LDAP Authentication for Application APEX 3.2

Question

Dear All,
I have created an application in APEX 3.2 for that i am using the below code for authentication all my domain users
create or replace
FUNCTION              "ADS_LDAP_AUTHENTICATE"
(p_username IN VARCHAR2, p_password IN VARCHAR2) RETURN BOOLEAN AS
  c_Directory   VARCHAR2(50) ;
  c_Port        NUMBER(4);
  c_BaseDN      VARCHAR2(200);
  c_InitUser    VARCHAR2(200);
  c_InitPass    VARCHAR2(32);
  l_session     DBMS_LDAP.SESSION;
  l_success     PLS_INTEGER;
  l_attributes  DBMS_LDAP.STRING_COLLECTION;
  l_result      DBMS_LDAP.MESSAGE;
  l_userdn      VARCHAR2(2000);
  CURSOR get_authentication_dtls
  IS
  SELECT  domain_name,server_port,server_base_dn,server_principal,server_credentials
  FROM    PS_TB_SYSTEM_ADS_CONFIG_DICT;
BEGIN
  OPEN get_authentication_dtls;
  LOOP
  FETCH get_authentication_dtls INTO c_Directory,c_port,c_baseDN,c_InitUser,c_InitPass;
  EXIT WHEN get_authentication_dtls%NOTFOUND;
  --Open initial lookup session.
  l_session := DBMS_LDAP.INIT(c_Directory,c_Port);
  l_success := DBMS_LDAP.SIMPLE_BIND_S(l_session, c_InitUser,c_InitPass);
  IF l_success = DBMS_LDAP.SUCCESS THEN
    l_attributes(1) := NULL;
    l_success := NULL;
    l_success := DBMS_LDAP.SEARCH_S(ld => l_session,
                                   base => c_BaseDN,
                                   scope => dbms_ldap.scope_subtree,
                                   filter => '(|(sAMAccountName=' ||p_Username || ')(mailNickname=' || p_Username || '))',
                                   attrs => l_attributes,
                                   attronly => 0,
                                   res => l_result);
    IF l_success = DBMS_LDAP.SUCCESS THEN
      l_userdn := dbms_ldap.get_dn(l_session,dbms_ldap.first_entry(l_session,l_result));
      IF l_userdn IS NOT NULL THEN
        l_success := dbms_ldap.unbind_s(l_session);
        l_session := dbms_ldap.init(c_Directory,c_Port);
        l_success := dbms_ldap.simple_bind_s(l_session, l_userdn,NVL(p_password, 'QWERTASDFZXC'));
      END IF;
    END IF;
  else
    return FALSE;
  END IF;
  IF l_success = DBMS_LDAP.SUCCESS THEN
  CLOSE get_authentication_dtls; /* Close cursor before returning */
    RETURN TRUE;
  END IF;
  END LOOP;
  CLOSE get_authentication_dtls;
   RETURN FALSE; /* if the success has not happened till all servers processed, then return FALSE */
EXCEPTION
  WHEN OTHERS THEN
    RETURN FALSE;
END;
Now i dont want to allow all the domain user to access my application. So we planned to create a user group in active directory.
Can anyone suggest me how to allow only a set of users to access my application using LDAP.
Thanks in Advance.
Cheers,
San.

Answer 1

Use the below link for Ldap Authentication
LDAP (MS AD) Group Authentication