LDAP syncronization with Oracle DB. Related questions.

Hello everybody,
The problem / objective: I have an Oracle DB with information for clients (ie). And I want to store that information in an LDAP server and have that information syncronized with the Oracle DB.
I alredy read A LOT about this but no luck. I have tried ApacheDS and Microsoft AD for the LDAP servers. I was able to install both of them and I was able to create a trigger in my OracleDB in order to trigger actions and add/delete/update records on the LDAP server. But, I need that the trigger works both ways. So I need a trigger in ApacheDS or AD. And here is the problem. This is not supported.
While reading about this, I found information about Oracle Internet Directory. So, here is my first questions:
1- Is OID an Ldap Server? I believe it is, but, is like Apache DS or AD? (In other words, is like a service which I can connect and implement CRUD operations?)
2- OID is just supported/deplyed with Oracle 11g?
3- Can I synchronize my Oracle DB with OID? I mean, if a change is made in the Oracle DB then this change is implemented on the OID, and backwards. (like triggers, in both ways)
4- If OID is like AD, then, is this the best LDAP server to use?
And talking about Microsoft Active Directory (AD), how can I achieve this?. I read about third party tools to do this (Quest Quick Connect, Microsoft Forefront Identity Manager), but I want to find another solution like triggers. (If is possible, if not.. then is not a solution :) ).
Probably the questions are not very clear (the problem is clear), but I have a mess in my head now.. and I want some council about this.
Thanks in advance.

Hi,
Firstly I would suggest you to upgrade your database from Oracle Release 11.2.0.1.0 to Oracle Release 11.2.0.2 . This is the recommended Oracle 11g database version for SAP solutions. Many of your problem will get resolved with it.
Question 1:
So my first question would be is there any other suggestions besides adjusting the mentioned parameter above in order to ensure that no work processors going into hang state due to RFCs' occupying it as this issue always happens at the end of the month only when there are massive users accessing it.
For immediate resolution the approach you have followed is correct viz limiting number of dialog processes for RFC. Secondly you need to analyze why RFC processing takes so much time. You need check which programs are getting executed by those RFC.
Generate EarlyWatch report for more detailed view
Question 2:
My second question is what went wrong with the libttsh11.so file. How could it be 0 size in PRD when no signs of changes had happen to the PRD system. Is this a proven Oracle Bug or something else since I have never encountered anything like this before.
The libttsh11.so library cannot be found in the related directory.
Cause
The file system is mounted using CIO option, but per Note 257338.1 Direct I/O (DIO) and Concurrent I/O (CIO) on AIX 5L, an ORACLE_HOME on a filesystem mounted with "cio" option is not supported.
Such a configuration will cause, installation, relinking and other unexpected problems.
Solution
Disable the CIO option on the filesystem.
References
NOTE:257338.1 - Direct I/O (DIO) and Concurrent I/O (CIO) on AIX 5L
Hope this helps.
Regards,
Deepak Kori

Similar Messages

LDAP Intigration with Oracle BPM 10.3.0.0.0

Hi,
I want to know about integration with LDAP connectivity with Oracle BPM suite.
We don’t have any knowledge between the integration on Oracle BPM suit & LDAP.
Please do the needful on the same as soon as possible.
With Best Regards,
Ratna Prasad.

I configured LDAP directory, and I was able to see the participants. However the group information is not retrieved properly. Here is the error
(cont) ] Main: Invalid characters found for attribute [OU name].
[     (cont)     ] Main: Detail:Attribute [OU name] cannot be assigned the following value: [Dev/Test].
[     (cont)     ] Main: The invalid character is: [].
[     (cont)     ] Main:
[     (cont)     ] Main: fuego.directory.exception.InvalidAttributeValueException: Invalid characters found for attribute [OU name].
[     (cont)     ] Main: Detail:Attribute [OU name] cannot be assigned the following value: [Dev/Test].
[     (cont)     ] Main: The invalid character is: [].
[     (cont)     ] Main:
Any ideas on what can be the possible solution?
Thanks

Other LDAP servers with Oracle ?

Hi,
We plan to integrate further ldap in our enterprise and
specially with oracle databases (configuration, security
issues). Oracle provide his own LDAP server know as OID, but can
we use an other ldap server to store Oracle specific ldap datas ?
We have to consider ldap for windows (Active Directory), for
mail purpose (postfix) and for database logon and configuration.
We don't want to have Active Directory plus OID plus Netscape
LDAP plus Openldap ... We want to use ldap protocols and data
that fits in an integrated directory for entreprise use.
So can we deploy another directory server behind Oracle ldap
clients functionalities ?
Thank in advance for your help ,-)

Hello aymeric,
The wonderful thing about LDAP is that it is a protocol standard
governed by the IETF. So migrating from one server to another
should be relatively easy. Since version 3.0.1, OID has a Meta
Directory or as it is sometimes refered to as the Directory
Integration server built into it which allows you to create
custom connectors to synchronize OID with just about any type of
data repository.
Can you give me a specific example of what you want to migrate?
Obviously I cannot vouch for the capabilities of other LDAP
servers regarding this subject.
Thanks,
Jay

LDAP with oracle as backend

Hi,
Can we have ldap server with oracle as back end.
If it is possible please provide details.
I have oracle database for users. Now i want to create Ldap client which will read for oracle database.
But first I need ldap server with oracle as back end.
How to create server for above using OpenLdap source?
OR
Is OID, solution for this?
I have oracle 11gr2
Do I need more softwares.?
Thanks,
Iliyas nadaf
Edited by: 956274 on Aug 31, 2012 3:24 AM
Edited by: 956274 on Aug 31, 2012 3:30 AM

If you are not going to use an Oracle Identity Management product for the job, then this is perhaps not the correct forum, as this is the forum for Oracle Identity Management, but whether you use OVD or not it is a "virtual directory" that is the functional component you need. There are open source products out there with virtual directory capability, but if you need any more information on these then you need to discuss in their own forums.

Very Urgent (Unique user Id scenario with Oracle LDAP and SSO)

Unique user Id scenario.
Our oracle LDAP repository is setup for customers to login from different companies. We have a requirement to integrate Oracle LDAP users with Oracle 9iAS portal 3.0.9 Single Sign On. I have two userid with same name on the LDAP from different company. For example userid jsmith from company A and jsmith from company B. Both userid do not exist on Portal Login Server. However, both userids will be created automatically in Login server when LDAP and Portal synchronize user list.
1. How oracle portal will handle such scenario when portal requires unique userid?
2. Can I customize portal login screen? For example when they login they can provide userid, passwd and domain name. Where domain name could be company name.
Let me know if you need more information. Feel free to send direct e-mail also.

Unique user Id scenario.
Our oracle LDAP repository is setup for customers to login from different companies. We have a requirement to integrate Oracle LDAP users with Oracle 9iAS portal 3.0.9 Single Sign On. I have two userid with same name on the LDAP from different company. For example userid jsmith from company A and jsmith from company B. Both userid do not exist on Portal Login Server. However, both userids will be created automatically in Login server when LDAP and Portal synchronize user list.
1. How oracle portal will handle such scenario when portal requires unique userid?
2. Can I customize portal login screen? For example when they login they can provide userid, passwd and domain name. Where domain name could be company name.
Let me know if you need more information. Feel free to send direct e-mail also. The scenario you describe is one addressed by Oracle9iAS Portal Release 2's capability to support multi-company hosting. In that scenario, each company has a separate branch of users represented in the directory information tree, as you describe. In this case, both users may have cn=jsmith, but the rest of the DN provides the distinguishing domain, e.g., cn=jsmith,dc=oracle,dc=com and cn=jsmith,dc=microsoft,dc=com.
Version 3.0.9 also supported multi-company hosting, but it was only an internally used feature and one leveraged by a few early adopters. http://portal.oracle.com is one of our hosted examples of multi-company hosting on 3.0.9.
In 'hosting' mode, the login screen displays a third entry field, as you describe, allowing the company name to be specified.
For a supportable configuration, you should use Oracle9iAS Release 2 if you want to employ hosting mode. However, if you need some solution in 3.0.9, you can probably achieve something acceptable by making a slight modification to ssoxoid.pkb. I'm not entirely sure about this, because I'd have to dig into the code (which should be unwrapped, for customization such as this), but you could have users enter their names like 'jsmith@oracle' or 'jsmith@microsoft'. Then, within the ssoxldap.pkb authenticate_user function, you'd need to have the company name added to the base search base before doing the search. Then, once authenticated, the SSO server and Portal would create shadow entries which are unique 'jsmith@oracle', 'jsmith@microsoft'.
Like I say, I'm not sure if the structure of the ssoxldap.pkb file will entirely support this, but that's your best bet until you get Release 2. There will be a 'Multi-Company Hosting Cookbook' provided with Release 2 that will provide the necessary supplemental information to activate hosting mode. You should understand that setting up hosting mode takes a bit more administration than the default single company mode.
If your portal has already been running a while without the @company names then there will also be the issue of getting all the accounts already created moved over to the @company names.

[OBPM 10gR3]How to configer a hybrid directory with Oracle LDAP Server

Hey, guys,
Does anyone have experience on configering a hybrid directory with Oracle LDAP Server? How to config the mapping conf file for Oracle LDAP in the directory of \OraBPMwlHome\conf?
Here is my conf file. But I got some LDAP mapping errors. It's really weird OBPM doesn't support Oracle's self LDAP, at least it does not provide the conf file.
-----------errors------------
Exception [javax.naming.OperationNotSupportedException: [LDAP: error code 53 - Function Not Implemented]; remaining name '']. Reason: [LDAP: error code 53 - Function Not Implemented] fuego.directory.DirectoryRuntimeException: Exception [javax.naming.OperationNotSupportedException: [LDAP: error code 53 - Function Not Implemented]; remaining name '']. at fuego.directory.DirectoryRuntimeException.wrapException(DirectoryRuntimeException.java:85) at fuego.directory.hybrid.ldap.JNDIQueryExecutor.select(JNDIQueryExecutor.java:203) at fuego.directory.hybrid.ldap.JNDIQueryExecutor.selectAllFromView(JNDIQueryExecutor.java:84) at fuego.directory.hybrid.ldap.JNDIQueryExecutor.selectAllFromView(JNDIQueryExecutor.java:64) at fuego.directory.hybrid.ldap.Repository.selectAllFromView(Repository.java:54) at fuego.directory.hybrid.ldap.LDAPPollingEventGenerator.buildCurrentProxies(LDAPPollingEventGenerator.java:98) at fuego.directory.provider.notifiers.BasePollingEventGenerator.generateEvents(BasePollingEventGenerator.java:41) at fuego.directory.hybrid.HybridMultipleEventGenerator.generateEvents(HybridMultipleEventGenerator.java:43) at fuego.directory.provider.notifiers.DirectoryNotifier.notifyChanges(DirectoryNotifier.java:403) at fuego.server.service.DirectoryListener.updateEngineFromDirectoryImpl(DirectoryListener.java:309) at fuego.server.service.DirectoryListener$DirectoryPollingItem.execute(DirectoryListener.java:351) at fuego.server.execution.DefaultEngineExecution$AtomicExecutionTA.runTransaction(DefaultEngineExecution.java:304) at fuego.transaction.TransactionAction.startBaseTransaction(TransactionAction.java:470) at fuego.transaction.TransactionAction.startTransaction(TransactionAction.java:551) at fuego.transaction.TransactionAction.start(TransactionAction.java:212) at fuego.server.execution.DefaultEngineExecution.executeImmediate(DefaultEngineExecution.java:123) at fuego.server.execution.DefaultEngineExecution.executeAutomaticWork(DefaultEngineExecution.java:62) at fuego.server.execution.EngineExecution.executeAutomaticWork(EngineExecution.java:42) at fuego.ejbengine.ejb.EngineStartupBean.executeItem(EngineStartupBean.java:192) at fuego.ejbengine.ejb.EngineStartupBean.updateFromDirectory(EngineStartupBean.java:172) at fuego.ejbengine.ejb.engine_startup_bpmengine_wodkyx_ELOImpl.updateFromDirectory(engine_startup_bpmengine_wodkyx_ELOImpl.java:365) at fuego.ejbengine.servlet.SchedulerServlet$DirectoryPollingTask.runImpl(SchedulerServlet.java:269) at fuego.ejbengine.servlet.SchedulerServlet$ScheduledTask.run(SchedulerServlet.java:208) at java.util.TimerThread.mainLoop(Timer.java:512) at java.util.TimerThread.run(Timer.java:462) Caused by: javax.naming.OperationNotSupportedException: [LDAP: error code 53 - Function Not Implemented]; remaining name '' at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3078) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2758) at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1812) at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1735) at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:368) at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:338) at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:321) at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:248) at fuego.jndi.FaultTolerantDirContext.search(FaultTolerantDirContext.java:867) at fuego.directory.hybrid.ldap.JNDIQueryExecutor.select(JNDIQueryExecutor.java:190) ... 23 more
-----------mapping conf file for Oracle LDAP---------
<?xml version="1.0" encoding="UTF-8"?>
<?fuego version="6.1 ALPHA" application="albpmenterprise"?>

<config>
     <object id="person">
          <object-filter>
               <![CDATA[
                    (objectclass=inetOrgPerson)
               ]]>
          </object-filter>
          <relative-dn>
               
          </relative-dn>
          <attribute id="id" value="uid"/>
          <attribute id="lastName" value="sn"/>
          <attribute id="firstName" value="givenname"/>
          <attribute id="accountLock" value="orclIsEnabled">
               <attribute-comparator operation="EQUALS" compareTo="ENABLED"/>
               <filter>
                    <![CDATA[
                         ($accountLock=ENABLED)
                    ]]>
               </filter>
          </attribute>
          <attribute id="facsimileTelephoneNumber" value="facsimileTelephoneNumber"/>
          <attribute id="displayName" value="displayName"/>
          <attribute id="mail" value="mail"/>
          <attribute id="telephoneNumber" value="telephoneNumber"/>
          <attribute id="employeeId" value="employeeNumber"/>
          <attribute id="thumbnailPhoto" value="jpegPhoto"/>
          <attribute id="manager" value="manager"/>
          <attribute id="modifyTimeStamp" value="modifytimestamp"/>
     </object>
     <object id="group">
          <object-filter>
               <![CDATA[
                    (objectclass=orclGroup)
               ]]>
          </object-filter>
          <relative-dn>
               
</relative-dn>
          <attribute id="id" value="dn"/>
          <attribute id="modifyTimeStamp" value="modifytimestamp"/>
          <attribute id="displayName" value="displayName"/>
          <attribute id="name" value="cn"/>
          <attribute id="description" value="description"/>
          <attribute id="assignedParticipants" value="uniquemember"/>
          
          <attribute id="ou" value="uniquemember"/>
     </object>
     <object id="ou">
          <object-filter>
               <![CDATA[
                    (objectclass=domain)
               ]]>
          </object-filter>
          <relative-dn>
               
</relative-dn>
          <attribute id="name" value="orclsubscriberfullname"/>
          <attribute id="description" value="description"/>
     </object>
</config>
Edited by: Lemonice on 2009-3-30 上午2:08
Edited by: Lemonice on 2009-3-30 下午7:01
Edited by: Lemonice on 2009-3-30 下午8:43

Hi,
in my case, I am trying to configure the OBPM directory using ALUI and its native LDAP service.
Now, I found that the first name and the last name in BPM are retrieved from the ALUI display name : provided we enter the display name in the format %first name% + %last name% we get them into BPM. But the display name is not always in this format...
In addition, it's the portal telephone number information which is retrieved into BPM Telephone and Fax numbers.
And, the email adress remains blank
I have installed the latest patch for OBPM (Version: 10.3.1.0.0 Build: #97172)
Would you have any documentation about creating a Profile Web Service in ALUI and specifying which LDAP attributes to map to which ALUI properties in the Profile Source ?
Thanks !
Edited by: vVince on May 6, 2009 3:46 PM

How to use LDAP with Oracle forms 10g on Oracle application server

Hi,
I need some help on this. I have developed oracle forms 10g on application server 9iAS. The client want to use the existing LDAP authentication to the software we wrote. I do not know how I could configure to use the existing LDAP authentication . If anyone know how would I use the existing LDAP on different server to use when they logon to our menu in 10g to validate the user. Do I need to add any varibales in formweb.cfg or any other method. Please help.
Thanks
Luksh

I am not quite sure if this works out of the box. According to an Oracle FAQ:
4.2 Can I use LDAP to authenticate Forms Services?
Not directly. However, Oracle Login Server is able to authenticate against a LDAP directory and thus a Forms application can take advantage of this in a SSO environment. But you cannot use access control information stored in a LDAP directory with Forms.

ISE integration with Oracle LDAP

Does ISE integrate with Oracle OID LDAP (Version 11G)? If yes, which version?

ISE supports any LDAPv3 compliant servers

Question about Communication with Oracle 7

Hi,
Generally we use Oracle Snapshots for Communication, but since Oracle 9.2.0.5 do not work with Oracle 7.1.5.2.4. we are thinking about do use Oracle Interconnect for this Link.
Now I have the following two Questions about Communication with Oracle 7:
1. Is an Adapter for Oracle 7.1.5.2.4 available?
2. From your experience, does it make sense to install Oracle Interconnect for implementation of only one read only Link with 3 Tables if an OAS for BI is available?
Thanks,
Hannes

1. The Oracle database adapter is for Oracle 8i and up. I checked the code needed in the database and doubt that will work in Oracle 7.
1. The other option Advanced Queuing also needs 8i and up.
2. For me it doesnt make sense that you want to connect to Oracle 7. Oracle 7 is unsupported and should not have to be developed against. Also the license costs for Oracle Interconnect ~17K without any discount is a bit steep for read only links to three tables. Having the OAS means you wont have to pay another additional ~17K for the apps server.

I need to syncronize MS SQL Server 2000 with Oracle DB

Hello
I need to syncronize MS SQL Server 2000 with Oracle Database. I have created both DB connections succesfully.
1. Oracle DB: Oracle (JDBC)
2. SQL Server JDBC-ODBC (bridge)
When i create a partner link and select a DB Adapter i try to query SQL Server but it never brings the tables back to me.
I´ve tried to configure connection 2 (MSSQL) using thrid party but i really don´t know how.
Driver Class??
Library?
Library Name??
Location??
Class Path?
Source Path??
Doc Path??
URL??
help is appreciated. Thank you.
F.

Here is my setup:
Driver Class: com.microsoft.jdbc.sqlserver.SQLServerDriver
Library: SQLSERVER
ClassPath: Depends on where your jar file is.
URL: jdbc:microsoft:sqlserver://your ip address or DNS name goes here.
The above is how my database connection is defined.
When I create a partner link and it gets to the screen where it imports tables it takes a while for the "Querying Database Ojects..." to finish. When it does I have not tables. I then select <all schemas> AGAIN and this time I get the tables.
If you get succeed when you do a test on the connection then I assume the connection is setup right. Perhaps the problem is like mine above and you have to select <all schemas> a second time.

Unifiers for drag & relate with oracle forms application

Hi All,
Is it possible to do drag & relate functionality in the portal with oracle forms application?? Is there any unifiers already available for drag & relate functionality with oracle forms application ?? If yes, then can anyone share the information.
Regards
Moses

Hi Moses, you can use D&R with querys in Oracle using query iviews.
You can find a lot of information in:https://www.sdn.sap.com/sdn/ep.sdn?page=unification_welcome.htm
Regards.

Apex 3.1.2 with Oracle 11G - /i/ alias question

I just recently installed Oracle 11G with Apex 3.0 and then upgraded Apex to 3.1.2. I am able to login and do most of the regular tasks. I built an application using custom flash components. When I used Apex with Oracle 10G, I can copy the SWF files to the directory mapped to /i/ alias and it worked fine.
Same is not working with 11G. First of all I am not sure to what path the /i/ in 11G is mapped to. Any help is greatly appreciated. I used Embedded Pl/Sql gateway.
Thanks
Karthik
Edited by: karthikm on Dec 30, 2008 4:40 PM
Edited by: karthikm on Dec 30, 2008 4:40 PM

Dingfei,
You need to make sure that you have access to the "i" folder. Make sure that the alias defined in your dads.conf is properly configured.
Regards,
Dan
http://danielmcghan.us
http://sourceforge.net/projects/tapigen

Mapping LDAP Role in Building Your First Process with Oracle BPM 11g

I'm working on "Building Your First Process with Oracle BPM 11g" I'm at the end of step where assigns user for the requester. The problem is in identity lookup, "Realm" is empty for Remote_WLServer.
Servers are up and running. Demo user community has been loaded - I can see the list of users and groups in the administration server under myrealm. We haven't done much since SOA suite 11g installation. I'm probably the first one who uses this. I wonder we have a missing set up? Can you me what's missing? Appreciate your help in advance.

I get this error message when I clicked gear icon.
"Server exception is : Connection refused from server"
Here is the result of testing Remove_WLServer connection. Does this cause the issue?
Testing JSR-160 Runtime ... failed.
Cannot establish connection.
Testing JSR-160 DomainRuntime ... skipped.
Testing JSR-88 ... skipped.
Testing JSR-88-LOCAL ... skipped.
Testing JNDI ... skipped.
Testing JSR-160 Edit ... skipped.
Testing HTTP ... success.
Testing Server MBeans Model ... skipped.
Testing HTTP Authentication ... success.
2 of 9 tests successful.
I have installed JDeveloper 9i, 10g, and 11g in my laptop. SOA is installed on linux.

Solaris Cluster 3.2 with Oracle 11i R2 oracle agent installation question

Hi all!
I'm new in clustering and trying to build a two-node cluster in my lab. At the moment i've successfully installed cluster software and oracle on the nodes and now i'm trying to integrate cluster with oracle DB. Unfortunately, i couldn't find the documentation about this task. Can anyone give me an URL, where to look? By the way: i tried to find something here: http://docs.sun.com/app/docs/doc/820-7360/fxjbo?a=view but found info only about Oracle RAC and nothing else, but i'm trying to build cluster without RAC - just only with solaris cluster.

Hi,
You might run into trouble with 11gR2 right now. You need to wait until the nxt patch for th eHA Oracle agent is avialble, or use 11gR1 at the moment.
Sorry for the bad news.
Detlef

Question about SAP installation with Oracle 10g

I have successfully installed Oracle 10g on Windows server 2008 R2 64bit. I can connect to the database using mysql or through command prompt and run SQL commands.
I started installing the SAP EHP1 for SAP NetWeaver 7.0 ("51038620_13 BS 7 SR1 Installation Master Windows Server on x64 64bit") The installation goes very smooth. I choose the SAPSID and the DBSID sid, but then it gives an error stating to install oracle and continue or stop the installation & install Oracle. I have tried on continuing the installation since Oracle is already installed but I get the same message again and again.
Does it have to do with ORACLE 10g Sid. My Oracle SID is set to "ORCL" should it be the same as DBSID (during SAP Installation). Or the Oracle needs to be installed after SAP installation gets to the point for Oracle Installation. Please assist what needs to be changed. I can reinstall Oracle if needed. Any tips or comments would be nice.

> Does it have to do with ORACLE 10g Sid. My Oracle SID is set to "ORCL" should it be the same as DBSID (during SAP Installation). Or the Oracle needs to be installed after SAP installation gets to the point for Oracle Installation.
You can't "change". You installed the Oracle software using "setup.exe" - which is wrong. You also created an example database - which is also not correct.
The Oracle software is installed, according to the installation guide, as
- start "sapserver.cmd" on the Oracle DVD (the SAP media)
- install the software according to the installation guide
- install the latest patchset
- install the latest PSU patch
--> and then start sapinst.
Markus

LDAP syncronization with Oracle DB. Related questions.

Similar Messages

Maybe you are looking for