OUD 11gR1 PDF

<Insert Picture Here>
Oracle Unified Directory 11gR1

eSeminar for OPN partners
Etienne Remillon – Principal Product Manager
The following is intended to outline our general
product direction. It is intended for information
purposes only, and may not be incorporated into any
contract. It is not a commitment to deliver any
material, code, or functionality, and should not be
relied upon in making purchasing decisions.
The development, release, and timing of any
features or functionality described for Oracle’s
products remains at the sole discretion of Oracle.
Oracle Confidential - under NDA 2

Agenda
<Insert Picture Here>
• Market Trends and Challenges

Awareness
• Introducing Oracle Unified Directory

• Oracle Unified Directory
• Overview
• OUD vs. ODSEE vs. OpenDS
• Architecture
• Detailed Features / Functions / Benefits

Proficiency
• Deployment Use Cases
• Migration strategies

Market Trends and Challenges

Challenge: A New Business Era
Social Application
• Social media
• Cloud computing
• Mobile computing
• How can a company

Location Based
Application
transform itself?
Mobile Devices
5
Challenge: Scalability in New Business Era
• To support billions of users and

devices
• To provide millions of operations
per second
• More dynamic data for writes
• Elasticity to grow with business
6
Challenge: Identity Silos in New Business Era
• Too many identity stores

• On-premise and in-cloud
• Delayed application deployment
• on-premise and in-cloud
• Challenges of ownership
• Challenges of cost
• Challenges of compliance
7
Challenge: Fragmented Solutions
• Different directory vendors for

Directory • Storage
• Synchronization, and
Virtual Meta
Directory • Virtualization
Directory
Embedded
• Incomplete, complex and high
Directory
TCO
8
Solution
Oracle Unified Directory

Solution: Oracle Unified Directory and Oracle
Directory Services Plus

Oracle Directory Services Plus
Oracle Directory
Oracle Virtual
Server Enterprise
Directory (OVD)
Edition (ODSEE)
ODS Plus
Oracle Internet Oracle Unified

Directory (OID) Directory

ODSPlus Use cases
OID, ODSEE and OUD Guidelines
New
Product Scenario Existing Customers Customers
OID 1. Oracle environment where requires No change Based on
OID, such as EBS, Portal etc that scenarios and
uses OSSO. customer
2. Preference of an external Oracle preference
Database
3. Very high-end deployment prefers
monolithic scaling approach
ODSEE 1. More heterogeneous environment Optionally upgrade to Customer
OUD preference
OUD 1. New customers and new Not Applicable Recommended
deployments solution based
2. Elastic horizontal scaling approach on scenarios
3. Optional upgrade for ODSEE and customer
preference
Notes:
1. ODSPlus is the only SKU available and new customers will get OID, ODSEE, OVD and OUD when they
buy ODSPlus. Choice of directory is implementation choice – we can help!
2. For new customers and new deployments, OUD is recommended. ODSEE – no immediate upgrade
required and ODSEE will continue to be enhanced


Pure Java, all-in-one directory solution with storage, proxy, synchronization and virtualization
• Only Unified directory to combine the services of a virtual

Unified Directory directory, meta directory and data storage capability.
Services • Java based for multiple platform support and simplified
deployment and maintenance
• Carrier grade performance with read and write

operations
Carrier Grade • Flexibility of data virtualization and consolidation
Scalability • Authentication on the scale of billions of subscribers and
devices to maximize average revenue per subscriber
• Standards support to simplify application integration

• Ready for in-cloud and on-premise deployments
Integrated • Integrated with Oracle’s Fusion Middleware platform
• ODSEE compatible to ensure application transparency

• Core directory functions

– A directory server, equivalent of DSEE directory server
– A directory proxy server for fail-over, load-balancing, data distribution and
security
– Dedicated replication server and replication gateway modes
• Full compatibility with ODSEE

– What works with ODSEE will work with OUD
– Replication gateway for ODSEE and OUD co-existence
• Complete Java directory services solution with OVD and DIP

– OVD for identity virtualization
– Directory Integration platform (DIP) for synchronization
– OUD is a J2SE app that runs in a JVM which does not require a J2EE
container

• Elastic scalability
– Global index for high performance and data distribution
• Advanced replication
– Fractional replication, priority replication, and assured replication
• Flexible deployment options
– Multiple algorithms for proxy load-balancing
• Proportional, saturation, failover, optimal
– Multiple algorithms for proxy data distribution/ partition
• Numeric, lexicographic, DN pattern, and capacity based
• ODSM Admin UI
– J2EE app that is certified for WLS
• Enterprise Manager Grid Control monitoring
• Certified as identity store for IDM product as well as FMW through
OPSS





OUD Differentiators and Benefits
• Unified Java solution for storage, proxy, synchronization and virtualization
• Carrier grade performance and scalability
• Global index for elastic and horizontal scalability
• Smaller footprint enables embedding and eases deployment
• ODSM for unsurpassed user experience
• EMGC for enterprise manageability
• Replication gateway enables smooth integration with existing ODSEE and zero
down time migration
• Pure Java optimized for Java environment with platform choices
• Integration with Oracle Fusion Middleware stack provides excellent all-Java
experience

OUD vs. ODSEE
Comparison, co-existence and upgrade

OUD Vs. ODSEE – Why OUD is Better
• Better performance for the new business era
– 4x write, 3x read, 2x mix mode (90-10), 2x authentication Ops/Sec
• Esp. important for mobile, social media and cloud services
• Better scalability
– Dynamic and elastic data distribution for unmatched horizontal scalability
• Better availability
– Built-in directory proxy server
• Fully unified solution
– Complete pure Java solution with OVD and DIP
• Better administration, management and monitoring experience
– ODSM and EMGC
• Seamless Java environment with Oracle FMW and Fusion Apps
• Additional platform support – AIX

OUD and ODSEE Co-existence
• Fully compatible with ODSEE
• Replication gateway provided as part of OUD
– Bi-directional replication with ODSEE
– Run in mixed environment of OUD and ODSEE with ease
– Zero down time upgrade from ODSEE to OUD
ODSEE OUD
Replication Replication
Topology Topology
ODSEE OUD OUD

Directory Replication Directory
Server 1 Gateway Server 1
ODSEE OUD OUD

Directory Replication Directory

Rolling Upgrade from ODSEE to OUD
• Step 1 – upgrade to ODSEE 11gR1
– The next patchset will support older versions to replicate with OUD to eliminate this
step
• Step 2 – upgrade ODSEE servers to OUD one at a time
• Step 3 – set up replication gateway between OUD and ODSEE once

the first OUD is in the mix
• Step 4 – continue to upgrade all ODSEE servers to OUD with no down

time until it is complete

OUD vs. Open Source OpenDS
Comparison

OUD Vs. OpenDS – Why NOT Open Source
• Oracle support and innovation only available through OUD

– No support for open source OpenDS and Oracle will only contribute bug fixes
• Fully unified solution only available through OUD
– Complete pure Java solution with OVD and DIP for storage, virtualization and
synchronization
• Elastic horizontal scalability only available through OUD
– Dynamic and elastic data distribution with global index for unmatched horizontal scalability
• High availability, load balancing and additional security only available through
OUD proxy server
• Unsurpassed usability and enterprise manageability only available through
OUD
– ODSM and EMGC
• Better quality with OUD
– More thorough testing using ODSEE test suite and simulated customer environments

Architecture

Architecture
Protocol Handling
(LDAP, LDAPS, JMX, D)
Front End
Provide access to?
Naming Context, request filtering
Directory Service policy, resource limits
List of accessible
Naming Context naming context
Local Load Distribution

Distribution
Back-End Balancing algorithms
Proxy
Local DB Schema
backend BE (Load-balancing algorithms)
Default data store

(Oracle BDB JE, ACID)

Detailed Features / Functions / Benefits

Features and Functions
Java-based directory
KEY FEATURE DETAILS BENEFITS
Industry first 100 % Java • OUD with DIP and OVD all Java • Deployable with
directory service solution based providing a coherent flexibility on broader
approach for directory services choice of platforms
• OUD is a Java Directory including Cloud
Server Computing
• OUD is a Java Directory Infrastructure with
Proxy reduced associated
costs
• OUD include a Java
embedded Database • Coherent approach
mean simplified
• OUD includes a Java based
deployment and
replication gateway between
maintainability with
ODSEE and OUD
increased ROI and
• Coded in Java, mean less prone reduced TCO
to memory leak and server
• Increased server
instability
stability and
• Leveraging Oracle/Sun Expertise performance. More
on JVM and Java applications performance help to
reduce underlying
equipments reduce TCO

Maturity and Stability
OpenDS based • Leveraging the OpenDS open • Product stability and
source project for core directory maturity brought by
server with many additional years of experience with
features like Proxy and Global OpenDS
Index
OUD based on consolidated • Engineered by team with over 15 • Features reach solution
years of experience years of experience that created that gives many
ODSEE (SunDSEE), OID, OVD deployment options
• Leveraging many ODSEE concept • Compatibility with
to insure full compatibility for existing applications
applications • Product maturity
• Validated with rich tests cases and
real customer based use cases

Leveraging Oracle Berkley Database Java Edition
Java Edition for Oracle BDB • Embedded Object Oriented data • Deployment flexibility ,
as the underlying data store base. Object Oriented data model easy installation
simplify entry representation as resulting in reduce costs
they can be directly mapped into • Platform choice
database objects including cloud
• The JE requires less I/O then “C” infrastructure
edition to complete write tasks • Increased stability
• Backup are made architecture • Increased write
independent performances
• More options to recover
data if required
Commit change at File • Changes can be committed at File • Increased write
System level System level without need to wait performances
for disk being updated

Highly Available Solution
Proxy providing HA by • Replication Server replicates • Maximize service
routing requests to alternate information between directory availability
servers instance • Keep up with you SLA
• Proxy can route requests to • Telecommunication
another directory server or another grade with up to
group of directory server 99.999% availability
• Proxy can route requests to an • Instant geographical
alternate Data-center to provide recovery
Geographical redundancy

Performance for your current and future needs
Linear processing • In monolithic deployments, system • No need to re-architect,
scalability in monolithic will leverage additional memory, maximize hardware
deployments provides CPU or disk capacity to investment with limited
vertical scalability accommodate growth providing administration needs
that hardware chassis includes • Keep up with you SLA
Optimized for write head room • Directory can be
performances • Predictable response time and leverage for new type of
consistent performance over time applications that would
with response time down to milli- require frequent
second updates:
• BDB write capabilities as well as • Presence
server performances are optimized awareness
to maximize write performance and • Location based
throughput services
• Social networking

Scale as you grow
Horizontal scalability in • Overall read and write • No need to re-
partitioned configurations performance can be scaled up via architecture entire
provides Elastic Directory Proxy/distribution with Global solution
Services Index • Grow as you need
• Global Index maps directory without requirement to
entries to the distribution partition over invest upfront
in which data is held so that • Reduced initial CAPEX
request are routed to the correct • Configuration based on
partition without need for standard boxes added
broadcast as needed optimizing
• In partitioned approach, additional CAPEX and OPEX
boxes are added as needed to the costs
configuration, Proxy will distribute
data and load across the various
partitions

Superior Manageability and Supportability
Easy installation • Small footprint installation via • Reduce installation cost:
Oracle Unified Installer and setup up and running in a few
panel configured and operational clicks
just in a few clicks • Easy to embed into
• Small footprint from memory and application s or
disk standpoint equipments
Advanced User Interfaces • CLI with interactive mode • CLI to increase
• Oracle Directory Service Manager productivity and reduce
(ODSM) web-based administration administration tasks and
console associated costs
• Optional monitoring via Enterprise • Unified console for
Manager Grid Control OUD, OVD, OID
• Monitor pro-actively and
maintain historical data
Advanced administration • Scheduler for tasks • More efficient
• Multiple options for backup and administration tasks
LDIF imports result in lower TCO
• Configuration parameters
versioned

Standard Based Directory Server and Additional Extensions
Support latest standards • RFC 2696 for Paged results, RFC • Adherence to standard
3671 for Collective attributes, RFC ensure compatibility and
4512 for Name forms & DIT rules, broader scope of
RFC 4514 for Attribute syntax applications that
checks, RFC 4525 for LDAP interoperate with OUD
increment, RFC 4527 for Pre and • Directory data leveraged
post operation read controls, RFC by SOA-based web
4528 for Assertions, RFC 4529 for services
Request attributes by objectclass,
draft RFC for Subtree Delete
Control
• DSML v2
Extensions • Virtual Static groups • Increased security and
• Search in all suffixes in a single more flexibility in
operation application deployments

Advanced Replication Model
Replication Server • Replications via dedicated • Maximize directory
servers, those are focused on server performances
propagating changes, while off • Optimize data
loading directory servers replication across the
• Assured replication so that write topology
operation completes only when • More deployment
data are updated on more then options with lower TCO
one server. • Secured solution with
• Fractional replication to excluded global data-integrity
sensitive attributes from being • Increase data protection
replicated on sensitive attributes
• Prioritized replication • Regulations and
compliance
• Additional security
Highly available changelog • Efficient changelog handled by • Limited performance
replication servers can be impact when turned on
configure in high-availability mode • Improved global integrity
as application can rely
on HA changelog

Highly Secure Directory Service
Advance password policy • Customizable attributes for storing • Maximize security
password
• Password change via extended
operations
• Password storage scheme choice
• Password aging
• Tracking last login time
• Dictionary for Password validation
• Random password for new users
Policy based fine-grained • Access rules defined down to the • Advanced protection
access control attribute level via ACL mechanism • Compliance to security
• Policy can be set per security regulations and
grade of client connection Corporate governance
Encryption • Attribute encryption • Maximize security out of
• Strong SSL authentication for the box
replication. Setup via wizard
• Password always being hashed
Further security via Proxy • Proxy can provide additional • Further security and
access control point prevents DoS attacks

Flexible Deployments
Proxy load-balancing & • Load-balancing via request routing • Maximize service
routing to different servers. Multiple throughput and SLA
algorithms provided: fulfilling
Via SearchFilter / Proportional /
Saturation / Failover /
Optimal
Proxy Distribution • Distribute entries across different • Provide elastic

data partitions. Multiple deployment capabilities
algorithms: to scale as you grow
Numeric / Lexicographic /
DNPattern based / Capacity
based
Proxy Distribution with • Global Index is a collection of • Increase overall
Global Index indexes that link an entry to the performance and
data partition where it is stored efficiency by limiting or
eliminating costly
broadcast request
operations

Compatibility and Interoperability with other Directories
Replication Gateway with • OUD can be configured as a • Cohabitation of ODSEE
ODSEE replication gateway to keep in and OUD to enable
synch in near real time ODSEE smooth transition at
and OUD directory services customer pace
• Interface at the replication protocol • Zero downtime in
level without need to turn on migration process
changelog feature
• Gateway translates “on the fly”
replication protocols and data
• Works bidirectional and in HA
mode
Synchronization with other • Directory information • Coexistence in parallel
directories in conjunction with synchronized with OID, other 3rd of two directories or
Directory Integration Platform party directories and database OUD and a Database
(DIP)

Additional languages and platforms
• Supported languages: DE, ES, FR, JA, ZHS, ZHT, KO, IT,
PTB
• Supported platforms: Solaris, Linux, Windows
• After Product Release: AIX
• Detailed platform list is in Certification Matrix:
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html
• Supported Java Platforms:

– Sun 1.6.0_24+
– Jrockit 6 Update 24 R28.1.3+

Deployment Use Cases

Simple Deployment one Data Center
DS only

Simple Deployment with two Data Centers
DS only

Deployment with two Data Centers
DS and Proxy

Deployment in one Data Center
DS and Proxy with Global Index

Deployment in two Data Centers with Distribution
DS and Proxy with Global Index

Keeping in synch ODSEE and OUD deployments
ODSEE
OUD Replication Topology
Replication
OUD
Topology
Directory
Server 1
ODSEE OUD OUD
Directory Replication Replication
ODSEE OUD OUD

Directory Replication Replication
OUD
Directory
Server 2

Migration Strategies

Upgrade and Migration strategies
• From DSEE 5.2 to OUD

• From DSEE 6.x or 7.0 to OUD
• From ODSEE 11gR1 to OUD

Upgrade from DSEE 5.2 to OUD
Initial deployment
DSEE 5.2 DSEE 5.2

DS Master 1 DS Master 3
DSEE 5.2 DSEE 5.2


Step 1
DSEE 5.2 DSEE 11gR1

DSEE 5.2 DSEE 5.2

• Master 3 is upgraded to ODSEE 11gR1

Step 2
DSEE 5.2 DSEE 11gR1

DSEE 5.2 DSEE 11gR1


Step 3
DSEE 11gR1 DSEE 11gR1

DSEE 5.2 DSEE 11gR1


Step 4



Step 5


• Change password policy from old 5.2 compatibility mode

to 11gR1 mode

Step 6
OUD
Directory
DSEE 11gR1 DSEE 11gR1 Server 1
OUD
DS Master 1 DS Master 3 Replication
Server 1
OUD
DSEE 11gR1 DSEE 11gR1 Replication
DS Master 2 DS Master 4 Server 2
OUD
Directory
Server 2
• Install an OUD topology

Step 7
OUD
Directory
OUD
Server 1
OUD
DSEE 11gR1 DSEE 11gR1 Replication
OUD
Directory
Server 2
• Initialize OUD topology by exporting data from ODSEE

11gR1 and importing in OUD

Step 8 Final
OUD
Directory
OUD OUD
DS Master 1 DS Master 3 Replication Replication
Gateway Server 1
OUD OUD
DSEE 11gR1 DSEE 11gR1 Replication Replication
Gateway Server 2
DS Master 2 DS Master 4 OUD
Directory
Server 2
• Install Replication Gateway

Upgrade from DSEE 6.x/7.0 to OUD
Initial Deployment
DSEE 6.x DSEE 6.x

DSEE 6.x DSEE 6.x


Step 1
DSEE 6.x DSEE 11gR1

DSEE 6.x DSEE 6.x


Step 2
DSEE 6.x DSEE 11gR1

DSEE 6.x DSEE 11gR1


Step 3
DSEE 6.x DSEE 11gR1

DSEE 6.x DSEE 11gR1

• Change password policy from old 5.2 default compatibility

mode to 11gR1 mode

Step 4
OUD
Directory
DSEE 6.x DSEE 11gR1 Server 1
OUD
Server 1
OUD
DSEE 6.x DSEE 11gR1 Replication
OUD
Directory
Server 2

Step 4
OUD
Directory
OUD
Server 1
OUD
DSEE 6.x DSEE 11gR1 Replication
OUD
Directory
Server 2


Step 5 Final
OUD
Directory
OUD OUD
DS Master 1 DS Master 3 Replication Replication
Gateway Server 1
OUD OUD
DSEE 6.x DSEE 11gR1 Replication Replication
Gateway Server 2
DS Master 2 DS Master 4 OUD
Directory
Server 2

Upgrade from ODSEE 11gR1 to OUD
Initial Deployment
DSEE 11gR1
DS Master 1
DSEE 11gR1
DS Master 1

Step 1
DSEE 11gR1
DS Master 1
DSEE 11gR1
DS Master 1
• Change password policy from old 5.2 default compatibility

mode to 11gR1 - mode if not already done -

Step 2
OUD
Directory
DSEE 11gR1 Server 1
OUD
DS Master 1 Replication
Server 1
OUD
DSEE 11gR1 Replication
DS Master 1 Server 2
OUD
Directory
Server 2

Step 3
OUD
Directory
DSEE 11gR1 Server 1
OUD
DS Master 1 Replication
Server 1
OUD
DSEE 11gR1 Replication
DS Master 1 Server 2
OUD
Directory
Server 2


Step 4 Final
OUD
Directory
DSEE 11gR1 Server 1
OUD OUD
DS Master 1 Replication Replication
Gateway Server 1
OUD OUD
DSEE 11gR1 Replication Replication
Gateway Server 2
DS Master 1 OUD
Directory
Server 2

Next Steps
• Documentation:
http://download.oracle.com/docs/cd/E22289_01/index.htm
• Download Product from OTN
• Contact Oracle Platform Technology Solutions
– Email Oracle-Development_ww@oracle.com
– Put in subject line “Oracle Unified Directory”
• Directory blog for news and updates:
– http://blogs.oracle.com/directoryservices/


OUD 11gR1 PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

OUD 11gR1 PDF

Uploaded by

Copyright:

Available Formats

<Insert Picture Here>

Oracle Unified Directory 11gR1

Oracle Confidential - under NDA 2

• Market Trends and Challenges

• Introducing Oracle Unified Directory

• OUD vs. ODSEE vs. OpenDS

• Detailed Features / Functions / Benefits

• Deployment Use Cases

Oracle Confidential - under NDA 3

Oracle Confidential - under NDA 4

• How can a company

• To support billions of users and

• Too many identity stores

• Different directory vendors for

Oracle Confidential - under NDA 9

Oracle Confidential - under NDA 10

Oracle Internet Oracle Unified

Oracle Confidential - under NDA 11

Oracle Confidential - under NDA 12

Oracle Confidential - under NDA 13

• Only Unified directory to combine the services of a virtual

• Carrier grade performance with read and write

• Standards support to simplify application integration

Oracle Confidential - under NDA 14

• Core directory functions

• Full compatibility with ODSEE

• Complete Java directory services solution with OVD and DIP

Oracle Confidential - under NDA 15

Oracle Confidential - under NDA 16

Oracle Confidential - under NDA 17

Oracle Confidential - under NDA 18

Oracle Confidential - under NDA 19

Oracle Confidential - under NDA 20

Oracle Confidential - under NDA 21

Oracle Confidential - under NDA 22

Oracle Confidential - under NDA 23

ODSEE OUD OUD

ODSEE OUD OUD

Oracle Confidential - under NDA 24

• Step 2 – upgrade ODSEE servers to OUD one at a time

• Step 3 – set up replication gateway between OUD and ODSEE once

• Step 4 – continue to upgrade all ODSEE servers to OUD with no down

Oracle Confidential - under NDA 25

Oracle Confidential - under NDA 26

• Oracle support and innovation only available through OUD

Oracle Confidential - under NDA 27

Oracle Confidential - under NDA 28

Oracle Unified Directory

Local Load Distribution

Default data store

Oracle Confidential - under NDA 29

Oracle Confidential - under NDA 30

Oracle Confidential - under NDA 31

Oracle Confidential - under NDA 32

Oracle Confidential - under NDA 33

Oracle Confidential - under NDA 34

Oracle Confidential - under NDA 35

Oracle Confidential - under NDA 36

Oracle Confidential - under NDA 37

Oracle Confidential - under NDA 38

Oracle Confidential - under NDA 39

Oracle Confidential - under NDA 40

Proxy Distribution • Distribute entries across different • Provide elastic