Oracle Database B10772-01 Administrator's Manual page 348

Troubleshooting Enterprise User Security
1.
2.
3.
12-36 Oracle Database Advanced Security Administrator's Guide
Use Enterprise Security Manager to check that the database is a member of
exactly one enterprise domain, and add it to one if it is not.
Check that the database can see its domain by entering one of the following at
the command line:
– If the database connects to the directory over SSL, then use
ldapsearch -h <directory_host> -p <directory_SSLport> -U 3 -W
"file:<database_wallet_path>" -P <wallet_password> -b "cn=OracleContext,
<realm_DN>" "objectclass=orclDBEnterpriseDomain"
where <wallet_password> is the password to the wallet, which enables
you to open or change the wallet.
– If the database connects to the directory by using password authentication,
then use
ldapsearch -h <directory_host> -p <directory_port> -D <database_DN> -w
<database_directory_password> -b "cn=OracleContext, <realm_DN>"
"objectclass=orclDBEnterpriseDomain"
where <database_directory_password> is the password in the
database wallet, which is the database's password to Oracle Internet
Directory.
This ldapsearch should return exactly one enterprise domain.
If no domain is returned, and Enterprise Security Manager shows the database
as a member of a domain, then restart the database. Restarting the database
updates the cached value for the enterprise domain.
If more than one domain is returned, then use Enterprise Security Manager to
remove the database from the additional domain.
Check that the database can read the enterprise domain subtree, and thus can
read its enterprise roles and mappings, by entering one of the following at the
command line:
– If the database connects to the directory over SSL, then use
ldapsearch -h <directory_host> -p <directory_SSLport> -U 3 -W
"file:<database_wallet_path>" -P <wallet_password> -b "cn=OracleContext,
<realm_DN>" "objectclass=orclDBEnterpriseRole"
where <wallet_password> is the password to the wallet, which enables
you to open or change the wallet.