APEX_LDAP. AUTHENTICATE - using Microsoft Active Directory

Request Express 4.1.1.00.23
Internet Explorer - 8
Oracle Database 11 g Enterprise Edition Release 11.2.0.3.0 - 64 bit Production

Hi very new at the Apex and try to get the authenticaqtion work against our active directory. I installed an authentication scheme for my application chossing the schema type in the LDAP directory... my settings are the following:

Host: *.
Port: 389
Use SSL: No SSL
Distinguished Name (DN) string: domain\%LDAP_USER%
Just use the distinguished name (DN): Yes

This works perfect, and authenticates the user in active directory. The problem is when I try to do the following in the database that I really want to implement a custom authentication scheme, it just doesn't work.

Begin
IF apex_ldap.authenticate)
p_username = > "testusername",.
p_password = > "testpassword";
p_search_base = > 'domain\%LDAP_USER% ',.
p_host = > ' *',
p_port = > 389) THEN

dbms_output.put_line ('True');

On the other
dbms_output.put_line ('False');
End If;
End;

No matter what I do it always returns false. I created a function based on the same code and created a custom authentication scheme that calls the function but I still have a fake. Not sure why it works one way and not the other. Also really appreciate it if someone could help me get the code above to work or help correct.

I looked through the forum and tried many different research base channels, but nothing seems to work.

Concerning
Ash

Hey Ash,

you could use the built-in LDAP authentication scheme and use authentication according to load the group information in some parts of the application. A scheme of application-level authorization can permit or deny access to the app, based on these values. In the post-auth feature, you should even have access to the elements of connection (P101_USERNAME, P101_PASSWORD) If you need.

You can also base your authentication scheme directly custom DBMS_LDAP, if you want to avoid our API not supported.

Kind regards
Christian

Tags: Database

Similar Questions

  • Can OBIEE on UNIX OS - we use LDAP using Microsoft Active Directory for UNIX OS?

    We are looking at options to run OBIEE 11 g on a UNIX server.

    Can we use authentication using Microsoft Active Directory LDAP for authentication OBIEE?

    Short answer: Yes.

    Longer answer: Yes you can. Operating system has no influence on that. All you need is the ability to connect to LDAP, and it's pure networking.

  • Using Oracle with Microsoft Active Directory database

    Hello
    Because of too many nodes, we have in our company communicate each other (using the old files tnsnames.ora), we are now in the time to find a central location to store our net service names.
    I know that we can use for this OID to store the names of Service Net, but my question is it possible to use Microsoft AD, because our infrastructure using Microsoft AD as a central point.
    I have read the documentation oracle Oracle® Database Platform Guide (Chapter 12 Using Oracle Database with Microsoft Active Directory), but the problem is what happens if my database is not on the Windows operating system (such as Unix/Linux, we have number of it).
    I also read the document Oracle® Database Net Services Administrator's Guide (Chapter 3 Configuration Management Concepts) where you will find statement on the end of the chapter:
    Oracle supports Microsoft Active Directory only on Windows operating systems. Therefore, the client computers and the database server must also run on the Windows operating systems to access or create entries in Microsoft Active Directory.

    From this text, it looks like that my only option in this different environment with multiple operating systems is the OID (I wish it isn't true).

    Thank you

    Dragan,

    Sorry for the late reply. Since once it has clearly mentioned in the white paper that IO is a must; If you want to use MS AD, because 'oracle white paper' means 'documentation' refined and very authenticated.

    Enter the information useful/correct and close the debate.

    Concerning
    Girish Sharma

  • How can I use MS Active Directory to authenticate a PIX?

    I currently have a race PIX515 6.3 and I have created user manuals from via PPTP (VPDN) to my protected network (administrative nightmare). Is it possible that I can use MS Active Directory database user and have the PIX refer to him for authentication? Or do I need to Cisco's ACS software to accomplish this?

    Here you go

    http://www.Cisco.com/en/us/products/HW/vpndevc/ps2030/products_configuration_example09186a00800b6099.shtml

    http://www.Cisco.com/en/us/products/HW/vpndevc/ps2284/products_configuration_example09186a0080094700.shtml

    concerning

    John

  • authentication Microsoft Active Directory iDRAC 7

    Hello

    I installed Microsoft Active Directory on iDRAC 7 with some very basic options (no certificate, no Single Sign-On, not Kerberos Keytab, the Standard schema). Everything works fine.

    The problem is that we have 2 forests with full trust configured between them and iDRAC is not able to authenticate the users of both of them.

    Basically, we have the single domain on 1 security group and pair the users of these two forests (1 and foret2). If I add domain (DC) IPs for two areas-forest controllers, authentication fails on the first domain controller, if the user is a different domain (check does not reach the second DC IP to verify the user). The error I get:

    ERROR: failed to bind: Invalid credentials, 80090308: LdapErr: IDDM-0C0903A9, comment: AcceptSecurityContext error, 52nd data, v1db0: [email protected] host = 192.168.0.1.

    [email protected] - 1 user
    192.168.0.1 - foret2 DC IP

    Does IDARC support AD authentication for users of forest separated couple?

    Thank you

    iDRAC do not support authentication Active Directory for the domain of the unique forest.

  • Cannot access creative cloud bookstores after switching to Microsoft Active Directory

    Recently IT Department flies over the entire company to Microsoft Active Directory computers. After the computers in the design team were made too, we could no longer access the library of creative cloud or download anything creative market.

    The Panel for the library displays a cloud with a x and this message: ' something went wrong initialization of the cloud creative libraries ' with a link to "More information" leading to this error page - Adobe - error page

    Very annoying. I really need access to libraries for my work.

    If anyone else has experienced this problem and has a solution for this? Is this a known issue? I searched and have not been able to find something that helped.

    Using windows 7

    Please check the steps mentioned in: need help with this message: 'something went wrong initialization library of creative cloud'

  • Oracle Forms and Microsoft Active Directory

    Application server = 10.1.2.2.0
    Database server = 10.2.0.3.0

    We have a connection to a database (for example abcd/abcd@abcd). The login is in the formsweb.cfg file.

    Users click a URL that opens the first form (10g), where they must enter their username and password. The "When-new-form-Instance" trigger will use the data entered to check the username and password is correct on a users Table. It will also recover the level of security for members of the staff.

    If authentication fails, a message in a form and they can not go further.

    If authentication is successful then the first form of the system is displayed. The level of security is used to decide what forms/States are available for this user and the data that is displayed. The user ID is used throughout the system to save the changes made by the user.

    We went to Microsoft Active Directory and I have a requirement to allow a user to simply click on a link and the application opens with the data and access. I also need the user ID in the application.

    Is it possible to either from the Microsoft Active Directory for the Oracle Forms user ID or is there a way to recover it from in Oracle Forms.

    Thanks in advance
    Michael

    I seem to remember that we did in an installation of web Forms6i a few years ago.

    We used the ONE LOGON trigger to invoke the DBMS_LDAP package to interact with the microsoft server active dir.

    There are several ways to do it now with SSO also.

    Tony

  • Content question Pack Microsoft Active Directory

    So I installed the pack content for Microsoft Active Directory, and it works well for what it was designed for.

    Would it not possible to add another article for the surveillance of the integrity of the file? It is a requirement for PCI compliance and would be a great addition to this content back dashboard!

    Thought I would ask here before you request a feature, to see if it could possibly be just added to the fly ;-)

    OK, the content of Windows pack has been updated to include the auditing of objects! Please take a look and reply back with any feedback. If this answers your question could you please mark it as answered? Thanks for the comments!

  • Integration of EBS 11i with Microsoft Active Directory

    Hi all

    Please suggest how can I integrate EBS 11i with Microsoft Active Directory (LDAP), since we have regiterd SSO.

    Thank you.

    Please see these documents.

    Integration of Oracle E-Business Suite Release 11i with Oracle Internet Directory and Oracle Single Sign-On [261914.1 ID]
    Installation of Oracle Application Server 10 g with Oracle E-Business Suite Release 11i [ID 233436.1]
    Oracle Application Server with Oracle E-Business Suite Release 11i FAQ [ID 186981.1]
    Oracle Application Server 10g with Oracle E-Business Suite Release 11i troubleshooting [ID 295606.1]

    Thank you
    Hussein

  • Microsoft Active Directory Web Services - 2008 R2 edition

    Hello

    I'm updating the information for the employee on Active Directory (which is on the 2008 R2 version). My research on ADWS, I realized that there are some available in the version 2008 R2 of ADWS web services that are accessible to the public. But I have not any clear documentation confirm us. We try to access any account management Web service via http or soap

    NET. TCP: / /: 9389, ActiveDirectoryWebServices, Windows, AccountManagement

    via a browser after you connect to the host via the VPN network. But it does not work. What I feel is that this service must be hosted on a Web like IIS server for it to be accessible to the public via the Internet.  Like this instead of net.tcp

    http://: 9389, ActiveDirectoryWebServices, Windows, AccountManagement

    But the client side, host of this service indicates that it is hosted on IIS. Could someone please guide me if something is missing here?

    Thanks a bunch!

    SN06

    Hi SN06.
     
     
     
    The question you have posted is related to Windows Server 2008 R2, this is why I suggest you to contact the TechNet forums for help.
     
     
     
    It may be useful

  • Firepower does not work when using the Active Directory group as a rule filter access control

    I am PoV of Cisco ASA with the power of fire with my client. I would like to integrate the power of fire to MS Active Directory. Everything seems to work properly.

    -Fire power user agent installation to complete successfully. Connection to AD work fine. The newspaper is GREEN.

    -J' created a Kingdom in FireSight and you can download users and groups from Active Directory.

    -J' created a politics of identity with passive authentication (using the field I created)

    -Can I use the AD account "user" as a filter in access control rule and it work very well.

    However, if I create the rule of access control with AD Group', the rule never get match. I'm sure that the user that I test is a member of the group. Connection event show the system to ignore this rule and the traffic is blocked by the default action below. It doesn't look like the firepower doesn't know that the user belongs to the group.

    I use

    -User agent firepower for Active Directory v2.3 build 10.

    -ASA 5515 software Version 9.5 (2)

    -Fire version 6.0.0 - 1005 power module

    -Firepower for VMWare Management Center

    Any suggestion would be appreciated. Thanks in advance.

    Hello

    You should check the download user under domain option. Download the users once belonging to a group is specified on the ad and then test the connection.

    Thank you

    Yogesh

  • Integration of AAA with RADIUS NPS Microsoft Active Directory

    Hi all...

    We are looking to centralize administrative authentication of our switches and routers using domain AD groups. The oldest switches being 3560 s. There are a lot of great guides online on how to do it using MS NPS, but they all seem to require NPS to the use of the PAP and SPAP for authentication methods between the RADIUS (switches) clients and NPS-clear text protocols. It is the only option to make this work? Of course, the main concern would be the high-level AD user passwords transmitted through the wire. Am I right in thinking that the AD passwords are indeed involved in the process and NOT only verification of the Shared Secret between the NPS RADIUS clients... and then membership in one group AD?  Also, what would be a safe alternative where AD passwords would not be sent in clear text. Any clarification would be great...

    Thank you... Dennis

    Hello Dennis.

    The password is not sent in clear text. Instead, it is encrypted by the n (in your case the switch) until this draft is forwarded to the Radius server. The 'shared secret' is used in the encryption process, that's why the secret is not sent over the network. In addition, this is why the shared secret should be complex. For more information, see the links below:

    http://www.Cisco.com/c/en/us/support/docs/security-VPN/Remote-Authentication-Dial-user-service-RADIUS/12433-32.html

    http://TechNet.Microsoft.com/en-us/library/cc771660%28V=WS.10%29.aspx

    I hope this helps!

    Thank you for evaluating useful messages!

  • What percentage of microsoft Active Directory of users are still on Active directory 2003

    Does anyone know if there is an updated report on the percentage of companies who migrated to AD 2008 and what percentage are still on AD 2003?

    Thank you.

    Hi MSGG70,

    We do not have this information here (this forum is not for servers) and to be honest I'm not sure that the info is available anywhere or even published if known, but the best place to look and ask is to start here: http://social.technet.microsoft.com/Forums/en-US/wnserverDS/threads.  Even if they don't know, they are more likely to know where or how to find out.

    Good luck!

    Kosh

  • Cisco ASA 8.3 ldap AAA configuration Microsoft active directory server fails

    Hello

    I'm trying to implement authentication ldap for remote vpn ssl users like the image below:

    When I try the test button and enter a user name and password I get the message ' authentication rejected: user not found. "

    Why? Please help, I am running out of options here... Thank you much much in advance.

    Use the DN of connection according to the following format.

    [email protected]/ * / _name and let me know how it goes.

    If the suggestion above does not work then please run the debugging ldap 255 and paste the result here.

    Rgds, jousset

    The rate of useful messages-

  • ACS integration with Microsoft Active Directory Services

    Hi all

    I was responsible for developing the integration of GBA with MS AD. What I want to know is below assuming I have a software ACS or ACS device and the authentication protocol's RADIUS

    -What is the criterion of the announcement to integrate with ACS to device software

    -Should that AD hosted on the domain controller or not?

    -Otherwise, on what (DC, tree, forest, branch, flower, Fruit) the announcement must be hosted on?

    -What should I do to authenticate users logging into Cisco ACS Security Manager integrated with AD?

    -Are there other dependencies that I'll have to speak categorically in my description?

    Thank you

    Rishi

    First of all, I love the flower fruit one keep it up.

    If ACS is for windows, it can be installed on the domain controller or member server. For detailed information about installation tasks post must have full integration, please see the following link that contains fancy things you are looking for:

    http://www.Cisco.com/en/us/partner/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/installation/guide/Windows/postin.html#wp1041202

    If ACS is soultion engine then you need piece of software called remote agent to be installed either on the domain controller or member server, also check the following link for more details on how to integrate it with AD:

    http://www.Cisco.com/en/us/partner/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/remote_agent/Rawi.html

    I hope this was informative for you.

    -----------------------------------------------------------------------------

    Please ensure good answers to rate

Maybe you are looking for

  • FPGAS-vhdl

    Hello One thing bothers me and I would like clarification. During the "run Labview transforms its graphic code vhdl then vhdl en Bitstream . LabVIEW being synthesized, can get it back the vhdl code and the compiler on another software like model sim,

  • What is the definition of inactivity in the power settings?

    What is the definition of inactivity in the power settings? Lack of information provided by a user or a process does not? If a computer runs a scan of disks and a user does not input is an active computer or not?

  • What can I do to reduce the lag?

    I love playing mmorpg games and I have the annoying lag experience and would like to know what I can do to reduce it to a minimal state... the offset type I'm talking about is the gap that affects my fps and graphics etc... because I know my connecti

  • error 03-EEEE-0000

    I have a toshiba satellite A215 laptop, hard drive crashed while I bought a new after asking the saleswoman if I can use my recovery disk to reinstall the original windows operating system (and tell him Yes).  Have installed new drive hard but now tr

  • Windows Media Player CD identification search became extremely reliable

    Hello I was the extraction of CD by the hundreds to my computer and other than the occasional missing album art or year of production for the last years I did this, I found the 'search' CDDB used to identify the CD, to be precise. But I've become so