Step 4: Customizing Attribute Mappings

21-4 Oracle Fusion Middleware Administrators Guide for Oracle Directory Integration Platform

21.3.6 Step 6: Synchronizing Passwords

Oracle Internet Directory and IBM Tivoli Directory Server support the same set of password hashing techniques. To synchronize passwords between Oracle Internet Directory and IBM Tivoli Directory Server, ensure that SSL server authentication mode is configured for both directories and that the following mapping rule exists in the mapping file: Userpassword: : :person:userpassword: :person

21.3.7 Step 7: Synchronizing in SSL Mode

Configure IBM Tivoli Directory Server for synchronization in SSL mode by following the instructions in Configuring the Third-Party Directory Connector for Synchronization in SSL Mode on page 17-11.

21.3.8 Step 8: Configuring the IBM Tivoli Directory Server External Authentication Plug-in

Perform the following steps to configure an IBM Tivoli Directory Server external authentication plug-in: 1. Add the configuration entries for the external authentication plug-in for IBM Tivoli Directory Server to Oracle Internet Directory by performing the following steps: a. Copy the following entries in to an LDIF file, for example, input.ldif: dn: cn=oidexplg_compare_tivoli,cn=plugin,cn=subconfigsubentry cn: oidexplg_compare_tivoli objectclass: orclPluginConfig objectclass: top orclpluginname: oidexplg orclplugintype: operational orclpluginkind: Java orclplugintiming: when orclpluginldapoperation: ldapcompare orclpluginsecuredflexfield;walletpwd: password orclpluginsecuredflexfield;walletpwd2: password orclpluginversion: 1.0.1 orclpluginisreplace: 1 orclpluginattributelist: userpassword orclpluginentryproperties: objectclass=orclTDSobjectobjectclass=orcluserv2 orclpluginflexfield;host2: host.domain.com orclpluginflexfield;port2: 636 orclpluginflexfield;isssl2: 1 See Also: IBM Tivoli Directory Server documentation for details about configuring tombstones. Note: The wallet referred to in the configuration entries for the external authentication plug-in for IBM Tivoli Directory Server is ORACLE wallet. Accordingly, use Oracle wallet commands to add and remove certificates from the wallet. JKS commands are used only for the certificates that Oracle Directory Integration Platform uses. Integrating with IBM Tivoli Directory Server 21-5 orclpluginflexfield;host: host.domain.com orclpluginflexfield;walletloc2: locationwallet orclpluginflexfield;port: 389 orclpluginflexfield;walletloc: tmp orclpluginflexfield;isssl: 0 orclpluginflexfield;isfailover: 0 orclpluginclassreloadenabled: 0 orclpluginenable: 0 orclpluginsubscriberdnlist: cn=users,dc=us,dc=oracle,dc=com dn: cn=oidexplg_bind_tivoli,cn=plugin,cn=subconfigsubentry cn: oidexplg_bind_tivoli objectclass: orclPluginConfigobjectclass: top orclpluginname: oidexplg orclplugintype: operational orclpluginkind: Java orclplugintiming: when orclpluginldapoperation: ldapbind orclpluginversion: 1.0.1 orclpluginisreplace: 1 orclpluginentryproperties: objectclass=orclTDSobjectobjectclass=orcluserv2 orclpluginclassreloadenabled: 0 orclpluginflexfield;walletloc2: locationwallet orclpluginflexfield;port: 389 orclpluginflexfield;walletloc: tmp orclpluginflexfield;isssl: 0 orclpluginflexfield;isfailover: 0 orclpluginflexfield;host2: host.domain.com orclpluginflexfield;port2: 636 orclpluginflexfield;isssl2: 1 orclpluginflexfield;host: host.domain.com orclpluginenable: 0 orclpluginsecuredflexfield;walletpwd: password orclpluginsecuredflexfield;walletpwd2: password orclpluginsubscriberdnlist: cn=users,dc=us,dc=oracle,dc=com b. Copy the entries in the LDIF file in to Oracle Internet Directory using a command similar to the following: ldapadd -h HOST -p PORT -D binddn -q -v -f input.ldif 2. Use the instructions in Configuring External Authentication Plug-ins on page 17-14 to configure the plug-in.

21.3.9 Step 9: Performing Post-Configuration and Administrative Tasks

Read Chapter 23, Managing Integration with a Third-Party Directory for information on post-configuration and ongoing administration tasks. Note: You will be prompted for the password.