List of Tables

1-1 Comparison of Online Directories and Relational Databases

2-1 Components of an Oracle Internet Directory Node

2-2 Attributes Created with Each New Entry

2-3 Common LDAP Attributes

3-1 Tasks to Reset the Default Security Configuration

3-2 Log File Locations

4-1 Operating System-Specific Instructions for Starting Oracle Directory Manager

4-2 Oracle Directory Manager Menu Bar

4-3 Oracle Directory Manager Toolbar

4-4 Task Areas in Oracle Directory Manager

4-5 Process Control Items in the ODS_PROCESS Table

4-6 Tools for Starting, Stopping, and Monitoring Oracle Internet Directory Servers

4-7 Tools for Managing Entries

4-8 Command-Line Tools for Performing Bulk Operations

4-9 Command-Line Tools for Managing Replication

4-10 Routine Administration Tasks

5-1 Definitions of Super User, Guest User, and Proxy User

5-2 Names, Passwords, and Attributes for Super, Guest, and Proxy Users

5-3 Orclanonymousbindflag Value and Directory Server Behavior

5-4 Entry Alias Dereferencing Messages

5-5 Arguments in a Service Location Record (SRV)

6-1 Command-Line Tools for Managing Entries

7-1 Attribute Uniqueness Constraint Entry

8-1 Content Rule Parameters

9-1 orclDynamicGroup Attributes for "Connect By" Assertions

9-2 Static and Dynamic Group Considerations

10-1 Fields in Trace Messages

10-2 Debug Logging Levels

10-3 Debug Dimension Values for LDAP Operations

10-4 Attributes of the orclAuditoc Object Class

10-5 Auditable Events

10-6 Audit Mask Levels

10-7 Example: Setting the Audit Level

10-8 Components of Oracle Internet Directory Server Manageability

10-9 Critical Event Levels

10-10 Fields in the Start a New LDAP Server Instance Window of the Application Server Control Console

10-11 Fields in the Restart an LDAP Server Instance Window of the Application Server Control Console

13-1 SSL Cipher Suites Supported in Oracle Internet Directory

14-1 Sample Security Groups

14-2 Types of Access

14-3 LDAP Operations and Access Needed to Perform Each One

14-4 Attribute States During ACL Evaluation

14-5 DNs Used in Example

15-1 Tasks and Tools for Managing Password Polices

16-1 Attributes for Storing Password Verifiers in User Entries

17-1 Default Privileges Granted to Everyone and to Each User

17-2 Privileges for Administering the Oracle Technology Stack

17-3 Characteristics of the Subscriber DAS Create User Group

17-4 Characteristics of the Subscriber DAS Edit User Group

17-5 Characteristics of the DAS Delete User Group

17-6 Characteristics of the User Privilege Assignment Group

17-7 Characteristics of the Group Creation Group

17-8 Characteristics of the Group Edit Group

17-9 Characteristics of the Group Delete Group

17-10 Characteristics of the Group Privilege Assignment Group

17-11 Characteristics of the Oracle Application Server Administrators Group

17-12 Characteristics of the User Management Application Administrators Group

17-13 Characteristics of the Trusted Application Administrators Group

17-14 Characteristics of the User Security Administrators Group

17-15 Characteristics of the Authentication Services Group

17-16 Characteristics of the Verifier Services Group

17-17 Characteristics of the User Proxy Privilege Group

17-18 Characteristics of the Oracle Context Administrators Group

17-19 Characteristics of the Common User Attributes Group

17-20 Characteristics of the Common Group Attributes Group

17-21 Characteristics of the Service Registry Viewers Group

17-22 Characteristics of the Common Group Attributes Group

18-1 CPU Power for Various Deployment Scenarios

18-2 Approximate Disk Space Requirements for Variously Sized DITs

18-3 Estimates of the Memory Requirements for Various DIT Sizes

19-1 Oracle Identity Management Objects

19-2 Customizing the Default Identity Management Realm

20-1 Capacity Planning Terminology

20-2 Assumptions about Entry Types and Their Sizes

20-3 Overall Count of Entries

20-4 Directory Lookups in a Single Day

20-5 Working Hour Loads

20-6 Disk Space Requirements

20-7 Tablespaces Used to Store Oracle Internet Directory Data

20-8 Variables Used for Size Calculation

20-9 Size of Individual Tablespaces

20-10 Values for Variables Used for Sizing Calculations

20-11 Tablespace Sizes

20-12 Minimum Memory Requirements for Different Directory Configurations

20-13 Maximum Possible Throughput for Two Types of Operations

20-14 Rough Estimates of CPU Requirements

21-1 Suggested Values for ORCLSERVERPROCS and ORCLMAXCC Parameters

21-2 Recommended RDBMS Values for Various Client Loads

23-1 Features of bulkload and dipassistant

23-2 Mandatory Attributes in a User Entry

24-1 Types of Directory Replication Groups

24-2 Comparison of Full and Partial Replication

24-3 Types of Data Transfer Between Nodes in a Directory Replication Group

24-4 Multimaster. Single-Master, and Fan-Out Replication Compared

24-5 Types of Replication Conflict

25-1 Data Migration Using ldifwrite/bulkload versus Automatic Bootstrapping

25-2 Nodes in Example of Partial Replication Deployment

26-1 Types of Operation-Based Plug-ins

A-1 Fields in the Credentials Tab Page

A-2 Fields in the SSL Tab Page

A-3 Fields in the Access Control Management Pane

A-4 Fields in Authentication Choice List

A-5 Fields in Encryption Choice List

A-6 Entities to Whom You Are Granting Access in the By Whom Tab Page

A-7 Access Rights for Attributes

A-8 Fields in the New Constraint Dialog Box

A-9 Fields in the Garbage Collector Window

A-10 Fields in the Password Policies General Tab Page

A-11 Fields in the Password Policies Account Lockout Tab Page

A-12 Fields in the Password Policies IP Lockout Tab Page

A-13 Fields in the Password Policies Password Syntax Tab Page

A-14 Fields in the Password Verifier Profile Dialog Box

A-15 Fields in the New Plug-in Dialog Box

A-16 Fields in the Replication Server Configuration Set: General Tab Page

A-17 Fields in the ASR Agreement Tab Page

A-18 Fields in the Replica Node: General Tab Page

A-19 Columns in the Replica Agreements Tab Page

A-20 Fields in the Replica Naming Context Tab Page

A-21 Fields in the Change Log Window

A-22 Object Class Properties Listed in Searches in Oracle Directory Manager

A-23 Search Filters for Object Classes

A-24 Buttons Used in Searches for Object Classes in Oracle Directory Manager

A-25 Fields in the New Object Class Dialog Box

A-26 Columns in the Attributes Tab Page in Oracle Directory Manager

A-27 Search Filters for Attributes

A-28 Buttons in Searches for Attributes in Oracle Directory Manager

A-29 Fields in the General Tab Page of the New Attribute Type Dialog

A-30 Fields in the Advanced Tab Page of the New Attribute Type Dialog

A-31 Fields in the Matching Rules Tab Page

A-32 Fields in the New Content Rule Dialog Box

A-33 Fields in the Content Rule Dialog Box

A-34 Fields in the Configuration Sets Dialog Box-General Tab Page

A-35 Fields in the Configuration Sets-SSL Settings Tab Page

A-36 System Operation Attributes Displayed in Oracle Directory Manager

A-37 Fields in the System Passwords Tab Page

A-38 Fields in the Query Optimization Tab Page

A-39 Search Filters for Entries

A-40 Buttons Used in Searches for Entries

A-41 Fields in the SSL Settings Tab Page

A-42 Fields on the General Tab Page for Synchronization in Oracle Directory Manager

A-43 Fields on the Execution Tab for Synchronization in Oracle Directory Manager

A-44 Fields on the Mapping Tab Page for Synchronization in Oracle Directory Manager

A-45 Fields on the Status Tab Page for Synchronization in Oracle Directory Manager

D-1 Unicode Implementations

D-2 Components of the NLS_LANG Parameter

D-3 Examples: Using the -E Argument with Command-Line Tools

H-1 LDAP Replica States

J-1 Standard Error Messages

J-2 Additional Error Messages

J-3 Password Policy Violation Error Messages

J-4 Error Messages for Dynamic Password Verifiers