How to do LDAP/OID as datasource in OBIEE

We have a requirement to read data from LDAP in the repository and expose the imported structure to business model and inturn in presentation area. So that we can create simple OBIEE report using the LDAP data.
1. How to add LDAP as datasource/database ?
2. How to define the driver's for LDAP ?
3. Is that possible to have thrid party datasource definition, how to get it listed in the "Database" ?
Thanks
Ayaps

If you are using Oracle then you can use PL/SQL to read LDAP. See the following post which shows a way to do it:
http://oraclebizint.wordpress.com/2007/10/12/oracle-bi-ee-101332-and-oid-user-and-group-phase-2/

Similar Messages

How to create user in local datasource when UME is already switched to LDAP

HI,
Info : I have portal ( NW 700), recently i switched the datasource of portal to LDAP from local datasource.
issue: if i create user in portal it get created in LDAP, i want create few users in Local datasource.
how to create user in local datasource when UME is already switched to LDAP?
one solution is change the ume back to local datasource > create user > then switch back to LDAP.
do you know any other sol?
Regards
Shridhar Gowda

Please let me know the Datasource file name .. i.e. the .xml filename.
try to analyze this name and see whether you get a solution or post it here.
Reward points if helpful -

LDAP (OID) integration with java appilcation

OID issue Urgent
Currently we are using the OID-LDAP as the repository for storing username, passwds
and other attributes. All applications that need authentication will essentially
be using the OID.
In our effort to do the same we are encountering the following problems
- Creation of an identity corresponding the application
- Giving this identity certain LDAP authorizations (Which authorizations are these)
We have been successful creating LDAP entries for users and getting the initial
JNDI contexts to do the lookups.
When we are creating the user lookup from java code using oracle.ldap.util.User pakage ,
at the run time it's throwing error(no classfound oracle/net/config/ConfigException ).
why and where this is needed and how to resolve that. is that because we haven't added
the application in oid and configured authorizations for it.
Need an urgent answer to this since all applications will be using LDAP(OID).
here is code of java which tries to connect to OID.
================================================================================================
import oracle.ldap.util.*;
import oracle.ldap.util.jndi.*;
import java.io.*;
import java.util.*;
import javax.naming.*;
import java.Exception.*;
import javax.naming.directory.*;
public class hello {
public static void main(String argv[])
throws NamingException {
// Create InitialDirContext
     System.out.println("INSIDE SERVLET");
InitialDirContext ctx = ConnectionUtil.getDefaultDirCtx( "hire11.kmfl.kg","4032","cn=orcladmin", "ias123" );
// Create Subscriber object
     System.out.println("GOT CONTEXT" +ctx);
Subscriber mysub = null;
/* commented for time being -----------------------------
try {
// Creation using DN
System.out.println("CREATING subscriber");
     mysub = new Subscriber( ctx, Util.IDTYPE_DN, "o=oracle,dc=com", false
     System.out.println("GOT subscriber");
catch (UtilException e) {
          System.out.println("error");
// Create User Objects
User myuser = null, myuser1 = null;
try {
// Create User using a subscriber DN and the User DN
     System.out.println("CREATING USERl");
myuser = new User ( ctx,Util.IDTYPE_DN,           "cn=abhishek,cn=users,dc=kmfl,dc=kg",Util.IDTYPE_DN,"dc=kmfl,dc=kg", true );
     System.out.println("GOT USER");
// Create User using a subscriber object and the User
// simple name
// commented for time being -----------------------------
myuser1 = new User ( ctx, Util.IDTYPE_SIMPLE, "abhishek", mysub, true );
catch ( UtilException e ) {
System.out.println("COUDN'T GET USER"+e.toString());
// Authenticate User
try {
     System.out.println("gOING FOR AUTHENTICATION");
myuser.authenticateUser(ctx,User.CREDTYPE_PASSWD,"abhi123");
     System.out.println("AUTHENTICATION SuccessFull");
     System.out.println("AUTHENTICATION SUCCESSfULL");
     System.out.println("AUTHENTICATION sUCCESSfULL");
catch ( UtilException e ) {
System.out.println("AUTHENTICATION FAILED");
// Perform User operations
/* commented for time being -----------------------------
try {
PropertySetCollection result = null;
// Get telephonenumber of user
String[] userAttrList = {"telephonenumber"};
result = myuser1.getProperties(ctx,userAttrList);
Util.printResults(result);
// Set telephonenumber of user
// Create JNDI ModificationItem
ModificationItem[] mods = new ModificationItem[1];
mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("telephonenumber", "444-6789"));
// Perform modification using User object
myuser.setProperties(ctx, mods);
catch ( UtilException e ) {
} // End of SampleUser.java
==============================================================================================================

What about SSL or LDAPS !
Can't seem to find any java examples which would support services of type:
ldapbind -U 1,2 for java API !

LDAP (OID) integration with java appilcation( Urgent imp.)

Currently we are using the OID-LDAP as the repository for storing username, passwds
and other attributes. All applications that need authentication will essentially
be using the OID.
In our effort to do the same we are encountering the following problems
- Creation of an identity corresponding the application
- Giving this identity certain LDAP authorizations (Which authorizations are these)
We have been successful creating LDAP entries for users and getting the initial
JNDI contexts to do the lookups.
When we are creating the user lookup from java code using oracle.ldap.util.User pakage ,
at the run time it's throwing error(no classfound oracle/net/config/ConfigException ).
why and where this is needed and how to resolve that. is that because we haven't added
the application in oid and configured authorizations for it.
Need an urgent answer to this since all applications will be using LDAP(OID).
here is code of java which tries to connect to OID.
================================================================================================
import oracle.ldap.util.*;
import oracle.ldap.util.jndi.*;
import java.io.*;
import java.util.*;
import javax.naming.*;
import java.Exception.*;
import javax.naming.directory.*;
public class hello {
public static void main(String argv[])
throws NamingException {
// Create InitialDirContext
System.out.println("INSIDE SERVLET");
InitialDirContext ctx = ConnectionUtil.getDefaultDirCtx( "hire11.kmfl.kg","4032","cn=orcladmin", "ias123" );
// Create Subscriber object
System.out.println("GOT CONTEXT" +ctx);
Subscriber mysub = null;
/* commented for time being -----------------------------
try {
// Creation using DN
System.out.println("CREATING subscriber");
mysub = new Subscriber( ctx, Util.IDTYPE_DN, "o=oracle,dc=com", false
System.out.println("GOT subscriber");
catch (UtilException e) {
System.out.println("error");
// Create User Objects
User myuser = null, myuser1 = null;
try {
// Create User using a subscriber DN and the User DN
System.out.println("CREATING USERl");
myuser = new User ( ctx,Util.IDTYPE_DN, "cn=abhishek,cn=users,dc=kmfl,dc=kg",Util.IDTYPE_DN,"dc=kmfl,dc=kg", true );
System.out.println("GOT USER");
// Create User using a subscriber object and the User
// simple name
// commented for time being -----------------------------
myuser1 = new User ( ctx, Util.IDTYPE_SIMPLE, "abhishek", mysub, true );
catch ( UtilException e ) {
System.out.println("COUDN'T GET USER"+e.toString());
// Authenticate User
try {
System.out.println("gOING FOR AUTHENTICATION");
myuser.authenticateUser(ctx,User.CREDTYPE_PASSWD,"abhi123");
System.out.println("AUTHENTICATION SuccessFull");
System.out.println("AUTHENTICATION SUCCESSfULL");
System.out.println("AUTHENTICATION sUCCESSfULL");
catch ( UtilException e ) {
System.out.println("AUTHENTICATION FAILED");
// Perform User operations
/* commented for time being -----------------------------
try {
PropertySetCollection result = null;
// Get telephonenumber of user
String[] userAttrList = {"telephonenumber"};
result = myuser1.getProperties(ctx,userAttrList);
Util.printResults(result);
// Set telephonenumber of user
// Create JNDI ModificationItem
ModificationItem[] mods = new ModificationItem[1];
mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("telephonenumber", "444-6789"));
// Perform modification using User object
myuser.setProperties(ctx, mods);
catch ( UtilException e ) {
} // End of SampleUser.java
==============================================================================================================

Hi,
Make sure you have the netcfg.jar in the same directory as that of ldapjclnt9.jar (in $ORACLE_HOME/jlib).
Regards
Radhika

How to determine LDAP server type

Hello,
Please post some hints how to determine LDAP server type(MS AD, OpenLDAP, Novell, Sun...) from rootDSE or somehow else?
Thank you,
Vladislav

Hello Vladislav,
the root DSE should be the best place to look for such
things, I'd say. This is where an LDAP server advertises
its capabilities. However, I'm not aware of an easy, fail-
safe way of doing the distinguishing. One way, which would
need some good logic, though, would be to go by supported
OIDs, e.g. a SunONE DS 5.x will have attribute values like
this in the rootDSE:
supportedExtension=2.16.840.1.113730.3.5.3
supportedExtension=2.16.840.1.113730.3.5.5
(basically saying the DS supports it's own replication
protocol). But it is quite feasible for other servers
to support this protocol and thus advertise those OIDs
in the rootDSE. Therefore you'd probably need to check your
logic again and again for every new release of every known
directory server.
My 2 cents,
Karl.

NLS ISO88595 support for ldap OID C API

Please Help!
How to order from Oracle Internet Directory C API to process single byte
string (ISO-8859-5) instead of
Unicode string ( in input and output parameters values ) ?
#include <ldap.h>
char* base ="cn=��_��, cn=com"; /* in ISO */
ldap_search_s(ld , base .... ); /* not detecting base with russian word */
How to switch NLS ISO support for ldap OID C API ?
If any other approach to solve it problem?
(for example in Oracle OCI C API it solved by setting client NLS_LANG
environment variable .
In my case NLS_LANG not working)

UP plz

LDAP OID Distinguished Name for Groups

Hi, Can I use another "Distinguished Name for Groups" in LDAP (OID) configurazion in BIP Admin?
Watching the user guide http://download.oracle.com/docs/cd/B40078_02/doc/bi.1013/b40017/T421739T475591.htm#T434695
Distinguished Name for Groups
For example: cn=Groups, dc=us,dc=oracle,dc=com
The default value is cn=OracleDefaultDomain,cn=OracleDBSecurity,cn=Products,cn=OracleContext,dc=example,dc=com
If a try to use the dn cn=RoleNames,cn=SIM,dc=example (instead of "example" I use the real name of dc), LDAP integration doesn't function.
Do you know why?
Thank you,
R.

Hi
We're facing a similar issue in our environment in that users authenticate with their SAMAccount names, which are FirstInitial+Lastname, eg. jdoe (John Doe). LDAP requires us to use the full DN name in certain domains (not all) to login, which is rather irritating.
There are several domains. In windows we all login with the samaccount name, which follows the same principle for everyone. So DomainXYZ\jdoe .
In LDAP though, it appears that for DomainABC it needs CN=John Doe, whereas for DomainXYZ it will accept CN=jdoe etc.
Would you mind elaborating on how you managed to search LDAP for your purposes? I hope to get some insights in how to use the package dbms_ldap, because I'm rather new to APEX and with a growing userbase I'd like to move away from Apex user accounts.
Thank you
Tom

How to allow user chaning his password in OBIEE 11g weblogic custom LDAP?

Hi,
How to allow user chaning his password in OBIEE 11g weblogic custom LDAP?
I need to give user an option to do so, without the intervention of any Administrator. I also do not want to make user a Administrator else he will be able to login in weblogic and can do any damages unknowingly.....
Regards,
Rahul

Hi,
Replace the line in the instantconfig.xml
<WebMessage name=”kmsgChangePasswordLink”><!–<HTML><sawm:messageRef name=”kmsgUIChangePassword”/></HTML>–></WebMessage>
with
<WebMessage name=”kmsgChangePasswordLink”><HTML><sawm:messageRef name=”kmsgUIChangePassword”/></HTML></WebMessage>

How to perform SSO / OID in Jheadstart 1013

Hi,
Could any please help me, How to implement SSO / OID for an application that is been developed using Jheadstart10.1.3.
Regards,
Tulacenath

I have deployed a jdev adfbc/jsf application to my oas 10g 10.1.3.1 and checked the OC4J config checkbox to turn on SSO for this application, but when I run the application it does not present the sso username and password screen. I feel that if I could overcome this problem I could work out the other issues. Have you encountered anything like this? Do I have do do something with the deployment descriptor or profile special in order to get the sso login screen when I run my app?

How to cluster LDAP?

I've been searching for a couple of days on how to cluster LDAP. I've found several places that say you can do it but nothing showing how. Does anyone have a link to some documentation on this? I have a couple of OES2SP3 servers in a cluster and I have an LDAP_VS set up and it seems to work for other OES servers but not for SLES10.x servers.
Thanks,
Toney.

>
> Cluster for what purpose? High availability? Load balancing? Is this eDir's LDAP interface or are you after OpenLDAP clustering?
>
Availability of eDir LDAP.
>
> There's 2 basic methods I can think of:
>
> 1) You have two servers with your replicas on them and simply run two instances of LDAP (which is default with OES2) on them, and use a load balancer/L4 switch or something in front of them to JUST load balance the 389/636 stuff. That's what we do.
>
> 2) You can simply create an IP resource and use THAT to "float" between the two nodes (again, assuming that the servers hold edir replicas).
>
> However, you say it works for OES but not for SLES. This is the OES2 Linux forums. Are you using JUST SLES and NOT OES2 Linux?
>
> If so, you might want to ask in either the eDir-Linux forum or the SLES forum.
We chose option 2. The LDAP_VS resource that I mentioned is that floating IP resource. Sorry I wasn't clear on that.
We are using a mixed environment of OES Linux and SLES servers. We are currently using a Netware 6.5 server for eDir LDAP but when it crashes, nscd has to be restarted on all the other linux servers or it starts consuming sockets and in a couple of days the server become useless because nscd ate all the sockets. So we thought we would just put a clustered IP resource on one of our existing OES Linux clusters and that would solve the problem. When I configure other OES Linux servers to use LDAP_VS for the "LDAP for OES" settings, they work just fine, I can ssh to them and login with my lum enabled user ID. When I configure SLES servers to use LDAP_VS for LDAP lookups, I cannot ssh into them, I just get prompted repeatedly for my password. I'm really not clear on how this all works so I may be asking in the wrong forum area. I just thought that since I was trying to configure this on an OES Linux cluster that the OES Linux forum would be a logical place to start. Should I go to one of the other forum areas you mentioned?
Thanks,
Toney.

How to configure LDAP in BPEL Server

Hi,
How to configure LDAP in BPEL Server?
Also, what if we want to bounce to a YAHOO or GMAIL type email?
Basically, can we do dynamic email and phone notifications from BPEL?
Is there any documentation which tell us how to do this?
I appreciate any pointer in this regard.
Thanks in Advance.
Levey.

Levey,
You can do the dynamic email and phone notifications with the help of xpath expressions. Basically there are api to get the these attributes based on the ID on the identity server.
--Shiv

How to create generic master data datasource .

How to create generic master data datasource which utilises ALE change pointers for extraction of master data.

Hi,
For any master data lets say, Material Master, for this you need to create a view
based on your requirement by selecting one or more tables into your view and
keeping all the required fields in the view as viewfields and go to RS02 create
generic data source, select the view option as source and put the view, save and
activate, at the same time set the delta pointer as to whether Numericpointer/date/timestamp..this way you can create a generic DS then transfer the stru. and at the BW side replicate the source system..and so on..
Hope this helps..
Assign points if useful.
Need further info revert..
Cheers,
Pattan.

I wanna know how binding to LDAP V3

If it is binding to LDAP V3, in case of storing Korean Language, doesn't is really have to need to conver to UTF-8 type? If so, is is binding sample code to LDAP V2, I wanna know how binding to LDAP V3
LDAP V2 Sample Code
if ( ldap_simple_bind_s( ld, MGR_DN, MGR_PW ) != LDAP_SUCCESS )
ldap_perror( ld, "ldap_simple_bind_s" );
*ret = -1;
}

You specify the version when you CONNECT not when you BIND. So, specify 3 when you call
ld = connect(3, ...)

How to import LDAP users into OSM users?

Can you please guide how to import LDAP users into OSM users?
Regards,
Menaka

Hi Menaka,
Refer http://docs.oracle.com/cd/E35413_01/doc.722/e35414/adm_security.htm u would find the necessary soultion.
Thanks..

How Delta mechanism works for the datasource 0CRM_SALES_ACT_1 in CRM .

Hi all,
How Delta mechanism works for the datasource 0CRM_SALES_ACT_1 in CRM .
I mean timestamp, date etc? And how I can check that
Appreciate u r response.
Thanks
Pramod

Hi,
in your system, goto rsa1->tools->assign source system id....
regards
Siggi
PS: I strongly recommend to use the search functionality. This has been asked already a few times.

How to do LDAP/OID as datasource in OBIEE

Similar Messages

Maybe you are looking for