Integrating Enterprise User Security with Microsoft Active Directory

Enterprise users make use of Oracle Internet Directory, which is a part of the Oracle Identity Management infrastructure. If your organization uses a third party directory like Active Directory to store and manage user entries, then you can integrate it with Oracle Internet Directory to manage Enterprise User Security.

Kerberos authentication for enterprise users can make use of tickets issued by a kerberos Key Distribution Center (KDC) running on a Microsoft Windows domain controller.

This appendix lists the steps involved in integrating Enterprise User Security with Microsoft Active Directory using kerberos for authentication. It includes the following sections:

• Set Up Synchronization Between Active Directory and Oracle Internet Directory

• Set Up a Windows 2000 Domain Controller to Interoperate with Oracle Client

• Set Up Oracle Database to Interoperate with a Windows 2000 Domain Controller

• Set Up Oracle Database Client to Interoperate with a Windows 2000 KDC

• Obtain an Initial Ticket for the Client

• Configure Enterprise User Security for Kerberos Authentication