New blog about Oracle Unified Directory

A new & interesting technical blog covering Directory Services and Oracle Unified Directory is available at https://floblanc.wordpress.com/.

Today’s blog covers Enterprise Manager Cloud Control and EUSM support. To be bookmarked as the EUSM documentation is quite scarce !

 

Advertisements

Using EUSM to manage EUS mappings in OUD

By Sylvain Duloutre on Oct 17, 2013

EUSM is a command line tool that can be used to manage the EUS settings starting with the 11.1 release of Oracle. In the 11.1 release the tool is not yet documented in the Oracle EUS documentation, but this is planned for a coming release.

The same commands used by EUSM can be performed from the Database Console GUI or from Grid Control*.

For more details, search for the document ID 1085065.1on https://support.oracle.com/epmos/faces/DocumentDisplay?id=1085065.1.

The examples below don’t include all the EUSM options, only the options that are used by EUS.

EUSM is user friendly and intuitive. Typing eusm help <option> lists the parameters to be used for any of the available options. Here are the options related to connectivity with OUD :

ldap_host=”gnb.fr.oracle.com” – name of the OUD server.

ldap_port=1389 – nonSSL (SASL) port used for OUD connections.

ldap_user_dn=”cn=directory manager” – OUD administrator name
ldap_user_password=”welcome1″ – OUD administrator password

Find below common commands:

To List Enterprise roles in OUD

eusm listEnterpriseRoles domain_name=<Domain> realm_dn=<realm> ldap_host=<hostname> ldap_port=<port> ldap_user_dn=<oud administrator> ldap_user_password=<oud admin password>

To List Mappings

eusm listMappings domain_name=<Domain> realm_dn=<realm> ldap_host=<hostname> ldap_port=<port> ldap_user_dn=<oud admin> ldap_user_password=<oud admin password>

To List Enterprise Role Info

eusm listEnterpriseRoleInfo enterprise_role=<rdn of enterprise role> domain_name=<Domain> realm_dn=<realm> ldap_host=<hostname> ldap_port=<port> ldap_user_dn=”<oud admin>” ldap_user_password=<oud admin password>

To Create Enterprise Role

eusm createRole enterprise_role=<rdn of the enterprise role> domain_name=<Domain> realm_dn=<realm> ldap_host=<hostname> ldap_port=<port> ldap_user_dn=”<oud admin>” ldap_user_password=<oud admin password>

To Create User-Schema Mapping

eusm createMapping database_name=<SID of target database> realm_dn=”<realm>” map_type=<ENTRY/SUBTREE> map_dn=”<dn of enterprise user>” schema=”<name of the shared schema>” ldap_host=<oud hostname> ldap_port=<port> ldap_user_dn=”<oud admin>” ldap_user_password=”<oud admin password>”

To Create Proxy Permission

eusm createProxyPerm proxy_permission=<Name of the proxypermission> domain_name=<Domain> realm_dn=”<realm>” ldap_host=<hostname> ldap_port=<port> ldap_user_dn=”<oud admin>” ldap_user_password=<oud admin password>

To Grant Proxy permission to Proxy group

eusm grantProxyPerm proxy_permission=<Name of the proxy permission> domain_name=<Domain> realm_dn=”<realm>” ldap_host=<hostname> ldap_port=<port> ldap_user_dn=”<oud admin>” ldap_user_password=<password> group_dn=”<dn of the enterprise group>”

To Map proxy permission to proxy user in DB

eusm addTargetUser proxy_permission=<Name of the proxy permission> domain_name=<Domain> realm_dn=”<realm>” ldap_host=<hostname> ldap_port=<port> ldap_user_dn=”<oud admin>” ldap_user_password=<oud admin password> database_name=<SID of the target database> target_user=<target database user> dbuser=<Database user with DBA privileges> dbuser_password=<database user password> dbconnect_string=<database_host>:<port>:<DBSID>

Enterprise role to Global role mapping

eusm addGlobalRole enterprise_role=<rdn of the enterprise role> domain_name=<Domain> realm_dn=”<realm>” database_name=<SID of the target database> global_role=<name of the global role defined in the target database> dbuser=<database user> dbuser_password=<database user password> dbconnect_string=<database_host>:<port>:<DBSID> ldap_host=<oid_hostname> ldap_port=<port> ldap_user_dn=”<oud admin>” ldap_user_password=<oud admin password>