APEX LDAP Query

Question

I have read many of the posts on APEX and LDAP on this forum but none have been able to assist me. When using the LDAP test tool I get "Authentication failed!" straight away as if the authentication string is wrong. I think the following should work:
LDAP Host: LDAPSERVERNAME
Port: 389
DN String: cn=%LDAP_USER%,ou=Staff,dc=collegename,dc=ac,dc=uk
I have tried every combination of authentication strings that have been suggested on the forum (ie, DOMAINNAME\%LDAP_USER%, LDAP Host with the domainname suffix, etc).
Is there another way I can test this, ie a simple script I can run in SQL*Plus or something to query LDAP from the command line to test the details are correct?
APEX Version: 3.2.0.00.27
DB: 11.1.0
Kind Regards
Alan
Edited by: Alan Barton on Sep 7, 2009 4:53 PM

Answer 1

Hi Scott
Thanks for your response, based on my details I am using:
set serveroutput on
declare
    l_retval      pls_integer;
    l_retval2      pls_integer;
    l_session     dbms_ldap.session;
    l_ldap_host   varchar2(256);
    l_ldap_port   varchar2(256);
    l_ldap_user   varchar2(256);
    l_ldap_passwd varchar2(256);
    l_ldap_base   varchar2(256);
begin
    l_retval                := -1;
    dbms_ldap.use_exception := TRUE;
    l_ldap_host               := 'LDAPSERVERNAME.collegename.ac.uk';
    l_ldap_port               := '389';
    l_ldap_user               := 'cn=Joe Bloggs,dc=collegename,dc=ac,dc=uk';
    l_ldap_passwd             := 'reallysecurepassword';
    l_session := dbms_ldap.init( l_ldap_host, l_ldap_port );
    l_retval  := dbms_ldap.simple_bind_s( l_session, l_ldap_user, l_ldap_passwd );
    dbms_output.put_line( 'Return value: ' || l_retval );
    l_retval2  := dbms_ldap.unbind_s( l_session );
    exception when others                                                                                                  
     then 
          dbms_output.put_line (rpad('ldap session ',25,' ')  || ': ' ||
               rawtohex(substr(l_session,1,8)) ||     '(returned from init)');
          dbms_output.put_line( 'error: ' || sqlerrm||' '||sqlcode );
          dbms_output.put_line( 'user: ' || l_ldap_user );                                                        
          dbms_output.put_line( 'host: ' || l_ldap_host );
          dbms_output.put_line( 'port: ' || l_ldap_port ); 
          l_retval  := dbms_ldap.unbind_s( l_session );
end;
/But when I run the script I get:
SQL> @test_ldap.sql
ldap session             : 01000000(returned from init)
error: ORA-31202: DBMS_LDAP: LDAP client/server error: Invalid credentials.
80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data
525, vece -31202
user: cn=Joe Bloggs,dc=collegename,dc=ac,dc=uk
host: LDAPSERVERNAME.collegename.ac.uk
port: 389
PL/SQL procedure successfully completed.May I ask if I have changed the script in the correct manner and if so does the error suggest a fundamental issue with authenticating?
Kind Regards
Alan
Edited by: Alan Barton on Sep 8, 2009 11:13 AM