2 Administering Oracle Delegated Administration Services

2.1.1 Oracle Delegated Administration Services for User Entries

Oracle Delegated Administration Services can perform these operations regarding user entries:

• Search for a user entry

• Create a user entry

• Self-edit a password

• Select a user entry and edit it

• Select a user entry and delete it

• Select a user entry and assign a privilege to that user

• View profile of the user who is logged in

• User list of values (LOV), a popup window that enables you to lookup and select a user

• Edit a user by passing the orclguid attribute to the URL. The entry is then displayed without the user needing to perform a search.

• Delete a user by passing the orclguid attribute to the URL. The entry is then displayed without the user needing to perform a search.

• Assign a privilege to a user by passing the orclguid attribute to the URL. The entry is then displayed without the user needing to perform a search.

2.1.2 Oracle Delegated Administration Services for Group Entries

Oracle Delegated Administration Services can perform these operations regarding group entries:

• Search for a group entry

• Create a group entry

• Select a group entry and edit it

• Select a group entry and delete it

• Select a group entry and assign a privilege to that group

• Group list of values (LOV), a popup window that enables you to lookup and select a group

• Edit a group by passing the orclguid attribute to the URL. The entry is then displayed without the user needing to perform a search.

• Delete a group by passing the orclguid attribute to the URL. The entry is then displayed without the user needing to perform a search.

• Assign a privilege to a group by passing the orclguid attribute to the URL. The entry is then displayed without the user needing to perform a search.

2.3.1 Performing a Standalone Oracle Delegated Administration Services Installation

To perform a standalone Oracle Delegated Administration Services installation, when prompted by the Oracle Installer, select the Identity Management installation type. On the Configuration Options screen, select Delegated Administration Service.

2.3.2 Manually Deploying Oracle Delegated Administration Services in a New Oracle Home

To manually deploy Oracle Delegated Administration Services in a separate Oracle home, follow these steps:

1. Verify that the computer has at least a core installation that points to an existing Oracle Internet Directory and Oracle Application Server Single Sign-On.

2. Navigate to the $ORACLE_HOME/dcm/bin directory.

3. Create a new component by using the following command:

   dcmctl createcomponent -verbose -debug -ct oc4j -co OC4J_SECURITY
   
   

4. Start the component by using the following command:

   dcmctl start -verbose -debug -co OC4J_SECURITY
   
   

5. Deploy the oiddas.ear file by using the following command:

   dcmctl deployApplication -debug -verbose -a oiddas -f
   $ORACLE_HOME/ldap/das/oiddas.ear -co OC4J_SECURITY
   
   

6. Perform the following steps to add the LD_LIBRARY_PATH and DISPLAY environment variables to the opmn.xml file:

   1. Navigate to the $ORACLE_HOME/opmn/conf directory and open opmn.xml in a text editor.

   2. Add the following lines in the OC4J_SECURITY section of opmn.xml:

      For a UNIX environment:

      <environment>
      <prop name="LD_LIBRARY_PATH" value="%ORACLE_HOME%/lib"/>
      </environment>
      
      

      For a Windows environment:

      <environment>
      <prop name="PATH" value="%ORACLE_HOME%/bin"/>
      </environment>
      

      Note the placement of the section <environment> in the following example.

      <oc4j maxRetry="3" instanceName="OC4J_DAS" gid="OC4J_SECURITY"
      numProcs="1">
      <config-file path="/home/ias902/j2ee/OC4J_
      DAS/config/server.xml"/>
      <oc4j-option value="-properties"/>
      <port ajp="3001-3100" jms="3201-3300"
      rmi="3101-3200"/>
      <environment>
      <prop name="LD_LIBRARY_PATH" value="/home/ias902/lib"/>
      </environment>
      </oc4j>
      
      

   3. Navigate to the $ORACLE_HOME/dcm/bin directory.

   4. Save the changes to the repository by using the following command:

      dcmctl updateconfig -verbose -debug -ct opmn
      
      

   5. Restart OPMN by using the following command:

      dcmctl restart -verbose -ct opmn
      
      

   6. Stop and start the OC4J_SECURITY instance by using the following commands:

      dcmctl stop -verbose -debug -ct oc4j -co OC4J_SECURITY
      

      dcmctl start -verbose -debug -ct oc4j -co OC4J_SECURITY
      
      

   7. Set the necessary permissions for Oracle Delegated Administration Services. Modify the group by using either Oracle Directory Manager or the command-line tool. Add the DN of the new Oracle Application Server instance where Oracle Delegated Administration Services is currently being deployed as the uniquemember.

      DN of the group to be modified: cn=Associated Mid-tiers,orclApplicationCommonName=DASApp,cn=DAS,cn=Products,cn=OracleContext
      

      The DN on the Oracle Application Server instance is:

      orclApplicationCommonName=name of Oracle Application Server instance,cn=IAS Instances, cn=IAS, cn=Products, cn=OracleContext 
      
      

      where name of Oracle Application Server instance is obtained from $ORACLE_HOME/config/ias.properties.