Oracle Portal for LDAP Authentication(Iplanet)

Oracle portal installed on Solaries machine and LDAP (iplanet) installed on windows NT machine.I am able to take ldif file from portal30 user and add to ldap.( under o=oracle tree)
Completed all step mentioned in document conf_ldap.pdf as follows
1. created library pointing to ssoxldap.so in portal30_sso schema
2. made change to listner.ora and tnsnames.ora file and able tnsping also.
- tnsping extproc_connection_data
3. ssoldap.sql also ran in portal30_sso schema with all LDAP information.
(like ----
Host: challasv
Port: 389
Search Base: cn=Login Server (portal30_sso),o=oracle
Unique Attribute: cn
Bind DN: cn=Portal Login
Bind Password: portal30
If I am try to login through browser in say Unexpected errors (WWC-41400). Is I am doing any thing wrong.
Also i am albe run ldapsearch from another machines working fine.user following command
- ldapsearch -b "cn=Login Server (portal30_sso),o=oracle" -h challasv -p 389 -D "cn=Poral Login" -w portal30 cn=portal30
my questions is Iplanet(LDAP) can integrate with Portal or any steps missed.
Please help in this regard,
Challa

You may want to use ssoxoid.pkb package that comes with Portal/Login Server 3.0.9 which simplifies the configuration.
Also, you will not have to run the external procdure listener. Please refer to the Login Server Admin. guide for more details.
NOTE:
the 3.0.9.8.0 version of ssoxoid.pkb is not good. You need to download 3.0.9.8.2 patch and get the ssoxoid.pkb file from there.
Also, you may want to turn on debug for SSO Server to see debug msg.
DEBUG
========
You need to loginto the Login Server schema and run following commands to see debug msg.
sqlplus portal30_sso/password
TO TURN ON DEBUG
1. Create debug proceure
CREATE OR replace PROCEDURE debug_print (str VARCHAR2) AS
PRAGMA autonomous_transaction;
BEGIN
INSERT INTO wwsso_log$ VALUES
(wwsso_log_pk_seq.nextval,
substr(str, 1, 1000),
sysdate,
dbms_session.unique_session_id
commit;
END debug_print;
show errors;
TO SEE THE DEBUG LOG
2. Try to login using portal login link
and see the error msg from the log table
select msg from wwsso_log$ order by id;
TO STOP THE DEBUG LOG
3. Delete the log
delete from wwsso_log$ ;
commit;
4. Turn off debugging
CREATE OR replace PROCEDURE debug_print (str VARCHAR2)
AS
BEGIN
null;
END debug_print;
show errors;

Similar Messages

  • Oracle Portal for LDAP Authentication using Iplanet directory server

    I have oracle portal on solaries machine and Iplanet directory server 5.1 on windows NT,
    Can i user portal user authentication Iplanet LDAP.
    Regards
    srinivas

    Yes You can. You have to provide the necessary info while running the ssoldap.sql.
    Vinodh R.

  • Configuring Oracle 9iAS for LDAP Authentication

    I have installed OID Server on my PC. Now I want to switch my Login Server to External LDAP Authentication mode. For that I run the script ssoldap.sql passing the host, port, search base, etc.. from my login server schema (portal30_sso) The script throws me the following error :
    " Bind variable "CN" not declared ".
    I even compile the package ssoxldap.pkb before that. But still this error persists.
    tnsnames.ora and listener.ora files are fine and the tnsping to the external procedure is also working properly.
    Can anyone help me in this.

    I got that problem solved. Its little bit funny solution. Instead of running the sql file using the File->open->ssoldap.sql, we should directly write the whole path i.e. @d:\oracle9i\portal30\admin\plsql\sso\ssoldap.sql
    And secondly, I also found one small change related to the installation manual. Its related to Adding entries to the LDAP Server. the manual shows this syntax:
    ldapadd -h i3dt111 -p 389 -D 'cn=orcladmin'
    -w welcome -f d:\oracle\admin\phd\udump\users.ldif
    but instead we shoud write this:
    ldapadd -h i3dt111 -p 389 -D cn=orcladmin
    -w welcome -f d:\oracle\admin\phd\udump\users.ldif
    . Just remove the single quotes in the username string.
    Anyways, thanks for your suggestions.
    null

  • Oracle Portal for win98?

    Is oracle portal for Win98 available for download? Will it work with Microsoft PWS?

    This is really not the forum for this type of question.
    However, Oracle Portal is available for Solaris and will be available shortly for Windows NT. It will be ported to platforms that 9i Application Server is ported. I do not believe that Windows 98 is on that list.
    Second answer. Microsoft PWS is not currently supported with 9i Application Server.
    null

  • Oracle Portal for Intranet Development

    Hi,
    Anyone out there in the UK used Portal to develop an intranet - I am about to embark on our intranet project and would welcome your views on the product, ease of use, problems, fitness for purpose. I am also interested in the skills required to develop portal - did you have a designer, developer, DBA or did one bod just do it all! What training did you require in order to use Portal.
    Any feedback will be very welcome.
    Thanks!
    Clive
    Countryside Council for Wales

    Paul,
    Firstly many thanks for picking up on my plea!
    It would be great if you can run through the main issues - we are particularly concerned at the moment with installation and training issues - how easy/difficult was it to install ; what/how many staff did you have working on the project; what skills/additonal training did you need(if any!).
    We have two staff assigned to our Portal Development Project - myself as Web Designer/Developer and Fred Williams as DBA (who will have to do the installation and any application coding stuff).
    Our paths do seem to be crossing lately. I know Fred has recently spoken to your Alistair Thompson. Also Jan Bennett, Head of our Oracle Development Team has had recent contact through meetings with CCTA and the Cedar Group.
    Anyway once again it was really great that you took the time and trouble to respond. I'll look forward to your eMail.
    Good luck with going live on your project. If you want to show it off we would love to see it!
    Regards
    Clive
    [email protected]
    <BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Paul Subacchi ([email protected]):
    Clive,
    We are currently developing our Intranet using Oracle Portal 3.0.8.9.8 on Compaq Tru64 Unix. If you drop me an email I will run through the maihn issues we habve encountered etc. We are due to go live very shortly.
    Regards
    Paul<HR></BLOCKQUOTE>
    null

  • Instal Oracle Portal for testing and learning purpose on 2 machines

    I have two PCs. One is runing Windows XP, one Linux Fedora Core 4. I'd like to usem them for geting to know Oracle Portal. Linux as Aplication Server, Win as DB server.
    I can't seem to find minimum HW requirements for Portal. Linux machine is 256MB RAM, Pentium II 350 MHz. As I said, it doesn't have to run fast. it just has to run for the beggining. Then I can decide whether to use it and think of the real configuration for business purposes.
    Please advise.

    RAM requirement for Infrastructure is 1GB - this included an Oracle 10G database for identity management. RAM requirement for Middle Tier (Portal and Wireless) is an additional 1GB.
    Requirements to run both on one host is (according to Oracle) 1.5GB.
    I have it all on a single host here (SuSE Linux Enterprise Server 9) with only 1GB ram (It's an Athlon 1.4) so there is some flexibility here. You may get away with the CPU, but I think you need a lot more RAM.
    Your athlon Windows Machine could do it all. I have a working 10G Application Server on a 2GHz Pentium M laptop (2 GB RAM). If you don't start it up automatically every time the OS starts then you will have plenty of resources.
    Since 10G AS also includes 10G DB then only one machine is all you would need.
    Good luck

  • Oracle Portal for HR Self Service

    Hi All,
    I am new to HR Self Service implementation. Can anyone tell me what is the role of Oracle Portal in Self Service HR? Is it mandatory to have Oracle Portal when we implement Self Service HR?
    Appreciate any fast reply.
    Thanks,
    CAH

    Hi,
    What is the application release?
    Not sure if I understand you correctly, but I believe having Oracle Portal installed/configured is not mandatory (it is optional like configuring SSO). Please see these documents (check the referenced docs/links in these documents) for details.
    Note: 211557.1 - Implementing Oracle Self-Service Human Resources (SSHR) 4.2
    Note: 578360.1 - Oracle Self-Service Human Resources (SSHR) Release Notes, Release 12.1.1
    Oracle Self-Service Human Resources Guides can be found at:
    Oracle Applications Documentation
    http://www.oracle.com/technology/documentation/applications.html
    Regards,
    Hussein

  • Transparent logon to Oracle Portal for Win2000 users with Active Directory

    At a customer site, users log on to a Win2000 Domain based upon MicroSoft's Active Directory.
    They want to transparently (i.e.: without giving their credentials again) log on to Oracle Portal, in the same way as they could do with mod_ntlm if they were on a NT domain.
    Oracle 9iAS (not yet decided whether v.1 or v.2) will be installed on a AIX based server.
    Does anybody have any suggestions?

    Hi,
    the user cannot save private workbooksUnfortunately this is true. The workbook is saved with the database user so any workbooks saved by one user would be visible and could be changed by any user who shared the same database username. You could implement your own security over the EUL5_DOCUMENTS table by having a trigger to put the SYS_CONTEXT('userenv','client_identifier') into the doc_user_prop1 column and then create a VPD policy on the table that ensured users could only see their own workbooks. This is of course a un-supported change to the EUL tables.
    the user to manage a database password too in order to use Discoverer Plus and create/save workbooksThis is not necessary.
    Rod West

  • Setting up CIMC on C220 stand-alone server for LDAP authentication.

    I'm trying to setup the CIMC so that all users who require access to the console of the server have to be authenticated by Active Directory. I have placed my authenticated users in an AD group called "APAC IT Administrators".
    Here are the fields I have so far:
    Enable LDAP: Checked
    BaseDN: DC=mydomain,DC=com
    Domain: mydomain.com
    Enable Encryption: Checked
    Time Out: 60s
    Configure LDAP Servers: Checked
    Server 1: 10.0.0.100
    Port: 389
    Server 1: 10.0.0.101
    Port: 389
    Binding paramters:
    Method: Login Credentials
    Search Parameters:
    Filter Attribute: sAMAccountName
    Group Attribute: memberOf
    Attribute: CiscoAVPair
    LDAP Group Auhtorisation: Checked
    Index: 1
    Group Name: APAC IT Administrators
    Group Domain: mydomain.com
    Role: Admin
    I've read here (http://www.aaviso.com/tech/?p=94) something about having to create a new attribute for domain users then assigning the attribute to the specific users, which I have not done so far as I do not have permission to do this and needs to be done by a higher source, but would this be the reason I cannot get the CIMC logon to authenticate against AD? Is there a log I can check to see what the problem is?
    When I try to log onto the CIMC using the format "mydomain\myusername", I get the error "Login failed. Verify that your username and password are correct."
    CIMC is version 2.0(3e).
    Thanks.

    Ingo thanks very much for replying..
    We called up BusinessObjects Service to ask where we can download the SAP Integration Kit for Crystal XI but they had didnt have a solid answer for us.
    We have the SAP GUI and also installed the Crystal Reports Designer XI from the CD.  Also the installation of Crystal XI prompted me to download SP1 from internet and we did that.
    As a result of the Service Pack installation another SAP component got installed called the "SAPInteractiveXL1" which is excel based.  There is a connection SAP icon toolbar in SAPInteractiveCl1 but when the SAP GUI pops up and I input my logon information it just says says "Connecting..." and the excel just hangs....
    So right now I have no clue where to get
    - Client components from the BusinessObjects SAP Integration Kit

  • USING APACHE STURUTS BRIDGE WITH ORACLE PORTAL FOR STRUTS - JSR 168 PORTLET

    I am trying to develop a JSR - 168 compliant portlet which uses struts framework.I am using APACHE STRUTS BRIDGE to run the application in my ORACLE 10.1.4 Portal server.While doing the configuration accoring to the documentation given in URL http://www.ja-sig.org/wiki/display/PLT/Struts+Bridge
    (apache struts bridge), i was asked to add an <init-param> entery in the portlet.xml file to get the ServletContext.So i need to know where is the ServletContextProvider implementation class which implements ServletContextProvider available in Oracle AS so that i can use that to get the ServletContext and use it furthur.
    Thanks
    Deepak

    you could write your own implementation class for the ServletContextProvider interface and fill in the portlet.xml with the class you class
    It could be written as follows:
    package Edmunds.com.portal.bridges;
    import javax.portlet.GenericPortlet;
    import javax.portlet.PortletRequest;
    import javax.portlet.PortletResponse;
    import javax.servlet.ServletContext;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletRequestWrapper;
    import javax.servlet.http.HttpServletResponse;
    import javax.servlet.http.HttpServletResponseWrapper;
    /* note that PortletApplicationImpl is oracle version of portletContextImpl */
    import oracle.webdb.wsrp.server.PortletApplicationImpl;
    import org.apache.portals.bridges.common.ServletContextProvider;
    * PortalServletContextProvider supplies access to the Servlet context of Oralce Portal Portlet.
    public class PortalServletContextProvider implements ServletContextProvider {
    public ServletContext getServletContext(GenericPortlet portlet)
    return ((PortletApplicationImpl) portlet.getPortletContext()).getServletContext();
    public HttpServletRequest getHttpServletRequest(GenericPortlet portlet, PortletRequest request)
    return (HttpServletRequest) ((HttpServletRequestWrapper) request).getRequest();
    public HttpServletResponse getHttpServletResponse(GenericPortlet portlet, PortletResponse response) {
    return (HttpServletResponse) ((HttpServletResponseWrapper) response).getResponse();
    }

  • Using PAM for LDAP authentication

    Good Day All,
    I want to know how I can use PAM to enable users authenticate to my Solaris 9 Box using an existing LDAP server.I would appreciate if the explanation is simpler and more detailed as I am new to this stuff.Also is there any othe means like an open source solution so that users can use a centrailzed authentication server so that users gain access to a solaris box without going for a local /etc/passwd and /etc/shadow files.

    It depends on what LDAP Server you used.
    The steps are more than just the pam_ldap configuration.
    You may find the following how-to useful or not at all.
    http://web.singnet.com.sg/~garyttt/
    HTH
    Gary

  • Sample code for LDAP authentication throwing exception

    i got sample code (13kb zip file from
    http://java.ittoolbox.com/browse.asp?c=JAVAPeerPublishing&r=%2Fpub%2FBK072703D%2Epdf) having MyCallbackHandler,LdapAuthenticator,SampleLoginModule 2 policy files and config files). i copied and compiled succesfully all java files placing them in bin of j2sdk1.4 . But when i give following command(as told in the pdf article ,url is given above) exception is thrown each time i enter username n password(three trials are allowed by the code)
    java -Djava.security.auth.login.config=D:\j2sdk1.4\bin\sample_jaas.config -
    Dldap.properties.config=ldap.properties SampleAcn
    SampleAcn is also one of the java files i compiled in bin.
    i m new to this area . so guide me for following
    do i need to do something with the 2 policy files as nothing is told anywhere about there configuration or there configuration is not needed at all.
    i havent configured anything on windows 2000 server having active directory except for creating a user named testUser/testPassword as mentioned in code that this is the username/password v can try for succesfull loging thorugh sample.
    do i need to cofigure some other things for using LDAP

    I think I have just answered your questions at the following post:
    [http://forums.sun.com/thread.jspa?threadID=5407841&tstart=0].
    This should work on any OS that supports Java, including AIX. The following link also can be helpful (includes code sample):
    [http://alextch.members.winisp.net/ResetADPasswordFromJava/SetADPasswordFromJava.htm]
    Good luck!
    Sergei.
    [http://hitech.com.ua/en/]

  • Extend the SSO Oracle Portal Authentication Mechanism

    Hi All,
    I need to put some logic just before the Oracle Portal user is authenticated to SSO.
    Specifically I need to collect some information about the user from a database just before the SSOLoginServlet is called with all the parameters it needs. (username, password, sitetoken etc...)
    Is there a class i can extend, an API I can use.... whatever
    In fact I need to extend and put some more logic to the login mechanism of SSO.
    Is there a way to do that?
    If there are many what is the best method?
    Thanks

    I'm not an expert, but I think this might be fairly easy to implement. If you look at Chapter 12 of the SSO Admin Guide (http://download-east.oracle.com/docs/cd/B28196_01/idmanage.1014/b15988/custom.htm), it tells you what parameters and what url to call for the login process to complete. Therefore, you should be able to submit your custom login page to another servlet for your pre-processing, and then forward on to the sso logon servlet.

  • LDAP Authentication for Application APEX 3.2

    Dear All,
    I have created an application in APEX 3.2 for that i am using the below code for authentication all my domain users
    create or replace
    FUNCTION              "ADS_LDAP_AUTHENTICATE"
    (p_username IN VARCHAR2, p_password IN VARCHAR2) RETURN BOOLEAN AS
      c_Directory   VARCHAR2(50) ;
      c_Port        NUMBER(4);
      c_BaseDN      VARCHAR2(200);
      c_InitUser    VARCHAR2(200);
      c_InitPass    VARCHAR2(32);
      l_session     DBMS_LDAP.SESSION;
      l_success     PLS_INTEGER;
      l_attributes  DBMS_LDAP.STRING_COLLECTION;
      l_result      DBMS_LDAP.MESSAGE;
      l_userdn      VARCHAR2(2000);
      CURSOR get_authentication_dtls
      IS
      SELECT  domain_name,server_port,server_base_dn,server_principal,server_credentials
      FROM    PS_TB_SYSTEM_ADS_CONFIG_DICT;
    BEGIN
      OPEN get_authentication_dtls;
      LOOP
      FETCH get_authentication_dtls INTO c_Directory,c_port,c_baseDN,c_InitUser,c_InitPass;
      EXIT WHEN get_authentication_dtls%NOTFOUND;
      --Open initial lookup session.
      l_session := DBMS_LDAP.INIT(c_Directory,c_Port);
      l_success := DBMS_LDAP.SIMPLE_BIND_S(l_session, c_InitUser,c_InitPass);
      IF l_success = DBMS_LDAP.SUCCESS THEN
        l_attributes(1) := NULL;
        l_success := NULL;
        l_success := DBMS_LDAP.SEARCH_S(ld => l_session,
                                       base => c_BaseDN,
                                       scope => dbms_ldap.scope_subtree,
                                       filter => '(|(sAMAccountName=' ||p_Username || ')(mailNickname=' || p_Username || '))',
                                       attrs => l_attributes,
                                       attronly => 0,
                                       res => l_result);
        IF l_success = DBMS_LDAP.SUCCESS THEN
          l_userdn := dbms_ldap.get_dn(l_session,dbms_ldap.first_entry(l_session,l_result));
          IF l_userdn IS NOT NULL THEN
            l_success := dbms_ldap.unbind_s(l_session);
            l_session := dbms_ldap.init(c_Directory,c_Port);
            l_success := dbms_ldap.simple_bind_s(l_session, l_userdn,NVL(p_password, 'QWERTASDFZXC'));
          END IF;
        END IF;
      else
        return FALSE;
      END IF;
      IF l_success = DBMS_LDAP.SUCCESS THEN
      CLOSE get_authentication_dtls; /* Close cursor before returning */
        RETURN TRUE;
      END IF;
      END LOOP;
      CLOSE get_authentication_dtls;
       RETURN FALSE; /* if the success has not happened till all servers processed, then return FALSE */
    EXCEPTION
      WHEN OTHERS THEN
        RETURN FALSE;
    END;
    Now i dont want to allow all the domain user to access my application. So we planned to create a user group in active directory.
    Can anyone suggest me how to allow only a set of users to access my application using LDAP.
    Thanks in Advance.
    Cheers,
    San.

    Use the below link for Ldap Authentication
    LDAP (MS AD) Group Authentication

  • Oracle Portal (WebDB 3.0) for linux out yet?

    Does anyone know when Oracle Portal for Linux will be available for download ?

    Does anyone know when Oracle Portal for Linux will be available for download ?

Maybe you are looking for

  • Running different set of methods on the same class via threads

    Hello all, I have this issue that I am trying to deal with. It looks pretty simple to me, but maybe just a mental block I guess :) Now the code below will give you an idea of what I am trying to achieve. I am not sure if its possible or if there is s

  • Suppress highlighting for parent paragraph style

    When one paragraph style is based on another paragrash style, and you click inside the child style with the Type tool, both the parent and child styles are highlighted in the Paragraph Styles panel. This makes it confusing as to which paragraph style

  • Cannot find errors -200222 and -200141 info

    Hello, I have sometimes run time errors -200222 and -200141 after executing my program for several hours. I tried to find extra information about these errors, but I cannot locate them in Labview 7.1 help, NI-DAQmx help, or ni.com web and forums. How

  • No symbol for tools.

    My tools suddenly stopped displaying the relevant symbol (circle for the brush, etc.) whenever I move it to cover the photo I want to manipulate. Photoshop 8 used to do the same thing.

  • Error installing JRE 6

    I'm getting these errors when installing the latest version of Java JRE.. plug-in Internet Explorer. Windows XP SP2| IE7| PCTools Antivirus| Windows Defender. I've uninstalled all Java JRE versions before downloading and installing. I've installed fr