OVD-EUS: Questions and Answers About Mapping Database Users, Roles to AD Users and Groups
By Mark Wilcox - CTO - Oracle Consulting Security-Oracle on Mar 24, 2011
Answer: There are two ways to deploy OVD-EUS. Option 1 - uses OID (or DSEE) to store the EUS metadata, thus the only attribute used in AD is the orclcommon attribute used to store the password hash (assuming using EUS password authentication). Option 2 - The EUS meta-data is stored in a branch explicitly created to store this data and the AD schema is extended to support this. Question: are any roles added to AD by default with the schema extension
Answer: No. Question: which oracle accounts are typically excluded from integration
Answer: In 10g database you cannot use sysdba users. In 11g any user can be used.