Handling with extern user security (os)

hello,
where can I find information with the authorization with os-security / user.
I need access to an oracle-database on hp-ux from my windows app. the oracle-users-password is in relation from the hp-ux-authentification and not stored in the oracle-user-object.
I use delphi6 with doa-components, but this problem is not in the delphi-area solved. I need information with relation os and oracle.
thanks for any hint!
;-) thomas

user12005710 wrote:
I am doing this on our test environment. We have multiple OH's on this box.
1. Two 11g Oracle database home's. (11.1 and 11.2)
2. 10g Grid control agent home.
3. 12c Cloud control agent home.
4. Oracle fusion middleware 11.1.1.7 home. (We have weblogic and OVD under this).
we have tnsnames.ora file in all $ORACLE_HOME/network/admin directories. I just checked, TNS_ADMIN and LDAP_ADMIN are not set.
Here's a copy of sqlnet.ora and ldap.ora file under 11.2 OH:
SQLNET.ORA:
# sqlnet.ora Network Configuration File: /opt/apps/oracle/product/11.2.0/network/admin/sqlnet.ora
# Generated by Oracle configuration tools.
NAMES.DIRECTORY_PATH= (LDAP)
#TRACE_LEVEL_SERVER = SUPPORT
WALLET_LOCATION =
(SOURCE =
    (METHOD = file)
    (METHOD_DATA =
      (DIRECTORY = /opt/apps/oracle/admin/xxxxxx/wallet)
LOG_DIRECTORY_CLIENT = /opt/apps/oracle/product/11.2.0/network/log
LOG_DIRECTORY_SERVER = /opt/apps/oracle/product/11.2.0/network/log
LDAP.ORA:
# ldap.ora Network Configuration File: /opt/apps/oracle/product/11.2.0/network/admin/ldap.ora
# Generated by Oracle configuration tools.
DIRECTORY_SERVERS= (ldaphostname:port1:port2)
DEFAULT_ADMIN_CONTEXT = "dc=xxx,dc=xxx"
DIRECTORY_SERVER_TYPE = OID
the tnsnames.ora file being used does NOT contain the alias being specified or used,

Similar Messages

Is it possible to list information , that i have shared(i.e documents, sites etc) with external user.

Hi,
Is it possible to list information , that i have shared(i.e documents, sites etc) with external user.

Hi
We have two version of SharePoint, one the online version and the other on-premise installation
In online version, we can invite external users(liveID and google users) to have access to site and documents. This feature is provided by ADFS server already configured OOB in online version
Onpremise version does not have by default the feature to share with external users or customers. we have to extend the site and provide different identity providers.The identity provider can be Active directory,SQL server,Claims,ADFS server which
will support liveID
http://technet.microsoft.com/en-us/library/cc261698(v=office.14).aspx
Thanks
Whenever you see a reply and if you think is helpful,Vote As Helpful! And whenever you see a reply being an answer to the question of the thread, click Mark As Answer

Using a workflow to share documents with external users

I'm trying to create a workflow that will share documents with external users. Those external users don't have SharePoint logons.
One approach might be to send an email using a 2010 workflow. However there doesn't appear to be the ability to attach a document to that email.
The other approach could be to use the Share function of SharePoint 2013 but can this be triggered using a workflow? If so how?
Please note: I'm using SharePoint Online
Thanks in Advance,
Mark E.
Learning SharePoint

Hi Mark,
You can use external sharing option in SharePoint Online. Below links might help:
https://support.office.com/en-gb/article/Manage-external-sharing-for-your-SharePoint-online-environment-c8a462eb-0723-4b0b-8d0a-70feafe4be85
https://support.office.com/en-in/article/Manage-sharing-with-external-users-in-Office-365-Small-Business-2951a85f-c970-4375-aa4f-6b0d7035fe35?ui=en-US&rs=en-IN&ad=IN
http://www.adrit.de/Blog/Post/25/External-sharing-with-Office-365---Part-2--How-to-share-SharePoint-content-with-external-users-
Best Regards,
Brij K
http://bloggerbrij.blogspot.co.uk/

Need help with external user authentication

Hello,
I need some help to set up an external user authentication in Oracle DB 10g. Using the documentation at
http://www.oracle-base.com/articles/misc/OsAuthentication.php
I added the user alex to my linux system and checked the parameter os_authent_prefix:
SQL> show parameter os_authent_prefix
NAME TYPE VALUE
os_authent_prefix string ops$
SQL>
I created the oracle user alex using
CREATE USER alex IDENTIFIED EXTERNALLY;
as well as
CREATE USER ops$alex IDENTIFIED EXTERNALLY;
The parameters in the sqlnet.ora are set to
NAMES.DIRECTORY_PATH = (TNSNAMES, HOSTNAME, EZCONNECT)
SQLNET.AUTHENTICATION_SERVICES = (ALL)
Being the local user alex on the linux server I can login:
$ sqlplus /
SQL*Plus: Release 10.2.0.1.0 - Production on Tue Aug 30 08:56:26 2011
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Connected to:
Oracle Database 10g Release 10.2.0.1.0 - 64bit Production
SQL>
Now using a Windows Client:
C:\>sqlplus alex@<netservicename>
SQL*Plus: Release 10.2.0.1.0 - Production on Di Aug 30 10:31:37 2011
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Kennwort eingeben:
ERROR:
ORA-01017: invalid username/password; logon denied
- So, what's wrong?
- Do I always have to create oracle users with the prefix "ops$" to the local username? How do these users login - with or without the prefix 'ops$'?
- I read that kerberos authentication is only available through oracle advanced security addon. What about authentication through ldap?

Obviously it doesn't work from any remote system.
For this to happen the parameter remote_os_authent would have been set to true.
Warning: this poses a security risk.
As far as I know you should have been logged in as alex on the client, and using sqlplus /
However, from 10g onwards Oracle comes with Oracle Wallet, which stores the password encrypted outside the database in a file, called wallet, and which is accessible from anywhere.
You would better use that.
Sybrand Bakker
Senior Oracle DBA

Public SharePoint Online Site with External User Portal

Hello Everyone,<o:p></o:p>
My company switched over to Office 365 a few months ago, and now would like to start using our Public SharePoint site to share information (documents
pertaining to their orders/drawings/etc.) with our customers (external users).<o:p></o:p>
<o:p> </o:p>
I have seen documentation on how to share documents with individual users, but we were looking to do something a little bit different. We would ultimately
like to have a public site with generic company information (like hours, about us,directions etc.) that anyone can see.
We would also like to use SharePoint as almost an "FTP type" service where we could post documents and share them with individual
external
users. HOWEVER, instead of sharing individual documents, we were wondering if there was a way that an external user (that we have granted
access) could sign into the public SharePoint site, and then see information that ONLY pertains to them.
I have been doing some research on this, and I haven't seen that anyone else has tried this. Has anyone had any luck? Or would you have suggestions on how to make
this work? I had originally posted this question on the Office 365 SharePoint forum, and they suggested posting this question here. Any help would be appreciated. Thanks!

Hi,
did you finally manage to get what you requested here above ? Indeed, I am also struggling to set up the same (public website with individual content sharing with external authentified user).
For external user, I am quite sure that we need to go through MS ID creation (I have created some test users using https://login.live.com).
Our public website is done and (almost) working. I have then created a sub-site for the same, this one to manage permission based on authentified user
But I am stuck when trying to assign a document library with relavant permission.
Would be great to share our feedback and I have searched a lto on the web and did not find any satisfying answer to this design (If there is any... here is my doubt...)
Thanks in advance
stef

Regarding issue with externalizing users to shared services

Hello,
I was working today on externalizing users to shared services through EAS Console & it went successful. But then I saw that the users were already externalized & there was already an application group existing in shared services. So now there are two application groups both clone of each other, i.e. if I provision any user with one application, the clone of that application is also provisioned through that user.
The bigger problem is somehow the connect bet'n both SS & Essbase Services is lost & the users created in SS are not getting reflected in EAS, even after refreshing the securities on EAS... & then I tried to restart all the services again open LDAP, SS, IS, Essbase & Admin Services.... I am getting error while opening Essbase services, they are not getting started??? Please help me resolve this error...
Thanks.

Hi,
What version are you installing and what O/S is it for ?
If it is windows it is definitely an executable you are running and you are not trying execute one of the patches?
Cheers
John
http://john-goodwin.blogspot.com/

JDS Clean install problem... External user security policy?

I have a clean install of Solaris 10.
I'm using openldap to authenticate users.
When I log in with root o another local user, everything works fine.
If I log in with some ldap user, jds+gnome starts fine but the bottom edge panel (gnome-panel) doesn't start any applets, so... I don't have the Launch menu.
It doesn't responds to right click neither.
Any help?
I'm very new with JDS.
I'm using Solaris 10/08 full install with the lastest cluster patch.
Here's my /etc/release
Solaris 10 10/08 s10x_u6wos_07b X86
Copyright 2008 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 27 October 2008
showrev: Kernel version: SunOS 5.10 Generic_141415-08
Thanks in advance
Edited by: Carlos_Sola on Aug 11, 2009 8:41 AM

Ok.
I get no answer here, but working for about 5 days I've decided to use the latest solaris 10 distribution (05/09) and it works fines.
Didn't know what's happened but now it's working.

Using oc4j Jaas with external user-base

Hi,
Im evaluating the possibility of migrating my application from BEA Weblogic 7.00 to Oracle9iAS. I Use OC4j 9.0.3 for the migration proof.
My Weblogic application uses a LoginModule, written by us which access our existing user-base (stored in an rdbms).
We use proprietary Principal classes and update the Subject when a login 'transaction' is committed.
Our EJB code (which is the resource we want to protect) includes role definitions and the specific weblogic deployment-descriptors includes mapping between the roles defined in the ejb dd and the principal names we return with the login-module.
I have some questions:
1. How can i perform a similar mapping (propriatary principal names to ejb roles), do i have to declare all those principals in jazn.data?, where do I have to declare them?
2. Can i disregard the UserManager concept?
3. Do i have to implement a LoginContext on my own?
4. Do I need to explicitly call LoginCOntext.login in my login code or is it automatically done (please elaborate)?
5. Do i have to keep using RealmLoginManager along with my LoginModule?
6. Where is the preferable place for putting the login module (application’s ear file?)
7. Can i use any LoginModule which simply implements the JAAS LoginModule interface?, are there any specific oracle behavior/requirement i should know about?
8. What is the class name for the JAZN class which serves as the default LoginContext?
Note: I dont want to integrate with OID or manage the user-base using Oracles JAZN-XML, i want to simply integrate with my own existing user authentication data and use it for authorizing calls to EJBS.
Thanks in advanced,
Yuval.

sorry for delay in repsonding.
I only use my LDAP directory to manage poeple and groups but not organisational units.
When a user logs in using BPM, you view the details for a person in process administrator or view a groups members etc that information is then stored in the bpm database. That information is refreshed whenever the directory service is polled. The frequency of this is determined by the value of 'Directory Polling Interval' set under the Other tab of your engine.
I don't belive the user passwords etc are stored in the bpm database only meta information about people and groups and therefore your directory service must be available whenever a user tries to login to workspace etc.
Hope that helps,
Mike.

How do I share my server calendar with external users on google calendar?

I need to share some server based calendars with google calendar. I know how to export but how do I keep the connection live so that when I put a new event into iCal on the server it automatically updates to google calendar? I was looking for a way to publish my server calendar to a hosting server but I can not even work out how to do that.
Any help would be appreciated.

Presuming you moved the entire iTunes folder to the shared folder the other users need to start their iTunes while holding down the option/alt key and select the iTunes Library.itl file in the shared folder. Only once should be necessary. Note that any changes anybody makes will be seen by everybody, so you have to trust each other a lot.
If all you moved are media files each user will have to add those files to their iTunes library.
iTunes: How to share music between different accounts on a single computer - http://support.apple.com/kb/HT1203 - relocating iTunes' media folder to a shared area but leaving separate library files - extra tip at https://discussions.apple.com/message/17331189 Chris CA's instructions on sharing one iTunes music library between multiple user accounts - https://discussions.apple.com/message/8974074 - Multiple users using a single library file - similar post at: https://discussions.apple.com/thread/3753008 Suggestion by Turingtest for multiple users and one library - http://discussions.apple.com/message/9117622 - use smart playlists and tags to isolate groupings.

Get error while Integrating with Oracle's Enterprise User Security

Hi,
I am trying to create an Oracle Enterprise User integrating with OVD and MS Active Directory.
I am following all the steps in Integrating with Oracle's Enterprise User Security.
In the documentation section: "Configuring Oracle Virtual Directory for the Integration"
I have applied the steps successfully until:
Update and load the entries into the Local Store Adapters by performing the following steps:
I have successfully extended the Oracle Virtual Directory schema with the loadOVD.ldif
However I am getting errors in the next step: Update realmRoot.ldif to use your namespaces
The next step states the following:
Update realmRoot.ldif to use your namespaces, including the dn, dc, o, orclsubscriberfullname,
and memberurl attributes in the file. If you have a DN mapping between Active Directory and
Oracle Virtual Directory, use the DN that you see from Oracle Virtual Directory.
The realmRoot.ldif file is located in ORACLE_VIRTUAL_DIRECTORY_HOME/eus,
where ORACLE_VIRTUAL_DIRECTORY_HOME represents the location where Oracle Virtual Directory is installed.
The realmRoot.ldif file contains core entries in the directory namespace that Enterprise User Security queries. The realmRoot.ldif file also contains the dynamic group that contains the registered Enterprise User Security databases to allow secured access to sensitive Enterprise User Security related attributes, like the user's Enterprise User Security hashed password attribute.
Load your domain root information in the realmRoot.ldif file into Oracle Virtual Directory using the following command:
ldapmodify -h Oracle_Virtual_Directory_Host –p OVD_Port -D cn=admin -w Admin_Password -v -a –f realmRoot.ldif
When I run the ldapmodify command I get the following error:
add dc:
testldap
add objectclass:
top
domain
domainDNS
adding new entry DC=testldap,DC=local
ldap_add: Operations error
ldap_add: additional info: LDAP Error 1 : null
The actual realmRoot.ldif looks like this:
# Please uncomment the following one line if you are importing this
# LDIF file via OVD Manager or OVD Server's ldapmodify tool.
#version: 1
#dn: dc=com
#dc: com
#objectclass: domain
dn: DC=testldap,DC=local
changetype: add
dc: testldap
#o: subarashii
objectclass: top
objectclass: domain
objectclass: domainDNS
#objectclass: orclSubscriber
#orclsubscriberfullname: subarashii
#orclVersion: 90400
# If your domain structure has more layers than dc=subarashii,dc=com,
# for example, it's dc=us,dc=subarashii,dc=com, you will need to load
# the following ldif entry/entries too.
# Uncomment out the following, if required.
#dn: dc=us,dc=subarashii,dc=com
#orclversion: 90400
#orclsubscriberfullname: us
#objectclass: domain
#objectclass: top
#objectclass: orclSubscriber
#dc: us
# Adding EUSDBGroup entry
# Modify the memberurl attribute and replace it with your own domain name
#dn: cn=EUSDBGROUP,dc=subarashii,dc=com
#cn: EUSDBGROUP
#memberurl:ldap:///dc=subarashii,dc=com??sub?(&(objectclass=orclService)(objectclass=orclDBServer))
#objectclass:groupofuniquenames
#objectclass:groupofurls
#objectclass:top

Did you ever get your questions answered about the realmRoot.ldif file? Did you manage to configure a successful integration of OVD with EUS? I am battling with trying to get Oracle Virtual Directory integrated with Enterprise User Security, but every step I take in Chapter 7 of the OVD manual fails in some way, and the instructions are often vague. I am not sure how to modify the realmRoot.ldif file. Is there any improved documentation on this? I have logged a Service Request, but not getting any help. Any resources or documentation you know of that provides better guidance would be much appreciated. I am way behind my schedule now and this is a very frustrating exercise.
Thanks.

Contributor mode for external users (SSXA)

Hi All
On our environment we have UCM 11g and SSXA (with deployed application) and
ActiveDIrectory provider configured on WLS.
I created WCMContributor group in AD and WCMContributor role in UCM
The goal is that external users in WCMContributor group in AD has contributors rights in SSXA (lets be user “test1”)
Weblogic.xml in application has below block:
<security-role-assignment>
<role-name>WCMContributor</role-name>
<principal-name>WCMContributor</principal-name>
</security-role-assignment>
But I get error for user test1:
ERROR: Error creating the contribution markup for placeholder 'ContentPlaceholder'
REASON: User 'test1' does not have sufficient privileges.
If I create local user ‘test2’ in UCM, add him to WCMContributor role and add him to weblogic.xml - it works:
<security-role-assignment>
<role-name>WCMContributor</role-name>
<principal-name>WCMContributor</principal-name>
<principal-name>test2</principal-name>
</security-role-assignment>
But I need to work with external users
Web.xml in application has below block:
<security-constraint>
<web-resource-collection>
<web-resource-name>ContributionMode</web-resource-name>
<url-pattern>/wcm-contrib/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>WCMContributor</role-name>
</auth-constraint>
</security-constraint>
<security-constraint>
<web-resource-collection>
<web-resource-name>DesignerMode</web-resource-name>
<url-pattern>/wcm-design/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>WCMContributor</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<realm-name>OpenWCM</realm-name>
<form-login-config>
<form-login-page>/wcm/support/login/wcm-login.jsp</form-login-page>
<form-error-page>/wcm/support/login/wcm-login.jsp?tryagain=true</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>WCMContributor</role-name>
</security-role>
Please advise
Thanks

Could you please provide a bit more details:
If I create local user ‘test2’ in UCM, add him to WCMContributor role and add him to weblogic.xml - it works:a) Do you really use local users; that is, those created only in User Admin applet? b) Or is it rather that you create users in the security realm of the Weblogic server? I'd actually expect that a) without b) won't work - except for few admin tasks (running applets as standalone applications), local users should not be used in 11g or higher. If you do just b), it's an external user, just coming from a different source.
My guess is that rather than external vs. local, the issue is that mapping of roles from AD is somehow mis-configured (that is, your users don't actually get the role assigned). Pls. check everything once again - a guidance how to map roles is described here: http://docs.oracle.com/cd/E21764_01/doc.1111/e10792/c03_security.htm#BGBCIGEH

Send Alert to External Users

We have an internal SharePoint 2013 site, but our users are use Google for Email. I need alerts to send email to google distribution lists when documents change in one of our document libraries. We don't want to add people to the alerts or remove people
every time the distribution list changes. When I try to add the google distribution list email to SharePoint I get the following error:
Sorry, you are not allowed to share this with external users.
I don't really want alerts to go to any where outside of our organization since the site is not public. I tried to create a distribution list in Active Directory with the email address I want to alert, but that didn't appear to work. I would like to either
white list our domain name so that it is not considered and external user, or be able to create an object in AD so that SharePoint will accept email addresses we have designated as safe. Has anyone figure out a way ot do this?
Yes, I know office 365 would make all of this easier, but that is not a fight I am going to win today. I would just like to make our SharePoint site a little more functional.

I am already using the Site Administrator account (my admin account used to set up the site and designated as the site administrator). The account is also a domain admin and has full access to the site configuration. I haven't tried the farm account itself,
but the farm account has less rights than my admin account, so I don't think that is it...
Here is what I am doing:
Server 2012 running SharePoint 2013
Navigate to the portal home page.
Navigate to the sub site.
Select the document library.
From the ribbon select library
Select Alert Me
Select Set alert on this library
Enter the name of the security group configured with an email address (Attribute: mail) into the users field. Group I am using is the same one that has been assigned to the subsite for access so I know it is seen and that the group can be emailed by sharepoint.
I can't select the group because it is not an option, so I enter the email address that is assigned to the group...
Error I get when I click OK is:
Sorry, you are not allowed to share with external users.

Extranet Management (External Users)

Dear all,
we are working with JAM to support Project Collaboration. All of our employees are working with groups related to projects.
But we also startet to work with people from outside the company, mostly customers.
So they invite external group members to single groups.
I would like to know if someone else has experience in working with external users.
1) We have sometimes issues with their initial log on - the users get locked or the invitation cannot be opened in the browser. We know that there are specific browser settings required, which are fulfilled, but there must be something missing in some cases. Was someone facing similar issues and how did you fix that?
2) How do you handle password reset? we always have to open a case for JAM support.
thank you in advance
Regards, Julia

Hi Julia: Send me your customer support ticket number & I can look into it for you.
Rich

Creating a link for external users to view my project

Hi -
I want to share my RoboHelp project with external users that do not have access to my company's internal server if I publish there. Is there a way to create a link to my project that I can just share with other people?
Thanks!

Hello again
Are you clicking the "view result" link? If so, the CHM should simply open. However, there are a host of things that can go wrong along the way and to figure out what may be happening we need to ask all sorts of questions.
Did you click View Result after it finished? If so, what happened? An error? Nothing? What?
Where are you attempting to compile the help? When you look at the properties of your Single Source Layout recipe, where are you pointing the output folder to? What is the file name?
Are you able to open and view other CHM files? Do you know what a CHM file is?
As you can see, there are many questions to answer. And probably others I failted to think of.
Cheers... Rick
Helpful and Handy Links
RoboHelp Wish Form/Bug Reporting Form
Begin learning RoboHelp HTML 7, 8 or 9 within the day!
Adobe Certified RoboHelp HTML Training
SorcerStone Blog
RoboHelp eBooks

SharePoint Online External Users

So I was taking SharePoint online for a test drive a few days ago. While I was looking at how users are given permissions to list and libraries I realize something that might
make or break SP Online for me. The out-of-the-box SharePoint Online implementation gives you one private site collection and one public website. Let just focus on the public website in this example. Now, by default the public website is at least viewable
to everyone. But what if I created a survey on my public website and only wanted members of the site to have access to it. I know that you can "Share Site" with external users. But can you allow visitors to your site the ability to create their own account,
and in turn fill out the survey? And of course without purchasing a license for every person filling the survey.
Jeffrey T McFarland

I'm not sure about making content on your public site private, but you can make content on your private sites public. You basically turn on external users for the entire Office 365 SharePoint Online account. Then you can optionally disable it
for certain site collections. That way, you can control who has access to what. This article might be helpful in explaining how external users works in SharePoint Online:
http://office.microsoft.com/en-us/sharepoint-online-enterprise-help/share-a-site-with-external-users-HA102476183.aspx

Handling with extern user security (os)

Similar Messages

Maybe you are looking for