Oracle Internet Directory
Microsoft Active Directory锛瀵煎ヨ
ā璇存濡浣寤哄缃ヨㄤ互 Oracle Internet Directory (OID)
Microsoft Active Directory Server (ADS)
灏榧缃炬涓灏剧ず灞俱ㄤ浠ュ榧缃釜炬涓锛ョ涓宠灞俱
ㄤ涓澧涓ㄥ芥澶涓″ㄣㄨ绉典锛瑕ㄤ涓缁存ゆ版涓存э″ㄥ椤诲姝ュ苟锋稿版舵 Windows 澧涓ㄦ蜂俊缁淇℃ Active Directory Server锛Windows 2000 浣绯荤涓ㄥ锛涓ㄥ缁存ゃ浣 Oracle 缁浠朵娇 OID 浣涓哄ㄥ缁存ょㄦ蜂俊缁淇℃涓ぎ淇℃Oracle 渚搴骞冲 (DIP) ㄤㄤ涓澧涓姝ヨ涓や釜
ㄥ浠ヤ娇ㄥヨㄦ瀵煎鸿ㄥ姝 OID
ADSㄦ绋涓ㄥ瀛濡浣缃ヨㄣ瀵煎ヨㄧㄤㄦ峰缁浠 ADS 涓瀹渚瀵煎 OIDㄨ灏瀛濡浣杩琛寮瀵硷灏ㄦ峰缁浠 ADS 杩绉诲 OID
ㄥ濮瀛涔锛ㄥ璇ュ凡缁
宸插瑁 Oracle 搴ㄦ″ 10g 瀹渚
宸查璇 OID ″ㄦ甯歌琛
瑕璁剧疆澧锛寮涓涓扮绔苟杈ワ
export ORACLE_HOME=/home/oracle/infra export ORACLE_SID=asdb export PATH=/home/oracle/infra/bin:$PATH
浣跨 ADS 缃ヨ绗姝ユ缃灞ф灏瑙ц浠ヤ姝ラ锛
寮涓涓戒护绀虹锛浣跨ㄤ互涓戒护灏宸ヤ存逛负 %ORACLE_HOME%/ldap/odi/conf锛
cd %ORACLE_HOME%/ldap/odi/conf
ㄨ涓浣跨ㄤ互涓戒护灏绀轰浠 activechg.map.master 澶跺 activechg.map锛
cp activechg.map.master activechg.map
activechg.map.master 浠舵涓ず渚浠讹朵腑 ADS ㄦ峰缁灏 OID ㄥ灞ф灏瑙
绀轰浠跺 activechg.map 浠跺袱涓ㄥ锛DomainRules
AttributRules
DomainRules锛ㄥ涓 DIP ″ㄦ渚 ADS 涓ㄦ峰缁瀹瑰ㄧ浣缃ㄥ杩瀹浜ㄦ峰缁瀹瑰ㄥㄥ杩琛存圭 OID ″ㄤ腑浣缃
AttributeRules锛ㄥ涓 DIP ″ㄦ渚 ADS 灞у OID ″ㄤ灏
妫ユㄧ浠舵ユユ锛ユ病锛璇蜂娇ㄤ互涓戒护存规锛
chmod 777 activechg.map
ㄧ杈ㄤ腑寮 activechg.map 浠讹
vi activechg.map
ㄦ浠朵腑杩琛浠ヤ存癸
DomainRules ㄥ涓灏
%USERBASE%:%USERBASE%: 存逛负 CN=Users,DC=acme,DC=com:CN=Users,DC=acme,DC=com
规ㄧ瀹渚锛戒涓
DomainRule 绗ㄥ ADS 涓ㄦ峰缁瀹瑰ㄤ缃 DN锛筹婧 (&:&) ㈢ㄥ琛ㄧず OID ″ㄤ腑ㄦ峰缁瀹瑰ㄤ缃 DN锛筹婧瑙 DN 浠ュ (&:&)
AttributeRules ㄥ涓涓瑕存逛换浣灞ф灏瑙
淇瀛存瑰苟抽杈ㄣ
瑕浣 DIP ″ㄤ娇ㄦ灏浠堕 ADS
OID锛ㄥ椤诲 activechg.map 浠剁瀹逛杞藉板ヨㄩ缃浠 ActiveChgImp瑕灏璇ユ浠剁瀹逛杞藉板ラ缃浠讹搴浣跨 dipassistant 戒护
浠戒护绀虹锛ц浠ヤ戒护锛
dipassistant mp -host && -port 3060 -passwd welcome1 -profile ActiveChgImp odip.profile.mapfile=/oracle/home/ldap/odi/conf/activechg.map
浣跨ㄧ瑰浜 OID ㄧ讲瀹ㄩ瀹 (FQDN)绔浠ゆ挎杩板戒护涓 hostname.domainport
ㄥ椤讳娇 OID 瓒绾хㄦ orcladmin 浠ゃ
ㄥ椤诲ㄥ戒护涓渚 odip.profile.mapfile 版灏浠剁浠跺缁瀵圭璺
涓ぇ澶 LDAP ″ㄤ锛ADS
users 瀹瑰ㄤ腑瀛ㄥ groups变ㄨ灏 ADS users 瀹瑰ㄤ腑椤规灏 OID ″ㄤ腑 users 瀹瑰姝ら瑕 OID 涓坊棰澶璁块剁ヤ互璁告ㄥ OID
users 瀹瑰ㄤ寤 groups 瀹瑰ㄣ
涓杞藉剁ュ涔 LDIF 浠 (grantrole.ldif)
ㄥ戒护绀虹涓浣跨ㄤ互涓戒护ㄧ杈ㄤ腑寮 grantrole.ldif 浠讹
vi /u01/grantrole.ldif
瑕 OID ㄧ讲涓娇ㄨ浠讹搴灏 dc=acme,dc=com 存逛负ㄨ繁淇℃
渚濡锛濡 OID ㄧ讲涓ㄦ蜂浜 dc=us,dc=acme,dc=com锛浣跨ㄥ dc=us,dc=acme,dc=com 挎㈡浠朵腑 dc=acme,dc=com 椤广
淇瀛瀵 grantrole.ldif 浠剁存广
瑕 OID ″ㄤ搴ㄨ璁块剁ワ璇蜂戒护绀虹ц浠ヤ戒护锛
ldapmodify -p oid_portnum -h oid_host_name -D &cn=orcladmin& -w orcladmin_pass -f grantrole.ldif
ㄥ浠ヤ娇 dipassistant 戒护灏ㄦ峰缁浠 ADS 杩绉诲 OID ″ㄣ璇ュ戒护灏渚涓涓瀵煎戒护椤癸浣 OID
ADS ㄤ氦俊稿版dipassistant 浣挎ㄨ藉浣跨ㄥ版浠舵瀹ㄩ缃缃浠惰琛寮瀵笺浣跨ㄤ互涓姝ラ缃ф浠讹
浣跨ㄤ互涓戒护灏宸ヤ存逛负 %ORACLE_HOME%/ldap/odi/samples/锛
cd %ORACLE_HOME%/ldap/odi/samples/
Oracle ㄨ涓负ㄦ渚浜涓涓涓 ldp2ldp.properties 绀轰灞ф浠讹ㄥ浠ヨ涔璇ユ浠讹骞朵娇ㄥ灏 ADS ㄦ峰缁杩绉诲伴ㄧ讲涓 OID
浣跨ㄤ互涓戒护灏 ldp2ldp.properties 浠跺跺 ad2oid.properties锛
cp ldp2ldp.properties ad2oid.properties
浣跨ㄤ互涓戒护淇规锛骞跺ㄧ杈ㄤ腑寮 ad2oid.properties 浠讹
chmod 777 ad2oid.properties
vi ad2oid.properties
杩璁剧疆浠ヤ帮ㄦ浠朵腑杩琛浠ヤ存癸
odip.bootstrap.srctype
瀹寮瀵肩婧 LDAP 杩 LDIF
odi.bootstrap.srcurl
FQDN:ADS 绔
odip.bootstrap.srcdn
瀹婧缁瀹 DN
cn=administrator,cn=users, dc=acme,dc=com
odip.bootstrap.srcpasswd
瀹婧缁瀹 DN 缁瀹浠
ADS 绠＄浠
odip.bootstrap.desttype
瀹寮瀵肩 LDAP 杩 LDIF
odip.bootstrap.desturl
FQDN:OID ″ㄧ
odip.bootstrap.destdn
cn=orcladmin
odip.bootstrap.destpasswd
瀹缁瀹 DN 缁瀹浠
odip.bootstrap.mapfile
瀹у灏灏浠剁浣缃
activechg.map
odip.bootstrap.logfile
瀹ュ浠朵缃
/oracle/ldap/odip/scr/bootstrap.log
odip.bootstrap.logseverity
瀹瑕璁板ュ娑被 INFO ---- 1 WARNING ---- 2 DEBUG ---- 4 ERROR ---- 8
娉杩浠ユ瀹杩浜绫诲缁凤瑕绫诲娑浣跨 1 + 2 + 4 + 8 = 15
odip.bootstrap.trcfile
瀹璺韪浠剁浣缃
/Oracle/ldap/odip/scr/bootstrap.trc
浠戒护绀虹锛濡涓瑰ц dipassistant 戒护ュ瀵 ADS
dipassistant bs -cfg %ORACLE_HOME%/ldap/odi/samples/ad2oid.properties
寮瀵艰绋瀹璇ュ戒护灏剧ず涓涓ュ锛哄凡杩绉诲杩绉诲け璐ョ椤规般ㄥ浠ユョュ浠讹浠ヨ寰村璇淇℃
ㄧㄥ浠ョ诲 OID ″骞舵ョ浠 ADS 杩绉绘ョㄦ峰缁
OID ″ㄤㄥ氨浠ヤ娇 Oracle Directory Manager 缃ラ缃浠朵璇ラ缃浠剁 DIP ″ㄥц锛ㄤ姝 OID ″ㄣц浠ヤ姝ララ缃ラ缃浠讹
浠绔 Oracle Directory Manager
ㄧ诲瀵硅妗涓杈 orcladmin 浣涓虹ㄦ峰锛骞惰 Oracle 搴ㄦ″ㄧ浠や涓哄浠ゃ濡″ㄩ」剧ず锛娉ㄥㄨ杩扮″ㄣ
ㄥ间腑锛瀵艰 Oracle Directory Servers & orcladmin@oidhost:port & Server Management & Integration Server & Configuration Set1
绐煎剧ずㄧ缃浠躲
浠缃浠跺琛ㄤ腑 ActiveChgImp锛跺 Edit 淇归缃浠跺板笺
ActiveChgImport 缃浠剁涓板剧ずㄤ互涓椤瑰′腑锛
1. General 椤瑰 2. Execution 椤瑰 3. Mapping 椤瑰 4. Status 椤瑰
棣灏剧ず General 椤瑰°ㄨ椤瑰￠〉腑锛瀵逛互涓拌琛存癸
1. Scheduling Interval = 10 2.Debug Level = 63
Execution 椤瑰★骞跺浠ヤ拌琛存癸
1. Connected Directory Account =
2. Connected Directory Account Password = password 3. Connected Directory URL = hostname.domain:port or IP address:port
Mapping 椤瑰°ㄤ瑕ㄨ椤瑰￠〉杩琛浠讳存癸涓烘灏浠跺凡缁杞藉伴缃浠躲
Status 椤瑰°杩锛ㄩ瑕存圭板煎氨 Last Applied Change Number瑕寰扮存圭锛浠戒护绀虹ц浠ヤ戒护锛
ldapsearch -p &oid_port& -h &AD_Host_name& -D &&
-w admin_password -b && -s base &objectclass=*& highestCommittedUSN
杈ヨ间涓 Last Applied Change Number 扮板笺
瀹蹇存瑰 OK 淇瀛存广
Oracle DIP ″ㄤ互ц ActiveChgImport 缃浠躲杩浠戒护绀虹ц浠ヤ戒护ュ DIP ″
oidctl connect=&connect_string& server=odisrv instance=1 config=1 flags=&port=3060& start
灏浠ｇ缃浠剁舵存逛负 Enable OK
ㄨ堕磋绯荤浼ц缃浠躲ㄥ浠ヤ缃浠跺у璇妗 Status 椤瑰′腑ョ缃浠剁舵ョ姝ョ舵负 Synchronization Successful
瑕 Active Directory 涓寤虹ㄦ凤骞堕璇凡灏璇ョㄦ锋渚缁 OID锛ц浠ヤ姝ラ锛
Active Directory Server 涓 Start & Programs & Administrative Tools & Active Directory Users and Computers
Active Directory Users and Computers 绐涓 Users
ㄥ瀹瑰ㄤ腑锛 Create a new user
杈ヤ互涓璇淇℃
First name: Last name: Full name: User logon name: User logon name (pre-Windows 2000):
杈ュ苟纭浠ゃ Next
Refresh ョ扮ㄦ枫
灏榧缃炬涓浠ラ灞俱
© 2004 Oracle Corporation淇┿Access denied |
used Cloudflare to restrict access
Please enable cookies.
What happened?
The owner of this website () has banned your access based on your browser's signature (6dba-ua98).君，已阅读到文档的结尾了呢~~
第 9 章——测试基于 windows 的安全和目录服务
扫扫二维码，随身浏览文档
手机或平板扫扫即可继续访问
第 9 章——测试基于 windows 的安全和目录服务
举报该文档为侵权文档。
举报该文档含有违规或不良信息。
反馈该文档无法正常浏览。
举报该文档为重复文档。
推荐理由：
将文档分享至：
分享完整地址
文档地址：
粘贴到BBS或博客
flash地址：
支持嵌入FLASH地址的网站使用
html代码：
&embed src='/DocinViewer-4.swf' width='100%' height='600' type=application/x-shockwave-flash ALLOWFULLSCREEN='true' ALLOWSCRIPTACCESS='always'&&/embed&
450px*300px480px*400px650px*490px
支持嵌入HTML代码的网站使用
您的内容已经提交成功
您所提交的内容需要审核后才能发布，请您等待！
3秒自动关闭窗口拒绝访问 |
| 百度云加速
请打开cookies.
此网站 () 的管理员禁止了您的访问。原因是您的访问包含了非浏览器特征(f662e-ua98).
重新安装浏览器，或使用别的浏览器