Managing Certificate Authorities for LDAP Adapters Secured by SSL

Creating and Configuring Oracle Virtual Directory Adapters 12-15 -keystore ORACLE_INSTANCEconfigOVDovd1keystoresadapters.jks \ -storepass password -rfc -alias alias -file cert.txt 6. Import the Oracle Virtual Directory server certificate to the Oracle Internet Directory wallet as a trusted certificate. Execute the following command from the Oracle Internet Directory wallet directory: orapki wallet add -wallet .ewallet.p12 -cert cert.txt -trusted_cert -pwd password 7. Using Oracle Directory Services Manager, update the LDAP Adapter for Oracle Internet Directory as follows: ■ Select enable the Use SSLTLS option ■ Change the port number to an SSL port number ■ Click the Apply button to save the changes to the adapter. 8. Restart the Oracle Virtual Directory server.

12.2 Creating Database Adapters

This topic explains how to create and configure Database Adapters and includes the following sections: ■ Creating Database Adapters for Oracle RAC Database ■ Creating Database Adapters for Oracle TimesTen In-Memory Database ■ Configuring Database Adapters Perform the following steps to create Database Adapters using Oracle Directory Services Manager: 1. Log in to Oracle Directory Services Manager.

2. Select Adapter from the task selection bar. The Adapter navigation tree appears.

3. Click the Create Adapter button. The New Adapter Wizard appears.

4. Perform the following steps to define the Type of adapter:

a. Select Database from the Adapter Type list.

Note: If you use a certificate alias in the orapki command and the alias is not in all lowercase letters, an error occurs. Note: Before you create a Database Adapter for a non-Oracle database for the first time, you must first load the database’s drivers into Oracle Virtual Directory. Refer to Loading Libraries into the Oracle Virtual Directory Server on page 9-13 for information on loading drivers into the Oracle Virtual Directory server. If you are creating an adapter for MS SQL 2005 or 2008, be sure you use the latest sqljbdc4.jar SQL JDBC driver. Using an older driver can cause database display problems and prevent you from successfully creating the adapter. 12-16 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory b. Enter a unique name for the Database Adapter in the Adapter Name field. The adapter name value is used in other configuration fields that must reference the adapter.

c. Select Default from the Adapter template list unless you are integrating

Oracle Virtual Directory with Oracle Access Manager. Refer to Understanding Adapter Templates on page 2-28 for more information.

d. Click Next. The Connection screen appears.

5. Enter a valid base DN in DN format in the Adapter SuffixNamespace field. This field defines the root DN that the adapter provides information for. The DN defined, and the child entries below it, comprise the adapter’s namespace. The value you enter in this field should be the base DN value for returned entries. For example, if you enter dc=mydomain,dc=com in the field, all entries end with dc=mydomain,dc=com. 6. Select one option from the following URL Type list. Some steps to create a Database Adapter differ depending on which option you choose. After selecting an option, continue this procedure by following the alphabetic numbered steps for each option. ■ Use Predefined Database : Select this option to connect to a predefined database. The predefined databases appear in the Database Type list after selecting Use Predefined Database from the URL Type list. If you are unsure if Oracle Virtual Directory has predefined your type of database, select Use Predefined Database from the URL Type list and verify whether your database is listed in the Database Type list. If your database is listed in the Database Type list, continue with the following steps. If your database is not listed, select Use Custom URL from the URL Type list and perform the steps for using a custom URL. a. Select the type of your of database from the Database Type list. After selecting the database type, the JDBC Driver Class and Database URL fields are populated with the appropriate information for the database. b. Enter the IP Address or DNS host name of the database in the Host field. c. Enter the port number the database listens on in the Port field. d. Enter the name of the database, for example, the Oracle SID, in the Database Name field. e. Enter the user name that the Database Adapter should use to connect the database in the Database User field. f. Enter the password for the user name you entered in the Database User field in the Password field. Oracle Virtual Directory replaces the value you enter in this field with a reversible masked value upon startup.

g. Click Next. The Map Database Tables screen appears. Continue this

procedure by going to step 7 now. ■ Use Custom URL : Select this option to connect Oracle Virtual Directory to a custom database. Note: After selecting an adapter template, Oracle Directory Services Manager populates default values for some adapter settings. You should alter these default settings according to your environment. Creating and Configuring Oracle Virtual Directory Adapters 12-17 a. In the JDBC Driver Class field, enter the JDBC driver class name for the database. b. In the Database URL field, enter the URL that Oracle Virtual Directory should use to access the database. c. In the Database User field, enter the user name that the Database Adapter should use to connect the database. d. In the Password field, enter the password for the user name you entered in the Database User field. Oracle Virtual Directory replaces the value you enter in this field with a reversible masked value upon startup.

e. Click Next. The Map Database Tables screen appears. Continue this

procedure by going to step 7 now. 7. Identify the database tables the Database Adapter should use in the Map Database Tables field by entering the name of the table file, or by clicking Browse, navigating to the table file, selecting it, and clicking OK. Click Next on the Map Database Tables screen to proceed. The Map Object Classes screen appears. 8. In the Map Object Classes field, define the object classes and their RDNs that map to the database tables. Click the Create Object Class button. The New Object Class Mapping dialog box appears allowing you to define the objectclass and their corresponding RDNs. Enter the following information: a. Select the appropriate object class for the Object Class list. b. Enter the RDN for the object class in the RDN field.

c. Click OK. The object class and the RDN appear in the Object Class table.

9. Map LDAP attributes for the object class and RDNs to the database table and fields. You must map LDAP attributes for the object class RDN value. You do not have to map every LDAP attribute required by the LDAP schema for the selected object class. Click the appropriate object class in the Object Class table and then click the Add Mapping Attribute button on the Attributes Mapping table. Enter the following information. ■ Select the LDAP attribute value for the object class from the LDAP Attribute list. ■ Select the appropriate database table and field from the Database Table:Field list. ■ Optionally, select a description for the attribute type from the Data Type list. Note: If you do not define an object class in step 8, the information you entered in the Map Database Tables field cannot be saved. Note: You can create nested object classes by entering an existing object where the RDN of the nested class must be an attribute of the child object class. For example, you could create parent organization units for records in a table about people where location information is available that you can use to drive the organization unit ou information.