Showing posts with label OVD plugin. Show all posts
Showing posts with label OVD plugin. Show all posts

Wednesday, September 21, 2016

How to develop Oracle Virtual Directory 11g Custom Plugin

There are times where out-of-box OVD functionality is no sufficient for client requirements. We may need to write some custom plugins which will extend the OVD functionality.

I'm about to write a post on this but it seems like there is excellent post from Oracle A-team.

http://fusionsecurity.blogspot.com/2013/08/creating-custom-ovd-plugin.html

And

https://ranxing.wordpress.com/2015/05/14/how-to-write-ovd-custom-plugin/

Based on the requirement you may need to extend the BasePlugin class methods.

Example:

1. postSearchEntry() is the method implementation to manipulate any search results.

2. get() is the method if needed to manipulate the search criteria even before it talks to backend DS.

Hope this helps.

-- Siva Pokuri.


Friday, May 6, 2016

Fix: Oracle Virtual Directory(OVD) not showing ismemberof attribute from Oracle Unified Directory(OUD)

Environment:

- Oracle Virtual Directory 11g(11.1.1.9.0)
- Oracle Unified Directory 11g R2 PS2
- OUD adapter configured in OVD

Issue:

Oracle Virtual Directory not showing groups membership of user in user profile

Solution:

- Open and login to OVD ODSM console
- Click on Adapters tab
- Select OUD adapter you already created
- Click on Plug-ins tab
- Click on "Create Plug-in" icon
- Click on "Select" button next to class field
- Select "VirtualMemberOfPlugin" from the list of plugin classes
- Assign some name to the plugin. Say "GroupAttributePlugin"
- Add all the accepted parameters for the plugin as mentioned below.
        
        1) searchBase - DN of the OUD groups (Example: ou=groups,dc=pokuri,dc=com)
        2) adapterName - OUD adapter name defined in OVD
        3) explicitrequestonly - accepts "true" or "false" (I did not see any difference with either value)
- Click on "Apply" to save the changes

Now, connect to OVD and search user with attribute "isMemberOf" using ldapsearch command.

Search Command:


./ldapsearch -h pokuri.demo.com -p 6501 -D "cn=orcladmin" -w Abcd1234 -b "DC=pokuri,DC=com" "(uid=spokuri)" ismemberof uid


OUTPUT

dn: cn=spokuri,ou=oud,dc=pokuri,dc=com
uid: spokuri
ismemberof: cn=Admins,ou=oud,dc=pokuri,dc=com

Hope this helps some one out there.

-- Siva Pokuri