3 Administering Oracle Directory Integration Platform

This chapter describes tools you can use to administer Oracle Directory Integration Platform.

Topics:

• Graphical Tools for Administering Oracle Directory Integration Platform

• Command-Line Tools for Administering Oracle Directory Integration Platform

3.1 Graphical Tools for Administering Oracle Directory Integration Platform

After you install and configure Oracle Directory Integration Platform, you can use the graphical tools to administer your environment.

Oracle offers the following graphical tools for Oracle Directory Integration Platform:

• Using Fusion Middleware Control

• Using Oracle Unified Directory Services Manager for Oracle Unified Directory

• Using Oracle Directory Services Manager for Oracle Internet Directory

• Using Directory Service Control Center for Oracle Directory Server Enterprise Edition

Note:

Prior to 11g Release 1 (11.1.1), the Oracle Directory Integration Platform was graphically administered by using the Oracle Directory Integration Server Administration tool. This tool is no longer available with the Oracle Directory Integration Platform. To graphically administer the Oracle Directory Integration Platform in 12c you must use Oracle Enterprise Manager Fusion Middleware Control.

3.1.1 Using Fusion Middleware Control

You can graphically administer many Oracle Directory Integration Platform features from the Oracle Enterprise Manager Fusion Middleware Control. This console enables you to configure and manage all Oracle products from one user interface.

To use Oracle Enterprise Manager Fusion Middleware Control to administer Oracle Directory Integration Platform:

1. Open a browser, and access the Fusion Middleware Control Console using the following URL format:

   https://host:port/em
   

2. Enter the Oracle Fusion Middleware administrator user name and password and click Login.
3. From the target navigation pane, expand the domain.
4. From the domain home page, select the Managed Server (wls_ods1).

   Note:

   The default value for Oracle Directory Integration Platform Managed Server is wls_ods1.
5. Use the WebLogic Server menu, to select tasks.

3.1.1.1 About Oracle Directory Integration Platform Home Page

The Home Page for Oracle Directory Integration Platform in Oracle Enterprise Manager Fusion Middleware Control provides statistics and information about the component, including:

• The status of Oracle Directory Integration Platform components, such as the Quartz Scheduler and MBeans.

• Information about existing Synchronization Profiles, including name, status, average execution time, and successful and failed propagation of changes.

• Information about existing Provisioning Profiles, including name, status, average execution time, and successful and failed propagation of changes.

3.1.2 Using Oracle Unified Directory Services Manager for Oracle Unified Directory

Oracle Unified Directory Services Manager (OUDSM) is a web-based interface for managing instances of Oracle Unified Directory. OUDSM enables you to configure the structure of the directory, define objects in the directory, add and configure users, groups, and other directory features.

See Accessing Oracle Unified Directory Using OUDSM in Oracle Fusion Middleware Administering Oracle Unified Directory.

3.1.3 Using Oracle Directory Services Manager for Oracle Internet Directory

Oracle Directory Services Manager is a web-based interface for managing Oracle Internet Directory instances. Oracle Directory Services Manager enables you to configure the structure of the directory, define objects in the directory, add and configure users, groups, and other entries.

See Overview of Oracle Directory Services Manager in Oracle Fusion Middleware Administrator's Guide for Oracle Internet Directory.

Note:

For Oracle Internet Directory, Oracle Directory Services Manager is a replacement for Oracle Directory Manager, which is now deprecated.

3.1.4 Using Directory Service Control Center for Oracle Directory Server Enterprise Edition

Directory Service Control Center (DSCC) is a console that enables you to manage Oracle Directory Server Enterprise Edition using a web browser.

See Using the Directory Service Control Center (DSCC) in Oracle Fusion Middleware Administrator's Guide for Oracle Directory Server Enterprise Edition.

3.2 Command-Line Tools for Administering Oracle Directory Integration Platform

You can also use the command-line tools for administering Oracle Directory Integration Platform.

The following command-line tools, located in the ORACLE_HOME/bin directory:

Note:

• Best security practice is to provide a password only in response to a prompt from the command.

• You must set the WLS_HOME and ORACLE_HOME environment variables before executing any of the Oracle Directory Integration Platform commands.

• Refer to the command-specific sections throughout this document and the Oracle Identity Management User Reference for additional information on each of the tools described in the following list.

• dipStatus: Allows you to check the status of Oracle Directory Integration Platform and whether or not it is registered with the back-end directory. For more information, see "Viewing the Status of Oracle Directory Integration Platform Using the dipStatus Utility".

• dipConfigurator: Allows you to configure Oracle Directory Integration Platform with Oracle Unified Directory, Oracle Internet Directory, and Oracle Directory Server Enterprise Edition. For more information see:

  • Configuring Oracle Directory Integration Platform for Oracle Unified Directory

  • Configuring Oracle Directory Integration Platform for Oracle Internet Directory

  • Configuring Oracle Directory Integration Platform for Oracle Directory Server Enterprise Edition

• manageDIPServerConfig: Manages Oracle Directory Integration Platform configuration settings including refresh interval, the Oracle back-end directory port number, keystore location and password, and the number of scheduler threads. Refer to "Manage Oracle Directory Integration Platform Using manageDIPServerConfig" for more information.

• manageSyncProfiles: Manages Oracle Directory Integration Platform synchronization profiles. Refer to "Managing Synchronization Profiles Using manageSyncProfiles" for more information.

• syncProfileBootstrap: Performs the initial migration of data between a connected target directory and the Oracle back-end directory based on a synchronization profile or LDIF file. Refer to "Overview of Directory Bootstrapping Using syncProfileBootstrap" for more information.

• expressSyncSetup: Creates profiles for standard LDAP directories using prepackaged templates based on the directory type. Refer to "Creating Import and Export Synchronization Profiles Using expressSyncSetup" for more information.

• provProfileBulkProv: Performs initial migration of data from an LDIF file to the Oracle back-end directory for a provisioning profile. Refer to "Bulk Provisioning Using the provProfileBulkProv Tool" for more information.

• manageProvProfiles: Administers provisioning profile entries in the directory by enabling you to perform tasks such as:

  • Create new provisioning profiles

  • Enable or disable existing provisioning profiles

  • Modify existing provisioning profiles

  • Delete existing provisioning profiles

  • Get the current status of a provisioning profile

  • Clear all errors in an existing provisioning profile

  Refer to "About manageProvProfiles Command" for more information.