LDAP Issues with 4.1 upgrade - partial success

Question

All,
I’ve spent the last few hours going through the forum and reading the documentation on LDAP authentication issues after upgrading to 4.1.
I have completed every suggestion that has been posted and still no success.
If I run the following from SQL Workshop I get a successful authentication
declare
   l_session dbms_ldap.session;
   l_dummy   pls_integer;
begin
   dbms_ldap.use_exception := TRUE;
   l_session := dbms_ldap.init('host.domain.com', 389 );
   l_dummy   := dbms_ldap.simple_bind_s(l_session, 'domain\user', 'password');
   dbms_output.put_line('authenticated');
   l_dummy   := dbms_ldap.unbind_s(l_session);
exception when others then
   l_dummy := dbms_ldap.unbind_s(l_session);   
   raise;
end;However if I run the APEX_LDAP.AUTHENTICATE using the same inputs it will not authenticate
begin
IF APEX_LDAP.AUTHENTICATE(
  p_username =>'domain\user',
  p_password => 'password',
  p_search_base => 'dc=domain,dc=com',
  p_host => 'host.domain.com',
  p_port => 389)
THEN htp.p('authenticated');
ELSE htp.p('not authenticated');
END IF;
End;Is a successful authentication using APEX_LDAP.AUTHENTICATE a prerequisite for the application to authenticate correctly, this is the only option I know to test the configuration?
I have run the scripts to update the ACLs for user APEX_040100 and workspace schema user.
Thanks in advance,
Darin
Apex 4.1
Oracle 11.2g
Active Directory

Answer 1

If the simple_bind_s works that is sufficient proof that the network acl is okay, and so are your credentials. I'd not bother too much with apex_ldap since that integrates with OID, and if you don't have that it becomes pretty much worthless.
So i assume that your authentication scheme is the pre-built LDAP one. Could you share some more (obscured i understand) details about how you have set up the details? Especially your "Distinguished Name (DN) String", "Use Exact Distinguished Name (DN)" (Yes/No), "LDAP Username Edit Function". I'm also assuming that you want users to log in with their login-username (samaccountname)?