Register oracle DB with OUD for EUS

My goal is to Enable Kerberos authentication to an oracle database using OUD as a proxy to Active Directory. When I attempt to register the DB with OUD 11.1.2.2.0. I get the following error in the access logs.
[19/Feb/2015:09:11:02 -0500] ADD RES conn=26 op=2 msgID=3 result=65 message="Entry cn=wolfe,cn=OracleContext violates the Directory Server schema configuration because it includes attribute orclAci which is not allowed by any of the objectclasses defined in that entry" etime=2
So it seems there is an issue with the orclAci attribute. I checked the schema through ODSM and I don't see it listed in the schema.
I am hoping Sylvain Duloutre-Oracle could help with the problem.

Hello,
You should use the cn=oracleContext,<your OUD suffix> during DB registration, not cn=OracleContext.
cn=OracleContext is populated when OUD is configured for EUS support howveer all the other EUS-related configuration objects must be created in
the cn=oracleContext associated with the OUD suffix configured for EUS.
Sylvain
Please mark the response as helpful or correct when appropriate to make it easier for others to find it

Similar Messages

  • Oracle Reports with graphics for Oracle App R11i 11.5.9 ??

    Hii
    Can i develop Oracle Reports with Graphics ( basic header,footer,logo ) and register it with Oracle Apps R11i 11.5.9 and be able to view it as an end user.
    If yes then how ?
    Regards
    Fahad Hameed

    Hii Guys
    I've developed a report with a basic Header.BMP file and it runs fine on local.
    How will it run on Oracle Apps is the question that i need to find answers to .
    Regards
    Fahad Hameed

  • How can I register a number with iMessage for my iPad2?

    I've got a 3G card with a mobile phone number. How can I register this number with iMessage?

    Good afternoon;
    So to confirm your posting,
    lllaass wrote:
    If it is a number/email address yu are calling:
    - Is it entered in a contact in your Contact app.
    - Does the person have the number/email address registered as their messaging number/emai addrrss.
    the other person needs to register thier information?

  • Register Oracle Streams with OID

    I'm trying to setup an Oracle Streams environment that registers queues with OID. I have the db registered, and set global_toppic_enabled=true. DB is in archivemode. When I try to setup a queue with:
    BEGIN
    DBMS_STREAMS_ADM.SET_UP_QUEUE(
    queue_table => 'STREAMS_QUEUE_TABLE',
    queue_name => 'STREAMS_QUEUE',
    queue_user => 'STRMADMIN');
    END;
    I get
    Error report:
    ORA-00600: internal error code, arguments: [kcbgtcr_5], [52583], [4], [0], [], [], [], []
    ORA-06512: at "SYS.DBMS_STREAMS_ADM", line 739
    ORA-06512: at line 2
    00600. 00000 - "internal error code, arguments: [%s], [%s], [%s], [%s], [%s], [%s], [%s], [%s]"
    *Cause:    This is the generic internal error number for Oracle program
    exceptions.     This indicates that a process has encountered an
    exceptional condition.
    *Action:   Report as a bug - the first argument is the internal error number
    Has anyone run into this? I searched metalink, but couldn't find anything. I'm running 10.2.0.1 on Windows 2K.
    Thanks in advance.

    I never use streams with OID but check Bug 4996133 - OERI[kcbgtcr_5] updating an IOT in RAC environment.
    I would consider to upgrade db to 10.2.0.3 - it is first really stable release of 10gR2
    Regards,
    Serge

  • Integrating Oracle Applications with Siteminder for SSO.

    We currently have a Oracle Apps implementations with Oracle 9iAS as Application server. We are planning to integrate it in SSO using Netegrity Siteminder.
    Please let me know your thoughts on the following
    1) Additional softwares or patches needed to be applied at Oracle Application Server level before integrating with Siteminder. Do we need to install Oracle SSO seprately or does it come as part of Oracle 9iAS.
    2) Also how will we implement SSO using siteminder without OID.
    Any documents on it will help.

    The Netegrity Siteminder Webagent will authenticate to some third party, probably the corporate LDAP. Using Oracle SSO (OSSO) is required and a java plugin needs to be customized. See:
    Oracle® Application Server Single Sign-On Administrator's Guide
    10g Release 2 (10.1.2) < I know different version but doesn't matter
    B14078-02
    Specifically Chapter - 13 Integrating with Third-Party Access Management Systems. That is a minor task.
    Loading OID is a prerequisite and needs to contain the users that will need access to the protected resources in the environment. If it's a small amount of users, manually maintaining OID may not be a big deal utilizing OIDDAS but if it is a large amount, then this effort is a big deal. Big deal meaning a load utilizing the bulkload utility and a custom job that syncronizes the "Corporate LDAP" with OID. Mapping is important. External dependancy with the "Corporate LDAP" folks.
    Another couple of important things to consider:
    1. The seeded users in OID, such as orcladmin will most likely not be in the "Corporate LDAP" so once Netegrity Simplified Sign On (SSO) comes into play, those users are locked out. Orcladmin is a superuser in OIDDAS. For that reason, server administrators or DBA's that are in OID need to be granted OIDDAS privileges prior to enabling the Netegrity agent to prevent being locked out of that important but sensative tool. Disabling and re-enabling SSO is as simple as editing 2 config files and bouncing a few things though.
    2. The OIDDAS Password lockout policy will start locking users after 60 days with no warning unless changed. If oidadmin gets locked, the fix is Note:251354.1. Very important to change the policy since it will be handled by the "Corporate LDAP". Note:251354.1 covers this. Basically using the oidadmin utility, change the "Password Expiry Time" from the default 5184000 to zero "0" which turn off the policy.
    The realms that should be protected on the Netegrity policy server are both infrastructure. 7777/oiddas and 7777/sso need to be protected realms on the policy server. If you have a protected application going to mid-tier applications like 7778/discoverer/viewer, they get redirected to the infrastructure 7777/sso because if the directive in mod_osso.conf. Forms will be protected by the 7777/sso realm as well. On the Netegrity Policy Server, unprotected sub-realms can be created under protected realms.
    The custom java plugin tells Oracle to trust the "Corporate LDAP" for authentication but authorization can still be performed within OID.
    This all sounds difficult but it is really simple. The only part than can get difficult and time consuming is the OID load. Hopefully you get Siteminder DAS access to administer your realms on the Policy server.
    Hope this helps! - Ron

  • Oracle compress with option FOR OLTP

    Hi
    I'm trying out compression on oracle but for unknown reason i cant use option "for oltp" (se below)
    any ideas  ?
    SQL> create table ct(x int) compr for oltp
      2  ;
    create table ct(x int) compr for oltp
    ERROR at line 1:
    ORA-00922: missing or invalid option
    SQL> create table ct(x int) compress;
    Table created.
    SQL> drop table ct
      2  ;
    Table dropped.

    There is no compr keyword, it's compress
    SQL> create table ct(x int) compr for oltp;
    create table ct(x int) compr for oltp
    ERROR at line 1:
    ORA-00922: missing or invalid option
    SQL> create table ct(x int) compress for oltp;
    Table created.
    Cheers Michael

  • SQLLoader issues of Oracle RAC with ASM

    One of our client wants to use Oracle RAC with ASM for our application, i just want to know if there would be any two-phased commit transactions and SQL*Loader issues in ASM.
    Database is Oracle 10g

    ASM works only at storage layer and has nothing to do with:
    - distributed transactions
    - client executable that connects to database instance: SQL*Loader, SQL*Plus, etc.
    RAC has also nothing to do with distributed transactions: a RAC database is a single database with multiple instances but still a single database; there is no need to use distributed transactions because you have a RAC database.
    Edited by: P. Forstmann on 24 févr. 2011 13:27
    Edited by: P. Forstmann on 24 févr. 2011 13:31

  • Problem with CD-Rom Mount point ( Oracle 8.1.5 for Linux )

    I try to create database using dbassist ( copy from CD method
    But I receive error message about "Can not detect CD-ROM'.
    Where should I use as my CD-Rom muont point ?
    null

    Mubashir (guest) wrote:
    : End of June? In the mean time we got to deal with older
    version
    : that you have to go through an 84 process long install
    procedure
    : to get working. Life stinks.
    : Mubashir
    : Michael (guest) wrote:
    : : Hi Vladimir,
    : : the new shipping announcement for Oracle 8i for Linux is now
    : end
    : : of June. When Oracle 8i on Linux is available, I'm sure you
    can
    : : download it from technet.
    : : Stay tuned.
    : : Best regards Michael
    : : Vladimir Borkovkin (guest) wrote:
    : : : HI,
    : : : Oracle promised that shipping of Oracle 8.1.5 for Linux
    will
    : : : begin last week of May. It is neary middle of June, but we
    : have
    : : : no CD shipping. Fathermore, there is no information abaut
    : delay
    : : : time.
    : : : Best regards,
    : : : Vladimir
    null

  • Best practice for integrating oracle atg with external web service

    Hi All
    What is the best practice for integrating oracle atg with external web service? Is it using integration repository or calling the web service directly from the java class using a WS client?
    With Thanks & Regards
    Abhishek

    Using Integration Repository might cause performance overhead based on the operation you are doing, I have never used Integration Repository for 3rd Party integration therefore I am not able to make any comment on this.
    Calling directly as a Java Client is an easy approach and you can use ATG component framework to support that by making the endpoint, security credentials etc as configurable properties.
    Cheers
    R
    Edited by: Rajeev_R on Apr 29, 2013 3:49 AM

  • Setting isolation level with JDriver for Oracle/XA

    edocs (http://e-docs.bea.com/wls/docs70/oracle/trxjdbcx.html#1080746) states that,
    if using jDriver for Oracle/XA you can not set the transaction isolation level
    for a transaction and that 'Transactions use the transaction isolation level set
    on the connection or the default transaction isolation level for the database'.
    Does this mean that you shouldn't try to set it programatically (fair enough)
    or that you can't set it in the weblogic deployment descriptor either? Also anybody
    got any idea what the default is likely to be if you are using an Oracle 9iR2
    database? Is this determined by some database setting?

    IJ wrote:
    edocs (http://e-docs.bea.com/wls/docs70/oracle/trxjdbcx.html#1080746) states that,
    if using jDriver for Oracle/XA you can not set the transaction isolation level
    for a transaction and that 'Transactions use the transaction isolation level set
    on the connection or the default transaction isolation level for the database'.
    Does this mean that you shouldn't try to set it programatically (fair enough)
    or that you can't set it in the weblogic deployment descriptor either? Also anybody
    got any idea what the default is likely to be if you are using an Oracle 9iR2
    database? Is this determined by some database setting?The system should honor the setting defined in the deployment descriptor,
    however, for oracle it may not be helpful to change it. Oracle provides two
    isolation levels. The default is always READ_COMMITTED. The other
    setting is SERIALIZABLE, but this hurts performance, and is also problematic
    in the way oracle implements it. For instance, even if you set SERIALIZABLE,
    oracle will not lock read data. It will allow other transactions to read and/or
    alter data trhat another ongoing SERIALIZABLE transaction has read. The
    only way to really lock read data in oracle is to issue oracle-specific SQL in
    your select: "SELECT ..... FOR UPDATE".
    All in all, you should collect a strong case for why you can't proceed with
    READ_COMMITTED first. Then you should research oracle's recommendations
    (and their problem record) with SERIALIZABLE.
    Joe Weinstein at BEA

  • Oracle RAC + Clusterware and another Cluster with Clusterware for SAP

    Hi,
    I have some questions about implementation of Oracle RAC and Clusterware with SAP
    For exemple, an architecture with 4 servers ( 2 real and 2 vritual ).
    I would like to know if i can do this
    2 servers for the first cluster.
    First cluster is with Clusterware and Oracle RAC
    This is for all the SAP Oracle databases environment
    I think there is no problem here.
    Now, with 2 others servers il would like to make another cluster (with also clusterware ) for SAP Central services (SCS) and enque replication server (ERS)
    Because all architecture is for only one SAP environment with separate services.
    1 for Database (cluster 1)
    1 for Central services ( cluster 2, virtual machine )
    1 for Dialogue Instance (no cluster)
    To be clear, the second cluster is to make HA of central services SAP (SCS and ERS )
    My question 2 are :
    Is it a good job to do this ? or there is anything wrong ?
    Do i have to install antoher clusterware for this 2 servers or i have to make anything with the existing clusterware + oracle RAC ??
    Thank you very much for you help
    Edited by: user12395221 on 29 déc. 2009 15:36

    Hi Givre,
    have you checked: Providing High Availability for SAP Resources (http://www.oracle.com/technology/products/database/clusterware/pdf/sap-availability-on-rac-twp.pdf) available on otn.oracle.com/clusterware? Not being an SAP expert myself, I still think, this paper describes the configuration - at least partially - that you are trying to set up.
    Just an idea. Thanks,
    Markus

  • JSP demo PTS included with Oracle 9i Developer Release for Mac not working

    Hello all, please pardon my ignorance, but I am an Oracle DBA not a JSP programmer.
    I have installed Oracle 9i developer release for Mac OSX and it included a demo application in JSP called pts.
    I followed all the instruction and it still doesn't seem to work.
    When I try to login to the application I get the following exception:
    exception
    org.apache.jasper.JasperException: Unable to compile class for JSP
    An error occurred at line: 3 in the jsp file: /oradev/pts/solmktinit.inc
    Generated servlet error:
    [javac] Since fork is true, ignoring compiler setting.
    [javac] Compiling 1 source file
    [javac] Since fork is true, ignoring compiler setting.
    [javac] /usr/local/jakarta-tomcat-4.1.24/work/Standalone/localhost/_/oradev/pts/login_jsp.java:7: cannot resolve symbol
    [javac] symbol : class DBAccess
    [javac] location: package pts
    [javac] import oradev.pts.DBAccess;
    I'm not sure what this means or how to fix it. I'm sure it's something simple like modifying my classpath or something, but, as I said, I don't know where to begin.
    Any assistance or suggestions would be greatly appreciated.

    Can't you just use the 10g client ?
    I have not tested the 9i dev. with oci calls but I would not be surprised if you try this on tiger. That won't work AFAIK.
    regards,
    Ronald.
    http://homepage.mac.com/ik_zelf/oracle

  • I just purchased 2 ipod touch for my kidz.  and registered them both with my email.  I didn't know every text message I receive, they too would get on their IPod Touch.  HOw do I change this? And do I need to contact a Representative to add them

    i just purchased 2 ipod touch for my kidz (9 & 10 yr. old) .  and registered them both with my email.  I didn't know every text message I receive, they too would get on their IPod Touch.  HOw do I change this? And do I need to contact a Representative to add their own emails....?

    Can you connect to a wifi source on the device? Enable wifi in settings on the device itself. If you don't have wifi at home, there may be a local hotspot you can use for this.
    The reason this happens is carriers don't want people downloading huge files that would slow their network as well as eat up your data plan.

  • Unable to connect to my Oracle Database with Microsoft's ODBC for Oracle driver

    I am unable to connect to my Oracle Database with Microsoft's ODBC for Oracle driver vers.2.573.4202.00 on a Win98 computer.
    First, I create a "Net Service Name" in order for the ODBC Driver to find the Oracle server. I then created a System DSN in the ODBC Data Source Administrator and assigned the "Net Server Name" as the server in the "Microsoft ODBC for Oracle Setup". But when I test this DSN with Oracle's provided "Oracle ODBC 32Bit Test vers.2.5.3.1.0" I get an error:
    SQLSTATE: NA000
    Native Error Code:0
    Driver Message:[Microsoft][ODBC driver for Oracle][Oracle]
    This error occurred on all three Win98 computers I have tried. It does however, seem to work fine on WinNT 4.0, and believe it or not, on the two Win95 computers I have tried.
    Does anyone have any fixes, recomendations, or advice?
    Thank you,
    Eric Edwards
    null

    Why are yu not using the Oracle ODBC driver - these can be downloaded from OTN.
    Have you set up a tnsnames.ora entry for the Oracle database you want to connect to? Does this name have a domain name added to it? Check %ORACLE_HOME%\network\admin\tnsnames.ora for the service name. If it is a name of the form :
    name.domain.subdomain
    then you should try using this full name when configuring the ODBC data source.
    null

  • Installing Oracle Database with ASM on Oracle VM for SPARC

    We're installing Solaris 11 and Oracle VM for SPARC so we can install Oracle Database with ASM. There is a requirement when creating the database that the raw disk have an owner that is the same as the database. Everytime we try to change the owner it will always show that the owner is root.
    Any ideas?

    Hi
    Please let me know from where you are allocating ASM raw disks for the guest domain.
    i hope you are changing the disk permissions using chown -R
    Also confirm the permission using command # ls -IL /dev/rdsk
    Regards
    AB

Maybe you are looking for

  • Unable to update Logical Delete field in AS400

    hi all, We have an ESB process that polls for data in AS400 DB and transfers this data into an Oracle DB. This polling is based on Logical Delete. The data transferred is in the range of some lakhs of records. So we are sending around 5000 records pe

  • Clearing the eprint queue after error

    We sent two print jobs to eprint and got an email error message that the printer was not connected. We discovered the IP address was missing and traced that to the cable being disconnected accidentally. That is all cleared now and in the process of t

  • How to handle long running Processes in J2EE

    Hi all, we want to design something like a process engine on our application server. It should be possible to start processes asynchronous, so we think what we need is a message driven bean to start processes. The problem is that there are different

  • IPhone will not sync iTunes and iPhoto

    Just bought an iPhone a couple weeks ago. No problems transferring (sync) iTunes and iPhoto (and everything else) on day 1. Now looking to sync a second time and no luck. When I connect iPhone to my MacBookPro, iTunes and iPhoto automatically open bu

  • Macbook won't boot up - grey screen only

    Hi, I have a core duo MacBook from summer 2007. All of a sudden the MacBook won't boot up. The battery is fully charged and AC adapter plugged in (same symptoms if not plugged in). The following occurs upon pressing the power button: 1) Start-up chim