JavaScript is required to for searching.
search filter icon
search icon

Document Information


1.  Overview of Oracle Unified Directory

Oracle Unified Directory Installation Types

Setting Up the Directory Server

Setting Up the Proxy Server

Setting Up the Replication Gateway Server

Oracle Unified Directory Components

Working of Oracle Unified Directory

Network Groups


Workflow Element

2.  Overview of the Directory Server

3.  Overview of the Proxy Server

4.  Overview of the Replication Gateway

5.  Building Blocks of the Proxy Server

6.  Example Deployments Using the Directory Server

7.  Example Deployments Using the Proxy Server

8.  Simple Proxy Deployments Using the Command Line Interface

9.  Deploying Advanced Proxy Architectures

Oracle Unified Directory Components

Oracle Unified Directory integrates three key components: Network Groups, Workflows, and Workflow Elements. This section provides an overview of each component, and how they work in association. This section describes the following topics:

Working of Oracle Unified Directory

As illustrated in Figure 1-2, a client request is managed by Oracle Unified Directory before being forwarded to the data source.

A client request pursues the following path:

  1. The request is attached to a network group based on the criteria and a QOS policy is assigned.

  2. The network group forwards the request to a workflow, which defines the naming context.

  3. The workflow forwards the request to a workflow element, which defines the how the data request will be treated. That is, if it will go through distribution or load balancing.

  4. Once it has gone through the distribution or load balancing flow, the request is sent to the data source.

Figure 1-1 Distribution Diagram

Distribution Flow

Figure 1-2 High Level Presentation of Oracle Unified Directory Components

Client request through various components

Network Groups

Network groups are the entry point of all client requests handled by Oracle Unified Directory.

The network groups handle all client interactions and dispatch them to workflows, based on:

Within Oracle Unified Directory, you can have more than one network group defined, each with different properties and different priorities. However, the incoming client connection can only be attached to one network group at a time. An incoming client connection is attached to the first network group for which a client connection complies with the criteria defined for that network group.

The client connection is assessed by each network group, in order of priority, until it complies with all the criteria of that network group. As illustrated in Figure 1-3, the request is first sent to the network group with the highest priority: Network Group 1. Network Group 1 assesses if the request matches all the required criteria. If it does not match all of the criteria, it forwards the request to the next network group in the list: Network Group 2.

If the request matches all the properties of a network group, the network group assesses if the client connection matches the QOS policies of that network group. If it matches the QOS policies, it is routed to the associated workflow.

Figure 1-3 Network Group Selection

This figure shows the flow of the client request, through various network groups in priority order.

A network group can be associated with one or more workflows, each workflow corresponding to a different naming context. For more information of workflows, see Workflows. However, if the client connection matches the criteria of a network group, but not the QOS policies of that network group, the connection is not forwarded to the workflow, nor is it sent to the next network group. You will get an error message indicating the QOS policy that causes an error.

In addition, if a network group does not have any workflows attached to it, your request will not be treated. You will get an error message indicating: No such entry.

For information on managing network groups, see Configuring Network Groups With dsconfig in Oracle Fusion Middleware Administration Guide for Oracle Unified Directory.

Example 1-1 Using Network Group Criteria to Route to Different Workflows

For example, if a Oracle Unified Directory has the following network groups:

Depending on your bind DN, your search would be routed through Network Group 1 or Network Group 2. For example, if your bind DN is uid=user.1,dc=test,dc=com, your request is not accepted by Network Group 1, but forwarded to and accepted by Network Group 2, and forwarded to Workflow 2.

Example 1-2 Using Network Group QOS Policy to Filter Requests

For example, if a Oracle Unified Directory has the following network groups:

Therefore, as long as the bind DN is dc=example,dc=com, the requests will be forwarded to Workflow 1. The QOS policy set for Network Group 2 gives restricted access to Workflow 1, for anyone that is not admin. Anyone who binds as admin will access Workflow 1 through Network Group 1, and will have no limitations on resource limits.


A workflow is defined by a naming context (base DN) and a workflow element that define how Oracle Unified Directory should handle an incoming request. A workflow must be registered with at least one network group, but can be attached to several network groups.

A network group can point to several workflows when the naming context of the workflows are different. However, several network groups can point to the same workflow when the network group QOS policies are different, but the naming context of the workflow is the same.

Example 1-3 A Network Group Routing to Several Workflows

For example, if a Oracle Unified Directory has the following network groups (as illustrated in Figure 1-3), where:

A search with bind DN **,l=uk,dc=sun,dc=com would be handled by Network Group 2 and sent to Workflow 2.

A search with bind DN **,dc=sun,dc=com would be handled by Network Group 3 and sent to Workflow 1 and Workflow 2.

Workflow Element

Each workflow contains at least one workflow element. Workflow elements are part of a routing structure.

Within the Oracle Unified Directory there are different types of workflow elements:

For a proxy server, workflow elements can have different roles:

For a directory server, the workflow element is the backend as illustrated in Figure 1-4.

Figure 1-4 Client Request for a Directory Server

Client request for a directory server

Moreover, Oracle Unified Directory has a number of built-in workflow elements. These should not be modified or deleted.