Contents

List of Examples

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documentation
• Conventions

What's New in Oracle Directory Integration Platform?

• What's New in Oracle Directory Integration Platform 11g Release 1 (11.1.1.9.0)
• What's New in Oracle Directory Integration Platform 11g Release 1 (11.1.1)

Part I Getting Started with Oracle Directory Integration Platform

1 Introduction to Oracle Directory Integration Platform

• 1.1 Why Oracle Directory Integration Platform?
• 1.2 Oracle Directory Integration Platform Installation Options
• 1.3 Synchronization, Provisioning, and the Differences Between Them
  • 1.3.1 Synchronization
  • 1.3.2 Provisioning
  • 1.3.3 How Synchronization and Provisioning Differ
• 1.4 Components Involved in Oracle Directory Integration Platform Integration
  • 1.4.1 Oracle Back-End Directory
  • 1.4.2 Oracle Directory Integration Platform
    • 1.4.2.1 Understanding the Oracle Directory Integration Platform Server
    • 1.4.2.2 Understanding the Oracle Directory Integration Platform Synchronization Service
    • 1.4.2.3 Understanding the Oracle Directory Integration Platform Provisioning Service

2 Security Features in Oracle Directory Integration Platform

• 2.1 Authentication in Oracle Directory Integration Platform
  • 2.1.1 Secure Sockets Layer and Oracle Directory Integration Platform
  • 2.1.2 Oracle Directory Integration Platform Authentication in SSL Mode
  • 2.1.3 Profile Authentication
• 2.2 Access Control and Authorization and Oracle Directory Integration Platform
  • 2.2.1 Access Controls for the Oracle Directory Integration Platform
  • 2.2.2 Access Controls for Profiles
• 2.3 Data Integrity and Oracle Directory Integration Platform
• 2.4 Data Privacy and Oracle Directory Integration Platform
• 2.5 Tools Security and Oracle Directory Integration Platform
• 2.6 Credential Storing

Part II General Administration of Oracle Directory Integration Platform

3 Administering Oracle Directory Integration Platform

• 3.1 Graphical Tools for Administering Oracle Directory Integration Platform
  • 3.1.1 Using Fusion Middleware Control
    • 3.1.1.1 The Oracle Directory Integration Platform Home Page
  • 3.1.2 Using Oracle Directory Services Manager for Oracle Internet Directory and Oracle Unified Directory
  • 3.1.3 Using Directory Service Control Center for Oracle Directory Server Enterprise Edition
• 3.2 Command-Line Tools for Administering Oracle Directory Integration Platform

4 Managing the Oracle Directory Integration Platform

• 4.1 Operational Information About the Oracle Directory Integration Platform
  • 4.1.1 Directory Integration Profiles
  • 4.1.2 Oracle Directory Integration Platform Event Propagation in a Multimaster Oracle Back-end Directory Replication Environment
    • 4.1.2.1 Directory Synchronization in an Oracle Back-end Directory Multimaster Replication Environment
    • 4.1.2.2 Directory Provisioning in an Oracle Unified Directory or Oracle Internet Directory Multimaster Replication Environment
• 4.2 Viewing Oracle Directory Integration Platform Status and Registration Information
  • 4.2.1 Viewing the Status of Oracle Directory Integration Platform Using the dipStatus Utility
    • 4.2.1.1 Syntax for dipStatus
    • 4.2.1.2 Arguments for dipStatus
    • 4.2.1.3 Examples for dipStatus
  • 4.2.2 Viewing Oracle Directory Integration Platform Registration Information Using the ldapsearch Utility
• 4.3 Managing Oracle Directory Integration Platform Using Fusion Middleware Control
  • 4.3.1 Viewing Oracle Directory Integration Platform Runtime Information Using Fusion Middleware Control
  • 4.3.2 Starting Oracle Directory Integration Platform with Fusion Middleware Control
  • 4.3.3 Stopping Oracle Directory Integration Platform with Fusion Middleware Control
  • 4.3.4 Managing the Oracle Directory Integration Platform Server Configuration
  • 4.3.5 Managing Oracle Directory Integration Platform Logging Using Fusion Middleware Control
  • 4.3.6 Auditing Oracle Directory Integration Platform Using Fusion Middleware Control
• 4.4 Starting and Stopping Oracle Directory Integration Platform Using WLST
• 4.5 Managing Oracle Directory Integration Platform Using manageDIPServerConfig
  • 4.5.1 Syntax for manageDIPServerConfig
  • 4.5.2 Arguments for manageDIPServerConfig
  • 4.5.3 Tasks and Examples for manageDIPServerConfig
• 4.6 Configuring Oracle Unified Directory for SSL Mode
• 4.7 Configuring Oracle Directory Server Enterprise Edition for SSL Mode
• 4.8 Configuring Oracle Internet Directory for SSL Mode 2 Server-Only Authentication
  • 4.8.1 To Configure Oracle Internet Directory for SSL Server-Auth Authentication
  • 4.8.2 To Configure the Oracle Directory Integration Platform for SSL Authentication
• 4.9 Managing the SSL Certificates of Back-End Directories and Connected Directories
  • 4.9.1 Detecting and Removing an Expired Certificate
• 4.10 Oracle Directory Integration Platform in a High Availability Scenario
• 4.11 Managing Oracle Directory Integration Platform in a Replicated Environment

Part III Configuring Oracle Back-End Directory

5 Configuring Oracle Unified Directory

• 5.1 Prerequisites
• 5.2 Configuring Oracle Unified Directory (Non-SSL) for Oracle Directory Integration Platform
  • 5.2.1 Task 1: Installing Oracle Unified Directory
  • 5.2.2 Task 2: Configuring Oracle Unified Directory
  • 5.2.3 Task 3: Creating Oracle Unified Directory Suffixes
  • 5.2.4 Task 4: Enabling External Change Log
  • 5.2.5 Task 5: Configuring the Oracle WebLogic Server Domain
    • 5.2.5.1 Oracle Directory Integration Platform with Oracle Unified Directory in an Existing WebLogic Domain
    • 5.2.5.2 Oracle Directory Integration Platform and Oracle Unified Directory in a New Oracle WebLogic Server Domain
  • 5.2.6 Task 6: Starting the Servers
  • 5.2.7 Task 7: Configuring Oracle Directory Integration Platform for Oracle Unified Directory
  • 5.2.8 Task 8: Adding Access Control Instructions (ACIs) for Oracle Unified Directory
  • 5.2.9 Task 9: Verifying Oracle Directory Integration Platform
• 5.3 Configuring Oracle Unified Directory (SSL) for Oracle Directory Integration Platform
  • 5.3.1 Configuring Oracle Unified Directory for SSL
  • 5.3.2 Configuring Oracle Directory Integration Platform for Oracle Unified Directory SSL

6 Configuring Oracle Internet Directory

7 Configuring Oracle Directory Server Enterprise Edition

• 7.1 Prerequisites
• 7.2 Configuring Oracle Directory Server Enterprise Edition (Non-SSL) for Oracle Directory Integration Platform
  • 7.2.1 Task 1: Installing and Configuring Oracle Directory Server Enterprise Edition
  • 7.2.2 Task 2: Installing Oracle Directory Server Enterprise Edition Plug-In
  • 7.2.3 Task 3: Creating Oracle Directory Server Enterprise Edition Suffixes
  • 7.2.4 Task 4: Enabling the Retro Change Log for Oracle Directory Server Enterprise Edition
  • 7.2.5 Task 5: Configuring the Oracle WebLogic Server Domain
    • 7.2.5.1 Oracle Directory Integration Platform with Oracle Directory Server Enterprise Edition in an Existing WebLogic Domain
    • 7.2.5.2 Oracle Directory Integration Platform and Oracle Directory Server Enterprise Edition in a New Oracle WebLogic Server Domain
  • 7.2.6 Task 6: Starting the Server
  • 7.2.7 Task 7: Configuring Oracle Directory Integration Platform for Oracle Directory Server Enterprise Edition
  • 7.2.8 Task 8: Adding Access Control Instructions (ACIs) for Oracle Directory Server Enterprise Edition
  • 7.2.9 Task 9: Verifying Oracle Directory Integration Platform
• 7.3 Configuring Oracle Directory Server Enterprise Edition (SSL) for Oracle Directory Integration Platform
  • 7.3.1 Configuring Oracle Directory Server Enterprise Edition for SSL
  • 7.3.2 Configuring Oracle Directory Integration Platform for Oracle Directory Server Enterprise Edition SSL

Part IV Synchronization Using Oracle Directory Integration Platform

8 Understanding the Oracle Directory Synchronization Service

• 8.1 Components Involved in Oracle Directory Synchronization
  • 8.1.1 Connectors for Directory Synchronization
    • 8.1.1.1 Using Connectors with Supported Interfaces
    • 8.1.1.2 Using Connectors Without Supported Interfaces
  • 8.1.2 Directory Synchronization Profiles
• 8.2 How Synchronization Works
  • 8.2.1 Synchronizing from the Back-end Directory to a Connected Directory
  • 8.2.2 Synchronizing from a Connected Directory to the Back-end Directory
  • 8.2.3 Synchronizing Directories with Interfaces Not Supported by the Back-end Directory

9 Configuring Directory Synchronization

• 9.1 Registering Connectors in Oracle Directory Integration Platform
• 9.2 Synchronization Profile Templates
• 9.3 Configuring Connection Details
• 9.4 Configuring Mapping Rules
  • 9.4.1 Distinguished Name Mapping
    • 9.4.1.1 Domain Mapping Rules
    • 9.4.1.2 Excluding Domains
  • 9.4.2 Attribute-Level Mapping
    • 9.4.2.1 Excluding Attributes
  • 9.4.3 Manually Creating New Mapping Files
  • 9.4.4 Supported Attribute Mapping Rules and Examples
  • 9.4.5 Configuring Account Locking Synchronization
    • 9.4.5.1 Prerequisites
    • 9.4.5.2 Enabling Account Lockout Synchronization
  • 9.4.6 Account Disabling Synchronization
  • 9.4.7 Example: Mapping File for a Tagged-File Interface
  • 9.4.8 Example: Mapping Files for an LDIF Interface
  • 9.4.9 Updating Mapping Rules
    • 9.4.9.1 Adding an Entry to the Mapping Rules File
    • 9.4.9.2 Modifying an Entry in the Mapping Rules File
    • 9.4.9.3 Deleting an Entry from the Mapping Rules File
• 9.5 Extending Mappings Using Custom Plug-ins
  • 9.5.1 Writing Custom Plug-Ins
  • 9.5.2 Mapping Plug-In Evaluation Constraints
  • 9.5.3 Adding Mapping Plug-Ins
  • 9.5.4 Applications of Mapping Plug-Ins
    • 9.5.4.1 Support for New Mapping Operations
    • 9.5.4.2 Support for Multiple Literal Values
  • 9.5.5 Example Plug-In Usage
• 9.6 Configuring Matching Filters
  • 9.6.1 Filtering Changes with an LDAP Search
  • 9.6.2 Filtering Changes from a Change Log
• 9.7 Location and Naming of Files
• 9.8 Password Synchronization
  • 9.8.1 Password Synchronization Mechanism
  • 9.8.2 Configuring Password Synchronization for Oracle Unified Directory
    • 9.8.2.1 Synchronizing Password from a Connected Directory to the Oracle Unified Directory using On-Demand Password
    • 9.8.2.2 Synchronizing Password from the Oracle Unified Directory to a Connected Directory using Password Translate
  • 9.8.3 Configuring Password Synchronization for Oracle Directory Server Enterprise Edition
    • 9.8.3.1 Synchronizing Password from a Connected Directory to the Oracle Directory Server Enterprise Edition using On-Demand Password
    • 9.8.3.2 Synchronizing Password from the Oracle Directory Server Enterprise Edition to a Connected Directory Using Password Translate
  • 9.8.4 Configuring Password Synchronization for Oracle Internet Directory

10 Managing Directory Synchronization Profiles

• 10.1 Managing Synchronization Profiles Using Fusion Middleware Control
  • 10.1.1 Creating Synchronization Profiles
  • 10.1.2 Editing Synchronization Profiles
  • 10.1.3 Enabling and Disabling Synchronization Profiles
  • 10.1.4 Deleting Synchronization Profiles
  • 10.1.5 Troubleshooting Synchronization Profiles Using DIP Tester
    • 10.1.5.1 Running DIP Tester From the Enterprise Manager User Interface
    • 10.1.5.2 Running DIP Tester From the WLST Command-Line Interface
• 10.2 Managing Synchronization Profiles Using manageSyncProfiles
  • 10.2.1 Syntax for manageSyncProfiles
  • 10.2.2 Arguments for manageSyncProfiles
  • 10.2.3 Tasks and Examples for manageSyncProfiles
• 10.3 Modifying the Synchronization Status Attributes
• 10.4 Setting Null Values in Synchronization Profiles

11 Bootstrapping a Directory in Oracle Directory Integration Platform

• 11.1 Directory Bootstrapping Using syncProfileBootstrap
  • 11.1.1 Syntax for syncProfileBootstrap
  • 11.1.2 Arguments for syncProfileBootstrap
  • 11.1.3 Tasks and Examples for syncProfileBootstrap
  • 11.1.4 Recommended Bootstrapping Methodology
  • 11.1.5 Bootstrapping Using a Parameter File
    • 11.1.5.1 Bootstrapping from an LDAP File to an LDIF File
    • 11.1.5.2 Bootstrapping Using an LDIF File
  • 11.1.6 Bootstrapping Directly Using the Default Integration Profile
• 11.2 Bootstrapping in SSL Mode
  • 11.2.1 Adding a Trusted Certificate to the DIP Keystore
    • 11.2.1.1 To Add a Trusted Certificate to the DIP Keystore

12 Synchronizing with Tables in Oracle Database

• 12.1 Preparing the Additional Configuration Information File
• 12.2 Preparing the Mapping File
• 12.3 Preparing the Directory Integration Profile
• 12.4 Example: Synchronizing a Relational Database Table to the Back-end Directory
  • 12.4.1 Configuring the Additional Configuration Information File
  • 12.4.2 Configuring the Mapping File
  • 12.4.3 Configuring the Directory Integration Profile
  • 12.4.4 Uploading the Additional Configuration Information and Mapping Files
  • 12.4.5 Synchronization Process
  • 12.4.6 Observations About the Example

13 Synchronizing with Oracle Human Resources

• 13.1 Introduction to Synchronization with Oracle Human Resources
• 13.2 Data You Can Import from Oracle Human Resources
• 13.3 Managing Synchronization Between Oracle Human Resources and the Oracle Back-end Directory
  • 13.3.1 Task 1: Configure a Directory Integration Profile for the Oracle Human Resources Connector
  • 13.3.2 Task 2: Configure the List of Attributes to be Synchronized with the Oracle Back-end Directory
    • 13.3.2.1 Modifying Additional Oracle Human Resources Attributes for Synchronization
    • 13.3.2.2 Excluding Oracle Human Resources Attributes from Synchronization
    • 13.3.2.3 Configuring a SQL SELECT Statement in the Configuration File to Support Complex Selection Criteria
  • 13.3.3 Task 3: Configure Mapping Rules for the Oracle Human Resources Connector
  • 13.3.4 Task 4: Prepare to Synchronize from Oracle Human Resources to the Oracle Back-end Directory
    • 13.3.4.1 Preparing for Synchronization
• 13.4 The Synchronization Process
• 13.5 Bootstrapping the Oracle Back-end Directory from Oracle Human Resources

14 Synchronizing with Third-Party Metadirectory Solutions

• 14.1 About Change Logs
• 14.2 Enabling Third-Party Metadirectory Solutions to Synchronize with the Oracle Back-end Directory
  • 14.2.1 Task 1: Perform Initial Bootstrapping
  • 14.2.2 Task 2: Create a Change Subscription Object in the Oracle Back-end Directory for the Third-Party Metadirectory Solution
    • 14.2.2.1 About the Change Subscription Object
    • 14.2.2.2 Creating a Change Subscription Object
• 14.3 Synchronization Process
  • 14.3.1 How a Connected Directory Retrieves Changes the First Time from the Oracle Back-end Directory
  • 14.3.2 How a Connected Directory Updates the orclLastAppliedChangeNumber Attribute in the Oracle Back-end Directory
• 14.4 Disabling and Deleting Change Subscription Objects
  • 14.4.1 Disabling a Change Subscription Object
  • 14.4.2 Deleting a Change Subscription Object

Part V Provisioning with the Oracle Directory Integration Platform

15 Understanding the Oracle Directory Integration Platform for Provisioning

• 15.1 What Is Provisioning?
• 15.2 Components of the Oracle Directory Integration Platform Service
• 15.3 Understanding Provisioning Concepts
  • 15.3.1 Synchronous Provisioning
  • 15.3.2 Asynchronous Provisioning
  • 15.3.3 Provisioning Data Flow
• 15.4 Overview of Provisioning Methodologies
  • 15.4.1 Provisioning Users that are Synchronized from an External Source
  • 15.4.2 Provisioning Users Created with Command-Line LDAP Tools
  • 15.4.3 Bulk Provisioning Using the provProfileBulkProv Tool
    • 15.4.3.1 Syntax for provProfileBulkProv
    • 15.4.3.2 Arguments for provProfileBulkProv
    • 15.4.3.3 Tasks and Examples for provProfileBulkProv
  • 15.4.4 On-Demand Provisioning
  • 15.4.5 Application Bootstrapping
• 15.5 Organization of User Profiles in the Oracle Back-End Directory
  • 15.5.1 Organization of Provisioning Entries in the Directory Information Tree
  • 15.5.2 Understanding User Provisioning Status
    • 15.5.2.1 Provisioning Status in Oracle Back-end Directory
    • 15.5.2.2 Provisioning Status Transitions
    • 15.5.2.3 Upgrading and Coexistence Provisioning Status
    • 15.5.2.4 Provisioning Status and Exception Handling
• 15.6 Understanding Provisioning Flow
  • 15.6.1 Viewing and Editing Provisioning Profiles Using Fusion Middleware Control
  • 15.6.2 User Provisioning from an External Source
• 15.7 How Are Administrative Privileges Delegated?

16 Deploying Provisioning-Integrated Applications

• 16.1 Deployment Overview for Provisioning-Integrated Applications
• 16.2 Managing Provisioning Profiles Using manageProvProfiles
  • 16.2.1 Syntax for manageProvProfiles
  • 16.2.2 Arguments for manageProvProfiles
  • 16.2.3 Tasks and Examples for manageProvProfiles
    • 16.2.3.1 Creating a Provisioning Profile
    • 16.2.3.2 Modifying a Provisioning Profile
    • 16.2.3.3 Deleting a Provisioning Profile
    • 16.2.3.4 Disabling a Provisioning Profile
• 16.3 Registering Applications for Provisioning
• 16.4 Configuring Application Provisioning Properties

17 Understanding the Oracle Provisioning Event Engine

• 17.1 What Are the Oracle Provisioning Events?
• 17.2 Working with the Oracle Provisioning Event Engine
  • 17.2.1 Creating Custom Event Object Definitions
  • 17.2.2 Defining Custom Event Generation Rules

18 Integration of Provisioning Data with Oracle E-Business Suite

Part VI Integrating with Third-Party Directories

19 Connected Directory Integration Concepts and Considerations

• 19.1 Concepts and Architecture of Connected Directory Integration
  • 19.1.1 Oracle Identity Management Components for Integrating with Other Directories
  • 19.1.2 Oracle Back-end Directory Schema Elements for Synchronizing with Connected Directories
  • 19.1.3 Directory Information Tree in an Integration with a Connected Directory
    • 19.1.3.1 About Realms in Oracle Internet Directory
    • 19.1.3.2 About Suffixes in Oracle Unified Directory and Oracle Directory Server Enterprise Edition
    • 19.1.3.3 Planning the Deployment
    • 19.1.3.4 Example: Integration with a Single Connected Directory Domain
• 19.2 Planning Your Integration Environment
  • 19.2.1 Preliminary Considerations for Integrating with a Connected Directory
  • 19.2.2 Choose the Directory for the Central Enterprise Directory
    • 19.2.2.1 Scenario 1: Oracle Directory as the Central Enterprise Directory
    • 19.2.2.2 Scenario 2: A Directory Other than the Oracle Directory is the Central Enterprise Directory
  • 19.2.3 Customizing the LDAP Schema
  • 19.2.4 Choose Where to Store Passwords
    • 19.2.4.1 Advantages and Disadvantages of Storing the Password in One Directory
    • 19.2.4.2 Advantages and Disadvantages of Storing Passwords in Both Directories
  • 19.2.5 Choose the Structure of the Directory Information Tree
    • 19.2.5.1 Create Identical DIT Structures on Both Directories
    • 19.2.5.2 Distinguished Name Mapping and Limitations
  • 19.2.6 Select the Attribute for the Login Name
  • 19.2.7 Select the User Search Base
  • 19.2.8 Select the Group Search Base
  • 19.2.9 Decide How to Address Security Concerns
  • 19.2.10 Administering Your Deployment with Oracle Access Manager
• 19.3 Microsoft Active Directory Integration Concepts
  • 19.3.1 Synchronizing from Microsoft Active Directory to the Oracle Back-end Directory
  • 19.3.2 Requirement for Using WebDAV Protocol
  • 19.3.3 Oracle Back-end Directory Schema Elements for Microsoft Active Directory
  • 19.3.4 Integration with Multiple Microsoft Active Directory Domain Controllers
  • 19.3.5 Synchronizing with a Multiple-Domain Microsoft Active Directory Environment
    • 19.3.5.1 Configuration Required for Importing from Microsoft Active Directory to the Oracle Back-end Directory
    • 19.3.5.2 Configuration Required for Importing from Microsoft Active Directory Lightweight Directory Service to the Oracle Back-end Directory
    • 19.3.5.3 Configuration Required for Exporting from the Oracle Back-end Directory to Microsoft Active Directory
    • 19.3.5.4 Example: Integration with Multiple Connected Directory Domains
  • 19.3.6 Foreign Security Principals
• 19.4 Oracle Directory Server Enterprise Edition (Sun Java System Directory Server) Integration Concepts
  • 19.4.1 Synchronizing from Oracle Directory Server Enterprise Edition to Oracle Directory Integration Platform
  • 19.4.2 Oracle Internet Directory Schema Elements for Oracle Directory Server Enterprise Edition (Sun Java System Directory Server)
• 19.5 IBM Tivoli Directory Server Integration Concepts
  • 19.5.1 Changes to Directory Objects in IBM Tivoli Directory Server
  • 19.5.2 Oracle Back-end Directory Schema Elements for IBM Tivoli Directory Server
• 19.6 Novell eDirectory and OpenLDAP Integration Concepts
  • 19.6.1 Synchronizing from Novell eDirectory or OpenLDAP to the Oracle Back-end Directory
  • 19.6.2 Oracle Back-end Directory Schema Elements for Novell eDirectory
  • 19.6.3 Oracle Back-end Directory Schema Elements for OpenLDAP
• 19.7 Limitations of Connected Directory Integration in Oracle Directory Integration Platform 11g Release 1 (11.1.1)

20 Configuring Synchronization with a Connected Directory

• 20.1 Verifying Synchronization Requirements
• 20.2 Creating Import and Export Synchronization Profiles Using expressSyncSetup
  • 20.2.1 Syntax for expressSyncSetup
  • 20.2.2 Arguments for expressSyncSetup
  • 20.2.3 Tasks and Examples for expressSyncSetup
  • 20.2.4 Understanding the expressSyncSetup Command
• 20.3 Configuring Advanced Integration Options
  • 20.3.1 Configuring the Realm
  • 20.3.2 Customizing Access Control Lists
    • 20.3.2.1 Customizing ACLs for Import Profiles
    • 20.3.2.2 Customizing ACLs for Export Profiles
  • 20.3.3 Customizing Mapping Rules
  • 20.3.4 Configuring the Connected Directory Connector for Synchronization in SSL Mode
  • 20.3.5 Enabling Password Synchronization from the Oracle Back-end Directory to a Connected Directory
  • 20.3.6 Configuring External Authentication Plug-ins
    • 20.3.6.1 Configuring External Authentication Against Multiple Domains
• 20.4 Writing Custom Synchronization Connectors
  • 20.4.1 Inbound Connectors
    • 20.4.1.1 Sample Reader
  • 20.4.2 Outbound Connectors
    • 20.4.2.1 Sample Writer

21 Integrating with Microsoft Active Directory

• 21.1 Verifying Synchronization Requirements for Microsoft Active Directory
• 21.2 Configuring Basic Synchronization with Microsoft Active Directory
• 21.3 Configuring Advanced Integration with Microsoft Active Directory
  • 21.3.1 Step 1: Planning Your Integration
  • 21.3.2 Step 2: Configuring the Realm
  • 21.3.3 Step 3: Customizing the Search Filter to Retrieve Information from Microsoft Active Directory
  • 21.3.4 Step 4: Customizing the ACLs
  • 21.3.5 Step 5: Customizing Attribute Mappings
  • 21.3.6 Step 6: Synchronizing with Multiple Microsoft Active Directory Domains
  • 21.3.7 Step 7: Synchronizing Deletions from Microsoft Active Directory
  • 21.3.8 Step 8: Synchronizing in SSL Mode
  • 21.3.9 Step 9: Synchronizing Passwords
  • 21.3.10 Step 10: Configuring the Microsoft Active Directory External Authentication Plug-in
  • 21.3.11 Step 11: Performing Post-Configuration and Administrative Tasks
• 21.4 Using DirSync Change Tracking for Import Operations
• 21.5 Configuring Synchronization of Microsoft Active Directory Foreign Security Principal References with an Oracle Back-End Directory
• 21.6 Switching to a Different Microsoft Active Directory Domain Controller in the Same Domain
• 21.7 Configuring the Microsoft Active Directory Connector for Microsoft Active Directory Lightweight Directory Service
• 21.8 Configuring the Microsoft Active Directory Connector for Microsoft Exchange Server
  • 21.8.1 To Enable Microsoft Exchange User Synchronization From the User Interface
  • 21.8.2 To Enable Microsoft Exchange User Synchronization From the Command Line

22 Deploying the Oracle Password Filter for Microsoft Active Directory

• 22.1 Overview of the Oracle Password Filter for Microsoft Active Directory
  • 22.1.1 What is the Oracle Password Filter for Microsoft Active Directory?
  • 22.1.2 How Does the Oracle Password Filter for Microsoft Active Directory Work?
    • 22.1.2.1 How Clear Text Password Changes are Captured
    • 22.1.2.2 Password Changes are Stored when the Oracle Back-end Directory is Unavailable
    • 22.1.2.3 Password Synchronization is Delayed Until Microsoft Active Directory Users are Synchronized with Oracle Back-end Directory
    • 22.1.2.4 Password Bootstrapping
  • 22.1.3 How Do I Deploy the Oracle Password Filter for Microsoft Active Directory?
• 22.2 Configuring and Testing Oracle Back-end Directory with SSL Server-Side Authentication
• 22.3 Importing a Trusted Certificate into a Microsoft Active Directory Domain Controller
• 22.4 Testing SSL Communication Between Oracle Back-end directory and Microsoft Active Directory
• 22.5 Installing and Reconfiguring the Oracle Password Filter for Microsoft Active Directory
  • 22.5.1 Installing the Oracle Password Filter for Microsoft Active Directory
  • 22.5.2 Reconfiguring the Oracle Password Filter for Microsoft Active Directory
• 22.6 Removing the Oracle Password Filter for Microsoft Active Directory

23 Integrating with Oracle Directory Server Enterprise Edition (Connected Directory)

• 23.1 Verifying Synchronization Requirements for Oracle Directory Server Enterprise Edition
• 23.2 Configuring Basic Synchronization with Oracle Directory Server Enterprise Edition
• 23.3 Configuring Advanced Integration with Oracle Directory Server Enterprise Edition
  • 23.3.1 Step 1: Plan Your Integration
  • 23.3.2 Step 2: Configure the Realm
  • 23.3.3 Step 3: Customize the ACLs
  • 23.3.4 Step 4: Customize Attribute Mappings
  • 23.3.5 Step 5: Customize the Oracle Directory Server Enterprise Edition Connector to Synchronize Deletions
  • 23.3.6 Step 6: Synchronize Passwords
  • 23.3.7 Step 7: Synchronizing in SSL Mode
  • 23.3.8 Step 8: Perform Post-Configuration and Administrative Tasks

24 Integrating with IBM Tivoli Directory Server

• 24.1 Verifying Synchronization Requirements for IBM Tivoli Directory Server
• 24.2 Configuring Basic Synchronization with IBM Tivoli Directory Server
• 24.3 Configuring Advanced Integration with IBM Tivoli Directory Server
  • 24.3.1 Step 1: Plan Your Integration
  • 24.3.2 Step 2: Configure the Realm
  • 24.3.3 Step 3: Customize the ACLs
  • 24.3.4 Step 4: Customize Attribute Mappings
  • 24.3.5 Step 5: Customize the IBM Tivoli Directory Server Connector to Synchronize Deletions
  • 24.3.6 Step 6: Synchronize Passwords
  • 24.3.7 Step 7: Synchronize in SSL Mode
  • 24.3.8 Step 8: Configure the IBM Tivoli Directory Server External Authentication Plug-in
  • 24.3.9 Step 9: Perform Post-Configuration and Administrative Tasks

25 Integrating with Novell eDirectory or OpenLDAP

• 25.1 Verifying Synchronization Requirements for Novell eDirectory or OpenLDAP
• 25.2 Configuring Basic Synchronization with Novell eDirectory or OpenLDAP
  • 25.2.1 Synchronizing Multiple Profiles from eDirectory or OpenLDAP to One Oracle Back-end Directory Container
• 25.3 Configuring Advanced Integration with Novell eDirectory or OpenLDAP
  • 25.3.1 Step 1: Plan Your Integration
  • 25.3.2 Step 2: Configure the Realm
  • 25.3.3 Step 3: Customize the Search Filter to Retrieve Information from Novell eDirectory or OpenLDAP
  • 25.3.4 Step 4: Customize the ACLs
  • 25.3.5 Step 5: Customize Attribute Mappings
  • 25.3.6 Step 6: Customize the Novell eDirectory or OpenLDAP Connector to Synchronize Deletions
    • 25.3.6.1 How Do I Define a Reconciliation Rule?
    • 25.3.6.2 How are Reconciliation Rules Used to Synchronize Deletions?
  • 25.3.7 Step 7: Specify Synchronization Parameters for the Advanced Configuration Information Attribute
  • 25.3.8 Step 8: Configure the OpenLDAP Connector to Synchronize Passwords
  • 25.3.9 Step 9: Synchronize in SSL Mode
  • 25.3.10 Step 10: Configure the Novell eDirectory or OpenLDAP External Authentication Plug-in
  • 25.3.11 Step 11: Perform Post-Configuration and Administrative Tasks

26 Managing Integration with a Connected Directory

• 26.1 Tasks After Configuring with a Connected Directory
• 26.2 Typical Management of Integration with a Connected Directory
  • 26.2.1 Bootstrapping Data Between Directories
  • 26.2.2 Managing a Third-Party Directory External Authentication Plug-in
    • 26.2.2.1 Deleting a Third-Party Directory External Authentication Plug-in
    • 26.2.2.2 Disabling a Third-Party External Authentication Plug-in
    • 26.2.2.3 Re-enabling a Third-Party External Authentication Plug-in
  • 26.2.3 Granting Password Privilege for Oracle Unified Directory Acting As Connected Directory

Part VII Appendixes

A Example Properties File for Synchronization Profiles

B Case Study: A Deployment of Oracle Directory Integration Platform

• B.1 Components in the MyCompany Enterprise
• B.2 Requirements of the MyCompany Enterprise
• B.3 Overall Deployment in the MyCompany Enterprise
• B.4 User Creation and Provisioning in the MyCompany Enterprise
• B.5 Modification of User Properties in the MyCompany Enterprise
• B.6 Deletion of Users in the MyCompany Enterprise

C Starting and Stopping the Oracle Stack

• C.1 Starting the Stack
• C.2 Stopping the Stack
• C.3 Starting and Stopping Oracle Unified Directory
• C.4 Starting, Stopping, and Restarting a Oracle Directory Server Enterprise Edition Instance

D Troubleshooting the Oracle Directory Integration Platform

• D.1 Checklist for Troubleshooting Oracle Directory Integration Platform
• D.2 General Issues
  • D.2.1 LDIF Files That Contain Non-ASCII Characters Will Cause the testProfile Command Option to Fail if the LDIF File has Native Encoding
  • D.2.2 Some Changes May Not Get Synchronized Due to Race Condition in Heavily-Loaded Source Directory
  • D.2.3 Synchronization Continues After Stopping Oracle Directory Integration Platform
  • D.2.4 Synchronization of Deleted Objects Fails
• D.3 Configuration Issues
  • D.3.1 Do not use localhost as Oracle Internet Directory Hostname When Configuring Oracle Directory Integration Platform
  • D.3.2 You may Need to Restart the Directory Integration Platform After Running dipConfigurator Against Oracle Unified Directory
  • D.3.3 When Configuring a Profile, you may Need to Scroll Past a Section of Whitespace to View Mapping Rules
  • D.3.4 Resource Usage Charts will not Display if Multiple IDM Domains are Running on the Same Host
  • D.3.5 dipConfigurator Fails
• D.4 Problems and Solutions
  • D.4.1 Provisioning Errors and Problems
  • D.4.2 Synchronization Errors and Problems
  • D.4.3 Novell eDirectory and OpenLDAP Synchronization Errors and Problems
  • D.4.4 Oracle Password Filter for Microsoft Active Directory Errors and Problems
• D.5 Troubleshooting Synchronization
  • D.5.1 Oracle Directory Integration Platform Synchronization Process Flow
    • D.5.1.1 Oracle Directory Integration Platform Synchronization Process Flow for an Import Profile
    • D.5.1.2 Oracle Directory Integration Platform Synchronization Process Flow for an Export Profile
  • D.5.2 Understanding Synchronization Profile Registration
  • D.5.3 Understanding the diagnostic.log File
• D.6 Troubleshooting Integration with Microsoft Active Directory
  • D.6.1 Debugging Windows Native Authentication
  • D.6.2 Synchronizing Changes Following a Period when the Oracle Back-end Directory is Unavailable
• D.7 Need More Help?

Glossary

Index