Restoring the Single Authenticator

29 Configuring the Policy and Credential Store 29-1 29 Configuring the Policy and Credential Store For most environments, and especially production environments, you must reassociate your policy store with an external LDAP such as Oracle Internet Directory OID, or a database. Note that when using an external LDAP-based store, the credential store and policy store must be configured to use the same LDAP server either Oracle Internet Directory 11gR1 or 10.1.4.3. The identity store can, however, use any of the other supported LDAP servers; it does not need to use the same LDAP server as the policy and credential stores. Reassociating the policy and credential store with OID consists of creating a root node in the LDAP directory, and then reassociating the policy and credential store with the OID server using Fusion Middleware Control, or from the command line using WLST. Reassociating the policy and credential store with a database consists of setting up the schema and database connection in the RCU, and then migrating the policy and credential store to the database from the command line using WLST. This chapter contains the following sections: ■ Section 29.1, Creating a root Node ■ Section 29.2, Reassociating the Credential and Policy Store Using Fusion Middleware Control ■ Section 29.3, Reassociating the Credential and Policy Store Using WLST ■ Section 29.4, Reassociating the Policy and Credential Store with a Database ■ Section 29.5, Managing Credentials ■ Section 29.6, Configuring Self-Registration By Invitation in WebCenter Spaces Audience The content of this chapter is intended for Fusion Middleware administrators users granted the Admin role through the Oracle WebLogic Server Administration Console. Users with the Monitor or Operator roles can view security information but cannot Caution: Before reassociating the policy store, be sure to back up the relevant configuration files: ■ jps-config.xml ■ system-jazn-data.xml As a precaution, you should also back up the boot.properties file for the Administration Server for the domain.