Can i authenticate at uid level.

I want to use the command line tools to authenticate a particular user. I have set the default bind mode to simple. I have to specify cn=orcladmin and -w password to do an ldapsearch. My question is, if i want to do an ldapsearch where o=oracle.com uid=steve25, can i use o=.. uid=.. in the -D flag, so that i have to authenticate that user and it's password at command line. Thanks, Steve

Hi Steve:
Yes you can bind with users other than orcladmin. For example, if you wanted to search a particular limb of the directory called o=oracle,c=us and wanted to authenticate with a user you created whos distiguished name is uid=steve25,o=oracle,c=us you would use the following command:
ldapsearch -h host_name -p 389 -D "uid=steve25,o=oracle,c=us" -w steve25password -b "o=oracle,c=us -s sub "uid=S*"
This example would do a subtree seach returning all uid entries that begin with "S" under the o=oracle,c=us directory. This examples assumes OID is listening on port 389.
The same can be accomplished with your Netscape or Internet Explorer web browser by typing the following into you URL locator field.
ldap://hostname.domain.com:389/o=oracle,c=us??sub?(uid=S*)
In this example we do not specify a "bindname" so the OID ldap server assumes you are the anonymous user. If you have created ACL's to restrict the anonymous user from searching and needed to specify a "bindname" you would do the following:
ldap://hostname.domain.com:389/o=oracle,c=us??sub?bindname=uid=steve25,o=oracle,c=us(uid=S*)
Let me know if this helps.
Thanks,
Jay
null

Similar Messages

  • Can't Authenticate in LDAP directory after upgrade from 10.4.11 to 10.5.1

    Hi, all
    Yesterday I have tried to upgrade my Xserve Intel from 10.4.11 Tiger to 10.5.1 Leopard Server
    In my server there is this service:
    -AFP
    -DNS
    -SMB
    -Open Directory Master
    - XSAN Primary MDC
    All works fine but when I try to acces with worgroup manager to LDAP directory I can't authenticate with "diradmin" this thing appen in local machine and with remote worgroup manager connected to the server.
    I have tried with "root" user and I have been able to authenticate for some time, (5-15 min.) after It's impossible to access with all user.
    The client still authenticate with user and password in all computer with 10.5.1 and 10.4.11 workstation, but now i wan't to add some new users and I can't do That!!!!!
    So for now I have restore my old 10.4.11 Server Tiger, but I wish to know if someone have tried new 10.5.2 server upgrade and maybe there is some kind of fix to this problem.
    Thank's In Advance

    After posting on numerous message boards, and no one having an exact answer, but several making plenty of great suggestions, I think I've finally figured out the cause of this issue or at least part of the cause.
    Within 'Server Admin', select "Open Directory",
    under: Settings > Policy > Binding
    there are six check boxes under "Security"... for testing kerberos, I have been checking the first four boxes, which are:
    1. disable clear text passwords
    2. digitally sign all packets (requires Kerberos)
    3. encrypt all packets (requires ssl or kerberos)
    4. block man-in-the-middle attackes (requires kerberos)
    through troubleshooting this myself, and doing each change, followed by a server reboot, then immediately attempting to authenticate to /LDAPv3/127.0.0.1/, it seems that enabling some, or some combination of these Security settings triggers WordGroup Manager to not accept the diradmin password.
    referring to the numbers above (1 through 4)...
    2 or 4 by themselves fails
    1 and 3 together fails
    I haven't gone beyond that for testing and don't know what other combinations works or fails.
    I don't know if there is something beyond this that is specific to my configuration or environment that plays a part in this failing. All I know is that turning off all Security checkboxes in this section fixes the problem.
    I wonder if anyone who has never seen this problem can try this on their 10.5.2 Server and see if they are still able to authenticate as their diradmin to WGM. Regardless, seems that this is a WGM bug to me, right?
    if you are having this problem, uncheck all of these boxes and then reboot before trying to authenticate.

  • Can I have multiple volume levels in one track?

    I have a track composed of audio from a cassette recorder of a now deceased relative's voice.
    Since the cassette was turned on and off during recording, the recordings are at different volumes.
    I have been able to import the cassette into a GarageBand project, and delete dead space, but now I find that the volume is not consistent.
    Any way to remedy that? I am wondering if I need to chop it up and make more than one track, and adjust the volume on each track? Will this work as long as the tracks don't overlap?
    And then do I send the finished product to iTunes in order to be able to use it in an iMovie?
    Or can I drag it right from GarageBand to iMovie?
    Many thanks, I'm a very new GarageBand user.

    JGolomb wrote:
    Can I have multiple volume levels in one track?.
    search GB's help for "curve"
    And then do I send the finished product to iTunes in order to be able to use it in an iMovie?
    "Share" it to disc
    can I drag it right from GarageBand to iMovie?
    no

  • How can i NOT include top level keyword in the metadata of an image?

    Hello,
    I want to know how can i NOT include top level keyword in the metadata of an image. I know there is an option for not applying a keyword to an exported image, but is there an option for not applying the top level keyword to the actual image?
    I have organized my geographical (by location) keywords like this:
    Places
    USA
    New York
    Miami
    Spain.
    If i add geographical keywords to all my images, all my images will have the keyword "Places", i dont think that it have any sence to have all your images with one keyword. How can i fix this? Any sugestion? i will appreciate it a lot any help or information that you could give me.
    Excuse my english, i know it is not good. I hope that you could understand me.
    Thanks,
    Marcelo :)

    Explicitly excluding a keyword only applies when "exporting". Unfortunately, there's currently no way to stop the keyword being written to the file when "Save Metadata to File" command is used. The natural reaction of users to this difference is to suggest that it is stupid. Nevertheless, there are good reasons why the difference exists:
    1. "Export" creates a new file whereas "Save Metadata to File" writes the metadata back into the existing file.
    2. There are very good reasons why certain keywords should not be written to file, and the example given in the OP is one. Saving metadata to file is more often used as means of backing up important image related metadata, independently of the catalog or allowing the metadata to be visible in other aplications. It would be rare that such a file would be shared with a third party, so the reason for not including certain keywords is less obvious. Actually, not including it can result in no end of confusion and grief. For example, if the top level (or any keyword) was excluded during the save metadata process then the other keywords would be orphaned when image is imported back into the catalog (e.g. buiding a new catalog).
    The development team are aware of the need, in some circumstances, to exclude certain keywords when save metadata command is used. How and when the issue is resolved, without adding even more confusion/complexity, is some way off.

  • How can i see my ink levels

    how can i see my ink levels on my printer PHOTOSMART 5510

    From the home screen of the printer you can press the right arrow button, and then press on the third icon that looks like ink. This will then display the estimated ink levels.
    Jon-W
    I work on behalf of HP
    Please click “Accept as Solution ” on the post that solves your issue to help others find the solution.
    Click the KUDOS STAR on the left to say “Thanks” for helping!

  • How can i see my kernel level patch.

    Dear Friends,
    How can i see my kernel level patch.
    sach

    Hi sachin,
    When you logon to the SAP system you will get SAP Eassy Acess  screen.
    In that screen menu bar click on SYSTEM->STATUS->OTHER KERNEL INFORMATION(shift+F5).
    I HOPE IT WILL HELP YOU.
    KIRAN

  • Can not Authenticate WLSE Express with Active Directory

    Hi ,All
    I can not authenticate WLSE Express using external database with AD. I have downloaded the agent to the Domain Controller and install it on AD.
    At WLSE Express I found log
    "Error Server 0 RemoteDomainAuth server domain-auth: Agent API encountered error (1)"
    "Error Server 0 Service domain-auth has no active remote servers available"
    "Warning Protocol 0 Request from AP101 (10.224.20.143): User insee-wds rejected (ServiceUnavailable)"
    "Warning Protocol 0 Request from AP101 (10.224.20.143): User insee-wds rejected (InternalError)"
    maybe something wrong on AD ,
    If anyone has an idea , please help me.
    Thankss.

    I got the problem like you.
    Do you have any solution to solve this issue?
    If you have, please e-mail or post to me and everybody who be like this.
    Thank you so much.

  • Mac os x wiki server can't authenticate user password from active directory recently after we upgraded to windows 2008 server.

    after upgraded to windows 2008 server, our  mac os x wiki server can't authenticate user password anymore. How can I re-bind the wiki server to the AD again? thanks in advance.

    Solved it by deleting the user and creating a new one with the same userID.
    Maybe it occured because I marked the "user has to change password after first login" box when resetting the password but didn't yet allow him to do so in the webpages menu?!?

  • Trying to update iPad mini. Old email continues to appear and can't authenticate. How to remove it totally and use my iCloud I.D.?

    Trying to update iPad mini. Old email continues to appear and can't authenticate. How to remove it totally and use my iCloud I.D.?

    If you have any apps that were acquired with the old ID they will always be tied to that ID. Delete them and reacquire them with the new ID that you have in Settings > iTunes and App Store

  • How can I authenticate with card which status is 'OP_READY' ?

    Hello~
    I'm doing personalization of smart card.
    I'm able to personalize the card which status is 'INITIALIZED'.
    However...
    According to spec , server follow below process to authenticate with card which status is 'OP_READY'. In that process, select CM is ignored.
    Reset Card->Generate Server_Challenge->Intialize session
    During that process, I wonder about a few things.
    1) When I receive a card from suppliers , what is the status of card?
    Is it 'OP_READY' or "INITIALIZED' ?
    If it is 'OP_READY' , I have to establish a secure session using ISK
    to change the status to 'INITIALIZED'.
    How can I authenticate with card using ISK?
    Any comments would be greatly appreciated

    Hello there,
    If you can Authenticate (by that I mean send an Initialise Update command and External Authenticate command) successfully the ISD keys are already on the card. If you cannot Authenticate then you will need to load these onto the card and this is done with the Put Key command. You need to load 3 keys - these are 16 byte keys usually all with the same value e.g. 41 42 ...........4F. Once these keys are on the card you need to set the SCP option (which should be 0105) and then you will be able to Authenticate. You will then be able to send a Set Status command to change the life cycle state of the card (either with the apdu or from an applet using the setCardContentState() method).
    I'm guessing that your JCOP card probably has the ISD keys on already and has the SCP option set so there is no need for any additional keys to be loaded at this stage.
    Hope this helps,
    Stephanie

  • Screen Sharing - Can't Authenticate

    Hi everyone,
    I have screen sharing enabled on both my machines. My Macbook Pro is able to view my iMac screen but when I try to access my MacBook it prompts me for username and password and no matter what I put in, it says it cannot authenticate.
    I created a user solely to test this feature and still says it can't authenticate - any suggestions?

    I was able to fix this by reformatting my MBP and starting from scratch. Not sure what was causing this but that fixed it.

  • How can I manage my CMYK levels in Indesign?

    I am working with an off set printer who has stated that my black levels (in CMYK) are too high (coloured illustrations). They stated that my black is at 350 and needs to be less than 200. -- and total CMYK ink charge can not be any more than 340.  I have no idea of how I can check my current CMYK levels  and then modify them.

    Great, thank you.  I went into the colour separation and clicked on ink limit. It appears that if I exceed the ink limit selected on a particular illustration, it shows up in pink/red in the preview.  I then make adjustments in the original file so that it will not exceed when reloaded.  Is this correct?
    When I go to colour settings, it shows both RGB and CMYK selected -- I need the PDF to be CMYK.  Is there a way to select this? and will the profile I select(FOGRA27) limit the ink charge in anyway -- or do I have to do that manually picture by picture?
    I agree about the printer's comment (probably something lost in translation).
    Thanks again

  • How can I authenticate and authorize with Web Service on ESB ?

    Hello,
    I want to authenticate and authorize client with Web Service published
    by HTTP/SOAP BC.
    Simply if it is an Web Service as J2EE application, I will use
    Basic Authentication with JAX-RPC and Realm.
    But I think that Web Service published by HTTP/SOAP BC is not belong
    to J2EE Application. Threre is no place to describe security role mapping
    (like web.xml).
    JBI 1.0 the section "5.5.1.1.3 Normalized Message Properties" comments
    JAAS Subject is given in the NM Properties. Really in this package
    com.sun.jbi.internal.security.*
    implements JAAS autentication and authorization (at JaasAuthenticator).
    But I can't see how to configure my Service to use this.
    How can I authenticate and authorize with Web Service on ESB ?
    I referred to the resources.
    Mutual Authentication for Web Services: A Live Example
    http://developers.sun.com/prodtech/appserver/reference/techart/mutual_auth.html
    XML and Web Services Security
    http://java.sun.com/j2ee/1.4/docs/tutorial/doc/Security7.html
    JAAS Authentication Tutorial
    http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html
    Thanks,
    Takurou
    - environment ---------------------------------------------
    OpenESB : Project Open ESB Starter Kit
    AppServer : Sun Java Systems Application Server 9.0 PE
    OS : Windows XP
    I don't assume to use SSL (if It's necessary I will try).
    User information is stored in a LDAP Server.
    -----------------------------------------------------------

    Hello,
    I read this resource.
    SecurityDesign
    http://www.glassfishwiki.org/jbiwiki/Wiki.jsp?page=SecurityDesign
    Then I think [non-ssl and ssl/tls and so on] securing by basic authentication is ongoing feature at this time.
    But I can't see well why this page comments 'HTTP over SSL, TLS'.
    HTTP/SOAP Binding Component Overview
    http://download.java.net/general/open-esb/docs/jbi-components/httpsoap-bc.html
    Does BC support only "SSL server authentication" ?
    Doesn't BC support "SSL client authentication" by username/password ?
    Thanks,
    Takurou

  • Can we control the top level navigation in portal from a java application

    Hello,
    I am having a scenario where User logged in to portal and assigned with 2 roles (HOME , ISA(Java application)). When user opened a form in ISA (Java application) and tried to enter the data in form and moved to another tab (e.g. HOME) in top level navigation.
    When user come back to ISA (Java application) TAB , we show the page where he left earlier. I would like to know if user click any other TAB in top level navigation (Role assigned to him) while working on a page in ISA(Java application) is there any way we can catch that event before he leaves from ISA (Java application JSP page) to other TAB?
    How can we control the top level navigation events in the portal from a java application .Since Top level navigation is seperate par file.
    Thanks,
    RN

    Dear Rajesh,
    Top Level and detailed navigation values comes with iteration in the respective par file.
    Please check the par file and based on the value (i.e tab name) selected, you can write your code.
    Best Regards
    Arun Jaiswal

  • DAC server start-up error and Can't authenticate user

    HI,
         we have installed DAC server in Linux machine and client on windows. By using DAC client we restored the backup of DAC repository, DAC client was working fine still restoration and after restoring it’s not logging in. It throws error like "Can't authenticate user"
    while starting DAC services in Unix server it throws an error like
    ANOMALY INFO An exception occurred. Shutting down server...
    MESSAGE:::/u01/DAC/jdk/jre/lib/i386/xawt/libmawt.so: libXext.so.6: cannot open shared object file: No such file or directory
    EXCEPTION CLASS::: java.lang.UnsatisfiedLinkError
    Note: since DAC client is not separately available for windows we have installed dac server also and while installing and after installing we never configured to connect to the dac server which is in Linux, we have configured only DB.
    we have successfully installed OBIEE, Informatica, and DAC version is 10.1.3.4.1.
    How to start the DAC services?
    How to configure dac client to connect to DAC server and how to solve this "Can't authenticate user" issue?
    Pls help in this regard.
    Thanks in advance.

    EddyLau wrote:
    Hi,
    I encounter the "Can't authenticate user" error in DAC first setup after installation when it prompt up to ask for setting up administrator id and password.
    here's my sql statement to create database schema for dac in oracle database.
    grant dba, connect, resource, create view, create session to SSE_ROLE;
    create user DEV_DAC identified by "password";
    grant DEV_DAC to SSE_ROLE;
    grant dba, connect, resource, create view, create session, grant any role to DEV_DAC;
    I tried dropping the data schema and create it again but still fail to authenticate.
    did I grant enough privileges to the database schema?
    Please help.
    Thanks,
    EddyLogin to DEV_DAC using the credentials from SQL Developer or sql
    Then do select * from W_ETL_USER -- here you will see 2 Administrator id's listed
    now run the command Delete From W_ETL_USER
    Now login to dac client with Administrator and pwd which you have set earlier.
    Mark as helpful or correct if it helps
    Thanks,
    RM

Maybe you are looking for