Extending the OID 11g schema via ldapmodify
I recently said the following to someone in an IMversation: ldapsearch and ldapmodify are about 10 times better than a stupid GUI because you can script everything. it’s like the difference between...
View ArticleOVD 11g LDAP Error 2 : Bad LDAP Filter
Hi everyone, just a quick post on an issue I encountered with OVD 11g (11.1.1.2) and how it handles LDAP filtering.For this post let’s use the following DN as our example:“cn=OVD (11g), dc=us,...
View ArticleTuning WebLogic LDAP Authentication Providers
Introduction I’ve been involved in a fair amount of activity over the last month involving customers who want or need to tune their WebLogic LDAP authentication providers for a production environment....
View ArticleUsing the Database as a Policy Store for SOA 11g
Introduction As customers prepare to move SOA 11g applications from development and testing into production, we have been asked often about the recommendations for a PolicyStore in SOA 11g. This post...
View ArticleOIM 11g & LDAP Synchronization
Since the first OIM 11g release, one of the frequently asked questions about OIM 11g is: Should I configure OIM with LDAP synchronization or should I deploy a LDAP connector? Since earlier versions,...
View ArticleOracle WebCenter and Dynamic Groups from an External LDAP Server (Part 1 of 2)
Introduction Do you have some dynamic groups on your Directory? Are you puzzled on how to get these privileges into your WebCenter Portal/Spaces/Content -a.k.a. UCM? This blog post will cover how to...
View ArticleOracle WebCenter and Dynamic Groups from an External LDAP Server (Part 2 of 2)
Introduction This blog post will cover how to get dynamic groups to work with Oracle WebCenter without having to use an External Oracle Virtual Directory instance. Background information on Dynamic...
View Article5 minutes or less: Indexing Attributes in OID
I’ve written this short post as just a note to myself quite some time back. Since I had to rely on it quite a couple of times, I thought it would be worth sharing it with our readers. It may be too...
View ArticleLibOVD: when and how
LibOVD, introduced in FMW 11.1.1.4, is a java library providing virtualization capabilities over LDAP authentication providers in Oracle Fusion Middleware. It is delivered as part of OPSS (Oracle...
View ArticleFast Group Membership Lookups in OID with the orclMemberOf Attribute
Introduction If you utilize nested and dynamic groups (and especially nested dynamic groups), then it can take a lot of effort and time to calculate all of a user’s group memberships in an LDAP...
View ArticleAchieve Faster WebLogic Authentications with Faster Group Membership Lookups
Introduction In my last post I wrote about the complicated and timely process of determining all of a user’s group memberships when an LDAP namespace includes nested and dynamic group memberships. I...
View ArticlePassword Policy in OAM 11g R2
Introduction One of the features in the new 11G R2 (or 11.1.2) release of Oracle Access Manager that’s been most eagerly anticipated is the support for password policy within the OAM product; that is,...
View ArticleCreating a Custom OVD Plugin
1. Introduction In a recent engagement, I worked with a customer that had a business requirement where they needed to create and expose to their application two computed LDAP attributes, based on the...
View ArticleWhere has your LDAP connection pool gone?
Introduction You have deployed Oracle BPM and decided to run some load tests against it. You’re concerned, among other things, about the behavior of your backend LDAP server under peak times, whether...
View ArticleOAM LDAP connections through firewalls
Introduction In a previous post, we discussed some of the complications that can occur when a firewall is placed between WebGates and OAM Servers in a typical deployment. This post follows on from that...
View ArticlePart 2: Advanced Apache JMeter Stress Testing OAM and LDAP
Introduction In “Part 1: How To Load Test OAM11g using Apache JMeter” I talked about an example plan that could be used to load test OAM11g, which included some common configuration elements, some...
View ArticleChained LDAP Authentication in OAM 11g
Introduction In this post, we look at a simple way to configure a chained LDAP authentication scheme in OAM 11g R2. This post is part of a larger series on Oracle Access Manager 11g called Oracle...
View ArticleImprove Oracle Unified Directory 11gR2 Search Performance with Index Entry Limit
Introduction I am always looking for great tips that give big values; this one is no exception. This article is to help you understand how to tweak the index called “Index Entry Limit” to reap some...
View ArticleOracle Unified Directory 11gR2PS3 Very Large Static Groups
This post is about OUD and extremely large static groups where membership numbers exceed hundreds of thousands or even millions; yes I said millions. I have been using Directory Services for over 15...
View ArticleWhat is SCIM?
SCIM is a standard protocol for accessing identity information (users, roles, etc), including querying, retrieval, create, update and delete. The latest version of SCIM, SCIM 2.0, has been defined in a...
View ArticleConfiguring UCM to use Active Directory with Apache
Today, I wanted to configure Oracle Universal Content Management (UCM) 10gR3 to allow authentication via Active Directory. I am running UCM through an Apache web server. Everything is running on...
View ArticleWebLogic, LDAP Authenticators, and Groups
The number one cause of mystery login problems that I see with customers using LDAP authenticators (be it OID, Sun, or AD) relates to a problem with the search done to determine what groups the user is...
View ArticleQuick tip: OVD – Providing namespace translation for DN attributes
Breaking off the ADF/OPSS series…OVD (Oracle Virtual Directory) guru Mark Wilcox gave me this really helpful tip that it’s worth sharing. It can save you folks quite a bit of headache.Scenario: you...
View ArticleOAM 11g Connecting to an LDAP ID store over SSL (LDAPS)
Connecting to an LDAP ID store in OAM 11g over SSL (LDAPS) is a common scenario that many customers may need to implement. Unfortunately the documentation on this subject is scant and can be...
View Article