When it comes to synchronizing between Oracle Directory Server Enterprise Edition (ODSEE) and Oracle Unified Directory (OUD), what options are available and can be exercised?
Several options are available. You can use:
The OUD internal capability called the Replication
The synchronization tool, called the Directory Integration
Platform, which is a part of Oracle Directory Services Plus.
The manual export and import method.
Now, let's evaluate the pros and cons of each method.
Replication Gateway is the default out-of-the-box solution to perform the replication and include OUD instances in an existing ODSEE replication topology.
This feature came into existence, because it works at the
replication protocol level. The gateway performs the required
adaptation of replication protocols between ODSEE and OUD.
The main advantage of this feature is that it provides strong consistency
between the two types of directories. This fully leverages conflict
management implemented in the replication protocols to ensure that
changes are applied in a coherent and ordered manner under all circumstance. It does not
require specific modification on existing ODSEE production
instances, such as enabling retro changelog. Changes are
propagated at near speed of replication in both directions.
As full meta-data are replicated by the Replication gateway, it will also synchronize internal password policy states, ensuring proper account locking and optimal conflict resolution.
OUD replication gateway does not require any specific tool or
installation-specific procedure. It is installed like any OUD component and then managed like any other OUD
OUD Replication Gateway does not perform data adaptation between ODSEE
Using Directory Integration Platform as the synchronization tool.
This brings flexibility in remapping and
transformation between ODSEE and OUD.
However, you need to pay a price to use a tool (like DIP) to perform the
synchronization task. You need to enable the retro change
log to access the changes on the ODSEE side. This in turn has an impact on the disk , CPU usage and performances, which could be a serious
challenge for your existing ODSEE environment, if you have not
provisioned additional hardware and instances.
Using export and import method with standard directory administrative commands.
This seems very simple, but this
methodology cannot ensure an highly-available deployment with up-to-date entries on both sides.
This solution can be used if full
high availability with up-to-date data at any time is not needed. It is often used if data cleaning needs to take place to avoid
polluting a new environment with old unnecessary data.
Identity compliance projects don't have to be hard! The key to any successful project in IT is delivering value to the business quickly! It is critical to then leverage those early wins into larger wins for the organization. When I used to coach I likened this to walking up a staircase. McKinsey used the analogy to describe the approach successful companies took to manage successful growth. (take a look here)
Oracle Identity Analytics provides a set of tools that can help organizations take the first step up that staircase to Compliance quickly. The approach allows organizations to show value quickly and then build upon those early wins to build better security into the organization. This webcast tomorrow will give insight into how organizations can build in proper segregation of duties, 360 degree review's and proper attestation of roles. One customer of the product used to print out a conference room of paper and had his compliance auditors and business managers review the roles and access rights to meet compliance. Imagine if you had the tools to ensure you could make this process easier. Register today and find out how.
Next week, Nov. 9-11, the Identity Management Team travels down to Gartner Identity Access Management conference to showcase two of our latest releases DSEE 7 and Role Manager 5. Gartner IAM is a great event because it not only gather's together experienced practitioners in the identity management space but has a number of events that are small enough that you can have quality conversations about real problems. Last year, Verizon presented at this conference on the Directory and OpenSSO implementation that serves 50M users. The presentation is a great example of the proven expertise that Sun brings to Identity Management and the proven extranet scale our products can support---not a marketing benchmark.
Our team has taken a different approach to this even this year and we are participating in Gartner's Learning Lab's. Vendors, customer's and identity specialists are encouraged to come-by in a classroom style and learn about specific problem's Sun's product, partner's and customer's are doing to solve their identity business problems. This is crucial today as the cost of failure or doing nothing rises exponentially. The best way to ensure success is to learn from real-world implementations not marketing based slideware presentations. This is why we have assembled not just the product teams but partners and real customer's to share their experience in these "learning labs".
The other great thing about Gartner IAM is that there are usually a few different ways to combine great industry expertise and a little fun. On Tuesday, Nov. 10 at 9:00pm you can meet the Sun Identity team at the Hard Rock Rooftop bar for drinks and conversation. The first 50 people get a wristband for free drinks. Identity management isn't hard so come to the Hard Rock to find out how to make it easy!
Gartner IAM Sun Schedule
Monday, Nov 9th
12:40 - 1:05pm “Increase Speed &
Performance while reducing TCO with Sun Directory Server Enterprise
Edition” Speaker: Nick Wooler, Sr Product
Manager – Sun Microsystems
1:05 - 1:30pm “Changing the Rules of
the game; Raising the bar with Rule Life-cycle Management and
closed-loop remediation” Speaker: Neil Gandhi, Sr Product
Manager – Sun Microsystems
1:35 - 2:00pm "IAM Governance,
Risk and Compliance -- the future of IAM", Speaker: Sachin Nayyar, President -
2:05 - 2:30pm "Enterprise Single
Sign On for Sun Identity Management", Speaker: Stephane Fymat, VP of Strategy
and Product Management - Passlogix
12:30 - 2:30pm Mat Hamlin showcasing Identity
Tuesday, Nov 10th
12:10 - 12:35pm “Role based user
provisioning; using business roles for identity life-cycle management
and identity auditing”, Speaker: Mat Hamlin, Sr Product
Manager, Sun Microsystems
12:35 - 1:00pm “Three tough
challenges, one powerful solution: OpenSSO for web access management,
federation and Web services security”, Speaker: Daniel Raskin, Chief Identity
Strategist – Sun Microsystems
1:05 - 1:30pm "Privileged
Identity Risk Management: Mitigating the Insider Threat", Speaker: Richard Weeks, VP of Channels
and Business Development, Cyber-Ark
1:35 - 2:00pm "The WHO behind the
WHAT: Arcot Authentication and Sun OpenSSO Enterprise " Speaker: R 'Doc' Vaidhyanathan, Chief
Product Officer - Arcot
Yesterday, Neil Ghandi, Matt Hamlin, Etienne Remillon and Nick Wooler gave a quick overview of what is new in Directory Server Enterprise Edition 7 and Role Manager 5. Here are just a few of the great highlights that were discussed during the presentation. Of course, you can get the full video embeded below. Lastly, if you are interested in seeing more events like this you can go to the webinar site here.
You can download the slides here. You can download the video here.
Daniel Raskin, Senior Product Line Manager for OpenSSO, wrote a great blog today posting the slides and video recording
of a recent presentation where Damodaram Bashyam, Directory of IT, at Verizon Wireless at Gartner IAM in Orlando last Fall. The video below from Daniel's blog allows us all to hear about his deployment of OpenSSOand Directory Server.
It is an example of the great content that is presented at Gartner
and we hope you will join us for the next Gartner conference in London
on March 23-26.
It is a powerful example of the
talented engineers we have at Sun and the results of good partnerships
with customers like Verizon. Scalability and high availability are a
part of our DNA at Sun and as you can see from the video and
Damodaram's presentation we believe live case studies prove the value
of our product better than any controlled benchmark. Watch and listen:
Here is a quick overview of the performance statistics from the presentation. Download it here
As President-elect Obama announced his Energy Team yesterday, I was excited for two reasons. One, Steven Chu is a Californian from Lawrence Berkeley National Laboratory
and it is nice to see local citizens playing National and Global roles
improving our environment. Two, I am proud to work at Sun because a
large number of the energy innovators like Argonne Laboratory, which is
also a part of the Department of Energy, are using Sun's Software to
provide the backbone of innovation within these organizations.
also used OpenSSO Enterprise and Directory Server to reduce cost of
providing a web portal for their customers to get interact with their
organization. They reduced the use of paper and conserved resources
for our environment. You can read about the solution here.
Server Enterprise Edition is part of the Sun Java Identity Management
Suite. Both the Native Package installation and Compress Archive
installation versions of Directory Server Enterprise Edition are
covered by this statement.
These statements are only valid for Directory Server Enterprise Edition 6.1 and above.
Sun Java System Directory Server 6.0, 6.1, 6.2, Enterprise Edition
Date of Resolved Release
SA Document Body
Security Vulnerability in Sun Java System Directory Proxy Server
May Grant Unauthorized Administrative Access
vulnerability in the Sun Java System Directory Proxy Server may allow a
remote unprivileged user to gain unauthorized administrative access to
the server. This is caused by the server incorrectly classifying a
connection based on the "bind-dn" criteria, resulting in an incorrect
policy being applied.
2. Contributing Factors
This issue can occur in
the following releases for all platforms
(Solaris 8, 9, and 10 SPARC and x86 Platforms, Linux, Windows, and
Directory Server Enterprise Edition 6.0, 6.1 and 6.2
Note: Directory Proxy Server 5.2 is not impacted by this issue.
determine if the Directory
Server running on a system is affected,
the following command can be used:
If the output contains the version string 6.0, 6.1 or 6.2, the system
is affected by this issue.
There are no
predictable symptoms that would indicate this issue has been
There is no workaround for this issue. Please see the Resolution
This issue is addressed in the following releases:
DSEE 6.3 Native Package Versions:
Solaris 9 and 10 SPARC patch 125276-07 or
Solaris 9 x86 patch 125277-07 or
Solaris 10 x86 and x64 patch 125278-07 or
Linux patch 125309-07 or later
DSEE 6.3 PatchZIP
(Compressed Archive) versions:
Solaris 9 and 10 SPARC patch 126748-04 or
Solaris 9 x86 patch 126749-04 or later
Solaris 10 x86 and x64 patch 126750-04 or
Linux patch 126751-04 or later
Windows patch 126753-04 or later
HP-UX patch 126752-04 or
Note: The above
patches can be installed on any impacted release to upgrade it to
version 6.3, thereby resolving this issue.
For more information on the upgrade process please see the following:
Directory Server 6.3 Release Notes are available at:
Alert notification is being provided to you on
an "AS IS"
basis. This Sun Alert notification may contain information provided by
third parties. The issues described in this Sun Alert notification may
or may not impact your system(s). Sun makes no representations,
warranties, or guarantees as to the information contained herein. ANY
AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR
NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT YOU
ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT
OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN. This
Sun Alert notification contains Sun proprietary and confidential
information. It is being provided to you pursuant to the provisions of
your agreement to purchase services from Sun, or, if you do not have
notification may only be used for the purposes contemplated by these
Copyright 2000-2008 Sun Microsystems, Inc., 4150 Network Circle, Santa
Clara, CA 95054 U.S.A. All rights reserved. Attachments
This blog provides information regarding the Oracle Directory Server Enterprise Edition and Oracle Unified Directory products. Use this blog to get the latest breaking information regarding releases and updates plus other technical and non-technical information.