Intermediate Registry Installation Approval Process Registry Installation

The Intermediate Registry role is to serve as both Discovery and Publication Registry combined therefore installer asks for the same options as in Discovery and Publication installations. Continue with standalone installation as described in Section 2.3.3, Setup Administrator Account .

6. External Accounts Integration

During database installation or by employing the Setup tool, you may choose to use accounts from external repositories. This chapter describes how to integrate accounts from an LDAP server and from non-LDAP user stores into Oracle Service Registry. An LDAP server can be integrated with Oracle Service Registry with these scenarios : • LDAP with a single search base - The scenario is very simple. There is only one LDAP server in this scenario. All identities are stored under a single search base. • LDAP with multiple search bases - In this scenario there is also only one LDAP server, but it has multiple search bases mapped to a domain. The domain is a specified part of the users login name that is, DOMAINUSERNAME. All users must specify the domain name in the login dialog. When managing accounts or groups, we recommend using the DOMAINUSERNAME format for performance reasons. If no domain is set, searches are performed across all domains. • Multiple LDAP services - More than one LDAP service is used in this scenario. The correct LDAP service is chosen via DNS. As in the previous scenario, users must specify a domain name during login. When managing accounts or groups, users have to set domain name. If the domain name is not specified, then no domain is processed. Page 98

6. External Accounts Integration

This chapter also contains the following configuration examples: • Oracle Internet Directory with a single search base • Sun One with a single search base • Sun One with multiple search bases • Active Directory with a single search base Note Oracle Service Registry treats external stores as read-only. User account properties stored in these external stores cannot be modified by Oracle Service Registry. Important The Administrator account must not be stored in the LDAP. We strongly recommend that users stored in account_list.xml by default, only administrator should not be in the LDAP. If you really need to have users from LDAP in the file account_list.xml, delete password items from the file and change of all the accounts properties according to the LDAP. The account_list.xml file contains a list of users that can be logged into a registry without connection to the database. To integrate external accounts from another repository, either: • Create a database or create a new schema on the connected database by following the instructions in Section 2.3.4, Database Settings , or • Use the Setup tool and choose Authentication provider. To run the Setup tool, execute the following script from the bin subdirectory of your installation: setup.bat Windows: .setup.sh UNIX: See command-line parameters in Section 2.6.1, Setup . Page 99

6. External Accounts Integration