Oracle Database B10772-01 Administrator's Manual page 320

Preparing the Directory for Enterprise User Security
Task 6: Register the database in the directory
After you have configured your Oracle home for directory usage, use Database
Configuration Assistant to register the database in the directory. Registration creates
an entry in the directory so the database can bind, or log in, to it.
When a database is registered in the directory, Database Configuration Assistant
performs the following configuration tasks:
12-8 Oracle Database Advanced Security Administrator's Guide
Note:
If you are using SSL authentication for your
database-to-directory connection, then the SSL port entered in
the ldap.ora file must support two-way authentication. This
requires a PKI digital certificate and wallet for Oracle Internet
Directory.
If you are using password authentication for your
database-to-directory connection, then the SSL port entered in
the ldap.ora file must support SSL with no authentication.
(The directory SSL port on which the Diffie-Hellman-based SSL
server is running.) This does not require a wallet or certificate
for Oracle Internet Directory.
Creates a new database service entry and subtree, and assigns a DN to it in the
Oracle Context for the identity management realm you are using.
Adds the database to the default enterprise domain.
Sets the LDAP_DIRECTORY_ACCESS parameter in the database initialization
parameter file to the default authentication type for the specified identity
management realm. This parameter determines whether and how the database
attempts authentication to the directory. The allowable settings are NONE,
PASSWORD, or SSL. The default setting is PASSWORD.
Creates a database wallet, containing the database DN in the form cn=<short_
database_name>,cn=OracleContext,<realm_DN> where short_
database_name is the first part of the fully qualified domain name for a
database. For example, if you have a database named db1.us.oracle.com,
then the short database name is db1.
Randomly generates a database password for directory access, storing it in the
database wallet and in the directory.