Preparing for Synchronization Task 4: Prepare to Synchronize from Oracle Human Resources to Oracle Internet Directory

11 Synchronizing with Third-Party Metadirectory Solutions 11-1 11 Synchronizing with Third-Party Metadirectory Solutions To enable synchronization with supported third-party metadirectory solutions, Oracle Internet Directory uses change logs. The Oracle Directory Integration Platform does not provide mapping or scheduling services for third-party metadirectory solutions. This chapter describes how change log information is generated and how supporting solutions use that information. It tells you how to enable third-party metadirectory solutions to synchronize with Oracle Internet Directory. This chapter contains these topics: ■ About Change Logs ■ Enabling Third-Party Metadirectory Solutions to Synchronize with Oracle Internet Directory ■ Synchronization Process ■ Disabling and Deleting Change Subscription Objects

11.1 About Change Logs

Oracle Internet Directory records each change as an entry in the change log container. A third-party metadirectory solution retrieves changes from the change log container and applies them to the third-party directory. To retrieve these changes, the third-party metadirectory solution must subscribe to the Oracle Internet Directory change logs. Each entry in the change log has a change number. The third-party metadirectory solution keeps track of the number of the last change it applied, and it retrieves from Oracle Internet Directory only those changes with numbers greater than the last change it applied. For example, if the last change a third-party metadirectory solution retrieved was a number of 250, then subsequent changes it retrieves would be greater than 250. Note: If a third-party metadirectory solution is not subscribed to the Oracle Internet Directory change logs, and the first change it retrieves is more than one number higher than the last change it last applied, then some of the changes in the Oracle Internet Directory change log have been purged. In this case, the third-party metadirectory solution must read the entire Oracle Internet Directory to synchronize its copy with that in Oracle Internet Directory. 11-2 Oracle Fusion Middleware Administrators Guide for Oracle Directory Integration Platform

11.2 Enabling Third-Party Metadirectory Solutions to Synchronize with Oracle Internet Directory

To enable third-party metadirectory solutions to retrieve changes from Oracle Internet Directory, perform the tasks described in this section. ■ Task 1: Perform Initial Bootstrapping ■ Task 2: Create a Change Subscription Object in Oracle Internet Directory for the Third-Party Metadirectory Solution

11.2.1 Task 1: Perform Initial Bootstrapping

To bootstrap a directory to synchronize data between a local directory and Oracle Internet Directory, do the following:

1. Find the number of the last change recorded in Oracle Internet Directory. This

number is in the DSE root attribute, lastChangeNumber. To find the number of the last change recorded in Oracle Internet Directory, use the ldapsearch command. Enter the following command: ldapsearch -h host_name -p port_number -D binddn -q -s base \ -b objectclass= lastchangenumber If the change log does not contain change entries because they have been purged, then the last change number retrieved is 0 zero.

2. Use the ldifwrite command to export data from Oracle Internet Directory into

an LDIF file.

3. Convert the LDIF file to a format suitable to the client directory, then load it into

the client directory. 11.2.2 Task 2: Create a Change Subscription Object in Oracle Internet Directory for the Third-Party Metadirectory Solution To enable a third-party metadirectory solution to synchronize with Oracle Internet Directory, you must create a change subscription object for it in Oracle Internet Directory. This gives the third-party metadirectory solution access to change log objects stored in Oracle Internet Directory. See Also: Components Involved in Oracle Directory Synchronization on page 5-1 for a conceptual discussion of directory integration profiles Note: Initial bootstrapping is not required with a new installation of Oracle Internet Directory. In this case, the current change number of the newly installed Oracle Internet Directory is 0 zero. See Also: See the ldifwrite section in the Oracle Internet Directory data management tools chapter of the Oracle Identity Management User Reference