Open Ldap problem

Hi all,
I have to use OpenLdap with weblogic.I have gown through the documents for creating the Authentication provider.
I created with one authentication provider for openLdap in the weblogic default realm and i configured it for openLdap. I am able to see the groups and users in my portal now.
I have created a new portal using the portal administration for sample portal application which comes with weblogic and set the entitlements on the portal and desktops and portlets.
When i access the portal with the Users in my openLdap i am not able to login.
I am confused, Is there any thing else i need to do in order to allow the users in the openLdap to access the portal application.
Please guide me.
Thanks,
Milind

Hi Ravin,
I am not sure which version of Portal you are using.
for version Weblogic portal 9.2 i have used these parameters for Open Ldap Provider.
Group Base DN:ou=groups, dc=example, dc=com
Group base DN values will be based on the Structure you have created in your LDAP.
User Base DN:ou=people, dc=example, dc=com
Userbase DN values will be based on the structure you have crated in your LDAP.
Host:The host where your LDAP is running
Principal: DN for LDAP Admin user say for example cn=admin,dc=somevalue,dc=com based on whatever you have used in your environment.
Credential:Admin password cridentials for LDAP
Confirm Credential:Admin password cridential for LDAP
Control Flag:SUFFICIENT, you must check control flag value and set it to sufficient for all the providers or atleast DefaultAuthenticator or SQLAuthenticator.
About weblogic users,in Weblogic 8.X there is a DefaultAnthenticator is used and i think they are picked from the database.Same will be case with Weblogic 9.2 where SQLAuthenticator is used.
All the best
Milind

Similar Messages

  • How to create a configuration file for open ldap.

    hi,
    I have installed open ldap on my machine. Now I want to configure it to NetWeaver.
    For this, I started configuration through configtool utility of NetWeaver. While configuring, we need to select or upload configuration file. But now as it is open ldap we need to write our own config file.
    I tried it by selecting dataSourceConfiguration_ads_deep_readonly_db.xml  as a configuratio file. it shows successful test connection but the user which  I have created is not appearing in UME store.
    Does any body having solution for this?
    I am trying to solve this problem from two days. I really appriciate one who will sove this problem

    Well the configuration file you chose does not allow users created in NetWeaver to be created in the LDAP.  That's why it's a "readonly" configuration.  I would guess that you need a custom configuration file specifically for open ldap.
    This should help get you started on a custom configuration file:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/b7/14d43f2dd44821e10000000a1550b0/frameset.htm
    Then again, if the only problem with the .XML file you chose is that you can't write to the LDAP, give the dataSourceConfiguration_ads_writeable_db.xml configuration file a shot.

  • Open LDAP Authenticator Configuration on WLSSP5

    I have problems in the open LDAP authenticator configuration on Weblogic Server with Service Pack 5. I have users on OpenLDAP Server that do not belong to any group. My LDIF file contents are as given below.
    dn: dc=my-domain,dc=com
    dc: my-domain
    objectClass: dcObject
    objectClass: organization
    o: MYABC, Inc
    dn: cn=Manager, dc=my-domain,dc=com
    userPassword:: c2VjcmV0
    objectClass: person
    sn: Manager
    cn: Manager
    dn: cn=myabcsystem, dc=my-domain,dc=com
    userPassword:: dmVuZGF2b3N5c3RlbQ==
    objectClass: person
    sn: myabcsystem
    cn: myabcsystem
    dn: cn=Philippe, dc=my-domain,dc=com
    userPassword:: UGhpbGlwcGU=
    objectClass: person
    sn: Philippe
    cn: Philippe
    dn: cn=mlrick, dc=my-domain,dc=com
    userPassword:: bWxyaWNr
    objectClass: person
    sn: mlrick
    cn: mlrick
    All these users appear in the Users tab after configuration on the console only if LDAP Server is up. While I select group tab, I get errors indicating BAD SEARCH Filter.
    Inspite of me not having any groups in the ldap as indicated in ldif contents.
    While I try to login t the application with this LDAP configuration, I do not get any errors. LDAP authentication is not happening with just the LDAP authenticator in place. Even if I stop the LDAP server, I do nto get any exceptions while trying ot login. The config params for the Open LADP are as given below
    <weblogic.security.providers.authentication.OpenLDAPAuthenticator
    AllGroupsFilter="objectclass=*"
    Credential="{3DES}rGCpYmhaIorI99BjZ2u6Fg=="
    GroupBaseDN="dc=my-domain,dc=com"
    GroupFromNameFilter="(cn=%u)"
    Name="Security:Name=MYABCAuthenticationOpenLDAPAuthenticator"
    Principal="cn=myabcsystem,dc=my-domain,dc=com"
    Realm="Security:Name=MYABCAuthentication"
    StaticGroupDNsfromMemberDNFilter=""
    StaticGroupNameAttribute="" StaticGroupObjectClass=""
    StaticMemberDNAttribute="" UserBaseDN="dc=my-domain, dc=com"/>
    ####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <LDAP ATN LoginModule initialized>
    ####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <LDAP Atn Login>
    ####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <LDAP Atn Login username: bob>
    ####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <getConnection return conn:LDAPConnection { ldapVersion:2 bindDN:""}>
    ####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <authenticate user:bob>
    ####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <getDNForUser search("ou=people,ou=MYABCAuthentication,dc=myabc", "(&(uid=bob)(objectclass=person))", base DN & below)>
    ####<Mar 3, 2006 4:21:34 PM IST> <Debug> <SecurityDebug> <hemalatha> <myserver> <ExecuteThread: '49' for queue: 'default'> <<WLS Kernel>> <> <000000> <returnConnection conn:LDAPConnection { ldapVersion:2 bindDN:""}>
    CAN ANYONE HELP ME IDENTIFY WHAT IS THE ISSUE. Why is the authentication not happening?

    Hi Amol,
    I've seen this happen at least two times in 11.1.1.1 installs. You can safely restart and then add the service back again. Suggest you reboot after you re-add the service back or cycle all the Hyperion services.
    I was not aware you could install the service with that command.
    I used the below command instead:
    sc create OpenLDAP-slapd start= auto binPath= "D:\Hyperion\...\slapd.exe service" DisplayName= "Hyperion Shared Services OpenLAP"
    Regards,
    -John

  • Integration of CQ 5.5 with open LDAP

    Hi Team,
    I am trying to integrate cq 5.5 with open ldap. i am able to see ldap entry in jmx console .
    But here the problem is the users in LDAP are not imported to CQ users.
    Below are methods in com.adobe.granite.ldap tools section in jmx console.
    [Ljava.lang.String;
    listOrphanedUsers()
    retrieves a list of users not present in the LDAP directory anymore
    java.lang.Void
    syncAllUsers()
    updates all local user informations based on the LDAP directory
    [Ljava.lang.String;
    syncUser(java.lang.String user)
    updates the local user information for a specific LDAP entry
    [Ljava.lang.String;
    syncUserList([Ljava.lang.String; userlist)
    updates the local user information for a list of LDAP entries
    [Ljava.lang.String;
    purgeUsers()
    removes the local user information for all users removed from the LDAP server
    using these methods also am unable to import my ldap users to cq.
    Please guide me on the same.
    Thanks & Regards,
    Prasad.

    please refer to the master guide available for the SRM 5.0 --> which has got details of the R/3 system which you can use with SRM 5.0.
    I have seen the guide and according to it , you can use R/3 3.1i - SAP ECC 6.0.
    and also there should be no limitation as far as i know , if you are able to use R/3 4.6B  , you should be able to use all the functionality.

  • ITunes will not open in Windows 7 for one User. All I get is the Licence Agreement pane and when I click YES nothing further happens. I have set up a second user and iTunes opens without problem in that User window.

    Clearly something is blocking the main user(administrator) from opening the iTunes programme and I cannot find a solution.

    Many thanks for your reply. Yes I carried out the suggested procedure in safe mode , which did not resolve the issue and so this is what led me to set up a second User account. iTunes opened without problem in this second account and so I looked at the User-specific troubleshooting but I just could not locate the iTunes Preference files no matter how much searching I did.
    I also tried uninstalling and re-installing but the problem persists. Would be very grateful for any further advice.
    ollie66     Gorran Haven, Cornwall, England.

  • Where can I find an LDAP Editory for Open LDAP

    where can I find an LDAP Editory for Open LDAP... i was using LDAP Editor but it does seem to work any more... where can I find a free download for the LDAP editor for windows...

    I put in the following info in the connection section for the
    lDAPbrowser but am not able to connect to the server. I get error
    saying Failed to connect to ldap://165.252.58.78:389/
    Host: 165.252.58.78
    Port: 389
    Version: 3
    Base DN: what do I put here
    and do I select SSL
    or Anoymous bind
    User Info
    User DN: what do I put here
    and
    I am connecting to ldap through my app with the following criteria:
    url=ldap://165.252.58.78:389/
    ldapHost=165.252.58.78
    ldapPort=389
    ldapVersion=LDAPConnection.LDAP_V3
    ldaploginDN=cn=Manager,dc=accuserverx,dc=com
    ldappassword=password

  • Open NAT problems with Xbox One .

    When I first got my 1900ac I used Media Priortization to get an open NAT for Call of Duty Advanced Warfare on my Xbox One ; prioritizing the Xbox . It worked fine for about 6 months until I changed cable/net provider to Nextech in Ks. This company uses the 1900ac to hook up it's system for all it's customers ( since I already had one they're using mine ). Unfortunately I'm unable to get an open NAT in this game anymore ; I've tried just about everything , NAT forwarding , triggering , Media Prioritization . Nextech support & Xbox Live support , useless . Tried Portforward . com , nothing . Forwarding port 53 cuts off net connection & doing the static ip change for Xbox didn't help . Almost everything I've looked at seems out of date & I'm at my wits end . It would seem by now Linksys should have solutions available , any ideas ?

    Thank you chin_pamz13 for your response . I tried to check if my modem had a public or private ip address but I'm not sure how to do that ; I've read about double NAT's elsewhere . Regardless , I think I've finally found a solution that seems to be working so far . I went to the website " tech - recipes . com " & found an article , " Xbox One open NAT " by Aaron St. Clair . I tried his first suggestion about port triggering , with extra ports I had'nt seen before . That did not work for me so I followed his instructions for putting the Xbox in the DMZ & it's working ! I think my problems from before were the result of improperly setting up the static ip address for my router & Xbox . Previous instructions had me changing the ip in the console along with the router ; Aaron said not to do so in the Xbox , let the router do the work it's supposed to do & make sure the settings in the console are on automatic . In the router at the DMZ , I was'nt sure how to proceed , but at the bottom is a section labeled DHCP reservations list ; clicked on that , saw XboxOne , clicked on that & it filled out the MAC address above for me . Then I went to the Xbox network settings , advanced settings & clicked " automatic " at ip address , subnet & DNS . I checked mutiplayer connections & did the " hold bumper & trigger buttons " trick & finally got an open NAT ; fired up CoD Advanced Warfare & got the open NAT there also . I may have screwed up when I did the port triggering but since the DMZ fix seems to work I'm going to leave things alone . Hope this helps others with open NAT problems .

  • Motion 3 won't open citing problems with "Ozone plug-in" - Any suggestions?

    Motion 3 won't open citing problems with "Ozone plug-in" - Anybody ever experienced this? I tried dumping all motion app's and reloading but same thing happens. Any ideas? Thanks.

    Motion 3 is part of Final Cut Studio 2. There are many threads on these boards about trying to get those apps to install properly on OS versions above 10.6.8. Here's one such thread. A search will bring up additional ones.
    Russ

  • Hello i can't open applications of my iPhone in iTunes , other ones (information, photo , books etc) open without problem. i've synchronized phone with iTunes - was no problem, quick time is works.  thank u

    hello
    i can't open applications of my iPhone in iTunes , other ones (information, photo , books etc) open without problem. i've synchronized phone with iTunes - was no problem, quick time is works.  thank u
    Tatyana

    You have Acrobat Pro on your system. It will try to open PDFs, and of course it will fail. You must uninstall it. Then, you will need a PDF reader. So install Adobe Reader. That seems quite simple, but perhaps something is wrong. If anything goes wrong with these two steps (1) uninstall Acrobat Pro (2) install Adobe Reader, then please let us know the details.

  • IPad mail sending one page PDF documet as a picture. This picture is not viewing for other people who email open. this problem is from iBooks and from Pages.  (if I sending one page document from Pages from iPhone is ok - PDF)

    iPad mail sending one page PDF documet as a picture. This picture is not viewing for other people who email open. this problem is from iBooks and from Pages.
    (if I sending one page document from Pages from iPhone is ok - PDF. If I sending one page document from iPad is mistake. )

    Turn off rich text in your email signature. Delete images too, if any.

  • Unknown attribute of the ID GTC connector (Open LDAP).

    Attribute is added automatically when creating a GTC connector (for Open LDAP). Attribute with value SUCCESS is present in OIM. I cannot find anywhere what means attribute in this case.
    The attribute itself is not to be deleted.
    Someone please help if you know!!

    Has been set up connectors Generic Technology, designed to integrate Oracle Identity Manager with the systems that support network access protocol LDAP. Connector sends the user account attributes, for example, gidNumber, uid and among them, upon the attribute ID. Apparently, this attribute contains the official record. It can not be deleted or changed. I want to understand what it means?

  • Open GL Problem

    I've seen many messages about CS4 and Open GL problems but not this specific one. With Open GL support turned on I get a box right in the middle of the image at the very top. I'm running the latest nVidia drivers for my card (8800GT with driver v180x48 dated 11/19/08). I have the problem with SLI both enabled and disabled. When I disable Open GL support and re-open the image everything works fine.
    So far, PSCS4 is running fine except for that. Which means I can't rotate the canvas, but that isn't a show-stopper for me. I assume this means I'm waiting for nVidia and Adobe to resolve Open GL issues. But any other advice would be appreciated.
    MSI 650i motherboard, Intel E6750
    4GB Corsair XMAS RAM PC-6400
    Western Digital 640GB SATA-II HDD
    Dual EVGA 8800GT video cards in SLI
    750W Corsair PS

    no 3d functionality with CS4 so I upgraded my graphics card based on the following requirements:
    http://www.adobe.com/products/photoshop/photoshop/systemreqs/
    Some GPU-accelerated features require graphics support for Shader Model 3.0 and OpenGL 2.0
    Using these criterion I found this card and bought it:
    The ATI FireGL V3350 features full Shader Model 3.0 support and scalable ultra-threaded architecture with true 128-bit floating-point precision. Both OpenGL 2.0 and OpenGL shading language are supported in the unified drivers for the FireGL V3350, as is Microsoft DirectX 9 with Dx9 HLSL. Drivers are available for Windows XP, Windows XP64, and Windows 2000, as well as Linux 32 and Linux 64. Specs here:
    http://ati.amd.com/products/workstation/techspecs2.html
    Upgraded to the Feb 2009 drives and still no 3d support. Any suggestions..return the card? What card really works and cost less than $250?

  • Discoverer against Open-LDAP

    Did anyone have experience of using Discoverer against Open-Ldap? We are using discoverer in non-apps mode and dont want to create 300db user's. Our current application uses Open-Ldap and we want to make use of it for Discoverer authentication. Any ideas?
    Thanks

    Thanks Rod for the metalink documents.
    I'd tried using eul_trigger$post_login using a similar function as indicated in the article you refer before posting my question but it didn't work - may be because i was not paying attention to upper/lower case.
    But, after reading the article 372067.1 and following the exact instructions I still can't make it work. Not even with Discoverer desktop while logged in as EUL owner.
    Here is the function I created:
    CREATE OR REPLACE FUNCTION EUL_TRIGGER$POST_LOGIN RETURN NUMBER IS
    BEGIN
    insert into my_eul.test_logon values (sysdate);
    commit;
    RETURN 0;
    END EUL_TRIGGER$POST_LOGIN;
    Some values for this registered function from EUL5_FUNCTIONS metadata table are:
    FUN_NAME: eul_trigger$post_login
    FUN_DEVELOPE_KEY: EUL_TRIGGERPOST_LOGIN
    FUN_FUNCTION_TYPE: 8
    FUN_HIDDEN: 0
    FUN_DATE_TYPE: 2
    FUN_AVAILABLE: 1
    FUN_MAXIMUM_ARGS: 0
    FUN_EXT_NAME: EUL_TRIGGER$POST_LOGIN
    FUN_EXT_OWNER: MY_EUL
    Any thing seems missing/incorrect?
    I am not 100% sure about EnableTrigger preferences. My pref.txt does not have an entry for EnableTriggers and according to Configuration Guide you should not add an entry if not present because by default triggers are enabled. But, since the trigger was not firing I also tried adding the line and applied preferences using the applypreferences.bat but it didn't work.
    To make it work with Discoverer Desktop I tried updating the registry to add entry for EnableTrigger registry entry, but no successs (Finally I removed all changes to registry and preferences).
    Now I am clueless why the trigger is not working. Any help would be appreciated.
    Using Discoverer 10G R1 (9.0.4)
    thanks
    Message was edited by:
    user552591

  • Question: is it possible to recover an InDesign file that will not open. the problem came by copying a pictogram vector illustrator to indesign. My file indesign does not want to open it now. Thank you

    Question: is it possible to recover an InDesign file that will not open. the problem came by copying a pictogram vector illustrator to indesign. My file indesign does not want to open it now. Thank you

    You can try the script mentioned in #1 here: Re: InDesign 6 is crashing when attempting to open a particular document. All others are opening OK.
    Here's how to install a script: http://indesignsecrets.com/how-to-install-a-script-in-indesign-that-you-found-in-a-forum-o r-blog-post.php

  • How we connect OPEN LDAP to weblogic server

    Hi All,
    How we connect OPEN LDAP to weblogic server

    There are several blogs for how you set up Open LDAP as a security provider:
    http://biemond.blogspot.com/2008/10/using-openldap-as-security-provider-in.html
    http://blogs.oracle.com/jamesbayer/2007/08/using_openldap_with_weblogic_s.html

Maybe you are looking for