Make the use of LDAP Server optional

Hi,
we are running an SAP EP 6 SP20 on Windows 2003 Enterprise Server. Our UME Configuration is defined as using an LDAP Server AND the Portal Database. Our portal is mostly used as an information basis used by anonymous access (Guest), some users are able to authenticate themself against the LDAP Server to get more services.
No my question: Is it possible to configure the Portal in that way, that it uses the LDAP Server if available otherwise ignore it and therefore
an authentication of users except the users defined in the portal database is not possible.
At the moment our portal is not available if the LDAP Server is not available our target is to uncouple the strong binding to the LDAP Server.
If the LDAP Server is down or not available no authentication against this UME-Datasource is possible, if available it can be used.
I could not find any parameter or configuration example to configure this behaviour.
The first priority for our portal is being available for information purposes, the second priority is being available for additional services needing authentication.
Is there anyone there having an idea how to solve this?
Regards
Edmund

Hi EG,
As mentioned by GLM above, I share the same view.
One suggestion maybe is to create those users in the Portal UME and then disable your SSO settings in IE (means that your users have to login to Portal). Till you have your LDAP up and running, then re-config your UME seetings in Portal, pointing to your LDAP and have that as your main UME source.
Hope that helps.
Ray

Similar Messages

Using an LDAP server as a data source?

I'm evaluating data services and one of our requirements is to be able to retrieve data from an LDAP server. This isn't for authentication.
We store information about users in an LDAP directory. The workflow I'm testing retrieves a customer number from a DB2 database and then retrieves the customer information in the LDAP directory.
Is there a way to do this without having to write a bunch of code? The "import metadata" menu doesn't list LDAP as one of the data providers.
thanks!

There is no point-and-click (Import Data Source Metadata) way to use an LDAP server as a datasource. You have to use the Java Function provided on dev2dev. If you need help with it, please post here.
- Mike

WHAT IS THE USE OF COPY/MATCH OPTION IN BUISNESS CONTENT

WHAT IS THE USE OF COPY/MATCH OPTION IN BUISNESS CONTENT GIVE DETAILS

Hi,
Match (X) or Copy
If the SAP delivery version and the active version can be matched, a checkbox is displayed in this column.
With the most important object types, the active version and the SAP delivery version can be matched.
From a technical point of view, the SAP delivery version (D version) is matched with the M version. As in most cases the M version is identical to the active version (A version) in a customer system, this is referred to as a match between the D and A versions for reasons of simplification.
When a match is performed, particular properties of the object are compared in the A version and the D version. First it has to be decided whether these properties can be matched automatically or whether this has to be done manually. A match can be performed automatically for properties if you can be sure that the object is to be used in the same way as before it was transferred from Business Content. When performing matches manually you have to decide whether the characteristics of a property from the active version are to be retained, or whether the characteristics are to be transferred from the delivery version.
Example of an automatic match
Additional customer-specific attributes have been added to an InfoObject in the A version. In the D version, two additional attributes have been delivered by SAP that do not contain the customer-specific attributes. In order to be able to use the additional attributes, the delivery version has to be installed from Business Content again. At the same time, the customer-specific attributes are to be retained. In this case, you have to set the indicator (X) in the checkbox. After installing the Business Content, the additional attributes are available and the customer-specific enhancements have been retained automatically. However, if you have not checked the match field, the customer-specific enhancements in the A version are lost.
Example of a manual match
An InfoObject has a different text in the A version than in the D version. In this case the two versions have to be matched manually. When Business Content is installed, a details screen appears which asks you to specify whether the text should be transferred from the active version or from the D version.
The Match indicator is set as default in order to prevent the customer version being unintentionally overwritten. If the Content of the SAP delivery version is to be matched to the active version, you have to set the Install indicator separately.
The active version is overwritten with the delivery version if
¡        the match indicator is not set and
¡        the install indicator is set.
In other words, the delivery version is copied to the active version.
If the Install indicator is not set, the object is not copied or matched. In this case, the Match indicator has no effect.
In the context menu, two options are available:
                            a.      Merge All Below
The object in the selected hierarchy level and all objects in the lower levels of the hierarchy are selected as to Match.
                            b.      Copy All Below
The Match indicators are removed for the object in the selected hierarchy level and all objects in the lower levels of the hierarchy. If the Install indicator is also set, these objects are copied from the delivery version to the active version.
The most important properties which are taken into account when versions are matched are now listed.
When referring to InfoObjects it is important to differentiate between:
§         Characteristics
§         Time characteristics
§         Key figures and
§         Units
Valid for All InfoObjects Named Above:
Properties Matched Automatically:
Properties Matched Manually:
·        Texts
·        Description
If texts/descriptions in the delivery version do not yet exist in the active version, they are transferred.
·        Attribute only (flag)
·        Short and long text (description)
·        Time dependency of attributes
·        Transfer routine
Valid for Characteristics
Properties Matched Automatically:
Properties Matched Manually:
·        Compounding
New InfoObjects are included in compounding
·        Referenced characteristic
Reference characteristics are transferred automatically. A warning is issued.
·        Attributes / navigation attributes
New attributes are included.
If an attribute is added by the customer, the settings for this attribute are transferred (for example, F4 sequence).
·        Application components
If the entry for the active version is initial, the delivery version is used.
·        BEx display
·        Characteristic constants
·        Default member
·        Authorizations (flag and field)
·        Selection (CHASEL)
·        InfoObject is document attribute
·        Data type
·        Length
·        Output length
·        Conversion routines
·        Lower case allowed (flag)
·        Contains master data (flag)
·        Master data is authorization relevant (flag)
·        Export DataSource (Flag)
·        F4 query design
·        F4 query runtime
·        Check ODS object
·        Contains text tables (flag)
·        Texts are language-dependent (flag)
·        Short, medium and long texts exist (each with flag)
·        Default currency
·        GIS attribute
·        Hierarchies exist (flag)
Valid for Key Figures
Properties Matched Automatically:
Properties Matched Manually:
·        Type of key figure
·        Fixed unit
·        Fixed currency
·        Aggregation
·        Exception aggregation
Valid for Units
Properties Matched Automatically:
Properties Matched Manually:
·        See the table above (Valid for Characteristics), if these properties are also relevant for the units.
When referring to InfoProviders it is important to differentiate between:
¡        MultiProviders
¡        InfoCubes
¡        ODS Objects and
¡        InfoObjects
InfoObjects are discussed above (see the first table Valid for All Objects Named Above).
Valid for All InfoProviders Named Above:
Properties Matched Automatically:
Properties Matched Manually:
·        New InfoObjects
If InfoObjects in the delivery version do not yet exist in the active version, they are transferred.
·        Manual matching is not necessary.
Valid for MultiProviders
Properties Matched Automatically:
Properties Matched Manually:
·        New InfoProviders
If InfoProviders in the delivery version do not yet exist in the active version, they are transferred.
·        Manual matching is not necessary.
Valid for InfoCubes
Properties Matched Automatically:
Properties Matched Manually:
·        New dimensions
If dimensions in the delivery version do not yet exist in the active version, they are transferred.
·        Manual matching is not necessary.
With the InfoObject catalog object type, InfoObjects that are assigned to a catalog in the delivery version are transferred to the active version automatically. Manual matching is not necessary.
With the transfer rule object type, those objects that exist in the delivery version but are not yet contained in the active version (for example, additional attributes) are added automatically when the match is performed. Manual matching is not necessary.
With the process chain object type, those objects that exist in the delivery version but are not yet contained in the active version (for example, additional objects in the process chain) are added automatically when the match is performed. Manual matching is not necessary.
·        Active Version Available
In this column, the following display options are available:
¡        : The object is available in an active version. You decide whether you want to retain this version or reinstall the latest version of the object.
¡        Date symbol: The object is already available in an active version. However, the active version belongs to an older Content release. SAP recommends that you install the latest version.
¡        Gray symbol: An activated version of the object is available in the system. However, the object status is inactive. If an object version is activated, this indicates that all metadata for the object can be created successfully. The inactive object status indicates that the processed object is inconsistent and cannot currently be used for processing data. Transfer the object again from the SAP delivery version (D version). If this is not enough to change the object status from inactive to active the object has to be postprocessed. You find notes on postprocessing in the activation log.
Postprocessing: An inactive object status may also occur for an InfoObject if changes are made to the structure at field level. Postprocessing the object involves converting the relevant tables in accordance with the activation log.
¡        No indicator: The object is not available in an active version.
7. Make Settings in the Selection List and Install.
Make the required settings in the Install selection list:
Installation Type
Installation Type
Information
Simulate installation
The system runs a test to see whether any errors are likely to occur during the installation. However, not all errors that may occur can be identified during simulation: Some error messages can only be generated when a real A version (and not just a simulation) is available in the system. You should, therefore, only use the simulation function as a rough guide to help you identify and remove basic errors.
Install
The selected objects are installed immediately.
Install in background
The selected objects are installed in the background.
Install and transport
The selected objects are installed immediately and then written to a transport request.
SAP recommends you use the Install in background option because installing a large number of objects can take a long time. Modifying objects that are already active can take an especially long time to complete. Make sure that when you install objects in the background that the versions are not matched. It is always the delivery versions that are installed. These are not matched with any available customer versions.
Refer
Business Content (Versions)
http://help.sap.com/saphelp_nw04/helpdata/en/c1/ea683cc5e8ca68e10000000a114084/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/80/1a66d5e07211d2acb80000e829fbfe/frameset.htm
Thanks,
JituK

Using IPlanet LDAP Server!!!

Hi, i'm using IPlanet LDAP Server 5.0 and Weblogic 6.0 SP1.
After succeeding in connecting the LDAP server, i want to list all the users
and groups, then the following exception came up. Does anyone know the
reason?
I don't know why we should define the "Users" & "Groups" information when we
try to connect to a LDAP server. Please help me. Thanks!
Exception
weblogic.management.configuration.RealmException: RealmManager.listUsers -
with nested exception:
[weblogic.security.ldaprealm.LDAPException: could not get user list - with
nested exception:
[javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object];
remaining name 'dc=crcc,ou=People,cn=eric lu']]
     at
weblogic.management.configuration.RealmManager.listUsers(RealmManager.java:1
63)
     at
weblogic.management.console.pages._domain._usertable._jspService(_usertable.
java:346)
     at weblogic.servlet.jsp.JspBase.service(JspBase.java:27)
     at
weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java
:213)
     at
weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletCo
ntext.java:1265)
     at
weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java
:1622)
     at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
     at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
* Name: Gary Wang
* Tele: 010-65546668-8119
* Mail: [email protected]

When you use the LDAP v1 realms you have to supply four primary sets of information
1) The URL of the LDAP server
2) The principal and credentials you use to bind with ... this will usually be
the distinguished name and user password for a user that is set with administrative
rights
3) The User information that indicates (a) what node to look for users ... for
example ou=People,dc=crcc and (b) the attribute that maps to the login ID (typically,
uid)
4) The Group information that indicates (a) what node to look for groups ... for
exampel ou=Groups,dc=crcc and the attribute in each group that represents the
member dn typically either uniquemember or uniquename
Hope this helps.
"Gary" <[email protected]> wrote:
Hi, i'm using IPlanet LDAP Server 5.0 and Weblogic 6.0 SP1.
After succeeding in connecting the LDAP server, i want to list all the
users
and groups, then the following exception came up. Does anyone know the
reason?
I don't know why we should define the "Users" & "Groups" information
when we
try to connect to a LDAP server. Please help me. Thanks!
Exception
weblogic.management.configuration.RealmException: RealmManager.listUsers
with nested exception:
[weblogic.security.ldaprealm.LDAPException: could not get user list -
with
nested exception:
[javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object];
remaining name 'dc=crcc,ou=People,cn=eric lu']]
     at
weblogic.management.configuration.RealmManager.listUsers(RealmManager.java:1
63)
     at
weblogic.management.console.pages._domain._usertable._jspService(_usertable.
java:346)
     at weblogic.servlet.jsp.JspBase.service(JspBase.java:27)
     at
weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java
:213)
     at
weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletCo
ntext.java:1265)
     at
weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java
:1622)
     at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
     at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
* Name: Gary Wang
* Tele: 010-65546668-8119
* Mail: [email protected]

How do I stop my mail from send out my e-mails with the mobile me acct instead of my default provider? I have checked the "use only this server" in my provider account.

How do I stop my mail from send out my e-mails with the mobile me acct instead of my default provider? I have checked the "use only this server" in my provider account.

There is no such option/setting on an iPhone to determine this. Whether you can view the attachment has more to do with your connection, WiFi or cellular, and the size of the attachment than anything else. There will be a paperclip indicating the message includes an attachment regardless if downloaded with the message or not. When connected to the cellular network, if an attachment is below a designated size the attachment will be downloaded automatically. If over a certain size, you must select the attached file icon in the body of the message to download the attachment. The size limit varies by carrier/provider.
Tell her you're gonna leave her out of the Will if she doesn't stop .

Authenticate Users Using an LDAP Server

Hi,
I did implement 'Authenticate Users Using an LDAP Server' according the link blow below.
[http://www.oracle.com/technology/products/database/application_express/howtos/how_to_ldap_authenticate.html]
It works OK to specific DN String, example 'cn=%LDAP_USER%,OU=Menahel,OU=Cmp,DC=ho,DC=discount'.
We have a lot of domain rules, mean the users not located at the same DN.
Is it possibale to use general DN string (base root) like 'cn=%LDAP_USER%,*,*,DC=ho,DC=discount?
Thanks in advance,
Shay

Augusto, one thing to check (since it caught me out) is that your LDAP entries conform to the right format, namely
"cn=Bob" etc
When I was integrating HTMLDB LDAP against a Sun One Directory Server, it had me scratching my head for ages, until I realised that the LDAP entries had been created in the format of -
"uid=bob" rather than "cn=bob"
This might not be your problem, but it's worth checking anyway ;)

Hi..I really don't understand how can labview can be a server, can you explain and give me some examples with steps on how to make the labview as a server? Please......

nn
Solved!
Go to Solution.

erm ok i will explain...
actually..i know that labview can be a client or server. when the labview be a client, it can access other enable activeX application such as excel or word. i manage to do that a little such as to open excel file and save it at another location by using activeX functions or using the report generation toolkit. yes, i already know and understand the flow or concept of how the labview can be a client. But by using others activeX application especially excel, how can we make the labview be a server? i just need a very easy example and few steps for me to understand how can labview be a server or how excel can control the labview properties?
really desperate to increase new knowledge.....:-)
thank you very much for helping me....

Use another LDAP server (OPENLDAP)

Hi:
I really have to use another ldap server than oid... we have an openldap server (ldap v3) under linux and i want urgently to use it with portal...
Anyone here have implemented portal authentication with Openldap under linux ?
Please tell me the way you do it...
thanks

while debugging wwsso_log$, after creating this procedure in portal_sso:
SQL> CREATE OR replace PROCEDURE debug_print (str VARCHAR2) AS
2 PRAGMA autonomous_transaction;
3 BEGIN
4
5 INSERT INTO wwsso_log$ VALUES
6 (wwsso_log_pk_seq.nextval,
7 substr(str, 1, 1000),
8 sysdate,
9 dbms_session.unique_session_id
10 );
11 /
I have saw these exceptions:
PORTALcncn=orcladmin********cn=Login Server (portal_sso),dc=ipb,dc=ptldap.ccom.ipb.pt389
Unknown exception in auth_ldapORA-06520: PL/SQL: Erroao carregar biblioteca externa
ORA-06522: Unable to load DLL
exception: authenticate user
exception authenticate_user: ORA-06520: PL/SQL: Erroao carregar biblioteca externa
ORA-06522: Unable to load DLL
exception generate_redirect: ORA-06520: PL/SQL: Erroao carregar biblioteca externa
ORA-06522: Unable to load DLL
My steps where all done ok:
SQL> create or replace library auth_ext as 'D:\oracle\ora81\bin\ssoxldap.dll';
2 /
Biblioteca criada.
SQL> commit;
Confirmagco conclumda.
The DLL is there:
Directory of D:\oracle\ora81\bin
02-11-00 02:12 48.128 ssoxldap.dll
1 File(s) 48.128 bytes
55.033.856 bytes free
The LSNRCTL is working
D:\oracle\ora81\bin>lsnrctl status extproc_connection_data.sa.ipb.pt
LSNRCTL for 32-bit Windows: Version 8.1.7.3.0 - Production on 17-MAI-2002 17:00:
50
(c) Copyright 1998 Oracle Corporation. All rights reserved.
A ligar a (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC0))(CONNECT_DATA=(SID=PLSExtProc)(PRESENTATION=RO)))
STATUS do LISTENER
Pseud=nimo LISTENER
Verspo TNSLSNR for 32-bit Windows: Version 8.1.7.3.0 - Produc
tion
Data de Infcio 17-MAI-2002 14:23:13
Tempo de funcionamento 0 dias 2 hr. 37 min. 37 seg
Nfvel de Diagn=stico off
Seguranta OFF
SNMP OFF
Fich. Parametros Listener D:\oracle\ora81\network\admin\listener.ora
Fich. Diario do Listener D:\oracle\ora81\network\log\listener.log
Resumo dos Servitos...
PLSExtProc has 1 rotinas de tratamento de servito
dbon has 1 rotinas de tratamento de servico
dbon has 2 rotinas de tratamento de servico
and the LDAPSEARCH is also working:
D:\oracle\ora81\bin>ldapsearch -h ldap.ccom.ipb.pt -p 389 -D cn=orcladmin -b "cn=Login Server (portal_sso),dc=ipb,dc=pt" -v "cn=PORTAL"
ldap_open( ldap.ccom.ipb.pt, 389 )
padrpo de filtro: cn=PORTAL
a devolver: ALL
o filtro T: (cn=PORTAL)
cn=PORTAL, cn=Login Server (portal_sso),dc=ipb,dc=pt
sn=PORTAL
cn=PORTAL
userPassword=xxxxxxxxxx
objectClass=top
objectClass=person
1 correspondencias
What's WRONG ?
Thanks

I have mac os x 10.6.8. I am trying to back up my information via time machine and it's not letting me click on the "use for back up" option.

I have mac os x 10.6.8. I am trying to back up my information via time machine and it's not letting me click on the "use for back up" option.

Using Cloning as a Backup Strategy
http://www.macupdate.com/app/mac/7032/carbon-copy-cloner
http://www.bombich.com/software/updates/ccc-3.5.html
OS X Lion Install to Different Drive
How to create an OS X Lion installation disc MacFixIt
Migration Assistant Update for Mac OS X Snow Leopard
http://www.apple.com/support/lion/installrecovery/
Create an OS X Lion Install disc
http://reviews.cnet.com/8301-13727_7-20080989-263/how-to-create-an-os-x-lion-ins tallation-disc
How to clone your system:
http://macperformanceguide.com/Mac-HowToClone-backup.html
http://macperformanceguide.com/Mac-HowToClone.html
http://www.macupdate.com/app/mac/7032/carbon-copy-cloner
http://www.macperformanceguide.com/blog/2012/20120711_2-MacPro-internal-clone-ba ckup.html

Need to undo the "use for new links" option...???

Hello- Probably an easy answer to this one- I'm just not seeing it.....My first link I made on the page I clicked "use this for new links". Now I don't want to use that format for new links anymore. Do I always have to remember which link was the first one I created and change that one? Do all of the link have to have the same effect? How do I undo the "use for new links" option?
Thanks!
Holly

That's how I thought it should work- there must be something wrong then because after I click "use for new" once, the options are greyed out for any link made after that. Only the original one lets me change it, then all the others follow suit with the changes made to the one. Didn't seem right. Think I should reload iLife?

What is the use of Activate GuiXT option

What is the use of Activate GuiXT option .

GuiXT is a frontend design tool that allows you to taylor SAP standard transactions without modifying the backend ABAP code. It is a part of SAPgui and runs on the client PC, based on script files either on the PC or a network drive.
Functionality of guiXT from the SAP help;
"You can insert default values in fields
You can hide fields and groups of fields
You can move fields
You can add and change texts
You can add input help
You can add new screen elements like checkboxes, pushbuttons, graphics, or documentation
You can customize tables
You can change field labels on a system-wide basis"
Regards,
Nick

Bug when using Edit in Server Option while editting HiQ node.

I have recently started using HiQ nodes in my applications, but am running into problems. If I enter the "Edit in Server Option" and then change applications or click on another window without closing the HiQ server window I run into problems. I can no longer enter the "Edit in Server Option" and the HiQ program will not run. I can not seem to find the HiQ server window. The only way I have found around this problem is to close the current document, reopen it, delete the HiQ node and rewrite the entire code, and be very careful to always close the HiQ server window before doing anything else. Of course this is not a suitable solution. Has anyone else run into this problem? Have you figured out a fix?
Thanks,

Hi,
Base on my experience, it seems one of your node have not synced
the resource configuration, please run the cluster validation report test then post the error or warning part.
Thanks.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Using external LDAP server for WL JNDI lookups

I'm trying to find out if it is possible to re-direct JNDI calls to the WL
server to an external LDAP server. I know you can install an external LDAP
server for security purposes, but I would like to use an external LDAP
server to handle all JNDI lookups (like for JNDI EJB name location, etc.).
Is this possible?

You typically need to use our JNDI store. We strongly recommend this for
performance reasons..
You can use the JNDI To LDAP bridge which is available from the sun web
site.
Michael Girdley
BEA Systems Inc
"Jack Archer" <[email protected]> wrote in message
news:[email protected]..
I'm trying to find out if it is possible to re-direct JNDI calls to the WL
server to an external LDAP server. I know you can install an external LDAP
server for security purposes, but I would like to use an external LDAP
server to handle all JNDI lookups (like for JNDI EJB name location, etc.).
Is this possible?

What is the use of head,put options requests ?

What is the use of requests HEAD,PUT, OPTIONS etc. ?
How do we implement all these things ?
Namanc

See the HTTP specification (http://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html#sec9) for definitions of the different methods.
You can implement them by overriding the appropriate doHead(), doPut(), doOptions(), etc methods in your servlet class.

What is the use of my alerts option in ibook store?

What is the use of the option " my alerts" in ibook store?

kutielah wrote:
What is the use of the option " my alerts" in ibook store?
It allows you to get email notifications of specific authors, when they release new titles, for example. You can select specific authors, or have it based on previous downloads.

Make the use of LDAP Server optional

Similar Messages

Maybe you are looking for