{"id":77,"date":"2016-01-02T14:52:47","date_gmt":"2016-01-02T14:52:47","guid":{"rendered":"https:\/\/www.spotonoracle.com\/?p=77"},"modified":"2016-05-10T15:08:57","modified_gmt":"2016-05-10T15:08:57","slug":"enterprise-user-security-part-1","status":"publish","type":"post","link":"https:\/\/www.spotonoracle.com\/?p=77","title":{"rendered":"Enterprise User Security – Part 1"},"content":{"rendered":"

After having the pleasure to work with EUS there is no going back. I like EUS so much it makes me wonder why the adoption of this feature is so small. Maybe because it’s such a huge PITA<\/a> to install and setup (just kidding, I know the licenses cost some a bag full of<\/del> money. Moreover, most organization don’t seem to care enough about their total mess in identity and access management<\/del>).<\/p>\n

What I’m going to show in this series is what is necessary to make EUS happen on the currently latest version of OUD (11.1.2.3) and the Oracle database (12.1.0.2). As usual, there is some patching and working around to do.<\/p>\n

But, first things first. What software do we need and what is each component for?<\/p>\n

Oracle Unified Directory
\n<\/strong>OUD is the directory service to which the database is making requests about users, credentials and privileges (roles). OUD is a LDAP directory based on OpenDS<\/a>. It’s a pure Java application with a integrated Berkley DB backend.<\/p>\n

Oracle Directory Services Manager
\n<\/strong>This component is optional but will make your life so much easier. ODSM is a web-based GUI to manage OUD. You use it to configure OUD, setup replication between multiple OUD’s and manage your users, groups, etc. ODSM is an application deployed on Weblogic and is using ADF.<\/p>\n

Download Software
\n<\/strong>Java JDK: Version 7 (latest Update)
\n– download from support.oracle.com<\/a> \/ Patch 1307984<\/p>\n

Weblogic Server 11gR1 (Generic and Coherence): Version 10.3.6
\n– download from edelivery.oracle.com<\/a> \/ Part-No.: V29856-01<\/p>\n

Oracle Application Development Framework (ADF): Version 11.1.1.9.0
\n– download from support.oracle.com<\/a> (Patch 20996481 \/ p20996481_111190_Generic.zip)<\/p>\n

Oracle Unified Directory (OUD): Version 11.1.2.3.0
\n– download from edelivery.oracle.com<\/a> \/ Part-No.: V75929-01<\/p>\n

Required Patches<\/strong>
\nAs I said before, there are some patches required for everything playing nice together.<\/p>\n

Database 12.1.0.2 requires patch to support SHA-2 with SSL:
\n– p19285025_121020_Linux-x86-64.zip
\n– get latest OPatch (6880880) for your database home version as per patch note<\/p>\n

OUD 11.1.2.3 requires patch to allow EUSM tool to connect:
\n– p20529805_111230_Generic.zip
\n– your current opatch version in the MW home should be high enough (OPatch version 11.1.0.11.0) to apply this patch<\/p>\n

Happy downloading…<\/p>\n

…
\n…
\n…<\/p>\n

Wrap your head around EUS
\n<\/strong>Meanwhile, let’s quickly look at what it’s all about – in case you’re new to this EUS business. The following diagram is an attempt to put everything in one picture what is scattered in the documentation: Database Enterprise User Security Administrator’s Guide<\/a>.<\/p>\n

\"eus-relationship\"<\/a><\/p>\n

Coloring scheme:
\n– Green: objects in the database
\n– Blue: groups of objects in the LDAP directory
\n– Red: user entities in the LDAP directory
\n– Yellow: enterprise roles in the LDAP directory<\/p>\n

There’s a group of users and each user is a member of one or more (functional) groups. The “Users” group is mapped to a database schema EUS_USER. This means every database login from one of these users will physically connect to the EUS_USER schema in the databases. Every functional group is granted one or more enterprise roles. Each enterprise role is mapped to a role in one or more databases.<\/p>\n

What’s next
\n<\/strong>I’m going to show you how to install and configure all the components so you can start registering databases for EUS. And, we’re going to do this in silent mode – meaning it’s all command line and response files instead of OUI screen shots.<\/p>\n","protected":false},"excerpt":{"rendered":"

After having the pleasure to work with EUS there is no going back. I like EUS so much it makes me wonder why the adoption of this feature is so small. Maybe because it’s such a huge PITA to install and setup (just kidding, I know the licenses cost some a bag full of money. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,7],"tags":[],"class_list":["post-77","post","type-post","status-publish","format-standard","hentry","category-eus","category-oud"],"_links":{"self":[{"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=\/wp\/v2\/posts\/77","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=77"}],"version-history":[{"count":4,"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=\/wp\/v2\/posts\/77\/revisions"}],"predecessor-version":[{"id":83,"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=\/wp\/v2\/posts\/77\/revisions\/83"}],"wp:attachment":[{"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=77"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=77"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.spotonoracle.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=77"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}