Thursday, June 14, 2012

LDAP Sync Configuration- OIM 11G

Once you install OIM along with the LDAP sync enabled :

1. Start WLST
cd $MW_HOME/oracle_common/common/bin
./wlst.sh
2. Connect to Admin Server
connect(‘weblogic’,'welcome1′,’t3://localhost:7001′)  — Here weblogic is admin user name of weblogic domain, localhost is server name on which Admin Server is running and 7001 is admin server port is running
3. To list adapters for OIM
listAdapters(contextName=’oim’)
You should see output like
_______
Adapter Name : oid1
Adapter Type : LDAP 
Adapter Name : CHANGELOG_oid1
Adapter Type : LDAP

_______

4.  To get adapter details for adapter oid1
 getAdapterDetails(adapterName=’oid1′, contextName=’oim’)
______
wls:/ohsdomain/domainRuntime> getAdapterDetails(adapterName=’oid1′, contextName=’oim’)
DETAILS OF ADAPTER :  oid1
Adapter Type                : LDAP
Name                        : oid
Virtual NameSpace           : dc=com
Remote NameSpace            : dc=com
LDAP Host                   : [localhost : 389]
Secure                      : false
Bind DN                     : cn=orcladmin
Pass Credentials            : Always
Max size of Connection Pool : 10
________
5. To modify BindDN to oimLDAP user created during OIM-OAM integration
Update username and password in adapter oid1
modifyLDAPAdapter(adapterName=’oid1′,attribute=’BindDN’, value=’cn=orcladminuser,cn=SystemUsers,dc=com’, contextName=’oim’)
modifyLDAPAdapter(adapterName=’oid1′,attribute=’BindPassword’, value=’asULikeIT′, contextName=’oim’)
Update username and password in adapter CHANGELOG_oid1
modifyLDAPAdapter(adapterName=’CHANGELOG_oid1′,attribute=’BindDN’, value=’cn=oimLDAP,cn=SystemUsers,dc=com’, contextName=’oim’)
modifyLDAPAdapter(adapterName=’CHANGELOG_oid1′,attribute=’BindPassword’, value=’welcome1′, contextName=’oim’)
 Note: Realm (Domain Name) in OID in above command is “dc=com” , change this value as per your setting.

For any help on the WLST commands just type
help('OracleLibOVDConfig').
 
This will list all the LDSP Sync related commands to manage the LDAP sync adapters. 
)

The following link will be very handy too:


No comments:

Post a Comment