Policy Server Guides › Policy Design Guide › User Directories › Configure User Directory Connections › Configure Oracle Internet Directory Connections

Configure Oracle Internet Directory Connections

After meeting the prerequisites, you can configure the Policy Server.

Note: When you create or modify a Policy Server object in the Policy Server User Interface, use ASCII characters. Object creation or modification with non-ASCII characters is not supported.

To configure the Policy Server to use an OID user directory

1. In OID:
   1. Create another organizational unit (for example, OracleSchemaVersion) under a domain and follow the similar instructions from step 4 in the “Configuring the Policy Server to Use Oracle Internet Directory as a Policy Store” section in the “Configuring LDAP Directory Servers as a Policy Store” chapter of the Policy Server Installation Guide.
   2. Enter a Distinguished Name. For example, ou=people,cn=OracleSchemaVersion.
2. To add users to the organizational unit under the same domain as mentioned in step 4 of the “Configuring the Policy Server to Use Oracle Internet Directory as a Policy Store” section in the “Configuring LDAP Directory Servers as a Policy Store” chapter of the Policy Server Installation Guide:
   1. Repeat steps 1 and 2 from that section.
   2. Instead of adding a domain, click Add and chose inetOrgPerson.
3. In the dialog box enter:
   1. cn=user1
   2. sn =user1
   3. uid=user1
   4. userpassword=user1
   5. dn as cn=user1,ou=people,cn=OracleSchemaVersion
4. Open the User Directory Dialog.
5. In the Directory Setup tab, select LDAP from the Namespace drop-down list.
6. In the Directory Setup tab:
   1. Enter connection information for your LDAP directory.
   2. In the Root field, specify ou=people, cn=OracleSchemaVersion
7. To configure the directory connection to include multiple servers for failover and load balancing, click the Configure button in the Directory Setup group box.
8. Optionally, in the Credentials and Connection tab, specify administrator credentials that the Policy Server will use to connect to the LDAP directory, and specify whether the connection to the directory will use SSL.

   Note: For Oracle Directory Enterprise Edition (formerly Sun Java System Directory Server Enterprise Edition) directories, we recommend using an administrator account other than cn=Directory Manager. Using cn=Directory Manager may cause performance issues due to security policies applied to this account. Instead, create a new user with sufficient privileges to manage the directory and specify that user in the Connect Username field.

9. Optionally, in the User Attributes tab, specify directory attributes that will be reserved for use by SiteMinder features.

More information:

Navigate to the User Directory Dialog

User Directory Dialog—LDAP Namespace—Directory Setup Tab

Load Balancing/Failover Configuration for LDAP Directory Connections

User Directory Dialog—LDAP Namespace—Credentials and Connection Tab

Specify Directory Attributes