Oracle Database B10772-01 Administrator's Manual page 315

Figure 12–1 Enterprise User Security Configuration Flow Chart
Configuration Started
What OID version
and realm Oracle
Context version
Are you
do you
using DNS
have? discovery?
9.0.4 or
later
9.2 or
earlier
Upgrade OID NetCA:
or Create Create
or upgrade ldap.ora file
a realm Oracle
Context in OID
SQL:Create
global schema
and global roles
in the database
At a SQL prompt, use:
connect
/@<net_service_name>
ESM: Set Login
Name attribute,
user and group
search bases for
the IM Realm.
Yes
No
OWM, ODM: Set
up OID wallet, and
configure SSL
for OID.
SSL or Kerberos
Enterprise User Security Configuration Tasks and Troubleshooting 12-3
Enterprise User Security Configuration Overview
ESM: Set DB-OID DBCA: Register
authentication the database
type for the in the
IM Realm directory
No
ESM: Set the Attribute for
Kerberos Principal Name
in the IM realm, and the
principal names for the
users in the user entries
in OID
ESM: Put the domain into
the password accessible
domains group.
OWM, Netmgr: Set up
user and DB wallets, and
configure SSL for client
and DB.
ESM: Create user- ESM: Add global
schema mappings database roles to
and enterprise roles enterprise roles in
in the directory. the directory.
How are users
authenticated?
Password
At a SQL prompt, use:
connect
username/password@<net_service_name>
Configuration Finished
Are you using
the default
enterprise
domain?
Yes
ESM: Create a new
enterprise domain
in the realm and
put the database
ESM: Set the
into it
user
authentication
type for the
enterprise
domain in the
directory.
Kerberos
How are users
authenticated?
Password
SSL
ESM: Grant
enterprise roles
to enterprise users
in the directory.
Connect to the
database as an
enterprise user.