Home / Middleware / Oracle Enterprise Data Quality

Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Enterprise Data Quality Security Architecture

• 1.1 Client-Server Communication
• 1.2 Authentication
• 1.3 Storing Security Information
• 1.4 Data Segmentation

2 Integrating with LDAP

• 2.1 Overview of LDAP Support
• 2.2 Integrating LDAP Using OPSS on a WebLogic Server
• 2.3 Integrating LDAP Directly on Apache Tomcat
• 2.4 Configuring Global LDAP Settings
• 2.5 Configuring Realm Settings
• 2.6 Validating Credentials When Single Sign-On Is Not Used
• 2.7 LDAP Security
• 2.8 Example LDAP Configurations
  • 2.8.1 Example of Oracle Internet Directory LDAP Configuration
  • 2.8.2 Example of Microsoft Active Directory LDAP Configuration
  • 2.8.3 Example of Open LDAP Configuration
  • 2.8.4 Example of Novell eDirectory LDAP Configuration
    • 2.8.4.1 Example Settings for login.properties
    • 2.8.4.2 Creating a novell.properties File
• 2.9 Customizing Password Expiry Settings
  • 2.9.1 Overview of the Variables
  • 2.9.2 Customizing the Password Expired Message
  • 2.9.3 Customizing the Password Expiring Message
  • 2.9.4 Customizing the Expiry Time
• 2.10 Configuring Parent and Child Active Directory Domains
  • 2.10.1 Example Settings for Parent and Child Domains
• 2.11 Kerberos Keytabs for Active Directory Accounts
  • 2.11.1 What is a Keytab?
  • 2.11.2 Creating Keytabs Using Existing Tools
  • 2.11.3 UNIX Kerberos Configuration
  • 2.11.4 Managing LDAP Accounts
    • 2.11.4.1 Oracle Directory Services Manager
    • 2.11.4.2 Apache Directory Studio
  • 2.11.5 Configuring SSO

3 Integrating with Oracle Access Manager

• 3.1 Overview of Configuring WebLogic to use OAM Authentication
• 3.2 Configuring an LDAP Provider
• 3.3 Configuring an Oracle Access Manager Provider
• 3.4 Setting Provider Priorities
• 3.5 OAM Configuration
• 3.6 Installing Oracle HTTP Server

4 Filtering User Authorization Groups

• 4.1 Installing the Authorizations Plug-In
  • 4.1.1 Filter Script
• 4.2 Configuring the Authorizations Plug-In
  • 4.2.1 XML File Format
  • 4.2.2 CSV File Format

5 Configuring SSL with Tomcat

• 5.1 Configuring SSL During Installation
• 5.2 Configuring SSL Client Authentication
  • 5.2.1 Configuring Tomcat to Support Client Certificates
  • 5.2.2 Assigning Personal Certificates and Key Combinations
  • 5.2.3 Associating Certificates With a User
    • 5.2.3.1 Internal Users
    • 5.2.3.2 External Users
• 5.3 Using SSL With JMX
  • 5.3.1 Enabling the SSL Settings for JMX
  • 5.3.2 Using SSL with JMX Clients
    • 5.3.2.1 Command Examples

6 Using the Audit Framework with Enterprise Data Quality

• 6.1 Enabling EDQ Audit Event Logging
• 6.2 Configuring the EDQ Events

7 Integrating EDQ with a Fusion Middleware Credential Store

• 7.1 Overview of the Credential Store
• 7.2 Configuring the Credential Store for EDQ
• 7.3 Specifying the EDQ Credential Key in Properties Files
• 7.4 Examples of Specifying a Key Name

8 Security Tips

• 8.1 Limit Concurrent Logins
• 8.2 Disable FTP/SFTP Access if Not Needed
• 8.3 Exclude Configuration Area from FTP/SFTP
• 8.4 Account with Minimal Permissions for Service Integration
• 8.5 Protect JNDI Data Sources
• 8.6 Kerberos Shared Libraries