Skip to main content

Oracle Virtual Directory (OVD) : LDAP Adapters

With Oracle Virtual Directory a LDAP adapter can be created which is mapped to either user container ("cn=users,dc=example,dc=com") or root value in LDAP server. It can also be mapped to the tree of the server (dc=example,dc=com). If two different LDAP adapters are created within OVD a user can be searched from both the directories or from a single directory based on the Mapped name space in the OVD.
Below is the use case scenarios depicting the same:


Create an Adapter with OID/OUD using remote base as “” and mapped name space to “dc=eus,dc=oracle,dc=com”. It can also be mapped to either tree (dc=oracle,dc=com) or user container (cn=Users,dc=oracle,dc=com).If we have to search the root values also from OID/OUD then map it to "".



Now from the adapter browser even cn=”changelog” can be seen which doesn’t come under “dc=us,dc=oracle,dc=com” tree in OUD.




Create another adapter for Active directory mapping it to remote base as “dc=dev,dc=oracle,dc=com”.



Now mapping is as below:
OUD/OID:
Remote base: “”
Mapped Name Space: dc=eus,dc=oracle,dc=com
AD:
Remote Base: “dc=dev,dc=oracle,dc=com”
Mapped Name Space: dc=eus1,dc=oracle,dc=com
Now below use cases can be completed using ldapsearch through OVD.

Usecase:1 à Searching a user in both the directories.
If Ldapsearch is run against “dc=oracle,dc=com” then OVD will search the user in both the directories.
Searching an OUD user:

Now searching the above user “uid=user.0” through OVD.


Searching an AD user:


Searching the above user “cn=oam” using ldapserach.


Usecase:2 Searching a user in OUD.
A user can be searched in only OUD using mapped name space “dc=eus,dc=oracle,dc=com” while searching through OVD.


Usecase:3 Searching a user in AD.
A user can be searched in AD using the name space “dc=eus1,dc=oracle,dc=com” while searching through OVD.









Comments

Popular posts from this blog

Adding UDF (User Defined Field) on create user page OIM 11g R2 PS1:-

    Login to Sysadmin console and create a Sandbox and activate it. Click on Form Designer and search for user form. 2.      Create a new field of desired type. 3.      Provide the Required Values for UDF creation and click save and close. UDF field will be added then publish the sand box. 4.      Login to Identity console now and create another sandbox and activate it. After sandbox is activated click on users link and the click on create user. 5.      Provide the mandatory values on the form and then click the customize button on top. Select source from the view. 6.      Select the panel where the field has to be added. Select panel form lay out click add content. Select Data component Catalog from the box. 7.      Select UserVO from the bottom. ...

OIM Tuning

Application Module tuning is a critical setting which will affect the UI performance. Following are the recommended application module settings for OIM and these are already set out-of-box (OOB) in later releases of OIM 11g R2. Ensure that these settings are implemented as recommended in your environment. -Djbo.ampool.doampooling=true -Djbo.ampool.minavailablesize=1 -Djbo.ampool.maxavailablesize=120 -Djbo.recyclethreshold=60 - Djbo.ampool.timetolive=-1 -Djbo.load.components.lazily=true - Djbo.doconnectionpooling=true -Djbo.txn.disconnect_level=1 - Djbo.connectfailover=false -Djbo.max.cursors=5 - Doracle.jdbc.implicitStatementCacheSize=5 - Doracle.jdbc.maxCachedBufferSize=19 open DOMAIN_HOME/bin/setDomainEnv.sh file for the WebLogic Server instance.find these lines: JAVA_OPTIONS="${JAVA_OPTIONS}" export JAVA_OPTIONS and change it to: JAVA_OPTIONS="-Djbo.ampool.doampooling=true -Djbo.ampool.minavailablesize=1 -Djbo.ampool.maxavailablesize=120 -D...

OIM Reports : PS3

Oracle Business Intelligence Publisher is Oracle's primary reporting tool for authoring, manag-ing, and delivering all your highly formatted reports. BI Publisher is shipped with Oracle Identity Manager 11g Release 2 PS3. BI Publisher is deployed and configured as a separate managed server within the same Oracle Identity Manager domain. You have the choice of either leveraging the embedded BI Publisher or a standalone BI Publisher. It is recommended that you use the embedded BI Publisher if there are no other reporting requirements and you only need reporting for Oracle Identity Manager. After BI Publisher configuration, you can take advantage of the standard features of BI Publisher, such as:  Access Policy Reports  Request and Approval Reports  Password Reports  Resource and Entitlement Reports  User Reports  Certification Reports  Identity Audit Reports  Exception Reports The Screenshot of all the reports can be seen below: Every Report uses a Da...