Configure 2 Ldap servers on C370

hello everyone,
we are consdering to configure a dual bundle C370 to Host a production and sumulation environement simutanously.
from Netwotking and mail flow plicies i think this is possible.
but i am not sure about Ldap profiles.
is it possible to configure two Ldap servers an associate each one with the adequate domain.
regards

If they go in via the notification message they get in their email, they don't need authentication.
But if they need to do more than release that specific message, they'll need auth.
Go to Monitor/Quarantines
In the row for Spam Quarantin there's an "Edit" link on the far right, click that.
There's a section called End-User Quarantine Access, where you can turn on how users get access to the Quarentine. Pick LDAP.
You'll need to turn on and configure the Spam Quarantine End-User Authentication Query and the Spam Qarantine Alias Consolidation Query in your LDAP profiles under System Administration > LDAP

Similar Messages

How to configure sendmail to use multiple LDAP servers ?

Hi everybody!
I have a sendmail running on Solaris 10 and a LDAP server(192.168.1.9) also running Solaris 10 OS. I have configured the sendmail the following way:
bash-3.00# ldapclient list
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=email,dc=reso,dc=ru
NS_LDAP_BINDPASSWD= {NS1}*********************
NS_LDAP_SERVERS= 192.168.1.9
NS_LDAP_SEARCH_BASEDN= dc=email,dc=domain,dc=ru
NS_LDAP_AUTH= simple
NS_LDAP_SEARCH_REF= FALSE
NS_LDAP_SEARCH_SCOPE= sub
NS_LDAP_SEARCH_TIME= 30
NS_LDAP_CACHETTL= 43200
NS_LDAP_PROFILE= default
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_BIND_TIME= 10
I also have another LDAP server (IP 192.168.1.10). It is configured as a replicant of the 192.168.1.9 LDAP server.
The question is how can i configure sendmail to use both LDAP servers ?
The man pages explain how to configure ldapclient to use ONE server and what if want to use two or more? All the settings and the profiles the same.
Thanks in advance =))

Hi!
To add LDAP servers to the Solaris ldapclient, you might use the ldapclient command:
ldapclient manual -v -a defaultServerList="servera.yourdomain.com serverb.yourdomain.com"
But this is only failover, AFAIK the Solaris ldapclient does not perform loadbalancing by itself.
But I am not sure about your sendmail programm. Normally, sendmail has its own configuration
and can be configured to use LDAP e.g. for aliases etc.
Regards!
Rainer

Multiple LDAP servers on single System

hi,
Would like to know if its a good idea to have multiple LDAP servers running on a single System (Hardware) ..
100,000 user base
We would like to run the old and new LDAP databases on the same server till we phase out the old LDAP database after migrating all applications..
System:
2 x V880 4CPU 8GB RAM --multi-master configuration
4 x V420R 4CPU 8GB RAM -- read only replicas

Shouldnt be an issue - thats not a particularly large user base and thats some heft y HW. Keep in mind though that they will be on different ports so any software you migrate may eventually need tweaking to the default port when the new takes over.

Multiple LDAP Servers

Is it possible to configure and use two or more LDAP servers to authenticate OBIEE users? We have users with logins in two different domains that need to log in to our OBI servers.

Yes, It is.
Just list out all the LDAP servers with domain identifiers.
then In your authentication initialization block add all the LDAP servers. So the BI Server will authenticate against each server until it finds a match. or based on domain identifier it will go to the correspondent LDAP server.
- Madan

Configured for LDAP authenication , still giving odbc error.

Hi,
I have gone through several posts in forum.I did not find solution for my issue.
Here is what we have done
We are trying OBIEE authentication and authorization by LDAP (Nortell Directory Server).Here is what i did
-Impersonator User created and Credentials are added to Oracle BI Presentation Services Credential Store
We have following config in instanceconfig.xml
<Auth>
<SSO enabled="true">
<ParamList>

<Param name="IMPERSONATE"
source="httpHeader"
nameInSource="Z-USERID"/>
</ParamList>
<LogoffUrl>http://IP/analytics/saw.dll?Logoff</LogoffUrl>
</SSO>
</Auth>
-Configured LDAP Server under Security Manager/LDAP Servers( set cn attribute in advanced tab for user name attribute).Tested connection It is successful.We are not importing users.
- In Variable manager created an intilization block named it 'Authentication' and mapped three System variables(USER,GROUP,WEBGROUPS) with LDAP atrributes( for groups and webgroups we provided an attribute under user DN). Tested by supplying a username and password it pulled the attribute values.
We log into a WebApplication and the webapplication redirect the request to along with header Z-USERID.
https://XXX.COM/analytics/saw.dll
Here is how it is working:
If supply username and password in two URL parameters nquser and nqpassword it works,i get Dasboard page and other links according to the configured groups in LDAP.
if i do not supply URL parameters nquser and nqpassword, i get "not logged in page."
the initblock that deals with authentication and autherization is working fine.
Single sign on is not working, it is reading the httpheader that we supply.I am not sure why it expecting password.
ssw Logs show following error
Odbc driver returned an error (SQLDriverConnectW).
State: 08004. Code: 10018. NQODBC SQL_STATE: 08004 nQSError: 10018 Access for the requested connection is refused.
nQSError: 43001 Authentication failed for loggedinIN_USERID in repository Star: invalid user/password. (08004)
I tried some of the suggestion on this site like change passwords to 8 characters of impersonator passphrase etc with no success.
It looks like it is trying databse authentication even though we configured initblock with LDAP settings.
Please help!.

Hi
have you created an impersonate user in the Repository ??
Yes,added him to groups Administrator and XMLP_ADMIN
Can you open the url through firefox and look at the cookies ..,
Yes, I opened, When i get not logged in page, when i check cookies ,
i see following cookies
SAWISAPI
nquireID
sawP - Blank
sawU - loggedinUSERID
another two session based cookies.
open the saw.log in textpad and launch your sso link in Firefox
Search for the nquserID and check the values ...it will be encrypted but should be there !!
I searched both saw and server logs, i did not find "nquserID" String.ofcourse i see logged user's login ID in saw logs.
Also do you have load Balanced web servers .. if yes can you ask your web admin to enable sticky session ??
I checked with IChain admin, if the webapp is load balanced they would add sticky bit.But currently app is not in load balanced environment.
Thanks Sid, Please help me resolve this,
Thanks

Multiple LDAP Servers in Fusion Middleware (OBIEE 11g)

Hello,
I have a question, regarding integration of multiple LDAP servers with single Weblogic Server of Fusion Middleware (OBIEE 11g). We are currently using OBIEE 10g. We are on verge of migrating to 11g. However, I have a question regarding the LDAP server.
Our two applications run on two distinct LDAP servers. The plan is to provide a single sign on link for OBIEE 11g reports to the end users and depending on what application they are using, they must be authenticated against the respective LDAP server.
So, my question, is it possible to Integrate two different LDAP servers in the Weblogic of Fusion Middleware (OBIEE 11g). If so, what would be the steps. Any helpful document will also be appreciated.
Thank you,
Chandu.

Yes, you can configure multiple authentication providers one by one as you generally do.
When you configure multiple Authentication providers, use the JAAS Control Flag for each provider to control how the Authentication providers are used in the login sequence. You can set the JAAS Control Flag in the WebLogic Administration Console.
REQUIRED—The Authentication provider is always called, and the user must always pass its authentication test. If authentication succeeds or fails, authentication still continues down the list of providers.
REQUISITE—The user is required to pass the authentication test of the Authentication provider. If the user passes the authentication test of this Authentication provider, subsequent providers are executed but can fail (except for Authentication providers with the JAAS Control Flag set to REQUIRED).
SUFFICIENT—The user is not required to pass the authentication test of the Authentication provider. If authentication succeeds, no subsequent Authentication providers are executed. If authentication fails, authentication continues down the list of providers.
OPTIONAL—The user is allowed to pass or fail the authentication test of this Authentication provider. However, if all Authentication providers configured in a security realm have the JAAS Control Flag set to OPTIONAL, the user must pass the authentication test of one of the configured providers.
refer - http://docs.oracle.com/cd/E13222_01/wls/docs92/secmanage/atn.html
Regards
Mukesh Negi
http://weblogicserveradministration.blogspot.in/

Cisco ACS 5.2 authentication against multiple LDAP servers

Hi Folks,
I have a wireless network that uses ACS 5.2 to handle authentication. The ACS is integrated with an Active Directory LDAP server (my_ldap) and is working correctly at the moment. The authentication flow looks like this:
- User tries to associate to WLAN
- Authentication request is sent to ACS
- Service selection rule chooses an access-policy (wireless_access_policy)
- wireless_access_policy is configured to use my_ldap as identity source.
A sister company is about to move into our offices, and will need access to the same WLAN. Users in the sister company are members of a separate AD domain (sister_company_ldap). I would like to modify the wireless_access_policy so that when it receives an authentication request it will query both my_ldap and sister_company_ldap, and return a passed authentication if either attempt is successful. Is this possible?

Assuming you're already authenticating using your AD binding and AD1 as your identity source, you can add a further LDAP server as another identity source and add this to your identity store sequence in your access policy to authenticate against both.
You can also add multiple LDAP servers and add them both to the identity store sequence (if you're not using AD1).

Load balancing LDAP Servers

Hi
Load balancing to be achieved on two LDAP Servers.
In CSS, round robin configuration is carried out between the LDAP Servers.
My query is when the client initiates the tcp connection to CSS VIP Address and which in turn redirected the request to server A termed as LDAP binding. During that and any activities like LDAP modify comunication from the client will the CSS sees that as different request and redirect it to the Server B( as Round robin configuration carried out) ?
Any help on this higly appreciated.
Thanks & regards
R.Sundara Rajan

If I am reading your question correctly, it sounds like you are asking if, once a TCP session is established to the VIP, if subsequent LDAP transactions from that connecting client will be load balanced.
The answer is no, once the TCP session is established, you will continue to use the same backend server until the TCP session ends(fin or rst or whatever).
Simply described in a healthy system, from TCP SYN to FIN everything will be directed to the same server.

Integrating BIP with multiple LDAP servers

Hi,
my question is very simple. In Admin->Security Configuration->Security Model section i've setted Security model combobox with LDAP value. Then i've filled all LDAP information field (for example:URL). All works. But in my rpd i 've multiple LDAP servers (multiple URL) and in the form i can insert information about only one LDAP server.
Is it possible configure BIP with multiple LDAP servers?
Thanks
Giancarlo
P.S. I'm using OBIEE 10g

Hi,
my question is very simple. In Admin->Security Configuration->Security Model section i've setted Security model combobox with LDAP value. Then i've filled all LDAP information field (for example:URL). All works. But in my rpd i 've multiple LDAP servers (multiple URL) and in the form i can insert information about only one LDAP server.
Is it possible configure BIP with multiple LDAP servers?
Thanks
Giancarlo
P.S. I'm using OBIEE 10g

CSS11501 load-balancing SMTP and LDAP servers

Can anybody provide me with samples of configuration to load-balance SMTP & LDAP servers with CSS ? I feer having the same problem as with FTP when the session is initiated from the server side and that we have to make some special adds-on to the config ?

Load balancing should work fine on the CSS. I am sure that there is some confiugaration issue. Can you post the configuration so that we can check where the problem is?

Other LDAP servers with Oracle ?

Hi,
We plan to integrate further ldap in our enterprise and
specially with oracle databases (configuration, security
issues). Oracle provide his own LDAP server know as OID, but can
we use an other ldap server to store Oracle specific ldap datas ?
We have to consider ldap for windows (Active Directory), for
mail purpose (postfix) and for database logon and configuration.
We don't want to have Active Directory plus OID plus Netscape
LDAP plus Openldap ... We want to use ldap protocols and data
that fits in an integrated directory for entreprise use.
So can we deploy another directory server behind Oracle ldap
clients functionalities ?
Thank in advance for your help ,-)

Hello aymeric,
The wonderful thing about LDAP is that it is a protocol standard
governed by the IETF. So migrating from one server to another
should be relatively easy. Since version 3.0.1, OID has a Meta
Directory or as it is sometimes refered to as the Directory
Integration server built into it which allows you to create
custom connectors to synchronize OID with just about any type of
data repository.
Can you give me a specific example of what you want to migrate?
Obviously I cannot vouch for the capabilities of other LDAP
servers regarding this subject.
Thanks,
Jay

LDAP Servers in GROUPWISE hides

i have just installed a new groupwise.
ConsoleOne with Novell LDAP Snapins
Groupwise is configured as normal
But The "LDAP Servers" in Tools -> Groupwise System Operations -> "LDAP Servers" hide
I tried to reinstall ConsoleOne and update groupwise but "LDAP Servers" doesn't show.
Do you have any ideas?
Tks for reading.

I install for 1 domain only. :(
not multi-domain.
So weird huh?
Originally Posted by buckesfeld
* ndhuynh wrote, On 12/12/2011 11:26 AM:
> NO. i installed to the main domain.
Doesn't answer my question ;-)
Do you have multiple domains? If so, in C1 you see the primary domain with a red line underneath the symbol. When you are connected to it, you also see a white plug at the symbol. Is that the case? If the white plug is at a secondary domain, right click the primary and select "connect".
Uwe
Novell Knowledge Partner (NKP)
Please don't send me support related e-mail unless I ask you to do so.

How to configure multiple smtp servers per domain

Hi,
how do we configure multiple smtp servers per domain/corporate in iplanet messaging server 5.2. i wanted to do this so that i can configure some domains with virus scanning and some domains without antivirus.

Hi Martin,
Well we are trying to run a report without exactly specifying the name of reports server anywhere, e.g. in database or in form or anywhere else. Now if I do not supply a reports server name using RUN_REPORT_OBJECT, the error it displays is FRM-41211: Integration Error : SSL failure ... However if I specify the reports server name in the form, the reports run perfect. Also the name of reports server is specified in rwservlet.properties.
Now the question goes as follows:
Can I run my report from Form without specifying the name of the Reports server anywhere at all. This is so because either an in-process reports server should be picked or the one which is entered in rwservlet.properties should be pickec up by default. Please correct us if we are wrong. once we are through with it, we have to move to Oracle 10gR2 concept of reports server.
Thanks in anticipation,
Ruchi/Saurabh

How to configure multiple report servers in Oracle 10 G R2?

I want to configure multiple report servers with my application deployed on Oracle 10G R2. Since R2 does not support report server clustering, how can this be achieved without any change in the application?
Currently, the application is running with single report server.

Hi Martin,
Well we are trying to run a report without exactly specifying the name of reports server anywhere, e.g. in database or in form or anywhere else. Now if I do not supply a reports server name using RUN_REPORT_OBJECT, the error it displays is FRM-41211: Integration Error : SSL failure ... However if I specify the reports server name in the form, the reports run perfect. Also the name of reports server is specified in rwservlet.properties.
Now the question goes as follows:
Can I run my report from Form without specifying the name of the Reports server anywhere at all. This is so because either an in-process reports server should be picked or the one which is entered in rwservlet.properties should be pickec up by default. Please correct us if we are wrong. once we are through with it, we have to move to Oracle 10gR2 concept of reports server.
Thanks in anticipation,
Ruchi/Saurabh

LDAP Authentication Scheme - Multiple LDAP Servers?

How to set up ldap authentication so that multiple ldap servers are available? Scenario: ldap service is replicated through several servers, but does not sit behind a common dns/reverse proxy connection, so applications would list each ldap server and attempt to contact each in order if one or more ldap servers is unreachable.

How to set up ldap authentication so that multiple ldap servers are available? Scenario: ldap service is replicated through several servers, but does not sit behind a common dns/reverse proxy connection, so applications would list each ldap server and attempt to contact each in order if one or more ldap servers is unreachable.

Configure 2 Ldap servers on C370

Similar Messages

Maybe you are looking for