Enterprise User security(EUS) with OVD and Novell eDirectory

EUS set up for OVD 11.1.1.7 and Novell eDirectory 8.8 SP8

Prerequisites:
Ø  Oracle Virtual Directory version 11.1.1.7 is already installed and running.
Ø  Novell eDirectory server Version 8.8 SP8 is already installed and running.
Ø  iManager version 2.7.7 is already installed. Password management plugin is downloaded and installed on iManager. RBS configuration wizard has run.
Ø  Oracle Database (Version 11.2.0.1.0) is already installed and running. 

Configuring Novell eDirectory server for EUS Integration

For EUS integration a universal password policy has to be implemented on eDirectory and Admin should have access to retrieve the password of the user.

 For setting up the universal password policy login to iManager with Admin credentials.

Go to ‘Roles and Tasks’ tab and click Passwords.

Click Password policies.

Click New to create new password policy.

Provide the container name, policy name, description and password change message.

Click Next.

On next page click on view options.

Make sure that “Allow admin to retrieve passwords” check box is checked.

Click Next.

On the next page select the complexity of the password on the basis of requirements.

Click Next.

Assign it to the desired user container of tree.

Finally verify the policy summary before applying it on to the container.

Click finish to apply the Password Policy.

Configuring OVD for EUS Integration

Login to the ODSM and select Adapter tab. Click “configure adapter for Enterprise User Security (EUS)”.

Select OVD context and click next.

Select either same parent or different parent (context) depending on the requirement.

Select Adapter template as EUS eDirectory. Provide the credentials to connect to the Directory server.

Provide a mapped name space (in OVD) to Remote Base.

Click Next.

Validate the values for EUS adapter and click finish.

4 New adapters would be created. Please validate the adapters. 

Enabling Root Access on OVD

Login to ODSM and click the Advanced tab.

Click apply for the password mappings. 

Now click the security tab.

Select root from the access control points.

Select new from the entry level operations.

Select the Browse DN and return DN from the permissions. Select Public from By Whom List.

Anonymous root access is enabled on OVD now.

Configuring Database for EUS configuration

Run netCA to configure the database for EUS integration with Directory Server.

Select Directory Usage Configuration.

Click Next.

Provide the connection parameters for Directory server.

Click Next.

Select cn=OracleContext,dc=eusovd,dc=com.

Click Next.

Click Next.

Click Finish.

This will add an entry of Directory Server in the ORACLE_HOME/ network/admin/ldap.ora file.

Check once to validate.

Registering the Database with the OVD

Run DBCA on the database.

Click Next.

Select ‘configure Database Options’ and click next.

Select the database SID and click next.

Provide the credentials to connect to the directory and provide a wallet password.

Click next.

Click next

Click No and finish.

After restarting the database create a user identified globally.

“Create User global_ident_schema_user IDENTIFIED GLOBALLY;”

Grant connect to the user:

GRANT CONNECT to global_ident_schema_user;

Setting up User Schema Mapping

Open a terminal and type

emctl start dbconsole

Now go to https://host_name:port /em

Username:sys as sysdba

Password: ************

Make sure to log in as system as sysdba so that you have the proper permissions

Click on Server it will be at the top in the middle tab

Click on Enterprise User Security

Provide the LDAP credentials so that EUS can look up the LDAP groups.

User:cn=orcladmin

Password:*********

Click on Manage Enterprise Domains

Click on configure

Click User-Schema Mappings

Click Create

Click subtree

Click the flashlight and select

dc=eusovd,dc=com

Enter Schema as global_ident_schema_user

Click continue

Click OK

Test

Create a new user in NovelleDirectory

 Pull up a terminal

Try to login to the sqlplus with the created user.