Enter the new password in the Password and Confirm Password fields.
a. Click Browse to the right of the Root of the Search field. The Select
Distinguished Name DN Path: Tree View dialog box appears. b. Expand an item in the tree view to display its entries. c. Continue navigating to the entry that represents the level you want for the root of your search.d. Select that entry, then click OK. The DN for the root of your search appears in
the Root of the Search text box in the right pane. 7. In the Max Results entries box, type the maximum number of entries you want your search to retrieve. The default is 200. The directory server retrieves the value you set, up to 1000.8. In the Max Search Time seconds box, type the maximum number of seconds for
the duration of your search. The value you enter here must be at least that of the default, namely, 25. The directory server searches for the amount of time you specify, up to one hour.9. In the Search Depth list, select the level in the DIT to which you want to search.
The options are: ■ Base : Retrieves a particular directory entry. Along with this search depth, you use the search criteria bar to select the attribute objectClass and the filter Present. ■ One Level : Limits your search to all entries beginning one level down from the root of your search. ■ Subtree : Searches entries within the entire subtree, including the root of your search. This is the default. 10. Set search criteria. Optionally, select Show LDAP filter, then type a query string directly into the LDAP Query text field. Alternatively, use the lists and text fields on the search criteria bar to focus your search. a. From the list at the left end of the search criteria bar, select an attribute of the entry for which you want to search. Because not all attributes are used in every entry, be sure that the attribute you specify actually corresponds to one in the entry for which you are looking. Otherwise, the search fails. b. From the list in the middle of the search criteria bar, select a filter. c. In the text box at the right end of the search criteria bar, type the value for the attribute you just selected. For example, if the attribute you selected was cn, you could type the particular common name you want to find. d. Click + to add this search criterion to the LDAP Query field.e. To view the LDAP filter you have selected, select Show LDAP filter.
f. To further refine your search, use the list of conjunctions AND, OR, NOT
AND , and NOT OR and the lists and text fields on the search criteria bar to to add additional search criteria. Click + to add a search criterion to the LDAP Query field. Click X to delete a search criterion from the LDAP Query field. 11. Click Search. Search results, if any, are displayed below the data tree. If an LDAP error icon appears, mouse over it to see the error. Search again with different criteria, if necessary, to correct the error. Click the Search Filter icon to see Managing Directory Entries 13-5 information about the search. Chick the Refresh the search result entries icon to refresh the results. You can delete the search results by clicking the Close search result icon. Importing Entries from an LDIF File by Using Oracle Directory Services Manager You can import entries from an LDIF file, as follows:1. Invoke Oracle Directory Services Manager and connect to the Oracle Internet
Directory server as described in Invoking Oracle Directory Services Manager on page 7-9.2. Click the Data Browser tab.
3. Click the Import LDIF icon. The Import File dialog appears.
4. Enter the path to the LDIF file you want to import, or click Browse and navigate to
the file, then click Open in the browser window. 5. Click OK in the Import File dialog. The LDIF Import Progress window shows the progress of the operation. Expand View Import Progress Table to see detailed progress. Click Cancel to stop importing entries. Entries already imported are not aborted. The Data Browser tree refreshes to show the new entries. Exporting Entries to an LDIF File by Using Oracle Directory Services Manager You can export entries to an LDIF file, as follows: 1. Invoke Oracle Directory Services Manager and connect to the Oracle Internet Directory server as described in Invoking Oracle Directory Services Manager on page 7-9. 2. Click the Data Browser tab. 3. Navigate to the top level DN of the subtree you want to export.4. Click the Export LDIF icon. The Export File dialog appears. Select Export
Operational Attributes if you want to export them.5. Click OK. The Download LDIF File dialog appears. By default, the entries are
exported to a temporary file on the machine where Oracle Directory Services Manager is deployed. If you want to save a copy of the LDIF file to your computer, click Click here to open the LDIF file and save the file. Click OK. Viewing Attributes for a Specific Entry by Using Oracle Directory Services Manager You can view the attributes for a specific entry as follows:1. Invoke Oracle Directory Services Manager and connect to the Oracle Internet
Directory server as described in Invoking Oracle Directory Services Manager on page 7-9. See Also: Viewing Active Server Instance Information by Using opmnctl on page 8-9For instructions on setting the number of entries to display in searches, and to set the time limit for searches 13-6 Oracle Fusion Middleware Administrators Guide for Oracle Internet Directory 2. Locate the entry by navigating to it in the data tree or by searching for it, as described in Searching for Entries by Using Oracle Directory Services Manager on page 13-3. 3. Click the entry. Attributes for that entry are displayed in the right pane. The display for the entry has at least the three tabs: Attributes, Subtree Access, and Local Access. If the entry is a person, the display in the right pane also has an Person tab, which displays basic user information. If the entry is a group, the display screen has a Group tab, which displays basic group information. 4. To view the attributes of an entry, click the Attributes tab. 5. You can switch between Managed Attributes and Show All by using the Views list. 6. To change the list of attributes shown as managed attributes, click the icon under Optional Attributes . Select attributes you want to move from the All Attributes list to the Shown Attributes lists and use the Move and Move All arrows to move the attributes. Select attributes you want to move from the shown Attributes list to the All Attributes lists and use the Remove and Remove All arrows to move the attributes. Click Add Attributes to make your changes take effect or click Cancel to discard your changes. After you click Add Attributes, only the attributes that were on the Shown Attributes list are shown in the Managed Attributes view. 7. For information on using the Subtree Access and Local Access tabs to view access control settings, see Adding or Modifying an ACP by Using the Data Browser in ODSM on page 29-21. Adding a New Entry by Using Oracle Directory Services Manager To add or delete entries with Oracle Directory Services Manager, you must have write access to the parent entry and you must know the DN to use for the new entry. To add a group entry, follow the procedure described in Managing Group Entries by Using Oracle Directory Services Manager on page 14-8. For other entry types, proceed as follows:1. Invoke Oracle Directory Services Manager and connect to the Oracle Internet
Parts
» Oracle Fusion Middleware Online Documentation Library
» Configure Without Domain Oracle Fusion Middleware Online Documentation Library
» Select Non-SSL or SSL from the Port Type list.
» Select OID or OVD from the Directory Type list.
» Click Validate to verify your directory connection details.
» Click Apply to apply your selections.
» Click the small arrow to the right of the label Click to connect to a directory. It
» To reconnect to a live connection, click it.
» Optionally, enter an alias name to identify this entry on the Disconnected
» Enter the server and non-SSL port for the Oracle Internet Directory or Oracle
» Deselect SSL Enabled. Oracle Fusion Middleware Online Documentation Library
» After changing the configuration, choose Apply.
» Click Apply. Oracle Fusion Middleware Online Documentation Library
» Select Data Sources - schedulerDS - Connection Pool.
» Click Lock Edit in the top left corner of the screen.
» Enter the new password in the Password and Confirm Password fields.
» If desired, mouse over each icon in the tool bar to read the icons action.
» Click + to add this search criterion to the LDAP Query field.
» To view the LDAP filter you have selected, select Show LDAP filter.
» To further refine your search, use the list of conjunctions AND, OR, NOT
» From the task selection bar, choose Data Browser.
» Click the Simple Search arrow to the right of the text field or press the Enter key.
» To perform a more complex search, click Advanced. The Search Dialog appears.
» Click Browse to the right of the Root of the Search field. The Select
» Select that entry, then click OK. The DN for the root of your search appears in
» In the Max Search Time seconds box, type the maximum number of seconds for
» Click + to add this search criterion to the LDAP Query fiel
» Click the Import LDIF icon. The Import File dialog appears.
» Enter the path to the LDIF file you want to import, or click Browse and navigate to
» Click the Export LDIF icon. The Export File dialog appears. Select Export
» Click OK. The Download LDIF File dialog appears. By default, the entries are
» Invoke Oracle Directory Services Manager and connect to the Oracle Internet
» From the task selection bar, select Data Browser.
» On the toolbar, select the Create a new entry icon. Alternatively, right click any
» Specify the object classes for the new entry. Click the Add icon and use the Add
» To add an owner to the group, click the Add icon next to the Owner box.
» Select Administration, then Server Properties from the Oracle Internet Directory
» Select General. Oracle Fusion Middleware Online Documentation Library
» Choose Read-only for Server Mode.
» Create a sample LDIF file, My_file.ldif, with the following entries:
» Add these entries to the directory by using the following command:
» Click Apply to apply this constraint or Revert to revert to the state before you
» Select Advanced from the task selection bar.
» Expand Attribute Uniqueness in the left pane.
» If you want to enable the constraint now, click Enable Unique Attribute.
» Click Apply to apply this change or Revert to revert to the state before you
» Choose the Delete icon, then, when prompted, confirm the deletion. The entry you
» Click Apply to apply this change or Revert to revert to the state before you deleted
» Restart the directory server to effect this change.
» Click the object class you want to modify. The Object Class tab appears on the
» To add or delete a superclass or attribute, select it in the Superclass, Mandatory
» Choose Apply in the Object Class page to apply changes, or Revert to abandon
» Click + next to Object Classes to expand the Object Classes panel. Use the scroll
» In the New Attribute Type dialog box, select the Indexed box.
» From the task selection bar, choose Schema.
» In the left pane, expand the Content Rules list.
» Choose Apply to make the changes effective or choose Revert to abandon the
» Expand the Matching Rules list. Matching rules are shown in the list.
» You can search for a matching rule by entering a keyword in the search field, in the
» Select a matching rule to see its details in the matching rule tab page on the right.
» Expand the Syntaxes list. Syntax names are shown in the list.
» Select Administration, then Shared Properties from the Oracle Internet Directory
» Choose Apply. Oracle Fusion Middleware Online Documentation Library
» From the Oracle Internet Directory menu, select Security, then Audit Policy
» From the Audit Policy list, select Custom to configure your own filters, or one of
» If you want to audit only failures, click Select Failures Only.
» To configure a filter, click the Edit icon next to its name. The Edit Filter dialog for
» Specify the filter condition using the buttons, selections from the menus, and
» To add a condition, click the Add icon.
» When you have completed the filter, click Apply to save the changes or Revert to
» Select the General tab. Add the users distinguished name to User DN. This adds the users DN to the
» Click Submit. Oracle Fusion Middleware Online Documentation Library
» From the task selection bar, select Security.
» Expand Password Policy in the left pane. All of the password policies appear in
» Select a password policy to display its information in the right pane.
» In the General tab page, modify the editable attribute fields as needed.
» Select the Account Lockout tab page and, to modify the fields, select Global
» Select the IP Lockout tab page and, to modify the fields, select IP Lockout. Modify
» Select the Password Syntax tab page and, to modify the fields, select Check
» Select the Effective Subtree tab page to modify the subtree to which the policy
» When you are finished, choose Apply.
» To create a new policy, select Create. Alternatively, select an existing password
» To assign the password policy to a subtree, select the Effective Subtree tab page,
» Click Access Control in the left pane. All of the defined access control points
» The Subtree Access Items section of the page shows the access controls on this
» Click Access Control in the left pane. All of the defined ACPs appear in the left
» In the left pane, click the Create Access Control Policy Point icon. The New
» Enter the path to the entry you want to create, or click Browse, select a DN, and
» From the Authentication Choice list under Bind Mode, select the type of
» Select the Access Rights tab page.
» Click OK. The structural access item you just created appears in the list.
» Select the Attribute tab page.
» Click OK. The content access item you just created appears in the list.
» To modify an existing content access item, select the item and click Edit. The
» After you have made the changes, click Apply.
» Expand Password Verifier in the left pane. All of the password verifiers appear in
» Creates an identity management realm
» Grants certain deployment privileges to various groups—for example, the Oracle
» Adds the administrators to those privileged groups
» The end user sends to the application or middle tier a request containing a query
» The application or middle tier binds to the directory.
» The application or middle tier performs a second bind, this time using the DN of
» The directory server recognizes this second bind as an attempt by the application
» The garbage collection engine triggers the corresponding background database
» From the task selection bar, select Advanced.
» Expand Garbage Collection in the left pane, then select the garbage collector you
» In the Garbage Collector window, enter the changes you want to make for this
» Click OK to enable the configuration changes or click Cancel to abandon the
» Create an LDIF file to manually add the user and group containers. To determine
» Set the Oracle Internet Directory server debug logging level, as described in
» Modify the Oracle Internet Directory server chaining debugging settings. For both
» On the Type screen, select the replication type: One Way Replication, Two Way
» Click Next to go the Settings page.
» In the LDAP Connection field, select Keep Alive if you want the replication server
» Enter the Human Intervention Queue Schedule. This is the interval, in seconds,
» If you have specified Two Way Replication or Multimaster Replication as the
» Click Next to go to the Scope page. The default primary naming context is filled
» To create another primary naming context, click the Create Primary Naming
» To exclude a secondary naming context, click the Add icon below the Excluded
» To exclude an attribute, click the Add icon below the ExcludedAttributes field.
» Click OK. The primary naming context is now listed on the Scope page.
» Click Next. The Summary page displays a summary of the replication agreement
» Click Finish to create the replication agreement.
» Edit the example file mod.ldif as follows:
» Create an LDIF file similar to this:
» Apply the LDIF file by typing:
» Choose Administration, then Server Properties from the Oracle Internet
» Select or deselect Enable Change Log Generation.
» Expand Change Log if it is not already expanded. The left panel lists the last 500
» Select a change to view its properties.
» From the Oracle Internet Directory menu on the home page, select
» You are prompted to log into the replication DN account. Provide the host, port,
» The Replication Agreements page lists information about each replication
» On the Scope tab, you can change the scope settings.
» Enter the Human Intervention Queue Schedule. This is the interval, in
» To delete a replication agreement, select the agreement and click the Delete icon.
» Select Replication Log. Oracle Fusion Middleware Online Documentation Library
» Write a user-defined plug-in procedure in PLSQL or Java.
» Click the Delete icon. The plug-in entry you deleted no longer appears in the list.
» When you add an Oracle Database Advanced Replication-based replica, the new
» The sponsor node for each Oracle Database Advanced Replication-based replica
» An Oracle Database Advanced Replication-based replica cannot be a consumer of
» Configure sqlnet.ora. Oracle Fusion Middleware Online Documentation Library
» Configure tnsnames.ora in each Oracle Internet Directory ORACLE_
» Stop and restart the listener, both in the Oracle Internet Directory ORACLE_
» Test Oracle Net connections to all nodes from each node in the DRG.
» A change request is made on the Oracle Internet Directory server of Replica A.
» The change is accepted and committed to storage in the Oracle Internet Directory
» Prepare a modification file, mod.ldif. For example, to change to host
» In the left pane of the WebLogic Server Administration Console, click Lock Edit
Show more