Reading and Updating MS Active Directory (AD) through Oracle APEX

Hi All,
Has anyone ever read and update the AD components using Oracle APEX?
I know we can have APEX build in LDAP Authentication, but that is for the Authentication, what about reading other attributes like phone no., department, office etc. from MS AD; and about updating the same information.
Is Oracle Identity Management the only solution?
Windows 2008 R2 Server provide SOAP based AD web services (ADWS), has anyone used that with APEX (11g R2 with EPG configuration)?
Is it possible to have a C# code (through external procedure) which could read and write MS AD; can we use only "C" code in oracle as external proc or C# as well?
Any pointers would be of great help.
Thanks,
Ash

Ash,
It's possible to query data from the LDAP server, but it's not as easy as you'd like. I don't know about updating, but fopr querying, you're looking at creating a package using DBMS_LDAP and a pipelined function to get the data. Here's one example from a quick google search; there are others.
One thing to be aware of that burned me: the default LDAP setting limits requests to 1,000 records. If your search gives more than that, you get an error (and no data at all). So you may find yourself having to use unions to get the full data, which slows things down a bit.
-David

Similar Messages

My iphone 3GS needs updating but when i plug it into itunes it reads and said the activation is out of time and the phone keeps going off?

my iphone 3GS needs updating but when i plug it into itunes it reads and said the activation is out of time and the phone keeps going off?

jadekinsey wrote:
when i plug it into itunes it reads and said the activation is out of time
No such message occurs.
Are you trying to state that it says "Unable to activate"?
If so, this typically indicates the device has been hacked or jailbroken. If that is the case, no support can be provided via these forums.

Exchange Distribution Groups not updating in Active Directory

Hi all,
I'm not sure if this is intended behaviour or not, but any distribution group we create in Exchange ECP does not update in Active Directory Users and Computers. Any particular reason why?
For example, we have a user group called "Managers" and we've recently created a new group called Area Managers. We've since moved some people out of Managers and put them in Area Managers, however in Active Directory all we see is the Managers
group with all the old managers in there. The OU for the Area Managers group has been set correctly.
Best regards,
Please remember to mark the replies as helpful if they help, or as answers if they answer your question. Please also unmark the answers if they provide no help.
Zach Roberts
Independent Microsoft Community Support Advisor
Disclaimer: I don't work for Microsoft. Any advice given is my own and does not represent Microsoft.
Follow me on Twitter:
@WindowsZach

Hi,
Please run the following command to confirm the members of two groups.
Get-DistributionGroupMember -Identity Area Managers
Get-DistributionGroupMember -Identity Managers
I also suggest to remove the member from “Managers” in AD then check the members of “Managers” in EAC to check this problem.
Best Regards.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Lynn-Li
TechNet Community Support

How to read and update the value of property file

Hi,
I am not able read the values from property file.
Please tell me how to read and update the values from property file using Properties class
This is my property file : - Config.properties its located in D:\newfolder
Values
SMTP = localhost
Now i need to change the value of the SMTP
New value :
SMTP =10.60.1.9
Pls Help me
Thanks
Merlin Rosina,

Post a small (<1 page) example program that forum members can copy and run that demonstrates your problem.

Timeout error while reading and updating in batches in a single transaction

Problem:-
In a transaction I do read and update to the database in batches. First batch it runs fine and for second batch it get hanged at
sqlCommand.ExecuteReader(). The following is not my complete code but required bits of it which will give more information about the problem. At the end of this post please find the error log. Please help me.
My guess:-
The problem i see here is with the locks acquired while reading and update still remain when it comes for the second batch which is blocking the next read. But could not find a way to solve it.
Get connection and open it.
Begin Transaction.
sqlUpdateTransaction = sqlUpdateConnection.BeginTransaction(String.Format("UpdateUsageDetailTransaction{0}", storageClassId))
Get application lock.
GetApplock
const String sqlText = @"DECLARE @result int EXEC @result = sp_getapplock Resource=@resourceName,@LockMode='Exclusive',@LockOwner='Transaction',@LockTimeout=@timeout select @result";
using (SqlCommand sqlCommand = sqlTransaction.Connection.CreateCommand())
sqlCommand.CommandText = sqlText;
sqlCommand.Parameters.AddWithValue("@resourceName", resourceName);
sqlCommand.Parameters.AddWithValue("@timeout", milliSecondsTimeout);
sqlCommand.CommandTimeout = secondsTimeout;
sqlCommand.Transaction = sqlTransaction;
Int32 lockResult = (Int32) sqlCommand.ExecuteScalar();
Seek and read the range of records.
using (var sqlReadConnection = new SqlConnection(_connectionString))
sqlReadConnection.Open();
SqlTransaction sqlTransaction = _sqlUpdateTransaction;
_cdrList = CdrOps.FetchByrecordsIdRange(_yearMonth, firstSkid, firstSkid + count - 1, sqlReadConnection);
sqlReadConnection.Close();
return _cdrList.Count > 0;
static public Dictionary FetchByrecordsIdRange(Int32 yearMonth, Int64 startCdrId, Int64 endCdrId, SqlConnection sqlConnection)
Dictionary cdrList = new Dictionary();
using (SqlCommand sqlCommand = sqlConnection.CreateCommand())
sqlCommand.CommandText = "EXEC P_GetCDRData @yearMonth, @startCdrId, @endCdrID";
sqlCommand.Parameters.AddWithValue("@yearMonth", yearMonth);
sqlCommand.Parameters.AddWithValue("@startCdrId", startCdrId);
sqlCommand.Parameters.AddWithValue("@endCdrID", endCdrId);
sqlCommand.CommandTimeout = DbOps.TwoHourTimeoutValue;
using (SqlDataReader sqlDataReader = sqlCommand.ExecuteReader())
FetchrecordPieces(sqlDataReader, cdrList);
return cdrList;
Update the records to the list by using a loop Go and check if the number of records read is equal to the batch size then write and flush.
update()
_tollUpdatedList.Add((Toll) record);
_legacyUpdateCount++;
Dispose.
Dipose()
if (_sqlUpdateTransaction != null && _sqlUpdateTransaction.Connection != null)
sqlUpdateTransaction.Rollback(String.Format("UpdateUsageDetailTransaction{0}", _storageClassId));
_sqlUpdateTransaction.Dispose();
_sqlUpdateTransaction = null;
Commit.
commit()
if(_sqlUpdateTransaction != null)
_sqlUpdateTransaction.Commit();
_sqlUpdateTransaction.Dispose();
_sqlUpdateTransaction = null;
Error log.
Error: [0x80004005] MonthlyFileDb::Seek - Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding.

Thank you, I used beta_lockinfo and observed the following
spid=59/0/2
command = SELECT
appl=.Net SqlClient Data Provider
hostprc= 3640
dbname = DEV_ECAP_P_CAP_ENT_CMN
prcstatus= SUSPENDED
spid_ =
59/0/2
blklvl = 1
blkby = 55
rsctype =
locktype =
lstatus =
ownertype =
rscsubtype =
waittime = 785.139
waittype = LCK_M_IS
spid__ = 59/0/2
nstlvl = 3
inputbuffer = (@yearMonth int,@startCdrId bigint,@endCdrID bigint)EXEC P_GetCDRData @yearMonth, @startCdrId, @endCdrID
current_sp = DEV_ECAP_P_CAP_ENT_CMN.dbo.P_GetCDRData
spid=55
command = NULL
appl=.Net SqlClient Data Provider
hostprc= 3640
dbname = DEV_ECAP_P_CAP_ENT_CMN
prcstatus= sleeping
spid_ = 55
blklvl = !!
blkby =
rsctype = APPLICATION
locktype = X
lstatus = grant
ownertype = transaction
rscsubtype =
waittime =
waittype =
spid__ = 55
nstlvl =
inputbuffer =UPDATE UsgDetailCommon SET RunId = t2.RunId FROM UsgDetailCommon t1 INNER JOIN #UsgDetailCommon_Update t2 ON t1.YearMonth = t2.YearMonth AND t1.CdrId = t2.CdrId ;DROP TABLE #UsgDetailCommon_Update
current_sp =
But what is the solution for this...? I am googling and I found similar post but with no solution, here it is not allowing me to post html link

Creating a external content type for Read and Update data from two tables in sqlserver using sharepoint designer

Hi
how to create a external content type for Read and Update data from two tables in sqlserver using sharepoint designer 2010
i created a bcs service using centraladministration site
i have two tables in sqlserver
1)Employee
-empno
-firstname
-lastname
2)EmpDepartment
-empno
-deptno
-location
i want to just create a list to display employee details from two tables
empid firstname deptno location
and same time update in two tables
adil

When I try to create an external content type based on a view (AdventureWorks2012.vSalesPerson) - I can display the data in an external list. When I attempt to edit it, I get an error:
External List fails when attached to a SQL view
Sorry, something went wrong
Failed to update a list item for this external list based on the Entity (External Content Type) 'SalesForce' in EntityNamespace 'http://xxxxxxxx'. Details: The query against the database caused an error.
I can edit the view in SQL Manager, so it seems strange that it fails.
Any advice would be greatly GREATLY appreciated.
Thanks,
Randy

Could we have same name's for User and Groups in Active directory

When iam trying to create a user name " Logistics " under a OU, I am getting a error
"The pre-windows 2000 logon name you have chosen is already in use in this domain. Choose aother pre-windows logon name, and then try again"
We already have a group by the name " Logistics "
Could we have same name's for User and Groups in Active directory?
Thanks in Advance

sAMaccountName attribute is unique. So, the short answer is you cannot.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Can Microsoft active directory integrated with Oracle Applications

Hi,
Can anyone provide me any document on Microsoft Active Directory Integration with Oracle Applications(12.0.6)
Manish

Hi,
It is possible, please refer to the following documents for details.
Note: 376811.1 - Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On
Note: 415007.1 - Oracle Application Server with Oracle E-Business Suite Release 12 FAQ
Regards,
Hussein

Date and Time in Active Directory

How to update date and time from internet in active directory server ?

Hey Hadi.Balaghi,
You do this from the command line by using W32TM command
Example: "w32tm /config /manualpeerlist:ntp1.tpg.com.au /syncfromflags:manual" (it's will be updated from ntp1.tpg.com.au server time).
I've provided you a link that explains in simple amazing on any subject time update, it also presents an example.
I recommend you watch the video and learn
https://www.youtube.com/watch?v=-NCheMw851M
Please Mark This As Answer if it helps to solve the issue
Tzuri Ben Ezra | My Certifications:
CompTIA A+ ,Microsoft MCP, MCTS, MCSA, MCITP
|
FaceBook: Tzuri FaceBook | vCard:
Tzuri vCard |
Microsoft ID:
Microsoft Transcript
|

Lync on websearch only but updates from active directory are not processed.

Hello,
I use "websearch only" for "addressbookavailability". This is working fine on all client.
I have a problem with changes in active directory. When we change for example "job title" of someone then the old "job title" stays present on lync client. When i do a reset of the client of a new installation the new "job title"
is present.
Although we use "websearch only" for some changes it seems that the local address book of lync is still used.
Does someone know how i can force a lync client to also query active directory for this.
I know that the lync server updates every night but on many clients the local address book is not updated.
Regards

You still can force the Addressbook replication by running update-csuserdatabase and update-csadressbook. I suggest you delete the .slab files from Lync share web folder 0000000\000000 folder and then run above command. that will create brand new set of
files. the delete the sip folder from client PC and then restart the client to force download the local copy. see if that fix your issue.
http://thamaraw.com
Hello,
I'm sure this option will work. But this means that we have to do this on a regulary basis.
Is there no option to "force" lync client to query Active Directory all the time ? Not only for users.

Creating management accounts for protected accounts and groups in Active Directory

I'm following step-by-step instruction for creating management accounts for protected groups that I found in Microsoft book "Best Practise for Securing Active Directory", published april 2013.
What is confusing me is the "Enabling management accounts to modify the membership of protected groups" step. When I use DSACLS command:
Dsacls "CN=AdminSDHolder,CN=System,DC=MyDomain,DC=com"/G
[email protected]:RPWP;member
what I have to type insted of "member".
When I use previous command with simple "member" at the end I dont get this:
Verify that the account has been granted only Read Members and
Write Members permissions on the DA group, and click OK.
My account have flag on all properties.
I hope You understand me.

The last field is for the attribute to delegate. You can read about it here: https://technet.microsoft.com/en-us/library/cc772662%28v=ws.10%29.aspx
You can also refer to this for updating AdminSDHolder container: http://social.technet.microsoft.com/wiki/contents/articles/22331.adminsdholder-protected-groups-and-security-descriptor-propagator.aspx
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

10.4.11 Update with Active directory

Hi All,
I have just done an update of os X Server from 10.4.1 to 10.4.11 and then tried to bind the machine to AD and all went well as far as directory access goes and it says that the machine was bound fine however the AD is unresponsive.
I then tried going from 10.4.10 to 10.4.11 on a workstation and the same issues occurred.
A quick dscl in the command line shows the "Active Directory" directory with my domain inside however no information can be read from the domain container onwards.
Have tried binding from fresh installs and then updating to 10.4.11, also tried binding to 2003 and 2000 Domain controllers.. all to no avail.
Console reports an error on all machines when binding...
DSopenNode(): dsOpenDirNode("/Active Directory/domainname") == -14002
This only effects machines that have been updated to 10.4.11
Wondering if this issue has happened to anyone else and if so, any suggestions......

I have been updating our OS X 10.4 images we use in my school district, and once I install the 10.4.11 update, I can no longer login to Active Directory. unbind and rebind does not help. I have tried installing the update on an image prior to binding and also when it was already bound and have the same issue as soon as I install the update. I have not tried a clan install yet.
One wat to resolve may be to use an older AD plugin from a OS 10.4.10 system

BADI to check and update field in transaction BP through WEB UI

Hi,
I have this requirement to check certain data from BUT000 and based on this update the Search term field in BUT000.
I am using Badi BUPA_GENERAL_UPDATE.
I am also able to retrieve the current value in BUT000 using function module
CALL FUNCTION 'BUPA_GENERAL_CALLBACK'
    TABLES
      et_but000_old = t_but000_old
      et_but000_new = t_but000_new.
My requirement is to update a field in BUT000 in memory.
If I was to use transaction BP in CRM then simply I can modify the value using
ASSIGN ('(SAPLBUD0)MEM_BUT000[] into <Field_symbol>
But the issue is that when called through the WEB UI I cannot access this memory.
Can any one suggest me a Function Module or some method by which I can change the value of BUT000 in memory while saving.
Awaiting your quick suggestions.
Regards,
Taher

Hi Sidd,
I figured out another way to do this.
FIELD-SYMBOLS <fs> TYPE ANY TABLE.
DATA : ws_bus000_i TYPE bus000___i.
FIELD-SYMBOLS <fs2> TYPE bus000___i.
IF sy-tcode = 'BP'.
    ASSIGN ('(SAPLBUD0)MEM_BUT000[]') TO <fs>.
    IF <fs> IS ASSIGNED.
      LOOP AT <fs> ASSIGNING <fs2>.
        IF <fs2> IS ASSIGNED.
          IF <fs2>-partner_guid = ws_but000-partner_guid.
            <fs2>-bu_sort1 = 'BP'.
          ENDIF.
        ENDIF.
      ENDLOOP.
    ENDIF.
    UNASSIGN : <fs>, <fs2>.
ELSEIF sy-tcode IS INITIAL.
    ASSIGN ('(SAPLBUD_MEM)gt_but000_mem[]') TO <fs>.
    IF <fs> IS ASSIGNED.
      LOOP AT <fs> ASSIGNING <fs2>.
        IF <fs2> IS ASSIGNED.
          IF <fs2>-partner_guid = ws_but000-partner_guid.
            <fs2>-bu_sort1 = 'WEB UI'.
          ENDIF.
        ENDIF.
      ENDLOOP.
    ENDIF.
    UNASSIGN : <fs>, <fs2>.
ENDIF.
on debugging I could figure out the program containing the data in the memory.
Before the save I accessed this program and updated the parameter as required.
Also For transaction BP this program is not available but there is another program so there is an if else based on the sy-tcode.
I need to check for other BP transactions as well but as of now this seems good.
Kindly suggest.
Taher.

Oracle 8.1.7 for Unix and Windows 2000 Active Directory

Is it possible to integrate the users and passwords of an Oracle Database running on Solaris with the users and passwords defined in a Windows 2000 Active Directory? What are the requirements and the necesary steps?
I've read the documentation and it shows how to do it if you install Oracle in a Windows 2000 Server, but it does not mention about installing it in any kind of Unix.

You should consider to base your firm security and central user repository on REALLY SECURE and ROBUST product technology. Not on Windows 2000 Active Directory. Win2K AD is known to be slow and insecure. If you have Oracle on Solaris your data is secure and next step is to move user accounts to real user repository. It may be one of well-known LDAP servers. Try to read some materials on CERT Coordination Center (http://www.cert.org) which describe LDAP servers. After this you can choose the server which best suite your needs.

What is the Best Practice for publishing Offline Root CA Cert and CRL to Active Directory?

Hi,
I've read and seen in a few labs different approaches to what is published in Active Directory for a Offline Root CA. I've seen just the Root Cert published to AD as well as the Root Cert and the Root CRL published to AD.
I can understand why the Root Cert is published to AD, but why would the Root CRL need to be published to AD, especially if my Offline Root CA just issues the Cert for my Subordinate Issuing CA? So looking for Best Practices here.
Thanks for your help! SdeDot

On Sun, 22 Feb 2015 18:44:25 +0000, Andrzej Kazmierczak wrote:
Best practice is to publish CRL to 2 alternative paths - LDAP for your internal users to access them on the first place and HTTP as an alternative option to LDAP and as the only option for your external users.
No, the current recommended best practice is to publish to a highly
available HTTP location first (and possibly the only CDP) that is available
both internally and externally. This covers Windows and non-Windows
devices, domain joined and non-domain joined devices and internal and
external devices as well as multi-forest scenarios with no trust between
forests.
Paul Adare - FIM CM MVP

Reading and Updating MS Active Directory (AD) through Oracle APEX

Similar Messages

Maybe you are looking for