What is the Oracle Password Filter for Microsoft Active Directory?

Deploying the Oracle Password Filter for Microsoft Active Directory 19-7 3. Close the command prompt window.

19.5 Installing and Reconfiguring the Oracle Password Filter for Microsoft Active Directory

This section describes how to install and reconfigure the Oracle Password Filter for Microsoft Active Directory. It contains these topics: ■ Installing the Oracle Password Filter for Microsoft Active Directory ■ Reconfiguring the Oracle Password Filter for Microsoft Active Directory Before you install or reconfigure the Oracle Password Filter for Microsoft Active Directory, be sure to collect the necessary configuration parameters for Microsoft Active Directory and for Oracle Internet Directory. Table 19–1 lists the configuration parameters you will need for Microsoft Active Directory and Table 19–2 lists the configuration parameters you will need for Oracle Internet Directory. Table 19–1 Oracle Password Filter Configuration Parameters for Microsoft Active Directory Parameter Description Domain The Microsoft Active Directory domain for this domain controller. This value is typically the DNS domain name, in the form mycompany.com. Base DN The container in the Microsoft Active Directory DIT where the Oracle Password Filter searches for entries with changed passwords. If password propagation fails, the DNS of the failed password will be stored in an entry named organizationalUnit within the specified container. For this reason, the specified container should be capable of holding organizationalUnit objects. This value is typically in the form dc=mycompany,dc=com. Port The Microsoft Active Directory LDAP port usually 3060. Host The IP address NOT the host name of the Microsoft Active Directory domain controller. Microsoft Active Directory User A user name with read privileges on the entire Microsoft Active Directory DIT and privileges to create an organizational unit and subtree entries under the Microsoft Active Directory base DN. Note that you must enter a user name and not the DN of an administrative user. This value is usually in the form administratormachine_name. Microsoft Active Directory User Password The specified Microsoft Active Directory user’s password. Log File Path A directory where log files will be written, such as E:\ADPasswordFilter\Log. Table 19–2 Oracle Password Filter Configuration Parameters for Oracle Internet Directory Parameter Description Base DN The container in the Oracle Internet Directory DIT where the Oracle Password Filter searches for entries synchronized from Microsoft Active Directory. For example: o=Microsoft Active Directory,c=us. Host Specifies the host name where the Oracle Internet Directory LDAP processes are running. For Oracle Internet Directory installations running in a high availability configuration, use the virtual host name of the load balancer. 19-8 Oracle Fusion Middleware Administrators Guide for Oracle Directory Integration Platform

19.5.1 Installing the Oracle Password Filter for Microsoft Active Directory

This section describes how to install the Oracle Password Filter for Microsoft Active Directory on a domain controller. To install the Oracle Password Filter for Microsoft Active Directory on a domain controller:

1. Do the following:

For 32-bit systems a. Locate the setup.exe file in the utils\adpwdfilter directory in the distribution package.

b. Run the setup.exe command to extract the installation files to a directory on

your domain controller.

c. Navigate to the directory where you extracted the installation files and

double-click setup.exe. The Welcome page of the Oracle Password Filter for Microsoft Active Directory installation program displays, informing you that the program will install the Oracle Password Filter for Microsoft Active Directory. For 64-bit systems a. Updating the PATH environment variable on your Windows system is a prerequisite for installing the 64-bit version of the Oracle Password Filter for Microsoft Active Directory. Append the following to the PATH environment variable on your Windows system: C:\windows\SysWOW64 For instructions about how to edit Windows environment variables, refer to the following page: http:www.microsoft.comresourcesdocumentationwindowsx pallproddocsen-ussysdm_advancd_environmnt_addchange_ variable.mspx SSL Port The Oracle Internet Directory port that is configured for SSL server authentication. Non-SSL Port The Oracle Internet Directory for unencrypted communication. Oracle Internet Directory User The distinguished name of an Oracle Internet Directory user with permissions to update user passwords in the base DN. For example: cn=orcladmin. Oracle Internet Directory User Password The specified Oracle Internet Directory user’s password. Note: The Microsoft Active Directory and Oracle Internet Directory configuration parameters listed in the following procedure are described in Table 19–1 and Table 19–2 . Table 19–2 Cont. Oracle Password Filter Configuration Parameters for Oracle Internet Directory Parameter Description