Delegated Administration Services, or a RADIUS server. The default user name for a proxy user is proxy; the default password is proxy.

You can administer user names and passwords for the super, guest, and proxy users by using either Oracle Directory Manager or ldapmodify.

See Also: Chapter 14, "Directory Access Control" for information on how to set access rights

Note: It is possible to log on to the Oracle Directory Manager without giving a user name or password. If you do this, you have the privileges specified for an anonymous user. Anonymous users should have very limited privileges.

This section contains these topics:

• Managing Super Users, Guest Users, and Proxy Users by Using Oracle Directory Manager

• Managing Super Users, Guest Users, and Proxy Users by Using ldapmodify

Managing Super Users, Guest Users, and Proxy Users by Using Oracle Directory Manager

Note: The passwords for super users, guest users, and proxy users are encrypted by default. You cannot modify them to send them in the clear.

To set a user name or password for a super user, a guest user, or a proxy user by using Oracle Directory Manager:

1. In the navigator pane, expand Oracle Internet Directory Servers, then select a directory server. The group of tab pages for that server appear in the right pane.

2. Select the System Passwords tab. This page displays the current user names and passwords for each type of user. Note that passwords are not displayed in the password fields.

3. Edit the appropriate field in the System Passwords tab page as described in Table C-35. To save your changes, choose Apply.

Managing Super Users, Guest Users, and Proxy Users by Using ldapmodify

To set or modify a user name or password for a super user, a guest user, or a proxy user, use ldapmodify to modify the appropriate attribute:

Table 5-1  Names, Passwords, and Attributes for Super, Guest, and Proxy Users

User Name	Password	Attribute
Super user name	orclsupassword	orclsuname
Guest user name	orclgupassword	orclguname
Proxy user name	orclprpassword	orclprname

For example, to change the password of the super user to superuserpassword, use ldapmodify to modify the directory-specific entry (DSE) by using an LDIF file containing the following:

dn: 
changetype:modify
replace:orclsupassword
orclsupassword:superuserpassword

See Also: "ldapmodify Syntax" for ldapmodify syntax and usage notes.