This chapter describes tools you can use to administer Oracle Directory Integration Platform. It contains these topics:
Graphical Tools for Administering Oracle Directory Integration Platform
Command-Line Tools for Administering Oracle Directory Integration Platform
You can use the following graphical tools to administer Oracle Directory Integration Platform:
Using Oracle Directory Services Manager for Oracle Internet Directory and Oracle Unified Directory
Using Directory Service Control Center for Oracle Directory Server Enterprise Edition
Note:
Prior to 11g Release 1 (11.1.1), the Oracle Directory Integration Platform was graphically administered by using the Oracle Directory Integration Server Administration tool. This tool is no longer available with the Oracle Directory Integration Platform. To graphically administer the Oracle Directory Integration Platform in 11g Release 1 (11.1.1) you must use Oracle Enterprise Manager Fusion Middleware Control.As of 11g Release 1 (11.1.1), you can graphically administer many Oracle Directory Integration Platform features from the Oracle Enterprise Manager Fusion Middleware Control. This console enables you to configure and manage all Oracle products from one user interface.
To use Oracle Enterprise Manager Fusion Middleware Control to administer Oracle Directory Integration Platform:
Connect to Oracle Enterprise Manager Fusion Middleware Control. The URL is of the form:
https://host:port/em
In the left panel topology tree, expand the farm, then Identity and Access. Alternatively, from the farm home page, expand Fusion Middleware, then Identity and Access. Oracle Directory Integration Platform components are listed in both places.
To distinguish one component from another, move the mouse over the component name and view the full name of the component in the tool tip.
Select the Oracle Directory Integration Platform component you want to manage.
Use the DIP Server menu to select tasks.
You can use the DIP Server menu to navigate to other Fusion Middleware Control pages for Oracle Directory Integration Platform.
The Home Page for Oracle Directory Integration Platform in Oracle Enterprise Manager Fusion Middleware Control provides statistics and information about the component, including:
The status of Oracle Directory Integration Platform components, such as the Quartz Scheduler and MBeans.
The amount of CPU and memory being utilized.
Information about existing Synchronization Profiles, including name, status, average execution time, and successful and failed propagation of changes.
Information about existing Provisioning Profiles, including name, status, average execution time, and successful and failed propagation of changes.
Oracle Directory Services Manager is a web-based interface for managing instances of Oracle Unified Directory and Oracle Internet Directory. Oracle Directory Services Manager enables you to configure the structure of the directory, define objects in the directory, add and configure users, groups, and other entries. Oracle Directory Services Manager is the interface you use to manage entries, schema, security, and other directory features.
Note:
For Oracle Internet Directory, Oracle Directory Services Manager is a replacement for Oracle Directory Manager, which is now deprecated.See Also:
Chapter "Accessing Oracle Unified Directory by Using Oracle Directory Services Manager" in the Oracle Fusion Middleware Administrator's Guide for Oracle Unified Directory.
Chapter "Using Oracle Directory Services Manager" in the Oracle Fusion Middleware Administrator's Guide for Oracle Internet Directory.
Directory Service Control Center (DSCC) is a console that enables you to manage Oracle Directory Server Enterprise Edition using a web browser. For more information, see the chapter "Using the Directory Service Control Center (DSCC)" in the Oracle Fusion Middleware Administrator's Guide for Oracle Directory Server Enterprise Edition.
The following command-line tools, located in the ORACLE_HOME/bin directory, are available for administering Oracle Directory Integration Platform:
Notes:
Best security practice is to provide a password only in response to a prompt from the command.
You must set the WLS_HOME and ORACLE_HOME environment variables before executing any of the Oracle Directory Integration Platform commands.
Refer to the command-specific sections throughout this document and the Oracle Identity Management User Reference for additional information on each of the tools described in the following list.
dipStatus: Allows you to check the status of Oracle Directory Integration Platform and whether or not it is registered with the back-end directory. Refer to "Viewing the Status of Oracle Directory Integration Platform Using the dipStatus Utility" for more information.
dipConfigurator: Allows you to configure Oracle Directory Integration Platform with Oracle Unified Directory and Oracle Directory Server Enterprise Edition. For more information see:
manageDIPServerConfig: Manages Oracle Directory Integration Platform configuration settings including refresh interval, the Oracle back-end directory port number, keystore location and password, and the number of scheduler threads. Refer to "Managing Oracle Directory Integration Platform Using manageDIPServerConfig" for more information.
manageSyncProfiles: Manages Oracle Directory Integration Platform synchronization profiles. Refer to "Managing Synchronization Profiles Using manageSyncProfiles" for more information.
syncProfileBootstrap: Performs the initial migration of data between a connected target directory and the Oracle back-end directory based on a synchronization profile or LDIF file. Refer to "Directory Bootstrapping Using syncProfileBootstrap" for more information.
expressSyncSetup: Creates profiles for standard LDAP directories using prepackaged templates based on the directory type. Refer to "Creating Import and Export Synchronization Profiles Using expressSyncSetup" for more information.
provProfileBulkProv: Performs initial migration of data from an LDIF file to the Oracle back-end directory for a provisioning profile. Refer to "Bulk Provisioning Using the provProfileBulkProv Tool" for more information.
manageProvProfiles: Administers provisioning profile entries in the directory by enabling you to perform tasks such as:
Create new provisioning profiles
Enable or disable existing provisioning profiles
Modify existing provisioning profiles
Delete existing provisioning profiles
Get the current status of a provisioning profile
Clear all errors in an existing provisioning profile
Refer to "Managing Provisioning Profiles Using manageProvProfiles" for more information.