Oracle Database Advanced Security 10g Release 1, Руководство администратора

Страница: 450 / 518

Introduction to the User Migration Utility
G-4 Oracle Database Advanced Security Administrator's Guide
Step 3: Phase Two Completing the Migration
After the interface table user information is checked, then in phase two the utility
retrieves the information from the table and updates the directory and the database.
Depending on whether directory entries exist for migrating users, the utility creates
random passwords as follows:
■
If migrating users are being mapped to newly created directory entries, then the
utility generates random passwords, which are used as credentials for both the
database and directory.
■
If migrating users are being mapped to existing directory entries with unset
database passwords, then the utility generates random database passwords
only.
In either case, after generating the required random passwords, the utility then
stores them in the
DBPASSWORD
and
DIRPASSWORD
interface table columns. The
enterprise user administrator can read these passwords from the interface table and
inform migrating users.
About the ORCL_GLOBAL_USR_MIGRATION_DATA Table
This is the interface table which is populated with information about the migrating
users during phase one of the bulk user migration process. The information that
populates this table is pulled from the database and checked against existing entries
in the directory. If there is corresponding information in the directory, then that is
marked in the table for that user. After enterprise user administrators verify the
information in this table, changes are made to the directory and the database in
phase two.
The table columns are listed in Table G–1 .
See Also:
"User Migration Utility Parameters" on page G-12 for a
list of command line options and their descriptions.
Caution: The
ORCL_GLOBAL_USR_MIGRATION_DATA
interface
table contains very sensitive information. Access to it should be
tightly controlled using database privileges.