20.2 SunONE Directory Server Integration Concepts

20.2.1 Synchronization Between Oracle Internet Directory and SunONE Directory Server

Synchronization with SunONE Directory Server is based on reading incremental changes from the source directory to the destination directory. If changes are to be made in both directories, then both directories need to have change logging enabled.

20.2.2 Synchronization of Deletions from SunONE Directory Server to Oracle Internet Directory

If you want to synchronize deletions, and the mapping rules have mandatory attributes, then be sure that the tombstone is configured correctly.

To verify that the tombstone is configured in SunONE Directory Server, execute the following command:

$ORACLE_HOME/bin/ldapsearch -h connected_directory_host 
-p connected_directory_port -D  connected_directory_account  
-w connected_directory_password -b source_domain 
-s sub "objectclass=nstombstone"

This returns information on all deleted entries.

20.2.3 The SunONE Directory Server External Authentication Plug-in

Oracle components are clients of Oracle Internet Directory. However, in an integrated environment, you have the option of storing security credentials for those components in an external repository —in this case, SunONE Directory Server—rather than in Oracle Internet Directory. When security credentials are stored in an external repository, user authentication to an Oracle component happens in the external repository and not in Oracle Internet Directory.

To communicate with the external repository, the Oracle component relies on the Oracle directory server. The Oracle directory server, in turn, uses a plug-in that can access the external repository. The entire authentication process is transparent to the Oracle components, which perceive all the LDAP requests as being handled by the Oracle directory server.