15 Postinstallation Tasks for Oracle Collaboration Suite

Beta Draft

This chapter contains the following sections:

• Section 15.1, "Modifying Password Settings for Oracle Internet Directory"

• Section 15.2, "Enabling SSL"

15.1 Modifying Password Settings for Oracle Internet Directory

Beginning with Oracle Internet Directory 10g (9.0.4), the default password expiry time, which is assigned to the pwdmaxage attribute, is set to 60 days.

To change the default value, perform the following steps:

1. Perform this step only if your Oracle Internet Directory account is locked. Unlock the cn=orcladmin superuser account before you can modify password policies. Use the oidpasswd utility to unlock the superuser account as follows:

   oidpasswd connect=ocsdb unlock_su_acct=true
   OID DB user password:
   OID super user account unlocked successfully.
   
   

   This unlocks only the superuser account, cn=orcladmin. Do not confuse this account with the cd=orcladmin account within the default realm cn=orcladmin,cn=users,dc=xxxxx,dc=yyyyy. These are two separate accounts.

2. Start an Oracle Internet Directory 10g (10.1.2) version of Oracle Directory Manager and navigate to Password Policy Management. You will see two entries: cn=PwdPolicyEntry and the password policy for your realm—for example, password_policy_entry,dc=acme,dc=com.

   Change the pwdmaxage attribute in each password policy to an appropriate value:

   • 5184000 = 60 days (default)

   • 7776000 = 90 days

   • 10368000 = 120 days

   • 15552000 = 180 days

   • 31536000 = 1 year

3. Start the Oracle Directory Manager and navigate to the realm-specific orcladmin account. Find the userpassword attribute and assign a new value. You should then be able to start any Oracle component that uses Oracle Application Server Single Sign-On and log in as orcladmin.

   Rerun the odisrvreg utility to reset the randomly generated password for Directory Integration and Provisioning:

   odisrvreg -D cn=orcladmin -w welcome1 -p 3060
   Already Registered...Updating DIS password...
   DIS registration successful.
   
   

4. Reregister the connector:

   odisrvreg -p port -D cn=orcladmin -w passwd
   

See Also:

Oracle Identity Management Integration Guide

15.2 Enabling SSL

You may want to enable Secure Sockets Layer (SSL) depending on your security requirements. For detailed information on enabling SSL in Oracle Collaboration Suite, refer to Chapter 7, "Enabling SSL in Oracle Collaboration Suite", of Oracle Collaboration Suite Security Guide.