Server Chaining in OID

hi Atul,
this topic is very minimal can you be much more detailed on this on how to sync different AD to OID and how to check if the OID is connected to AD and in sync

thanks,
Vamshi D

hi kuman

We install the OID with EBS R12.3, But the OID in other domain extgernal the main branch is not working, if doable with Oracle OID to help more than differnet domain

Thansks

hi kuman

I have question on Oracle OID, can you give me you mobile please

Thansks

Hi Atul,

As a project requirement we have synchronized users from AD to OID (11.1.6.0) using DIP.
OID is configured as a User Identity Store for Oracle Access Manager. We have setup pass-through authentication (Server chaining) for the users which are synchronized from AD to OID.

It is observed that the performance(Auth/sec) is low through server chaining authentication.

Could you please suggest any performance tuning required to be done for server chaining.

Currently tuning done on OID is:
1. Orclmaxcc:10
2. Orclserverprocs:2
3. Orclskiprefinsql:1

Thanks in Advance.

Regards,
Sam

Hi Atul,

Thanks for your reply.

I have referred: http://docs.oracle.com/cd/E21043_01/oid.1111/e10029/serverchain.htm

(36.2.1 Configuring Server Chaining by Using Oracle Directory Services Manager)

There is no firewall in between OID and AD

We ran a performance benchmarking tool “SLAMD” to get the “Authentications Completed Avg/Second” against OID and AD with following scenario.
1. Local OID Authentication
2. Active Directory Authentication
3. OID authentication for the user`s synchronized from Active Directory (Pass-through AuthN)

The test was executed for 25 Threads for 10 min, below are the test result:

1. Local OID User (Authentications Completed Avg/Second) : 3326.908
2. AD (Authentications Completed Avg/Second): 6458.750
3. OID users Syncd from AD: (Authentications Completed Avg/Second): 102.350

CPU and memory utilization for this entire test were 0% and 1.5% respectively

Regards,
Sam

@ Sam,
I would like to understand requirement of server chaining if you are syncing AD users to OID via DIP . If users password are only in AD and you wish to validate users password via AD then my view is that you don’t need server chaining, what you need is External Authentication Plug-In in OID so that OID authenticate user against AD .

More on OID Authentication Plug-in http://docs.oracle.com/cd/E17904_01/oid.1111/e10029/authentication.htm#i1022418

@Atul,

The requirement to have DIP for user sync and Server Chaining for password is due to the fact that we integrting EBS with OAM, with OID as User Identity store and AD as a source of trust.

Regards,
Sam

Sam, Drop me a mail with your phone number and timezone and I’ll share my phone number and we can chat. I don’t see any requirement for server chaining here as user is alreday in OID.

My email Address atul [at] onlineAppsDBA.com

@Atul

I have configured External Authentication plugin in my environment and could see raise in Auth Rate with Server chaining it was ~102. AuthN/Sec and with EAP its ~360 AuthN/Sec.

Appreciate your help.

Regards,
Sam

Hi Atul,

We are using OID 11.1.1.7 and configured server chaining with Microsoft AD. I am new to this organization so could you please help me to understand.

1) The object class and attributes are storing in Microsoft AD and only metadata for those store in OID.

Is it possible to add searchbase in OID? If it is, Is it possible to add multiple searchbases in OID?

Thanks