Alternative of UUP, Using OVD repository (Through LDAP configuration)

Hi All,
if any body no the alternative approach of weblogic portal UUP . please help me .
MY requirement is using oracle virtual directory(OVD) repository (Through LDAP configuration)
i did ovd configuration to my weblogic server security relam . and in protal side , i have written one class to access data from we ldap and set it on .usr file .
and i am getting user profile from weblogic portal console and in my result jsp also i am displaying .
but when i am fetching group information . i am getting error .
if any body know the solution please help .
best regards
sanjay
Edited by: user1006007 on Jan 5, 2011 4:34 AM

"cn=webi" is this the distinguished name for the LDAP account?
also try using the IP instead of hostname
and if you CMS is using oracle try to use 10.2.0.2 or earlier driver.
Regards,
Tim

Similar Messages

Connecting Oracle using SQL Plus in command window through LDAP settings?

Hi
Just like to know if it is possible to connect Oracle using SQL Plus with connection type as LDAP.
Generally we connect to Oracle in cmd window as
username/password@DBServiceName
Similarly is it possible to connect Oracle using SQL plus cmd window using LDAP configuration settings.
Eg:-
If my LDAP server is oid:123:456
Context is: cn=OracleContext,dc=abcdefgh,dc=com
DBService is: xyz
Regards
jc

Specify the -L command line option to SQL*Plus, i.e.:
sqlplus -L username/password@db @blah.sql
(this will prevent the second prompt for username/password if the initial login is unsuccessful for any reason, like an invalid password).

Why we are use OVD?

Hi ,
I am new to OIM and OAM.Currently in my project they are using OID and OVD .
The diff bet ween OID and OVD is in OVD there is no Database Repository .
what my question is already OID is there whay we are using OVD?
Could any one please explain.
Thanks in advance.
Regards,
Ravi.

You don't need to use OVD if you don't need it. OVD allows you to present multiple LDAP resources as if they were one. For example, you could configure OIM/OAM to look at OVD which presents a virtual view of your OID and WebLogic embedded LDAP, so no matter whether the user is in OID or WebLogic, they can authenticate. Similarly, if you have other LDAP repositories like ODSEE or AD, you could do something similar.

Intaract with oid and bring the all groups resides in oid through ldap

Hi,
i would like to intaract with oid and bring the all groups which were resides in
oracle intrnet directory through ldap. can u please give me the procedure
that i can follow or else suggest me a documentation regarding this .
regards,
srinivas

try this (behaviour not garranteed):
For local groups (groups within the Portal's group install base) you can program a loop on the table PORTAL.WWSEC_GROUP$ then read the column NAME.
For non local groups, use the (unsupported) API wwsec_oid (function get_group_name_from_dn(wwsec_group$.dn) ) instead of reading the NAME column.
If the result is incomplete (synchro issues with OID for instance due to DIP) you'll have to use ldap request with DBMS_LDAP package.(or java alternative, of course)
Patrick.

How to use a repository in a new report

Hello,
I am starting to learn OBIEE and installed it in my home environment. I installed OBIEE, and used the RCU to install a repository in an Oracle database.
Then, I used the BI Administration tool to make a 'repository' which connects to my data (also in an Oracle database).
In the BI Administration tool I now have a physical layer, a business model and mapping, and a presentation layer. I saved this as a rpd file on my harddisk.
Then, in the Oracle BIEE Home I choose 'New report'. But I cannot find how I can choose my 'repository' with my data. I also tried to make a new datamodel, but here I am also not able to choose my repository.
How can I connect to my data in a report ? How does it work ?
Many thanks in advance,
Best Regards,
André.

You are totally getting Confused..
Have these understanding first.
You have DB installed.
You will create schema(Two users) in DB using RCU(Repository Creation Utility:Basically stores metadata required for OBIEE).
You will install OBIEE and use these schema there.
Above installation installs weblogic and then deploy BI files to weblogic to make them work.You should remember weblogic password.
Now when you open up Admin tool --Repository password should be 'Admin123' (A in capital) and username is weblogic and password should be weblogic password.
You will be able to open up the RPD in online mode.
I suggest you to first go through the Architecture of OBIEE and then start installation and start exercises.
mark correct or helpfull if it helps.Also let me know if you were able to open RPD and answers.
Regards,
Veeresh Rayan

Ms-Active Directory integration with SAP 4.7 SR2 through LDAP Connector

Dear Gurus,
Let me clarify the scenario:
At our end, we are planning for SSO, we are integrating Microsoft ADS with SAP 4.7 IDES
Following are the system details:
SAP: IDES 4.7, on Windows 2000 Advance Server, Oracle 8.1.7.,Kernel-620
MS-Active Directory: Windows 2003 Enterprise Edition, with Service Pack-1
With the above mentioned landscape we have integrated
LDAP-Connector on MS-Active Directory, on MS-Active Directory OS
side we have tested the command (ldap_rfc a LDAP_ADS g
ides.ho.com x sapgw00) then we are testing it through an
RFC in SAP 4.7(IDES), with result success.
Everything is fine Im able to Log ON thru the User but when I try to search objects in LDAP(ie. ADS) thru "FIND", but getting Error message "operation Failed".
Referred note 511141 for the error.
Can't find anything more.
Required help...
Regards,
SHAH

Dear Juergen,
As of we have applied the SP-level till 40.
Through LDAP tcode we are able to Logon to the Directory server, and we
are also able to search, through FIND,
the system displays all entries below the specified base entry.
After that we are trying to Synchronize it, using report RSLDAPSYNC_USER through SE38, but its showing following errors:
Connection created to Server LDAP_ADS (successfully with Green)
Operation Failed (Error with Red)
Error message: LDAPRC001
LDAP_SEARCH failed (Error with Red)
Error message: LDAPACCESS101
The System could not create directory objects pool (Error with Red)
Error message: LDAPSYNC005
Connection to LDAP_ADS server terminated
As for first Error: Error message: LDAPRC001, we referred Note 511141,
Response: "This error msg does not mean that the SAP System sent incorrect data".
For Error message: LDAPACCESS101 and Error message: LDAPSYNC005, we refferred 696021 and 695026
Response: to apply the correction change, as our SP level is above the requirement, we have
level-40.
Unable to get further, any solution/suggestion.
Bye for now.
Regards,
Shaibaz

Problem in committing a new document in third party repository through Ente

Hi all,
I am trying to create a document in third party repository through enterprise portal GUI. The steps I am following are:
     1. I go to repository integrated with the Enterprise portal.
     2. Then go to Folder -> New -> HTML File.
     3. Here it asks me to enter Name of the document and the Contents of the document.
     4. Then Click on Save
I am trying to implement this functionality by using RF (Repository Framework).
I have implemented createResource() method NameSpaceManger.java class. The signature of this class is:
     NamespaceManager extends AbstractSubManager implements INamespaceManager,IMutableNamespaceManager{
The Code:
if ((d instanceof IResourceCreateDescriptor) || (d instanceof ICollectionCreateDescriptor)) {
          IRid parent = d.getDestinationDescriptor().getParentCollectionRid();
          String name = d.getDestinationDescriptor().getChildName();
name = UriCodec.Decode(name);
ACEPHandle handle = (ACEPHandle)this.repositoryManager.lookup(parent);
          ACEPNode node = handle.getNode();
if (!node.isCollection()) {
               throw new ResourceNotCollectionException(parent,
                    "parent is not a collection!");
IAccessContext context = AccessContextFactory.getInstance().getContextOrNullIfUnavailable();
com.sap.security.api.IUser sapUser = context.getUser();
com.sapportals.portal.security.usermanagement.IUser epUser = WPUMFactory.getUserFactory().getEP5User(sapUser);
ResourceContext resourceContext = new ResourceContext(epUser);
RID rid = RID.getRID(node.getRid().getPath()RID.PATH_SEPARATORname);
IResource resource = ResourceFactory.getInstance().getResource(rid,resourceContext);
IContent content= resource.getContent();
InputStream iStream = content.getInputStream();
byte[] byteArray = new byte[51200];
          int bytesRead = -1;
          try{
          while ( (bytesRead = iStream.read(byteArray, 0,51200)) != -1) {
               byteArray = new byte[51200];
          }catch(IOException e){
The Error I am getting in the logs is:
<b>ContentRetrieval: Unexpected HTTP status 500 Internal Server Error: HRESULT [0x8004022f]</b>
Please advice me the right way to proceed further.
Thanks and Regards,
Ravi

Please print out the Verbose Stack Trace generated when you run this application.
I suspect that you FolderPathResolver is not pointed at the directory you think it is. You might want to try printing out
I_CurrentFolder.getAnyFolderPath();
and I_CurrentFolder.getName();
null

Connecting to UCM Content Repository through Jdev fails.

Hi,
I have installed Oracle UCM 11g and trying to connect its content repository through Jdeveloper.
Though the connection is successful,but when I disclose the connection,I don't get to see anything(Screenshot attached) and see following error message in Messages window of Jdev.
*Apr 21, 2012 1:10:41 PM oracle.stellent.jcr.IdcPersistenceManager listFolder
SEVERE: Could not list contents of folder with ID = dCollectionID:-1
oracle.stellent.ridc.protocol.ServiceException: No service defined for COLLECTION_DISPLAY.
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:135)
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:107)
     at oracle.stellent.jcr.IdcPersistenceManager.listFolder(IdcPersistenceManager.java:677)
     at oracle.stellent.jcr.IdcPersistenceManager.getChildResources(IdcPersistenceManager.java:635)
     at oracle.jcr.impl.TransientLayer.getChildResources(TransientLayer.java:534)
     at oracle.jcr.impl.FolderNode.getNodes(FolderNode.java:116)
     at oracle.webcenter.content.internal.model.rc.JCRRepositoryLogic.listFolder(JCRRepositoryLogic.java:233)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listInternal(ContentDirContext.java:326)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listBindings(ContentDirContext.java:303)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listBindings(ContentDirContext.java:297)
     at oracle.jdeveloper.rescat2.nodes.RepositoryRootNode.loadCache(RepositoryRootNode.java:143)
     at oracle.jdeveloper.rescat2.nodes.ExtendedGenericNode$1.run(ExtendedGenericNode.java:296)
     at java.lang.Thread.run(Thread.java:662)
Apr 21, 2012 1:10:41 PM oracle.webcenter.content.internal.model.rc.AbstractRepositoryLogic listFolder
WARNING: Item UCM#dCollectionID:-1 does not exist.
javax.naming.NameNotFoundException: Apr 21, 2012 1:10:41 PM oracle.webcenter.content.internal.model.rc.AbstractRepositoryLogic throwNotFound
ALL: Item UCM#dCollectionID:-1 does not exist.
[Root exception is javax.jcr.PathNotFoundException: Could not list contents of folder with ID = dCollectionID:-1]
     at oracle.webcenter.content.internal.model.rc.AbstractRepositoryLogic.throwNotFound(AbstractRepositoryLogic.java:26)
     at oracle.webcenter.content.internal.model.rc.JCRRepositoryLogic.listFolder(JCRRepositoryLogic.java:241)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listInternal(ContentDirContext.java:326)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listBindings(ContentDirContext.java:303)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listBindings(ContentDirContext.java:297)
     at oracle.jdeveloper.rescat2.nodes.RepositoryRootNode.loadCache(RepositoryRootNode.java:143)
     at oracle.jdeveloper.rescat2.nodes.ExtendedGenericNode$1.run(ExtendedGenericNode.java:296)
     at java.lang.Thread.run(Thread.java:662)
Caused by: javax.jcr.PathNotFoundException: Could not list contents of folder with ID = dCollectionID:-1
     at oracle.jcr.impl.ExceptionFactory.pathNotFound(ExceptionFactory.java:1016)
     at oracle.stellent.jcr.IdcPersistenceManager.listFolder(IdcPersistenceManager.java:691)
     at oracle.stellent.jcr.IdcPersistenceManager.getChildResources(IdcPersistenceManager.java:635)
     at oracle.jcr.impl.TransientLayer.getChildResources(TransientLayer.java:534)
     at oracle.jcr.impl.FolderNode.getNodes(FolderNode.java:116)
     at oracle.webcenter.content.internal.model.rc.JCRRepositoryLogic.listFolder(JCRRepositoryLogic.java:233)
     ... 6 more
Caused by: oracle.stellent.ridc.protocol.ServiceException: No service defined for COLLECTION_DISPLAY.
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:135)
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:107)
     at oracle.stellent.jcr.IdcPersistenceManager.listFolder(IdcPersistenceManager.java:677)
     ... 10 more
Apr 21, 2012 1:12:30 PM oracle.stellent.jcr.IdcPersistenceManager listFolder
SEVERE: Could not list contents of folder with ID = dCollectionID:-1
oracle.stellent.ridc.protocol.ServiceException: No service defined for COLLECTION_DISPLAY.
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:135)
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:107)
     at oracle.stellent.jcr.IdcPersistenceManager.listFolder(IdcPersistenceManager.java:677)
     at oracle.stellent.jcr.IdcPersistenceManager.getChildResources(IdcPersistenceManager.java:635)
     at oracle.jcr.impl.TransientLayer.getChildResources(TransientLayer.java:534)
     at oracle.jcr.impl.FolderNode.getNodes(FolderNode.java:116)
     at oracle.webcenter.content.internal.model.rc.JCRRepositoryLogic.listFolder(JCRRepositoryLogic.java:233)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listInternal(ContentDirContext.java:326)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listBindings(ContentDirContext.java:303)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listBindings(ContentDirContext.java:297)
     at oracle.jdeveloper.rescat2.nodes.RepositoryRootNode.loadCache(RepositoryRootNode.java:143)
     at oracle.jdeveloper.rescat2.nodes.ExtendedGenericNode$1.run(ExtendedGenericNode.java:296)
     at java.lang.Thread.run(Thread.java:662)
Apr 21, 2012 1:12:30 PM oracle.webcenter.content.internal.model.rc.AbstractRepositoryLogic listFolder
WARNING: Item UCM#dCollectionID:-1 does not exist.
javax.naming.NameNotFoundException: Apr 21, 2012 1:12:30 PM oracle.webcenter.content.internal.model.rc.AbstractRepositoryLogic throwNotFound
ALL: Item UCM#dCollectionID:-1 does not exist.
[Root exception is javax.jcr.PathNotFoundException: Could not list contents of folder with ID = dCollectionID:-1]
     at oracle.webcenter.content.internal.model.rc.AbstractRepositoryLogic.throwNotFound(AbstractRepositoryLogic.java:26)
     at oracle.webcenter.content.internal.model.rc.JCRRepositoryLogic.listFolder(JCRRepositoryLogic.java:241)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listInternal(ContentDirContext.java:326)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listBindings(ContentDirContext.java:303)
     at oracle.webcenter.content.internal.model.rc.ContentDirContext.listBindings(ContentDirContext.java:297)
     at oracle.jdeveloper.rescat2.nodes.RepositoryRootNode.loadCache(RepositoryRootNode.java:143)
     at oracle.jdeveloper.rescat2.nodes.ExtendedGenericNode$1.run(ExtendedGenericNode.java:296)
     at java.lang.Thread.run(Thread.java:662)
Caused by: javax.jcr.PathNotFoundException: Could not list contents of folder with ID = dCollectionID:-1
     at oracle.jcr.impl.ExceptionFactory.pathNotFound(ExceptionFactory.java:1016)
     at oracle.stellent.jcr.IdcPersistenceManager.listFolder(IdcPersistenceManager.java:691)
     at oracle.stellent.jcr.IdcPersistenceManager.getChildResources(IdcPersistenceManager.java:635)
     at oracle.jcr.impl.TransientLayer.getChildResources(TransientLayer.java:534)
     at oracle.jcr.impl.FolderNode.getNodes(FolderNode.java:116)
     at oracle.webcenter.content.internal.model.rc.JCRRepositoryLogic.listFolder(JCRRepositoryLogic.java:233)
     ... 6 more
Caused by: oracle.stellent.ridc.protocol.ServiceException: No service defined for COLLECTION_DISPLAY.
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:135)
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:107)
     at oracle.stellent.jcr.IdcPersistenceManager.listFolder(IdcPersistenceManager.java:677)
     ... 10 more*
I am using Windows 7 64-bit OS and the version of UCM softwares I have installed are following:-
RCU - ofm_rcu_win_11.1.1.5.0_disk1_1of1
WebCenter- ofm_wcc_generic_11.1.1.6.0_disk1_1of2 and ofm_wcc_generic_11.1.1.6.0_disk1_2of2
Database - Oracle XE
WeblogicServer - wls1035_win32
I am able to install and create all the softwares and Weblogic domain.I am successfully able to start Admin Server and UCM Server,I can see UCM server is up and running in Admin Server EM.
I am able to see the WebCenter Content Server using URL http://localhost:16200/cs.I have already enabled FrameworkFolders at AdminServer->Component Manager->Folders.
I want to see the contents in Content Repository through the Jdev connection and build my page according to that.
Please help me out.
Appreciate your help.
Thanks,
Gaurav.

Hi,
Thanks a lot for your reply.
In my case,when I go to http://localhost:16200/cs,this opens Oracle Web Center Content page ,then from there,I go to Administration->Admin Server,this opens up Oracle Web Center Content Admin Server.Further I go to Component Manager->Folders (Radio Button),here I see FrameworkFolders(CheckBox),I don't see Folders_g.
I have already checked FrameworkFolders and restarted UCM server,but that was of no use.
Am I missing anything ?
Please help me.
Thanks,
Gaurav.

Change workarea rule using the Repository API

Hi,
I have a simple question: Can I use the Repository API (either
Java or PLSQL packages) to change the rule of workarea: in order
to add to or remove configurations from the rule? I do not want
the use the RON and preferably not the CLT either.
I could not find anything about this functionality in the API
doc.
Regards,
Rinse Veltman
Solution Partners
Custom Solutions

Rinse,
Have a look at the API jr_workarea
FUNCTION jr_workarea.add_head_entry (workarea_id IN NUMBER
, entry_ivid IN NUMBER
, rule_id IN NUMBER:=NULL
, v_param1 IN VARCHAR2:=NULL
, v_param2 IN VARCHAR2:=NULL
, v_param3 IN VARCHAR2:=NULL
, c_exclude IN CHAR:=NULL)
RETURN NUMBER;
Where:
workarea_id specifies the workarea.
entry_ivid is the IVID of the configuration, if the entry is
associated with a configuration, NULL otherwise.
rule_id is the IRID of the rule to be used, if the entry is
associated with a rule, NULL if the entry is configuration based.
param1 through v_param3 are parameter values (if any) for the
rule.
c_exclude specifies whether to exclude or include objects
produced by the rule or contained in the configuration.
Use entry_ivid to specify a configuration. This is in the Model
and API documentation.
regards,
David

How to access the XDB-Repository through iAS

It is easy to access the XDB repository on a database server directly using http or ftp.
However, since our database server is behind a firewall we need to access the XDB repository through our Oracle Internet application server (iAS 9i) which is situated outside the firewall. Does anyone know how to do this? Any hint is greatly appreciated; unfortunately nobody answers to this question in the iAS forum.
We access a PSP-application on the database-server through the iAS-server using a DAD defined on the IAS-server. The XDB repository probably needs another access proceeding.
Our environement:
iAS 9.2 (Solaris)
Oracle 9.2.0.4 (Solaris)
Thank you very much for any help
Dirk Schmatz

Hi there,
This question is exactly what I would like to ask. Can someone answer this question please!!!
Regards,
SIM

Connection through LDAP

Hi
Is it possible to connect to a 10g database through LDAP server from smaller versions applications which are currrently using oracle 8i as client.
i mean from forms6i to 10g.
i hope the question is clear to you, if you need any more information i can give you.
Thanks a lot
Bcj

Developer 6i is the problem, you cannot isolate the sqlnet component (which is needed and responsible for the wanted connection method) and upgrade it to 8i, while the other components stay on 8.0.6 .
Werner

Accessing bea content repository through a webservice

Hi All,
I want to use the bea default database based repository through a web service.
So please suggest me the way to do this.
Can i use the spi interface to do the same if yes
then how should i go ahead ?
Regards,
BTSL_Deepti

Yes, it's called InDesign Server :-)

Using multiple agents through one webgate

How can we use multiple agents through one webgate.when i copy a file OBACESSCLIENT.XML its gets overwritten what should i do.

This is trivial to do - just don't use Finder aliases.
Aliases are Mac OS X-specific and UNIX-based applications like apache don't know how to deal with them.
The solution is to use symbolic links, the original UNIX equivalent of the Mac's aliases.:
<pre class=command>$ cd /Library/WebServer/Documents
$ ln -s /Volumes/User1Drive user1
$ ln -s /Volumes/User2Drive user2
...</pre>
etc.
This will create a symbolic link from user1 to /Volumes/User1Drive. Now when anyone hits /user1 on your server they'll given the content on /Volume/User1Drive.
There is an alternative solution which doesn't use directory paths, but hostnames. It's possible to configure Apache's virtual hosts so that 'http://user1.server.com/' is based on /Volumes/User1Drive while 'http://user2.server.com/' is based on /Volumes/User2Drive, and so on.
This takes some configuration in DNS to point all the hostnames to the same IP address, but it's another option that can scale without the need of more IP addresses.

Map security roles to group within LDAP using external 3rd Party LDAP

I'm haveing a problem mapping my logical role defined in my web.xml to a role within Active Directory. I'm currently authenticating using Active Directory succsfully, however after the user is authenticated I get a message from the OC4J container that my role can not be found. Can you map a logical role to group within Active Directory? Below are details about my configuration.
Any help would be greatly appreciated.
Log.xml log entry that confirms webtA is communicating successfully with AD.
SG_TEXT>JAAS-LDAPLoginModule: authenticating user wmgraham</MSG_TEXT>
</PAYLOAD>
</MESSAGE>
<MESSAGE>
<HEADER>
</CORRELATION_DATA>
<PAYLOAD>
<MSG_TEXT>JAAS-LDAPLoginModule: DN for user wmgraham is cn=wmgraham,ou=endusers,ou=itod,ou=endusers,ou=div20,ou=hq,dc=fbinet,dc=fbi</MSG_TEXT>
</PAYLOAD>
</MESSAGE>
<MESSAGE>
<HEADER>
Error reported in the log
<MESSAGE>
<HEADER>
<TSTZ_ORIGINATING>2008-08-27T11:38:05.991-04:00</TSTZ_ORIGINATING>
<COMPONENT_ID>j2ee</COMPONENT_ID>
<MSG_TYPE TYPE="TRACE"></MSG_TYPE>
<MSG_LEVEL>16</MSG_LEVEL>
<HOST_ID>F2287032-W</HOST_ID>
<HOST_NWADDR>30.30.16.14</HOST_NWADDR>
<MODULE_ID>security</MODULE_ID>
<THREAD_ID>14</THREAD_ID>
<USER_ID>wmgraham</USER_ID>
</HEADER>
<CORRELATION_DATA>
<EXEC_CONTEXT_ID><UNIQUE_ID>30.30.16.14:59560:1219851485804:6</UNIQUE_ID><SEQ>0</SEQ></EXEC_CONTEXT_ID>
</CORRELATION_DATA>
<PAYLOAD>
<MSG_TEXT>for group=[JAZNGroupAdaptor: webta] there's no matching role found.</MSG_TEXT>
</PAYLOAD>
</MESSAGE>
Web.xml Logical Role definition
<security-constraint>
<web-resource-collection>
<web-resource-name>allpages</web-resource-name>
<url-pattern>/servlet/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>WEBTA_J2EE_USER</role-name>
</auth-constraint>
</security-constraint>
<security-role>
<role-name>WEBTA_J2EE_USER</role-name>
</security-role>
Orion-web.xml This file maps the logical role defined in webxml to a group within Active Directory.
<security-role-mapping name="WEBTA_J2EE_USER">
<group name="webta"/> <-- Group defined in AD -->
</security-role-mapping>

What is the name of the group in AD (provide the DN) that you want to map the j2ee logical role WEBTA_J2EE_USER? What are the group search base and group mapping attribute?
When wmgraham logs into the app, the 3rd party ldap login module will attempt to query for the groups wmgraham is a member of - this is done using the group search base configuration for the provider.
In this example, the DN is "cn=wmgraham,ou=endusers,ou=itod,ou=endusers,ou=div20,ou=hq,dc=fbinet,dc=fbi" and likely user search base is set to "ou=endusers,ou=itod,ou=endusers,ou=div20,ou=hq,dc=fbinet,dc=fbi".
Assuming group search base is (say) "ou=groups,ou=itod,ou=endusers,ou=div20,ou=hq,dc=fbinet,dc=fbi" and and group mapping attr is "cn", then the role mapping you mention should work for group DN "cn=webta,ou=groups,ou=itod,ou=endusers,ou=div20,ou=hq,dc=fbinet,dc=fbi"

PL SQL Web Service Authentication through LDAP

I have created one PL SQL Web Service and I would like to provide token security through LDAP.
I have configured LDAP for deployed webservice in oracle IAS 10.1.3 Service.
Problem Description: <?xml version="1.0" encoding="UTF-8"?>
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns0="http://dbconnection1/MobileWebService.wsdl/types/"><env:Body><env:Fault><faultcode>env:MustUnderstand</faultcode><faultstring>SOAP must understand error: {http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security</faultstring></env:Fault></env:Body></env:Envelope>
I have provided LDAP authentication through oracle iAS Setup.
Please help

Hi I am looking out for a good friend of mine, Rajeev Dave from Vijaywada, if your the one, please email me [email protected]
thanks,

Alternative of UUP, Using OVD repository (Through LDAP configuration)

Similar Messages

Maybe you are looking for