Storing Shared Database Account Credentials as Directory Attributes

This topic describes how to implement a shared database account and store the database credentials as attributes of the directory entry you create for the shared database account. This option is available to you when you use the LDAP security adapter.

To store shared database credentials in an attribute of the directory entry

1. Create a database account to be shared by all users who log into a given Siebel application; the account must have administrator privileges.

2. Create a designated entry in the directory, and enter the user name and password parameters for the shared database account in one of that entry’s attributes, such as the dbaccount attribute. You might have to create this attribute.

   Note: The user name and password you specify for the shared database account must be a valid Siebel user name and password and must have administrator privileges.

   For information about formatting a directory attribute that contains the database account, see Requirements for the LDAP Directory.

3. For each security adapter that implements this shared database account, specify values for the parameters shown in the following table.

   Parameter	Value
   Credentials Attribute	Enter the attribute in which the database account is stored in the directory, for example, dbaccount.
   Shared Database Account Distinguished Name (fully qualified domain name)	Enter the distinguished name (including quotes) for the designated entry, such as: "uid=SHAREDENTRY, ou=people, o=example.com"

   For information on setting configuration parameters, see Configuring Security Adapters Using the Siebel Management Console and Parameters for Configuring Security Adapter Authentication. For Siebel Gateway authentication, define these parameters in the security profile. For Developer Web Client, define these parameters in the corresponding section in the application configuration file, such as uagent.cfg for Siebel Call Center.