Validating the Oracle Internet Directory Instances Tuning Oracle Internet Directory Backing up the Oracle Internet Directory Configuration

7-10 Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management – Update the WebLogic monitoring user name and the WebLogic monitoring password. Enter weblogic as the WebLogic monitoring user name and the password for the weblogic user as the WebLogic monitoring password. – Click OK to save your changes.

7.4.2 Considering Oracle Internet Directory Password Policies

By default, Oracle Internet Directory passwords expire in 120 days. Users who do not reset their passwords before expiration can no longer authenticate to Oracle Internet Directory. This includes administrative users, such as oimLDAPuser, oamsoftwareuser, and oamadminuser. Your Identity Management environment cannot work properly unless these users can authenticate. See Oracle Fusion Middleware Administrators Guide for Oracle Internet Directory for information about changing Oracle Internet Directory password policies.

7.5 Validating the Oracle Internet Directory Instances

To validate the Oracle Internet Directory instances, ensure that you can connect to each Oracle Internet Directory instance and the load balancing router using these commands: ldapbind -h oidhost1.mycompany.com -p 389 -D cn=orcladmin -q ldapbind -h oidhost1.mycompany.com -p 636 -D cn=orcladmin -q -U 1 ldapbind -h oidhost2.mycompany.com -p 389 -D cn=orcladmin -q ldapbind -h oidhost2.mycompany.com -p 636 -D cn=orcladmin -q -U 1 ldapbind -h policystore.mycompany.com -p 389 -D cn=orcladmin -q ldapbind -h policystore.mycompany.com -p 636 -D cn=orcladmin -q -U 1 If your Identity Store is also in Oracle Internet Directory then check: ldapbind -h idstore.mycompany.com -p 389 -D cn=orcladmin -q ldapbind -h idstore.mycompany.com -p 636 -D cn=orcladmin -q -U 1 Note: Ensure that the following environment variables are set before using ldapbind: ■ ORACLE_HOME set to IDM_ORACLE_HOME ■ ORACLE_INSTANCE ■ PATH - The following directory locations should be in your PATH: ORACLE_HOME bin ORACLE_HOME ldapbin ORACLE_HOME ldapadmin Note: The -q option prompts the user for a password. LDAP tools have been modified to disable the options -w password and -P password when the environment variable LDAP_PASSWORD_ PROMPTONLY is set to TRUE or 1. Use this feature whenever possible. Extending the Domain with Oracle Internet Directory 7-11

7.6 Tuning Oracle Internet Directory

After you deploy Oracle Internet Directory, you must tune it as described in Oracle Fusion Middleware Performance and Tuning Guide. You might find it easier to tune Oracle Internet Directory after installing ODSM.

7.7 Backing up the Oracle Internet Directory Configuration

It is an Oracle best practices recommendation to create a backup file after successfully completing the installation and configuration of each tier or at a logical point. Create a backup of the installation after verifying that the install so far is successful. This is a quick backup for the express purpose of immediate restoration in case of problems in later steps. The backup destination is the local disk. This backup can be discarded once the enterprise deployment setup is complete. After the enterprise deployment setup is complete, the regular deployment-specific Backup and Recovery process can be initiated. More details are described in the Oracle Fusion Middleware Administrators Guide. For information on database backups, refer to Oracle Database Backup and Recovery Users Guide. To back up the installation to this point, follow these steps: 1. Back up the Oracle Internet Directory instances in the directory tier: a. Shut down the instance using opmnctl located under the ORACLE_ INSTANCE bin directory: ORACLE_INSTANCE binopmnctl stopall b. Create a backup of the Middleware home on the directory tier. On Linux, as the root user, type: tar -cvpf BACKUP_LOCATIONdirtier.tar MW_HOME c. Create a backup of the Instance home on the directory tier as the root user: tar -cvpf BACKUP_LOCATIONinstance_backup.tar ORACLE_INSTANCE d. Start up the instance using opmnctl located under the ORACLE_ INSTANCE bin directory: ORACLE_INSTANCE binopmnctl startall 2. Perform a full database backup either a hot or cold backup. Oracle recommends that you use Oracle Recovery Manager. 3. Back up the Administration Server domain directory. This saves your domain configuration. The configuration files all exist under the ORACLE_ BASE admindomainNameaserver directory. On Linux, type: IDMHOST1 tar cvf edgdomainback.tar ORACLE_BASEadmindomainNameaserver Note: Create backups on all machines in the directory tier by following the steps shown in this section. For more information about backing up the directory tier configuration, see Section 20.4, Performing Backups and Recoveries. 7-12 Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management 8 Extending the Domain with Oracle Directory Integration Platform and ODSM 8-1 8 Extending the Domain with Oracle Directory Integration Platform and ODSM Oracle Directory Integration Platform is a Java EE application that enables you to integrate your applications and directories, including third-party LDAP directories, with Oracle Internet Directory. Oracle Directory Integration Platform includes services and interfaces that allow you to deploy synchronization solutions with other enterprise repositories. It can also be used to provide Oracle Internet Directory interoperability with third party metadirectory solutions. Oracle Directory Services Manager is a unified graphical user interface GUI for managing instances of Oracle Internet Directory and Oracle Virtual Directory. Oracle Directory Services Manager enables you to configure the structure of the directory, define objects in the directory, add and configure users, groups, and other entries. This chapter describes how to install and configure Oracle Directory Integration Platform DIP and Oracle Directory Services Manager ODSM. Oracle Directory Integration Platform is an optional product. If it is not required in your environment, do not configure it. This chapter includes the following topics: ■ Section 8.1, Extending the Oracle WebLogic Domain with Oracle Directory Integration Platform and ODSM