|
[B]Using OracleAS Infrastructure with Middle Tier Installations[/B]
OracleAS提供三种中间层安装可选项.除了J2EE和Web Cache之外,其它安装都需要OracleAS Metadata Repository.
■ J2EE and Web Cache:
安装Oracle HTTP Server,OracleAS Container for J2EE,Web Cache,Web Services,BC4J,UDDI,and Oracle Enterprise Manager Application Server Control. OracleAS Metadata Repository是可选的,但Orace建议你安装它.
安装OracleAS Infrastructure允许建立database-based的OC4j clusters,也可使用Single Sign-On和其它身份管理,保护特性.
■ Portal and Wireless:
安装J2EE和Web Cache的所有组件,另外还会安装Portal,Syndication Services,Ultra Search,Discoverer和Personalization.这是需要OracleAS Metadata Repository的.
■ Business Intelligence and Forms:
安装J2EE和Web Cache的所有组件,Portal和Wireless,另外还会安装Forms,Reports,Discoverer和Personalization.这是需要OracleAS Metadata Repository的.
选择以上任一安装模式之一,其它的OracleAS Integration组件,例如OracleAS ProcessConnect,OracleAS InterCOnnect,Workflow都会自动安装.
Oracle Connect Management Software Developer Kit(CM SDK)则可在任一标准中间层安装时,独立地加进去安装.
Distributed COnfiguration Management(DCM)组件能管理中间层,将Portal,Wireless,Business Intelligence和Forms安装参数的metadata存放到OracleAS Metadata Repository中去.
对于J2EE和Web Cache ,DCM缺省使用file-based repository.如果你选择J2EE,Web Cache与Infrastructure关联安装,则file-based repository会move到database-based repository中去,并且能做database-managed OracleAS Clustering.
[B]OracleAS Metadata Repository Contents[/B]
在OracleAS Metadata Repository中存放了多种OracleAS组件的metadata.OracleAS Metadata Repository含有以下组件的metadata:
■ Distributed Configuration Management(DCM)
■ Oracle Internet Directory(OID)
■ OracleAS UDDI Registry(for Web Services)
■ Oracle Business Components for Java(BC4J)
■ OracleAS Portal
■ OracleAS Syndication Services
■ Oracle Ultra Search
■ OracleAS Single Sign-On(OSSO)
■ OracleAS Wireless
■ OracleAS Integration
■ Oracle Workflow
■ OracleAS Web Services
■ Online Analytical Processing(OLAP)
■ OracleAS Certificate Authority
可在Adminitrator's Guide中看到各组件的具体信息.
[B]Oracle Identity Management[/B]
Identify Management是指管理组织内网络实体的安生命周期的过程,常指管理组织内应用使用者.Oracle Identity Management是与Infrastructure集成的,可用于复杂的分布式,多应用环境下的集中安全管理.Oracle Identity Management Infrastructure含有以下组件:
■ OracleAS Single Sign-On
■ Oracle Internet Directory
■ Oracle Certificate Authority
[B]OracleAS Single Sign-On[/B]
就是用一个password访问多个应用程序.只需login到OracleAS一次,则可访问所有已授权的应用,而不需再次login.Oracle Single Sign-On从Oracle Internet Directory和LDAP v3兼容的directory中获取用户信息.
[B]Oracle Internet Directory[/B]
Oracle Internet Directory(OID)是Lightweight Directory Access Protocol(LDAP)在Oracle中的实现,version 3. Application instances,components,和infrastructure将安全和管理信息存放在directory中.Oracle Internet Directory为OracleAS提供authentication and a centralized user provisioning model,可以用这些在企业层面创建和管理用户.它还提供了单一的安全管理信息(如:OracleAS instance objects,OracleAS instance configuration,OracleAS component schema mappings,application group informaion by components(such as Portal)).当用户login时,OID凭证会在OracleAS Single Sign-On中authenticated,然后就可以seamlessly访问多个应用程序.
■ Directory Integration and Provisioning
Directory Integration and Provisioning(DIP)是Oracle Internet Direcotry的组件之一.
它允许OID和其它directories,user repositories和automatic provisioning services for Oracle components,applications,其它第三方应用之间通过standard interface同步信息. 通常,Provisioning an application表示创建和管理单独的用户帐号和它们的权限.
■ Delegated Administration Services
Delegated Administration Services(DAS)是OracleAS Internet Directory(OID)的组件之一.
It allows users and application administrators to perform trusted proxy-based administration of directory information. You can assign administrative responsibilities according to business requirements, and control security policies for different components of the enterprise.
[B]OracleAS Certificate Authority[/B]
OracleAS Certificate authority manages and publishes X.509v3 certificates to support PKI-based(strong) authentication methods. OracleAS Certificate Authority also serves as an assertion services, since the certificates it generates are assertions about a network's identity and its entitilements. |
|