In this section we will create a schema user in the
database that will be used as sort of a proxy user that will enable
your LDAP users to authenticate against the database. Then we will map
this schema user to your LDAP users in OID to enable then to authenticate
against the database.
Login to the database using sqlplus as "sysdba".
Example:
# sqlplus /as sysdba
Next we will create our schema user which has permission
to create sessions against the database. In our example the user name
will be "guest".
Example:
SQL> create user guest identified globally;
Next we will grant the role "create session"
to the guest users.
SQL> grant create session to guest;
Now we need to configure the schema mappings for the
"guest" user we just created with the users in the OID server.
Start the Enterprise Security Manager from the command
prompt using the "esm" command.
Example:
# esm
On the screen that follows enter "cn=orcladmin",
the password for this OID user, the FQDN of the OID server and the port
number that OID is running on.
On the screen that follows navigate to "Realms
-> <your domain name> -> Enterprise Domains -> OracleDefaultDomain".
While "OracleDefaultDomain" is highlighted
select the "Database Schema Mapping" tab. Then click the "Add"
button.
On the screen that follows, navigate to the user repository
where your OID users are located. The directory entry field should contain
the DN of where your "Users" container in OID is located.
By selecting the "cn=Users" container, you
are enabling all users in this container to connect to the database.
Select the "Subtree Level" radio button.
In the "Schema" field enter the name of the
database schema user we created earlier in this section. In our example
this user name was "guest".
Click the "OK" button.
Back at the "Enterprise Security Manager"
screen click on the "Apply" button.