Configuring the Embedded LDAP Server

9 Managing the Embedded LDAP Server 9-1 9 Managing the Embedded LDAP Server WebLogic Server includes an embedded LDAP server that acts as the default security provider data store for the Default Authentication, Authorization, Credential Mapping, and Role Mapping providers.The following sections explain how to manage the embedded LDAP server: ■ Section 9.1, Configuring the Embedded LDAP Server ■ Section 9.2, Embedded LDAP Server Replication ■ Section 9.3, Viewing the Contents of the Embedded LDAP Server from an LDAP Browser ■ Section 9.4, Exporting and Importing Information in the Embedded LDAP Server ■ Section 9.5, LDAP Access Control Syntax ■ Section 9.6, Backup and Recovery

9.1 Configuring the Embedded LDAP Server

The embedded LDAP server contains user, group, group membership, security role, security policy, and credential map information. By default, each WebLogic domain has an embedded LDAP server configured with the default values set for each type of information. The Default Authentication, Authorization, Credential Mapping, and Role Mapping providers use the embedded LDAP server as their data store. If you use any of these providers in a new security realm, you may want to change the default values for the embedded LDAP server to optimize its use in your environment. See Configure the embedded LDAP server in the Oracle WebLogic Server Administration Console Help. The data file and change log file used by the embedded LDAP server can potentially grow quite large. You can configure maximum sizes for these files with the following weblogic.Server command line arguments: ■ -Dweblogic.security.ldap.maxSize=max bytes, which limits the size of the data file used by the embedded LDAP server. When the data file exceeds the specified size, WebLogic Server eliminates from the data file space occupied by deleted entries. Note: The performance of the embedded LDAP server is best with fewer than 10,000 users. If you have more users, consider using a different LDAP server and Authentication provider. 9-2 Securing Oracle WebLogic Server ■ -Dweblogic.security.ldap.changeLogThreshold=number of entries, which limits the size of the change log file used by the embedded LDAP server. When the change log file exceeds the specified number of entries, WebLogic Server truncates the change log by removing all entries that have been sent to all Managed Servers.

9.2 Embedded LDAP Server Replication