Using LDAP User
CAKM for Oracle TDE connector supports the LDAP users.
Note
Before creating the credentials, CipherTrust Manager must be integrated with LDAP server.
Ensure that the name of the LDAP connection added to the CipherTrust Manager does not contain space. In the examples below, ensure that the
LDAP_Connection_nameparameter does not contain space.
To open the keystore using the LDAP user, execute the following query:
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY "LDAP_Connection_name:LDAP_user:LDAP_password"
To open the keystore using the LDAP user with persistent cache, execute the following query:
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY "LDAP_Connection_name:LDAP_user:LDAP_password:persistent_cache_passphrase"
To open the keystore using the LDAP user with domain, execute the following query:
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY "Domain:LDAP_Connection_name:LDAP_user:LDAP_password"
To open the keystore using the LDAP user with domain and persistent cache, execute the following query:
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY "Domain:LDAP_Connection_name:LDAP_user:LDAP_password:persistent_cache_passphrase"
To open the keystore using the LDAP user with auth-domain, execute the following query:
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY "Domain:AuthDomain:LDAP_Connection_name:LDAP_user:LDAP_password"
To open the keystore using the LDAP user with auth-domain and persistent cache, execute the following query:
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY "Domain:AuthDomain:LDAP_Connection_name:LDAP_user:LDAP_password:persistent_cache_passphrase"
Note
Before creating the credentials, CipherTrust Manager must be integrated with LDAP server.