Other LDAP servers with Oracle ?

Hi,
We plan to integrate further ldap in our enterprise and
specially with oracle databases (configuration, security
issues). Oracle provide his own LDAP server know as OID, but can
we use an other ldap server to store Oracle specific ldap datas ?
We have to consider ldap for windows (Active Directory), for
mail purpose (postfix) and for database logon and configuration.
We don't want to have Active Directory plus OID plus Netscape
LDAP plus Openldap ... We want to use ldap protocols and data
that fits in an integrated directory for entreprise use.
So can we deploy another directory server behind Oracle ldap
clients functionalities ?
Thank in advance for your help ,-)

Hello aymeric,
The wonderful thing about LDAP is that it is a protocol standard
governed by the IETF. So migrating from one server to another
should be relatively easy. Since version 3.0.1, OID has a Meta
Directory or as it is sometimes refered to as the Directory
Integration server built into it which allows you to create
custom connectors to synchronize OID with just about any type of
data repository.
Can you give me a specific example of what you want to migrate?
Obviously I cannot vouch for the capabilities of other LDAP
servers regarding this subject.
Thanks,
Jay

Similar Messages

  • Integrating and synchronizing other vendor databases with Oracle 8

    I need to integrate Oracle 8 with an Informix database in both directions (I mean from and toward Oracle); it should allow synchronous and asynchronous communication (because of different availability of databases).
    I heard about some Oracle tools (i.e. Oracle integration server, Heterogeneous services, Transparent Gateway, etc.) which ones are the best fit to and where can I find the technical documentation? Another type of solution could be better (e.g. by using databases triggers or something else)?
    All suggestions are welcome!
    Regards
    Carlo
    null

    Hello aymeric,
    The wonderful thing about LDAP is that it is a protocol standard
    governed by the IETF. So migrating from one server to another
    should be relatively easy. Since version 3.0.1, OID has a Meta
    Directory or as it is sometimes refered to as the Directory
    Integration server built into it which allows you to create
    custom connectors to synchronize OID with just about any type of
    data repository.
    Can you give me a specific example of what you want to migrate?
    Obviously I cannot vouch for the capabilities of other LDAP
    servers regarding this subject.
    Thanks,
    Jay

  • Sun Fire V490 x 2 servers with Oracle RAC facing Split brain problem

    Hi all,
    I have Sun Fire V490 x 2 servers with Oracle RAC and they faced a Split brain problem. One of the node's database instance has gone down, The DBA claims it is due to network problem, but as such the networks are OK. We use the on board CE1 interface for Cluster interconnect and CE0 as the public interface.
    Did anybody face this kind of a problem? Could this be a hardware/OS patch problem?
    I had kept a continuous ping for 24 hours after this happened last time and the output shows no packet loss
    Many thanks in advance.
    Ushas Symon

    In order to diagnose this properly, you'll need to provide too much detail and far too many log files for a generic discussion forum to handle.
    Use your service contract and open a support case.
    Because a cluster environment is involved you'll likely end up talking to the cluster support staff.
    They can analyze hardware and software errors as well as review whether you configured the systems in a supportable fashion.
    Be prepared to make a direct connection to each system and gather data using such as by using the Explorer tool. The technical support staff will tell you what they will actually need.

  • LDAP Intigration with Oracle BPM 10.3.0.0.0

    Hi,
    I want to know about integration with LDAP connectivity with Oracle BPM suite.
    We don’t have any knowledge between the integration on Oracle BPM suit & LDAP.
    Please do the needful on the same as soon as possible.
    With Best Regards,
    Ratna Prasad.

    I configured LDAP directory, and I was able to see the participants. However the group information is not retrieved properly. Here is the error
    (cont) ] Main: Invalid characters found for attribute [OU name].
    [     (cont)     ] Main: Detail:Attribute [OU name] cannot be assigned the following value: [Dev/Test].
    [     (cont)     ] Main: The invalid character is: [].
    [     (cont)     ] Main:
    [     (cont)     ] Main: fuego.directory.exception.InvalidAttributeValueException: Invalid characters found for attribute [OU name].
    [     (cont)     ] Main: Detail:Attribute [OU name] cannot be assigned the following value: [Dev/Test].
    [     (cont)     ] Main: The invalid character is: [].
    [     (cont)     ] Main:
    Any ideas on what can be the possible solution?
    Thanks

  • Integrate other directory servers with access manager

    How to integrate other directory servers with access manager ?

    Please read the Access Manager admin guide at http://docs.sun.com/app/docs/doc/819-4670/6n6qardvq
    Any further questions regarding this integration, post them to the AM forum at http://forums.sun.com/forum.jspa?forumID=770

  • LDAP syncronization with Oracle DB. Related questions.

    Hello everybody,
    The problem / objective: I have an Oracle DB with information for clients (ie). And I want to store that information in an LDAP server and have that information syncronized with the Oracle DB.
    I alredy read A LOT about this but no luck. I have tried ApacheDS and Microsoft AD for the LDAP servers. I was able to install both of them and I was able to create a trigger in my OracleDB in order to trigger actions and add/delete/update records on the LDAP server. But, I need that the trigger works both ways. So I need a trigger in ApacheDS or AD. And here is the problem. This is not supported.
    While reading about this, I found information about Oracle Internet Directory. So, here is my first questions:
    1- Is OID an Ldap Server? I believe it is, but, is like Apache DS or AD? (In other words, is like a service which I can connect and implement CRUD operations?)
    2- OID is just supported/deplyed with Oracle 11g?
    3- Can I synchronize my Oracle DB with OID? I mean, if a change is made in the Oracle DB then this change is implemented on the OID, and backwards. (like triggers, in both ways)
    4- If OID is like AD, then, is this the best LDAP server to use?
    And talking about Microsoft Active Directory (AD), how can I achieve this?. I read about third party tools to do this (Quest Quick Connect, Microsoft Forefront Identity Manager), but I want to find another solution like triggers. (If is possible, if not.. then is not a solution :) ).
    Probably the questions are not very clear (the problem is clear), but I have a mess in my head now.. and I want some council about this.
    Thanks in advance.

    Hi,
    Firstly I would suggest you to upgrade your database from Oracle Release 11.2.0.1.0 to Oracle Release 11.2.0.2 . This is the recommended Oracle 11g database version  for SAP solutions. Many of your problem will get resolved with it.
    Question 1:
    So my first question would be is there any other suggestions besides adjusting the mentioned parameter above in order to ensure that no work processors going into hang state due to RFCs' occupying it as this issue always happens at the end of the month only when there are massive users accessing it.
    For immediate resolution the approach you have followed is correct viz limiting number of dialog processes for RFC. Secondly you need to analyze why RFC processing takes so much time. You need check which programs are getting executed by those RFC.
    Generate EarlyWatch report for more detailed view
    Question 2:
    My second question is what went wrong with the libttsh11.so file. How could it be 0 size in PRD when no signs of changes had happen to the PRD system. Is this a proven Oracle Bug or something else since I have never encountered anything like this before.
    The libttsh11.so library cannot be found in the related directory.
    Cause
    The file system is mounted using CIO option, but per Note 257338.1 Direct I/O (DIO) and Concurrent I/O (CIO) on AIX 5L, an ORACLE_HOME on a filesystem mounted with "cio" option is not supported.
    Such a configuration will cause, installation, relinking and other unexpected problems.
    Solution
    Disable the CIO option on the filesystem.
    References
    NOTE:257338.1 - Direct I/O (DIO) and Concurrent I/O (CIO) on AIX 5L
    Hope this helps.
    Regards,
    Deepak Kori

  • Unable to boot bankapp servers with Oracle 8.1.7 in windows2000

    Hello,I tried to run bankapp examples with oracle 8.1.7 in windows2000. But when
    I booted the servers using tmboot, there are some errors.(1)I used the following
    RM entries:Oracle_XA;xaosw;D:\Oracle\Ora81\precomp\lib\msvc\oraSQL8.lib D:\Oracle\Ora81\precomp\lib\msvc\oraSQX8.lib
    D:\Oracle\Ora81\RDBMS\xa\ORAXA8.lib (2)The OPENINFO string in the ubbshm file
    is:DEFAULT:TMSNAME=TMS_ORA TMSCOUNT=2 LMID=SITE1
    BANKB1     GRPNO=1 OPENINFO="Oracle_XA:Oracle_XA+Acc=P/scott/tiger+SesTm=100+LogDir=.+MaxCur=5"(3)the
    follow is the error message when I booted the servers:
    .. 174841.GLOBALDB!BALC.852.2572.0: 07-26-2001: Tuxedo Version 8.0 32-bit Windows.
    174841.GLOBALDB!BALC.852.2572.0: LIBTUX_CAT:262: INFO: Standard main starting
    174841.GLOBALDB!BALC.852.2572.0: LIBTUX_CAT:466: ERROR: tpopen TPERMERR xa_open
    returned XAER_RMERR
    174841.GLOBALDB!BALC.852.2572.0: tpsvrinit: failed to open database due to
    174841.GLOBALDB!BALC.852.2572.0: tpopen failed, tperrno: 16
    174841.GLOBALDB!BALC.852.2572.0: LIBTUX_CAT:250: ERROR: tpsvrinit() failed
    174841.GLOBALDB!tmboot.480.548.-2: CMDTUX_CAT:825: ERROR: Process BALC at SITE1
    failed with /T tperrno (TPERMERR - resource manager error) ...
    Can anyone help? Thanks a lot!
    Best Regards
    Lily

    I found the answer myself in an earlier post.
    <BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by The Oracle Reports Team:
    Reports 6i will connect to Oracle8i, however you need to connect over Net8 - i.e. on the database side, you need to set up the TNS listener to accept connections, and on the Reports side (which, incidentally, needs to be installed in a separate Oracle_home) you need to configure the tnsnames.ora file to connect to the 'remote' database (since it is in a different oracle_home, to all intents and purposes it may as well be on another machine - it's all considered 'remote').
    Regards
    The Oracle Reports Team http://technet.oracle.com <HR></BLOCKQUOTE>
    null

  • Connecting to different servers with Oracle Rdb

    Hi,
    I have downloaded the Odbc-Driver driver for Rdb and made successful connections to my database server. The name of the server is hardcoded with the odbc administrator. How is it possible to use different servers from asp-script ?
    regards
    Martin

    I have done this, but the Driver (Oracle Rdb Driver, Version 3.00.02.04) do not understand the "DB"-Parameter correctly. The databasename is transferred to the server without the attach-command. So I can only make the connect to a preattached service. This is a known problem by Oracle.

  • How user OID (or other ldap) users with JAAS in my JEE application?

    Hy people,
    I'm developing a JEE application and for secuity I'm using JAAS, but I would like use users from my OID to authenticate. Is it possible? Can someone help me?
    Thanks!!!
    Regards,

    Hi, me again.
    It's possible. Just need configure the realm in Weblogic, configure your JAAS security in application. The realm name must be the same in application and WL.
    Just this.
    Thks!

  • LDAP with oracle as backend

    Hi,
    Can we have ldap server with oracle as back end.
    If it is possible please provide details.
    I have oracle database for users. Now i want to create Ldap client which will read for oracle database.
    But first I need ldap server with oracle as back end.
    How to create server for above using OpenLdap source?
    OR
    Is OID, solution for this?
    I have oracle 11gr2
    Do I need more softwares.?
    Thanks,
    Iliyas nadaf
    Edited by: 956274 on Aug 31, 2012 3:24 AM
    Edited by: 956274 on Aug 31, 2012 3:30 AM

    If you are not going to use an Oracle Identity Management product for the job, then this is perhaps not the correct forum, as this is the forum for Oracle Identity Management, but whether you use OVD or not it is a "virtual directory" that is the functional component you need. There are open source products out there with virtual directory capability, but if you need any more information on these then you need to discuss in their own forums.

  • Very Urgent (Unique user Id scenario with Oracle LDAP and SSO)

    Unique user Id scenario.
    Our oracle LDAP repository is setup for customers to login from different companies. We have a requirement to integrate Oracle LDAP users with Oracle 9iAS portal 3.0.9 Single Sign On. I have two userid with same name on the LDAP from different company. For example userid jsmith from company A and jsmith from company B. Both userid do not exist on Portal Login Server. However, both userids will be created automatically in Login server when LDAP and Portal synchronize user list.
    1. How oracle portal will handle such scenario when portal requires unique userid?
    2. Can I customize portal login screen? For example when they login they can provide userid, passwd and domain name. Where domain name could be company name.
    Let me know if you need more information. Feel free to send direct e-mail also.

    Unique user Id scenario.
    Our oracle LDAP repository is setup for customers to login from different companies. We have a requirement to integrate Oracle LDAP users with Oracle 9iAS portal 3.0.9 Single Sign On. I have two userid with same name on the LDAP from different company. For example userid jsmith from company A and jsmith from company B. Both userid do not exist on Portal Login Server. However, both userids will be created automatically in Login server when LDAP and Portal synchronize user list.
    1. How oracle portal will handle such scenario when portal requires unique userid?
    2. Can I customize portal login screen? For example when they login they can provide userid, passwd and domain name. Where domain name could be company name.
    Let me know if you need more information. Feel free to send direct e-mail also. The scenario you describe is one addressed by Oracle9iAS Portal Release 2's capability to support multi-company hosting. In that scenario, each company has a separate branch of users represented in the directory information tree, as you describe. In this case, both users may have cn=jsmith, but the rest of the DN provides the distinguishing domain, e.g., cn=jsmith,dc=oracle,dc=com and cn=jsmith,dc=microsoft,dc=com.
    Version 3.0.9 also supported multi-company hosting, but it was only an internally used feature and one leveraged by a few early adopters. http://portal.oracle.com is one of our hosted examples of multi-company hosting on 3.0.9.
    In 'hosting' mode, the login screen displays a third entry field, as you describe, allowing the company name to be specified.
    For a supportable configuration, you should use Oracle9iAS Release 2 if you want to employ hosting mode. However, if you need some solution in 3.0.9, you can probably achieve something acceptable by making a slight modification to ssoxoid.pkb. I'm not entirely sure about this, because I'd have to dig into the code (which should be unwrapped, for customization such as this), but you could have users enter their names like 'jsmith@oracle' or 'jsmith@microsoft'. Then, within the ssoxldap.pkb authenticate_user function, you'd need to have the company name added to the base search base before doing the search. Then, once authenticated, the SSO server and Portal would create shadow entries which are unique 'jsmith@oracle', 'jsmith@microsoft'.
    Like I say, I'm not sure if the structure of the ssoxldap.pkb file will entirely support this, but that's your best bet until you get Release 2. There will be a 'Multi-Company Hosting Cookbook' provided with Release 2 that will provide the necessary supplemental information to activate hosting mode. You should understand that setting up hosting mode takes a bit more administration than the default single company mode.
    If your portal has already been running a while without the @company names then there will also be the issue of getting all the accounts already created moved over to the @company names.

  • Can LAUTHSVR be used with non WebLogic LDAP servers?

    Is it possible to use LAUTHSVR with other LDAP servers like MS Active Directory?

    Martin,
    LAUTHSVR currently does not support ActiveDirectory. BEA Product Management
    is aware that some customers would like to use alternate LDAP servers and a
    future release of Tuxedo may or may not contain enhancements in this area.
    With present releases of Tuxedo, it is possible for an application to modify
    the $TUXDIR/lib/AUTHSVR.c source to write whatever sort of authorization
    server is desired, but the application will need to handle interactions with
    the ActiveDirectory LDAP server themselves if this approach is followed.
    <Martin Borgman> wrote in message news:[email protected]..
    Is it possible to use LAUTHSVR with other LDAP servers like MS ActiveDirectory?

  • Multiple LDAP Servers in Fusion Middleware (OBIEE 11g)

    Hello,
    I have a question, regarding integration of multiple LDAP servers with single Weblogic Server of Fusion Middleware (OBIEE 11g). We are currently using OBIEE 10g. We are on verge of migrating to 11g. However, I have a question regarding the LDAP server.
    Our two applications run on two distinct LDAP servers. The plan is to provide a single sign on link for OBIEE 11g reports to the end users and depending on what application they are using, they must be authenticated against the respective LDAP server.
    So, my question, is it possible to Integrate two different LDAP servers in the Weblogic of Fusion Middleware (OBIEE 11g). If so, what would be the steps. Any helpful document will also be appreciated.
    Thank you,
    Chandu.

    Yes, you can configure multiple authentication providers one by one as you generally do.
    When you configure multiple Authentication providers, use the JAAS Control Flag for each provider to control how the Authentication providers are used in the login sequence. You can set the JAAS Control Flag in the WebLogic Administration Console.
    REQUIRED—The Authentication provider is always called, and the user must always pass its authentication test. If authentication succeeds or fails, authentication still continues down the list of providers.
    REQUISITE—The user is required to pass the authentication test of the Authentication provider. If the user passes the authentication test of this Authentication provider, subsequent providers are executed but can fail (except for Authentication providers with the JAAS Control Flag set to REQUIRED).
    SUFFICIENT—The user is not required to pass the authentication test of the Authentication provider. If authentication succeeds, no subsequent Authentication providers are executed. If authentication fails, authentication continues down the list of providers.
    OPTIONAL—The user is allowed to pass or fail the authentication test of this Authentication provider. However, if all Authentication providers configured in a security realm have the JAAS Control Flag set to OPTIONAL, the user must pass the authentication test of one of the configured providers.
    refer - http://docs.oracle.com/cd/E13222_01/wls/docs92/secmanage/atn.html
    Regards
    Mukesh Negi
    http://weblogicserveradministration.blogspot.in/

  • Multiple LDAP Servers

    Is it possible to configure and use two or more LDAP servers to authenticate OBIEE users? We have users with logins in two different domains that need to log in to our OBI servers.

    Yes, It is.
    Just list out all the LDAP servers with domain identifiers.
    then In your authentication initialization block add all the LDAP servers. So the BI Server will authenticate against each server until it finds a match. or based on domain identifier it will go to the correspondent LDAP server.
    - Madan

  • CSS11501 load-balancing SMTP and LDAP servers

    Can anybody provide me with samples of configuration to load-balance SMTP & LDAP servers with CSS ? I feer having the same problem as with FTP when the session is initiated from the server side and that we have to make some special adds-on to the config ?

    Load balancing should work fine on the CSS. I am sure that there is some confiugaration issue. Can you post the configuration so that we can check where the problem is?

Maybe you are looking for