Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 317 / 518

Preparing the Directory for Enterprise User Security
Enterprise User Security Configuration Tasks and Troubleshooting 12-5
– "Configuring Enterprise User Security for SSL Authentication" on
page 12-21
Preparing the Directory for Enterprise User Security
This is the first phase in configuring Enterprise User Security and must be
performed before you can configure any other part of this feature.
Enterprise User Security, 10g Release 1 (10.1) requires Oracle Internet Directory,
Release 9.0.4, or later, which installs with the required version of the Oracle schema.
This schema is backward compatible. After you have installed Oracle Internet
Directory, perform the following directory usage configuration tasks:
■
Task 1: (Optional) Create an identity management realm in the directory
■
Task 2: (Optional) Set identity management realm properties
■
Task 3: Identity administrative users in the directory
■
Task 4: (Optional) Set the default database-to-directory authentication type for
the identity management realm
■
Task 5: (Optional) Configure your Oracle home for directory usage
■
Task 6: Register the database in the directory
Task 1: (Optional) Create an identity management realm in the directory
If necessary, use Oracle Internet Directory Self-Service Console (Delegated
Administration Service) to create an identity management realm in the directory.
You can also use this tool to upgrade an Oracle9i Oracle Context to a 9.0.4 version
Identity Management Realm.
You must have a version 9.0.4 identity management realm to use an Oracle
Database 10g. Version 9.0.4 realms are backward compatible to Oracle9i, so you can
register Oracle9i and version 10g Oracle Databases in the same realm and place
them in the same domain, if desired.
Task 2: (Optional) Set identity management realm properties
If you do not want to use the default settings, then use Enterprise Security Manager
Console to set the user search base, group search base, attribute for login name
(nickname attribute), and to set up the necessary context administrators in the
identity management realm you plan to use in the directory. To perform this task,
see
"Setting Properties of an Identity Management Realm" on page 13-5.