Configuring iKnowBase 5.3.2

Finding OID Parameters

Connect to the database as IKB

Call the GET_GROUP_INSTALL_BASE and GET_SUBSCRIBER_BASE functions in the WWSEC_OID package in the PORTAL schema:

select portal.wwsec_oid.get_group_install_base from dual;
select 'cn=Users,' || portal.wwsec_oid.get_subscriber_base from dual;

Sample output:

GET_GROUP_INSTALL_BASE
------------------------------------------------------------
cn=portal.080916.233623.703000000,cn=groups,dc=disney,dc=com

'CN=USERS,'||PORTAL.WWSEC_OID.GET_SUBSCRIBER_BASE
-------------------------------------------------
cn=Users,dc=disney,dc=com

Synchronize Users

Set External Key for groups in iKnowBase:
Add External Key IKB_DIM_ORG to dimension "Organization" in iKnowBase
Add External Key IKB_DIM_ORG_XNET to dimension "Organization > xNet Departement" in iKnowBase
Add External Key IKB_EMAIL to attribute "iKB Email" in iKnowBase
Optional: Add Attribute First Name with External Key FIRST_NAME in iKnowBase
Optional: Add Attribute Last Name with External Key LAST_NAME in iKnowBase
Go to iKnowBase Development Desktop
Click Advanced OID synchronizing
Click Create new synchronization profile
- As Profilename, enter OID
- As OID Server name, enter donald.disney.com
- As OID Server port, enter 389 (already entered)
- As OID administrator, enter cn=orcladmin (already entered)
- As Password, enter welcome1
- As LDAP Group level (top), enter the SYNC_OID_PORTAL_GROUP value (see "Finding OID Parameters"), e.g. cn=portal.080916.233623.703000000,cn=Groups,dc=disney,dc=com
- As LDAP user level (top), enter the SYNC_OID_USER_BASE value (see "Finding OID Parameters"), e.g. cn=Users,dc=disney,dc=com
- Check the "Sync. all groups" field
- As Top dimension (Person), select xNet Department
- As Top dimension (Organization), select Organization
- As Dimension type (Person), select iKB Person
- As Dimension type (Organization), select iKB Department
- As Default access group, select Open after approval
- As Default iKB group, select IKB_XNET_USERS
- As Information type (Person Card), select iKB Person Profile
- As Information type (Organization Card), select iKB Organization Card
Click Apply
Attributes tab:
1. Enter the following attribute mappings for users: Note: If you synchronize users from AD to OID, you can use "displayName" instead of "sn" in the above mapping.
2. Check the three fields: Create iKB group, Create Portal group, and Create org.card
3. Enter the following attribute mappings for organizations:
4. Enter the following optional attribute mappings (all with iKB attribute type=Text and Type=Person):
5. Click OK and note the ID of the synchronization profile (e.g. 15212)

Connect to the database as IKB and run the synchronization, e.g.:

exec oid_sync.synchronize_users(15212);

As an alternative, schedule a background job using e.g.:

begin
	dbms_scheduler.create_job (
		job_name        => 'OID_SYNC_JOB'
	,	job_type        => 'PLSQL_BLOCK'
	,	job_action      => 'BEGIN oid_sync.synchronize_users(15212); END;'
	,	repeat_interval => 'FREQ=MINUTELY; INTERVAL=5'
	,	enabled         => true
	);
end;
/

If you need to temporarily disable the background job, here's how:

exec dbms_scheduler.disable('OID_SYNC_JOB');
exec dbms_scheduler.enable('OID_SYNC_JOB');

If you would like to synchronize first name, last name and email, here are two options:
1. Synchronize all users in the IKB_XNET_USERS group from OID to iKnowBase using
2. Create a PL/SQL procedure OID_SYNC_CUSTOM.POSTUSERADD using and include it in the "Function that runs post-usersynchronization" field in the configuration above (step 11).