Here are few screens of Check-in & Check-out features of Oracle Privileged Account Manager (OPAM)
OIM 11g R2 PS1 Bundle Patches - List
Here are the list of all the bundle patches for OIM 11g R2 PS1:
|
OIM
Version
|
Patch
Number
|
|
11.1.2.1.1
|
Patch:16672826
|
|
11.1.2.1.2
|
Patch:17086188
|
|
11.1.2.1.3
|
Patch:17532765
|
|
11.1.2.1.4
|
Patch:17832740
|
|
11.1.2.1.5
|
Patch:18043012
|
|
11.1.2.1.6
|
Patch:18296138
|
|
11.1.2.1.7
|
Patch:18551679
|
|
11.1.2.1.8
|
Patch:18818451
|
OPAM : Oracle Privileged Account Manager
Privileged Account Manager: Tool used for management of Privileged Accounts
Sometime we need passwords for Privileged Accounts to do certain operations but if we share the password with other user(s) then there are more chances that it may not be secured for a long time. :-) OPAM is the solution for such problems.
OPAM is an Identity Management solution to secure the passwords of Admin/Privileged Accounts like ROOT user of Unix, SYS user of Database etc. It also provides features like auditing and reporting. It provides two functions Check-in and Check-out. You can check-out the Privileged Accounts whenever you want to use it. It will generate a random password for you to use that Privileged Account.
On completion of your task, you can Check-in the Privileged Account back to OPAM. On Check-in, it again generates a random password for the same account.
OPAM provides you GUI for Check-out/Check-in or you can use command line tool for both the operations.
You may have different password policies for different target systems like Unix, Databse etc. OPAM gives you flexibility to set the password policy for different accounts. OPAM will make sure that whatever password is generated, satisfies the password policy of the target system.
OPAM can also be integrated with Oracle Identity Governance for periodic certification of access.
OPAM commes with three OOTB connectors:
Ref: Oracle Documentations
Sometime we need passwords for Privileged Accounts to do certain operations but if we share the password with other user(s) then there are more chances that it may not be secured for a long time. :-) OPAM is the solution for such problems.
OPAM is an Identity Management solution to secure the passwords of Admin/Privileged Accounts like ROOT user of Unix, SYS user of Database etc. It also provides features like auditing and reporting. It provides two functions Check-in and Check-out. You can check-out the Privileged Accounts whenever you want to use it. It will generate a random password for you to use that Privileged Account.
On completion of your task, you can Check-in the Privileged Account back to OPAM. On Check-in, it again generates a random password for the same account.
OPAM provides you GUI for Check-out/Check-in or you can use command line tool for both the operations.
You may have different password policies for different target systems like Unix, Databse etc. OPAM gives you flexibility to set the password policy for different accounts. OPAM will make sure that whatever password is generated, satisfies the password policy of the target system.
OPAM can also be integrated with Oracle Identity Governance for periodic certification of access.
OPAM commes with three OOTB connectors:
- UNIX
- LDAP
- Database
We can also leverage Oracle Database Vault or TDE (Transparent Data Encryption) for more secure environment.
Details: TDE
Details: TDE
Ref: Oracle Documentations
OIM 11g R2 PS2 - RCU Creation - Repository Creation Utility
OIM 11g R2 PS2 - RCU Creation - Repository Creation Utility
OIM 11g R2 PS2 Installation - Part 1
Oracle Identity Manager 11g R2 PS2 Installation
Part 1 - Weblogic Installation
Admin Privileges To View Approval Details of Any Request
Description:
There's common requirement for any client that Help Desk Team/Administrators should be able to search and track all the requests and should be able to see the approval details.
Limitation:
We can give "Search Request" permissions by assigning Admin Roles but there's no Admin Role which gives permissions to view Approval Details. This is not a supported feature today.
Workaround:
There are some OOTB Roles in OIM which get created at the time on installation. There's one role called "Administrators". This role has the permissions to view the Approval Details but you can assign this role to anyone. It's restricted to only one "weblogic". Assign this role to any user and he would be able to view Approval Details.
Configure Scheduler On Selected Node
I was looking for this info few years back and later I found that it was a bug with older versions of OIM 11g. Oracle provided the fix in OIM 11.1.1.3.8 and OIM 11.1.1.5.2 but couldn't look into this. Here are the steps:
Property : Scheduler.disabled
scheduler.disabled=true -> If you don want to run scheduler on any node
Restart the server using node manager so that the newly added property is picked up. Restarting from the Command-Line Interface does not work.
Ref: Oracle Docs
Property : Scheduler.disabled
scheduler.disabled=true -> If you don want to run scheduler on any node
- Log in to the WebLogic Administrative Console > Environment -> Servers
- Select the managed server where you want to add the scheduler.disabled=false property.
- Click "Lock and Edit" and go to Configuration -> Server Start.
- In the Arguments box, type the -Dscheduler.disabled=true property, and click Save.
- Click Activate Change and Restart the managed server
Restart the server using node manager so that the newly added property is picked up. Restarting from the Command-Line Interface does not work.
Ref: Oracle Docs
Subscribe to:
Posts (Atom)