Accessing LDAP Directory from ABAP

Hi all,
is there an easy posibility to access LDAP Users with their orgnanizational data from ABAP? I also would need to access the roles that are created on the LDAP as it is the general UME.
Thanks and best regards,
Dennis Junker

Hello Dennis,
You can synchronize your data between LDAP and ABAP with certain limitations. For example, passwords cannot be synchronized. Refer to SAP notes:
793191 - FAQ: User master synchronization with LDAP directories
603208 - Passwords during the LDAP user master synchronization
If you are trying to use the LDAP for authenticating SAP users, this is not possible too. Have a look at SAP note 448360. An excerpt:
o Logging on to the SAP system
The Application Server ABAP does not support the direct use of
   the directory to authenticate a user.
But you could use the LDAP to authenticate your users via portal.
Regards,
Désiré

Similar Messages

Access Ldap directory

Dear All,
I want to access the ldap directory to get the users' names , but i don't know how to get the ldap password and data required to access it, plz help.
Thanks alot,
Marwa

The SDK works with CCM4 only. However, it shouldn't be hard to rewrite components to work with CCM6 if you look at the list of what has changed: http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Unified%20Communications%20and%20Video&topic=IP%20Phone%20Services%20for%20Developers&topicID=.ee94c94&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc1020e
Just grab a copy of the latest developer guide and adapt the code: http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/devguide/6_0_1/cucm_devguide.html
The database schema (here's a link to bookmark immediately - it contains all developer guides for all ccm releases: http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_programming_reference_guides_list.html)
is also helpful depending on what you do (e.g if you want to know which user is currently logged into a phone by extension mobility).. there's no AXL call for that so you need to make an sql query to extract that information.

Accessing MsSQL Database from ABAP

Hi Guys,
I want to connect to an external MsSQL Database running in a window environment from an ABAP Report program where the SAP instance running in a Linux OS with DB2 as a Database. I tried all options suggested in all public forums like maintaining DBCON table entry & placing compatible dll files. I need answers from individuals who have done it in the recent past with this environment not beating bushes.
Thanks in advance.
Regards
Vijaya

hi,
see on oss note Question 4
Note 555223 - FAQ: Microsoft SQL Server
Q4: My SAP System runs under Oracle (DB2, SAPDB, ...) and I want to
exchange data with a non-SAP Microsoft SQL Server directly from ABAP.
Q4: My SAP System runs under Oracle (DB2, SAPDB, ...) and I want to exchange data with a non-SAP Microsoft SQL Server directly from ABAP. A4: The establishing and use of connections from an R/3 system to another non-SAP database (from the same vendor or not) is called multi-connect and is described in note 178949.
But you must have a specific application server running on Windows if you want to connect SAP to your Microsoft SQL server with DBCON.
Rgds
Edited by: stéphane mouraux on Feb 27, 2010 11:21 PM

How to access UWL tasks from ABAP ?

Hello workflow experts!
We are using UWL adhoc workflows (java workflow) in connection with Portal collaboration rooms. The system creates the tasks in the java workflow with relation to the collaboration room - so far so good.
Now I would need to read adhoc tasks (or workflows) from ABAP. I have not found any API yet. Does someone know how to get Java workflow tasks from ABAP ?
Thank you in advance!
Johannes

Hi Johannes ,Please see if this information helps.
WebFlow offers the open interface called Wf-XML.The Wf-XML interface is based on XML and allows workflows from different vendors to communicate with each other.Wf-XML is the only open interface for supporting interoperability of business processes.
Wf-XML comes from the Workflow Management Coalition, an independent body of workflow vendors.
The Actional control broker integrates directly into SAP WebFlow enabling proxy objects to be called directly from the workflow step. When called, the proxy method will make a call to the outside system either as a background task or as a dialogue step.
These proxy objects are generated in the SAP system using a converter which converts the objects interface to the SAP syntax.
A detailed description of the interface is available on the WfMCs web site at www.wfmc.org.
Edited by: Umakanth R on Dec 9, 2008 12:49 PM

Accessing ACTIVE DIRECTORY FROM JAVA CODE

I am trying to access the Active DIrectory user through a java code.
Kindly let me know the steps apart from creating the user in ADS to be followed so that the following java code may work.
presently it is giving the following error.
problem serching the directory
//package com.axa;
import java.util.Hashtable;
import javax.naming.ldap.*;
import javax.naming.directory.*;
import javax.naming.*;
public class AdHelper
     public static void main(String args[])
System.out.println("1");
          Hashtable env = new Hashtable();
          String adminName = "CN=user,CN=Users,DC=BDC4AXA.CO.IN";
          String adminPassword = "user";
          String ldapURL = "ldap://10.1.242.51:636";
System.out.println("2");
          env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
          env.put(Context.SECURITY_AUTHENTICATION,"simple");
          env.put(Context.SECURITY_PRINCIPAL,adminName);
          env.put(Context.SECURITY_CREDENTIALS,adminPassword);
          env.put(Context.PROVIDER_URL,ldapURL);
System.out.println("3");
          try {
               // Create the initial directory context
               DirContext ctx = new InitialLdapContext(env,null);
System.out.println("4");
               SearchControls searchCtls = new SearchControls();
          System.out.println("5");
               //Specify the attributes to return
               String returnedAtts[]={"sn","givenName","mail"};
               searchCtls.setReturningAttributes(returnedAtts);
               //Specify the search scope
               searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
               //specify the LDAP search filter
               String searchFilter = "(&(objectClass=user)(mail=*))";
System.out.println("6");
               //Specify the Base for the search
               String searchBase = "DC=ANTIPODES,DC=COM";
System.out.println("7");
               //initialize counter to total the results
               int totalResults = 0;
               // Search for objects using the filter
               NamingEnumeration answer = ctx.search(searchBase, searchFilter, searchCtls);
System.out.println("8");               //Loop through the search results
               while (answer.hasMoreElements()) {
          SearchResult sr = (SearchResult)answer.next();
               totalResults++;
System.out.println("9");
               System.out.println(">>>" + sr.getName());
               Attributes attrs = sr.getAttributes();
                    if (attrs != null) {
                         try {
                         System.out.println(" surname: " + attrs.get("sn").get());
                         System.out.println(" firstname: " + attrs.get("givenName").get());
                         System.out.println(" mail: " + attrs.get("mail").get());
                         catch (NullPointerException e)     {
                         System.out.println("Errors listing attributes: " + e);
               System.out.println("Total results: " + totalResults);
               ctx.close();
               catch (NamingException e) {
               System.err.println("Problem searching directory: " + e);
          catch(Exception e)
               System.out.println("Unhandled Exception: " + e);
}

This is what I have for my LDAP connection.
public Hashtable<String, String> env = null;
     public LdapContext ldapContext = null;
     public Control[] connCtls = null;
     Context ctx;
     DirContext dirContext;
public LDAPAuth(String ldapurl) {
          ldapurl = "ldap://" + serverIP + ":389";
          try {
               env = new Hashtable<String, String>();
               env.put(Context.INITIAL_CONTEXT_FACTORY,
                         "com.sun.jndi.ldap.LdapCtxFactory");
               env.put(Context.SECURITY_AUTHENTICATION, "simple");
               env.put(Context.PROVIDER_URL, ldapurl);
               env.put(Context.SECURITY_PRINCIPAL, "cn=username,cn=users" + baseName);
               env.put(Context.SECURITY_CREDENTIALS, "password" + baseName);
               env.put(Context.SECURITY_PROTOCOL, "ssl");
               ctx = new InitialContext(env);
          } catch (Exception e) {
               System.out.println(" bind error: " + e);
               e.printStackTrace();
          try {
               ldapContext = new InitialLdapContext(env, connCtls);
          } catch (AuthenticationException e) {
               System.out.println("Authentication exception " + e);
          } catch (NamingException e) {
               System.out.println("Naming exception " + e);
     public Attributes fetch(String username) throws NamingException {
          DirContext ctx = new InitialDirContext(env);
          Attributes attributes = ctx.getAttributes(username);
          try {
               System.out.println("fetching: " + username);
               Object obj = ctx.lookup("cn=" + username
                         + baseName);
               System.out.println("cn=" + username + baseName + "is bound to: " + obj);
               //attributes = obj.getAttributes("");
               for (NamingEnumeration<?> ae = attributes.getAll(); ae
                         .hasMoreElements();) {
                    Attribute attr = (Attribute) ae.next();
                    String attrId = attr.getID();
                    for (NamingEnumeration<?> vals = attr.getAll(); vals.hasMore();) {
                         String value = vals.next().toString();
                         System.out.println(attrId + ": " + value);
          } catch (NamingException e) {
               System.out.println(" Problem looking up " + username + baseName + ". " + e);
          return attributes;
Now, I'm sure it has something to do with how I'm passing in the username and the groups. But I want to have ANY user log in, not just this test. I may be a little confused on how this works, but if anyone could explain to me why what I am trying to do doesn't work, I would greatly appreciate it.
Thanks in advance,
Tetsuya.
Edited by: tetsuyamasamune on Sep 8, 2008 3:55 PM

Access LDAP attribute from Webmail

Hi there,
We need to do some customizations on webmail.
One of the things we want to do is to be able to read and write an ldap attribute outside the multivalue attribute NSWMEXTENDEDUSERPREFS.
I've seen on "Webmail Express Customization Guide" that we can load on http startup other external attributes using a command like:
configutil -l -o service.http.extrauserldapattrs -v myattribute:w
on which the :w at the end means that webmail could have write access to the attribute. (Pag 71 of W.E.C. Guide)
I've done that, but the problem is that if I try to write a new value on the attribute, the value is created on the NSWMEXTENDEDUSERPREFS as myattribute=value
So .. It reads from one side but write to another! Any ideas how to write on the myattribute directly from webmail interface?!
Thanks,
Sergio Sousa

Hi,
have you allready tryed to read the attribute directly from the BOL in the implementation class of the view, without creating any new context node? Maybe this coding might help you:
DATA: lr_entity        TYPE REF TO cl_crm_bol_entity,
DATA: lv_collection TYPE REF TO if_bol_bo_col.
DATA: lv_cat type string.
lr_entity ?= me->typed_context->BTAdminH->collection_wrapper->get_current( ).
TRY.
lv_collection = lr_entity->get_related_entities( iv_relation_name = 'BTHeaderActivityExt' ).
   CATCH cx_sy_ref_is_initial.
ENDTRY.
      lr_entity ?= lv_collection->get_current( ).
CALL METHOD lr_entity->if_bol_bo_property_access~get_property_as_string
    EXPORTING
      iv_attr_name = 'CATEGORY'
    RECEIVING
      rv_result    = lv_cat.
Best regards,
Oliver

ACS can not access ADS-LDAP starting from "DC=..."

Hi
I have an ACS v4.2 from which I try to access an ADS LDAP directory. When I use "CN=Users,DC=Domain,DC=com" as the baseDN for the users and the groups everything works as it should. When I change the base DN to "DC=Domain,DC=com" only, then the ACS is not able to find any users or groups. Even when trying to configure the group mappings he claims: "LDAP Server NOT reachable. Please check the configuration.". Using an LDAP browser I don't have any issues accessing the directory from the shorter baseDN.
Is this a v4.2 related problem or a general ACS problem?
The point is that I need to find users in different OU's, which are based directly under the domain name, so that I need to search for them starting from "DC=Domain,DC=com". I know that with "Generic LDAP" I can make severeal "Databsae Configurations" to resolve the issue with the OU's. But not with a "RSA SecurID Token and LDAP Group Mapping" setup. There is only possible to have one LDAP group mapping configuration.
Any input would be greatly appreciated.

Hi
We invested a lot of time together with TAC and development. Short answer: No it's not solved. It was an ACS bug. But development didn't realy understand the problem. We went ahead and restructured the ADS.
The problem we had, is that a LDAP directory of a Windows is not fully accessible. Even if you connect as a Domain Administrator or to the Global Catalog. :-) And that's where the ACS fails. LDAP browsers just read over the unaccessible parts of a LDAP directory and show you all the accessible part. ACS doesn't. He stops and reports the failure. You can see that clearly when sniffing the access of the ACS and the LDAP browser to the directory. Unfortunately the unaccessible part is at the beginning of the ADS LDAP directory. :-(
Maybe they resolved the problem nowadays. Or if you have a Windows Guru who can help you in making the directory fully accessible I would be interessted in the How-To.
I wish you best luck with your issue.
Kind regards
Roberto

LDAP search from an Express Rule

Hi,
I need to do a simple search in a LDAP directory from inside a Rule. I�m trying to do this from Express code but i�m not able and dont find any info about it in the forum.
I�m trying to do it with a code like:
<block>
<setvar name='context'>
<new class='javax.naming.ldap.InitialLdapContext'/>
</setvar>
<invoke name='search'>
<ref>context</ref>
<s>c=es</s>
<s>(cn=*)</s>
<s>null</s>
</invoke>
</block>
I dont know if i have to use javax.naming.ldap.InitialLdapContext or maybe the com.sun.jndi.ldap that comes with idM.
Any clue? Any sample code to do it?
Regards,

Here is a simple example of calling a custom Java Class to retrieve a users phone number from LDAP. Hope someone can return the favor by answering some of my posts.
              <invoke class="JNDIutility" name="getUsersPhoneNumber">
              <ref>:variables.employeeID</ref>
              <s>ou=NonEmployees,ou=People,dc=xxx,dc=xxx</s>
              </invoke>Here is the simple Java class:
* @(#)JNDIutility.java     1.0   07/16/2007
* Author: Larry L. Viars
* Perform an Enterprise Directory search by specifying a set of
* search attributes to be matched.
import javax.naming.*;
import javax.naming.directory.*;
import java.util.Hashtable;
import java.util.ArrayList;
import java.util.StringTokenizer;
import java.util.*;
public class JNDIutility {
    static public DirContext context;
    static private Hashtable env;
          public JNDIutility ()
     public static DirContext connect()
         // Set up the environment for creating the initial context
         env = new Hashtable(11);
         env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
                 env.put(Context.SECURITY_AUTHENTICATION, "simple");
         env.put(Context.SECURITY_PRINCIPAL, "cn=Directory Manager");
         env.put(Context.SECURITY_CREDENTIALS, "Y0urP@ssw0rd");
         env.put(Context.PROVIDER_URL, "ldap://yourservername.xxx.xxx:389");
         try
             context = new InitialDirContext(env);
         catch(NamingException e)
             System.out.println("Directory server binding error");
             e.printStackTrace();
             // logging code goes here
      return context;
* Perform an Enterprise Directory search by specifying a set of
* search attributes to be matched.
* Search Attributes: (userID)
* Returns a Users Phone Number from LDAP.
public static String getUsersPhoneNumber(String userID, String contextToSearch) {
     List InitList = new ArrayList();
        String searchType;
        String rc = "false";
          try {
                // Create initial context
                context = connect();
                   // Specify the ids of the attributes to return
                   String[] attrIDs = {"TelephoneNumber"};
                // Specify the attributes to match
                // Ask for objects that have the attribute
                      Attributes matchAttrs = new BasicAttributes(true); // ignore case
                   matchAttrs.put(new BasicAttribute("enterpriseid", userID));
                   // Search for objects that have those matching attributes
                   NamingEnumeration answer = context.search(contextToSearch, matchAttrs, attrIDs);
                      while (answer != null && answer.hasMore())
               SearchResult sr = (SearchResult) answer.next();
               String TelephoneNumber = sr.getName();
               Attributes attrs = sr.getAttributes();
                          for (NamingEnumeration ne = attrs.getAll(); ne.hasMoreElements();) {
                               Attribute attr = (Attribute) ne.next();
                               String attrID = attr.getID();
                               for (Enumeration vals = attr.getAll(); vals.hasMoreElements();) {
                               InitList.add(vals.nextElement());
                } // End while loop displaying list of attributes
                 // Close the context when we're done
                 context.close();
                 } catch (Exception e) {
                   e.printStackTrace();
     String UsersPhoneNumberToString = (InitList.toString());
     String UsersPhoneNumberWithLeftBracketRemoved = UsersPhoneNumberToString.replaceAll("(?:\\[)+", "");
     String UsersPhoneNumberWithBothBracketsRemoved = UsersPhoneNumberWithLeftBracketRemoved.replaceAll("(?:])+", "");
     return UsersPhoneNumberWithBothBracketsRemoved;
}

Problem accessing LDAP via sqlnet

Hello,
I have installed OID 10.1.2 for accessing targets databases in 9.2, with oracle enterprise user, and that run correctly when I access to the taget database in local.
If I use sqlnet I receive the error 28030!
If someone have an idea!
Thanks

ORA 28030
Text: Server encountered problems accessing LDAP directory service
http://www.oracle.com/technology/products/oid/oidhtml/sec_idm_training/html_masters/handson.htm
or
did you see the How to set up Enterprise User Security
http://www.oracle.com/technology/deploy/security/db_security/howtos/eus-how-to.html
regards,
--Olaf

Can't Authenticate in LDAP directory after upgrade from 10.4.11 to 10.5.1

Hi, all
Yesterday I have tried to upgrade my Xserve Intel from 10.4.11 Tiger to 10.5.1 Leopard Server
In my server there is this service:
-AFP
-DNS
-SMB
-Open Directory Master
- XSAN Primary MDC
All works fine but when I try to acces with worgroup manager to LDAP directory I can't authenticate with "diradmin" this thing appen in local machine and with remote worgroup manager connected to the server.
I have tried with "root" user and I have been able to authenticate for some time, (5-15 min.) after It's impossible to access with all user.
The client still authenticate with user and password in all computer with 10.5.1 and 10.4.11 workstation, but now i wan't to add some new users and I can't do That!!!!!
So for now I have restore my old 10.4.11 Server Tiger, but I wish to know if someone have tried new 10.5.2 server upgrade and maybe there is some kind of fix to this problem.
Thank's In Advance

After posting on numerous message boards, and no one having an exact answer, but several making plenty of great suggestions, I think I've finally figured out the cause of this issue or at least part of the cause.
Within 'Server Admin', select "Open Directory",
under: Settings > Policy > Binding
there are six check boxes under "Security"... for testing kerberos, I have been checking the first four boxes, which are:
1. disable clear text passwords
2. digitally sign all packets (requires Kerberos)
3. encrypt all packets (requires ssl or kerberos)
4. block man-in-the-middle attackes (requires kerberos)
through troubleshooting this myself, and doing each change, followed by a server reboot, then immediately attempting to authenticate to /LDAPv3/127.0.0.1/, it seems that enabling some, or some combination of these Security settings triggers WordGroup Manager to not accept the diradmin password.
referring to the numbers above (1 through 4)...
2 or 4 by themselves fails
1 and 3 together fails
I haven't gone beyond that for testing and don't know what other combinations works or fails.
I don't know if there is something beyond this that is specific to my configuration or environment that plays a part in this failing. All I know is that turning off all Security checkboxes in this section fixes the problem.
I wonder if anyone who has never seen this problem can try this on their 10.5.2 Server and see if they are still able to authenticate as their diradmin to WGM. Regardless, seems that this is a WGM bug to me, right?
if you are having this problem, uncheck all of these boxes and then reboot before trying to authenticate.

Creating MS- Access data base from the Internal tables data of an ABAP Prog

Hi,
I have a requirement where I have to create Access tables from the Internal tables of ABAP program.
The tables are like Project systems Header data, WBS elements data, Netwrok data, Activity data, Milestone data and Project revunes. I will have the internal tables for these. I want to transfer these tables data into MS-Access tables onto Users desktop.
Please adivce me how to do this.
Thanks,
Prabhakar

HI,
I am trying to create a DB table in the access but I am not successful. The following is the format of the table needs to be created from the ABAP program.
I have created a table with the following format in MS-Access with the name tblHeader. Is it neccessary to create a DB table ( MS-Access) in advance or by using the FM STRUCTURE_EXPORT_ TO_MSACCESS we need to create a structure in MS-Access?
False tblHeader
Field Name Type Length
ProjectDef Text 255
ProjectDes Text 255
Created Text 50
Change Text 50
RespPerson Text 255
Profile Text 255
Plant Text 255
ObjNo Text 255
OverheadKey Text 255
I have created a Z table ZTAB1 with the same format from the SAP fields.
MS-Access Table name : tblHeader
ABAP program Internal table : t_tblheader
Z table Name : ZTAB1.
First I am trying to create a structure in MS-Access with the following FM.
CALL FUNCTION 'STRUCTURE_EXPORT_ TO_MSACCESS'
EXPORTING
dbname = 'D:\test\db2'
LANGU = SY-LANGU
dest = 'PS_ACCESS_1'
TABLES
tabname = ttblheader
EXCEPTIONS
system_failure = 1
comm_failure = 2
OTHERS = 3
Table ttblheader type is DFIES and I am filling the table with only one record and one field i.e TABNAME and the value is ZTAB1.
The source code of the FM is using another FM
CALL FUNCTION 'MSACCESS_STRUCT_ EXPORT_RFC' DESTINATION DEST
Here I am getting the Error message Object required. I can't able to create a table structure in MS-Access.
Next I am going to Use the FM
'TABLE_EXPORT_ TO_MSACCESS'
and it will create the records in the MS-access table.
CALL FUNCTION 'TABLE_EXPORT_ TO_MSACCESS'
EXPORTING
dbname = 'D:\test\db2'
langu = sy-langu
dest = 'PS_ACCESS_2'
tabname = 'ZTAB1'
reftable = 'tblheader'
FLG_NO_DOWNLOAD = ' '
FLG_APPEND = ' '
FLG_POPUP = ' '
TABLES
dtab = t_tblheader
here t_tblheader is the internal table.
Reftable = tblheader is the table which i have created in advance. ( not by using the First FM)
In this FM i am getting a error message : Unable to connect to Database D:\test\db2.
Please help me how to create the MS-Access database.

Access to biw from r3 via abap

hi folks,
we are using ecc 6.0 and biw 7.0 , and have a lot of abaps that have to directly show data from biw in e.g. an alv, in former days we had EIS and just selected the cf7xx tables to do this, but does anybody know how we can achive this easily using direct calls to biw or something like this.
best regards,
oliver

There are multiple ways of accessing BW data from ECC.
- Create a ABAP in ECC and make a RFC functional to BW
- Create a report in BW and dump the output to one of the tables in ECC using APD process
- From BW report, you can always link the ECC transaction
Regds,
Ravi

TS3212 Cannot install iTunes to my PC running Windows Vista. Message "The installer has insufficient privileges to access this directory....Log on as administrator." I am logged on as administrator. I am attempting to install from download by right-clicki

I've had iTunes on my PC forever. Because recent updates have aborted with the message:"The installer has insufficient privileges to access this directory... Log on as administrator," I am now attempting to download a fresh copy from the Apple website. Same message! I am logged on as administrator. I can download, then attempt to run by right-clicking on the installer and selecting, "Run as administrator" but that gets me only to the same point (and message) as attempting to install directly from the internet. I've never seen this message with any other download. What gives?

What's the precise name of the directory being mentioned? (Give the full file path, please.)

Accessing Oracle LDAP Service from Microsoft SQL*Server2000

Hi
We are trying to link onto the Oracle LDAP service from a stored procedure in an SQL*Server 2000 database. But we are not able to succeed.
Anyone who can share some experience with us on the topic? Is it at all possible to do what we are trying to do? Must we install some driver software (or the like) at the SQL*Server side? Or do we have to write a Java application instead that uses JNDI to access OID and then connect to the SQL*Server?
Any help is appreciated.
Regards,
Jan Holdam

There are samples and more information on calling Web services from the database here:
http://otn.oracle.com/tech/webservices/database.html

Retrieve all user id's from LDAP directory and populate in Oracle table.

Guys,
We've implemented LDAP authentication functionality in our application using Oracle's dbms_ldap package objects.
Now,Is there any way that I can retrieve all user ids from the LDAP directory and store in an Oracle table?
The distinguished name of authorized user as it appears in our LDAP directory is below:
dn=uid=ab0472,ou=people,ou=xyz,o=world.
Now I need to fetch all users uid's from the LDAP directory and populate in an Oracle table.Can somone help me with thoughts.
Thanks,
Bhagat

Have a look at attachments API, since this also does the same thing except that it puts the file in fnd_lobs instead of the custom table.
Thanks
Tapash

Accessing LDAP Directory from ABAP

Similar Messages

Maybe you are looking for