Validate user id against AD

I need to write an application to validate a user id is in Active Directory. The only way I have figured out how to do this is using dbms_ldap.simple_bind_s and supplying the user id and a password (the password is not the actual password). I'm able to take the return value from the call and determine if the user exists in AD, but it also counts as an invalid login attempt to AD. During my testing I have managed to lock out several accounts.
Does dbms_ldap have a way to just validate if the user is valid without passing in a password?

Hello,
dbms_ldap is NOT the only way to do it. This may be the "database" way to do it. You can verify whether a user exists using command line. "ldapsearch". Here is the explanation
ldapsearch -h <ad host> -p <ad port> -D "<AD service account" -w *** samAccountName=<AD userid>
If the above returns output, then that means your user exists in AD, otherwise not. So there is no need to enter any password. samAccountName is for verifying using the username. If you want to verify using email address, you can use "userPrincipalName=<AD email address>"
Hope that helps.
-Srinivas

Similar Messages

How to validate user inputs against checktables

Hi all,
how to validate userinputs for s_bukrs and s_hkont against respective check tables(t001 and skb1).
can u pl zprovide me codeing for this validations.
very urgent.
thanks in advance
swathi

Hi
Write the report
REPORT ZREPORT.
tables: t001,skb1,
select-options: s_bukrs for t001-bukrs,
                       s_hkont for skb1-saknr.
AT SELECTION-SCREEN.
Validate the screen fields
PERFORM validate_screen.
*&      Form validate_screen
Validation of Selection Screen fields
FORM validate_screen .
Validation of Company code
CLEAR t001-bukrs.
IF NOT s_bukrs[] IS INITIAL.
    SELECT bukrs UP TO 1 ROWS
        INTO t001-bukrs
        FROM t001
        WHERE bukrs IN s_bukrs.
    ENDSELECT.
    IF sy-subrc <> 0.
      MESSAGE e000 WITH 'Company code'(002).
    ENDIF.
ENDIF.
Validation of Account Number
CLEAR skb1-SAKNR.
IF NOT s_SAKNR[] IS INITIAL.
    SELECT SAKNR UP TO 1 ROWS
        INTO skb1-SAKNR
        FROM skb1
        WHERE SAKNR IN s_SAKNR and
                     bukrs    in S_BUKRS.
    ENDSELECT.
    IF sy-subrc <> 0.
      MESSAGE e000 WITH 'Invalid Account Number'(003).
    ENDIF.
ENDIF.
ENDFORM.
Reward points if useful
Anji

Web Service to Validate login information against LDAP

Hi Fourms,
I'm creating a web service that will validate login information against Active Directory Server. I'm starting with just validating the user, given a user name and password.
Right now all I have is the host name, the port number, username and password. I want to use socket connection and use it as a jar file in the application or a jdbc connection to LDAP and authenticate the user.
Please help!
Thanks!
Thanks,
Sunny1890
Edited by: Sunny1890 on Mar 20, 2009 9:01 PM
Edited by: Sunny1890 on Mar 20, 2009 11:24 PM
Edited by: Sunny1890 on Mar 20, 2009 11:26 PM

Actually I don't know the right method to invoke a web service. As I posted here they also give SOAP request / response envelop.
SOAP request / response envelop
POST /uszip.asmx HTTP/1.1
Host: www.webservicex.net
Content-Type: text/xml; charset=utf-8
Content-Length: length
SOAPAction: "http://www.webserviceX.NET/GetInfoByZIP"
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Body>
    <GetInfoByZIP xmlns="http://www.webserviceX.NET">
      <USZip>string</USZip>
    </GetInfoByZIP>
</soap:Body>
</soap:Envelope>
HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
Content-Length: length
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Body>
    <GetInfoByZIPResponse xmlns="http://www.webserviceX.NET">
      <GetInfoByZIPResult>xml</GetInfoByZIPResult>
    </GetInfoByZIPResponse>
</soap:Body>
</soap:Envelope>I just need to make a client to call this WS to get xml doc tree. I don't know static and dynamic invocation, which is the easiest method to go...
Do I need to study AXIS or any other API to call it, kindly recommend. I just need a client. Do I need to go with these SOAP envelops or I need WSDL to call WS methods?
Your guidance is valuable for me.
Very Thanks
Tahir

OIM 11g R2 - API to validate user's password

Hi,
Is there any API available to validate if an user's password in OIM is valid.I have an user login and password and need to verify if the user's password in OIM is same the input password.I am not looking for the API to validate my password against password policy,for which I have the API.
Thanks.

One of the ways to do it would be to decrypt the current password and then compare with the new password. Where are you doing this check? Depending upon where you want to do this, you can use different ways to decrypt the current password of the user.
There are various posts in the forum about decryting the password.
On a side note, if your policy does not allow same password, then new password validation against the policy should suffice your requirement.
-Bikash

How can we validate a XML against his external schema XSD

Hi;
I use the XML library for create my XML file, Im extracting the data
from R3 and building the XML document.
I wish to validate this document against his schema XSD built by third party (government organization) before i transfer this data (xml file)
to the external entity.
In my abap program:
¿How can i reach this validation level and if any
error exists then how can i get or trap the detail information?
this is a sample file XML with the external schema reference, as you can see in this part of the code.
<?xml version="1.0" encoding="UTF-8" ?>
- <Comprobante xmlns="http://www.sat.gob.mx/cfd/2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sat.gob.mx/cfd/2 http://www.sat.gob.mx/sitio_internet/cfd/2/cfdv2.xsd" version="2.0" serie="A" folio="0000238" fecha="2006-09-01T19:32:03-05:00" sello="o4kAzhytaTKThSk9tbTQGg5OGacAltWZwxQPZuMg1XhfjMq5jJ0GyO7w2//bf8aTuHnbqwpkR7rIgIehGLy88Xb3Ck0EDsWZEAC1QUuqRq2iWKAnGQPS4l9s0QrJHt0Ziojjd0GQFek6BYXPdlmdTjLZ2x+J8ffYEGpIQZRB8=" noAprobacion="2755" anoAprobacion="2006" formaDePago="En una sola exhibicion" noCertificado="00001000000000806462" condicionesDePago="Neto a 30 días sin DPPP" subTotal="2531.99" descuento="0.00" total="2912.90" tipoDeComprobante="ingreso">
<DomicilioFiscal calle="AVE. UNIVERSIDAD" noExterior="992 NTE." colonia="COL. CUAUHTEMOC" municipio="SAN NICOLAS DE LOS GARZA" estado="N.L." pais="MEXICO
We are using SAP R/3 46C
Thanks in Advance for your help.
Alejandro Pérez

Hi, Alejandro
Did you found something on SAP side in order to generated this XML.
Currently I´m trying to find out some on SAP but nothing at this moment.
The company that I´m working needs to implement "Factura Electonica" also.
Probably we will use external broker to do this for us, and we will send just Idoc to the broker.
Please, let me know your progress on SAP side.
Regards, Fabio

XI mapping calls an RFC in ERP to validate the ASN against the PO: lookup

Hi Guys,
I need validate before sending into delivery03 IDoc
 The XI mapping calls an RFC in ERP to validate the ASN against the PO
I can check through Look up.But need which RFC will check these .
Regd's
Raj

I am not sure there is a standard RFC for that..
otherwise u can create u r own RFC FM in R3 and can use in lookup UDF.
Regds,
Suresh

How to validate users with Novell Directory Server

Hi all, with iAS 6.0 SP3, how i can validate users stored in Novell
Directory Sever?
Thanks

Hi
I believe iAS is designed to work with iDS which is bundled along
with the SP3 download. Also the directory server which is working with
iAS must be Nortel LDAP Schema compatible and I'm not sure if NDS(Novell
Directory Server) is compatible. What I'm trying to understand is if you
have already registered iAS with NDS and you are having trouble in
accessing the users or if you are having trouble in the installation.
Raj
Josep Maria Camps Riba wrote:
Hi all, with iAS 6.0 SP3, how i can validate users stored in Novell
Directory Sever?
Thanks

How to validate user name and password in webdynpro.

Dear All,
Actually i have created login name and password in view, webdynpro and want to validate the user name and password but i am not finding proper code to how to validate user name and password.
Pl do the needful help.
Regards.
Tazeer.
Moderator Message: There is a seperate forum for WebDynpro. Please ask your question there.
Edited by: kishan P on Oct 5, 2010 1:08 PM

Hello, I don´t get you question. User authentication is ready out of the box in webdypro...
Regards Otto

Validate field value against LOV in JClient

Hi,
I have wondered is it possible when i have a LOV attached to a textfield or column from JTable to validate entered value against values in LOV. I mean when i enter wrong value in field, automatically to invoke LOV panel when the field lost focus.
Thanks in advance!

Hi,
this is currently not a feature available in JClient. We are evaluating this as a new feature in a next version fo ADF JClient (which will be named ADF Swing then)
Frank

Validate a value against table validation value set within PL/SQL

Hi,
I am trying to import price list lines along with Pricing attribute values.
I have to validate the uploaded values against the pricing attribute value set, before I import them into base tables.
Value set defined is of type table validation.
I wanted to know if there are any public APIs that can be used to validate the value against the Value set values within my PL/SQL procedure
Also please point me to documentation that lists various public PL/SQL APIs
Regards,
Mrutyunjay

You can find functions and procedure for Value sets in packages FND_FLEX_VAL_API or FND_FLEX_VAL_UTIL.
Example : get_table_vset_select gives you the select statement of your value set. Executing this statement will allow you to validate your values.

[b]How to validate user's digital signature by ClientAuthentication?[u]HELP

Hello,
My Problem:
By client-certificate-based authentication the first step is to prove "Does user�s public key validate user�s digital signature?". How can I prove this on the ServerSide manually, resp. I want to verify it with java classes on the server side additional to web-server. Actually the Web-Server verify this through the SSL-Connection, I'm conscious of this, but how can I additionally verify this step with java classes.
Thanks a lot

You would have to code it all again from the client side: obtain the certificate and private key from the keystore, send the cert, sign it, send the signature, and have the server receive the certificate and check the signature, all as part of your application protocol.
Instead of all this duplication I have no doubt that you should just point your firm at RFC 2246 in which the Certificate and CertificateVerify messages are mandated, or at the pages of Rescoria's book that I pointed you to before. The transport already meets the requirement and there is zero value in re-implementing it. Indeed there is a negative value: (a) there is a development time and execution time cost which they should consider, especially the development cost, and (b) if you get it wrong you are going to reject legal clients. (There is no possibility that you will accept illegal clients by programming error. SSL/TLS works.)
EJP

Cisco ISE (Authentication failed: 24415 User authentication against Active Directory failed since user's account is locked out)

Hi,
I have a setup ISE 1.1.1. Users are getting authenticate against AD. Everything is working fine except some users report disconnection. I see in the ISE that (Authentication failed: 24415 User authentication against Active Directory failed since user's account is locked out). Users are using Windows 7 OS.
Error is enclosed & here is the port configuration.
Port Configuration.
interface GigabitEthernet0/2
switchport access vlan 120
switchport mode access
switchport voice vlan 121
authentication event fail action next-method
authentication event server dead action reinitialize vlan 120
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication order mab dot1x
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 60
spanning-tree portfast
ip dhcp snooping limit rate 30 interface GigabitEthernet0/2
switchport access vlan 120
switchport mode access
switchport voice vlan 121
authentication event fail action next-method
authentication event server dead action reinitialize vlan 120
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication order mab dot1x
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 60
spanning-tree portfast
ip dhcp snooping limit rate 30
Please help.

The error message means that Active Directory server Reject the authentication attempt
as for some reasons the user account got locked.I guess, You should ask your AD Team to check in the AD
Event Logs why did the user account got locked.
Under Even Viewers, You can find it out
Regards
Minakshi (Do rate the helpful posts)

Cisco ISE Failure: 24408 User authentication against Active Directory failed since user has entered the wrong password

Hi,
Since we implemented Cisco ISE we receive the following failure on several Notebooks:
Authentication failed : 24408 User authentication against Active Directory failed since user has entered the wrong password
This happens 2 or 3 times per Day. So basically the authentications are working. But when the failure appears, the connection is lost for a short time.
The Clients are using PEAP(EAP-MSCHAPv2) for Authentication. We've got a Cisco Wireless Environment (WLC 5508).
Why is this happening?
Thanks,
Marc

The possible causes of this error message are:
1.] If the end user entered an incorrect username.
2.] The shared sceret between WLC and ISE is mismatched. With this we'll see continous failed authentication.
3.] As long as a PSN not receiving a response from the supplicant within this limit during an EAP conversation, it will throw this error code. In majority of cases it says eap session timed out.
In your cases, the 3rd option seems to be the most closest one.
Jatin Katyal
- Do rate helpful posts -

Validate user-entered text in JTable

How do I validate user entered text in JTable cell, so only the values 1234567890. are acceptet? The cell should contain only doubles....

import java.awt.*;
import javax.swing.*;
import javax.swing.table.*;
public class aslan extends JFrame {
public aslan() {
    TableModel model = new CustomTableModel();
    JTable table = new JTable(model);
    getContentPane().add(new JScrollPane(table), "Center");
    setDefaultCloseOperation(EXIT_ON_CLOSE);
    setSize(300,200);
    setLocation(300,300);
    setVisible(true);
private class CustomTableModel extends AbstractTableModel {
    String[] headings = new String[] {
      "Cost", "Item", "Type"
    Object[][] data = new Object[][] {
      { new Double(12.75), "glue",   "tube" },
      { new Double(15.20), "hammer", "claw" },
      { new Double(8.32), "saw",    "hack" }
    public int getRowCount() {
      return data.length;
    public int getColumnCount() {
      return data[0].length;
    public Object getValueAt(int row, int column) {
      return data[row][column];
    public void setValueAt(Object value, int row, int column) {
      data[row][column] = value;
      fireTableDataChanged();
    public String getColumnName(int column) {
      return headings[column];
    public Class getColumnClass(int column) {
      return data[0][column].getClass();
    public boolean isCellEditable(int row, int column) {
      return true;
public static void main(String[] args) {
    new aslan();
}

Validate user input in textfield?

Am trying validate user input into my JTextfield but its not working right... Am using the classes from sun's hp :
http://java.sun.com/docs/books/tutorial/uiswing/components/textfield.html
The classes with changes made:
import javax.swing.*;
import javax.swing.text.*;
import java.awt.Toolkit;
import java.text.*;
public class DecimalField extends JTextField
private NumberFormat format;
private NumberFormat percentFormat;
public DecimalField()
super(10);
percentFormat = NumberFormat.getNumberInstance();
percentFormat.setMinimumFractionDigits(2);
// ((DecimalFormat)percentFormat).setPositiveSuffix(" ");
setDocument(new FormattedDocument(percentFormat));
format = percentFormat;
public double getValue()
double retVal = 0.0;
try
retVal = format.parse(getText()).doubleValue();
} catch (ParseException e)
Toolkit.getDefaultToolkit().beep();
return retVal;
public void setValue(double value)
setText(format.format(value));
import javax.swing.*;
import javax.swing.text.*;
import java.awt.Toolkit;
import java.text.*;
import java.util.Locale;
public class FormattedDocument extends PlainDocument
public FormattedDocument(Format f)
format = f;
public Format getFormat()
return format;
public void insertString(int offs, String str, AttributeSet a)
throws BadLocationException
String currentText = getText(0, getLength());
String beforeOffset = currentText.substring(0, offs);
String afterOffset = currentText.substring(offs, currentText.length());
String proposedResult = beforeOffset + str + afterOffset;
try
format.parseObject(proposedResult);
super.insertString(offs, str, a);
} catch (ParseException e)
Toolkit.getDefaultToolkit().beep();
// System.err.println("insertString: could not parse: "
// + proposedResult);
public void remove(int offs, int len) throws BadLocationException
String currentText = getText(0, getLength());
String beforeOffset = currentText.substring(0, offs);
String afterOffset = currentText.substring(len + offs,
currentText.length());
String proposedResult = beforeOffset + afterOffset;
try
if (proposedResult.length() != 0)
format.parseObject(proposedResult);
super.remove(offs, len);
} catch (ParseException e)
Toolkit.getDefaultToolkit().beep();
// System.err.println("remove: could not parse: " + proposedResult);
private Format format;
what am I doing wrong?

am sorry
import javax.swing.*;
import javax.swing.text.*;
import java.awt.Toolkit;
import java.text.*;
import java.util.Locale;
public class FormattedDocument extends PlainDocument
    public FormattedDocument(Format f)
        format = f;
    public Format getFormat()
        return format;
    public void insertString(int offs, String str, AttributeSet a)
    throws BadLocationException
        String currentText = getText(0, getLength());
        String beforeOffset = currentText.substring(0, offs);
        String afterOffset = currentText.substring(offs, currentText.length());
        String proposedResult = beforeOffset + str + afterOffset;
        try
            format.parseObject(proposedResult);
            super.insertString(offs, str, a);
        } catch (ParseException e)
            Toolkit.getDefaultToolkit().beep();
//            System.err.println("insertString: could not parse: "
//            + proposedResult);
    public void remove(int offs, int len) throws BadLocationException
        String currentText = getText(0, getLength());
        String beforeOffset = currentText.substring(0, offs);
        String afterOffset = currentText.substring(len + offs,
        currentText.length());
        String proposedResult = beforeOffset + afterOffset;
        try
            if (proposedResult.length() != 0)
                format.parseObject(proposedResult);
            super.remove(offs, len);
        } catch (ParseException e)
            Toolkit.getDefaultToolkit().beep();
//            System.err.println("remove: could not parse: " + proposedResult);
    private Format format;
import javax.swing.*;
import javax.swing.text.*;
import java.awt.Toolkit;
import java.text.*;
public class DecimalField extends JTextField
    private NumberFormat format;
    private NumberFormat percentFormat;
    public DecimalField()
        super(10);
        percentFormat = NumberFormat.getNumberInstance();
        percentFormat.setMinimumFractionDigits(2);
//        ((DecimalFormat)percentFormat).setPositiveSuffix(" ");
        setDocument(new FormattedDocument(percentFormat));
        format = percentFormat;
    public double getValue()
        double retVal = 0.0;
        try
            retVal = format.parse(getText()).doubleValue();
        } catch (ParseException e)
            Toolkit.getDefaultToolkit().beep();
        return retVal;
    public void setValue(double value)
        setText(format.format(value));
}Well when I create this overriden TextField ( DecimalField ) its working as it should with the first character. Its only accepting digits and . but after the first character its accepting everything. Its like the validation disappear?

Validate user id against AD

Similar Messages

Maybe you are looking for