How to get user attributes from LDAP authenticator

I am using an LDAP authenticator and identity asserter to get user / group information.
I would like to access LDAP attributes for the user in my ADF Taskflow (Deployed into webcenter spaces).
Is there an available api to get all the user attributes through the established weblogic authenticator provider or do i have to directly connect to the LDAP server again?
Any help would be appreciated

Hi Julián,
in fact, I've never worked with BSP iViews and so I don't know if there is a direct way to achieve what you want. Maybe you should ask within BSP forum...
A possibility would be to create a proxy iView around the BSP iView (in fact: before the BSP AppIntegrator component) which reads the user names and passes this as application params to the BSP component. But this is
Beginner
Medium
Advanced
Also see http://help.sap.com/saphelp_nw04/helpdata/en/16/1e0541a407f06fe10000000a1550b0/frameset.htm
Hope it helps
Detlev

Similar Messages

How i get user info from ldap using java after authenticating user with SSO

Hi
I have one jsp/bean application as a partner application with SSO.
It works fine.
Now i need to get other attributes of user from LDAP who has logged into the application through SSO.
using SSO java APIs i only get username, userDN, subscriber info.
To get user's other attribute i have to user LDAP APIs for that i have to create on Directory Context, for the same i need userpassword.
so here i my question, how do i get user password after he has logged in thro SSO.
regards..
and thanking u in advance
samir

Valentina,
there's no way to get the password value from the directory (it's one way). Of course you can get the hashed (MD4,MD5,SHA-1) base64 encoded value (i.e. the value you see in OiD) but not the 'password'.
--Olaf

How to get user information from ldap - bpm11g

hi all,
i need know how to do get information from ldap, but using adf bean for show user data in adf form.
anyone knows about this ?
tks.

Neal wrote:
>
Hi,
I am using WLS default authentication to protect my JSP pages. Can someone tell
me if it is possible to add more fields to the default login box (in addition
to login and password boxes, I want to ask user the department name). In additional,
can WLS propogate this information (department name) along with other security
credentails to other J2EE components such as EJBs? In my EJBs I want to be able
to get the department name that user provided during login and then use that for
conditional business logic.
Any insights on this subject will be greatly appreciated.
TIA,
-NealYou can't do this with the default simple authentication. That can only handle a
username / password combination.
You should be able to do this with JAAS. You could write a LoginModule that
populates the department as a Principal or public Credential on the Subject in
addition to the normal authentication. You would have to do a callback handler
that passed through the department info to it.
This link has more on WLS's stab at JAAS:
http://e-docs.bea.com/wls/docs61/security/prog.html#1039659
Once you have associated the Subject with the access control context by invoking
a doAs() you should be able to get it back at any point with
Subject.getSubject(AccessController.getContext()) to get access to the
department info.
It will all be a bit of a chore, mind.

Getting User Attributes from an Active Directory LDAP

Hello all.
I want to extract attributes assigned to a user in the Active Directory LDAP and make them available through the getPropertyValue property in Javascript. I know that a user's System Attributes can be accessed with getPropertyValue but I have not found a way to get specific attributes from the LDAP and make them available as specific attributes in xMII. System attributes like "EmailAddress1" seem to transfer from the LDAP but others don't. Anyone have any ideas?
Thanks.
...Sparks

Sparks,
If you're using 11.5 or 12 actually they should all map into the system as session properties. You can use the following URL to verify your session properties:
http://<xMIIServer>/Lighthammer/PropertyAccessServlet?Mode=List
If you are not seeing the attributes you expect then your Attribute Query for User or Role is incorrect for your LDAP system and you need to change the LDAP configuration queries.
-Sam

How to Get Additional Info from LDAP

I have an application that is using LDAP authentication. Its working great but I would like to know if its possible to extract additional information about the user at the the point of authentication. For example when the user logs in and is authenticated it would be nice to be able to get their email address, phone, etc. at that time. Is this possible with the existing authentication scheme? I didn't see anything mentioned in the Help text.
Thanks.
David

Tom,
Have a look at the code I posted in this thread -
Re: help with htmldb_ldap.is_member function
Whilst that thread is more related to using the is_member function, the code I posted shows how you can query the attributes for a particular DN in an LDAP server.
So....I don't want to put the cart before the horse, but if it helps your case to make Apex (as it's known now rather than HTMLDB) "the winner", then I would stress that this feature is definitely achievable (but how difficult it is will depend on your exact requirements).
In short....definitely do-able....

Dynamic Attributes from LDAP Authentication

Is it possible to have attributes pulled directly from an LDAP V3 Directory and made available as HTTP Headers instead of from the Data Store? Reason I ask is that I have an existing 2 Million end users in an eDirectory that I can not make a schema change to accomodate a Data Store so i have Sun DS for Config. So I have created a new LDAP Auth Module anc have that working with eDirectory, however AM wants a profile. If I choose to "ignore" it in the Core Authentication module I can authenticate but get an Error 500 if I try to fetch attributes.
The current workaround I have is to Dynamically create profile and define all the attributes I want copied in the new profile. Problem is this information is static. it never gets updated by AM id the eDirectory is updated. The only option is to delete the user profile.
Is there a way around this? Would this entail a custom Response Provider that obtains attributes directly from the eDirectory? Would I still need a profile if I have a custom response provider?
Thanks in advance

I don't believe you have to add any attributes to a directory server's schema in order to use it as an LDAPv3 data store. This config works fine for me:
<!DOCTYPE Requests
PUBLIC "-//iPlanet//Sun Java System Access Manager 2005Q4 Admin CLI DTD//EN" "jar://com/iplanet/am/admin/cli/amAdmin.dtd"
>
<Requests>
    <ServiceConfigurationRequests serviceName="sunIdentityRepositoryService" realm="/MyRealm">
        <AddSubConfiguration serviceName="sunIdentityRepositoryService" subConfigId="LDAPv3" priority="0" subConfigName="ALDAPv3DataStore"/>
    </ServiceConfigurationRequests>
    <ServiceConfigurationRequests serviceName="sunIdentityRepositoryService" realm="/MyRealm">
        <ModifySubConfiguration serviceName="sunIdentityRepositoryService" subConfigName="ALDAPv3DataStore">
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-ldap-server"/>
                <Value>someserver.com:389</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-connection_pool_min_size"/>
                <Value>20</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-connection_pool_max_size"/>
                <Value>90</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-organization_name"/>
                <Value>dc=someserver,dc=com</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-authid"/>
                <Value>uid=someuser,ou=people,dc=someserver,dc=com</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-authpw"/>
                <Value>somepassword</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-users-search-attribute"/>
                <Value>uid</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name=""sun-idrepo-ldapv3-config-users-search-filter"/>
                <Value>(objectclass=inetorgperson)</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sunIdRepoSupportedOperations"/>
                
                <Value>user=read,service</Value>
                
                <Value>realm=read,service</Value>
                <Value>role=read</Value>
                <Value>filteredrole=read</Value>
                <Value>group=read</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-user-objectclass"/>
                <Value/>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-user-attributes"/>
                <Value>cn</Value>
                <Value>entrydn</Value>
                <Value>entryid</Value>
                <Value>somecustomuserstatusattr</Value>
                <Value>objectclass</Value>
                <Value>sn</Value>
                <Value>givenname</Value>
                <Value>uid</Value>
                <Value>userpassword</Value>
                <Value>mail</Value>
                <Value>telephonenumber</Value>
                <Value>manager</Value>
                <Value>somecustomattr</Value>
                <Value>somecustomattr2</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-people-container-name"/>
                <Value/>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-people-container-value"/>
                <Value/>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-agent-search-attribute"/>
                <Value/>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-agent-container-name"/>
                <Value/>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-agent-container-value"/>
                <Value/>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-agent-search-filter"/>
                <Value/>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-agent-objectclass"/>
                <Value/>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-agent-attributes"/>
                <Value/>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-isactive"/>
                <Value>somecustomuserstatusattr</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-psearchbase"/>
                <Value>dc=someserver,dc=com</Value>
            </AttributeValuePair>
            <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-cache-enabled"/>
                <Value>false</Value>
            </AttributeValuePair>
         <AttributeValuePair>
                <Attribute name="sun-idrepo-ldapv3-config-errorcodes"/>
                 <Value>80</Value>
           <Value>81</Value>
           <Value>91</Value>
           <Value>85</Value>
            </AttributeValuePair>
        </ModifySubConfiguration>
    </ServiceConfigurationRequests>
</Requests>
{code}
Note that sun-idrepo-ldapv3-config-user-attributes is configurable and you can add/remove attributes your are interested in. Also I don't know if eDirectory supports persistent searches so you might need to leave that value blank

How do get the role from ldap session.

i am using the follwing getting the role from the request in openldap and j_security_check:
f(request.isUserInRole("manager")){
how can i use this in the session:

You might wanna change permissions for that attribute ...
Change it from Admin to OWNER and you should be able to then get it for any user ...
HTH ..

Getting user name from sopa header

How should get user name from soap header in my udf...?i searched in sdn,but not get exact solution...

I din't get this with SRemoteUser
1. i've enabled " Do Not Use SOAP Envolope"
2.Enabled ASMA
3.Variable Transport Binding .
used the following code as well:
DynamicConfiguration conf = (DynamicConfiguration) container.getTransformationParameters().get(StreamTransformationConstants.DYNAMIC_CONFIGURATION);
DynamicConfigurationKey user = DynamicConfigurationKey.create( "http://sap.com/xi/XI/System/SOAP", "SRemoteUser");
conf.get(user);
But not value in it.. Correct me if iam wrong..

How to get a formula from the user from a text box in a webpage

Hi. I would like to know how to get the formula from the user who enters in a textbox. This formula can have any number of variables starting with a and goes on.
The complexity of the formula can go upto sin, cos, ln, exp. Also user enters the minimum and maximum values of these variables. Based on a specific algorithm (which I use) I would calculate a *set of values, say 10, for each of these variables, substitute in the formula and based on the result of this formula, I select ONE suitable value for each of the variables.
I don't know how to get this formula (which most likely to be different each time) and substitute the values *which I found earlier.
Kindly help me out in this issue.
Thanks

The textbox is the easy part. It's no different than getting a String parameter out of an HTTP request.
The hard part is parsing the String into a "formula" for evaluation. You'll have to write a parser or find one.
Google for "Java math expression parser" and see what you get.
Or write your own with JavaCC.
%

User attributes for LDAP

Hi guys,
Currently we have an error for LDAP attribute .
distinguishedName = (String) user.getTransientAttribute("ldap.distinguished_name");
user is of type IUser.
and it return null
where could i find the list of user attributes in LDAP? currently we have LDAP 8.8.1.

Don,
you might should have a look at a LDAP Browser (eg. http://www-unix.mcs.anl.gov/~gawor/ldap/ ) which helps a lot to find out how the structure of your LDAP server is and which attributes you can access.
1) Start the tool
2) click onto the "Quick Connect"
3) enter you LDAP server
4) press "Fetch DNs"
5) Uncheck "Anonymous bind"
6) Enter your user credentials
7) Browse your LDAP structure
It helped me a lot to get the correct settings for the DBMS_LDAP calls.
Patrick
My APEX Blog: http://www.inside-oracle-apex.com
The ApexLib Framework: http://apexlib.sourceforge.net
The APEX Builder Plugin: http://apexplugin.sourceforge.net/ New!

Need help in retrieving attributes from LDAP using JNDI

I am trying to retrieve attributes from LDAP using JNDI, but I'm getting the following error when I try to run my Java program.
Exception in thread "main" java.lang.NoClassDefFoundError: javax/naming/NamingException
I have all the jar files in my classpath: j2ee.jar, fscontext.jar and providerutil.jar. The interesting thing is that it gets compiled just fine but gives an error at run-time.
Could anyone tell me why I'm getting this error? Thanks!
Here's my code:
import javax.naming.*;
import javax.naming.directory.*;
import java.util.*;
import java.io.*;
class Getattr {
public static void main(String[] args) {
// Identify service provider to use
Hashtable env = new Hashtable(11);
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
// user     info
String userName = "username";
String password = "password";
// LDAP server specific information
String host = "ldaphostname";
String port = "portnumber";
String basedn = "o=organization,c=country";
String userdn = "cn=" + userName + "," + basedn;
env.put(Context.PROVIDER_URL, "ldap://" + host + ":" + port + "/" + basedn);
env.put(Context.SECURITY_PRINCIPAL, userdn);
env.put(Context.SECURITY_CREDENTIALS, password);
try {
System.setErr(new PrintStream(new FileOutputStream(new File("data.txt"))));
// Create the initial directory context
DirContext ctx = new InitialDirContext(env);
// Ask for all attributes of the object
Attributes attrs = ctx.getAttributes("cn=" + userName);
NamingEnumeration ne = attrs.getAll();
while(ne.hasMore()){
Attribute attr = (Attribute) ne.next();
if(attr.size() > 1){
for(Enumeration e = attr.getAll(); e.hasMoreElements() ;) {
System.err.println(attr.getID() + ": " + e.nextElement());
} else {
     System.err.println(attr.getID() + ": " + attr.get());
// Close the context when we're done
ctx.close();
} catch(javax.naming.NamingException ne) {
     System.err.println("Naming Exception: " + ne);
} catch(IOException ioe) {
     System.err.println("IO Exception: " + ioe);

That doesn't work either. It seems its not finding the NamingException class in any of the jar files. I don't know why? Any clues?

How to retrieve an image from LDAP

Hi!
I have a PL/SQL function which is searching for users using the DBMS_LDAP api's. I can get all the values for all the atributes, but not the attribute called "jpegphoto". I want to know how to get that attribute value for a given session, a given entry, and then how to write the htp.p(); code to display it on my portal page.
Thank you
/Marie

Hello Marie,
I think you need to ask this question in the OID forum.
We can help you with PL/SQL Portlet development; but this question is really about the LDAP PL API.
The URL for OID forum is Identity Manager
Regards
Tugdual.

Where does apex get user details from for login in

sorry for this stupid question. I have been looking up in google "where does apex get user details from for login in" and nothing answers my question. Basically I wanted to know when you log in your application how does apex know you have access to this application. How does it know you are a valid user because I am creating an application which basically checks if a user exist in one database and also checks if he/she exist in the second database.
Thanks you and sorry if this is very newbie

In the page 101 which is the login in page in the login in process. I have this in the source its not working in term of it is not letting me login in anymore even though I exist in the user table.
DECLARE
v_access_level number;
BEGIN
SELECT count(*)INTO
v_access_level
FROM USER
WHERE UPPER(USER_NAME) = UPPER(:APP_USER);
IF NVL(v_access_level, 0) !=0 THEN
wwv_flow_custom_auth_std.login(
    P_UNAME       => :P101_USERNAME,
    P_PASSWORD    => :P101_PASSWORD,
    P_SESSION_ID => v('APP_SESSION'),
    P_FLOW_PAGE   => :APP_ID||':9'
ELSE
wwv_flow_custom_auth_std.login(
    P_UNAME       => :P101_USERNAME,
    P_PASSWORD    => 'YtYuTrFRd',
    P_SESSION_ID => v('APP_SESSION'),
    P_FLOW_PAGE   => :APP_ID||':9'
END IF;
end;
please bare in mind that my USER table DOES NOT have a password because the authentication scheme as all the details of login in to any systems. I am only trying to check if the username exist in my USER table.
Thanks

How to get the values from popup window to mainwindow

HI all,
   I want to get the details from popup window.
      i have three input fields and one search button in my main window. when i click search button it should display popup window.whenever i click on selected row of the popup window table ,values should be visible in my main window input fields.(normal tables)
   now i am able to display popup window with values.How to get the values from popup window now.
   I can anybody explain me clearly.
Thanks&Regards
kranthi

Hi Kranthi,
Every webdynpro component has a global controller called the component controller which is visible to all other controllers within the component.So whenever you want to share some data in between 2 different views you can just make it a point to use the component controller's context for the same. For your requirement (within your popups view context) you will have have to copy the component controllers context to your view. You then will have to (programmatically) fill this context with your desired data in this popup view. You can then be able to read this context from whichever view you want. I hope that this would have made it clear for you. Am also giving you an [example|http://****************/Tutorials/WebDynproABAP/Modalbox/page1.htm] which you can go through which would give you a perfect understanding of all this. In this example the user has an input field in the main view. The user enters a customer number & presses on a pushbutton. The corresponding sales orders are then displayed in a popup window for the user. The user can then select any sales order & press on a button in the popup. These values would then get copied to the table in the main view.
Regards,
Uday

How to get column value from DB grid

Hi!
I wander how to get col value from GridControl?
My app consists of one rowsetinfo with two
columns CODE and DESCRIPTION and a jbutton
titled SELECT. When user clicks SELECT button
the app should show the value of the CODE col
of the selected row in GridControl.
I wander how to make this action ?
XxpsTransTimesMasterIter.setAttributeInfo( new AttributeInfo[] {
CODEXxpsTransTimesMasterIter,
DESCRIPTIONXxpsTransTimesMasterIter} );
XxpsTransTimesMasterIter.setName("XxpsTransTimes");
XxpsTransTimesMasterIter.setQueryInfo(new QueryInfo(
"XxpsTransTimesMasterIterViewUsage",
"lov.XxpsTransTimes",
"CODE, DESCRIPTION",
"XXPS_TRANS_TIMES",
null,
null
));

Hi,
You could attach an ActionListener on the JButton, and try the following code :
NavigationManager fm = NavigationManager.getNavigationManager();
DataItem dataItem = fm.getFocusedControl().getDataItem();
ImmediateAccess col_code = null;
String code = null;
if (dataItem != null && dataItem instanceof RowsetAccess) {
RowsetAccess rowset = (RowsetAccess)dataItem;
try {
col_code = (ImmediateAccess) rowset.getColumnItem("CODE");
code = col_code.getValueAsString();
} catch (DuplicateColumnException de) {
return;
} catch (ColumnNotFoundException ce) {
return;
} catch (SQLException se) {
return;
JTextField tf = new JtextField();
tf.setText(code);
I haven't tested this code.
I am curious to know, the Object type of the dataItem.If it doesnot happen to be RowsetAccess ..try.. ScrollableRowsetAccess OR ImmediateAccess.
Your code would change accordingly, depending on the instance.Refer to the product documentation for this.
Do let me know, if this works.
TIA
Sandeep

How to get user attributes from LDAP authenticator

Similar Messages

Maybe you are looking for