Can you use Active Directory in Linux as a directory server?

This is a simple question that I just couldn't find a straight answer to on Google, Oracle forums, Metalink, etc. ... when I use the Net Configuration Assistant on my Linux server, the only option that exists for Directory Usage Configuration -> Directory Type is Oracle Internet Directory. In Windows, however, OID and Active Directory appear as the available options. I can't find an obvious answer to whether AD will work in Linux as a directory option. Does it? If not, is there an add-on or option that I'm missing? Our company only uses Linux hosts for Oracle purposes, and only has Active Directory for directory usage.
I was also thinking of tweaking ldap.ora and sqlnet.ora to utilize our Active Directory server(s), but I wasn't sure how to manually configure those. Is there a paper out there for more information on such a thing?
My intention is to synchronize our users in Oracle with AD, so there will be no password and maintenance discrepancies. All of our other applications (Windows, websites, GUIs, etc.) authenticate against AD, and I wanted to tie Oracle in to wrap up user maintenance up in a nice, neat package.
Thanks ahead of time.

Any thoughts on this? I'm kind of bumping it back to the top, because I still can't find any definitive evidence regarding this anywhere on the 'net. Am I phrasing something in a hazy manner? Is there something I can clarify?
Thanks.

Similar Messages

SAP ME - Can you use a single MSSQL instance on a single server?

Hi,
We need to build a demo system with the minimum of hardware so would like to use just one server.
The build would be Netweaver 7.4, ME 15 & MII 15 Using SQL 2012 as the database.
The question is, can I use a single instance of SQL or do I need to install two ? One for netweaver and one for ME ?
The ME database install guide states the following warning:
CAUTION
SAP ME does not use the same collation as the SAP NetWeaver database and server. Do
not use the SQL4SAP.vbs provided with MSSQL software to install the SQL Server database
software.
Does this mean I would install one instance for Netweaver using SQL4SAP.vbs and a second one (using a different port number) for ME using the standard installer ?
Or can I install just one database engine instance and configure the collation for each database individually ?
Also what about any of the other settings, eg Filestream and the XA install ?
Thanks for any guide that you can give.
Kevin

Hi Kevin,
We have this exact scenario on one of our internal sandboxes. Install a single SQLServer 2012 (we installed Enterprise version) instance and create the NW, ME WIP, ME ODS, and ME GODS databases separately, with different collations. We also have XA configured on the server, don't know about Filestream.
We are running a 2 CPU 8GB VM instance, I would recommend at least 12GB as 8 is minimal.
Regards, Steve

Can you use a Windows-only printer over a print server?

I recently found a large format printer from Ricoh that has great reviews and prints postscript with laser speed/economy with some new inkjet technology only they have - perfect for a home design office and a LOT cheaper than a typical tabloid laser.
Problem is, it's only compatible with Windows systems...
Someone told me it's possible to get a print server to link my Airport Extreme networked Powerbook G4 to this incompatible printer but i haven't seen any print servers that have a Ricoh print driver listed in their specs. Am I out of luck or could it still work with some kind of generic driver or something? Thanks in advance for any guidance you can offer.
Printer is the Ricoh Aficio G7500

Print servers don't use a driver. The protocols that communicate with them are standard protocols handled by the OS (Windows, OS X, linux).
If the Ricoh is a postscript printer, it's only compatible with Windows systems isn't quite right. Any postscript level II or III printer is compatible with OS X. The problem may be that the plugins used by OS X's print dialog (Copies & pages menu options) for special features like alternate paper tray may not be provided, so you'll have access to fewer features.
But you say it's an inkjet technology printer - most of those aren't postscript printers, and that Does Require a driver for OS X.
The only other option I can think of is a Windows computer set up to be postscript RIP/printer server:
http://iharder.sourceforge.net/current/macosx/winmacprinter/

Using Apache Directory Server with BPM Enterprise - BPM Admin Center

Hi All,
I m trying to configure BPM Admin Center in BPM Enterprise standalone. I would prefer to use an external directory service.
Can I use Apache Directory Server ? If yes, please let me know how to configure it else please suggest me the possible directory servers I can use.
I would like to use an open source directory server.
Hope to hear soon.
Many Thanks,
Sophie

Hi All,
I m trying to configure BPM Admin Center in BPM Enterprise standalone. I would prefer to use an external directory service.
Can I use Apache Directory Server ? If yes, please let me know how to configure it else please suggest me the possible directory servers I can use.
I would like to use an open source directory server.
Hope to hear soon.
Many Thanks,
Sophie

Connected to Domain but can't log in using Actived Directory Credentials

Hey everyone. I've been working on this issue for two weeks now, and I don't know what else to try. I'm connected to my domain but cannot get my Macbooks to log in using Active Directory credenitals both through our wireless network, and hard wired with an ethernet cable. The weird part about it is that it is not uniform all across our network. This only happens to certain Macbooks and as of right now there doesn't seem to be a pattern. I can say that it has happened to all new Macbook Pros that we have ordered lately though.
We use Jamf to manage our Macs on our network, and ever since upgrading to a new version (9.01 and now 9.1) we have had this issue. However I can't connect after manually adding the domain either, so for now it makes me think it is not a Jamf issue. Has anyone dealt with this issue before, that might know of a fix? Thanks!

Hi Burnettb1,
I have come across a similar issue as yours. I have included the instructions that I use to bind the Mac at my institution. In regards to wifi, I have not tried binding the Mac over wifi. Should you need to log in to a Mac with domain user credentials I would suggest to bind the Mac over ethernet. Once you get to the:
*Click on triangle to the left of Show Advanced Options to expand"
portion of the instructions click on the Mappings tab and select the checkbox for creating a mobile account at login. This will create a domain user profile on the machine that you can log into when not connected to the domain.
Hope this helps.
BIND iMac:
          Login into iMac using administrative credentials
          Open System Preferences
                    *Goto Users & Groups
                    *Click on lock in lower left-hand corner
                    *Use same password used to log into iMac
                    *Click on Login Options
*Click on ‘Join...’ button right of "Network Account Server: "
                    *Click on ‘Open Directory Utility…’ button
                    *Click on lock in lower left-hand corner
                    *use same password used to log into iMac and click on Modify Configuration
                    *Double-click on Active Directory
Active Directory Domain = domain
                              Computer ID = name of Mac
                    *Click on triangle to the left of Show Advanced Options to expand
                              *Click on Administrative tab
                              *Check Prefer this domain server
Type domainserver_ipaddr -or- servername.domain in this field
                              *Click on ‘Bind…’ button
                              *When prompted for network administrator login
                                        username = [domain admin user]
                                        pwd = [domain user password]
                              *Click OK (Note: search path will be updating. Until completed the ‘OK’
button will be greyed out
*Click OK
*Click lock to lock and close window
                    *Click lock to lock and close window
BIND CHECK:
          *Search AD for added mac host - it should be there.
          Open Terminal app by either:
                    1)
                              *Press command+spacebar
                              *Type Terminal and select app
                    2)
                              *Click on desktop
                              *Press shift+command+A
                              *Goto Utilities folder located within Application folder (which you should
be in) and open Terminal
          *Once Terminal is opened type in id [domain username] and press return key. The output should be
some some network account information
          *Close app by pressing command+Q and any other opened windows
          *Restart iMac
          *Log in

Please Help. How can you monitor a directory using jndi connection to a ldap server?

How can you monitor a directory using jndi connection to a ldap server? I
want the ldap server to monitor the content change in a file system
directory on another computer on the network. Can someone please help.
Thanks
Fred

Hi,
Why do you want to use LDAP for Hard disk monitoring..???
U can do this by creating a MD5 checksum for all the files existing in some
perticular
directory and every hour or any configurable period u can recalculate the
checksum
to find out the change in the content.
I guess all u need is to get the code for "updatedb" utility of Linux and
instrument it for ur needs..
Hope it helps...
-aseem
mr wrote:
How can you monitor a directory using jndi connection to a ldap server? I
want the ldap server to monitor the content change in a file system
directory on another computer on the network. Can someone please help.
Thanks
Fred

Using Active-Directory PW at SAP logon procedure

Hello,
I have the requirement no to use single sign on for some systems with sensitive data, but would like to check during sap logon procedure the from our central active directory password.
is there any best practice configuration or SAP / AD Win Addon solution available to connect SAP NW abap 7.40 at Win2012 sever with our active directory. Nearly all win based applications can handle a PW check from application to AD. Is there any SAP or Partner implementation helpful to expand the SAP client internal User-PW check?
Thanks in advanced for alternatives to the standard client SSO or any idea in the direction using active directory password within sap-logon.
Please give me a short feedback if you need more details.
regards,
Bernhard Mair
Goethe-Institut München

The SAP NetWeaver ABAP app server only accepts SAP user id and password or it can use SNC to authenticate the user when SAP GUI is used on workstation. So, if you want the user to be prompted to enter their Active Directory credentials during a logon using SAP GUI, and you don't want SSO, then you need to purchase a third party product.
Please note, that SAP is not JUST a Windows based application, as it can also be installed on Unix and Linux, so SAP have made it work in same way on all platforms without any 'special' windows authentication capabilities.
Thanks
Tim

Portal Authentication using Active Directory

I am trying to set up authentication using Active Directory. Can anyone provide me with instructions on what to do ? I know that I have to go to System Admin - > System Configuration - > UM configuration and change the Data Source. What else do I need to do...How do specify which domain to authenticate against. Do I have to change the XML file. Please help.

It depends on what you wanna do with the AD server. If you want to read/write on the AD then you have to first setup SSL connection between the two boxes.Else if you just want to read from AD server you don't require a SSL connection. Then you have to select the hierarchy type in the System Admin - > System Configuration - > UM configuration. Save.
Next thing you do is to open the config tool and modify your xml file accordingly.
And restsart the server.
Hope this helps.
Regards,
Hassan

ThinkVantage Technology Deployment using Active Directory

I am attempting to automate the deployment of Rescue and Recovery using Active Directory for about 50 laptops. So far, I've read through all of the Lenovo documentation for RnR deployments, none of which is useful. The deployment guide has broken links, the section "Corporate Active Directory Rollout" is incomplete, the command line options aren't clearly written, and the AD instructions end with 'then deply settings using a registry edit'.
My goal is to configure the laptops to automatically backup to a network share once a week, in the background, without any user intervention. So far, almost everything that I've tried in my test environment has led to failure.
First step, install the software. I can't deploy via Group Policy, as the installation doesn't seem to end up working. I did the administrative install to a network location, then published the program via AD. After the reboot, I'll click the RnR shortcut in the start menu, and nothing happens. I've also tried creating a batch file that runs rrcmd.exe to create a backup, but that fails too "Service not found". So I resort to installing manually.
Next, I try to configure the network location via Group Policy and the supplied ADM file. I set the destination path for MND to \\server\%computername%\, but that fails, as MND tries to connect to a share called %computername% instead of what the system variable says. To get around this, I had to create an MND batch file that edits the MND info right before the backup, which doesn't seem to always work.
Now, if mid-backup the user disconnects from the network, there is a series of Delayed Write errors. That's not acceptable.
Also, if I set the backup location to local via GP, then change it to network, the backup command still reads "L", even after a reinstall of the software with the "local" location set to 0 in group policy.
Are there any tips to help ease this deployment?
Thank You

I think I figured it out! You can do exactly what I was doing.
The solution seemed to be I was missing:
orcluserprincipalname=<ADUser>@<domain>
orclsamaccountname=<name>
objectclass=orclADUser
You need at least the first and third one in order for it to work ( adding them is another story - you are on your own for that :-) ).
FYI I found this in the document that I have been using all day (but I didn't pay close enough attention as I missed that part) Doc ID: Note:277382.1
which can be found on metalink.

Client Certificate Mapping authentication using Active Directory across trusted forests

Hi,
We currently have a setup where the on-premises environment and the cloud environment are based on two separate forests linked by a 1-way trust, i.e., the exist in the on-premises AD and the 1-way trust allows them to use their
credentials to login to a cloud domain joined server. This works fine with the Windows authentication.
We are now looking at implementing a 2-Factor authentication using Certificate. The PKI infrastructure exists in the On-Premises Forest. The users are able to successfully login to on-premise servers configured with "AD CLient Certificate
Mapping".
However, we are unable to achieve the same functionality on the cloud domain joined servers. I would like to know
1. Is this possible?
2. If yes, what do we need to do to make this work.
Just to clarify, we are able to authenticate using certificates by enabling anonymous authentication. However, we are unable to do the same after turning on "Client Certificate Mapping authentication using Active Directory"

1. Yes!
2. Before answering this I need to know if your are trying to perform a smart card logon on a desktop/console or if you just want to use certificate based authentication in an application like using a web application with client certificate requirements
and mapping?
/Hasain
We will eventually need it for smartcard logon on to desktop/console. However, at present, I am trying to use this for certificate based authentication on a web application.
To simulate the scenario, I setup up two separate forests and established a trust between them.
I then setup a Windows PKI in one of the forests and issued a client certificate to a user.
I then setup a web server in both the forests and configured them for anonymous authentication with Client SSL requirement configured.
I setup a test ASP page to capture the Login Info on both the servers.
With the client and the server in the same forest, I got the following results
Login Info
LOGON_USER: CORP\ASmith
AUTH_USER: CORP\ASmith
AUTH_TYPE: SSL/PCT
With the client in the domain with the PKI and the server in the other Forest, I got the following response
Login Info
LOGON_USER:
AUTH_USER:
AUTH_TYPE:
I tried the configuration with the Anonymous Authentication turned off and the AD CLient Certificate mapping turned on.
With the client and the server in the same forest, I am able to login to the default page. However, with the server in a trusted forest, I get the following error.
401 - Unauthorized: Access is denied due to invalid credentials.
You do not have permission to view this directory or page using the credentials that you supplied

Oracle 9i/10G DB authentication using Active Directory (with out OID)

Hello All,
We want to use a Single-Password authentication scheme using the Active
Directory as the primary source for userId/Password.
We don't want to use the Active Directory and OID bridge.
As we have many databases and would like to configure all Databases to use Active
Directory for Authentication. Our goal is to have single id/password across all
the databases and any user should be able to login from any computer using their
windows id/password, note that we don't want to use the OSAuthentication.
We have read the documents provided by oracle for authentication using Active
Directory, we were able to create Oracle Schema in Active Directory and were
also able to register a DB with Active Directory and then created user as global
user in Oracle Database and provided the DN of the user. When we tried
authenticate with all this setup it comes back and says invalid ID/Password !!!
And with 10G database we get the Oracle Error ORA-03113: end-of-file on communication channel !!
Has any one tried or have information on Integrating Oracle to Auth against Active Directory?
Envoirnment:
Oracle DB Version: 9.2.0 and also tried on 10.0.1 with same results
Operating System: Windows 2000/ Windows 2000 Server
Constraint: We don't want to user OID ( as we don't have license for this
product ! )

I have a thread started similar to your request.
OS Authenication on Windows
Somewhere I read this. It works on Oracle 9i on Linux, but I have not tried it with Oracle 9i on Windows.
SHOW PARAMETER OS_AUTHENT_PREFIX;
SHOW PARAMETER REMOTE_OS_AUTHENT;
CREATE USER OPS$SOMEUSER IDENTIFIED EXTERNALLY;
GRANT CREATE SESSION TO OPS$SOMEUSER;
For the username, I wonder if we are supposed to put the Windows Domain name as part of the username? Such as, for a Windows domain user MyDomain\SomeUser
CREATE USER OPS$MYDOMAIN\SOMEUSER IDENTIFIED EXTERNALLY;
I really wish Oracle or somebody created a guide or book on how to do this.

Can i use vps's for linux edge server's???

I can stream to edge server on fme------>windows7-edge ------> origin-linux-dedicated--and or--vps------>website works...
but cant do fme---->linix-edge-vps------>linux-orgin-dedicated--or----vps------>website Doesnt work
nore can i do fme------>linux-edge-vps--->windows7-origin---->website Doesnt work
All using latest centos tried and same results with ununtu
so am i out of luck for using vps's?
any help would be great thanks

yeah no that doesn't work but get this...
when i publish to windows edge server the signal gets sent to origin vps then to viewers...
but if i make windows origin and vps edge server is does not work dont understand why this is happening
Date: Wed, 22 Dec 2010 01:45:19 -0700
From: [email protected]
To: [email protected]
Subject: can i use vps's for linux edge server's???
I agree load balancing part but load balancing should be done in context of subscribing and not in terms of publishing. You can do failover in context of publishing using Multi-point publish.
If you publish directly to origin and then introduce edge servers for subscribing do you still face issue.
I mean if you set up your linux VPS as edge and then subscriber goes through that edge - say like rtmp://linuxedge/?rtmp://origin/live - does this work?
Can you try that out and let me know.
>

Can you use an iphone in Haiti using a SIM card for airtime?

Can you use a SIM card for airtime minutes in an iphone in Haiti?

You will need the SIM card that was used when the iPhone was activated in order to restore the iPhone with iTunes if wanted or needed.
If you have an activated SIM card with the same carrier the iPhone was sold as carrier locked with, you can use that SIM card with a restore.

If you buy a phone off ebay for a carrier, can you use it as an ipod

if you buy a phone off ebay for a carrier, can you use it as an ipod

You have to be sure it is not stolen or activation locked
https://www.icloud.com/activationlock/
Ask for the IMEI number and see if it locked to its current owner or blacklisted

Can you use Photoshop CC licence on OS Mavericks 10.9.1 and Windows 7

Can you use Photoshop CC licence on OS Mavericks 10.9.1 and Windows 7

Yes. You get a total of two activations, and one can be on one type of system and the other on the other. That's new with Photoshop CC subscriptions; before you could only run the software on either one or the other type of system.
-Noel

Can you use *Active Directory* in *Linux* as a directory server?

Similar Messages

Maybe you are looking for

Can you use Active Directory in Linux as a directory server?