Integration of CQ 5.5 with open LDAP

Hi Team,
I am trying to integrate cq 5.5 with open ldap. i am able to see ldap entry in jmx console .
But here the problem is the users in LDAP are not imported to CQ users.
Below are methods in com.adobe.granite.ldap tools section in jmx console.
[Ljava.lang.String;
listOrphanedUsers()
retrieves a list of users not present in the LDAP directory anymore
java.lang.Void
syncAllUsers()
updates all local user informations based on the LDAP directory
[Ljava.lang.String;
syncUser(java.lang.String user)
updates the local user information for a specific LDAP entry
[Ljava.lang.String;
syncUserList([Ljava.lang.String; userlist)
updates the local user information for a list of LDAP entries
[Ljava.lang.String;
purgeUsers()
removes the local user information for all users removed from the LDAP server
using these methods also am unable to import my ldap users to cq.
Please guide me on the same.
Thanks & Regards,
Prasad.

please refer to the master guide available for the SRM 5.0 --> which has got details of the R/3 system which you can use with SRM 5.0.
I have seen the guide and according to it , you can use R/3 3.1i - SAP ECC 6.0.
and also there should be no limitation as far as i know , if you are able to use R/3 4.6B , you should be able to use all the functionality.

Similar Messages

Oracle on HP Integrity Servers with Open VMS

Kindly let me know the availability of Oracle Database Server ( with version) on Itanium 2 based HP Integrity Servers (with Open VMS 8.2)

I get the same error as well - pl report this in the "Downloads Issues" forum (Downloads Issues
HTH
Srini

Integrating BIP with multiple LDAP servers

Hi,
my question is very simple. In Admin->Security Configuration->Security Model section i've setted Security model combobox with LDAP value. Then i've filled all LDAP information field (for example:URL). All works. But in my rpd i 've multiple LDAP servers (multiple URL) and in the form i can insert information about only one LDAP server.
Is it possible configure BIP with multiple LDAP servers?
Thanks
Giancarlo
P.S. I'm using OBIEE 10g

Hi,
my question is very simple. In Admin->Security Configuration->Security Model section i've setted Security model combobox with LDAP value. Then i've filled all LDAP information field (for example:URL). All works. But in my rpd i 've multiple LDAP servers (multiple URL) and in the form i can insert information about only one LDAP server.
Is it possible configure BIP with multiple LDAP servers?
Thanks
Giancarlo
P.S. I'm using OBIEE 10g

How to create a configuration file for open ldap.

hi,
I have installed open ldap on my machine. Now I want to configure it to NetWeaver.
For this, I started configuration through configtool utility of NetWeaver. While configuring, we need to select or upload configuration file. But now as it is open ldap we need to write our own config file.
I tried it by selecting dataSourceConfiguration_ads_deep_readonly_db.xml as a configuratio file. it shows successful test connection but the user which I have created is not appearing in UME store.
Does any body having solution for this?
I am trying to solve this problem from two days. I really appriciate one who will sove this problem

Well the configuration file you chose does not allow users created in NetWeaver to be created in the LDAP. That's why it's a "readonly" configuration. I would guess that you need a custom configuration file specifically for open ldap.
This should help get you started on a custom configuration file:
http://help.sap.com/saphelp_nw2004s/helpdata/en/b7/14d43f2dd44821e10000000a1550b0/frameset.htm
Then again, if the only problem with the .XML file you chose is that you can't write to the LDAP, give the dataSourceConfiguration_ads_writeable_db.xml configuration file a shot.

Open LDAP Authenticator Configuration on WLSSP5

I have problems in the open LDAP authenticator configuration on Weblogic Server with Service Pack 5. I have users on OpenLDAP Server that do not belong to any group. My LDIF file contents are as given below.
dn: dc=my-domain,dc=com
dc: my-domain
objectClass: dcObject
objectClass: organization
o: MYABC, Inc
dn: cn=Manager, dc=my-domain,dc=com
userPassword:: c2VjcmV0
objectClass: person
sn: Manager
cn: Manager
dn: cn=myabcsystem, dc=my-domain,dc=com
userPassword:: dmVuZGF2b3N5c3RlbQ==
objectClass: person
sn: myabcsystem
cn: myabcsystem
dn: cn=Philippe, dc=my-domain,dc=com
userPassword:: UGhpbGlwcGU=
objectClass: person
sn: Philippe
cn: Philippe
dn: cn=mlrick, dc=my-domain,dc=com
userPassword:: bWxyaWNr
objectClass: person
sn: mlrick
cn: mlrick
All these users appear in the Users tab after configuration on the console only if LDAP Server is up. While I select group tab, I get errors indicating BAD SEARCH Filter.
Inspite of me not having any groups in the ldap as indicated in ldif contents.
While I try to login t the application with this LDAP configuration, I do not get any errors. LDAP authentication is not happening with just the LDAP authenticator in place. Even if I stop the LDAP server, I do nto get any exceptions while trying ot login. The config params for the Open LADP are as given below
<weblogic.security.providers.authentication.OpenLDAPAuthenticator
AllGroupsFilter="objectclass=*"
Credential="{3DES}rGCpYmhaIorI99BjZ2u6Fg=="
GroupBaseDN="dc=my-domain,dc=com"
GroupFromNameFilter="(cn=%u)"
Name="Security:Name=MYABCAuthenticationOpenLDAPAuthenticator"
Principal="cn=myabcsystem,dc=my-domain,dc=com"
Realm="Security:Name=MYABCAuthentication"
StaticGroupDNsfromMemberDNFilter=""
StaticGroupNameAttribute="" StaticGroupObjectClass=""
StaticMemberDNAttribute="" UserBaseDN="dc=my-domain, dc=com"/>
####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <LDAP ATN LoginModule initialized>
####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <LDAP Atn Login>
####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <LDAP Atn Login username: bob>
####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <getConnection return conn:LDAPConnection { ldapVersion:2 bindDN:""}>
####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <authenticate user:bob>
####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <getDNForUser search("ou=people,ou=MYABCAuthentication,dc=myabc", "(&(uid=bob)(objectclass=person))", base DN & below)>
####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <returnConnection conn:LDAPConnection { ldapVersion:2 bindDN:""}>
CAN ANYONE HELP ME IDENTIFY WHAT IS THE ISSUE. Why is the authentication not happening?

Hi Amol,
I've seen this happen at least two times in 11.1.1.1 installs. You can safely restart and then add the service back again. Suggest you reboot after you re-add the service back or cycle all the Hyperion services.
I was not aware you could install the service with that command.
I used the below command instead:
sc create OpenLDAP-slapd start= auto binPath= "D:\Hyperion\...\slapd.exe service" DisplayName= "Hyperion Shared Services OpenLAP"
Regards,
-John

Where can I find an LDAP Editory for Open LDAP

where can I find an LDAP Editory for Open LDAP... i was using LDAP Editor but it does seem to work any more... where can I find a free download for the LDAP editor for windows...

I put in the following info in the connection section for the
lDAPbrowser but am not able to connect to the server. I get error
saying Failed to connect to ldap://165.252.58.78:389/
Host: 165.252.58.78
Port: 389
Version: 3
Base DN: what do I put here
and do I select SSL
or Anoymous bind
User Info
User DN: what do I put here
and
I am connecting to ldap through my app with the following criteria:
url=ldap://165.252.58.78:389/
ldapHost=165.252.58.78
ldapPort=389
ldapVersion=LDAPConnection.LDAP_V3
ldaploginDN=cn=Manager,dc=accuserverx,dc=com
ldappassword=password

SSO with Custom LDAP

This is the landscape :-
Web Application / Portal at Oracle Web Center Suite (WCS).
SAP BO 4.0
Authentication using Custom LDAP & SSO with Trusted Authentication.
Used OpenLDAP for authentication via RadiantOne VDS as the proxy.
Activities :
Authenticate the BO users with OpenLDAP via RadiantOne.
Synchronize the BO user group from OpenLDAP via RadiantOne.
Used openDocument.jsp to open WEBI reports.
Problems :
We configure the LDAP as Custom. Attributes mapping as default.
When BOE trying to connect the RadiantOne VDS & create user u201Cuser01u201D which already exists in the OpenLDAP server. It throws the exception :
"An internal error has occurred in the secLdap plugin.u201D
When trying to create user that does not exist in LDAP. It throws the exception :
u201CThe secLdap plugin failed to get the dn for the user notuser.u201D
Please advise us how to resolved this internal error if we want to SSO with custom LDAP !!
Thanks & regards,
Herries E

Hi,
Herrie, Roland is correct, OpenLDAP is not supported and you can run into problems if you want to escalate issues in the future. The customer must have that into account.
However, LDAP is pretty standard and usually you just need to make sure that the attribute mappings is correct.
Are users correctly created when you map an LDAP group?
Are you able to manually authenticate using LDAP? You can use the CMC page and select authentication LDAP
When you have confirmed that LDAP manual authentication is working, you can set up Trusted Authentication. Check first that the system is working just using QUERY_STRING:
https://service.sap.com/sap/support/notes/1593628
When trusted auth is confirmed to work, you can configure the parameters that Radiant users to pass the user: cookies, web session, etc.
Regards,
Julian

Integrating SAP ECC 6.0 with Microsoft Windows 2003 Active Directory

Hi Gurus,
We are planning to integrate our SAP ECC 6.0 with Microsoft Windows 2003 Active directory.
I have several questions on this:
1. Can i authenticate all the users from SAP
2. It is used only for user authentication or can it be also used for password authentication
ie user can login using his windows password?
3. While integration in SAP does a separate table or a field is created in database.
4.If a employee leaves a company than in SAP is it possible to lock & deactivate the user automatically.
Thanks in advance.
Regards,
Nihar

Hi Mastek,
You should be able to accomodate your needs with respect to integration of your AD accounts with SAP ECC ABAP. This can be done via LDAP connector configuration. The below has info on how to perfrom the configuration at a high level. You will have to integrate, and map certain user data. You may also want to do some LDAP Connector research:
[http://help.sap.com/saphelp_nw70/helpdata/en/10/1a063a15c611d4b61f0000e835363f/content.htm]
On the Java stack - you can also confugure UME to integrate/authenticate with AD:
[http://help.sap.com/saphelp_nw70ehp2/helpdata/en/12/7678123c96814bada2c8632d825443/content.htm]
Hope this helps!

Integrating Oracle Fusion Sales Cloud with Oracle Business Intelligence Cloud Service (BICS)

Ever wondered how to integrate Oracle Fusion Sales Cloud with Business Intelligence Cloud Service (BICS) ?
The blog outlines how to programmatically load Sales Cloud data into BICS, making it readily available to model and display on BICS dashboards.
http://www.ateam-oracle.com/integrating-oracle-fusion-sales-cloud-with-oracle-business-intelligence-cloud-service-bics/

I wouldn't try installing Oracle VM itself on an EC2 instance, as EC2 is essentially Xen itself. Rather, you should just be able to transport existing Oracle VM images to the EC2 cloud. I think this is what you mean, but your opening paragraph is slightly ambiguous. :)
From a VPN perspective, I'd use OpenVPN as it has clients for all major operating systems (Windows, MacOS X, Linux) that are fairly easy to package and install. Packages for OpenVPN exist in EPEL so it's easy to install on OEL5. You could also consider using a firewall instead of a VPN and only allowing connectivity from specific IP addresses/ranges. This has the benefit of not requiring client software, but it does require a fixed IP address/range on the client-side.

Config UME with ABAP+LDAP datasource

Hi all,
We are implementing an EP installation. We want to reuse the abap role assignment for the portal roles and we require a SSO solution based on SPNego.
Now we can implement each on it's own fine. The question is how we can connect the ume to use both abap and ldap datasource. I opened an OSS about it and they said it's possible, supported but I'm on my own when it comes to implementing it (or consulting offcourse).
Anyone had experience with this configuration or can provide me with the datasource schema file?
Thank in advance,
Eric

Try the following:
1.     Download the SPNegoWizard_645.zip (for 7.0) SPNegoWizard_640 (for 6.40)from SAP Note 994791 and unzip it.
2.     Adjust the user running the SAP system in Active Directory
3.     Copy the EAR and XML Files from the SPNegoWizard.ZIP file to a temporary directory on the server.
4.     Open up the Visual Administrator. Logon with the admin ID.
5.     SID ->Server -> Services -> Deploy
6.     Open the Config Tool. (Yes to using DB settings)
7.     Select UME LDAP Data
8.     Browse to the XML file you copied earlier. (dataSourceConfiguration_ads_readonly_db_with_krb5.xml)
Click the upload button.
9.     Select the Configuration file you just uploaded. Click OK on the Warning message.
10.     Setup the Connection details as specified below:
Server Name: xxxxxx
Server Port: xxxxxxx
User: SAPService<SID>@domain.com
Password: xxxxxx
Use UME unique id with unique LDAP attribute (checked): samaccountname
User Path: dc=<domain>,dc=com
Group Path: ou=xxxxxx,ou=xxxx,dc=xxxx,dc=xxxx
11.     Click the Test Connection button you should see:
Click Close when done.
12.     Click the Test Authentication button, enter NT user ID and NT password, and click the authenticate button and you should get a success message:
13.     Select cluster-data  Global Server Configuration  services  com.sap.security.core.ume.service
14.     Edit the ume.admin.addattrs.
Add the values: krb5principalname;kpnprefix;dn
Click the Set button.
15.     Click the Save button or File -> Apply.
16.     Close the Config tool and restart the JAVA engine.
17.     After the engine is restarted, continue on with the Kerberos configuration.
18.     Open up the SP Nego Wizard by going to the following URL: http://<server>:<port>/spnego
19.     Logon with the Administrator user ID.
20.     Select the check boxes for the u201CService user is created and configured in Active Directoryu201D and u201CUME configuration includes SPNego specific settingsu201D
Click the Next button
21.     Click the Add Kerberos Realm button and enter your domain name (e.g. company.com)
22.     For the Realm Configurationu2019s KDCs (Key Distribution Centers) put in <KDC host> and 88 for the port (the port should already be filled in.
23.     In the KPN (Kerberos Principal Name) section enter the Service User Name & Password.
Service User: SAPService<SID>
Password: xxxx
Leave LDAP Host - blank
24.     Click the Next button
25.     Select Prefix Based for the Resolution Mode and Click Next
26.     In Policy Configuration we want to create a new policy called spnego. Tick Basic password Fallback (when SSO do not work) and tick SSO with Logon Tickets. Click the Next button.
27.     Click Finish on the Confirmation screen.
28.     Close the browser and restart the engine.
29.     After the engine has finished restarting, continue with the final steps.
30.     Open up the Visual Administrator. Logon as the Administrator ID.
31.     SID  Server  Services  Security Provider
32.     Go into change mode by clicking the change button.
33.     On the Runtime tab  Policy Configurations tab  Select ticket from the Components list.
34.     On the Authentication tab for the ticket component  select Authentication Template: spnego
35.     Now go to the useradmin service (http://<server>:<port>/useradmin) to test the Kerberos SSO. You should get signed on without entering a user name or password.
You are done!

Integrating True DBGrid 6.0 with Forte using OLEAutomation

I'm attempting to manipulate an Appex TrueDBGrid object using Forte TOOL
code. So far I've made it through the following steps:
Used olegen to create a PEX file for the TrueDBGrid60 ocx file (tdbg6.ocx).
Imported this pex file into my workspace.
Created a display project with TrueDBGrid60, Framework, DisplayProject and
OLE as supplier plans
Added a window class
On Window, added an OLE Field with mapped type ITrueDBGridCtrl.
I attempted to interpret the following VB code for adding a column:
' Create a new Column 0
Dim C As TrueDBGrid60.Column
Set C = TDBGrid1.Columns.Add(0)
' Initialize the new Column 0
With C
.Visible = True ' Make it visible
.DataField = "LAST" ' Set the column's database field
.Caption = "Last Name" ' Set the column's caption
End With
' Make Column 0 as wide as Column 1
C.Width = TDBGrid1.Columns(1).Width
I can get this code to work in VBA, but I have difficulty when converting in
to Forte Tool code.
I added the following code to the Window class init method:
super.Init();
dbgrid = new();
dbgrid.objectReference; -- not sure what to set this to?
col : TrueDBGrid60.Column;
cols : TrueDBGrid60.Columns = new();
cols.add(0); -- this line causes run time error because object reference is
not set.
//dbgrid.columns = cols;
//dbgrid.classicAdd(cols); these lines don't work
col.visible = true;
col.caption = 'Column 1';
col.width = 1.5;
This is as far as I've gone.
Has any one used the Appex TrueDBGrid within a Forte Window?
If yes, Is there any documentation on this subject that clarify the
necessary processes?
Thanks
Brian
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

Hi Mastek,
You should be able to accomodate your needs with respect to integration of your AD accounts with SAP ECC ABAP. This can be done via LDAP connector configuration. The below has info on how to perfrom the configuration at a high level. You will have to integrate, and map certain user data. You may also want to do some LDAP Connector research:
[http://help.sap.com/saphelp_nw70/helpdata/en/10/1a063a15c611d4b61f0000e835363f/content.htm]
On the Java stack - you can also confugure UME to integrate/authenticate with AD:
[http://help.sap.com/saphelp_nw70ehp2/helpdata/en/12/7678123c96814bada2c8632d825443/content.htm]
Hope this helps!

Open Ldap problem

Hi all,
I have to use OpenLdap with weblogic.I have gown through the documents for creating the Authentication provider.
I created with one authentication provider for openLdap in the weblogic default realm and i configured it for openLdap. I am able to see the groups and users in my portal now.
I have created a new portal using the portal administration for sample portal application which comes with weblogic and set the entitlements on the portal and desktops and portlets.
When i access the portal with the Users in my openLdap i am not able to login.
I am confused, Is there any thing else i need to do in order to allow the users in the openLdap to access the portal application.
Please guide me.
Thanks,
Milind

Hi Ravin,
I am not sure which version of Portal you are using.
for version Weblogic portal 9.2 i have used these parameters for Open Ldap Provider.
Group Base DN:ou=groups, dc=example, dc=com
Group base DN values will be based on the Structure you have created in your LDAP.
User Base DN:ou=people, dc=example, dc=com
Userbase DN values will be based on the structure you have crated in your LDAP.
Host:The host where your LDAP is running
Principal: DN for LDAP Admin user say for example cn=admin,dc=somevalue,dc=com based on whatever you have used in your environment.
Credential:Admin password cridentials for LDAP
Confirm Credential:Admin password cridential for LDAP
Control Flag:SUFFICIENT, you must check control flag value and set it to sufficient for all the providers or atleast DefaultAuthenticator or SQLAuthenticator.
About weblogic users,in Weblogic 8.X there is a DefaultAnthenticator is used and i think they are picked from the database.Same will be case with Weblogic 9.2 where SQLAuthenticator is used.
All the best
Milind

CE565/CE7325 with MS LDAP Auth - Problem

Once again seems I am the first one to use a new product. I have a CE565 that I am trying to get to work with MS LDAP. Anyone had any luck doing this? Cisco TAC is having difficult time tracing down problem.
ce565#sho ldap
LDAP Configuration:
LDAP Authentication is enabled
Allow mode: disabled
Base DN: DC=domain,DC=com
Filter: <none>
Retransmits: 2
Timeout: 5 seconds
UID Attribute: uid
Group Attribute: memberOf
Administrative DN: <none>
Administrative Password: <none>
LDAP version: 3
LDAP port: 389
Server Status
192.168.99.7 primary
<none> secondary
ce565#debug authe http
Apr 24 22:44:56 ce565 http_authmod: pam_sm_authenticate:2498 ***pam_ldap: Begin
Apr 24 22:44:56 ce565 http_authmod: pam_sm_authenticate:2502 *** pam_ldap: Got username ralldread
Apr 24 22:44:56 ce565 http_authmod: _pam_ldap_get_session:1977 *** pam_ldap: Begin
Apr 24 22:44:56 ce565 http_authmod: _read_config:570 ***pam_ldap: Reading configuration
Apr 24 22:44:56 ce565 http_authmod: ldap_server_validate:1928 ***pam_ldap: === Host[0] 192.168.99.7 ===
Apr 24 22:44:56 ce565 http_authmod: ldap_server_isalive:1851 ***pam_ldap: Connecting...
Apr 24 22:44:56 ce565 http_authmod: ldap_server_isalive:1867 ***pam_ldap: Socket timeout 5
Apr 24 22:44:56 ce565 http_authmod: ldap_server_isalive:1891 ***pam_ldap: Connected to 192.168.99.7
Apr 24 22:44:56 ce565 http_authmod: ldap_server_validate:1948 ***pam_ldap: ServerAlive [1] (up=1, down=0)
Apr 24 22:44:56 ce565 http_authmod: pam_sm_authenticate:2508 *** pam_ldap: Got session
Apr 24 22:44:56 ce565 http_authmod: pam_sm_authenticate:2519 *** pam_ldap: Do authentication
Apr 24 22:44:56 ce565 http_authmod: _get_user_info:1672 *** pam_ldap: Begin user ralldread
Apr 24 22:44:56 ce565 http_authmod: _connect_anonymously:1059 *** pam_ldap: Host 192.168.99.7
Apr 24 22:44:56 ce565 http_authmod: _connect_anonymously:1063 *** pam_ldap: Open session
Apr 24 22:44:56 ce565 http_authmod: _open_session:927 *** pam_ldap: Begin
Apr 24 22:44:56 ce565 http_authmod: _connect_anonymously:1074 *** pam_ldap: Binding...
Apr 24 22:44:56 ce565 http_authmod: _get_user_info:1676 *** pam_ldap: Connected anonymously
Apr 24 22:44:56 ce565 http_authmod: _get_user_info:1699 *** pam_ldap: Filter (uid=ralldread)
Apr 24 22:44:56 ce565 http_authmod: pam_sm_authenticate:2522 *** pam_ldap: Done authentication FAILURE
Any thoughts?

I got it working. I did 2 things. One, I rebuilt the the server to make sure Active Directory was working correctly. Two, I changed the DC=domain to be dc=domain. I havent had a chance to test which one actually fixed it, but here it the config that I am using.
ce565#sho run
device mode content-engine
hostname ce565
http authentication header 407
http authentication cache timeout 1
http authentication cache max-entries 32000
http proxy incoming 8888
clock timezone EST -5 0
ip domain-name demodomain
https proxy incoming 8888
interface GigabitEthernet 1/0
ip address 10.10.220.71 255.255.255.0
exit
interface GigabitEthernet 2/0
shutdown
exit
ip default-gateway 10.10.220.1
primary-interface GigabitEthernet 1/0
no auto-register enable
ip name-server 10.10.220.80
pre-load enable
pre-load depth-level-default 2
pre-load resume
pre-load traverse-other-domains
pre-load url-list-file ftp://ftpuser:[email protected]/ce-preload.txt
transaction-logs enable
transaction-logs log-windows-domain
transaction-logs archive interval every-hour every 10
transaction-logs sanitize
transaction-logs export enable
transaction-logs export interval every-hour every 10
transaction-logs export ftp-server 10.10.220.80 ftpuser ftpuser /
transaction-logs format extended-squid
username admin password 1 bVmDmMMmZAPjY
username admin privilege 15
ldap server base "dc=demodomain"
ldap server userid-attribute cn
ldap server host 10.10.220.80 primary
ldap server administrative-dn "cn=administrator,cn=users,dc=demodomain"
ldap server administrative-passwd ****
ldap server active-directory-group enable
ldap server version 3
ldap server enable
authentication login local enable primary
authentication configuration local enable primary
url-filter http smartfilter enable
cdm ip 10.10.220.70
cms enable

Unknown attribute of the ID GTC connector (Open LDAP).

Attribute is added automatically when creating a GTC connector (for Open LDAP). Attribute with value SUCCESS is present in OIM. I cannot find anywhere what means attribute in this case.
The attribute itself is not to be deleted.
Someone please help if you know!!

Has been set up connectors Generic Technology, designed to integrate Oracle Identity Manager with the systems that support network access protocol LDAP. Connector sends the user account attributes, for example, gidNumber, uid and among them, upon the attribute ID. Apparently, this attribute contains the official record. It can not be deleted or changed. I want to understand what it means?

Discoverer against Open-LDAP

Did anyone have experience of using Discoverer against Open-Ldap? We are using discoverer in non-apps mode and dont want to create 300db user's. Our current application uses Open-Ldap and we want to make use of it for Discoverer authentication. Any ideas?
Thanks

Thanks Rod for the metalink documents.
I'd tried using eul_trigger$post_login using a similar function as indicated in the article you refer before posting my question but it didn't work - may be because i was not paying attention to upper/lower case.
But, after reading the article 372067.1 and following the exact instructions I still can't make it work. Not even with Discoverer desktop while logged in as EUL owner.
Here is the function I created:
CREATE OR REPLACE FUNCTION EUL_TRIGGER$POST_LOGIN RETURN NUMBER IS
BEGIN
insert into my_eul.test_logon values (sysdate);
commit;
RETURN 0;
END EUL_TRIGGER$POST_LOGIN;
Some values for this registered function from EUL5_FUNCTIONS metadata table are:
FUN_NAME: eul_trigger$post_login
FUN_DEVELOPE_KEY: EUL_TRIGGERPOST_LOGIN
FUN_FUNCTION_TYPE: 8
FUN_HIDDEN: 0
FUN_DATE_TYPE: 2
FUN_AVAILABLE: 1
FUN_MAXIMUM_ARGS: 0
FUN_EXT_NAME: EUL_TRIGGER$POST_LOGIN
FUN_EXT_OWNER: MY_EUL
Any thing seems missing/incorrect?
I am not 100% sure about EnableTrigger preferences. My pref.txt does not have an entry for EnableTriggers and according to Configuration Guide you should not add an entry if not present because by default triggers are enabled. But, since the trigger was not firing I also tried adding the line and applied preferences using the applypreferences.bat but it didn't work.
To make it work with Discoverer Desktop I tried updating the registry to add entry for EnableTrigger registry entry, but no successs (Finally I removed all changes to registry and preferences).
Now I am clueless why the trigger is not working. Any help would be appreciated.
Using Discoverer 10G R1 (9.0.4)
thanks
Message was edited by:
user552591

Integration of CQ 5.5 with open LDAP

Similar Messages

Maybe you are looking for