Changing the User Name Attribute Type By default, the Oracle Internet Directory Changing the Group Name Attribute Type By default, the Oracle Internet

Configuring Authentication Providers 5-11

5.4.7.1.1 Changing the User Name Attribute Type By default, the Oracle Internet Directory

and Oracle Virtual Directory Authentication providers are configured with the user name attribute set to type cn. If the user name attribute type in the LDAP directory structure uses a different type — for example, uid — you must change the following Authentication provider attributes: ■ AllUsersFilter ■ UserFromNameFilter ■ UserNameAttribute For example, if the LDAP directory structure has the user name attribute type uid, the preceding Authentication provider attributes must be changed as shown in Table 5–4 . The required changes are shown in bold. For information about configuring the user name attribute type, see the following topics in the Oracle WebLogic Server Administration Console Help: ■ Configure the Oracle Internet Directory Authentication provider ■ Configure the Oracle Virtual Directory Authentication provider

5.4.7.1.2 Changing the Group Name Attribute Type By default, the Oracle Internet

Directory and Oracle Virtual Directory Authentication providers are configured with the group name attribute type of cn for the static group object class and dynamic group object class. If the group name attribute type in the LDAP directory structure is different — for example, type uid is used — you must change the following Authention provider attributes: Note: Neither the Oracle Internet Directory Authentication provider nor Oracle Virtual Directory Authentication provider can read the name of a user or group from the LDAP server if the name contains an invalid character. Invalid characters are: ■ Comma , ■ Plus sign + ■ Quotes ■ Backslash \ ■ Angle brackets or ■ Semicolon ; If either of these providers encounters a group or user name containing an invalid character, the name is ignored. WebLogic Server in general does not support group names containing any of these invalid characters. See Create groups in the Oracle WebLogic Server Administration Console Help. Table 5–4 Changing the User Name Attribute Type for the User Object Class Attribute Name Default Setting Required New Setting UserNameAttribute cn uid AllUsersFilter cn=objectclass=person uid=objectclass=person UserFromNameFilter cn=uobjectclass=person uid=uobjectclass=person 5-12 Securing Oracle WebLogic Server ■ AllGroupsFilter ■ GroupFromNameFilter ■ StaticGroupNameAttribute for static groups ■ DynamicGroupNameAttribute for dynamic groups For example, if the LDAP directory structure of the group object class uses a group name attribute of type uid, you must change the Authentication provider attributes as shown in Table 5–5 . The required changes are shown in bold. For more information about configuring group name attributes, see the following topics in the Oracle WebLogic Server Administration Console Help ■ Configure the Oracle Internet Directory Authentication provider ■ Configure the Oracle Virtual Directory Authentication provider

5.4.7.2 Configuring Static Groups