EUSiPlanet Plug-In Understanding the Enterprise User Security and Oracle Net Services Plug-Ins

Understanding Oracle Virtual Directory Plug-Ins 4-37

4.3.4 EUSeDirectory Plug-In

Use the EUSeDirectory plug-in only when integrating Oracle Virtual Directory with Oracle’s Enterprise User Security database product and your user identities are stored in Novell eDirectory. The EUSeDirectory plug-in translates Novell eDirectory attributes to a format that can be used by the Enterprise User Security database.

4.3.4.1 Configuration Parameters

The EUSeDirectory plug-in has no configuration parameters. To enable the EUSeDirectory plug-in, add it to a plug-in chain.

4.3.5 EUSMemberDNMapping Plug-In

Use the EUSMemberDNMapping plug-in only when integrating Oracle Virtual Directory with Oracle’s Enterprise User Security database product. The EUSMemberDNMapping plug-in translates the distinguished name DN namespace for the Enterprise User Security database administrators group stored in an external repository to the same payload that Oracle Virtual Directory sends to the database.

4.3.5.1 Configuration Parameters

The following is a list and description of the EUSMemberDNMapping plug-in configuration parameters: remoteDomainDN The base DN in the remote external repository Active Directory, Oracle Internet Directory, Oracle Directory Server Enterprise Edition where the Enterprise User Security database administrators group is located. localDomainDN The base DN of the name of the group that Oracle Virtual Directory exposes.

4.3.6 EUSLockout Plug-In

Use the EUSLockout plug-in only when integrating Oracle Virtual Directory with Oracle’s Enterprise User Security database product. LDAP servers have the ability to lock a user account after several bind attempts fail. The EUSLockout plug-in allows the Oracle Virtual Directory-Enterprise User Security integration to use this lockout feature and enforce the back-end LDAP servers password lockout policy as follows: ■ An incorrect login to the Oracle Database records a login failure to the back-end LDAP server ■ A correct login to the Oracle Database resets the login failure count in the back-end LDAP server ■ A locked user account cannot be used to log in to the Oracle Database. Note: Typically, the values for the remoteDomainDN and localDomainDn configuration parameters are identical. Note: This functionality is not available for integrations that use Active Directory. See Also: Enabling User Account Lockout on page 19-26