Sub-Tree Plug-In Understanding the General Purpose Plug-Ins

Understanding Oracle Virtual Directory Plug-Ins 4-25 person entry from its typical leaf model to be a branch. Some directories did not support such a model or did not want to populate their enterprise directory this way. The Sub-Tree plug-in enables you to store these sub-tree entries in a different adapter while presenting the expected directory tree view to the application—in this case Tivoli Access Manager. The requirement to add entries under a normal leaf entry is uncommon. The more common case is to make a data-store appear as a branch under an existing data-store and any adapter can perform this by properly setting its root namespace value.

4.2.14.1 Configuration Parameters

The following is a list and description of the Sub-Tree plug-in configuration parameters: storeadapter The adapter to store the user subtree objects in. storeroot The location in the store adapter where you want to store the user subtree objects. subtreematch Identifies the subtree distinguished name DN component that the Sub-Tree plug-in should intercept and redirect to the store adapter. The default value is secAuthority=Default. matchdn Numbered parameters that specify distinguished names DN under which user objects are found and the user object RDN. For example: 0=ou=People,o=Airius.com\:uid

4.2.15 Performance Monitor Plug-In

The Performance Monitor plug-in enables you to monitor the performance of a specific adapter. To use the Performance Monitor plug-in, attach it to an adapter and then perform operations against that adapter. To view the adapter performance, you must perform a specific type of base level LDAP search on the adapters root namespace with a filter of vdeSearchtime=. The search returns results similar to Example 4–6 , where all time measurements are in milliseconds: Example 4–6 Example of Data Returned with the Performance Monitor Plug-In dn: dc=demo,dc=com vdeNumSearches: 4 vdeNumEntries: 5 vdeMinSearchTime: 0 vdeMaxSearchTime: 16 vdeTotalSearchTime: 16 vdeAverageSearchTime: 4 vdeMinEntryTime: 0 vdeMaxEntryTime: 0 vdeTotalEntryTime: 0 vdeAverageEntryTime: 0 vdeMinSearchCompleteTime: 0 vdeMaxSearchCompleteTime: 203 vdeTotalSearchCompletionTime: 219 vdeAverageSearchCompletionTime: 54 4-26 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory

4.2.15.1 Configuration Parameters

The Performance Monitor plug-in has no configuration parameters. To enable the Performance Monitor plug-in, add it to a plug-in chain.

4.2.16 UniqueEntry Plug-In

In some Oracle Virtual Directory environments users have duplicate accounts for multiple services they connect to using Oracle Virtual Directory adapters. Typically, building a Join View Adapter to unify multiple adapters and create a single virtual user entry would resolve this problem. However, there are circumstances where building a Join View Adapter is not an option. For example, there might be a directory for staff personnel and a directory for customers, but certain staff members have accounts in both directories for legitimate business purposes and you cannot create a Join View Adapter. The UniqueEntry plug-in solves this problem by enabling you to rank various adapters by their authoritative source. For example, if you are attempting to determine which of the duplicate user identities is a staff account, then the staff directory is more relevant than the customer directory and you would place a higher priority on the staff directory adapter than the customer directory adapter. When ranking adapter priorities, the lower the value of the numerical ranking is, the higher priority. For example, if you are searching two adapters and one adapter has a priority ranking of five and the other adapter has a priority ranking of ten, the adapter with the priority ranking of five is searched first, before the adapter with the priority ranking of ten.

4.2.16.1 Configuration Parameters

The UniqueEntry plug-in has the following configuration parameter: uniqueattribute The attribute to use as the unique key.

4.2.17 Adapter Plug-In Version

Do not deploy the Adapter Plug-in Version plug-in—it is for information only and has no server functionality. It provides the adapter version information that appears on the Oracle Directory Services Manager home page.

4.2.18 Proxy Authorization Support Plug-In

In many deployments, customers store the user credentials in an enterprise password credential directory such as Microsoft Active Directory but they also aggregate content from other data sources such as Oracle Directory Server Enterprise Edition, Oracle Internet Directory, and so forth. In these deployments, customers want the ability to Note: The Performance Monitor data is reset after the Oracle Virtual Directory server restarts. Note: Do not apply the UniqueEntry plug-in at the adapter level—it should always be applied only as a Global plug-in.