Updating Sun LDAP Server through custom create group forms

Hi,
we have requirement whererin we must create a create group form (custom form) and then update the new group details to the Sun LDAP server. After defining the LDAP Resource, how do I proceed in creating the resource object and configuring the same with the 'create group form ' for updating the necessary attributes in LDAP server.

There is no way to perfrom LDAP authentication using our product without a mapped group. I haven't used it in a while but the Sun LDAP mamagement tools were very straight forward, creating users/groups issn't much trouble
First creat the users and groups wherever in the direcotry, then in the group properties you must make the users members of the groups. Map the groups into BO and your done.
If you wanted someone to setup both your LDAP directory and Business Objects typically a 3rd party professional service may be used. For configuring BO you can open a case with the authentication team in support if stuck. You could get some tips as most of our engineers have set up sun a few times for internal testing.
Regards,
Tim

Similar Messages

Module: AppleODClientLDAP - unable to open connection to LDAP server - unable to create connection context

Hi everybody,
I'm running in an urgent problem, because binding to my OpenDirectory got lost. I've lots of "Module: AppleODClientLDAP - unable to open connection to LDAP server - unable to create connection context" messages in the system.log and OD service stoppped running. In the OD-section no server is listed any longer and all buttons are greyed. All network users for sure are not available, but all other services are up. I didn't changed anything to the existing services but started with the netinstall config. I got the following entries in the systemlog
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: server name macminiserver.homenet
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: interface en0: ip 192.168.0.11 mask 255.255.255.0
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: subnets: Failed to convert 'domain_search': Empty array
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: bsdpd: re-reading configuration
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: bsdpd: shadow file size will be set to 48 megabytes
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: bsdpd: age time 00:15:00
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: bsdpd: no NetBoot images found
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: bootpd: NetBoot service turned off
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: DHCP REQUEST [en0]: 1,0:1b:77:36:47:f6 <NB01>
Jun 19 00:35:30 macminiserver.homenet bootpd[95005]: ACK sent NB01 192.168.0.107 pktsize 304
Since these logentries appeared, no network users and groups are available anymore. I'm running OS X ML 10.8.3 and DNS is fine.
Are there any steps to perform to get LDAP working again? With all buttons in the server admin OD section greyed out I even can't setup a new directory.
BR
Jens

I was able to restore the existing server with the automatic OD backup that Server.app creates. When my OD fails to start after a crash and db_recover commands don't work, it's always worked for me to restore the odmaster from a backup using the command:
sudo slapconfig -restoredb /private/var/backups/ServerBackup_OpenDirectoryMaster.sparseimage
I'm careful to keep an independent OD backup with Carbon Copy Cloner and this preflight script.
You can also grab an earlier version of the sparse image ServerBackup_OpenDirectoryMaster.sparseimage from a Time Machine backup. It's also possible to rsync the database files directory from a Time Machine backup.

Advantaged of SUN LDAP Server over OID

Hi all,
Can any body tell me the use of SUN LDAP Server instead of Oracle Directory Server......What all advantages we have to use SUN LDAP Server instead of OID....
Regards
Kumar

If no one tells you can assume there is no advantage, simple.

C# Code that can add user directly to the AD through custom share Point form

Hi
Here is my requirement. Can anyone resolve???
Trying to build a Visual web Part in which system administrator can add user directly to the AD through custom share Point form.
Please help in doing this...

Hi
Use DirectoryEntries.Add Method
https://msdn.microsoft.com/en-us/library/system.directoryservices.directoryentries.add.aspx
Or
www.codeproject.com/Articles/18102/Howto-Almost-Everything-In-Active-Directory-via-C
Or.
www.morgantechspace.com/2013/10/create-new-active-directory-user-in-c.html?m=1
Regards, Rajendra Singh If a post answers your question, please click Mark As Answer on that ost and Vote as Helpful http://sharepointundefind.wordpress.com/

Deleting a Entry in LDAP Server through JNDI

I have modified and created enteries in LDAP Server.But have no idea how to remove or delete a entry(a subcontext).
can anyone help ne out
thanks
murali

Thank you mike.its working.I just missed that method.
I have one more problem.
i am using the octetstring's jdbc-ldap bridge to connect to Eudora LDAP server, but when ever i try to connect to the server we are getting the following error...
javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name 'o=Siquell,c=IN'
even though we have the root dsn i.e "o=Siquell,c=IN". this we can say cause we were able to connect to the same server using JNDI.
Is this because octetstring's jdbc-ldap bridge is not supported by Eudora LDAP server.
Thanks
Murali

Server Admin - Trouble creating groups

Hi,
I'm having issues creating groups after installing Leopard. I open up Server Admin, click the little "lock" symbol, and authenticate using my admin account... everything goes fine so far. But, when I create a new group, I get an error saying I don't have permission, and no group appears... I know I have permission to create new groups so I tried a few more times unsuccessfully. No new groups until I restart Server Admin, then I saw all the Untitled Groups I created without knowing...
Sometimes I can delete them, sometimes I get a permission denied.
Is this a common bug?
Thanks,
Chris

What do the logs have to say about this? specifically /var/log/httpd/error_log
Do you have an index.html file in the directory? If you don't have a valid index file Apache might try to generate a directory listing, which is disabled by default.
Finally, for now, where is the directory you're trying to use? and have you checked the permissions of all the intermediate directories? Apache needs permission to read all the directories to the document, not just the final directory.

How to place file on server through client vie web-forms

We are on 9i application server, which is being used all over the nation through URL. Now is there any way/option to place file on the server through form-web page.
Thanks.

Here's an example:
http://e-ammar.net/Oracle_TIPS/using__webutil_file_transfer.htm

Thread: Passwd not able to updated Centerlize LDAP Server

I have openldap running on solaris 10 x86 server with all system users are migrated on LDAP TREE.!.
I configure client on other solaris 10 x86 server. - ldapclient manual -a defaultsearch=dc=xxxx,dc== ........ like that ( i have tired with setup a proxy agent but it does not work.... )
I can login( SSH and dtlogin) to other solaris 10 server using LDAP user . but while i am try to change password i m getting this problem do i missing anything . I am suspecting about pam.conf configuration.
I tried couple of combinations but not able to get rid of this. Same configuration is working Linux ( as standard changes in system-auth config file...)
==Solaris console===
bash-3.00$ passwd
passwd: Changing password for vipul3
Enter existing login password:
New Password:
Re-enter new Password:
passwd: vipul3 does not exist.
Permission denied
bash-3.00$
========================
Var/adm/message
Apr 30 02:27:30 xxxx passwd[6954]: [ID 574280 user.error] passwdutil: no legal LDAP authentication method configured
Apr 30 02:27:30 xxxx passwd[6954]: [ID 574280 user.error] passwdutil: no legal LDAP authentication method configured
=============================
Regards
Vipul Ramani

Hi alan,
i can login in to solaris box using ldap user but passwd -r ldap does not working... it is giving me ERROR passwd: System error: no ldap password for vipul3.*
strange !! thing is then how user authenticated from LDAP. ???
==========Solaris console output -=================
login as: vipul3
Using keyboard-interactive authentication.
Password:
Last login: Tue May 6 05:42:22 2008 from 192.168.109.232
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
$ bash
bash-3.00$ passwd -r ldap
passwd: Changing password for vipul3
Enter existing login password:
New Password:
Re-enter new Password:
**passwd: System error: no ldap password for vipul3.**
Permission denied
bash-3.00$
==sylog===================================
May 6 05:43:15 XXXX passwd[1189]: [ID 574280 user.error] passwdutil: no legal LDAP authentication method configured
May 6 05:43:15 XXXX passwd[1189]: [ID 574280 user.error] passwdutil: no legal LDAP authentication method configured
============================

Are there any rough processes for Solaris administrator to setup Sun LDAP as nameing server at Sun sparc host? like: 1st: modify /etc/nfsswitch.nfs 2nd: add LDAP server in /etc/hosts. 3rd: ......

Besides, can we install the LDAP server in sparc hosts as nameing system? Can we use Sun LDAP server or iPlanet Directory Server? or need BIND DNS server too?

There is a nice book from Michael Haines and Tom Bialaski: "Solaris and LDAP Naming Services" which contains all you need to configure Directory Server, LDAP, Naming Switch...
Ludovic.

ASA Remote Access Authentication with LDAP Server

Thank you in advance for your help.
I am configuring an ASA to authenticate with a ldap server for ipsec vpn access. My customer has 3 networks that are to be accessed by remote users. However they want to be able to say that one user can get to 2 of the networks and not the 3rd. So basically they want control over what network behind the firewall each user can access. This seems doable from my reading and I had planned to creating a group for each network that needs accessible and either do attribute maps to each group with a separate group created on the ldap server for authentication. Basically a ldap group on the ldap server that will have the users name in the group in order for access. I can restrict access via acl's or filtering to force my group to only be allowed access to a specific network. Here is the problem I am having now.
The ldap server has been created and seems to be working fine. I have created my AAA groups and servers and I have done the ldap test with a test user vpntest and a password on the ldap server. When I run the authentication test from the ADSM or command line I get a good authentication successful message. So I configured a vpn client remotely and attempted to authenticate to this group and it says there is no user by that name. Below is a paste of the debug. The second part is when I did a successful test from the ASDM or CLI and it worked great. The first part is when I attempted from the vpn client. It all looks the same from the search criteria. What am I missing here or does anyone more knowledgeable see anything that I am doing wrong. Can this be done this way or should I try radius. The customer was just adament about using ldap.
extvpnasa5510#
[243] Session Start
[243] New request Session, context 0xd5713fe0, reqType = 1
[243] Fiber started
[243] Creating LDAP context with uri=ldaps://130.18.22.44:636
[243] Connect to LDAP server: ldaps://130.18.22.44:636, status = Successful
[243] supportedLDAPVersion: value = 2
[243] supportedLDAPVersion: value = 3
[243] No Login DN configured for server 130.18.22.44
[243] Binding as administrator
[243] Performing Simple authentication for to 130.18.22.44
[243] LDAP Search:
        Base DN = [ou=employees,o=msues]
        Filter = [uid=vpntest]
        Scope   = [SUBTREE]
[243] User DN = [uid=vpntest,ou=employees,o=msues]
[243] Talking to iPlanet server 130.18.22.44
[243] No results returned for iPlanet global password policy
[243] Fiber exit Tx=386 bytes Rx=414 bytes, status=-1
[243] Session End
extvpnasa5510#
[244] Session Start
[244] New request Session, context 0xd5713fe0, reqType = 1
[244] Fiber started
[244] Creating LDAP context with uri=ldaps://130.18.22.44:636
[244] Connect to LDAP server: ldaps://130.18.22.44:636, status = Successful
[244] supportedLDAPVersion: value = 2
[244] supportedLDAPVersion: value = 3
[244] No Login DN configured for server 130.18.22.44
[244] Binding as administrator
[244] Performing Simple authentication for to 130.18.22.44
[244] LDAP Search:
        Base DN = [ou=employees,o=msues]
        Filter = [uid=vpntest]
        Scope   = [SUBTREE]
[244] User DN = [uid=vpntest,ou=employees,o=msues]
[244] Talking to iPlanet server 130.18.22.44
[244] Binding as user
[244] Performing Simple authentication for vpntest to 130.18.22.44
[244] Processing LDAP response for user vpntest
[244] Authentication successful for vpntest to 130.18.22.44
[244] Retrieved User Attributes:
[244]   sn: value = test user
[244]   givenName: value = vpn
[244]   uid: value = vpntest
[244]   cn: value = vpn test user
[244]   objectClass: value = top
[244]   objectClass: value = person
[244]   objectClass: value = organizationalPerson
[244]   objectClass: value = inetOrgPerson
[244] Fiber exit Tx=284 bytes Rx=414 bytes, status=1
[244] Session End

Hi Larry,
You can map AD group memberships to specific group policies on the ASA, you can find that configuration here:
- http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/91831-mappingsvctovpn.html
Let me know if further assistance is required!
Please proceed to rate and mark as correct the helpful Post!
David Castro,
Regards,

Sun Directory Serve and AIX

I want to Integrate AIX an HPUX in an SUN Ldap Enviroment.
I ve got a SUN LDAP Directory Server 5.2 P4 on Windows2003 Enterprise Server.
My Question: How can I get the Schema LDIF files with the attributes an objektclasses in a LDIF Format to
include it to my LDAP Server. So that i can Integrate Users an logon to my AIX with authenticating by the Sun LDAP Server.
I need only the Schema files with Objectcalsses an Attributes!!!!!

On your integration profile, did you set the debug level to 63? You should have a _____.aud and a _____.trc file in your $ORACLE_HOME/ldap/odi/log directory that will provide more info. Did you start your DIP server (odisrv) with the oidctl command?
You might also look at downloading the "diptester" utility for troubleshooting OID synchronization issues.
- Brian

System is getting hanged while creating Adobe Form Layout

Hello,
I have Adobe Lifecycle Designer and Adobe Document Service Installed on our server, i have created Adobe form interface in transaction SFP and then a new form created with this interface passing the parameter carrid.
While creating from layout, through library section I used Text function, as I drag and drop text in to the layout, system is getting hanged everytime with message 1.275 bytes transferred.
Gurus please help me to understand this error.
Thanks,
Avinash

Get Adobe life cycle designer updated vesrion.
Also check your desktop/laptop if it has good RAM .
Adobe is quite fat application which depend upon ur sys prefomanc.
Hope this will help.
Thanks Dhiraj.

Why doesn't default CREATE USER form show a "Check" Page before submitting

Hi
Interesting question.
When I create a User (using my Customized Create User Form), and I press SAVE, the Form is submitted immediately. There is no "stop-and-check" page, which allows one to review the entries made BEFORE submitting the form itself.
For example : when EDITING or UPDATING a User, and you press "Save", the form is not submitted right away. Instead, a new page opens, where you can review the changes you made, to ensure that they are correct. In fact, at the bottom of this new page, there are 4 standard buttons : SAVE...........RETURN TO EDIT............CANCEL
This is a very good system, because it allows you to check your entries, and make sure they are correct, before pressing SAVE again to submit.
However, the "Create User" form does not have this same arrangement.
Is there any way to customize the Form, so that, when creating a User, and you press SAVE, a "check-page" first shows up (just like when updating/editing a user) ?
Thanks

Hi
Interesting question.
When I create a User (using my Customized Create User Form), and I press SAVE, the Form is submitted immediately. There is no "stop-and-check" page, which allows one to review the entries made BEFORE submitting the form itself.
For example : when EDITING or UPDATING a User, and you press "Save", the form is not submitted right away. Instead, a new page opens, where you can review the changes you made, to ensure that they are correct. In fact, at the bottom of this new page, there are 4 standard buttons : SAVE...........RETURN TO EDIT............CANCEL
This is a very good system, because it allows you to check your entries, and make sure they are correct, before pressing SAVE again to submit.
However, the "Create User" form does not have this same arrangement.
Is there any way to customize the Form, so that, when creating a User, and you press SAVE, a "check-page" first shows up (just like when updating/editing a user) ?
Thanks

Cannot add new LDAP Group Members in Sun Java Server 7.0

Hello!
I've got Sun Java™ System Web Server 7.0 installed and Apache Directory Server as LDAP server.
So, the task is -to create/add users to a group (just created or already existent).
When I try to do that, I got only "An error has occured" message and that's all.
What really happens, I cannot understand even from server logs:
here is the screenshot - http://tinyurl.com/34xuw42
and the log:
[08/Dec/2010:16:44:03] info ( 8504): for host 127.0.0.1 trying to POST /admingui/admingui/editGroupDialog, service-j2ee reports:
java.lang.NullPointerException
     at com.sun.web.admin.configlib.LdapDatabase.isUserGroupMgmtSupported(LdapDatabase.java:161)
     at com.sun.web.admin.mbeans.UserGroupMBean.isUserGroupMgmtSupported(UserGroupMBean.java:244)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.sun.web.admin.mbeans.BaseAdminMBean.invoke(BaseAdminMBean.java:49)
     at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:836)
     at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:761)
     at com.sun.web.admin.gui.util.MBeanUtil.invoke(MBeanUtil.java:139)
     at com.sun.web.admin.gui.util.MBeanUtil.invoke(MBeanUtil.java:39)
     at com.sun.web.admin.gui.handlers.CommonHandlers.invokeMBean(CommonHandlers.java:66)
     at com.sun.web.admin.gui.handlers.CommonHandlers.invokeWizardMBean(CommonHandlers.java:170)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.invokeHandler(DescriptorViewHelper.java:938)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.invokeHandlers(DescriptorViewHelper.java:875)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.dispatchEvent(DescriptorViewHelper.java:841)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.beginChildDisplay(DescriptorViewHelper.java:477)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewBeanBase.beginChildDisplay(DescriptorViewBeanBase.java:168)
     at com.iplanet.jato.taglib.TagBase.fireBeginDisplayEvent(TagBase.java:133)
     at com.sun.web.ui.taglib.common.CCTagBase.fireBeginDisplayEvent(CCTagBase.java:149)
     at com.sun.web.ui.taglib.common.CCTagBase.doEndTag(CCTagBase.java:108)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspx_meth_cc_propertysheet_0(addGroupMembers_jsp.java:347)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspx_meth_cc_pagetitle_0(addGroupMembers_jsp.java:317)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspx_meth_cc_form_0(addGroupMembers_jsp.java:201)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspx_meth_cc_header_0(addGroupMembers_jsp.java:154)
     at org.apache.jsp.jsp.addGroupMembers_jsp._jspService(addGroupMembers_jsp.java:99)
     at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:80)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:917)
     at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:373)
     at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:457)
     at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:351)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:917)
     at org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilterChain.java:398)
     at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:792)
     at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:472)
     at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:353)
     at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:340)
     at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.execute(DescriptorViewHelper.java:338)
     at com.sun.enterprise.tools.guiframework.view.DescriptorViewBeanBase.execute(DescriptorViewBeanBase.java:210)
     at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
What I am doing wrong?
Please, help.

You can configure a LDAP authentication database. Once you have configured it, you will be able to see users and groups contained in the configured ldap store.
Select a web instance configuration and select the Access Control tab. Under the Authentication Database sub tab create a new Authentication Database and select as database type LDAP Server. Make sure you provide as a bind dn a user that has sufficient permissions to read user and group entries.
Once that is done and you applied the changes, you will be able to select your LDAP server as an Authentication Database under the Users and Groups sub tabs.

Sun LDAP to SQL server provisiong

I am a new to Sun IDM.
I am planning to use Sun IDM for a simple provisioning requirement. We have all our external (yahoo, hotmail type) users in our sun LDAP and need to be synced (one way) to a sql server based on certain group type. So far from sun documentation I could figure out that I have to
(1) switch on retro change log of source LDAP.
(2) configure a active sync adapter.
However, I am not sure where to start. I just configured the source LDAP as a resource and did a (full reconciliation) from it. Here are my questions.
(1) should I configure the source LDAP user as "service Provider User " OR "Identity Manager User". Asking since, the users are outsider, not our employee.
(2) After the "Load from Resource" operation I see list of accounts pulled from the LDAP. However, I don't see any other attributes other than userId (account Id) in the "List Account" page. do I have to customize the ../accout/List.jsp page ?
(3) what are the next high level tasks to sync the changes to a sql server ?
Thanks!

Thank You Roman, Looks like I need some more spoon feedings to overcome the initial learning curve.
I did what you suggested. Created two resources (Ldap & SQL Server). I could load the accounts from the LDAP resources. Now I wanted to do the followings:-
(A) Load users from Ldap to Sql server based on the filter say "userAssociation=Finance", where 'userAssociatation' is custom attributes in the LDAP for the user object.
(B) Continue the above said provisioning for all new users from Ldap.
I tried to Edit "Synchronization Policy" for SQLServer resource. My question is,
(1) Where in the "Edit synchronization policy" screen I can mention the rule "userAssociation=Finance" ?
(2) I have enabled the "Retro Changelog Plugin" for the LDAP. Do I have to mention this somewhere for this Ldap to SQLServer provisioning ?
Thanks!
Kabi

Updating Sun LDAP Server through custom create group forms

Similar Messages

Maybe you are looking for