Oracle® Fusion Middleware Oracle Authentication Services for Operating Systems管理者ガイド 11g リリース(11.1.1) B61411-01 |
|
![]() 前 |
![]() 次 |
この付録では、サンプルのスクリプト出力を示します。内容は次のとおりです。
$ ./config_OIDserver.sh OAS4OS: Release 11.1.1.3.0 - Production Copyright (c) 2010 Oracle. All rights reserved. Configuring Oracle Authentication Services for Operating Systems on the Oracle Internet Directory server. Make sure that your OID server is currently up and running. Specify the ORACLE_HOME path: /u01/Middleware/Oracle_IDM1 Specify the ORACLE_INSTANCE path: /u01/Middleware/asinst_1 Specify the OID realm: dc=example,dc=com Specify the OID non-SSL port [3060]: 3060 Specify the OID component name [oid1]: oid1 Enter OID cn=orcladmin password: The PAM client can be configured to interact with OID anonymously or via a specific user DN and password. Do you wish to have the PAM client connect with OID anonymously [y/n]: n Specify the user DN for connecting to OID: cn=myuser,cn=users,dc=example,dc=com Enter the user's password: OAS4OS Client Config Script: /u01/Middleware/asinst_1/OID/oas4os/oid1/scripts_20100406231223/config_OIDclient.sh Successfully completed configuration
OAS4OS: Release 11.1.1.3.0 - ProductionCopyright (c) 2010 Oracle. All rights reserved. Configuring Oracle Authentication Services for Operating Systems onthe Oracle Internet Directory server. Make sure that your OID server processes were started by using opmnctl or Oracle Fusion Middleware Control. Specify the ORACLE_HOME path: /u01/Middleware/Oracle_IDM1 Specify the ORACLE_INSTANCE path: /u01/Middleware/asinst_1 Specify the OID realm: dc=example,dc=com Specify the OID non-SSL port [3060]: 3060 Specify the OID SSL port [3131]: 3131 Specify the OID component name [oid1]: oid1 Enter OID cn=orcladmin password: The PAM client can be configured to interact with OID anonymously or via a specific user DN and password. Do you wish to have the PAM client connect with OID anonymously [y/n]: n Specify the user DN for connecting to OID: cn=myuser,cn=users,dc=example,dc=com Enter the user's password: You can provide an SSL certificate or use the script to create and update OID SSL configuration with a test certificate. Do you have an SSL certificate [y/n]: y Specify the SSL Certificate file: /home/oracle/pem.cert OAS4OS Client Config Script: /u01/Middleware/asinst_1/OID/oas4os/oid1/scripts_20100406231526/sslConfig_OIDclient.sh Successfully completed configuration
$ ./config_OIDclient.sh OAS4OS: Release 11.1.1.3.0 - Production Copyright (c) 2010 Oracle. All rights reserved. Configuring this client to use LDAP for authentication... OID server HOST : oid-host.example.com OID server port : 3060 Do you want to configure client01 to authenticate users against the above OID LDAP server [n]: y User DN for connecting to OID: cn=myuser,cn=users,dc=example,dc=com Enter the user's password: Saved original files in /etc/oracle_backup_20100406231757 directory Executing auth-config ... Stopping portmap: [ OK ] Starting portmap: [ OK ] setsebool: SELinux is disabled. Shutting down NIS services: [ OK ] Binding to the NIS domain: [ OK ] Listening for an NIS domain server. Stopping nscd: [ OK ] Starting nscd: [ OK ] Stopping nscd: [ OK ] Starting nscd: [ OK ] Configured test-host for LDAP authentication.
$ ./sslConfig_OIDclient.sh OAS4OS: Release 11.1.1.3.0 - Production Copyright (c) 2010 Oracle. All rights reserved. Configuring this client to use LDAP for authentication... OID server HOST : oid-host.example.com OID server SSL port : 3131 Do you want to configure client01 to authenticate users against the above OID LDAP server [n]: y User DN for connecting to OID: cn=myuser,cn=users,dc=example,dc=com Enter the user's password: Saved original files in /etc/oracle_backup_20100407024405 directory Executing auth-config ... Stopping portmap: [ OK ] Starting portmap: [ OK ] setsebool: SELinux is disabled. Shutting down NIS services: [ OK ] Binding to the NIS domain: [ OK ] Listening for an NIS domain server. Stopping nscd: [ OK ] Starting nscd: [ OK ] The libuser package can be configured for user management via SSL LDAP. Do you want to enable this host to manage users on OID [y]: n Stopping nscd: [ OK ] Starting nscd: [ OK ] Configured test-host for LDAP authentication.
$ ./resetClient.sh OAS4OS: Release 11.1.1.3.0 - Production Copyright (c) 2009 Oracle. All rights reserved. Resetting OAS4OS client ... Executing this script will reset this OAS4OS client machine to backed up state. Do you want to reset test-host and remove OAS4OS configuration [n]: y Specify the OAS4OS backup folder path: /etc/oracle_backup_20100406231757 Executing auth-config ... Stopping portmap: [ OK ] Starting portmap: [ OK ] setsebool: SELinux is disabled. Shutting down NIS services: [ OK ] Binding to the NIS domain: [ OK ] Listening for an NIS domain server. Stopping nscd: [ OK ] Starting nscd: [ OK ] Stopping nscd: [ OK ] Starting nscd: [ OK ] Client reset completed successfully.