Expand Domain Security Embedded LDAP. In the Credential field, enter the new credential. In the Confirm Credential field, enter the new credential again. Click Save. Exporting and Importing Information in the Embedded LDAP Server

Managing the Embedded LDAP Server 9-3 2. In the WebLogic Server Administration Console, change the credential for the embedded LDAP server:

a. Expand Domain Security Embedded LDAP.

b. In the Credential field, enter the new credential.

c. In the Confirm Credential field, enter the new credential again.

d. Click Save.

e. Reboot WebLogic Server. 3. Start the LDAP browser. To start the LDAP BrowserEditor mentioned in step 1, use the following command: lbe.sh 4. In the LDAP browser, configure a new connection in the LDAP browser: a. Select the QuickConnect tab. b. Set the host field to localhost. c. Set the port field to 7001 7002 if SSL is being used. d. Set the Base DN field to dc=mydomain where mydomain is the name of the WebLogic domain you are using. e. Uncheck the Anonymous Bind option. f. Set the User DN field to cn=Admin. g. Set the Password field to the credential you specified in Step 2. 5. Click the new connection. Use the LDAP browser to navigate the hierarchy of the embedded LDAP server.

9.4 Exporting and Importing Information in the Embedded LDAP Server

You can export and import data from the embedded LDAP server using either the WebLogic Server Administration Console or an LDAP browser. To export and import data with the Console, use the Migration page of each security provider. See Export data from a security provider and Import data into a security provider in the Oracle WebLogic Server Administration Console Help. Caution: Changing the credential can affect the operation of the domain. Do not perform this step on a production server. Note: You can also view the contents of the embedded LDAP server by exporting its data and reviewing the exported file. See Section 9.4, Exporting and Importing Information in the Embedded LDAP Server. Caution: When you use the Administration Console Migration tab to export security data, the export process deletes any existing files in the target directory with the .dat extension. Always export security data to an empty directory. 9-4 Securing Oracle WebLogic Server This section describes how to use an LDAP browser to export and import data stored in the embedded LDAP server. Table 9–1 summarizes where data is stored in the hierarchy of the embedded LDAP server. To export security data from the embedded LDAP server using the LDAP BrowserEditor:

1. Enter the following command at a command prompt to start the LDAP

BrowserEditor: lbe.sh

2. Specify the data to be exported for example, to export users specify

ou=people,ou=myrealm,dc=mydomain.

3. Select the LDIF Export option.

4. Select Export all children.

5. Specify the name of the file into which the data will be exported.

To import security data into the embedded LDAP server using the LDAP BrowserEditor:

1. Enter the following command at a command prompt to start the LDAP browser:

lbe.sh 2. Specify the data to be imported for example, to import users, specify ou=people,ou=myrealm,dc=mydomain.

3. In the LDAP BrowserEditor, select the LDIF Import option.

4. Select UpdateAdd.

5. Specify the name of the file from which the data will be imported.

9.5 LDAP Access Control Syntax