Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 449 / 518

Introduction to the User Migration Utility
Using the User Migration Utility G-3
Bulk User Migration Process Overview
Bulk user migration is a two-phase process. In phase one, you start the migration
process by populating user information into an interface database table, where
enterprise user administrators can verify that the information is accurate before
committing the changes to the database and the directory in phase two. The process
is described in the following steps:
■
Step 1: Phase One Preparing for the Migration
■
Step 2: Verify User Information
■
Step 3: Phase Two Completing the Migration
Step 1: Phase One Preparing for the Migration
In the first part of the migration process, the utility checks if the
ORCL_GLOBAL_
USR_MIGRATION_DATA
interface table exists in the enterprise user administrator's
schema. If it exists, then the administrator can choose to reuse the table (clearing its
contents), reuse the table and its contents, or re-create the table. Phase one can be
run multiple times, each time adding to the interface table. If the table does not
exist, then the utility creates it in the administrator's schema. The interface table is
populated with information about the migrating users from the database and the
directory. The command line options used determine what information populates
this table.
Step 2: Verify User Information
This is an intermediate step to allow the enterprise user administrator to verify that
the user information is correct in the interface table before committing the changes
to the database and the directory.
Note:
After external users are migrated, their external
authentication and authorization mechanisms are replaced by
directory-based mechanisms. New passwords are randomly
generated for migrated users if they are mapped to newly created
directory entries.
Note: The utility will not create the interface table in the
SYS
schema.