Bootstrapping Oracle Internet Directory from Oracle Human Resources

Synchronizing with Third-Party Metadirectory Solutions 11-3

11.2.2.1 About the Change Subscription Object

The change subscription object is an entry located under the following container in Oracle Internet Directory: cn=Subscriber Profile,cn=ChangeLog Subscriber,cn=Oracle Internet Directory This change subscription object provides a unique credential for a third-party metadirectory solution to bind with Oracle Internet Directory and to retrieve changes from it. You associate the change subscription object with the auxiliary object class orclChangeSubscriber. This object class has several attributes, of which the following are mandatory: ■ userPassword Password to be used by the directory when accessing the change log object in Oracle Internet Directory. ■ orclLastAppliedChangeNumber Number of the change applied during the last synchronization. This attribute allows the directory to retrieve only the changes in Oracle Internet Directory it has not already applied.

11.2.2.2 Creating a Change Subscription Object

To create a change subscription object, use the ldapadd command. The following example uses an input file, named add.ldif, to create and enable a change subscription object, named my_change_subscription_object, under the container cn=Subscriber Profile,cn=ChangeLog Subscriber,cn=Oracle Internet Directory. The orclLastAppliedChangeNumber attribute is the current change number in the directory before initial bootstrapping—in this example, 250. ■ Edit the add.ldif file: dn: cn=my_change_subscription_object,cn=Subscriber Profile, cn=ChangeLog Subscriber,cn=Oracle Internet Directory userpassword: my_password orclLastAppliedChangeNumber: 250 orclSubscriberDisable: 0 objectclass: orclChangeSubscriber objectclass: top ■ Add the entry: ldapadd -h my_host -D binddn -q -p PORT -f add.ldif

11.3 Synchronization Process

This section contains these topics: ■ How a Connected Directory Retrieves Changes the First Time from Oracle Internet Directory ■ How a Connected Directory Updates the orclLastAppliedChangeNumber Attribute in Oracle Internet Directory See Also: Disabling and Deleting Change Subscription Objects on page 11-4 for instructions about temporarily disabling or deleting change subscription objects 11-4 Oracle Fusion Middleware Administrators Guide for Oracle Directory Integration Platform

11.3.1 How a Connected Directory Retrieves Changes the First Time from Oracle Internet Directory

In this example, a connected directory with a change subscription object named my_ change_subscription_object acquires changes from Oracle Internet Directory. ldapsearch -h my_host -D binddn -q -p PORT -b cn=changeLog -s one objectclass=changeLogEntry changeNumber = orclLastAppliedChangeNumber modifiersname =cn=my_change_subscription_object,cn=Subscriber Profile, cn=ChangeLog Subscriber,cn=Oracle Internet Directory When the directory is retrieving changes for the first time, the value for orclLastAppliedChangeNumber is the number you set in Task 2: Create a Change Subscription Object in Oracle Internet Directory for the Third-Party Metadirectory Solution on page 11-2. The modifiersname=client_bind_dn argument in the filter ensures that Oracle Internet Directory does not return changes made by the connected directory itself. 11.3.2 How a Connected Directory Updates the orclLastAppliedChangeNumber Attribute in Oracle Internet Directory After retrieving changes from Oracle Internet Directory, the connected directory updates the orclLastAppliedChangeNumber attribute in its change subscription object in Oracle Internet Directory. This allows Oracle Internet Directory to purge changes that connected directories have already applied. It also enables the connected directory to retrieve only the most recent changes, ignoring those it has already applied. This example uses an input file, mod.ldif, in which the connected directory has a change subscription object named my_change_subscription_object, and the last applied change number is 121. The connected directory updates orclLastAppliedChangeNumber in its change subscription object in Oracle Internet Directory as follows: 1. Edit the mod.ldif file: dn: cn=my_change_subscription_object,cn=Subscriber Profile, cn=ChangeLog Subscriber,cn=Oracle Internet Directory changetype:modify replace: orclLastAppliedChangeNumber orclLastAppliedChangeNumber: 121 2. Use the ldapmodify command to load the edited mod.ldif file: ldapmodify -h host -D binddn -q -p port -f mod.ldif

11.4 Disabling and Deleting Change Subscription Objects

You can temporarily disable or delete an existing change subscription object. This section contains these topics: ■ Disabling a Change Subscription Object ■ Deleting a Change Subscription Object See Also: The chapter about garbage collection in Oracle Fusion Middleware Administrators Guide for Oracle Internet Directory for information about purging changes according to change numbers