Oracle Internet Directory Administrator's Guide -- Index

389 port, 3-5, 3-7, A-44, A-46, C-5

636 port, 3-5, 3-7, A-44, A-46, C-5

abstract object class type, 2-10

abstract object classes, 2-10

superclasses of, 6-4

top, 2-9

access

granting

by using command-line tools, 13-42

by using Oracle Directory Manager, 13-12

entry-level, by using command-line tools, 13-44

entry-level, by using Oracle Directory Manager, 13-38

items

content, 13-15

structural, 13-14

kinds, 13-10

level requirements for LDAP operations, 13-51

object, 13-7

operations, 13-10

rights, setting by using Oracle Directory Manager, 13-20, 13-35

selecting, by DN, 13-45

subject, 13-8

unspecified, 13-12, 13-35

violation event, 5-31

access control

and authorization, 2-13

conceptual discussion, 11-3

defined, 2-13

directive format. See ACI directive format

for agents, 30-5

for directory integration server, 30-4

in Oracle Directory Integration platform, 30-4

management constructs, 13-2

managing, 13-1

by using command-line tools, 13-42

by using Oracle Directory Manager, 13-12

overview, 1-9

policies

conflicting, 13-2

inheriting, 13-2

policy administration, overview, 13-2

prescriptive, 13-3

setting, by using wildcards, 13-44

access control information (ACI)

attributes, 11-3

components, 13-7

directives

format, 11-3

items

format, B-1

syntax, B-1

object of directives, 13-7

subject of directives, 13-8

access control lists (ACLs), 2-22, 11-3

directives, within entries, 13-3

evaluation

for groups, 13-50

precedence rules, 13-47

for groups, 13-50

how it works, 13-47

modification, 5-31

precedence

rules, 13-47

processing, 5-28

within subtrees, 13-3

access control policy points (ACPs), 13-2, 13-15

adding

by using ldapmodify, 13-43

by using Oracle Directory Manager, 4-8, 13-15

by using the ACP Creation Wizard of Oracle Directory Manager, 13-23

administering, by using Oracle Directory Manager, 4-11

configuring display of, in Oracle Directory Manager, 13-13

content access items, 13-15

creating by using ACP Creation Wizard, 13-23

Creation Wizard, 13-23

multiple, 13-2

structural access items, 13-14

viewing, 13-14

by using Oracle Directory Manager, 13-14, 13-15

viewing, by using Oracle Directory Manager, 13-14, 13-15

accessDirectiveMatch matching rule, C-11

ACI. See access control information (ACI)

ACPs. See access control policy points (ACPs)

active server instances

modifying configuration set entries in, 5-4

viewing, 5-4, 5-36

added_object_constraint filter, 13-43

added-object-constraint, in access control, 13-10

add.log, A-6

administration tools, 4-12, 7-13

bulk tools, 4-12

bulkdelete, A-33

bulkload, A-34

bulkmodify, A-36

Catalog Management, 4-13

command-line, 1-8, 4-11

ldapadd, 4-12, 7-13, A-4

ldapaddmt, A-6

ldapbind, A-8

ldapcompare, A-9

ldapdelete, 4-12, 7-13, A-11

ldapmoddn, 4-12, 7-14, A-13

ldapmodify, 4-12, 7-13, A-15

ldapmodifymt, 4-12, 7-13, A-20

ldapsearch, A-22

ldifwrite, A-38

OID Database Password Utility, 4-14

Oracle Directory Manager, 4-2

agens

uploading agent file, A-27

agent tools

ldapUploadAgentFile.sh, A-27

agents

log file location, 3-13

partner

deregistering, 29-23, 29-25

agreements, replication, 22-2

alternate server list

from the Oracle directory server, 21-4

from user input, 21-4

AlternateServers attribute, in failover, 21-4

ANALYZE function of DBMS_STATS package, 20-3

anonymous authentication, 4-4, 11-4

anonymous login, 4-3

Apache Web Server

used by Delegated Administration Service, 2-29

log file location, 9-8

verifying that it is running, 9-9

applications

enrollment in, for provisioning, 35-3

automatic, 35-3

manual, 35-3

application-specific repositories, migrating data from, I-1

Apply button, in Oracle Directory Manager, 4-7

architecture

Oracle Internet Directory, 2-1

ASR. See Oracle9i Replication

attribute information, kinds of, 2-5

attribute options, 2-7

adding

by using ldapmodify, 7-15

by using Oracle Directory Manager, 7-11

conceptual discussion, 2-7

deleting by using Oracle Directory Manager, 7-12, 7-15

language codes, 2-7

managing

by using command line tools, 7-15

by using Oracle Directory Manager, 7-11

modifying by using Oracle Directory Manager, 7-12

searching for by using ldapsearch, 7-16, A-25

attribute values, replacing, A-18

attribute-level conflicts, 22-8

attributes

adding, 6-16

by using ldapadd, A-4

by using ldapmodify, 6-29, 6-30

by using Oracle Directory Manager, 6-21, 6-24

concurrently, by using ldapaddmt, A-6

guidelines for, 6-16

to existing entries, A-4

AlternateServers, for failover, 21-4

as DNs, 7-6

as metadata in schema, 2-13

attribute options, 7-16

adding by using ldapmodify, 7-15

adding by using Oracle Directory Manager, 7-11

conceptual discussion, 2-7

deleting by using Oracle Directory Manager, 7-12, 7-15

managing by using command line tools, 7-15

managing by using Oracle Directory Manager, 7-11

modifying by using Oracle Directory Manager, 7-12

searching for by using ldapsearch, A-25

base schema

deleting, 6-17

modifying, 6-16

commonName, 2-6

creating by using Oracle Directory Manager, 4-8

deleting, 6-17

by using ldapmodify, A-18

guidelines for, 6-17

determined by object classes, 6-3

dropping indexes, 6-29

for which data exists

indexing, 6-32

for which no directory data exists

indexing, 6-31

in base schema, 6-16

in LDIF files, A-2

in top, 2-10

indexed, 6-10

viewing, 6-28

indexes, created by bulkload, 7-19

indexing, 6-28, 6-32

by using Catalog Management tool, 6-28

by using command-line tools, 6-31

by using Oracle Directory Manager, 6-28

when you create them, 6-28

inheritance of, 6-3, 6-10

jpegPhotos, 2-6, 7-14

kinds of information in, 2-5

making available for searches, 6-28

managing, 6-16

by using command-line tools, 6-29

by using Oracle Directory Manager, 6-17

overview, 6-16

managing by using command-line tools, 6-29

mandatory, 2-8, 6-3, 7-10

matching rules, 2-7

modifying

by using ldapmodify, 7-13

by using ldapmodifymt, 7-13

by using Oracle Directory Manager, 6-26, 7-12

concurrently, 4-12, 7-13

guidelines for, 6-16

rules for, 6-16

using ldapmodify, 6-29, 6-30

multivalued, 2-6, 13-3

converting to single-valued, 6-16

null values in, 6-3

objectclass, 5-30

objects associated with an ACI, 13-7

operational, 5-13

optional, 2-8, 6-3

options, 2-7

language codes., 2-7

orclauditlevel, 5-32

orclauditmessage, 5-30

orclauditoc, 5-29

orcleventtime, 5-29

orcleventtype, 5-29

orclopresult, 5-30

orclsequence, 5-29, 5-30

orcluserdn, 5-30

organization, 2-6

organizationalUnitName, 2-6

redefining mandatory, 6-4

ref, 7-20

removing from object classes, 6-5

rules

for adding, 6-16

for deleting, 6-17

for modifying, 6-16

searching for, by using Oracle Directory Manager, 6-19

single-valued, 2-6

converting to multivalued, 6-16

size of values, C-10

sn, 2-6

specifying as mandatory or optional, 6-3

surname, 2-6

syntax, 2-6

modifying, 6-16

syntax type

selecting, 6-33

syntaxes

cannot modify, 6-16

selecting, 6-33

system operational, 5-13

tab page in Oracle Directory Manager, 6-9

types, 2-4

values, 2-4

changing, 7-10

deleting, A-18

rules for changing, 7-10

size of, C-10

viewing, 7-6

audit level, 5-31

modifying, 5-33

setting, 5-32

by using ldapmodify, 5-33

by using Oracle Directory Manager, 5-32

audit log, 5-28

container object, 5-35

default configuration, 5-29

entries

in the DIT, position of, 5-30

position in DIT, 5-30

searching, 5-30

searching for, 5-33

searching for by using ldapsearch, 5-35

searching for by using Oracle Directory Manager, 5-33

structure, 5-29

viewing, 5-29

events

access violation, 5-31

ACL modification, 5-31

add, 5-32

adding, 5-32

bind, 5-31

deleting, 5-32

DSE modification, 5-31

modify, 5-32

modifyDN, 5-32

modifying, 5-32

replication login, 5-31

schema element, add/replace, 5-31

schema element, delete, 5-31

selected, 5-32

super user login, 5-31

user password modification, 5-32

purging, 5-35

queries, 5-29

sample, 5-31

schema elements, C-5

structure of entries, 5-29

using, 5-28

auditable events, 5-31

auditing selected events, 5-32

authenticated access, by using SSL, 1-9

authentication, 11-4

agent, 30-3

and Oracle directory integration server, 30-2

anonymous, 4-4, 11-4

certificate-based, 11-4

conceptual discussion, 11-4

defined, 2-13

direct

options, 11-4

in a typical directory operation, 2-22

indirect, 11-5

through a RADIUS server, 11-5

Kerberos, A-5, A-7, A-11

no SSL, C-6

non-SSL, 30-3

one-way SSL, C-6

parameters, C-6

password-based, 4-4, 11-4

PKI, 11-2

simple, 1-9, 4-4, 11-4

SSL

defined, 11-4

for Oracle Directory Manager, 4-6

mode, 30-3

no, 4-6, C-6

one-way, C-6

server only, 4-6

with ldapadd, A-6

with ldapaddmt, A-8

with ldapbind, A-9

with ldapmodify, A-16

with ldapmodifymt, A-21

strong, 11-4

three levels, 1-9

through a middle tier, 11-5

two-way SSL, C-6

authorization, 2-13, 11-2, 30-4

automated resolution of conflicts, 22-8

auxiliary object classes, 2-11, 6-4

availability, high, 21-7

average latency, 20-2

backup and recovery strategies, 14-7

backup_oid.sh, E-2

balancing tablespaces, 20-9

base schema

attributes, 6-16

deleting, 6-17

modifying, 6-16

object classes

modifying, 6-5

base search, 7-3

batching line-mode commands, 6-14

Begins With filter, in Oracle Directory Manager, 6-7

bind event, 5-31

bind mode, 13-10

binding, 2-22

bitStringMatch matching rule, C-11

bootstrapping, 31-1

a connected directory from Oracle Internet Directory, 31-4

Oracle Internet Directory from a connected directory, 31-2

Oracle Internet Directory from Oracle HR, 32-19

BSTAT/ESTAT scripts, 20-8

buffer caches, size, 20-8

bulk loading failure, 7-19

bulk tools, 4-12

syntax, A-33

bulkdelete, 4-13, 7-19, A-33

and Globalization Support, 8-10

syntax, A-33

bulkload, 4-13, 7-18, 7-19, A-34

and Globalization Support, 8-8

check mode, performing on LDIF files, F-4

creating indexes, 7-19

.dat files, 7-18

generating input files, 7-18

-load option, 7-19

log file location, 3-13

syntax, A-34

bulkmodify, 4-13

and Globalization Support, 8-10

LDIF file-based modification, A-36

syntax, A-36

C API, 2-21

C:\ORAWIN95, defined, l

Cancel button, in Oracle Directory Manager, 4-7

capacity planning, 14-8, 19-1

I/O subsystem, 19-6

network requirements, 19-14

overview, 19-2

caseExactIA5Match matching rule, C-11

caseExactMatch matching rule, C-11

caseIgnoreIA5Match matching rule, C-11

caseIgnoreListMatch matching rule, C-11

caseIgnoreMatch matching rule, C-11

caseIgnoreOrderingMatch matching rule, C-11

Catalog Management Tool

log file location, 3-13

Catalog Management tool, 4-13, 6-28, 6-32

syntax, A-39

cataloged attributes

orcleventtype, 5-29

orcluserdn, 5-30

catalog.sh

log file location, 3-13

catalog.sh. See Catalog Management tool.

certificate authorities, 11-4

certificate-based authentication, 11-4

certificates, 11-4, C-6

managing, D-10

user, D-10

change log

object store, and Oracle metadirectory solution, 34-2

used by Oracle Directory Provisioning Integration Service, 35-4

change log interface

IETF, 28-10

Oracle proprietary, 28-10

change log life parameter, modifying, 23-16

change log purging, 22-6

change number-based, 22-6

time-based, 22-6

change logging, 3-5, A-43

change logs, 2-24, 22-2

change number-based purging, 22-6

flag, 3-4

toggling, 3-4

in replication, 1-9, 22-6

purging, 22-6

change number-based, 22-6, 23-14

methods, 22-6

time-based, 22-6, 23-14, 23-15

time-based purging, 22-6

change number-based purging, 22-6

change retry count, setting, 23-15

change types, in ldapmodify input files, A-17

changeLog attribute, C-4

changeLogEntry attribute, C-4

changeNumber attribute, C-4

changes

moving from the human intervention queue into the purge queue, A-49

moving from the human intervention queue into the retry queue, A-49

changeStatus attribute, C-4

changeStatusEntry attribute, C-4

changetype attribute, C-4

add, A-17

delete, A-18

modify, A-17

modrdn, A-18

cipher suites

SSL, 12-2

SSL, supported, 12-2

SSL_RSA_WITH_3DES_EDE_CBC_SHA, 12-2

SSL_RSA_WITH_NULL_MD5, 12-2

SSL_RSA_WITH_NULL_SHA, 12-2

SSL_RSA_WITH_RC4_128_SHA, 12-2

clients, failover options on, 21-4

cluster manager, 26-2

clusters

configuring failover in, 25-4

definition, 26-2

directory and, 13

hardware, 25-3

cn attribute, 2-6

cold backups, 24-1

command-line tools, 1-8

adding configuration set entries, 2-21, 7-13

Catalog Management Tool, 6-28

comparing attribute values, 7-13

for managing entries, 7-13

indexing, 6-28, 6-32

ldapadd, 4-12, 7-13, A-4

ldapaddmt, 4-12, 7-13, A-6

ldapbind, A-8

ldapcompare, A-9

ldapcreateConn.sh, A-27

ldapdelete, 4-12, 7-13, A-11

ldapmoddn, 4-12, 7-14, A-13

ldapmodify, 4-12, 7-13, A-15

ldapmodifymt, 4-12, 7-13, A-20

ldapsearch, A-22

ldapUploadAgentFile.sh, A-27

managing

attributes, 6-29

entries, 7-13

modifying configuration set entries, 7-13

overview, 4-11

setting Globalization Support, 8-5

syntax, A-4

commonName attribute, 2-6

comparing

attribute values, 7-13

entries, 4-12, 7-13

two objects, 4-8

components

of a directory server, 2-16

concurrent database connections, 20-11, C-5

configNLDAP.ora, 24-9

configuration parameters

modifying, 2-21

Oracle directory replication server

location, 23-13

configuration set entries, 2-21

adding, 2-21, 5-2, 5-11

by using command line tools, 7-13

by using command-line tools, 2-21

by using Oracle Directory Manager, 5-4

changing, 5-12

database connections, C-5

debug level, C-5

deleting, 5-2

by using ldapmodify, 5-12

by using Oracle Directory Manager, 5-4, 5-10

directory server processes, C-5

disabling SSL, C-6

for replication server, 23-13

LDIF files, 5-11

managing, 4-17, 5-2

by using command-line tools, 5-11

by using Oracle Directory Manager, 5-4

in Oracle Directory Integration platform, 29-7

preliminary considerations, 5-2

modifying, 2-21, 3-8, 5-2, A-47

by using command line tools, 7-13

by using ldapmodify, 5-12

by using Oracle Directory Manager, 5-4, 5-8

in an active server instance, 5-4

multiple, 12-3

orcldebuglevel, C-5

orclmaxcc, C-5

orclserverprocs, C-5

orclssl authentication, C-6

orclsslenable, C-6

orclsslport, C-5

orclsslwalletpasswd, C-6

orclsslwalleturl, C-6

overriding user-specified, 3-8, A-47

SSL parameters in, 12-3

starting directory servers without using, 3-9

using different, 5-2

viewing, 5-4

configuration set location, 5-14

configuration sets. See configuration set entries

conflict resolution, in replication, 22-7

conflicting access control policies, 13-2

precedence

rules for resolving, 13-2

conflicts, replication

attribute-level, 22-8

automated resolution of, 22-8

entry-level, 22-7

manual resolution of, 23-29

resolution, 13-47, 22-7

resolving manually, 23-29

typical causes of, 22-8

Connect/Disconnect button in Oracle Directory Manager, 4-9

connecting

to a directory server, 4-3, 4-17

in a typical directory operation, 2-22

to additional directory servers, 4-10

to multiple directory servers, 4-10

connection

management, 5-28

pooling, 1-9

redirection, 21-9

hardware-based, 21-7

network-level, 21-6

software-based, 21-7

connectors, 29-1

configuration information, 29-8

registering, 29-5

connect-time failover, 26-2

constraints, object classes, 2-11

consumer servers, 2-23

content access items, 13-40

access control points, 13-15

of an existing ACP, 13-35

specifying for a specific entry, 13-29

control, access, 1-9, 13-1

converting

auxiliary object classes, 6-4

directory data to LDIF, 7-19

structural object classes, 6-5

CPUs

configuration, 19-15

in capacity planning, 19-2

power required for various deployment scenarios, 14-9

processing power, 19-15

requirements, 19-15, 19-16

detailed calculations, 19-16

in capacity planning, 19-15

tuning, 20-4

tuning for Oracle foreground processes, 20-6

usage, 14-11

usage tuning, 20-4

when to tune, 20-4

Create button, in Oracle Directory Manager, 4-9

Create Entry menu item, in Oracle Directory Manager, 4-8

Create Like

adding entries using templates, 7-7

button, in Oracle Directory Manager, 4-9, 7-7

operation, by using Oracle Directory Manager, 4-7

createTimestamp attribute, 2-5, F-3

optional in top, 2-10

creating an integration profile, A-27

creatorsName attribute, 2-5, F-3

optional attribute in top, 2-10

daemons, 3-2

.dat files, generated by bulkload, 7-18

data integrity, 2-13, 2-14, 11-2, 30-5

data migration process, F-2

data privacy, 2-13, 11-2, 30-6

by using SSL, 1-9

data, updating by using Oracle Directory Manager, 4-9

database

block buffers parameter, 20-10

block size parameter, 20-10

cache size, 14-10

connections, 2-20

concurrent, 20-11, C-5

pooling, 1-9

dedicated for directory, 2-18

password, changing, 5-36

server, 1-6

server error, H-2

tuning, 20-10

DB_BLOCK_BUFFERS, 20-8

DBMS_STATS package, 20-3

debug logging levels, 5-28, C-5

setting, 5-27

by using OID Control Utility, 5-27

by using Oracle Directory Manager, 5-27

by using the OID Control Utility, 5-27

setting for directory integration server, 29-13

debugging

enabling all, 5-28

packet handling, 5-28

default knowledge references (referrals)

configuring, 7-21

default port, 4-3

number, 3-5, 3-7, A-44, A-46

Delegated Administration Service, 2-29

and Single Sign-On, 9-9

Apache Web server

log file location, 9-8

architecture, 9-4, 9-6

components, 9-4, 9-6

HTTP server, 9-4

in indirect authentication of end users, 11-5

installing and configuring, 9-8

Java servlets, 9-4

log file location, 9-8

verifying that it is running, 9-10

Delete button, in Oracle Directory Manager, 4-9

deployment

considerations, 14-1

CPU power, 14-9

failover, 14-7

replication, 14-6

tuning, 14-11

examples, 21-9

partitioning, 14-5

deregistering a directory, 34-7

DES40 encryption, 11-2

descriptions of object classes, 6-7

directories

access control, 1-9, 13-1

application-specific, 2-29

as read-focused, 1-3

contrasted to relational databases, 1-2

database listener, 23-6

distributed, 2-22

entry naming, 14-3

expanding role of, 1-2, 14-2

location-independent, 1-3

NOS, 14-2, 14-3

partitioned, 2-25

password, changing, 5-18

read-focused, 1-3

replication groups (DRGs), 22-2, 23-2

and replication agreements, 22-2

configuring, 23-2

establishing, 23-2

installing, 23-2

schema, 2-13

managing, 6-1

overview, 6-2

special purpose, 1-4

directory

information tree (DIT)

browsing, 7-3

registration, 34-3

directory information tree (DIT), 2-2

audit log entries in, 5-30

hierarchy and structure, 14-3

organizing, 14-3

organizing to reflect data ownership boundaries, 14-3

directory integration profiles, 29-5

directory integration server

and configuration set entries, 29-4

LDAP connections, 29-4

log file location, 3-13

registering, 29-2

registration tool, 29-2

restarting, 29-12

runtime information, 29-15

starting, 29-7

stopping, 29-11

viewing information, 29-15

directory integration toolkit, 28-10

directory replication groups (DRGs), 22-2

directory replication server

log file location, 3-13

directory replication servers, 1-7, 2-18, 2-19

configuration set entries, 23-13

in a Real Application Clusters environment, 26-13

starting, 3-6, A-45, A-46

stopping, 3-7, A-46

directory schema, 2-13

managing, 6-1

directory server

log file location, 3-13

modifying, 4-4

directory servers, 1-7, 2-20

adding, 4-4

as both suppliers and consumers, 22-6

changing parameters in an active instance, 5-4

configuration set entries, 5-2

connecting to, 4-3, 4-4, 4-10, 4-17

by using Oracle Directory Manager, 4-9

in a typical directory operation, 2-22

connecting to additional, 4-10

connecting to one on a different host, 4-4

connecting to, by using Oracle Directory Manager, 4-7

debug level, C-5

disconnecting, by using Oracle Directory Manager, 4-7, 4-10

in multi-master replication, 22-6

in normal mode, C-5

in replicated environment, 22-6

in secure mode, C-5

modifying configuration set entries, 5-12

multimaster replication between, 1-9

multithreaded, 1-8

parameters

configuring, 4-17

configuring by using command-line tools, 4-17

processes, 2-20, C-5

multiple, 2-20

restarting, 3-7, 5-4, A-46

running, 3-3

specifying host, 4-4

start failure, 3-9

starting

mandatory arguments, 3-5, A-44

syntax, 3-4, A-43

with default configuration, 3-9, A-47

without configuration sets, 3-9

stopping, 3-5, A-44

terminating, 4-17

using different configuration set entries, 5-2

directory usage patterns, learning, 19-3

DirectoryReplicationGroupDSAs, 23-17

Disconnect

button, in Oracle Directory Manager, 4-7

menu item, in Oracle Directory Manager, 4-7

disconnecting from directory servers, 4-10

disk space requirements, 19-7

detailed calculations of, 19-8

estimating, 19-7

disk tuning, 20-8

disk usage, 14-12

displaying

a directory entry, 7-2

a subtree, 7-2

distinguished names, 2-2

as attributes, 7-6

components of, 2-3

format, 2-3

in LDIF files, A-2

modifying, 4-12, 7-14

by using command line tools, 7-13

by using ldapmoddn, 4-12, 7-14

distinguishedNameMatch matching rule, C-11

distributed directories, 2-22, 2-25

partitioned, 2-22

partitions and replicas, 14-4

replicated, 2-22

DIT. See directory information tree (DIT)

DNS (Domain Name System), 14-3

DNs. See distinguished names.

Drop Index

button, 4-9

menu item, 4-8

DSA, environment setting, 24-2

DSE modification event, 5-31

duration of a search, specifying, 5-34, 7-3

-E argument in Globalization Support, 8-6

Edit

button, in Oracle Directory Manager, 4-9

menu item, in Oracle Directory Manager, 4-7

encryption

DES40, 11-2

levels available in Oracle Internet Directory, 11-2

password, 11-7

passwords

UNIX crypt, 17-3, 17-4

RC4_40, 11-2

Ends With filter, in Oracle Directory Manager, 6-7

entity component, in access control, 13-9

entries

adding

by copying an existing entry, 7-7

by using bulkload, A-34

by using ldapadd, 4-12, 7-13, A-4

by using ldapaddmt, 7-13, A-6

by using Oracle Directory Manager, 7-6

concurrently, 4-12, 7-13

from other applications, A-34

mandatory attributes, 7-7

optional attributes, 7-7

requires write access to parents, 7-6

using ldapaddmt, 4-12

assigning object classes to, 6-3

attributes, viewing, 7-6

audit log, 5-29

searching, 5-30

comparing, by using ldapcompare, 4-12, 7-13

conceptual discussion, 2-2

creating by using Oracle Directory Manager, 4-8

deleting

by using ldapdelete, 4-12, 7-13, A-11

by using ldapmodify, A-18

large numbers, 7-19

displaying, 7-2

distinguished names of, 2-2

group, 2-6

inheriting attributes, 6-3

loading, 6-3

locating by using distinguished names, 2-3

managing, 7-1

by using bulk tools, 7-16

by using command line tools, 7-13

by using Oracle Directory Manager, 4-11, 7-2

many, modifying, 7-19

modifying

by using ldapmodify, A-15

by using Oracle Directory Manager, 7-10

concurrently, by using ldapmodifymt, A-20

large numbers, A-36

LDAP conventions, 7-10

rules, 7-10

naming, 2-2, 14-3

objects associated with an ACI, 13-7

parent, 6-3

restricting the kinds users can add, 13-17, 13-25, 13-33, 13-43

root of search, 7-2

rules for changing, 7-10

searching

base level, 7-3

by using ldapsearch, A-22, A-27

by using Oracle Directory Manager, 7-2

one-level, 7-3

specifying search depth, 7-3

subtree level, 7-3

selecting by DN, 13-45

selecting superclass, 7-6

specific, granting access to, 13-19, 13-22, 13-27, 13-29, 13-34, 13-37

superclasses, selecting, 7-6

user

adding, by using ldapadd, 7-14

adding, by using Oracle Directory Manager, 7-8

modifying, by using ldapmodify, 7-15

modifying, by using Oracle Directory Manager, 7-10

with attribute options

adding by using ldapmodify, 7-15

adding by using Oracle Directory Manager, 7-11

deleting by using Oracle Directory Manager, 7-12, 7-15

managing by using command line tools, 7-15

managing by using Oracle Directory Manager, 7-11

modifying by using Oracle Directory Manager, 7-12

searching for by using ldapsearch, 7-16

Entry Caching

cache, entry, 20-12

entry caching

enabling, 5-15, 5-16

entry-level access, granting by using Oracle Directory Manager, 13-38

entry-level conflicts, replication, 22-7

environment variables, NLS_LANG, 8-2

error messages, H-6

additional, H-6

administration, H-2

database server, H-2

directory server, due to schema modifications, H-2

installation, H-2

provisioning, 35-14

returned from Oracle directory server, H-2

standard, H-2

events, auditable, 5-31

Exact Match filter, in Oracle Directory Manager, 5-34, 6-8, 7-4

exclusionary access to objects, granting, 13-50

existing ACPs and their ACI directives, modifying, 13-31

Exit menu item, in Oracle Directory Manager, 4-7

extensibility, in LDAP Version 3, 1-5

extensibleObject object class, 7-19

failover, 1-9, 21-1, 21-2

AlternateServers attribute, 21-4

basic high availability configuration, 26-3

capabilities in Oracle Internet Directory, 21-7

connect-time, 26-2

considerations in deployment, 14-7

default n-node configuration, 26-7

in cluster configurations, 25-1

in clustered environment, how it works, 25-7

in Real Application Clusters environment, 26-1

network-level, 21-6

options in private network infrastructure, 21-8

options in public network infrastructure, 21-5

options on clients, 21-4

failure recognition and recovery. See failover.

failure to apply changes, 2-24

failure tolerance, and replication, 14-7

fault tolerance mechanisms, 21-3

features, new

in Oracle Internet Directory, Release 2.1.1, lxi

in Oracle Internet Directory, Release 3.0.1, lix

File menu, in Oracle Directory Manager, 4-7

file naming conventions, 29-18

files

location, 29-18

filters

Begins With, 6-7

Ends With, 6-7

Exact Match, 6-8, 7-4

Greater or Equal, 6-8, 7-4

IETF-compliant, A-22

in attribute searches, 6-20

in searches, 2-21, 6-7

in Oracle Directory Manager, 6-7

ldapsearch, A-24

Less or Equal, 6-8, 7-4

not null, 6-8

Present, Oracle Directory Manager, 5-34, 7-4

Find Attributes button, in Oracle Directory Manager, 6-19

Find Objects button, in Oracle Directory Manager, 4-9, 6-6

formats, of distinguished names, 2-3

function calls, tracing, 5-28

garbage collection

in replication, 22-6, 23-14

interval, modifying, 23-15

generalizedTimeMatch matching rule, C-11

generalizedTimeOrderingMatch matching rule, C-11

Globalization Support, 2-14

bulkdelete, 8-10

bulkload, 8-8

bulkmodify, 8-10

command-line tools, 8-5

Java clients, 2-15

ldapadd, 8-7

ldapaddmt, 8-7

ldapbind, 8-7

ldapcompare, 8-7

ldapdelete, 8-7

ldapmoddn, 8-7

ldapmodify, 8-7

ldapmodifymt, 8-7

ldapsearch, 8-7

ldifwrite, 8-9

managing, 8-1

settings for Oracle Internet Directory, 8-2

using with Bulk Tools, 8-8

with bulkdelete, 8-10

with bulkload, 8-8

with bulkmodify, 8-10

with command-line tools, 8-5

with LDIF Files, 8-3

with ldifwrite, 8-9

Greater or Equal filter, in Oracle Directory Manager, 5-34, 6-8, 7-4

group entries, 2-6

adding, 7-8

creating

by using ldapmodify, A-17

by using Oracle Directory Manager, 7-8

groupOfNames object class, 7-8, 7-9

groupOfUniqueNames object class, 7-8

groups

privilege, 13-3

guest users

definition, 5-18

managing, 5-18

by using ldapmodify, 5-20

by using Oracle Directory Manager, 5-19

user name and password, 5-18

guidelines

for adding attributes, 6-16

for deleting attributes, 6-17

for modifying attributes, 6-16

hardware-based connection redirection, 21-7

hashing

passwords to the directory, 17-2

protection

MD4, 17-2

heavy trace debugging, 5-28

Help

button, in Oracle Directory Manager, 4-10

menu item, in Oracle Directory Manager, 4-8

high availability, 1-9, 14-7, 21-2

and multimaster replication, 21-7

capabilities in Oracle Internet Directory, 21-7

deployment, examples, 21-9

of Oracle Internet Directory, 21-1

HTTP Server

used by Delegated Administration Service, 9-4

Human Intervention Queue Manipulation Tool, 4-15, 23-31

syntax, A-48

IETF

drafts, enforced by Oracle Internet Directory, C-3

LDAP approval

RFCs enforced by Oracle Internet Directory, C-2

standard change log interface, 28-10

imple, 13-19, 13-22, 13-29, 13-34, 13-37

indexed attributes

displayed in Oracle Directory Manager, 6-10

locations, 5-14

orcleventtype, 5-29

orcluserdn, 5-30

viewing, 6-28

indexes

created by bulkload, 7-19

dropping from attributes, 5-30, 6-29

by using Oracle Directory Manager, 6-29

inheritance, 2-9

and access control policies, 13-2

from superclasses, 6-3, 6-10

of attributes, 6-10

initNLDAP.ora, 24-9

input file, creating, 5-11

installation errors, H-2

insufficient memory, 20-8

IntegerMatch matching rule, C-11, C-12

integration profiles, 29-1

creating, A-27

intelligent client failover, 14-7

intelligent network level failover, 14-7

intermediate template file

in migration from application-specific repositories, I-2

internationalization, and LDAP, 8-1

Internet Engineering Task Force (IETF). See IETF.

I/O subsystem, 19-6

in capacity planning, 19-2, 19-6

requirements, 19-6

sizing, 19-6

I/O throughput, maximizing, 19-7

iostat utility, 20-2

IP address takeover (IPAT), 21-8

Java clients, Globalization Support and, 2-15

Java Native Interface, 2-21

Java servlets, used by Delegated Administration Service, 9-4

log file location, 9-8

JPEG images, adding with ldapadd, A-6

jpegPhoto attribute, 2-6, 7-14

Kerberos authentication, A-5, A-7, A-11

knowledge references, 2-26, 14-4, 14-5

overview, 2-26

restricting permissions for managing, 2-27

superior, 2-26

knowledge references (referrals)

configuring, 7-19

default

configuring, 7-21

managing, 7-19

smart

configuring, 7-20

language codes, as attribute options, 2-7

latency, average, 20-2

LDAP

add or modify performance, 20-13

and internationalization, 2-14

and simplified directory management, 1-4

attributes, common, 2-6

conventions, for modifying entries, 7-10

extensibility, 1-5

IETF approval, 1-5

search filters, IETF-compliant, A-22

search performance, 20-12

security, 1-5

server instances, 2-18, 2-19, 2-20

starting, 3-4, A-43

servers

managing, 5-1

multithreaded, 1-8

syntax, C-7

enforced by Oracle Internet Directory, C-7

recognized by Oracle Internet Directory, C-8, C-9

Transport Layer Security, 1-5

Version 3, 1-5

LDAP Data Interchange Format (LDIF), 4-11, A-2

syntax, A-2

when using bulkload, A-34

LDAP dispatcher

log file location, 3-13

ldapadd, 4-12, 7-13, A-4

adding entries, A-4

adding JPEG images, A-6

and Globalization Support, 8-7

LDIF files in, A-5

syntax, A-4

ldapaddmt, 4-12, 7-13, A-6

adding entries concurrently, A-6

and Globalization Support, 8-7

LDIF files in, A-6

log, A-6

syntax, A-6

ldapbind, A-8

and Globalization Support, 8-7

syntax, A-8

ldapbind operation, 11-4

ldapcompare, 4-12, 7-13, A-9

and Globalization Support, 8-7

syntax, A-9

ldapcreateConn.sh

syntax, A-27

ldapdelete, 4-12, 7-13, A-11

and Globalization Support, 8-7

deleting entries, A-11

syntax, A-11

ldapmoddn, 4-12, 7-14, A-13

and Globalization Support, 8-7

syntax, A-13

ldapmodify, 4-12, 7-13, A-15

adding ACPs, 13-43

adding attributes, 6-29, 6-30

adding entry-level ACIs, 13-44

adding object classes, 6-14

adding values to multivalued attributes, A-17

and Globalization Support, 8-7

change types, A-17

changing audit level, 5-33

creating group entries, A-17

deleting entries, A-18

LDIF files in, A-15

modifying attributes, 6-29, 6-30

modifying object classes, 6-14

replacing attribute values, A-18

syntax, A-15

ldapmodifymt, 4-12, 7-13, A-20

and Globalization Support, 8-7

by using, A-20

LDIF files in, A-20

multithreaded processing, A-21

syntax, A-20

ldaprepl.sh, 23-8

ldapsearch, A-22, A-27

and Globalization Support, 8-7

filters, A-24

querying audit log, 5-29

syntax, A-22

ldapUploadAgentFile.sh

syntax, A-27

LDIF

converting directory data to, 7-19

file-based modification, not supported by bulkmodify, A-36

files

creating, 5-11

for adding configuration set entries, 5-11

importing, by using bulkload, 7-17

in ldapadd commands, A-5

in ldapaddmt commands, A-6

in ldapmodify commands, A-15

in ldapmodifymt commands, A-20

referencing in commands, 5-12

removing proprietary data from in migration, F-3

formatting notes, A-3

formatting rules, A-3

syntax, A-2

using, 4-11, A-2

ldifwrite, 4-13, A-38

and Globalization Support, 8-9

syntax, A-38

Less or Equal filter, 5-34, 6-8, 7-4

line-mode commands, batching, 6-14

listener, for directory database, 2-18, 2-20

restarting, 23-6

stopping, 23-6

listener.ora, 23-6, 24-7

load balancing

and replication, 14-6

network level, 21-5

-load option, in bulkload, 7-19

LOAD_BALANCE parameter, Oracle Net Services, 26-7

location-independence, of directories, 1-3

log file locations, 3-13

log files, Delegated Administration Service, 9-8

logical disks, 20-9

logical hosts, in clustered environments, 25-2

login

anonymous, 4-3

superuser, 4-3

user, 4-3

loose consistency model of replication, 14-6

LSNRCTL utility, 23-6

managing

directory schema, 6-1

mandatory attributes, 2-8, 6-3

adding to existing object classes, 6-5

adding to object classes in use, 7-10

entering values for, 7-7

in object classes, 6-7

redefining, 6-4

manual resolution of conflicts, 23-29

mapping rules, 29-9

Mapping Rules Format, 29-9

master definition site (MDS), 23-3

designating, 23-3

matching rules, C-11

accessDirectiveMatch, C-11

as metadata in schema, 2-13

attribute, 2-7

bitStringMatch, C-11

cannot add to subSchemaSubentry, 2-13

caseExactIA5Match, C-11

caseExactMatch, C-11

caseIgnoreIA5Match, C-11

caseIgnoreListMatch, C-11

caseIgnoreMatch, C-11

caseIgnoreOrderingMatch, C-11

distinguishedNameMatch, C-11

generalizedTimeMatch, C-11

generalizedTimeOrderingMatch, C-11

IntegerMatch, C-11, C-12

numericStringMatch, C-11, C-12

objectIdentifierFirstComponentMatch, C-11

ObjectIdentifierMatch, C-11

OctetStringMatch, C-11

presentationAddressMatch, C-11

protocolInformationMatch, C-11

recognized by Oracle Internet Directory, C-11

stored in schema, 2-13

tab in Oracle Directory Manager, 6-9

telephoneNumberMatch, C-11, C-12

uniqueMemberMatch, C-11

maxextents, 23-6

maximum amount of time for searches, setting, 5-21

maximum number of entries returned in searches, setting, 5-21

MD4, 5-14, 5-16, 17-3, F-4

MD5, 5-14, 5-16, 17-3, F-4

for password encryption, 17-3, 17-4

member attribute, 7-8

memory

in capacity planning, 19-2

insufficient, 20-8

physical, 19-13

required, 14-10

requirements in capacity planning, 19-13

tuning, 20-7

usage, 14-11

virtual, 19-13

menu bar, Oracle Directory Manager, 4-7

metadata, stored in schema, 2-13

metadirectories, 2-29

Microsoft Active Directory, 14-2

middle tier

using proxy user with, 5-18, 11-5

migrating data, F-2

from other LDAP directories, F-2

from other LDAP-compliant directories, F-1, F-2

migration

from application-specific repositories

intermediate template file, I-2

modifiersName attribute, 2-5, F-3

optional in top, 2-10

modifyDN, audit log event, 5-32

modifyTimestamp attribute, 2-5, F-3

optional in top, 2-10

mpstat utility, 20-2

multimaster flag

toggling, 23-11

multimaster replication, 1-9, 14-4, 14-6, 22-2

and high availability, 21-7

multiple configuration set entries, 12-3

multiple instances on different nodes, 26-7

multiple server processes, 2-20

multiple threads, A-21

in ldapaddmt, A-6

increasing the number of, A-7

multithreaded command-line tools

ldapaddmt, 4-12, 7-13, A-6

ldapmodifymt, 4-12, 7-13, A-21

multithreaded LDAP servers, 1-8

multivalued attributes, 2-6

adding values to, by using ldapmodify, A-17

converting to single-valued, 6-16

member, 7-8

orclEntryLevelACI, 13-3

names, of object classes, 6-7

naming contexts, 2-11

definition, 2-11

in partitioned directories, 2-25

in replication, 2-24, 23-2

managing, 5-17

publishing, 2-12, 5-17

by using ldapmodify, 5-18

by using Oracle Directory Manager, 5-14, 5-17

searching for, 2-12

searching for published, 5-17

subordinate, 2-26

namingContexts attribute, 5-16, 5-17

multivalued, 5-17

navigator pane, in Oracle Directory Manager, 4-7

net service name, 3-2, 3-3, A-41, A-42

network

bandwidth, 19-14

capacity planning, 19-14

connectivity, in capacity planning, 19-2

requirements, 19-14

Network Interface Cards (NICs), failures of, 21-8

network-level

connection redirection, 21-6

failover, 21-6

new features

in Oracle Internet Directory, Release 2.1.1, lxi

in Oracle Internet Directory, Release 3.0.1, lix

new syntaxes, adding, 2-7

newdb.sql, 24-10

NLS_LANG environment variable, 8-2

setting, 8-3

in the client environment, 8-7

settings, 8-2

no SSL authentication option, 4-6

nodes, Oracle Internet Directory, 2-16

non-default port, running on, 4-3

non-SSL authentication, 30-3

normal mode, running directory servers in, C-5

NOS directories, 14-2, 14-3

not null filter, in Oracle Directory Manager, 6-8

Novell's eDirectory solution, 14-2

null values, in attributes, 6-3

number of retries,modifying, 23-16

number of worker threads used in change log processing, modifying, 23-17

numericStringMatch matching rule, C-11, C-12

o attribute, 2-6

object

adding, by using Oracle Directory Manager, 4-7

object class

explosion, 6-3

types, 2-10

object class types

abstract, 2-10

auxiliary, 2-11

structural, 2-9, 2-10

object classes, 2-8

adding, 6-2

by using command-line tools, 6-14

by using Oracle Directory Manager, 6-10

concurrently, by using ldapaddmt, A-6

as metadata in schema, 2-13

assigning to entries, 6-2, 6-3

auxiliary, 2-11

converting auxiliary, 6-4

creating, by using Oracle Directory Manager, 4-8

defining, 2-8

deleting

by using Oracle Directory Manager, 6-13

from base schema, 6-5

not in base schema, 6-5

explosion, 6-3

extensibleObject, 7-19

groupOfNames, 7-8, 7-9

guidelines

for adding, 6-3

for deleting, 6-5

for modifying, 6-4

in LDIF files, A-2

in the base schema, modifying, 6-5

managing

by using command-line tools, 6-14

by using Oracle Directory Manager, 6-6

modifying, 6-4

by using command-line tools, 6-14

by using Oracle Directory Manager, 6-12

orclauditoc, 5-29

redefining mandatory attributes in, 6-4

referral, 7-19

removing attributes from, 6-5

removing superclasses from, 6-5

rules, 2-11

searching for, 6-6

searching for, by using Oracle Directory Manager, 6-6

structural, 2-10

structural, converting, 6-5

subclasses, 2-9

defining, 2-8

superclasses, 2-9, 6-10

tab in Oracle Directory Manager, 6-9

top, 2-9

types of, 2-10

unique name of, 6-4

unique object identifier, 6-4

viewing, 6-9

viewing properties, 6-9

object identifiers, of object classes, 6-7

objectclass attribute, 5-30

objectIdentifierFirstComponentMatch matching rule, C-11

ObjectIdentifierMatch matching rule, C-11

objects

adding, by using a template, 4-9

adding, by using Oracle Directory Manager, 4-9

comparing, 4-8

modifying

by using ldapmodify, 7-13

by using Oracle Directory Manager, 4-7, 4-9

of ACI directives, 13-7

removing

by using command-line tools, A-11

by using Oracle Directory Manager, 4-7, 4-9

removing by using command-line tools, A-15

searching for

by using Oracle Directory Manager, 4-9

searching for, by using Oracle Directory Manager, 4-9

OCI. See Oracle Call Interface.

OctetStringMatch matching rule, C-11

odisrvreg, 29-2

OFA. See Optimal Flexible Architecture (OFA).

OID Control Utility, 3-2, 4-14

restart command, 5-4

run-server command, 4-14

start and stop server instances, 3-3

stop-server command, 4-14

syntax, A-42

OID Database Password Utility, 4-14, 5-36

OID Database Statistics Collection Tool, 4-15

syntax, A-54

OID Database Statistics Collection Tool Syntax, A-54

OID Monitor, 2-19, 4-14, 28-12

log file location, 3-13

sleep time, 3-2, A-41

starting, 3-2, 3-3, A-41

stopping, 3-3, A-42

syntax, A-41

OID Password Utility, 3-12, 4-14

OID Reconciliation Tool, 4-15, 23-31, A-52

syntax, A-51

oidctl. See OID Control Utility

OIDLDAPD, 3-5, A-44

oidldapd

log file location, 3-13

oidmon. See OID Monitor.

oidprovtool

location, 35-7

OIDREPLD, 3-7, A-46

oidstats.sh utility, A-54

OLTS_ATTRSTORE tablespace, 19-12, 20-9

OLTS_CT_CN tablespace, 19-12

OLTS_CT_DN tablespace, 19-12, 20-9

OLTS_CT_OBJCL tablespace, 19-12

OLTS_CT_STORE tablespace, 19-12

OLTS_DEFAULT tablespace, 19-12

OLTS_IND_ATTRSTORE, 20-9

OLTS_IND_ATTRSTORE tablespace, 19-12

OLTS_IND_CT_DN, 20-9

OLTS_IND_CT_DN tablespace, 19-12

OLTS_IND_CT_STORE tablespace, 19-12

one-level search, 7-3

one-way authentication, SSL, 4-6, C-6

online administration tool. See Oracle Directory Manager

open cursors parameter, 20-10

OPEN_CURSORS, 20-10

OpenLDAP Community, xlv

operational attributes, 5-13

ACI, 11-3

Operations menu item, in Oracle Directory Manager, 4-8

Optimal Flexible Architecture (OFA), 24-2

optional attributes, 2-8, 6-3

adding to pre-defined object classes, 2-8

entering values for, 7-7

in object classes, 6-7

options, attribute, 2-7

Oracle background processes, 20-11

Oracle Call Interface, 2-22

Oracle data servers

changing password to, 4-14, 5-36

error messages, H-2

Oracle Directory Integration platform

log file, 29-14

respect for data ownership policies, 2-30

what it is, 2-29, 2-30, 28-2

Oracle Directory Manager, 7-3

adding

ACPs, 13-15

attributes, 6-21

configuration set entries, 5-4

entries, 7-6

group entries, 7-8

object classes, 6-10

objects, 4-7

and the Oracle Directory Integration Platform, 28-12

Apply button vs. OK button, 4-7

attributes, searching for, 6-19

Cancel button, 4-7

connecting to a directory server, 4-7, 4-9

create access control policy point menu, 4-8

Create button, 4-9

Create Entry menu item, 4-8

Create Like button, 4-9, 7-7

Create Like operation, 4-7

creating an attribute, 4-8

creating object classes, 4-8

defined, 1-8

Delete button, 4-9

deleting

configuration set entries, 5-4

objects, 4-9

disconnecting from a directory server, 4-7

displaying help navigator, 4-8

Edit button, 4-9

Edit menu, 4-7

Ends With filter, 6-7

entries management, 4-11

Exact Match filter, 5-34, 6-8, 7-4

Exit menu item, 4-7

File menu, 4-7

Find Attributes button, 6-19

Find Objects button, 4-9, 6-6

for registering directory integration agents, 28-11

granting access, 13-12

Greater or Equal filter, 5-34, 6-8, 7-4

Help button, 4-10

Help menu item, 4-8

launching, 4-2

Less or Equal filter, 5-34, 6-8, 7-4

listing attribute types, A-3

managing

ACPs, 4-11

configuration set entries, 5-4

entries, 4-11

object classes, 6-6

menu bar, 4-7

modifying

configuration set entries, 2-21, 5-4

entries, 7-10

object classes, 6-12

objects, 4-7, 4-9

replication agreements, 23-18

navigating, 4-7

not null filter, 6-8

on UNIX, starting, 4-3

on Windows 95, starting, 4-2

on Windows NT, starting, 4-2

Operations menu, 4-8

overview, 4-2, 4-7

Present filter, 5-34, 7-4

purge schedule, setting, 23-15

Refresh button, 4-9

Refresh Entry button, 4-9

Refresh Subtree Entries button, 4-9

removing objects, 4-7

Revert button, 4-7

root of search, 7-2

running, 4-2

schema administration, 4-11

search criteria bar, 5-34, 7-3

search filters, 6-7

searching

entries, 7-2

for an object, 4-9

for attributes, 6-19

selecting attribute syntax type, 6-33

starting, 4-2

on Sun Solaris, 4-3

tear-off menu item, 4-8

toolbar, 4-9

updating, 4-8

subtree entry data, 4-9

View menu, 4-8

viewing attributes, 7-6

Oracle Directory Provisioning Integration Service

de-installation, 35-8

deploying, 35-9

managing, 35-9

subscription to, 35-7

troubleshooting, 35-13

Oracle directory replication server instances, 1-7, 2-18, 2-19

configuration parameters, location, 23-13

starting, 3-6, 23-11, A-45, A-46

stopping, 3-7, A-45, A-46

Oracle directory server instances, 1-7, 2-18, 2-19, 2-20

managing, 5-1

starting, 3-4, 23-11, A-43

stopping, 3-5, A-43, A-44

Oracle directory version field, in Oracle Directory Manager, 5-14

Oracle foreground processes

tuning CPU for, 20-6

Oracle Globalization Support, 2-14

Oracle HR

attribute mapping rules

creating, 32-14

deleting, 32-15

modifying, 32-15

attributes to be synchronized, 32-8

importing from, 32-2

running synchronization, 32-16

synchronizing with, 32-1

Oracle HR agent, 32-1

configuring an integration profile, 32-4

mapping rules

default, 32-13

mapping rules for, 32-12

Oracle instances, Glossary-22

Oracle Internet Directory

advantages of, 1-8

multiple installations on same host, 14-12

Oracle Net Services, 2-19, 2-22

LOAD_BALANCE parameter, 26-7

preparing for replication, 23-4

Oracle SQL*Loader, used by bulkload, A-34

Oracle Wallet Manager, D-1

Oracle wallets

changing location of

with ldapadd, A-6

with ldapaddmt, A-8

with ldapbind, A-9

with ldapcompare, A-11

with ldapdelete, A-12

with ldapmoddn, A-14

with ldapmodify, A-16

with ldapmodifymt, A-22

with ldapsearch, A-24

ORACLE_BASE, explained, l

ORACLE_HOME, explained, l

Oracle9i, 2-22

database, 2-18

Replication Manager, configuring, 23-4

Oracle9i Real Application Clusters, lx, 26-1

Oracle9i Replication, 22-3, 23-7

configuring, 23-4, 23-7

by using Oracle9i Replication Manager, 23-4

for directory replication, 23-7

installed with Oracle 9i, 23-3

installing, 23-4

setting up, 23-4

orclACI, 13-3, C-3

access to, 13-3

optional attribute in top, 2-10

orclAgreementID, 23-17, 23-19

orclAgreementId, C-4

orclauditattribute, C-5

orclAuditLevel, C-5

orclauditlevel attribute, 5-32

orclauditlevel operational attribute, 5-29

orclauditmessage, C-5

orclauditmessage attribute, 5-30

orclauditoc attributes, 5-29

orclauditoc object class, 5-29

orclCatalogEntryDN, C-4

orclChangeLogLife, 23-14

orclChangeRetryCount, 23-13, 23-16, C-4

orclChangeSubscriber, 29-5

orclConfigSet, C-4

orclconfigsetnumber, C-4

orclConsumerReference, C-4

orclcontainerOC, C-4

orclCryptoScheme attribute, 5-16

orclDBType, C-4

orcldebugflag, 5-27

orclDebugLevel, C-4

orcldebuglevel configuration set entry, C-5

orclDirReplGroupAgreement, 23-13, 23-14, C-4

orclDirReplGroupDSAs, 23-20, 23-21, C-4

orclDITRoot, C-4

orclEntryLevelACI, 13-3, C-3

optional attribute in top, 2-10

orcleventLog, C-4

orclEvents, C-4

orcleventtime, C-5

orcleventtime attribute, 5-29

orcleventtype, C-5

orcleventtype attribute, 5-29

orclExcludedNamingcontexts, 23-19, C-4

orclGuid, C-4

optional attribute in top, 2-10

orclGuName, C-4

orclguname attribute, 5-20

orclGuPassword, C-4

orclgupassword attribute, 5-20

orclhostname, C-4

orclIndexedAttribute, C-4

orclIndexOC, C-4

orclLastAppliedChangeNumber attribute, 34-6

orcllastChangeLogNumber, 29-5

orclLDAPInstance, C-4

orclLDAPSubConfig, C-4

ORCLMAXCC, 20-5

orclMaxCC, C-4

orclmaxcc, 2-20

orclmaxcc configuration set entry, C-5

orclOdipAgentConfigInfo, 29-5

orclodiProfile, 29-5

orclOpResult, C-5

orclopresult attribute, 5-30

orclParentGUID, C-4

orclPrivilegeGroup, 7-8

orclPrName, C-4

orclprname attribute, 5-20

orclPrPassword, C-4

orclprpassword attribute, 5-20

orclPurgeSchedule, 23-14, 23-15, C-4

orclpwdAlphaNumeric attribute, 18-5

orclpwdIllegalValues attribute, 18-5

orclpwdToggle attribute, 18-5

orclReplAgreementEntry, C-4

orclReplBindDN, C-4

orclReplBindPassword, C-4

orclReplicationProtocol, 23-20, C-4

orclREPLInstance, C-4

orclREPLSubConfig, C-4

orclSequence, C-5

orclsequence attribute, 5-29, 5-30

orclServerEvent, C-5

orclServerMode, C-4

orclServerMode attribute, 5-16

ORCLSERVERPROCS, 20-5

orclServerProcs, C-4

orclserverprocs configuration set entry, C-5

orclSizeLimit, C-4

orclSizeLimit attribute, 5-16

orclssl authentication configuration set entry, C-6

orclsslAuthentication, C-5

orclsslEnable, C-5

orclsslenable, C-6

orclsslenable configuration set entry, C-6

orclsslPort, C-5

orclsslport configuration set entry, C-5

orclsslVersion, C-5

orclsslWalletPasswd, C-5

orclsslwalletpasswd configuration set entry, C-6

orclsslWalletURL, C-5

orclsslwalleturl configuration set entry, C-6

orclSuffix, C-4

orclSuName, C-4

orclsuname attribute, 5-20

orclSuPassword, C-4

orclsupassword attribute, 5-20

orclSupplierReference, C-4

orclThreadsPerSupplier, 23-14

orclTimeLimit, C-4

orclTimeLimit attribute, 5-16

orclUpdateSchedule, 23-20, C-4

orclUseEncrypt, C-4

orcluserdn, C-5

orcluserdn attribute, 5-30

organization attribute, 2-6

organizationalUnitName, 2-6

overall throughput, 20-2

paging, 19-13

parameters

configuration, for Oracle directory replication server, 23-13

dependent on Oracle directory server configuration, 20-11

for an active instance, modifying, 12-3

in an active server instance

modifying, 5-4

OID Database Statistics Collection Tool, A-55

replication agreement, 23-17

required for tuning, 20-10

SGA, 20-12

partitioning, 2-22, 2-25

deployment considerations, 14-5

partner agents

deregistering, 29-23, 29-25

password-based authentication, 4-4, 11-4

passwords

database, 5-36

expiration warning, 18-3

expiry time, 18-3

failure count interval, 18-4

for shell tools, 4-13, 7-18

for SSL wallets, 4-6

setting, C-6

for using bulk tools, 4-13

integrity

MD4, 17-2

lockout, 18-4

lockout duration, 18-4

maximum failure, 18-4

policies, 11-7

conceptual discussion, 11-7

management, 2-13

setting by using command-line tools, 18-9

setting by using Oracle Directory Manager, 18-6

protecting, 2-13

protection, 11-7

changing by using ldapmodify, 17-3

changing by using Oracle Directory Manager, 17-3

changing scheme, 17-2

managing by using ldapmodify, 17-3

managing by using Oracle Directory Manager, 17-3

MD5, 17-3, 17-4

setting by using Oracle Directory Manager, 5-14

SHA, 17-3, 17-4

UNIX Crypt, 17-3, 17-4

to a directory, changing, 5-18

to Oracle data servers, changing, 4-14, 5-36

performance

add or modify, 20-13

by using multiple threads, A-7

by using orclEntryLevelACI, 13-3

metrics, 20-2

replication and, 14-6

search, 20-12

troubleshooting, 20-12

tuning, tools for, 20-2

permissions, 2-13, 11-3

granting

by using command-line tools, 13-42

by using Oracle Directory Manager, 13-12

physical distribution, partitions and replicas, 14-4

physical memory, 19-13

PKI authentication, 11-2

policies, naming, exploiting existing, 14-3

pooling, connection, 1-9

port, 4-5

default, 3-5, 3-7, 4-3, A-44, A-46

port 389, 3-5, 3-7, A-44, A-46, C-5

port 636, 3-5, 3-7, A-44, A-46, C-5

precedence

at the attribute level, 13-49

at the entry level, 13-48

rules

ACL evaluation, 13-47

in conflicting access policies, 13-2

prescriptive access control, 13-3

Present filter, Oracle Directory Manager, 5-34, 7-4

presentationAddressMatch matching rule, C-11

printing communication with the back-end, 5-28

printing out packets sent and received, 5-28

privacy, data, 2-13, 11-2

by using SSL, 1-9

privilege groups, 13-3

privileges, 2-13, 11-2

process instance location, 5-14

processes, 2-19

Oracle background, 20-11

processing power of CPU, 19-15

processor affinity on SMP systems, 20-7

profile tools

ldapUploadAgentFile.sh, A-27

profiles

managing, 29-19

registering, 29-19

profiles, directory integration, 29-5

protocolInformationMatch matching rule, C-11

provisioning

compared with synchronization, 35-2

defined, 35-2

enrollment in applications, 35-3

automatic, 35-3

manual, 35-3

error messages, 35-14

how applications obtain information, 35-6

kinds of information required, 35-3

procedures, 35-2

profiles

managing, 35-10

monitoring, 35-10

relation between components, 35-5

typical deployment, 35-5

Provisioning Subscription Tool

location, 35-7

subscribing applications with, 35-7

provisioning tool

syntax, A-29

proxy users, 11-5

definition, 5-18

managing, 5-18

by using ldapmodify, 5-20

by using Oracle Directory Manager, 5-19

user name and password, 5-18

public key infrastructure, 11-2

purge schedule, setting using Oracle Directory Manager, 23-15

pwdCheckSyntax attribute, 18-5

pwdExpireWarning, 18-3

pwdExpireWarning attribute, 18-6

pwdFailureCountInterval, 18-4

pwdFailureCountInterval attribute, 18-6

pwdGraceLoginLimit attribute, 18-5

pwdLockout, 18-4

pwdLockout attribute, 18-5

pwdLockoutDuration, 18-4

pwdLockoutDuration attribute, 18-5

pwdMaxAge, 18-3

pwdMaxAge attribute, 18-5

pwdMaxFailure, 18-4

pwdMaxFailure attribute, 18-6

pwdMinLength attribute, 18-5

pwdPolicy object class attributes, 18-5

query entry return limit, 5-14

querying

audit log, 5-29

critical events, 5-29

RAID, 20-9

RC4_40 encryption, 11-2

RDNs. See relative distinguished names (RDNs)

Real Application Clusters, 26-7

directory failover in, 26-1

recovery features, in Oracle9i, 1-9

redefining mandatory attributes, 6-4

redo log buffers parameter, 20-12

redundancy, 21-2

and failover, 14-4

redundant links, 21-8

ref attribute, 7-20

referral object class, 7-19

referrals, 2-26

kinds, 2-28

Refresh button, in Oracle Directory Manager, 4-9

Refresh Entry button, in Oracle Directory Manager, 4-9

Refresh Entry menu item, 4-8

Refresh Subtree Entries button, in Oracle Directory Manager, 4-9

Refresh Subtree Entries menu item, 4-8

registering a directory, 34-4

registration, directory, 34-3

relational databases contrasted to directories, 1-2

relative distinguished names (RDNs), 2-3

displaying for each entry, 7-2

modifying

by using command line tools, 7-13

by using ldapmodify, A-18

modifying, by using ldapmoddn, 4-12, 7-14

reliability, and replication, 2-22

replicas, 2-23

in deployment, 14-4

replicated directories, conceptual discussion, 2-22

replication, 2-22, 2-24, 3-14

adding a new node for, 23-22, 23-27

agreement parameters, 23-17

modifying, 23-18, 23-19

viewing and modifying, 23-18

agreements, 5-14, 22-2, 23-18

adding nodes to, 23-20

configuring, 23-12, 23-17

architecture, 22-3

change conflicts

monitoring, 23-29

change logs, 1-9, 22-6

cold backup, 24-1

configuration parameters

modifying, 23-15

viewing and modifying, 23-14

configuring, 23-12

Oracle9i Replication, 23-7

sqlnet.ora, 23-5

tnsnames.ora, 23-5

conflicts

levels of occurrence, 22-7

resolving manually, 23-29

typical causes of, 22-8

considerations, 14-6

database copy procedure, 24-1

deleting a node, 23-27

failure tolerance, 14-7

garbage collection, 23-14

in deployment, 14-6

installing and configuring, 23-2

load balancing, 14-6

log location, 5-14

login events, 5-31

loose consistency model, 14-6

managing, 23-1

multimaster, 1-9, 14-4, 22-2

naming contexts, 23-2

nodes

adding, 23-22

deleting, 23-27

Oracle9i, 22-3

overview, 22-1

preparing the Oracle Net Services environment for, 23-4

process, 22-9, 22-11, 22-12, 22-14

on the consumer side, 22-5

on the supplier side, 22-4

reasons to implement, 14-6

reliability and, 2-22

retries

applying changes, 2-24

modifying number of, 23-16

server

stopping, A-46

specifying number of worker threads, 23-15

sponsor node, 24-3

status location, 5-14

transport mechanism, 22-3

replication server

log file location, 3-13

replication server. See directory replication server

replication-specific debugging, 5-28

restart command, 29-12

Revert button, in Oracle Directory Manager, 4-7

RFCs enforced by Oracle Internet Directory, C-2

rollback segments, 23-6

creating, 23-5, 23-6

root of search

entering, 7-2

selecting, 7-3

rules, LDIF, A-3

run-server command, by using OID Control Utility, 4-14

SASL. See Simple Authentication and Security Layer (SASL).

scalability, of Oracle Internet Directory, 1-8

schema

adding and changing object classes (online), 6-2

administration, 6-1

by using Oracle Directory Manager, 4-11

definition location, 5-14

definitions in subSchemaSubentry, 2-13

distributed among several tablespaces, 20-9

elements, C-1

add/replace event, 5-31

delete event, 5-31

for specific Oracle products, C-3

Oracle proprietary, C-3

for orclACI, B-2

for orclEntryLevelACI, B-3

objects, administering by using Oracle Directory Manager, 4-11

user, C-12

Schema Management pane, in Oracle Directory Manager, 6-9

schema-related debugging, 5-28

scripts, batched line-mode commands, 6-14

search

and compare operations, 2-7

criteria bar, in Oracle Directory Manager, 5-34, 7-3

depth, specifying, 7-3

filter processing, 5-28

filters

IETF-compliant, A-22

ldapsearch, A-24

results, specifying maximum number of entries returned, 5-34, 7-3

Search ACPs

button, 4-9

menu item, 4-8

searches

configuring, 5-20

by using ldapmodify, 5-21

by using Oracle Directory Manager, 5-20

for ACPs when using Oracle Directory Manager, 13-13

duration, 5-34

setting maximum amount of time

by using ldapmodify, 5-21

by using Oracle Directory Manager, 5-21

setting maximum number of entries returned

by using ldapmodify, 5-21

by using Oracle Directory Manager, 5-21

specifying maximum number of entries returned, 5-34, 7-3

using filters, 6-7

secure

port 636, 12-2, 12-3

Secure Hash Algorithm (SHA), 5-14, 5-16, 17-3

secure mode

running directory servers in, C-5

running server instances in, 12-3

Secure Sockets Layer (SSL), 30-2

configuring, 4-3

enabling Oracle Directory Manager, 4-5

managing, 12-1

security, 1-9, 2-13

for different clients, 12-3

in LDAP Version 3, 1-5

in the Oracle Directory Integration Platform, 30-1

SSL parameters for different clients, 12-3

within Oracle Internet Directory environment, 2-13

selected audit log events, 5-32

server instances

running, 4-2

running in secure mode, 12-3

server mode, 5-15

server operation time limit, 5-15

server processes

number of, C-5

servers

configuring

by using input files, 7-13

servers. See directory servers, directory replication servers, or directory integration servers

servlets

used by Delegated Administration Service, 2-29

SESSIONS parameter, 20-10

setup process (ldaprepl.sh)

log file location, 3-14

SGA. See System Global Area (SGA).

SHA, 5-14, 5-16, 17-3, F-4

for password encryption, 17-3, 17-4

shared pool size, 20-8

parameter, 20-10

shared server, 20-11

simple authentication, 1-9, 11-4

Simple Authentication and Security Layer (SASL), in LDAP Version 3, 1-5

Single Sign-On, integrating with Delegated Administration Service, 9-9

single-valued attributes, 2-6

converting to multivalued, 6-16

size

attribute values, C-10

size, C-10

of database cache, 14-10

sizing, 14-8, 14-9

considerations in deployment, 14-9

I/O subsystem, 19-6

tablespaces, 19-9

sleep time, OID Monitor, 3-2, A-41

smart knowledge references (referrals)

configuring, 7-20

sn attribute, 2-6

software-based connection redirection, 21-7

sort area parameter, 20-12

special purpose directories, 1-4

SPECint_rate95 baseline, 19-15, 19-16

sponsor node, 23-23

cold backup procedures, 24-3

sqlnet.ora, configuring for replication, 23-5

SSL, 4-5, 12-3, 12-5

attribute values, C-5

authenticated access, 1-9

authentication, 13-10

for Oracle Directory Manager, 4-6

one-way, 4-6

server only, 4-6

cipher suites, 12-2

SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA, 12-2

SSL_DH_anon_EXPORT_WITH_RC4_40_MD5, 12-2

SSL_DH_anon_WITH_3DES_EDE_CBC_SHA, 12-2

SSL_DH_anon_WITH_DES_CBC_SHA, 12-2

SSL_DH_anon_WITH_RC4_128_MD5, 12-2

SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, 12-2

SSL_RSA_EXPORT_WITH_RC4_40_MD5, 12-2

SSL_RSA_WITH_DES_CBC_SHA, 12-2

SSL_RSA_WITH_NULL_SHA, 12-2

SSL_RSA_WITH_RC4_128_MD5, 12-2

supported in Oracle Internet Directory, 12-2

client scenarios, 12-2

configuration parameters, 12-3

modifying, 12-3

configuring, 4-3, 12-3

data privacy, 1-9

default port, C-5

disabling, C-6

enabling, 12-3

for directory server, C-6

with ldapadd, A-6

with ldapaddmt, A-8

with ldapbind, A-9

with ldapmodify, A-16

with ldapmodifymt, A-21

handshake, 12-2

no authentication, 4-6, C-6

parameters, 12-3

configuring, 12-3

configuring by using command-line tools, 12-5

configuring by using Oracle Directory Manager, 12-3

password to user wallet, 4-6

port 636, 12-3

strong authentication, 11-2

toggling on and off, C-6

two-way authentication, C-6

Version 2, 12-2

Version 3, 12-2

wallets, C-6

SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA, 12-2

stack, technology, 21-2

start-server commands, 5-2

stats log

connections, 5-28

entries sent, 5-28

operations, 5-28

results, 5-28

stop-server command, 4-14

store-and-forward transport, in Oracle9i, 22-3

striping, 20-8, 20-10

strong authentication, 11-4

structural access items, 13-14, 13-39

access control points, 13-14

structural object class type, 2-9, 2-10

structural object classes, 2-10

converting, 6-5

structure rules, not enforced by Oracle Internet Directory, 2-11

structure, audit log entries, 5-29

subclasses, 2-9

subconfig, C-4

subentries, definition, 2-13

subordinate naming contexts, 2-26

subregistry, C-4

subSchemaSubentry

adding object classes to, 2-13

holding schema definitions, 2-13

modifying, 2-13

subtree entry data, updating by using Oracle Directory Manager, 4-9

subtree level search, 7-3

subtrees

displaying, 7-2

Sun Solaris, starting Oracle Directory Manager on, 4-3

super users

definition, 5-18

logging in as, 4-3

login events, 5-31

managing, 5-18

by using ldapmodify, 5-20

by using Oracle Directory Manager, 5-19

user name and password, 5-18

superclass selector, 7-6

superclasses, 2-9

and inheritance, 6-3

attributes in, 6-10

attributes of, 6-10

of object classes, 6-7

superior knowledge references (referrals), 2-26

suppliers, 2-23

surname attribute, 2-6

Symmetric Multi-Processor (SMP) systems, 20-7

synchronization

from a connected directory to Oracle Internet Directory, 29-4

from Oracle Internet Directory to a connected directory, 29-4

scenarios, 29-4

status attribute, 29-14

synchronization process, 34-5

synchronization profiles, 29-1

synchronizing with other directories, 34-1, 34-2

syntax

attribute, 2-6

bulk tools, A-33

bulkdelete, A-33

bulkload, A-34

bulkmodify, A-36

catalog management tool, A-40

command-line tools, A-4

LDAP, C-7

ldapadd, A-4

ldapaddmt, A-6

ldapbind, A-8

ldapcompare, A-9

ldapdelete, A-11

ldapmoddn, A-13

ldapmodify, A-15

ldapmodifymt, A-20

ldapsearch, A-22

ldapUploadAgentFile.sh, A-27

LDIF, A-2

LDIF and command-line tools, A-1

ldifwrite, A-38

OID Control Utility, A-42

OID Database Statistics Collection Tool, A-55

OID Monitor, A-41

oidctl, A-42

provisioning tool, A-29

stored in schema, 2-13

syntaxes

cannot add to subSchemaSubentry, 2-13

new, adding, 2-7

tab in Oracle Directory Manager, 6-9

viewing

by using by using ldapsearch, 6-33

by using Oracle Directory Manager, 6-33

System Global Area (SGA), 20-7, 23-6

parameters, 20-12

sizing, 20-7

tuning for Oracle9i, 20-7

tuning parameters, 20-12

system operational attributes, 5-13

setting, 5-13

by using ldapmodify, 5-16

by using Oracle Directory Manager, 5-13

viewing, 5-13

SYSTEM tablespace, 19-12

tablespaces, 19-8

balancing, 20-9

creating, 23-5, 23-6

in replication, 23-6

OLTS_ATTRSTORE, 19-12

OLTS_CT_CN, 19-12

OLTS_CT_DN, 19-12

OLTS_CT_OBJCL, 19-12

OLTS_CT_STORE, 19-12

OLTS_DEFAULT, 19-12

OLTS_IND_ATTRSTORE, 19-12

OLTS_IND_CT_DN, 19-12

OLTS_IND_CT_STORE, 19-12

sizing, 19-9

SYSTEM, 19-12

targetDN, C-4

TCP/IP connections, 21-5, 21-8, C-5

tear-off, in Oracle Directory Manager, 4-8

technology stack, 21-2

telephoneNumberMatch matching rule, C-11, C-12

templates, creating entries from, 7-7

throughput, 19-6

overall, 20-2

time-based change log purging, 22-6

tnsnames.ora

configuring for replication, 23-5

in cold backup, 24-7

tools

for tuning, 20-2

top object class, 2-9, 2-10

optional attributes in, 2-10

top utility, 20-2

trace function calls, 5-28

tracing function calls, 5-28

Transparent Application Failover (TAF), 26-2

Transport Layer Security (TLS), and LDAP Version 3, 1-5

tree view

browsing, 7-3

selecting root of search, 7-3

troubleshooting, H-1

directory server instance startup, 3-8, A-47

directory servers, 3-9

performance, 20-12

tunables, database, 20-10

tuning, 14-8, 20-1

considerations, 14-11

CPU for Oracle foreground processes, 20-6

CPU for Oracle Internet Directory processes, 20-5

CPU usage, 20-4

deployment considerations, 14-11

disk, 20-8

memory, 20-7

overview, 20-2

SGA parameters, 20-12

System Global Area (SGA) for Oracle9i, 20-7

tools, 20-2

two-way authentication, SSL, C-6

types

of attributes, 2-4

of object classes, 6-7

Unicode Transformation Format 8-bit (UTF-8), 2-14

uniqueMemberMatch matching rule, C-11

UNIX crypt, for password encryption, 5-14, 5-16, 17-3, 17-4, F-4

UNIX crypt, for password hashing, 17-3

UNIX, starting Oracle Directory Manager on, 4-3

unspecified access, 13-12, 13-35

Upgrading a Standalone OID Node, E-4

upgrading from an earlier release, E-1

in a multi-node environment, E-2

in a single node environment, E-2

LDIF-based, E-2

user entries

adding

by using ldapadd, 7-14

by using Oracle Directory Manager, 7-8

modifying

by using ldapmodify, 7-15

by using Oracle Directory Manager, 7-10

User field, in Oracle Directory Manager, 4-3

user login, 4-3

user names and passwords, managing

by using ldapmodify, 5-20

by using Oracle Directory Manager, 5-19

user password modification event, 5-32

User Preferences

button, 4-10

menu item, 4-8

user schema, C-12

user, proxy, 11-5

userPassword attribute, hash values, F-4

UTF-8. See Unicode Transformation Format 8-bit

UTLBSTAT.SQL, 20-3

UTLESTAT.SQL, 20-3

values, deleting attribute, A-18

View menu, in Oracle Directory Manager, 4-8

virtual memory, 19-13

vmstat utility, 20-2

wallets

auto login, D-9

changing a password, D-8

closing, D-7

creating, 5-6, 5-8, 5-10, 12-4, C-6, D-4

deleting, D-8

location, C-6

managing, D-4

managing certificates, D-10

managing trusted certificates, D-13

opening, D-5

passwords, 4-6

saving, D-7

wildcards, in setting access control policies, 13-44

Windows NT

Performance Monitor, 20-2

starting Oracle Directory Manager on, 4-2

Task Manager, 20-2

worker threads, 2-20, 20-11

specifying in replication, 23-15

Index

Numerics

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W