PROBLEMS INTEGRATING OID PLUG-IN FRAMEWORK SOLUTION WITH SSO SERVER

Question

I wrote a OID plug-in to authenticated against an external
password store as suggested in chapter 27 of the Oracle Internet
Directory Administer's Guide., release 9.0.2.
The function works if I run an ldap-bind from the command, the password
is checked against the external password store, and copied into the OID.
The function doesn't work from the SSO server, It will authenticate against
the password contained in the OID rather than the password contained in the
external password store, if there is a difference.
I think the reason for this is probably that SSO uses indirect (proxy)
access to the password store instead of Direct Authentication, as
described in chapter 11 of the OID administrators guide.
Does anyone know if it is possible to change the
authentication method of the SSO server from
indirect to direct?
Thanks,

Answer 1

-cont.
orclPluginName=OID_WSL_PLUGIN
orclPluginType=operational
orclPluginTiming=when
orclPluginLDAPOperation=ldapcompare
orclPluginEnable=1
orclPluginSubscriberDNList=cn=users,dc=localhost,dc=com;dc=localhost,dc=com;o=localhost,dc=com;
orclPluginVersion=1.0.1
orclPluginIsReplace=1
cn=when_compare_replace
orclPluginKind=PLSQL
Using the ldapadd command-line tool:
ldapadd –p 4031 –h localhost –D cn=orcladmin –w security007 –v –f when_compare_replace.ldif
and restart the Oracle Internet Directory server and AS too.
4)and tested the plugin with login requests to the OID server and made some calls using ldapcompare tool like:
ldapcompare -p 4031 -h localhost -D cn=orcladmin -w security9 -b "cn=userA,cn=users,dc=localhost,dc=com"
-a title -v manager
but the log table was never filled with the parameter values.
Does this framework stuff ever work? Is it possible to replace the password comparison of OID?????
Is my ldif file correct? Is it the way it should deploy/register? Can you tell my were i am wrong? any help is greatly appreciated...