Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 448 / 518

Introduction to the User Migration Utility
G-2 Oracle Database Advanced Security Administrator's Guide
■
Provides the infrastructure to enable single sign-on using X.509v3-compliant
certificates, which is typically deployed where end-to-end SSL is required
■
Enhanced security
Because an enterprise user model is easier to manage, security administrators
can perform necessary maintenance changes to user information immediately
so they have better control over access to critical network resources. In addition,
an enterprise user model is easier for users to use because they have fewer
passwords to remember so they are less likely to choose easily guessed
passwords or write them down where others can copy them.
Introduction to the User Migration Utility
The User Migration Utility is a command-line utility that is used when enterprise
user administrators decide to move their users from a local database model to an
enterprise user model. This utility makes it easy to migrate thousands of local and
external database users to an enterprise user environment in an LDAP directory
where they can be managed from a central location. It uses the Oracle JDBC OCI
driver to connect to the database.
Enterprise user administrators can select for migration any combination of the
following user subsets in a database:
■
List of users specified on the command line or in a file
■
All external users
■
All global users
In addition, enterprise user administrators can specify values for utility parameters
that determine how the users are migrated such as
■
Where to put the migrated users in the LDAP directory tree
■
Map a user with multiple accounts on various databases to a single directory
user entry
The following sections explain the migration process and the changes that occur to
users' schemas.
See Also:
"Introduction to Enterprise User Security" on page 11-2
for detailed conceptual information about enterprise user security.