LDAP Authorization (not authentication)

Question

Hi everybody,
There is a Linux server with Oracle 10g and Apex 3.0.1.
And there is a Microsoft Windows server having an active directory.
The first step was to authenticate against the AD using the LDAP authentication scheme in shared components. I have entered the necassary information and the authentication is going through successfully.
My second step is now the authorization of the users, so I can restrict access pages to some users. I have searched the internet and everything I found and tried didn't work. As far as I am aware I have to do the check (e.g. whether the user is a member of the AD) in PLSQL code. I have tried to use: apex_ldap.is_member, and other functions in dbms_ldap. But I can't get any of them to work. In fact when using then in a PLSQL in SQL PLUS there is not even an error given, no messages at all, although I have set serveroutput on.
So perhaps someone could give me a hint, in what I am doing wrong, or what else I have to keep in mind in order to get it to work (perhaps I have to install something)
My actual goal is to have a single sign on. That is why I have to authorize the user to restrict some access.
Every help is highly appreciated.
Thanks,
Regards,
Denise

Answer 1

Hi John,
<br><br>
--AD stores the user/group information in a different way
<br><br>
Does that mean that I only have to change see string within the function?
<br><br>
htmldb_ldap.is_member<br>
('uname',<br>
'pword',<br>
'cn=Users,dc=aatestdom,dc=com',<br>
'AA1MS101',<br>
'389',<br>
'APEX_USER',<br>
'cn=Groups,dc=aatestdom,dc=com')<br>
<br>
Or doesn't that have anything to do with it?
<br><br>
To my code. I have tried so many things so I think it is of no use to post it here as I have figured out that it is the main thing (see function above) which is not working properly. If I take the main part out the rest of my code will work fine.
<br><br>
But could you please explain to me what the following of the dbms_ldap.compare_s function means?:<br>
attr => <b>'uniquemember'</b><br>
value => 'cn=test\, <b>greg (etsa)</b>...'<br>
And what I have to put into it (i think 'test' will be the username)?
<br><br>
Regards and thanks for your tips so far,<br>
Denise