The Synchronization Process Oracle Fusion Middleware Online Documentation Library

11-2 Oracle Fusion Middleware Administrators Guide for Oracle Directory Integration Platform

11.2 Enabling Third-Party Metadirectory Solutions to Synchronize with Oracle Internet Directory

To enable third-party metadirectory solutions to retrieve changes from Oracle Internet Directory, perform the tasks described in this section. ■ Task 1: Perform Initial Bootstrapping ■ Task 2: Create a Change Subscription Object in Oracle Internet Directory for the Third-Party Metadirectory Solution

11.2.1 Task 1: Perform Initial Bootstrapping

To bootstrap a directory to synchronize data between a local directory and Oracle Internet Directory, do the following:

1. Find the number of the last change recorded in Oracle Internet Directory. This

number is in the DSE root attribute, lastChangeNumber. To find the number of the last change recorded in Oracle Internet Directory, use the ldapsearch command. Enter the following command: ldapsearch -h host_name -p port_number -D binddn -q -s base \ -b objectclass= lastchangenumber If the change log does not contain change entries because they have been purged, then the last change number retrieved is 0 zero.

2. Use the ldifwrite command to export data from Oracle Internet Directory into

an LDIF file.

3. Convert the LDIF file to a format suitable to the client directory, then load it into

the client directory. 11.2.2 Task 2: Create a Change Subscription Object in Oracle Internet Directory for the Third-Party Metadirectory Solution To enable a third-party metadirectory solution to synchronize with Oracle Internet Directory, you must create a change subscription object for it in Oracle Internet Directory. This gives the third-party metadirectory solution access to change log objects stored in Oracle Internet Directory. See Also: Components Involved in Oracle Directory Synchronization on page 5-1 for a conceptual discussion of directory integration profiles Note: Initial bootstrapping is not required with a new installation of Oracle Internet Directory. In this case, the current change number of the newly installed Oracle Internet Directory is 0 zero. See Also: See the ldifwrite section in the Oracle Internet Directory data management tools chapter of the Oracle Identity Management User Reference Synchronizing with Third-Party Metadirectory Solutions 11-3

11.2.2.1 About the Change Subscription Object

The change subscription object is an entry located under the following container in Oracle Internet Directory: cn=Subscriber Profile,cn=ChangeLog Subscriber,cn=Oracle Internet Directory This change subscription object provides a unique credential for a third-party metadirectory solution to bind with Oracle Internet Directory and to retrieve changes from it. You associate the change subscription object with the auxiliary object class orclChangeSubscriber. This object class has several attributes, of which the following are mandatory: ■ userPassword Password to be used by the directory when accessing the change log object in Oracle Internet Directory. ■ orclLastAppliedChangeNumber Number of the change applied during the last synchronization. This attribute allows the directory to retrieve only the changes in Oracle Internet Directory it has not already applied.

11.2.2.2 Creating a Change Subscription Object

To create a change subscription object, use the ldapadd command. The following example uses an input file, named add.ldif, to create and enable a change subscription object, named my_change_subscription_object, under the container cn=Subscriber Profile,cn=ChangeLog Subscriber,cn=Oracle Internet Directory. The orclLastAppliedChangeNumber attribute is the current change number in the directory before initial bootstrapping—in this example, 250. ■ Edit the add.ldif file: dn: cn=my_change_subscription_object,cn=Subscriber Profile, cn=ChangeLog Subscriber,cn=Oracle Internet Directory userpassword: my_password orclLastAppliedChangeNumber: 250 orclSubscriberDisable: 0 objectclass: orclChangeSubscriber objectclass: top ■ Add the entry: ldapadd -h my_host -D binddn -q -p PORT -f add.ldif

11.3 Synchronization Process

This section contains these topics: ■ How a Connected Directory Retrieves Changes the First Time from Oracle Internet Directory ■ How a Connected Directory Updates the orclLastAppliedChangeNumber Attribute in Oracle Internet Directory See Also: Disabling and Deleting Change Subscription Objects on page 11-4 for instructions about temporarily disabling or deleting change subscription objects