Nsure Idntity Manager & Oracle Internet Directory Michel Bluteau Field Corporate Strategist...

Nsure Idntity Manager &Oracle Internet Directory

Michel BluteauField Corporate StrategistNsure Identity ManagementNovell Québec

Driver for Oracle 10g OID

• Required privileges for driver• Mandatory Classes for

– OID– Enterprise User– Enterprise Role

• Required ACLs for the changelog

Oracle Internet Directory

•OID is an application that runs off Oracle•OID clients use LDAP•OID uses Oracle Net to communicate with Database servers

Oracle Internet DirectoryOracle Directory Manager

Oracle Internet DirectoryCommunication

Oracle Advanced Security Uses OID for

-Storing the password for a centralized user that can have access to more than one Database server-Centrally store and assign privileges-Integration of VPD(Virtual Private Database) and Row Label Security-With 10g, synchro of attributes userPassword(SSO) and orclPassword(DB)-OID can leverage RAS and RAC for high availability in a Oracle bubble(many DB servers)

Driver for Oracle OID

• bi-directional sync for data• uni-directional sync for the password

– From eDirectory to OID

• No customization required(versus JDBC)

Driver User: Select cn=orcladmin

Choose Create Like, create meta

Modify cn, sn, uid and userPassword

Result: cn=meta

Under cn=OracleContext, cn=Groups

Add to cn=OracleSuperAdminGroup

Add to cn=OracleUserSecurityAdmin

Add to cn=Common User Attributes

Add to cn=OracleContextAdmins

Add to required DAS groups

After adding meta to groups

- meta can create users and groups via oidadmin

- but cannot do so via LDAP with ldapadd or the DirXML driver

See:http://download-east.oracle.com/docs/cd/B10464_02/manage.904/b12118/priv_de3.htm

- Provide meta with the required ACLs for cn=Users and cn=Groups (under dc=novl,dc=ca).

See: http://download-east.oracle.com/docs/cd/B10464_02/manage.904/b12118/access2.htm#1059039

Required privileges for changelog

The ACLs for changelog MUST be modified in order to allow meta access to the changelog

Under Access Control Management

Add meta, via Create Like

Add meta, résultat

Classes required for OID

- User requires the following classes:• inetOrgPerson• orclUserV2• orclUser(optional)

- Group(dynamicGroup) requires the following classes:

• groupOfUniqueNames• orclGroup• the displayname attribute is mandatory

Nsure Idntity Manager & Oracle Internet Directory Michel Bluteau Field Corporate Strategist...

Documents

BLUTEAU, Raphael. Vocabulario Portuguez e Latino, 1719. Parte 2 Página 355

Novell Nsure SecureLogin · increase security, and improve compliance with corporate security policies. The separate single sign-on modules (components) of SecureLogin are designed

Novell ZENworks Application Virtualization · Novell ZENworks Application Virtualization. . Presenting Novell ZENworks Application Virtualization. Novell ZENworks Application Virtualization

Novell windermere

Nsure SecureLogin 3.51 Administration Guide · Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically

Novell Whitepaper

Www.novell.com Troubleshooting Novell BorderManager ® Craig Johnson Novell SysOp craigsj@ix.netcom.com Caterina Luppi Novell

Novell edir873

Novell SecureLogin

Novell UDDI Services · Web services. UDDI Services leverages open standards such as HTTP, XML, and SOAP. This is a light-weight edition of the Novell Nsure TM UDDI Server and comes

Novell NsureTM Identity Manager Driver for MVS* RACF* · 10 Nsure Identity Manager Driver 1.0 for MVS RACF Implementation Guide Nsure Identity Manager Driver 1.0 for MVS RACF Implementation

GWAVACon 2013: Novell File Management Suite Enhancing Novell Filr

Novell Nsure Identity Manager · Novell Novell Confidential Manual (ENU) 22 July 2004

Novell Nsure Identity Manager Fan-Out Driver · includes tasks performed on the platform, and core driver administration tasks. This section describes the installation tasks that

Novell Teaming 2...Novell Teaming 2.0 1 novdocx (en) 22 June 2009 Novell ® Novell Teaming 2.0 July 31, 2009 1 Product Overview Novell® Teaming 2.0 offers many enhancements over Teaming

Novell NsureTM Identity Manager Driver for MVS* …Nsure Identity Manager Driver 1.0 for MVS RACF Implementation Guide May 6, 2004 May 6, 2004 Novell Confidential Manual July 16, 2002

Overview of Novell® Nsure ™ Identity Manager Deployment Studio Steven Weitzeil Director of Engineering, Nsure Identity Manager & Nsure Audit Novell Bill

Novell iManager

Developing for Novell ® Nsure ™ SecureLogin Gordon Mathis Senior Software Engineer, Novell Inc. gmathis@novell.com

Configuring Novell ® Nsure ™ Identity Manager 2 (formerly DirXML ® ) for Enterprise Applications Mark Worwetz Senior Software Engineer Novell, Inc. mworwetz@novell.com