Index

A B C D E F G H I J L M N O P R S T U W

A

abandoning an operation, 11.2.10

access control, 2.3.4, 2.3.4.2, 2.3.4.2

and authorization, 2.3.4.2

access control information (ACI), 2.3.4.2

attributes, 2.3.4.2

directives

format, 2.3.4.2

Access Control List (ACL), 2.3.4.2

access control lists (ACLs), 2.3.4.2

ACI. See access control information (ACI)

ACLs. See Access Control List (ACL)

anonymous authentication, 2.3.4.1.1, 2.3.4.1.1

application login, 9.4.1.1

application logout, 9.4.1.2

application session cookie

clearing, 9.4.1

coding for, 9.4.1

applications, building

with the C API, 11.4

attributes

types, 2.3.2

values, 2.3.2

authentication, 2.3.4, 2.3.4.1, 2.3.4.1

anonymous, 2.3.4.1.1, 2.3.4.1.2

certificate-based, 2.3.4.1.3

modes, SSL, 11.1.1, 11.1.1

one-way SSL, 2.3.4.1.3

options, 2.3.4.1

password-based, 2.3.4.1.2

SSL, 2.3.4.1.3, 2.3.4.1.3, 11.1.1

none, 11.1.1

one-way, 11.1.1

two-way, 11.1.1

strong, 2.3.4.1.3

to a directory server

enabling, 2.6

enabling, by using DBMS_LDAP, 2.6.2

enabling, by using the C API, 2.6.1

to the directory, 11.2.4

two-way SSL, 2.3.4.1.3

authentication, simple, 9.3.3.1

authorization, 2.3.4, 2.3.4.2

authorization ID, 2.3.4.1

B

bulk tools, 1.5.4

C

C API

functions

abandon, 11.2.10.1

abandon_ext, 11.2.10.1

add, 11.2.9.7, 11.2.9.7

add_ext_s, 11.2.9.7

add_s, 11.2.9.7

compare, 11.2.9.4

compare_ext, 11.2.9.4

compare_ext_s, 11.2.9.4

compare_s, 11.2.9.4

count_entries, 11.2.14.1

count_references, 11.2.14.1

count_values, 11.2.14.3

count_values_len, 11.2.14.3

delete, 11.2.9.8

delete_ext, 11.2.9.8

delete_ext_s, 11.2.9.8

delete_s, 11.2.9.8

dn2ufn, 11.2.14.4

err2string, 11.2.12.1

explode_dn, 11.2.14.4

explode_rdn, 11.2.14.4

extended_operation, 11.2.9.9

extended_operation_s, 11.2.9.9

first_attribute, 11.2.14.2

first_entry, 11.2.14.1

first_message, 11.2.13.1

first_reference, 11.2.14.1

get_dn, 11.2.14.4

get_entry_controls, 11.2.14.5

get_option, 11.2.3.1

get_values, 11.2.14.3

get_values_len, 11.2.14.3

init_ssl call, 11.1.1.1

modify, 11.2.9.5

modify_ext, 11.2.9.5

modify_ext_s, 11.2.9.5

modify_s, 11.2.9.5

msgid, 11.2.11.1

msgtype, 11.2.11.1

next_attribute, 11.2.14.2

next_entry, 11.2.14.1

next_message, 11.2.13.1

next_reference, 11.2.14.1

parse_extended_result, 11.2.12.1

parse_reference, 11.2.14.6

parse_result, 11.2.12.1

parse_sasl_bind_result, 11.2.12.1

rename, 11.2.9.6

rename_s, 11.2.9.6

result, 11.2.11.1

sasl_bind, 11.2.4.1

sasl_bind_s, 11.2.4.1

search_st, 11.2.9.1

set_option, 11.2.3.1

simple_bind, 11.2.4.1

simple_bind_s, 11.2.4.1

unbind_ext, 11.2.8.1

unbind_s, 11.2.8.1

value_free, 11.2.14.3

value_free_len, 11.2.14.3

sample usage, 11.3

summary, 11.2.1

usage with SSL, 11.3.1, 11.3.1

usage without SSL, 11.3.2, 11.3.2

certificate authority, 2.3.4.1.3

certificate-based authentication, 2.3.4.1.3

certificates, 2.3.4.1.3

children of an entry, listing, 11.2.9.3

code examples

application login, 9.4.1.1

authentication, 9.3.3.1, 9.3.3.1

forced authentication, 9.3.3.3, 9.4.1.1

single sign-off, 9.3.3.2, 9.3.3.2

components

Oracle Internet Directory SDK, 1.5.2

controls, working with, 3.10.2, 3.10.5, 11.2.7

D

DAP Information Model, 2.3.2

DAS units, 8.1

DAS URL Parameter Descriptions, 15.3

DAS URL Parameters, 8.2.2

DAS URL parameters, 15.2

data

integrity, 2.3.4, 2.3.4.3, 2.3.4.3

privacy, 2.3.4, 2.3.4.4, 2.3.4.4

data-type summary, 12.3

DBMS_LDAP package

searching by using, 2.7

DBMS_LDAP_UTL

about, 14

data-types, 14.4

function return codes, 14.3

group-related subprograms

about, 14.1

function create_group_handle, 14.2.2.1

function get_group_dn, 14.2.2.4

function get_group_properties, 14.2.2.3

function set_group_handle_properties, 14.2.2.2

miscellaneous subprograms

about, 14.1

function check_interface_version, 14.2.5.10

function create_mod_propertyset, 14.2.5.6

function get_property_names, 14.2.5.2

function get_property_values, 14.2.5.3

function get_property_values_len, 14.2.5.4

function normalize_dn_with_case, 14.2.5.1

function populate_mod_propertyset, 14.2.5.7

procedure free_handle, 14.2.5.9

procedure free_mod_propertyset, 14.2.5.8

procedure free_propertyset_collection, 14.2.5.5

subscriber-related subprograms

about, 14.1

function create_subscriber_handle, 14.2.3.1

function get_subscriber_dn, 14.2.3.3

function get_subscriber_properties, 14.2.3.2

user-related subprograms

about, 14.1

function authenticate_user, 14.2.1.1

function check_group_membership, 14.2.1.8

function create_user_handle, 14.2.1.2

function get_group_membership, 14.2.1.10

function get_user_dn, 14.2.1.7

function get_user_extended_properties, 14.2.1.6

function get_user_properties, 14.2.1.4

function locate_subscriber_for_user, 14.2.1.9

function set_user_handle_properties, 14.2.1.3, 14.2.1.3

function set_user_properties, 14.2.1.5

dependencies and limitations, 11.5

C API, 11.5

DES40 encryption, 2.3.4.4

directives, 2.3.4.2

Directory Information Tree, 2.3.1

directory information tree (DIT), 2.3.1

directory server discovery, 3.7

distinguished names, 2.3.1

components of, 2.3.1

format, 2.3.1

DNs. see distinguished names.

documentation, related, Preface

dynamic directives

common types, 9.2.2

defined, 9.2.2, 9.2.2

programming languages supported, 9.2.2

dynamic password verifiers

controls, 3.10.2, 3.10.5

creating, 3.10.1

parameters, 3.10.2, 3.10.2

E

encryption

DES40, 2.3.4.4

levels available in Oracle Internet Directory, 2.3.4.4

RC4_40, 2.3.4.4

entries

distinguished names of, 2.3.1

locating by using distinguished names

naming, 2.3.1

reading, 11.2.9.2

errors

handling and parsing results, 11.2.11.1

exception summary, 12.2

F

filters, 2.7.3

forced authentication, 9.3.3.3, 9.4.1.1

formats, of distinguished names, 2.3.1

G

GET authentication method, 9.3.4

global user inactivity timeout, 9.3.4

H

header files and libraries, required, 11.4

history of LDAP, 2.2

HTTP headers, 9.1

I

integrity, data, 2.3.4.3

interface calls, SSL, 11.1.1.1

J

J2EE security APIs, 10.1

JAAS policy management APIs, 10.3

Java, 1.5.1, 2.4.4

Java API reference

class descriptions

Property class, 4.4

PropertySet class, 4.4

PropertySetCollection class, 4.4

Java APIs for Oracle Internet Directory, 13

Java partner applications

dynamically protected, 9.3.3, 9.3.3.3

statically protected, 9.3.2

Java partner applications, statically protected, 9.3.2

JAZN

see Oracle Application Server Java Authentication and Authorization Service

JNDI, 1.5.1, 2.4.4

JNDI location, 13

L

LDAP

functional model, 2.3.3

history, 2.2

information model, 2.3.2

messages, obtaining results and peeking inside, 11.2.11

naming model, 2.3.1

operations, performing, 11.2.9

security model, 2.3.4

session handle options, 11.2.3

in the C API, 2.6

sessions

initializing, 2.5

version 2 C API, 11.1

LDAP APIs, 1.5.3.3

LDAP Functional Model, 2.3.3

LDAP Models, 2.3

LDAP Naming Model, 2.3.1

LDAP Security Model, 2.3.4

ldapadd

plug-in support, 7.7.2

ldap-bind operation, 2.3.4.1

ldapcompare

plug-in support, 7.7.3

ldapmodify

plug-in support, 7.7.1

M

mod_osso

benefits, 9.1

compared with single sign-on SDK, 9.1

definition, 9.1

integration methods, 9.2

sample applications, 9.3.1, 9.3.3.3

mod_osso cookie, 9.4.1

N

naming entries, 2.3.1

O

OC4J security APIs, 10.2

one-way SSL authentication, 2.3.4.1.3, 11.1.1

OpenLDAP Community, Preface

operational attributes

ACI, 2.3.4.2

Oracle Application Server Java Authentication and Authorization Service

defined, 1.2

Oracle Directory Manager, 1.5.4

Oracle directory replication server, 1.5.4

Oracle directory server, 1.5.4

Oracle extensions

application

deinstallation logic, 1.5.3.2

runtime logic, 1.5.3.2

shutdown logic, 1.5.3.2

startup and bootstrap logic, 1.5.3.2

group management functionality, 3.5

programming abstractions

for Java language, 4, 5

for PL/SQL language, 5.3

programming abstractions for Java language, 4, 5

user management functionality, 4, 5

Oracle extensions to support SSL, 11.1

Oracle Identity Management

infrastructure

modifying existing applications, 1.3

integrating

new applications, 1.4

integrating applications with, 1

benefits of, 1.1

supported services, 1.2

Oracle Internet Directory, components, 1.5.4

Oracle SSL call interface, 11.1

Oracle SSL extensions, 11.1.1

Oracle SSL-related libraries, 11.5

Oracle system libraries, 11.5

Oracle wallet, 11.1.1.2

Oracle Wallet Manager, 11.1.1.2

required for creating wallets, 11.5

Oracle xxtensions

what an LDAP-integrated application looks like, 1.5.3.1

OracleAS Single Sign-On

user attributes, 9.1

overview of LDAP models, 2.3

P

password-based authentication, 2.3.4.1.2

passwords

policies, 2.3.4.5

permissions, 2.3.4, 2.3.4.2

PL/SQL API, 12

contains subset of C API, 2.4.3

data-type summary, 12.3

exception summary, 12.2

functions

add_s, 12.4.27, 12.4.27

ber_free, 12.4.35

bind_s, 12.4.3, 12.4.3

compare_s, 12.4.5, 12.4.5

count_entries, 12.4.10, 12.4.10

count_values, 12.4.29, 12.4.29

count_values_len, 12.4.30, 12.4.30

create_mod_array, 12.4.19, 12.4.19

dbms_ldap.init, 12.4.1

delete_s, 12.4.16, 12.4.16

err2string, 12.4.18, 12.4.18

explode_dn, 12.4.32, 12.4.32

first_attribute, 12.4.11, 12.4.11

first_entry, 12.4.8, 12.4.8

get_dn, 12.4.13, 12.4.13

get_values, 12.4.14, 12.4.14

get_values_len, 12.4.15, 12.4.15

init, 12.4.1, 12.4.1

modify_s, 12.4.26, 12.4.26

modrdn2_s, 12.4.17, 12.4.17

msgfree, 12.4.34

next_attribute, 12.4.12, 12.4.12

next_entry, 12.4.9, 12.4.9

open_ssl, 12.4.33, 12.4.33, 12.4.34, 12.4.35, 12.4.35

rename_s, 12.4.31, 12.4.31

search_s, 12.4.6, 12.4.6

search_st, 12.4.7, 12.4.7

simple_bind_s, 12.4.2, 12.4.2

unbind_s, 12.4.4, 12.4.4

loading into database, 2.4.3

procedures

free_mod_array, 12.4.28

populate_mod_array (binary version), 12.4.21

populate_mod_array (string version), 12.4.20

subprograms, 12.4, 12.4

summary, 12.1, 12.1

plug-ins

binary support, 7.7

provisioning interface, A

policy management APIs, 10.3

POST authentication method, 9.3.4

privacy, data, 2.3.4, 2.3.4.4, 2.3.4.4

privileges, 2.3.4, 2.3.4.2

procedures, PL/SQL

free_mod_array, 12.4.28

populate_mod_array (binary version), 12.4.21

populate_mod_array (string version), 12.4.20

provisioning interface plug-ins, A

R

RC4_40 encryption, 2.3.4.4

RDNs. see relative distinguished names (RDNs)

S

sample C API usage, 11.3, 11.3

SDK components, 1.5.2

results

parsing, 11.2.14

scope, 2.7.2

search-related operations, flow of, 2.7.1

security APIs, 10.1, 10.2

security, within Oracle Internet Directory environment, 2.3.4

self-service console, 8.1.1

service location record, 3.7

servlets

dynamically protected, 9.3.3.1, 9.3.3.3

statically protected, 9.3.2, 9.3.2

sessions

closing, 11.2.8

enabling termination by using DBMS_LDAP, 2.8.2

initializing

by using DBMS_LDAP, 2.5.2

by using the C API, 2.5.1

session-specific user identity, 2.3.4.1

simple authentication, 2.3.4.1.2, 2.3.4.1.2

single sign-off, 9.3.3.2, 9.3.3.2

single sign-on SDK

compared with mod_osso, 9.1

Smith, Mark, Preface, Preface

SSL

authentication modes, 11.1.1

default port, 2.3.4.1.3

handshake, 11.1.1.1

interface calls, 11.1.1.1, 11.1.1.1

no authentication, 2.3.4.1.3

one-way authentication, 2.3.4.1.3

Oracle extensions, 11.1, 11.1.1

provide encryption and decryption, 11.1.1

two-way authentication, 2.3.4.1.3

wallets, 11.1.1.2

static directives

defined, 9.2

writing, 9.2.1

strong authentication, 2.3.4.1.3

T

TCP/IP socket library, 11.5

two-way authentication, SSL, 11.1.1

types of attributes, 2.3.2

U

URLs, protecting, 9.2, 9.2.2

user attributes, 9.1, 9.1

W

wallets

SSL, 11.1.1.2

support, 11.1.1.2