Adding a Domain Controller for Oracle Directory

You can add an Oracle Directory domain so that users can log on to the CommCell environment with their Oracle Directory credentials.

Note: The default naming attribute is uid, but you can configure the naming attribute to be cn. For instructions, see Configuring the Naming Attribute for Oracle Directory.

Before You Begin

  • To enable Oracle Directory domains, on the CommServe computer, add the bEnableOracleDirectory additional setting as shown in the following table.

    For instructions on adding additional settings from the CommCell Console, see Add or Modify an Additional Setting.

    Property

    Value

    Name

    bEnableOracleDirectory

    Category

    CommServDB.Console

    Type

    BOOLEAN

    Value

    True

  • You must have the Add, delete and modify a domain permission at the CommCell level.

  • Obtain the following information for the Oracle Directory server:

    • The parent distinguished name (DN) under which users and groups are stored

    • The domain name and the fully qualified domain name

  • If the CommServe host is a member of the domain controller, you can set the user account to LocalSystemAccount (without a password), instead of a domain user account. If you need to add the domain using a domain user account, the account must have at least read access to the domain.

Procedure

  1. From the CommCell Browser, go to Security.

  2. Right-click Domains and click Add new domain > Oracle Directory.

    The Add New Domain Controller dialog box is displayed.

  3. Enter the details for the Oracle Directory domain controller:

    • In the NetBIOS Name box, enter the NetBIOS name of the domain, for example, mydomain.

    • In the Domain Name box, enter the fully qualified domain name (FQDN), for example, domain.company.com.

    • In the Base DN box, enter the parent DN.

      Examples:

      • uid=username,ou=People,dc=example,dc=com is the distinguished name of a user and example.com is the parent DN.

      • cn=name,ou=People,dc=example,dc=com is the distinguished name of a user and example.com is the parent DN.

    • To enter the credentials for the Oracle Directory server, next to User Account, click Edit.

  4. Click OK.

Result

When Oracle Directory users log on, they can use an email address and password or a user ID and password. The user ID must be in the following format: Organization_name\user_name, for example, MyCompany\jsmith.

Loading...