LDAP oid 11g

11g rdbms comes with oid ldap? i have to setup oracle net services with that, any notes to setup with 11g would help.

OID is part of the Application Server.
It has been part of the app server for several versions (9i)
It happens to store it's info in an Oracle database. But it is still part of the App Server.
Read the App Server (specifically Identity Management) docs to determine installation.

Similar Messages

Error while configuring SSL in OID 11g - LDAP 50 Insufficient Access rights

HI,
I am trying to configure SSL in OID 11g.As per the doc http://download.oracle.com/docs/cd/E12839_01/oid.1111/e10029/ssl.htm#CBHGBGAF ,i tried creating a Self-Signed Wallte using Fusion Middleware control,But i am getting an error LDAP 50: Insufficient access rights".I logged into Fusion Middle Ware control as Weblogic user.Is anybody faced this issue?.Thanks in advance.

I am not sure how you tried, but I would recommend to do the following...
1. Add the 'user1' to "OU=Franchisees,ou=People,dc=company,dc=com"
2. Delete the 'user1' from 'OU=Internal,ou=People,dc=company,dc=com'

Can Oracle Database 11.2.0.3 authenticate with ldap (ODSEE 11g)??

Dear Experts,
I wanted to know if the Oracle DB 11.2.0.3 can authenticate with LDAP ODSEE 11g. I got to know that in order to authenticate to LDAP oracle DB needs to connect to Oracle Virtual Directory (OVD). Is this the correct statement. Any inputs will be appriciate it. thanks in advance.
Ibbi
Edited by: Ibbi2200 on Apr 29, 2013 11:30 AM

Yes i have looked into these Docs, It seems like Oracle DB does not connect directly with ODSEE 11g. It seems like you have to have OID (LDAP) not ODSEE (LDAP) for DB connection, and if you need to use ODSEEE, you have to use OVD to connect DB....Which is weird as OID is also an LDAP...and ODSEE is also an Oracle Ldap....
this is the error i get when i tried connecting DB to ODSEE.
"Error
Unable to connect to Oracle Internet Directory.
I am not using OID, we have ODSEE. Is there any pointers or workaround to connect ODSEE to DB? I am just trying to avoid OVD in the middle. Any help will be appriciated.
Thanks
ibbi

Disabling user in OID 11g

Hi,
May I know how i can disabe an user in OID 11g?.I am interested in knowing which attribute is getting updated when a user gets disabled in OID?.
I tried updating the attribute orclIsEnabled to "DISABLED" through ODSM but the update fails with an error message "LDAP Error Code : 73"
Thanks in advance
Edited by: user639534 on Dec 14, 2010 1:53 PM

Hi Ajay,
Seems that it is working fine.
oidctl connect=odb server=odisrv instance=2 host=xxxxx status
oidctl : INSTANCE_NAME is not set, defaulting to inst1
oidctl : COMPONENT_NAME is not set, defaulting to oid1
NLS_LANG not set in environment
Setting NLS_LANG to AMERICAN_AMERICA.AL32UTF8
| Process | PID | InstName | CompName | Inst# | Port | Sport |
| oidmon | 19841 | idmvpt2 | oid3 | | | |
| oidldapd disp| 19878 | idmvpt2 | oid3 | 1| 1389 | 1636 |
| oidldapd serv| 19889 | idmvpt2 | oid3 | 1| 1389 | 1636 |
| Config DN | cn=oid3,cn=osdldapd,cn=subconfigsubentry |
------------------------------------------------------------------------

URGENT : Need java code snippet to retrieve uniquemember values OID 11g API

Hi All,
We have a requirement to retrieve the uniquemember attribute values using OID 11g API. We are using labeleduri approach for dynamic groups and thus all the uniquemember values are created using dynamic groups.
When we are trying to retrieve the uniquemember values using Java code snippet, it is not returning the values. The strange thing is: The uniquemember values created using dynamic groups are not visible in ODSM OID console or JExplorer tool. However those values are visible in LDAP Browser v2.8.1 tool.
So can somebody throw light on this? Any pointers or sample code snippet to retrieve uniquemember values would be grateful.
Thanks
Mahendra.

Hi All,
We have a requirement to retrieve the uniquemember attribute values using OID 11g API. We are using labeleduri approach for dynamic groups and thus all the uniquemember values are created using dynamic groups.
When we are trying to retrieve the uniquemember values using Java code snippet, it is not returning the values. The strange thing is: The uniquemember values created using dynamic groups are not visible in ODSM OID console or JExplorer tool. However those values are visible in LDAP Browser v2.8.1 tool.
So can somebody throw light on this? Any pointers or sample code snippet to retrieve uniquemember values would be grateful.
Thanks
Mahendra.

How to disable or delete a Realm in OID 11g?

Hi,
I have created multiple realms in my OID 11g, programmatically. Now I have another requirement -
1. I want to disable a particular Realm programmatically
2. I want to delete a particular Realm programmatically.
Deleting the Realm should delete all the user, groups and attributes for the same
I am trying the same using Java API - oracle.ldap.util -- but not able to succeed.
Thanks in Advance,
Amit
Edited by: ur.amit on Apr 14, 2010 4:58 PM
Edited by: ur.amit on Apr 21, 2010 9:47 AM

Hi,
Just out of curiosity -
-> Since you want to delete the/a realm, I'm assuming its not of much use. Is there an option for you to do it through bulkdelete or using any generic LDAP browser?
-> I'm not sure if you can disable a realm, but you can restrict access to it through appropriate ACLs.
-- Pramod Aravind

URGENT : Error while OID 11g Installation

Hi,
I'm currently installing OID 11g on UNIX box using MobaXterm (alike Putty) to connect to Unix box through a windows machine.
While installing OID, I'm facing a problem related to Ports.
If I proceed with the Auto Configuration, I get the following error, though the next screen shows the installation was successful :
*java.lang.Exception: Unable to find a free port in range 7001 and 9000
at oracle.as.install.engine.modules.util.others.PortUtilities.getFreePortInRange(PortUtilities.java:83)
at oracle.as.idm.install.config.BootstrapConfigManager.init(BootstrapConfigManager.java:261)
at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:82)
at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:104)
at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:63)
at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:158)
at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:83)
at java.lang.Thread.run(Thread.java:619)*
Due to the above mentioned error, the instance for OID is NOT getting created, though the Home Directory and the Response Files are getting created successfully.
Also, after the response files are created, the installer asks to run the oracleroot.sh, which again seems to be working fine.
But just after running the .sh file, the next screen which shows up while the installation isn't the desired one, as all the components which are supposed to be installed, should be shown in a hierarchy, which in my case are not shown up.
If at all I proceed with the manual configuration, I get the error on the GUI itself which states :
Ports are not free or invalid (some 5 port numbers are mentioned in front of the error).
Kindly help me out on the above mentioned problem ASAP, as it is very URGENT.
Regards
Nikhil

Hi,
Thanks for your reply. I was able to fix the issue by adding a JAR into the library folder.
Now, I'm getting a new exception.
While creating a connection b/w ODSM and OVD, i'm getting the following error:
####<Sep 7, 2011 11:12:46 AM IST> <Warning> <org.apache.myfaces.trinidadinternal.context.RequestContextImpl> <vfodev02> <wls_ods1> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1315374166616> <BEA-000000> <Could not find partial trigger viewerId from UIHierarchyViewer[UIXFacesBeanImpl, id=hv1] with the supported partialTriggers syntax. The partial trigger was found with the deprecated syntax. Please use the supported syntax.>
####<Sep 7, 2011 11:12:46 AM IST> <Warning> <org.apache.myfaces.trinidadinternal.context.RequestContextImpl> <vfodev02> <wls_ods1> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1315374166617> <BEA-000000> <Could not find partial trigger cmdb1 from UIHierarchyViewer[UIXFacesBeanImpl, id=hv1] with the supported partialTriggers syntax. The partial trigger was found with the deprecated syntax. Please use the supported syntax.>
####<Sep 7, 2011 11:12:47 AM IST> <Error> <oracle.ldap.odsm.model.ovd.APServerProxy> <vfodev02> <wls_ods1> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1315374167663> <BEA-000000> < [ODSM-01000] Error connecting to OVD.>
####<Sep 7, 2011 11:12:47 AM IST> <Error> <oracle.ldap.odsm.model.ovd.APServerProxy> <vfodev02> <wls_ods1> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1315374167664> <BEA-000000> <; nested exception is:
     java.net.ConnectException: Connection refused
java.net.ConnectException: Connection refused
     at org.apache.axis.AxisFault.makeFault(AxisFault.java:101)
     at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:154)
     at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
     at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
     at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
     at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
     at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
     at org.apache.axis.client.Call.invoke(Call.java:2767)
     at org.apache.axis.client.Call.invoke(Call.java:2443)
     at org.apache.axis.client.Call.invoke(Call.java:2366)
     at org.apache.axis.client.Call.invoke(Call.java:1812)
     at com.octetstring.vde.admin.services.client.VDEAdminServiceSoapBindingStub.getWhoAmI(VDEAdminServiceSoapBindingStub.java:1281)
     at oracle.ldap.odsm.model.ovd.APServerProxy.authenticateAs(APServerProxy.java:710)
     at oracle.ldap.odsm.model.ovd.APServerProxy.authenticate(APServerProxy.java:286)
     at oracle.ldap.odsm.model.ovd.APServerProxy.init(APServerProxy.java:216)
     at oracle.ldap.odsm.model.ovd.APServerProxy.<init>(APServerProxy.java:198)
     at oracle.ldap.odsm.model.ovd.OVDRoot.connectOVD(OVDRoot.java:185)
     at oracle.ldap.odsm.ui.common.Connection.connect(Connection.java:120)
     at oracle.ldap.odsm.ui.common.Visit.createConnection(Visit.java:663)
     at oracle.ldap.odsm.ui.common.Login.saveChanges(Login.java:215)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.sun.el.parser.AstValue.invoke(AstValue.java:157)
     at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:283)
     at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:53)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1245)
     at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:183)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:812)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:292)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:177)
     at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
     at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:97)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:420)
     at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:420)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:247)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:157)
     at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:326)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Also, before making a connection, when I just start the web-logic server, i get the following logs :
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904118> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the jks keystore file /opt/SP/weloadm/Middleware/wlserver_10.3/server/lib/DemoIdentity.jks.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904243> <BEA-090169> <Loading trusted certificates from the jks keystore file /opt/SP/weloadm/Middleware/wlserver_10.3/server/lib/DemoTrust.jks.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904246> <BEA-090169> <Loading trusted certificates from the jks keystore file /opt/SP/weloadm/jrockit_160_17-20100312-2121-64/jre/lib/security/cacerts.>
####<Sep 7, 2011 11:08:24 AM IST> <Alert> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904298> <BEA-090152> <Demo trusted CA certificate is being used in production mode: [
Version: V3
Subject: CN=CACERT, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
Key: Sun RSA public key, 512 bits
modulus: 9550192877869244258838480703390456015046425375252278279190673063544122510925482179963329236052146047356415957587628011282484772458983977898996276815440753
public exponent: 65537
Validity: [From: Fri Mar 22 01:42:27 IST 2002,
               To: Wed Mar 23 01:42:27 IST 2022]
Issuer: CN=CACERT, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
SerialNumber: [    33f10648 fcde0deb 4199921f d64537f4]
Certificate Extensions: 1
[1]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
Key_CertSign
Algorithm: [MD5withRSA]
Signature:
0000: 9D 26 4C 29 C8 91 C3 A7 06 C3 24 6F AE B4 F8 82 .&L)......$o....
0010: 80 4D AA CB 7C 79 46 84 81 C4 66 95 F4 1E D8 C4 .M...yF...f.....
0020: E9 B7 D9 7C E2 23 33 A4 B7 21 E0 AA 54 2B 4A FF .....#3..!..T+J.
0030: CB 21 20 88 81 21 DB AC 90 54 D8 7D 79 63 23 3C .! ..!...T..yc#<
] The system is vulnerable to security attacks, since it trusts certificates signed by the demo trusted CA.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904323> <BEA-090898> <Ignoring the trusted CA certificate "CN=Entrust Root Certification Authority - G2,OU=(c) 2009 Entrust\, Inc. - for authorized use only,OU=See www.entrust.net/legal-terms,O=Entrust\, Inc.,C=US". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904324> <BEA-090898> <Ignoring the trusted CA certificate "CN=thawte Primary Root CA - G3,OU=(c) 2008 thawte\, Inc. - For authorized use only,OU=Certification Services Division,O=thawte\, Inc.,C=US". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904325> <BEA-090898> <Ignoring the trusted CA certificate "CN=T-TeleSec GlobalRoot Class 3,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904325> <BEA-090898> <Ignoring the trusted CA certificate "CN=T-TeleSec GlobalRoot Class 2,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904326> <BEA-090898> <Ignoring the trusted CA certificate "CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R3". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904327> <BEA-090898> <Ignoring the trusted CA certificate "OU=Security Communication RootCA2,O=SECOM Trust Systems CO.\,LTD.,C=JP". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904328> <BEA-090898> <Ignoring the trusted CA certificate "CN=VeriSign Universal Root Certification Authority,OU=(c) 2008 VeriSign\, Inc. - For authorized use only,OU=VeriSign Trust Network,O=VeriSign\, Inc.,C=US". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904329> <BEA-090898> <Ignoring the trusted CA certificate "CN=KEYNECTIS ROOT CA,OU=ROOT,O=KEYNECTIS,C=FR". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
####<Sep 7, 2011 11:08:24 AM IST> <Notice> <Security> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904330> <BEA-090898> <Ignoring the trusted CA certificate "CN=GeoTrust Primary Certification Authority - G3,OU=(c) 2008 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
####<Sep 7, 2011 11:08:24 AM IST> <Info> <WebLogicServer> <vfodev02> <AdminServer> <[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315373904333> <BEA-000307> <Exportable key maximum lifespan set to 500 uses.>
####<Sep 7, 2011 11:11:37 AM IST> <Info> <Server> <vfodev02> <AdminServer> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315374097984> <BEA-002635> <The server "wls_ods1" connected to this server.>
####<Sep 7, 2011 11:11:38 AM IST> <Info> <JMX> <vfodev02> <AdminServer> <[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1315374098138> <BEA-149506> <Established JMX Connectivity with wls_ods1 at the JMX Service URL of service:jmx:t3://vfodev02:15763/jndi/weblogic.management.mbeanservers.runtime.>
This somewhat seems to be a certificate issue to me.
Would be gr8 if you can let me know what can be the possible solution for this.
Regards
Nikhil

LDAP (OID) integration with java appilcation

OID issue Urgent
Currently we are using the OID-LDAP as the repository for storing username, passwds
and other attributes. All applications that need authentication will essentially
be using the OID.
In our effort to do the same we are encountering the following problems
- Creation of an identity corresponding the application
- Giving this identity certain LDAP authorizations (Which authorizations are these)
We have been successful creating LDAP entries for users and getting the initial
JNDI contexts to do the lookups.
When we are creating the user lookup from java code using oracle.ldap.util.User pakage ,
at the run time it's throwing error(no classfound oracle/net/config/ConfigException ).
why and where this is needed and how to resolve that. is that because we haven't added
the application in oid and configured authorizations for it.
Need an urgent answer to this since all applications will be using LDAP(OID).
here is code of java which tries to connect to OID.
================================================================================================
import oracle.ldap.util.*;
import oracle.ldap.util.jndi.*;
import java.io.*;
import java.util.*;
import javax.naming.*;
import java.Exception.*;
import javax.naming.directory.*;
public class hello {
public static void main(String argv[])
throws NamingException {
// Create InitialDirContext
     System.out.println("INSIDE SERVLET");
InitialDirContext ctx = ConnectionUtil.getDefaultDirCtx( "hire11.kmfl.kg","4032","cn=orcladmin", "ias123" );
// Create Subscriber object
     System.out.println("GOT CONTEXT" +ctx);
Subscriber mysub = null;
/* commented for time being -----------------------------
try {
// Creation using DN
System.out.println("CREATING subscriber");
     mysub = new Subscriber( ctx, Util.IDTYPE_DN, "o=oracle,dc=com", false
     System.out.println("GOT subscriber");
catch (UtilException e) {
          System.out.println("error");
// Create User Objects
User myuser = null, myuser1 = null;
try {
// Create User using a subscriber DN and the User DN
     System.out.println("CREATING USERl");
myuser = new User ( ctx,Util.IDTYPE_DN,           "cn=abhishek,cn=users,dc=kmfl,dc=kg",Util.IDTYPE_DN,"dc=kmfl,dc=kg", true );
     System.out.println("GOT USER");
// Create User using a subscriber object and the User
// simple name
// commented for time being -----------------------------
myuser1 = new User ( ctx, Util.IDTYPE_SIMPLE, "abhishek", mysub, true );
catch ( UtilException e ) {
System.out.println("COUDN'T GET USER"+e.toString());
// Authenticate User
try {
     System.out.println("gOING FOR AUTHENTICATION");
myuser.authenticateUser(ctx,User.CREDTYPE_PASSWD,"abhi123");
     System.out.println("AUTHENTICATION SuccessFull");
     System.out.println("AUTHENTICATION SUCCESSfULL");
     System.out.println("AUTHENTICATION sUCCESSfULL");
catch ( UtilException e ) {
System.out.println("AUTHENTICATION FAILED");
// Perform User operations
/* commented for time being -----------------------------
try {
PropertySetCollection result = null;
// Get telephonenumber of user
String[] userAttrList = {"telephonenumber"};
result = myuser1.getProperties(ctx,userAttrList);
Util.printResults(result);
// Set telephonenumber of user
// Create JNDI ModificationItem
ModificationItem[] mods = new ModificationItem[1];
mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("telephonenumber", "444-6789"));
// Perform modification using User object
myuser.setProperties(ctx, mods);
catch ( UtilException e ) {
} // End of SampleUser.java
==============================================================================================================

What about SSL or LDAPS !
Can't seem to find any java examples which would support services of type:
ldapbind -U 1,2 for java API !

LDAP (OID) integration with java appilcation( Urgent imp.)

Currently we are using the OID-LDAP as the repository for storing username, passwds
and other attributes. All applications that need authentication will essentially
be using the OID.
In our effort to do the same we are encountering the following problems
- Creation of an identity corresponding the application
- Giving this identity certain LDAP authorizations (Which authorizations are these)
We have been successful creating LDAP entries for users and getting the initial
JNDI contexts to do the lookups.
When we are creating the user lookup from java code using oracle.ldap.util.User pakage ,
at the run time it's throwing error(no classfound oracle/net/config/ConfigException ).
why and where this is needed and how to resolve that. is that because we haven't added
the application in oid and configured authorizations for it.
Need an urgent answer to this since all applications will be using LDAP(OID).
here is code of java which tries to connect to OID.
================================================================================================
import oracle.ldap.util.*;
import oracle.ldap.util.jndi.*;
import java.io.*;
import java.util.*;
import javax.naming.*;
import java.Exception.*;
import javax.naming.directory.*;
public class hello {
public static void main(String argv[])
throws NamingException {
// Create InitialDirContext
System.out.println("INSIDE SERVLET");
InitialDirContext ctx = ConnectionUtil.getDefaultDirCtx( "hire11.kmfl.kg","4032","cn=orcladmin", "ias123" );
// Create Subscriber object
System.out.println("GOT CONTEXT" +ctx);
Subscriber mysub = null;
/* commented for time being -----------------------------
try {
// Creation using DN
System.out.println("CREATING subscriber");
mysub = new Subscriber( ctx, Util.IDTYPE_DN, "o=oracle,dc=com", false
System.out.println("GOT subscriber");
catch (UtilException e) {
System.out.println("error");
// Create User Objects
User myuser = null, myuser1 = null;
try {
// Create User using a subscriber DN and the User DN
System.out.println("CREATING USERl");
myuser = new User ( ctx,Util.IDTYPE_DN, "cn=abhishek,cn=users,dc=kmfl,dc=kg",Util.IDTYPE_DN,"dc=kmfl,dc=kg", true );
System.out.println("GOT USER");
// Create User using a subscriber object and the User
// simple name
// commented for time being -----------------------------
myuser1 = new User ( ctx, Util.IDTYPE_SIMPLE, "abhishek", mysub, true );
catch ( UtilException e ) {
System.out.println("COUDN'T GET USER"+e.toString());
// Authenticate User
try {
System.out.println("gOING FOR AUTHENTICATION");
myuser.authenticateUser(ctx,User.CREDTYPE_PASSWD,"abhi123");
System.out.println("AUTHENTICATION SuccessFull");
System.out.println("AUTHENTICATION SUCCESSfULL");
System.out.println("AUTHENTICATION sUCCESSfULL");
catch ( UtilException e ) {
System.out.println("AUTHENTICATION FAILED");
// Perform User operations
/* commented for time being -----------------------------
try {
PropertySetCollection result = null;
// Get telephonenumber of user
String[] userAttrList = {"telephonenumber"};
result = myuser1.getProperties(ctx,userAttrList);
Util.printResults(result);
// Set telephonenumber of user
// Create JNDI ModificationItem
ModificationItem[] mods = new ModificationItem[1];
mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
new BasicAttribute("telephonenumber", "444-6789"));
// Perform modification using User object
myuser.setProperties(ctx, mods);
catch ( UtilException e ) {
} // End of SampleUser.java
==============================================================================================================

Hi,
Make sure you have the netcfg.jar in the same directory as that of ldapjclnt9.jar (in $ORACLE_HOME/jlib).
Regards
Radhika

NLS ISO88595 support for ldap OID C API

Please Help!
How to order from Oracle Internet Directory C API to process single byte
string (ISO-8859-5) instead of
Unicode string ( in input and output parameters values ) ?
#include <ldap.h>
char* base ="cn=��_��, cn=com"; /* in ISO */
ldap_search_s(ld , base .... ); /* not detecting base with russian word */
How to switch NLS ISO support for ldap OID C API ?
If any other approach to solve it problem?
(for example in Oracle OCI C API it solved by setting client NLS_LANG
environment variable .
In my case NLS_LANG not working)

UP plz

OC4J Instance Failed when installing the SSO against FMW OID 11g

Hi All,
We are facing an problem when installing the SSO against OID 11g. The error is OC4J Instance Failed.
In Installer log it is showing Target Invocation Exception.
Please anyone advise.
Thanks in Advance.
Vaasu.

Hi All,
We are facing an problem when installing the SSO against OID 11g. The error is OC4J Instance Failed.
In Installer log it is showing Target Invocation Exception.
Please anyone advise.
Thanks in Advance.
Vaasu.

App Server SSO LDAP on 11g

We are currently running App Server using OID & SSO version 10.1.2.3 in a high availability environment. We have a project to migrate these applications to new hardware and are considering installing Fusion Middleware App Server 11g (on Linux 64bit). Does anyone have any comments or concerns regarding SSO or OID on App Server 11g?

Take a look at this thread The Future of Oracle Single Sign-On 10g (10.1.4.3) ????
You can have OID 11g in your FMW installation but you will have to maintain a separate instance for SSO 10g patched up to 10.1.4.3.

Authenticating 10g databases against OID 11g

Hi.
Our client currently uses OID 10g to authenticate users on their 10g databases. They intend to begin an upgrade to 11g beginning with the OID upgrade. Some applications though are likely to remain on 10g databases for the foreseeable future.
Will it remain possible to authenticate existing 10g database installations against the new OID 11g setup?
If so, will this happen automatically as part of the OID 10g->11g upgrade steps?
Many thanks.
Edited by: 893987 on 31-Oct-2011 08:49

Hi Sridhar
Did you come right with the Oracle case insensitive connection? I am at a client site and they are asking if I can create an Oracle case insensitive connection and need to know how to do this.
I have come right now. I have added the following into the parameters in the universe:
NTS_COMP = LINGUISTIC
NTS_SORT = BINARY_CI
When running a query the selection does not have to be case sensitive. eg. In the database it shows as "SOFTWARE" and if I run a query looking for "software" it returns the correct data.
Thanks
Sharon

LDAP OID Distinguished Name for Groups

Hi, Can I use another "Distinguished Name for Groups" in LDAP (OID) configurazion in BIP Admin?
Watching the user guide http://download.oracle.com/docs/cd/B40078_02/doc/bi.1013/b40017/T421739T475591.htm#T434695
Distinguished Name for Groups
For example: cn=Groups, dc=us,dc=oracle,dc=com
The default value is cn=OracleDefaultDomain,cn=OracleDBSecurity,cn=Products,cn=OracleContext,dc=example,dc=com
If a try to use the dn cn=RoleNames,cn=SIM,dc=example (instead of "example" I use the real name of dc), LDAP integration doesn't function.
Do you know why?
Thank you,
R.

Hi
We're facing a similar issue in our environment in that users authenticate with their SAMAccount names, which are FirstInitial+Lastname, eg. jdoe (John Doe). LDAP requires us to use the full DN name in certain domains (not all) to login, which is rather irritating.
There are several domains. In windows we all login with the samaccount name, which follows the same principle for everyone. So DomainXYZ\jdoe .
In LDAP though, it appears that for DomainABC it needs CN=John Doe, whereas for DomainXYZ it will accept CN=jdoe etc.
Would you mind elaborating on how you managed to search LDAP for your purposes? I hope to get some insights in how to use the package dbms_ldap, because I'm rather new to APEX and with a growing userbase I'd like to move away from Apex user accounts.
Thank you
Tom

OIM - OID (11g) auto-provision thru ldap sync

Hi,
I have configured ldap sync. I have following questions
1. We have created custom attributes in OID and referred to custom object class. Now when I try to create user in OIM, user is auto-provisioned to OID. But the custom attributes in OIM are not getting provisioned to OID (unable to see the custom attributes in user object of OID, unless we refer manually the custom object class). Can any one let me know how to auto-provision the custom attribtues into OID?
2. When user is auto-provisioned to OID, it is not showing any resource profile details of OID in OIM? Is it the expected behavior? But create, udpate, delete are happening as expected.
Please let me know if any one know the solution.

Hi,
Where you able to achieve this?? i have similar requirment where, i have added 5 custom attributes in both OIM and OID, when i create the users these attributes doesnot get updated on OID....should i add these UDF in any objectclass which OIM understands??please suggest
Thanks in advance

LDAP oid 11g

Similar Messages

Maybe you are looking for