Catch me at UKOUG 2007 November 19, 2007
Posted by Manpreet Johal in General.add a comment
This year I got an opportunity to speak at UKOUG 2007 at one of my favorite technology i.e. AS Guard. Following are the session details:
Date: 05-Dec-2007
Time: 11:35 AM
Location: UKOUG 2007 at ICC Birmingham.
Topic: Design Disaster Recovery Site with OracleAS Guard 10g
Presentation Abstract:
OracleAS Guard 10g is a tool to design an effective disaster recovery site for OracleAS 10g applications.
This presentation will discuss general deployment topologies for OracleAS Guard and walk-through the setup process of Disaster Recovery Site using OracleAS Guard. Simplified failover, switchover and fallback scenarios using OracleAS Guard will be explained.
The presentation will also focus on the High Availability functionality that OracleAS 10g offers to DBAs and OracleAS Administrators and how this meets the business requirements.
Extending Oracle Identity Management to OS Users at Linux November 4, 2007
Posted by Manpreet Johal in Identity Management.add a comment
Oracle has added another component to Identity Management umbrella i.e. Oracle Authentication Services for Linux
Oracle has released preview of Oracle Authentication Services for Linux, which enables immediate cross-platform storage, management, and authentication of users using open standards, simplified deployment. This component is part of Oracle Identity Management platform, comprising underlying auditing and security features.
It consists of following major components:
- Pluggable Authentication Module (PAM): This is a standard OS module available on most Linux and Unix-based systems that support external authentication. It make use of pre-configured settings that can be customized, to avoid errors during installation.
- Oracle Internet Directory (OID): LDAP v3 directory server that leverages the security, scalability, and reliability of Oracle Database 10g to store users, groups, roles, and entitlements.
- Automation: Tool that configure both PAM and OID components, provide simplified use migration, and ensure strong default security between network endpoints.
Connectivity is performed between Linux systems and Oracle Internet Directory using secure SSL sessions. In addition to basic authentication, the integration ensures that existing user management tools and password change functionality work against the centralized directory service while at the same time centralizing password policy management and auditing of account changes.
Moreover, preview release if free, and can be downloaded at OTN.
Preview download contains:
- Oracle Internet Directory 10.1.4.2 RPM packaged for Linux. requires prior download of Oracle Database 10g Express Edition for Linux.
- Automation scripts for client side PAM configuration.
In order to migrate existing users and groups defined at OS level, you need to extract existing information into LDIF (LDAP Data Interchange Format) files using various free/open source scripts and tools available for that purpose e.g. passwd, shadow, and group information can be migrated using tools available at http://www.padl.com/OSS/MigrationTools.html
As part of Preview 2, Oracle Authentication Services for Linux also supports Active Directory via integration with Oracle Internet Directory component. By configuring External Authentication Plug-in, which is shipped with OID; Linux users can be authenticated against Active Directory.
More Information: http://www.oracle.com/technology/products/oid/oracleauthenticationservices.html
