Configuring Oracle Virtual Directory Server Settings Using WLST

9-10 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory ■ ExemptSubjects: First on one command-line: invokeaddExemptSubjects,jarray.array[java.lang.Stringcn=myuser], java.lang.Object,jarray.array[java.lang.String],java.lang.String Then on one command-line: invokedeleteExemptSubjects,jarray.array[java.lang.Stringcn=myuser], java.lang.Object,jarray.array[java.lang.String],java.lang.String ■ InactiveConnectionTimeout: setInactiveConnectionTimeout,50 ■ MaxConnections: setMaxConnections,50 ■ MaxConnectionsPerIP: setMaxConnectionsPerIP,20 ■ MaxConnectionsPerSubject: setMaxConnectionsPerSubject,20 ■ MaxOperationsPerConnection: setMaxOperationsPerConnection,10 ■ PersistentSearch: setPersistentSearch,false ■ TLSKeyStore: Read-only attribute ■ TLSTrustStore: Read-only attribute ■ TLSKeyStorePassword: setTLSKeyStorePassword,java.lang.StringPASSWORD.toCharArray ■ TLSTrustStorePassword: setTLSTrustStorePassword,java.lang.Stringwelcome1.toCharArray ■ SchemaCheck: setSchemaCheck,true ■ SchemaLocations: Add on one command-line: invokeaddSchemaLocation,jarray.array[java.lang.Stringschema.myschema. xml],java.lang.Object,jarray.array[java.lang.String],java.lang.String Delete on one command-line: invokedeleteSchemaLocation,jarray.array[java.lang.Stringschema.mysche ma.xml],java.lang.Object,jarray.array[java.lang.String],java.lang.Str ing 5. Save the changes to the Oracle Virtual Directory server and then refresh the MBean. For example: cd.... cdoracle.as.management.mbeans.register cdoracle.as.management.mbeans.register:type=component,name=OVD_COMPONENT_ NAME ,instance=asinst1 invokesave,jarray.array[],java.lang.Object,jarray.array[],java.lang.Strin g invokeload,jarray.array[],java.lang.Object,jarray.array[],java.lang.Strin g Configuring and Managing the Oracle Virtual Directory Server 9-11

9.4 Controlling the Maximum Heap Size Allocated to the Oracle Virtual Directory Server

The -Xmx parameter in the opmn.xml file controls the maximum heap size allocated to the Oracle Virtual Directory server. The default value is -Xmx256m. Edit this parameter as needed to increase or decrease the maximum heap size allocated to the Oracle Virtual Directory server. The opmn.xml file is located in the ORACLE_ INSTANCEconfigOPMNopmn directory. The following example shows the -Xmx parameter set to -Xmx2048m, which allocates 2 GB of heap size to the Oracle Virtual Directory Server: ias-component id=OVD_COMPONENT_NAME process-type id=OVD module-id=OVD module-data category id=start-options data id=java-options value=-server -Xms512m -Xmx2048m -Doracle.security.jps.config=ORACLE_INSTANCEconfigJPSjps-config-jse.xml -Dvde.soTimeoutBackend=120 data id=java-classpath value=ORACLE_ HOME ovdjlibvde.jar:ORACLE_HOMEjdbclibojdbc6.jar category module-data stop timeout=120 process-type ias-component

9.5 Controlling Orphan Connections Caused by Remote Client or Server Failure

Oracle Virtual Directory supports two parameters that help detect and safely close orphan socket connections caused by remote client or server failure. These parameters help if applications or directory sources are on different networks—in particular, outside of the same data-center—than Oracle Virtual Directory and the network is unstable. Set each parameter to the amount of time in seconds that TCP should wait for a response from the client or server. The status and stability of your network influence which parameters you set and also the amount of time you set. In an unstable network, you may want to set these parameters to a greater number of seconds than you would in a stable network environment. Controlling Orphan Client Connections: You can use the LDAP Listeners SocketOptionsReadTimeout parameter to control orphan client connections. Use the WLST set command to set the SocketOptionsReadTimeout parameter. For example: setSocketOptionsReadTimeout, 120 Note: If your operating system is reporting several connections in TIME_WAIT status and they do not close for an extended length of time, such as, five minutes or more, it is a good indication to use these parameters to control the orphan connections. 9-12 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory Refer to Updating Listener Settings on page 11-11 for the complete procedure on updating Listener settings using WLST. Controlling Orphan Server Connections: You can use the vde.soTimeoutBackend Java Virtual Machine parameter located in the ORACLE_INSTANCEconfigOPMNopmnopmn.xml file to control orphan server connections. To set the vde.soTimeoutBackend parameter, edit opmn.xml and then restart Oracle Virtual Directory. The following is an example of the vde.soTimeoutBackend parameter set in the opmn.xml file: ias-component id=OVD_COMPONENT_NAME process-type id=OVD module-id=OVD module-data category id=start-options data id=java-options value=-server -Xms512m -Xmx512m -Doracle.security.jps.config=ORACLE_INSTANCEconfigJPSjps-config-jse.xml -Dvde.soTimeoutBackend=120 data id=java-classpath value=ORACLE_ HOME ovdjlibvde.jar:ORACLE_HOMEjdbclibojdbc6.jar category module-data stop timeout=120 process-type ias-component

9.6 Managing Oracle Virtual Directory Libraries Using Oracle Directory Services Manager

This topic describes how to manage libraries used for Oracle Virtual Directory plug-ins and Join View Adapters. It contains the following sections: ■ Viewing Oracle Virtual Directory Server Libraries ■ Loading Libraries into the Oracle Virtual Directory Server

9.6.1 Viewing Oracle Virtual Directory Server Libraries

Perform the following steps to view the libraries, including plug-ins and Join View adapters, that reside on the Oracle Virtual Directory server:

1. Log in to Oracle Directory Services Manager.

2. Select Advanced from the task selection bar. The Advanced navigation tree

appears.

3. Expand the Libraries entry in the Advanced tree. A list of the library files that

reside on the Oracle Virtual Directory server appears in the Libraries entry of the Advanced tree. Note: You can also use Oracle Enterprise Manager Fusion Middleware Control to set this parameter for the LDAP Listener. Refer to the Read Timeout parameter described in Creating LDAP Listeners on page 11-4 for more information. Configuring and Managing the Oracle Virtual Directory Server 9-13

9.6.2 Loading Libraries into the Oracle Virtual Directory Server

Perform the following steps to load libraries into Oracle Virtual Directory using Oracle Directory Services Manager:

1. Log in to Oracle Directory Services Manager.

2. Select Advanced from the task selection bar. The Advanced navigation tree

appears.

3. Expand the Libraries entry in the Advanced tree.

4. Click the Upload New Library button at the top of the Advanced tree. The Upload

New Library dialog box appears.

5. Enter the path to the library you want to load into Oracle Virtual Directory or click

Browse , navigate to the library and select it. Click OK on the Upload New Library dialog box to load the library into Oracle Virtual Directory. The library appears in the Libraries entry of the Advanced tree.

9.7 Copying Configuration Files Between Oracle Virtual Directory Servers Using syncovdconfig

You can use the syncovdconfig command to copy the following Oracle Virtual Directory configuration files between multiple Oracle Virtual Directory components: ■ server.os_xml ■ adapters.os_xml ■ acls.os_xml ■ schema.user.xml The syncovdconfig command .pl for UNIXLinux and.bat for Windows is located in the ORACLE_HOMEovdbin directory. The following is the syntax for syncovdconfig: syncovdconfig -srcHost source_host_name -srcPort source_port_number -srcUserName source_user_name -dstHost destination_host_name -dstPort destination_port_number -dstUserName destination_user_name -configFile name_of_configuration_file -adapterName name_of_adapter -isSrcAdminSSL [true |false] -isDstAdminSSL [true |false]

9.7.1 Options

The following is a list of the options for syncovdconfig: srcHost Required. String format. The host name of the source Oracle Virtual Directory server—that is, the Oracle Virtual Directory server that contains the configuration files you want to copy to a different Oracle Virtual Directory server. Notes: ■ You are prompted for the password for both the source and destination users. ■ Set the Oracle Home variable before using the syncovdconfig command.