ACLs for Other Oracle Components

17-14 Oracle Fusion Middleware Administrators Guide for Oracle Directory Integration Platform

17.3.6 Configuring External Authentication Plug-ins

Oracle Directory Integration Platform supports Java-based external authentication plug-ins. Oracle recommends that you use the Java plug-ins instead of the older, PLSQL-based plug-ins, which only support Microsoft Active Directory and Oracle Directory Server Enterprise Edition Sun Java System Directory Server. The configuration tool for the plug-ins is a Java program called oidexcfg. You use it to configure Java-based external authentication plug-ins for Microsoft Active Directory, Oracle Directory Server Enterprise Edition Sun Java System Directory Server, Novell eDirectory, IBM Tivoli Directory Server, and OpenLDAP. To configure an external authentication plug-in, perform the following steps: 1. Optional Perform this step only if you want to use SSL to secure the communication between the authentication plug-in and the external LDAP directory. If you do not want to secure the communication, proceed to step 2 now. To secure the communication between the authentication plug-in and the external LDAP directory using SSL, a trusted certificate from the external, authenticating directory must reside in a wallet on the file system. When you configure the plug-in using oidexcfg in step 3, you will be prompted to enter information about the external LDAP directory configuration and you can identify the location of this wallet. If you want to use SSL, put the certificate in a new or existing wallet now. 2. Include oidexcfg.jar and ldapjclnt11.jar in the java CLASSPATH environment variable. To set the environment variable: In UNIXLinux environments: setenv CLASSPATH=ORACLE_HOMEjliboidexcfg.jar:ORACLE_ HOME ldapjlibldapjclnt11.jar:CLASSPATH In Windows environments: set CLASSPATH=ORACLE_HOMEjliboidexcfg.jar;ORACLE_ HOME ldapjlibldapjclnt11.jar;CLASSPATH 3. Configure the plug-in using oidexcfg by executing the following command. You will be prompted to enter information about the external LDAP directory See Also: Oracle Fusion Middleware Administrators Guide for Oracle Internet Directory for information on managing Oracle Internet Directory password policies. Note: The oidexcfg tool configures an external authentication plug-in to work only with a single domain. You must perform the steps described in Configuring External Authentication Against Multiple Domains to set up an external authentication plug-in to work with multiple domains. Note: The certificate enables SSL to secure the communication between the authentication plug-in and the external LDAP directory—it does not secure the communication with Oracle Internet Directory when you execute oidexcfg in step 3.