Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 320 / 518

Preparing the Directory for Enterprise User Security
12-8 Oracle Database Advanced Security Administrator's Guide
Task 6: Register the database in the directory
After you have configured your Oracle home for directory usage, use Database
Configuration Assistant to register the database in the directory. Registration creates
an entry in the directory so the database can bind, or log in, to it.
When a database is registered in the directory, Database Configuration Assistant
performs the following configuration tasks:
■
Creates a new database service entry and subtree, and assigns a DN to it in the
Oracle Context for the identity management realm you are using.
■
Adds the database to the default enterprise domain.
■
Sets the
LDAP_DIRECTORY_ACCESS
parameter in the database initialization
parameter file to the default authentication type for the specified identity
management realm. This parameter determines whether and how the database
attempts authentication to the directory. The allowable settings are
NONE
,
PASSWORD
, or
SSL
. The default setting is
PASSWORD
.
■
Creates a database wallet, containing the database DN in the form
cn=<short_
database_name>,cn=OracleContext,<realm_DN>
where
short_
database_name
is the first part of the fully qualified domain name for a
database. For example, if you have a database named
db1.us.oracle.com
,
then the short database name is
db1
.
■
Randomly generates a database password for directory access, storing it in the
database wallet and in the directory.
Note:
■
If you are using SSL authentication for your
database-to-directory connection, then the SSL port entered in
the
ldap.ora
file must support two-way authentication. This
requires a PKI digital certificate and wallet for Oracle Internet
Directory.
■
If you are using password authentication for your
database-to-directory connection, then the SSL port entered in
the
ldap.ora
file must support SSL with no authentication.
(The directory SSL port on which the Diffie-Hellman-based SSL
server is running.) This does not require a wallet or certificate
for Oracle Internet Directory.