Scribd Logo
Upload

Welcome to Scribd!

  • 183 views

    New Features of OID in Fusion Middleware 11g

    Uploaded by

    Yakub Pasha
    The document summarizes new features introduced in several releases of Oracle Internet Directory 11g, including 11g Release 1 (11.1.1.9.0), 11g Release 1 (11.1.1.7.0), 11g Release 1 (11.1.1.6.0), 11g Release 1 (11.1.1.4.0), and 11g Release 1 (11.1.1). Key new features include persistent search operations, enhanced logging, computed attributes, transaction support, shared entry caching, security enhancements, and integration with WebLogic Server and Fusion Middleware.

    Copyright:

    © All Rights Reserved
    Download as DOC, PDF, TXT or read online from Scribd

    New Features of OID in Fusion Middleware 11g

    Uploaded by

    Yakub Pasha
    183 views7 pages
    The document summarizes new features introduced in several releases of Oracle Internet Directory 11g, including 11g Release 1 (11.1.1.9.0), 11g Release 1 (11.1.1.7.0), 11g Release 1 (11.1.1.6.0), 11g Release 1 (11.1.1.4.0), and 11g Release 1 (11.1.1). Key new features include persistent search operations, enhanced logging, computed attributes, transaction support, shared entry caching, security enhancements, and integration with WebLogic Server and Fusion Middleware.

    Original Description:

    New Features of OID in Fusion Middleware 11g

    Copyright

    © © All Rights Reserved

    Available Formats

    DOC, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document summarizes new features introduced in several releases of Oracle Internet Directory 11g, including 11g Release 1 (11.1.1.9.0), 11g Release 1 (11.1.1.7.0), 11g Release 1 (11.1.1.6.0), 11g Release 1 (11.1.1.4.0), and 11g Release 1 (11.1.1). Key new features include persistent search operations, enhanced logging, computed attributes, transaction support, shared entry caching, security enhancements, and integration with WebLogic Server and Fusion Middleware.

    Copyright:

    © All Rights Reserved
    Download as DOC, PDF, TXT or read online from Scribd
    Download as doc, pdf, or txt
    183 views7 pages

    New Features of OID in Fusion Middleware 11g

    Uploaded by

    Yakub Pasha
    The document summarizes new features introduced in several releases of Oracle Internet Directory 11g, including 11g Release 1 (11.1.1.9.0), 11g Release 1 (11.1.1.7.0), 11g Release 1 (11.1.1.6.0), 11g Release 1 (11.1.1.4.0), and 11g Release 1 (11.1.1). Key new features include persistent search operations, enhanced logging, computed attributes, transaction support, shared entry caching, security enhancements, and integration with WebLogic Server and Fusion Middleware.

    Copyright:

    © All Rights Reserved
    Download as DOC, PDF, TXT or read online from Scribd
    Download as doc, pdf, or txt
    You are on page 1of 7

    New Features Introduced with Oracle Internet

    Directory 11g Release 1 (11.1.1.9.0)

    Persistent Search Operations: A persistent search operation is an enhanced


    search that continues after the initial search results are returned by Oracle Internet
    Directory server to an LDAP client. After the initial search is finished, the
    connection to the server is kept alive until the client unbinds or abandons the
    operation. A persistent search operation allows a client to receive notifications if
    entries in the search scope are modified.

    Oracle Directory Services Manager (ODSM) Session Timeout: The ODSM


    session timeout default is now 5 minutes. You can configure a different value using
    the WebLogic Server Administration Console.

    Result Set and Metadata Cache Configuration: The


    new orclcachemaxsize configuration attribute allows you to specify the size of the
    result set and metadata caches to improve the performance of read and write
    operations from Oracle Internet Directory server to its Oracle Database.

    Enhanced Logging: The new orcltraceconndn and orcltraceconnip instancespecific configuration attributes allow you to specify logging based on a connection
    distinguished name (DN) and IP address, respectively.

    New DSA Configuration Attributes:


    o

    The orclblockdnip attribute causes Oracle Internet Directory server to


    reject any new connections and close any existing connections from an IP
    address.

    The orclmaxlatencylog attribute specifies a time in microseconds after


    which any Oracle Internet Directory server operations that exceed this time
    are logged to the alert log.

    Restricting Binding to the Server. The new bindAuthPriv attribute allows you
    to specify the users who can bind to Oracle Internet Directory server.

    Computed Attributes connectBy Interface:


    The orclComputedAttribute connectBy interface allows you to compute attributes
    by connecting attributes from two or more other entries.

    DIT View: You can create a DIT view, which is a virtual view or name space that
    shows entries from a different or source DIT.

    LDAP Replication Filter: Oracle Internet Directory server and the replication
    server support filtering of specific entries based on an LDAP filter string configured
    with theorclEntryExclusionFilter attribute in the replication agreement.

    New and Revised Troubleshooting Information: Change Log


    Partitioning: Oracle Internet Directory introduces the concept of partitioning of
    change log tables.
    New Instance-Specific Configuration Entry:
    o

    The orclskipspecialinfilter attribute evaluates whether Oracle Internet


    Directory should skip the processing of special characters specified in filter
    values during a search operation.

    Extended scope of specificationFilter in Collective Attributes: Oracle


    Internet Directory now allows you to define LDAP filters in the subtree specification.

    New Features Introduced with Oracle Internet


    Directory 11g Release 1 (11.1.1.7.0)

    Enhanced Performance Tuning:


    o

    The new optional catalog command IOT option causes an Index Organized
    Table (IOT) to be created for the specified attribute without creating an
    additional index. The IOT option improves both read and write performance for
    a normal LDAP operation and reduces the storage as well.

    Oracle Internet Directory server reports duplicate attribute values in


    the attr_uniqueness_log table. You can scan the attr_uniqueness_log table to
    determine and then cleanup the duplicate values.

    Diagnostics Improvements: You can specify that Oracle Internet Directory


    server calls OCIPing() to send keep alive messages to its Oracle Database. The
    frequency of these messages is determined by the
    new orclMaxTcpIdleConnTime attribute.Setting
    the orclMaxTcpIdleConnTime attribute to a value less than the timeout value of the
    firewall between Oracle Internet Directory server and the Oracle Database prevents
    the Database connection from being dropped.

    Support for orclMemberOf in Search Filters: orclMemberOf is a multivalued


    attribute containing the groups to which the entry belongs. You can
    now orclMemberOf in search filters.

    LDAP Replication Improvements: The data flow in LDAP replication consists of


    the apply phase with the apply queue only, and the transport phase with the
    transport queue is no longer used.

    Computed Attribute Support: The new orclComputedAttribute attribute


    provides a mechanism to dynamically compute a configurable attribute and its
    value based on one or more rules.

    Enable/Disable Entry Cache and Result Set Cache:


    The orclecacheenabled attribute allows you to enable and disable both the Entry
    Cache and the Result Set Cache.

    New Features Introduced with Oracle Internet


    Directory 11g Release 1 (11.1.1.6.0)

    Transaction Support: The Oracle Internet Directory SDK now supports


    transactions, as defined in RFC 5805

    Shared Entry Cache: The entry cache now resides in shared memory, so
    multiple Oracle Internet Directory server instances on the same host can share a
    cache. If the host is part of a cluster, all hosts are notified to remove an entry when
    it changes on one host. Not all search types are cached, only those that benefit
    from the performance improvement. Attributes for configuring the cache now
    reside in the DSA configuration entry..

    Autocatalog: A new autocatalog feature is enabled by default in fresh Release 1


    (11.1.1.6.0) installs. When this feature is enabled, Oracle Internet Directory
    automatically invokes the catalog command to index attributes when you search
    for them.
    If the autocatalog feature is not enabled, and you want to use previously
    uncataloged attributes in search filters, you must add them to the catalog entry, as
    in previous releases. You can now use ldapmodify instead of catalog to index an
    attribute. The ldapmodify command invokes catalog to perform the operation.

    DIT Masking: You can now restrict the DIT content that is exposed in an Oracle
    Internet Directory server instance. This enables you to present different views of
    the DIT to different users, depending on which instance they connect to.

    New Features Introduced with Oracle Internet


    Directory 11g Release 1 (11.1.1.4.0)

    Security Enhancements
    o

    AES encryption of sensitive attributes: The algorithm for encrypting


    sensitive attributes is now AES..

    Support for more SHA-2 variants: Several variants of the SHA-2 hashing
    algorithm are now available for protecting user passwords

    Account expiration based on period of inactivity: You can now expire


    an account based on user inactivity.

    Access control constrained by IP address: You can create ACIs with


    constraint on the IP address of the client.
    Oracle Directory Services Manager Capabilities
    o

    SSO Integration: You can configure ODSM to use Oracle Access Manager
    11g or Oracle Access Manager 10g for single sign on.

    Unlocking locked accounts: You can list and unlock locked accounts
    from ODSM..

    Importing entries from an LDIF file and exporting entries to an


    LDIF file: You can import and export from/to an LDIF file.

    Configurable session timeout: You can control the length of time before an
    inactive session times out.
    LDAP Protocol Features
    o

    Support for the "+" option: You can use this option to return
    operational attributes on a search..

    Support for collective attributes: You can configure an attribute that is


    common to multiple entries.

    Groups Features
    o

    Support for non-cached dynamic groups: Dynamic lists are similar to


    dynamic groups, but are not cached.

    Support for OrclMemberOf attribute: Members of some types of groups are


    automatically assigned a value for this attribute.
    Upgrade Requirement
    o

    Deleting a subtree: You can delete an entire subtree at once.

    Rolling Upgrade of Directory Replication Groups: If multimaster


    replication is configured in your existing Oracle Internet Directory
    environment, you must follow the procedure in Appendix Q, "Performing a
    Rolling Upgrade."

    Performance and Footprint Improvements


    o

    Improved performance: Performance enhancements have been made in


    LDAP add, LDAP search, and privilege group update.

    Reduced storage footprint: Certain multi valued attributes are now


    stored in one row.

    Automatic run of oidstats.sql: An administrator is no longer required to


    run oidstats.sql manually. OIDMON runs it, based on the number of updates
    in the database.

    New Features Introduced with Oracle


    Internet Directory 11g Release 1 (11.1.1)

    WebLogic Server Integration: Oracle Internet Directory in 11g Release 1


    (11.1.1) is a system component that can use the WebLogic Administrative Domain
    for management services.

    Fusion Middleware Control: You can manage Oracle Internet Directory by


    using a graphical user interface called Oracle Enterprise Manager Fusion
    Middleware Control

    Oracle Directory Services Manager: The old graphical user interface for
    managing directories, Oracle Directory Manager, has been replaced by this webbased administration tool. Use it to manage Oracle Internet Directory and Oracle
    Virtual Directory. You can invoke it directly or from Oracle Enterprise Manager
    Fusion Middleware Control.

    LDAP-Based Multimaster Replication: You can now use LDAP-based


    replication for multimaster directory replication groups. You no longer need Oracle
    Database Advanced Replication-based replication for this purpose. If you want to
    replicate Oracle Single Sign-On, however, you still must use Oracle Database
    Advanced Replication-based replication.

    Improved Replication Manageability: You can set up and manage LDAPbased replication by using the replication wizard in Oracle Enterprise Manager
    Fusion Middleware Control. A separate Replication page enables you to adjust
    attributes that control the replication server.

    Sizing and Tuning Wizard: You can obtain recommendations for tuning and
    sizing by running the Sizing and Tuning wizard in Oracle Enterprise Manager Fusion
    Middleware Control.

    Integration with Common Auditing Infrastructure: Oracle Internet Directory


    is now integrated with the Oracle Fusion Middleware common audit framework. You
    can configure auditing from the command line or by using Oracle Enterprise
    Manager Fusion Middleware Control.

    Improvements to Referential Integrity: Referential Integrity has been


    completely reimplemented. You can configure it from the command line or by using
    Oracle Enterprise Manager Fusion Middleware Control.

    Updates to Password Policy Controls and Error Messages: New controls


    and error messages were added to the LDAP API.

    Configuration Parameter Changes: Most configuration attributes for the LDAP


    server now reside in two entries. Instance-specific attributes are in the instancespecific configuration entry and shared attributes are in the DSA Configuration
    entry. You can manage most of these from the command line or by using Oracle
    Enterprise Manager Fusion Middleware Control or Oracle Directory Services
    Manager.

    Improvements to Attribute and Entry Alias Support: Oracle Internet


    Directory now supports several different options for dereferencing aliases in a
    search.

    Extensible Matching in Search Filters: Oracle Internet Directory now


    supports search filters of the form: attr:dn:=value. With this filter, dn attributes
    are considered part of the entry for search purposes. Oracle Internet Directory does
    not support extensible matching using matching rules specified in the filter.
    While Oracle Internet Directory supports extensible filters, ldapsearch and the
    Oracle LDAP API do not. You must use a different API, such as JNDI, to use this type
    of filter.

    Support for Oracle Single Sign-On and Oracle Delegated Administration


    Services 10g (10.1.4.3.0) or later: Oracle Fusion Middleware 11g Release 1
    (11.1.1) does not include Oracle Single Sign-On or Oracle Delegated Administration
    Services. Oracle Internet Directory 11g Release 1 (11.1.1), however, is compatible
    with Oracle Single Sign-On and Oracle Delegated Administration Services 10g
    (10.1.4.3.0) or later.

    You might also like