Authentications on the Apache Directory Server

hi all,
am a j2ee developer..am still new to the LDAP servers.....i downloaded the Apache Directory Server 1.5 to act as a LDAP server..and its working on my machine because i checked its port and its working....i need to open a session on this server from my j2ee web application and make my authentications on this server...but dont know how to start...so please i need your help if any body used this server before...
thx in advance....

try to configure as stated in the following document.
http://help.sap.com/saphelp_nw04/helpdata/en/18/5cea2296190e4cb7faf9468ad793ea/content.htm
I have seen several discussions on sdn on the same, also make a keyward search on sdn.
Also check this for pros and cons for having Apache ...
Problem while configuring the Apache Web Server as the Intermediary Server
Edited by: SJ on Aug 3, 2008 10:11 AM

Similar Messages

Apache Directory Server as data source for Portal UME?

Hi,
Has anyone tried using Apache Directory Server as a Data Source for Portal UME? We would like to try that out. If anyone has tried before I would like to get the data source configuration file. ALso would like to know more in detail about the positives and negatives.
Thanks for your help.
Regards,
Vishnupriya

try to configure as stated in the following document.
http://help.sap.com/saphelp_nw04/helpdata/en/18/5cea2296190e4cb7faf9468ad793ea/content.htm
I have seen several discussions on sdn on the same, also make a keyward search on sdn.
Also check this for pros and cons for having Apache ...
Problem while configuring the Apache Web Server as the Intermediary Server
Edited by: SJ on Aug 3, 2008 10:11 AM

Using Apache Directory Server with BPM Enterprise - BPM Admin Center

Hi All,
I m trying to configure BPM Admin Center in BPM Enterprise standalone. I would prefer to use an external directory service.
Can I use Apache Directory Server ? If yes, please let me know how to configure it else please suggest me the possible directory servers I can use.
I would like to use an open source directory server.
Hope to hear soon.
Many Thanks,
Sophie

Hi All,
I m trying to configure BPM Admin Center in BPM Enterprise standalone. I would prefer to use an external directory service.
Can I use Apache Directory Server ? If yes, please let me know how to configure it else please suggest me the possible directory servers I can use.
I would like to use an open source directory server.
Hope to hear soon.
Many Thanks,
Sophie

Issue w/ Case Differences Using the IBM Directory Server MA

We have the following issue using the IBM Directory Server MA using FIM 2010 R2 (Version 4.1.3479.0).
We provision a new object, e.g., uid=jdoe,ou=users,o=contoso, into an instance of IBM Directory Server
The object is created in IBM Directory Server as uid=jdoe,ou=users,o=contoso
A Full Import on the IBM Directory Server MA runs and confirms the export
Subsequent imports, sync, and exports run successfully
<Time passes>
A Full Import on the IBM Directory Server MA runs, and this object shows up as a staging-error (uid=jdoe,ou=Users,o=contoso)
Subsequent imports and syncs report errors on this object (staging-error)
Note that we do not manipulate the anchor (DN) of this object once it is created in IBM Directory Server. Other attributes are synchronized, but the object is never renamed/moved. This case change does not happen with all of the objects brought
in during the Full Import, but the number of instances do increase periodically. At this point, it does look like the import is changing from a lowercase "u" to an uppercase "U" but not vice versa.
I found a related
TechNet article containing the following remark:
"IBM Directory Server does not guarantee that the case of a DN component will match in all instances. On a synchronization or import from IBM Directory Server, this can manifest itself as an unexpected update. For example, if you create
O=TEST, and then create the user cn=MikeDan,O=TEST, this might be imported from IBM Directory Server as
cn=MikeDan,O=test. Because of the case difference, FIM treats this as an update on subsequent full imports."
Unfortunately, the article does not propose a resolution.
Has anyone encountered this issue? More importantly has anyone resolved this or found an acceptable workaround?
Note that deleting the connector space is not an acceptable workaround. :)

I remember experiencing this issue when we were on 5.0, and I believe it persists through 5.1 as well.
There is a comment in the 5.2 release notes that something similar was fixed:
Changing case sensitive attribute values failed in MMR. (4624693)
If I had to take a wild guess, I would say that the server does some internal checking to see if the value has changed, possibly based on the attribute syntax, to avoid replicating "changes" that really don't change anything except case. I doubt that all your custom attributes are case-sensitive, though. Enabling replication probably "turns on" this behavior, which doesn't go away even if replication is disabled.
In any case, you're probably out of luck unless/until you upgrade to 5.2.

Installing the Apache HTTP Server Plug-In as a Dynamic Shared Object

My environment is: Windows 2000 Server SP3 + Apache 2.0.45 + WebLogic 7.0 SP2
I followed the install guide.
1. Locate the shared object file for your platform. >>> No problem
2. Enable the shared object. >>> No problem
3. Install the Apache HTTP Server Plug-In in the Apache server with a support
program called apxs (APache eXtenSion) that builds DSO-based modules outside of
the Apache source tree, and adds the following line to the httpd.conf file:
>>> I don't know how to do this. where can I find apxs,
>>> and should I add "AddModule mod_so.c" in httpd.conf
>>> I did it, but Apache -t tell me:
>>> Syntax error on line 173 of D:/Program/Apache/Apache2/conf/httpd.conf:
Invalid command 'AddModule', perhaps mis-spelled or defined by a module not incl
uded in the server configuration
I don't understand the 4th step, where can I find 'perl' and how to use it?
thanks.

For Apache 2.x I think you use LoadModule instead of AddModule. That's what
the docs say anyway.
"muli" <[email protected]> wrote in message
news:3ed558aa$[email protected]..
>
My environment is: Windows 2000 Server SP3 + Apache 2.0.45 + WebLogic 7.0SP2
>
I followed the install guide.
1. Locate the shared object file for your platform. >>> No problem
2. Enable the shared object. >>> No problem
3. Install the Apache HTTP Server Plug-In in the Apache server with asupport
program called apxs (APache eXtenSion) that builds DSO-based modulesoutside of
the Apache source tree, and adds the following line to the httpd.conffile:
I don't know how to do this. where can I find apxs,
and should I add "AddModule mod_so.c" in httpd.conf
I did it, but Apache -t tell me:
Syntax error on line 173 ofD:/Program/Apache/Apache2/conf/httpd.conf:
Invalid command 'AddModule', perhaps mis-spelled or defined by a modulenot incl
uded in the server configuration
I don't understand the 4th step, where can I find 'perl' and how to useit?
>
thanks.

Authentication error while creating directory server through dscc

Hi
I am getting authentication error while creating a DS from dscc on windows box on a linux RHEL4 server.However I do not get an authentication issue when creating a ds on solaris box from same dscc.
Can someone guide me what might be the issue?
Thanks
Aarti

Hi,
Please check there is no firewall issue between your windows client to Linux directory server. You may be able to login via dscc but when you create DS instance, your dscc agent port might be an issue not able to talk to Directory server because of firewall.

Change the User ID running the SunOne Directory Server 6.3 on Windows 2003

Hi Experts,
I have an install of SunOne Directory Server Enterprise edition 6.3 running on Windows 2003 server. It was installed using the Zip distribution and is running as a user ID in the Active Directory the server is part of. We are trying to change the user ID to a service account (not the current ID which belongs to a person), so that the Sun DS can run as a service within Windows 2003 server. Need help in doing this without having to re-install the Directory server. Has anyone done this and is it possible to do?

Thank you very much for the insights and the responses sharmy28.
Appreciate it very much.
All I had to do was change the setting in this file only:
Open the file dsee6/cacao_2/etc/cacao/instances/default/private/cacao.properties and change the below line with new id...
# Define username and groupname for cacao process
process.username=sunadmin
process.groupname=sungroup
As this is Windows 2003 and the installs are all default values, I had to reboot the server for the change to take effect.
The file dsee6/cacao_2/usr/lib/cacao/lib/tools/scripts/globals.cfg does not exist. However the same file exists under the perl directory as globals.pl and the settings you specified are present there. In our case these were commented out and so I left them as is.
Thanks once again for your responses which helped me solve the issue we had.
Thanks.

Any idea on binding the iplanet directory server to portal server profile server.

i need to know the functionality of profile server and LDAP server with respect to SUN one portal server

Directory Server allows you to store, manage, and search for entries and their associated attributes in a number of different languages. An internationalized directory can be an invaluable corporate resource, providing employees and business partners with immediate access to the information they need in the languages they can understand.
The directory supports all international characters set by default because directory data is stored in UTF-8.Further, Directory Server allows you to specify matching rules and collation orders based on language preferences in search operations.
Note :
You must use ASCII characters for attribute and object class names.
visit this
http://docs.iplanet.com/docs/manuals/directory/50/html/ag/i18n.htm#2835992

Is the Apache web server feature limited without OS X Server edition?

I couldn't really find a post that answers my question so here it is...
I want to use the built-in Apache web server (a.k.a "Web Sharing") in OSX 10.4, I was just wondering if I am limited on the amount of simultaneous connections/requests? I know only a limited amount (like 5) can connect to my system over a network, unless I install Mac OSX Server. Is the Apache Server stuck under these same restrictions? I'd rather run it from my Mac than have to make a separate linux box for the site (and I don't want to have to fork out $1,000 for OSX Server, lol). I am running Mac OS 10.4.9. If someone could tell me if they know anything regarding this, I'd appreciate it. Thank you

There are differences between the Apache installation in Mac OS X client and Mac OS X Server, but if you're likely to encounter them you should be running Server anyway.
Most of the changes relate to additional apache modules that are installed (which you could add to client if you're up to it) and performance tuning.
The latter is likely to be something you can tweak to cover your needs.
Apache will spawn a new process for each active connection, with an upper limit set to prevent it running away. The limit is higher in Mac OS X Server, but you can increase the default in Mac OS X client to better suit your needs.
Edit the file /etc/httpd/httpd.conf and look for the line:
<pre class=command>MaxClients 50</pre>
(note, your number may be different). You can change the number to any reasonable figure - but don't set it much higher than you actually expect to need.

Installing and Configuring the Apache HTTP Server Plug-In

Hi,
I am using WL10.3 in Linux machine.
I have an environment where I have a single WL server in a domain that is deployed with the web-application
And I have another domain where I have two managed servers in a cluster that is deployed with the business.
Now, I want to configure a Apache HTTP server to make it work as a proxy along with the weblogic.
In my current scenario, the stand alone server proxies the req to the cluster and that is defined in a jndi.properties.
Now, what should I do if I want to use the Apache
I have the following questions:
1. Forget about my env, generally how can I install and configure Apache HTTP plug-in?
I see we already having libproxy_61.so file inside /bea/wlserver_10.3/server/plugin/linux/i686
Do i need to install the patch even then as told in http://www.oracle.com/technology/deploy/security/wls-security/2793.html?
2. While am adding the lines in httpd.conf ,
LoadModule weblogic_module modules/mod_wl_22.so
Should I put ibproxy_61.so instead of mod_wl_22.so in this line?
3. Just by configuring the proxy, the session replication and load balancing will be ensured?
4.And for my configuration as stated at the beginning few lines, what can be the best architecture?
Your help is really appreciated.

Hi,
Below blog would give you a clear understanding of the Integrating Apache with Weblogic. All your questions are been answered in the below blog.
http://www.prasannatech.net/2008/07/integrating-apache-tomcat-weblogic.html
You can for sure apply the patch provided in CVE-2008-3257).
Keep posted with your findings and let us know if you need any further clarification.
Regards,
Hussain

Problem while configuring the Apache Web Server as the Intermediary Server

Hello,
I want to use Apache 2.0 web-server as a proxy for my SAP EP so that I could access http://portal_server:50000/irj through this Apache external web-server.
I checked this sap help link as a reference.
http://help.sap.com/saphelp_nw04/helpdata/en/18/5cea2296190e4cb7faf9468ad793ea/frameset.htm
But still not clear what exact configuration I need to do in the httpd.conf file. I searched the posted forums on this topic but couldnt get exact steps.
It would be grateful if anyone can guide me on this configuration (redirecting url etc).
Thanks in advance.
-Mandar

STEPS OF SECURE APACHE-SSL
1.Install apache version like apache_x_y_z_win32.exe also select the right combination of mod_ssl and Openssl.
(Like for apache1.3.33 you need mod_ssl_2.8.22 and Openssl_0.9.7f or Openssl_0.9.7g.
                   Or
Select a mix of all three like [Apache_1.3.33-Mod_SSL_2.8.22-Openssl_0.9.7f-Win32.zip]
(for this install apache service also).
2.    Select   httpd.conf file from (apache\conf) open it for configuration.
3.   Stop the services of apache from Control panel \ administrative tools \ services.
         Note:-- may be it is possible all files for configuration will not be there in apache2.exe then extract the
          Apache_2.0.54-Mod_SSL_2.8.22-Openssl_0.9.7f-Win32.zip file and copy conf,lib,modules logs
files in corresponding folder of Apache2.exe.
                                             HTTPD.CONF   Configuration
1.     Replace all occurrences of www.my-server.dom with the real domain name!
       (If you have installed apache from .exe file then its doesnt required but for . Zip archive file you have to replace it)
2.     Comment port 80 like # port 80
3.     Write Listen 80 and Listen 443 in httpd.conf file.
4.     Extract Openssl in any folder and copy files ssleay32.dll and libeay32.dll into WINNT\SYSTEM32 paste them here.
5.     Download Openssl.cnf file because you need to configure openssl.exe. a link apear select saveas and save it to bin folder of apache2 directory
6.     Copy all the *.exe, *.so, *.dll inside your apache\bin directory from extracted Openssl directory.
7.     Write
              LoadModule ssl_module modules/ApacheModuleSSL.dll
                  or
              LoadModule ssl_module modules/ApacheModuleSSL.so
                  or
              LoadModule ssl_module modules/mod_ssl.so
             after the LoadModule lines that are already in the httpd.config file
      8.    Write AddModule mod_ssl.c this for apache1 for apache2 it is noy required.
           after the AddModule lines that are already in the httpd.config file.
     9. Add the following to the end of httpd.conf:
                    SSLMutex sem
                    SSLRandomSeed startup builtin
                    SSLSessionCache none
                    SSLLog logs/SSL.log
                    SSLLogLevel info
                    SSLEngine On
                    SSLCertificateFile conf/ssl/my-server.cert
                    SSLCertificateKeyFile conf/ssl/my-server.key
                    ProxyRequests Off
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
ProxyPass / http://ServerName:50000/     // your server name and port number
ProxyPassReverse / http://ServerName:50000/   // your server name and port number
ProxyPreserveHost On
save the Httpd.conf file
                                                 GENERATING CERTIFICATE
a.     Open Command Prompt
b.     Reach till bin directory by writing like   cd apache\bin
c.     Write command     bin> openssl req -config openssl.cnf -new -out my-server.csr and put required detail.
d.      Write openssl rsa -in privkey.pem -out my-server.key.
e.     Write openssl x509 -in my-server.csr -out my-server.cert -req -signkey my-server.key -days 365.
f.     Write openssl x509 -in my-server.cert -out my-server.der.crt -outform DER.
g.     Create an Apache/conf/ssl directory and move my-server.key and my-server.cert into it.
10.     Start Apache services from control panel \ Administrative tools \ services.
11.     Now you have made Apache as SSL enabled open browser and test it by https://localhost

Open Directory: After enabling of SSL encryption the Open Directory server is not reachable anymore! What's wrong?

After enabling of SSL encrypton on LDAP I can't connect anymore to the LDAB. I think the Lions Server supports now the SSL encrypton for Open Directory.

.....

Configure the Iplanet Directory server 5.0 not to allow NULL BINDs.

How to restrict connection of user without authentication, via a Null Bind, what I can see in access log is connection of user BIND DN= which I dont want. Is there any way to come over this?

Recall my first reply:
In iPlanet DS 5.0 (and several other LDAP servers), there is no way to totally disable anonymous binds.
You are never going to get that message to disappear when running that tool against iPlanet DS 5.0.
But, if it's any comfort, that particular piece of advice it's giving you is pretty silly.
The claim that an anonymously-readable rootDSE equates to "improper configuration" is DAFT.
I suggest you stop paying attention to this software, and begin planning your upgrade to newer LDAP server software.
(Incidentally, some newer LDAP servers do allow you to disable anonymous binds, but I would still advise you to ignore that audit tool, and just decide for yourself what policies make the most sense for your case).

Installing the Apache HTTP Server Plug-In on Win2000 apache server for WebLogic 6.0

Hi, I was wondering if there was a plugin available for apache on a win 2000. I
only see those for unix solaris, hp. I need one for my Win2000 apache server to
proxy requests to my weblogic6.0 clustered servers. Thanks.

I guess this is not available for 6.0sp1 users, since I cannot find this folder.
Thanks,
Diana
"Jong Lee" <[email protected]> wrote:
>
We only support apache20 on win32 platform.
You can find mod_wl_20.so in $WLS_HOME/bin/apache20 from 6.1.
"Jane" <[email protected]> wrote:
Hi, I was wondering if there was a plugin available for apache on awin
2000. I
only see those for unix solaris, hp. I need one for my Win2000 apache
server to
proxy requests to my weblogic6.0 clustered servers. Thanks.

Any Solution if all the Active Directory Server Goes down

Hi,
my Both DC crashed due to some power failure, Pls help me is there any way out to recover it from Daily Backup..
Rgrds,
Dhanesh
Hardware, Networking & Software

See- Planning for Active Directory Forest Recovery
http://technet.microsoft.com/en-us/library/planning-active-directory-forest-recovery%28v=ws.10%29.aspx
Regards,
Biswajit
MCTS, MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, Enterprise Admin, ITIL F 2011
Blog:
Script Gallary:
LinkedIn:
Note: Disclaimer: This posting is provided & with no warranties or guarantees and confers no rights..

Authentications on the Apache Directory Server

Similar Messages

Maybe you are looking for