Getting LDAP Attribute

I am using dbms_ldap to create a custom authentication package in APEX. I feel this is more of a database code issue rather than an APEX issue so posting this here.
I've successfully authenticated to my LDAP server, but now want to get an attribute called clockNumber for the authenticated user. Can someone assist me with recovering a specific attribute (maybe its called something different) from LDAP?
Thanks in advance!

You can get the user view/object and from that object you can easily get all desired attributes, Check you LDAP schema Map to know "Identity System User Attribute" mapping with "Resource User Attribute" and check EMPLOYEEID

Similar Messages

Problem with getting LDAP attributes on ISE when EAPChaining is enabled

Hi All,
has anybody and idea how to set LDAP attributes retrieval with EAPChaining enabled?
My scenarios is:
- user with AnyConnect (EAP-FAST) connects to WLAN and sends it's credentials
- ISE authenticates username and password against Active Directory
- ISE should check if the same userid contains in LDAP Directory (not AD, different store) special attribute which controls access to our WLAN
- If the attribute is found, then authorization profile is matched.
This works when I disable EAP-Chaining Policy -> Policy Elements -> Results -> Authentication -> Allowed Protocols ...
In logs I've found that the user was not found in LDAP, but the user exists.
Maybe the workaround can be if just user from EAPChaining is used and not also the hostname, then it could match. But I cannot find any similar parameter which returns only user.
Does anybody have an idea how to solve this?
Thanks!
K.

Hi,
This seems like a corner issue, because eap-fast with ldap is not supported. LDAP as the protocol doest support hash based authentication hence the reason ISE is failing to hit the ldap database.
Referencing acs material since ise docs are not complete:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/eap_pap_phase.html
Sent from Cisco Technical Support Android App

Get LDAP attributes

Hi All.
I'm using :
Access Manager 7.1
Access Manager Policy Agent for WebLogic 10
My Access Manager, client application and the agent are ok. My application is authenticating ok.
BUT, I need to retrieve some Active Directory informations, like sAMAccountName and mail.
How can I do that?
I have already cofigured:
com.sun.identity.agents.config.session.attribute.fetch.mode = REQUEST_ATTRIBUTE
com.sun.identity.agents.config.session.attribute.mapping[UserToken] = UserTokenWhen I code: request.getAttribute("UserToken"), the full name of the logged user is shown, but I need to get the other attributes. Even if I configure the AMAgent.propeties the attributes are not shown.
com.sun.identity.agents.config.session.attribute.mapping[sAMAccountName] = sAMAccountNameEven doing this, request.getAttribute("sAMAccountName") do not show me this attibute.
What else do I need to do to make this work?
Edited by: Andre_Silva on Aug 19, 2008 11:07 PM

OK.
But, how do I do this....
I did setting in profile attributes in AMAgent.properties, but I had access denied. When I set in the session attribute, it's OK, but sAMAcountName come null
follow exception in amFilter.log
com.sun.identity.agents.arch.AgentException: Unable to obtain attributes: {sAMAccountName=NEW_USER_ID}, for user: CN=Carlos Alberto ,CN=Users,DC=company,DC=com,DC=br
     at com.sun.identity.agents.common.ProfileAttributeHelper.getAttributeMap(ProfileAttributeHelper.java:137)
     at com.sun.identity.agents.common.ProfileAttributeHelper.getAttributeMap(ProfileAttributeHelper.java:153)
     at com.sun.identity.agents.filter.ProfileAttributeTaskHandler.getUserAttributes(ProfileAttributeTaskHandler.java:64)
     at com.sun.identity.agents.filter.AttributeTaskHandler.process(AttributeTaskHandler.java:78)
     at com.sun.identity.agents.filter.AmFilter.processTaskHandlers(AmFilter.java:172)
     at com.sun.identity.agents.filter.AmFilter.isAccessAllowed(AmFilter.java:135)
     at com.sun.identity.agents.filter.AmAgentBaseFilter.doFilter(AmAgentBaseFilter.java:66)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3393)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(Unknown Source)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2140)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2046)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1366)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:200)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:172)
java.lang.NullPointerException
     at com.sun.identity.idm.remote.IdRemoteCachedServicesImpl.getAttributes(IdRemoteCachedServicesImpl.java:355)
     at com.sun.identity.idm.AMIdentity.getAttributes(AMIdentity.java:339)
     at com.sun.identity.agents.common.ProfileAttributeHelper.getAttributeMap(ProfileAttributeHelper.java:122)
     at com.sun.identity.agents.common.ProfileAttributeHelper.getAttributeMap(ProfileAttributeHelper.java:153)
     at com.sun.identity.agents.filter.ProfileAttributeTaskHandler.getUserAttributes(ProfileAttributeTaskHandler.java:64)
     at com.sun.identity.agents.filter.AttributeTaskHandler.process(AttributeTaskHandler.java:78)
     at com.sun.identity.agents.filter.AmFilter.processTaskHandlers(AmFilter.java:172)
     at com.sun.identity.agents.filter.AmFilter.isAccessAllowed(AmFilter.java:135)
     at com.sun.identity.agents.filter.AmAgentBaseFilter.doFilter(AmAgentBaseFilter.java:66)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3393)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(Unknown Source)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2140)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2046)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1366)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:200)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:172)and my setting:
com.sun.identity.agents.config.profile.attribute.fetch.mode=REQUEST_ATTRIBUTE
com.sun.identity.agents.config.profile.attribute.mapping[sAMAccountName]=NEW_USER_IDYou have some examples or links(articles) for pass me, please.
I need to resolve this, please!!!!
Thank's a lot.
Edited by: hivaj on Aug 21, 2008 10:24 AM
Edited by: hivaj on Aug 21, 2008 1:43 PM

How to get user attributes from LDAP authenticator

I am using an LDAP authenticator and identity asserter to get user / group information.
I would like to access LDAP attributes for the user in my ADF Taskflow (Deployed into webcenter spaces).
Is there an available api to get all the user attributes through the established weblogic authenticator provider or do i have to directly connect to the LDAP server again?
Any help would be appreciated

Hi Julián,
in fact, I've never worked with BSP iViews and so I don't know if there is a direct way to achieve what you want. Maybe you should ask within BSP forum...
A possibility would be to create a proxy iView around the BSP iView (in fact: before the BSP AppIntegrator component) which reads the user names and passes this as application params to the BSP component. But this is
Beginner
Medium
Advanced
Also see http://help.sap.com/saphelp_nw04/helpdata/en/16/1e0541a407f06fe10000000a1550b0/frameset.htm
Hope it helps
Detlev

Getting User Attributes from an Active Directory LDAP

Hello all.
I want to extract attributes assigned to a user in the Active Directory LDAP and make them available through the getPropertyValue property in Javascript. I know that a user's System Attributes can be accessed with getPropertyValue but I have not found a way to get specific attributes from the LDAP and make them available as specific attributes in xMII. System attributes like "EmailAddress1" seem to transfer from the LDAP but others don't. Anyone have any ideas?
Thanks.
...Sparks

Sparks,
If you're using 11.5 or 12 actually they should all map into the system as session properties. You can use the following URL to verify your session properties:
http://<xMIIServer>/Lighthammer/PropertyAccessServlet?Mode=List
If you are not seeing the attributes you expect then your Attribute Query for User or Role is incorrect for your LDAP system and you need to change the LDAP configuration queries.
-Sam

Getting operational ldap attributes using amSDK

Is there any way to get operational ldap attributes of a user? I am trying to get "passwordexpirationtime" attribute.
amUser.getStringAttribute("passwordexpirationtime");
does not return anything.. no exceptions.
tried getAttributesFromDataStore, that too does not return anything..
Set attr = new HashSet();
attr.add("passwordexpirationtime");
Map exptime = amUser.getAttributesFromDataStore(attr);
is this supported?
Using JES2005Q4 with AM patch - 120954-04
Regards,
Pradeep.

Hi Bill,
First I like to state that I'm not an expert on CUEAC. Have you looked at this post,
https://supportforums.cisco.com/message/4071453#4071453
I don't knoiw if it's realted or not, but the guy answering seems to be well versed in CUEAC.
Please remember to rate helpful responses and identify helpful or correct answers.

Inbound mail routing based on LDAP attribute mailsystem

Hi gents and ladies,
i have a small question ...
is it possible to route an email to a recipient based on an LDAP attribute like mailsystem or ldap attribute domain ?
We have an infrastructure with domino and Xchange. All users have a - so called - maindomain.net SMTP Address.
Is it possible to manage such routing via mail policies or message filters ?
Or is it just easy to realize this jjust with SMTP routing list ? e.g. maindomain.net gets an entry in SMTP routing pointing to the domino gateway ... if no delivery is possible the default gateway (Xchange gateway) would be used instead ?
Thanks in advance for your help and hints.

Hello HPGroh2013,
I think I answered your question in the previous entry, at least it looks the same to me.
Regards,
Andreas

Read LDAP Attributes

Hi Friends,
Is it possible to read an LDAP attribute of a logged user from WD application running in portal? How and where to see all the available attributes in LDAP?
Thanks in advance
Nathan.

Hi Nathan,
Right now i am also working on using attribute value of LDAP users in webdynpro application. You need to work on UME API.which is availabel on SDN.
you will get the values in webdynpro application through these API.
Thanks,
sahu

Getting the attributes of an object by using a URL

Hi,
Here is my problem. I want to access to the attributes of an object stored in an LDAP. I know this object when I receive this kind of url:
ldap://163.187.83.145:389/ou=People,dc=slb,dc=com,uid=TOTO;
How can I get the attributes of the uid without changing the code below. If I set the context_provider with this url, I am pointing on the right object but my problem is to get its attributes.
Does anyone know how to do?
Here is an example of my code:
String ldap_URL = ldap://163.187.83.145:389/ou=People,dc=slb,dc=com,uid=TOTO;
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, ldap_URL);

Hello !!
You can very well carry on with your code , to get the attributes you can have a look at this code snippet :
import java.io.*;
import java.util.Hashtable;
import javax.naming.*;
import javax.naming.directory.*;
class GetAttr {
     public static void main(String args[]) {
          Hashtable env = new Hashtable();
          String attname=null;
String ldap_URL="ldap://163.187.83.145:389/ou=People,dc=slb,dc=com,uid=TOTO";
          env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
          env.put(Context.PROVIDER_URL, ldap_url);
          try {
               DirContext ctx = new InitialDirContext(env);
               String[] strAttrID={"objectClass","cn","userPassword"};
               Attributes attrs = ctx.getAttributes("",strAttrID);
               for (
                    NamingEnumeration ae = attrs.getAll();
               ae.hasMore();
               Attribute attr = (Attribute)ae.next();
               System.out.println("\n" + attr.getID());
               for (
                         NamingEnumeration e = attr.getAll();
                         e.hasMore();
                         System.out.print(" : " + e.next() +"\t")
          catch (NamingException ne) {
               ne.printStackTrace();
1.See this line ctx.getAttributes("",strAttrID)....this means that in the URL itself you have given JNDI the complete reference or key to locate the object. For eg: if uid=TOTO was not present in your URL , you could have done ctx.getAttributes("uid=TOTO",strAttrID).
2.This will print only the 3 attributes I have specified(objectclass,cn,password).You can add your own according to the attributes u have in your LDAP directory (see in LDIF.txt or <some-name>.ldif)
Hope this helps
Regards
Chandu

How to retrieve only LDAP attributes

Any way to retrieve only the available LDAP attributes?
I want to display all the available LDAP attributes on the UI (like sn, cn, etc.) and let user select which ones he want to retrieve.
Thanks.

This would be a function of building an ldapsearch in your code and stating the attributes you want returned as input from the user. Its better to know up front what attributes are available from the ldap based on access rights, and make that static, instead of retrieving them everytime someone opens a web page. If you run an ldapsearch and state the attributes you want returned you will only get those back.

Not able to get the attributes from HttpSession

hi all,
i'm using session.setAttribute() in a jsp to put an attribute in the session and when i try to get that attribute in another jsp it's not giving the value. But the getAttribute() mehods is giving the value in the same jsp page where i used the setAttribute() method.
pls help,
regards chandu

If you are using IE go to tool and then internet options and look under privacy for you cookie status(this will vary version).
To use URL rewriting all you have to do is one of two things:
www.url.com?parm=value&param2=value
or if the value is a result of a java expression or is a java variable you can do
www.url.com?parm=<%=variable%>&param2=<%=(variable +1)%>
You get the values from url rewriting by using request.getParameter or getParameterValues(used when multiple values are getting passed).
When data is retrieved using getParameter it always comes back as a string and you should trim them as well.
HTH,
J.Clancey

How to get all attributes of a component

Hi all,
In a component I'm trying to get attributes of some primefaces components, but somehow I cannot retrieve them all.
Here's a little bit of a table:
          <p:dataTable styleClass="ptable100" title="${msg.contractlist_title}" id="contractlistTable" var="contract" value="#{contractList.contracts}" width="100%" height="200px"
                    emptyMessage="#{msg.all_lists_no_records_found}" paginator="#{contractList.rowSize > 10}" rows="10" rowsPerPageTemplate="5,10,20,50,100"
                    paginatorTemplate="{FirstPageLink} {PreviousPageLink} {PageLinks} {NextPageLink} {LastPageLink} #{msg.all_lists_numberOfRowsDisplayed_label}{RowsPerPageDropdown}">
               <p:column id="column_id" resizable="true" sortBy="#{contract.id}" style="white-space:normal">
                  <f:facet name="header"><h:outputText styleClass="headerText" value="#{msg.contractlist_contract_id}" /></f:facet>
                     <h:outputLink value="#{path.dynamicUrl}contract/detail.xhtml" onclick="Richfaces.showModalPanel('busy_nav');">
                         <h:outputText value="#{contract.id}"/>
                         <f:param name="contractid" value="#{contract.id}" />
                     </h:outputLink>
              </p:column>Then, I try to get the attributes like this (where table is the UIData component):
          String title = "";
          System.out.println("table.getAttribs.keys= " + table.getAttributes().keySet());
          System.out.println("table.getAttribs.vals= " + table.getAttributes().values());
          if (table.getAttributes().containsKey("title")) {
               title = String.valueOf(table.getAttributes().get("title"));
          }The function getAttributes() is implemented on UIComponentBase so I believe it's independent of the component.
This prints the following:
table.getAttribs.keys= [com.sun.facelets.MARK_ID]
table.getAttribs.vals= [5756abfa]When I do the same for the columns, all attributes I get is MARK_ID, style and styleClass.
Obviously I'd like to get all attributes, in this case the "title" on the p:dataTable.
Any thoughts why this isn't working and how I could do that?
Thank you,
Steven

Hi all,
In a component I'm trying to get attributes of some primefaces components, but somehow I cannot retrieve them all.
Here's a little bit of a table:
          <p:dataTable styleClass="ptable100" title="${msg.contractlist_title}" id="contractlistTable" var="contract" value="#{contractList.contracts}" width="100%" height="200px"
                    emptyMessage="#{msg.all_lists_no_records_found}" paginator="#{contractList.rowSize > 10}" rows="10" rowsPerPageTemplate="5,10,20,50,100"
                    paginatorTemplate="{FirstPageLink} {PreviousPageLink} {PageLinks} {NextPageLink} {LastPageLink} #{msg.all_lists_numberOfRowsDisplayed_label}{RowsPerPageDropdown}">
               <p:column id="column_id" resizable="true" sortBy="#{contract.id}" style="white-space:normal">
                  <f:facet name="header"><h:outputText styleClass="headerText" value="#{msg.contractlist_contract_id}" /></f:facet>
                     <h:outputLink value="#{path.dynamicUrl}contract/detail.xhtml" onclick="Richfaces.showModalPanel('busy_nav');">
                         <h:outputText value="#{contract.id}"/>
                         <f:param name="contractid" value="#{contract.id}" />
                     </h:outputLink>
              </p:column>Then, I try to get the attributes like this (where table is the UIData component):
          String title = "";
          System.out.println("table.getAttribs.keys= " + table.getAttributes().keySet());
          System.out.println("table.getAttribs.vals= " + table.getAttributes().values());
          if (table.getAttributes().containsKey("title")) {
               title = String.valueOf(table.getAttributes().get("title"));
          }The function getAttributes() is implemented on UIComponentBase so I believe it's independent of the component.
This prints the following:
table.getAttribs.keys= [com.sun.facelets.MARK_ID]
table.getAttribs.vals= [5756abfa]When I do the same for the columns, all attributes I get is MARK_ID, style and styleClass.
Obviously I'd like to get all attributes, in this case the "title" on the p:dataTable.
Any thoughts why this isn't working and how I could do that?
Thank you,
Steven

How to Get Navigational attributes of dso in Report ...

Hi i have a dso with many fields ,
In the report i need to get some navgational attributes which are in dso..
How to Get Navigational attributes of dso in Report ..??
Thanks All..

hai naiduz,
in the dso u find folder with navigational attributes, there select the Navigation check box the fields which u need in the report.
and further if ur dso through multiprovider and also identify them at multi provider level.
then u will be able to see the fields at query designer level, then u can use the nav. fields u need in the report.
regards,
Vj

How can I get the attribute of another app of the JSP server's session

in one server, use Tomcat 4.1, have two application at
.../webapps/app1
.../webapps/app2
when use login to application1, it'll set a attribute of session use following code:
session.setAttribute("identitycode", IdentityCode);
session.setMaxInactiveInterval(SessionTimeOut);
and the other jsp programs which at app1 directory will try to get the attribute of this session to identity whether the user had login and get the identity code.
I want to make user just login one time to use application1 and application2, but I didn't know how to get the attribute of session what seted at app1 in app2's programs.
can you tell me how I can do this?

If there are 2 different applications like app1 & app2, U need to use:
application.setAttribute() method.(not session.getAttribute).
u need to maintain one collection like hash table which will store the mappings of User & their IDs . U can then get the user details from app1 to app2

How to get the attribute value of an XML file??

How to get the attribute value of an XML file??
For example, how to get name and age attributes?
<student name="Joe" age="20" />

What are you using to read the XML file??
On the assumption of JDOM - www.jdom.org. Something along the lines of:SAXBuilder builder = new SAXBuilder(true);
Document doc = builder.build(filename);
Element root = doc.getRootElement();
List children = root.getChildren();
Element thisElement = (Element)children.get(n);
String name = thisElement.getAttributeValue("name")
try
int age = Integer.parseInt(thisElement.getAttributeValue("age"));
catch (Exception ex)
throw new InvalidElementException("Expected an int.....");
}Ben

Getting LDAP Attribute

Similar Messages

Maybe you are looking for