Authentication LDAP with P101_USERNAME, but we must define a different APP_USER

We have Apex 4.2 using the authentication scheme 'Application Express accounts' with APP_USERS as 'BS1234 '.

And our process of login()) P101 invoke:

wwv_flow_custom_auth_std. Login (P_UNAME = >: P101_USERNAME, P_PASSWORD = >: P101_PASSWORD,)

P_SESSION_ID = > v ('APP_SESSION'), P_FLOW_PAGE = >: APP_ID | » : 10') ;

We want to start using LDAP/AD, such that we can

(1) accept a user name LDAP as 'bob.smith' and to authenticate to Active Directory.

(2) convert 'bob.smith' to 'BS1234' using a lookup table

(3) to use "BS1234" as the APP_USER (for reasons of inheritance)

We tested the APEX "LDAP authentication" system and it works fine, but it leaves us with "bob.smith" as the APP_USER.

My current idea is to have serveral P101 processes. The first LDAP using P101_USERNAME/bob.smith authentication will occur.

If this attempt is successful a second process will make the search and reset P101_USERNAME: = "BS1234."

and if _that_ is successful we will call a custom authentication (always true) "minimal".

The last stage of custom authentication is, in my view, necessary so P101_USERNAME is assigned to APP_USER.

But could all three of these steps in a single custom authentication scheme?

Custom authentication is new to us, and we are a bit confused with all the steps (Sentry, Proc of Session function not valid, authentication, post Logout Proc, Session not valid function check, proc and Proc preauthentication after authentication), so any ideas would be welcome.

Hello

You can do it with the help of LDAP "Authentication Type" himself. No need to create type "Custom authentication.

You can use APEX_CUSTOM_AUTH. SET_USER APP_USER setting procedure

  1. Create procedure with output parameters for example set_apex_user.
  2. In this procedure, use v ('APP_USER') to get the LDAP username at the start. Get your username lookup table APEX and set APP_USER using APEX_CUSTOM_AUTH. Procedure SET_USER
  3. You must call this procedure in your "LDAP Authentication Scheme',"Login Processing"topic, like"name of the procedure after authentication.

I hope this helps.

Kind regards

Hari

Tags: Database

Similar Questions

  • Purchased a product key for Windows 7 Professional, but you must enter a different product key activation

    My laptop came with a Windows 7 Basic program trial and the trial ended so I bought a product key for Windows 7 Professional, because I got a discount on that student. When I try to activate it, it says I need to enter the product key for what I already use but I don't know the key to it. What am I doing here? Do I have to buy a product key for my Windows 7 original also?

    Windows 7 Home Basic Edition is not a trial.

    Is the Windows 7 Professional a full, level or Express upgrade?

    Skip entering your product key Windows 7 and complete the installation.

    When you reach the desktop, click Start, right-click on computer

    Click on properties

    Scroll down to the Windows Activation

    Click the link x days before activation.

    Click on the link that says: "show me other ways to activate.

    Enter the product key

    Click next

    Select the Activation of the phone

    Click Next when you enter your key page

    Select your country

    Click Next, call the number listed

    Be sure to explain your situation to the Appeals Officer.

    Provide the installation generated when ID requested by the call agent

    They give a confirmation ID in return, enter it

    Click next to complete the activation.

    However, the requirements for the media upgrade is that you have an operating system already eligible such as Windows XP or Vista installed to use it. Since the Windows 7 end user license agreement.

    15 UPDATES. To use upgrade software, you must first be licensed for the software that is eligible for the upgrade. After the upgrade, this agreement takes the place of the agreement for the software that you upgraded. After upgrade, you can no longer use the software that you upgraded.

    So, if you are always denied, you will just have to reinstall Windows XP or Vista and let it do the verification of eligibility.

  • Trying to get on my email, the following statement comes from the IPU: "we're sorry, but you must enable cookies and Javascript to use your username with this site. I click on "here", but nothing happens. How to enable the amd Javascript cookies?

    Try to get t my email, this happens: we're sorry, but you must enable cookies and Javascript to use your username with this site.
    How can I do this?

    George Szántó

    [email protected]

    see similar question answered https://support.mozilla.com/questions/836913

    To be notified of updates to a question, if this is your problem or not just click on the "Get email notifications" and follow made the choice. Only the original poster can mark it as resolved, so there should be a slight difference in choice as an original poster and where you lock on another issue. Notifications only apply to individuals the question where is entered.

  • I want to get only year sysdate with my name of the defined column. but not able to get it.

    I want to get only year sysdate with my name of the defined column. but not able to get it.

    SQL > select to_char (sysdate, 'yyyy') as 'mahesh tyagi' from dual;

    Mahé

    ----

    2015

    SQL > select to_char (sysdate, 'yy') as 'Manu' from dual;

    my

    --

    15

    So I couldn't do 'Manu' or "mahesh tyagi" as the column name.

    The column name is "mahesh tyagi" is simply displayed it shortened to sqlplus due to the known values in the column length.

    create table year_test select to_char (sysdate, 'yyyy') "mahesh tyagi" double;

    year_test / / DESC

    You can change the way sqlplus displays the header of column with something like

    column "mahesh tyagi" format a15

  • I use the random function and he know instructions 'case' must end with a ':' but it is!

    I use the random function and he know instructions 'case' must end with a ':' but it is! I put

    case 10000 timer += 2; popupName._visible = true; :

    then I put

    case of 10000 {timer += 2; popupName._visible = true ;}:}

    but he still know it.

    What I am doing wrong?

    First of all, whenever you have more than three similar lines, you should probably refactor something.  Especially when you have 10,000 lines. This should have sounded the alarm, but I guess you are new to this.

    Second, when you have such a long code, paste everything here. Please, I beg you. It's a pain to navigate the thread.

    And here's what I * think * you really want:

    If (random (10001) == 10000) {}

    timer += 2;

    popupName._visible = true;

    }

    It simply means: "take a random number between 0 and 10001 (exclusive). If this number is 10,000, do something. If not, ignore this code block. »

  • Single Sign on authentication failed with error [user: username is found, but]

    Hello

    URGENT:

    One user is trying to connect to Essbase by Excle worksheet. To connect in Essbase, this user who connects to the network using the VPN connection. I suspect that this question arises because of an invalid password, but the user claiming that password is correct. When I checked the user information in Essabase, he gave an external authentication that is valid.

    Please help me on this issue. What should go wrong with this user?

    * Single Sign on authentication failed with error [user: username found, but could not authenticate] *.

    Thanks again for your help.

    Kind regards
    UB.

    If essbase uses an external authentication as MSAD, you can get the password changed at the level of the AD by someone who takes care of the administration.

    See you soon

    John
    http://John-Goodwin.blogspot.com/

  • LDAP with ssl

    Hello Experts,

    I just tried to set up a LDAP authentication with the built-in feature of the apex.

    Because I wasn't able to make it work, I tried to set up my own LDAP authentication scheme with the following code:

    create or replace package body "PKG_AUTH" is
    function FUNCTION_LDAP_1( P_PASSWORD IN VARCHAR2, P_USERNAME IN VARCHAR2 ) return BOOLEAN
    
    as
         p_dn varchar2(128) := 'cn=' || p_username || ',ou=XX,ou=YY,ou=ZZ,o=data';
         p_ldap_host varchar2(128) := 'ServerHostName';
         p_ldap_port number := <PORT>;
         l_retval pls_integer;
         l_retval2 pls_integer;
         l_session dbms_ldap.session;
    begin
      l_retval := -1;
         dbms_ldap.use_exception := TRUE;
         begin
             l_session := dbms_ldap.init( p_ldap_host, p_ldap_port );                -- Seems to work fine if i comment the next two lines. So I think the I'm able to contact the LDAP server.   
             l_retval := dbms_ldap.simple_bind_s( l_session, p_dn, p_password );    -- if I execut this line, I get the error: "ORA-31202: DBMS_LDAP: LDAP-Client-/Server-Fehler: Can't contact LDAP server"
             l_retval2 := dbms_ldap.unbind_s( l_session );
             return true;
             exception when others then
                   l_retval2 := dbms_ldap.unbind_s( l_session );
                   APEX_DEBUG_MESSAGE.ENABLE_DEBUG_MESSAGES(p_level => 3);
                   APEX_DEBUG_MESSAGE.LOG_MESSAGE(
                       p_message => 'l_retval: ' || l_retval || dbms_utility.format_error_stack|| ' <|> ' || dbms_utility.format_error_backtrace,
                       p_level => 1 );
             return false;
        end;
        exception when others then
        return false;
    end FUNCTION_LDAP_1;
    
    end "PKG_AUTH";
    
    
    
    

    I get an error ' LDAP-Client/Server-Fehler: failed to contact the LDAP server.

    To me, it seems that the problem is in the line (please look at the comment in the code above too)

    l_retval := dbms_ldap.simple_bind_s( l_session, p_dn, p_password );
    
    
    
    

    Additional information:

    • We have defined a All-Open-Rule to our ACL.
    • On the front end, I get a Message "Invalid Credientials" (or something similar)
    • Request Express 4.2.3.00.08
    • I can connect to the LDAP with the code in the following thrad: Ping in PL SQL function
      That's a reason more to my guess that I don't have a problem "cannot contact the LDAP server."
    • I'm confused (due to this error)

    • I think that we have not implemented a portfolio for our LDAP server. Do I really need?
      On APEX_LDAP , they say, you need just a portfolio if you use "SSL with one-way authentication" (APEX_LDAP. AUTHENTICATE = > parameter:p_use_ssl)
      But now the problem seems to have originated elsewhere. I I'm wrong?

    Appreciate any help!

    Ok. Use build you - in ldap auth. schme?

    No. I still cannot do its job. I can connect using the following code:

    declare
       l_ldapHost VARCHAR2(100) := 'your.ad.domain';
       l_ldapPort NUMBER := 636; -- set your SSL port
       walletPassword VARCHAR2(30) := 'wallet_password';
    
       l_retval      pls_integer;
       l_session     dbms_ldap.session;
    
    begin
          l_retval                := -1;
    
          dbms_ldap.use_exception := TRUE;
    
          l_session := dbms_ldap.init(l_ldapHost, l_ldapPort);
    
          l_retval := dbms_ldap.open_ssl (l_session, 'file:/etc/oracle/wallets', walletPassword, 2);
    
          l_retval := DBMS_LDAP.simple_bind_s(l_session, :p_username, :p_password);
    
          dbms_output.put_line(l_retval);
    DBMS_LDAP.UNBIND_S(l_session);
    end;
    

    You can use custom authentication.

    But you must install the portfolio and add your domain root certificate to trusted certificates. And don't forget to change l_ldapHost, l_ldapPort, walletPassword, p_username, p_password to your values.

    But why offer apex to a system of authorisation: built-in ldap where you can use ssl, and on the other hand they do not offer an opportunity to set a path to a portfolio of oracle?

    Do we not have to install the portfolio to a special directory? (If we want to use the built-in schema auth). ?

    See the documentation for APEX 2.4 managing settings for Instance to see how to install portfolio pending of the APEX.

  • Authentication LDAP BI publisher

    Hello

    I try to activate the AD for BI publisher authentication. I tried most of the possible LDAP configuration settings. But when I try to connect, it throws the following error.

    The server cannot be used because of a configuration error, please contact the administrator. If you are the administrator, please see the BI Publisher user guide for the correct configuration.
    Detail of the error

    Previous

    oracle.apps.xdo.security.ValidateException

    Should I create the roles of BI Publisher in the LDAP server for authentication LDAP for BI publisher.

    Kindly let me know if anyone have solution for the same.

    Thank you and best regards,
    Rajesh J

    Edited by: sj_rajesh may 18, 2010 16:49

    Here is an example of an LDAP with ADSI integration:
    http://gerardnico.com/wiki/dat/BIP/ldap_adsi

    And Yes, you must create the group in the LDAP directory. They are imported when the Beeping starts.

    See you soon
    Nico

  • Catch 22 - Port Trunk Configurations: how to combine identifiers VLAN native with DHCP (but allows traffic of VM)

    Catch 22 - Port Network Configurations: how to combine identifiers VLAN native with DHCP (but allow the virtual computer)

    I came across a Catch 22.  Maybe someone can restore the directly here.  I found a "witch hunt" for sure.

    It comes with the Ports of junction on the side of the switch of the ESX host network.

    Context:

    Ok. The Setup is a HP Blade C7000 enclosure.  I try to configure ports for switching to the blades.  ESX 3.5 U4 will be installed the BL460cs.  Installation is preferred method: revive unattended.  No problem with the syntax of Kick-Start,

    I am here, it's the side network.

    The problem:

    I find a major complication in that the switch ports must be configured for both traffic Service Console and VMkernel, more Virtual Machine since only two NICs by blade. Not best practices, but we have only two switches Cisco 3020 inside.  The two uplink physical NIC is paired in the same vSwitch.  (No iSCSI does fortunately).

    So the Catch 22 question is as follows:

    If the id VLAN native set up on the switch port, DHCP works of course and the VMware boot loader is able to grasp a binary / packets on the network (FTP Site) and install OK.  But after no installation, no communication with SC unless I set the VLAN id of the SC to '0 '.  The value "4" 0 does not communication, but "40" is the VLAN native.

    If id configuring VLAN native retired from the Switch port, DHCP will not work and host does not have IP address during the VMware boot process.  This is as expected as traffic without label is not assigned an eligible

    VLAN, so no comms.

    The Port of the Switch configuration:

    interface GigabitEthernet0/16

    SERVERNAME description

    switchport trunk encapsulation dot1q

    switchport trunk vlan native 40

    switchport trunk allowed vlan 40-254

    switchport mode trunk

    switchport nonegotiate

    Speed 1000

    No cdp enable

    spanning tree portfast trunk

    end

    Summary

    OK, let's summarize where things are and if possible please attach responses to their digital identity.

    (1) is there a way to delete the VLAN tagging altogether side ESX host? Not only the id '0 '. The problem is with clearly with the VLAN native defined as "40".  If "40" IDs specified on the Group of ports for the Service Console, no joy, no comms. If the id of '0' value, capable of ping gateway and communicate on the network.

    (2) what is the problem with the definition of VLAN native as "40" when the config for the switch port is set as VLAN native "40"?  Or if it was a problem?  Both parameters clearly do not work together.

    (3) a switch receiving a unmarked frame it will assign to the VLAN Trunk native. Ok. Trunking bases and why I need a VLAN specified on the port for DHCP native work.  But it seems that since the id VLAN is set manually even as VLAN native, closed communications and no traffic as possible.

    (4) executives made tag 802. 1 q VLAN native?  I think that it is not and this could well be the problem. Since the id VLAN "40" is not labeled, but try to score the side host vSwitch port group.

    Please let me know your thoughts, community and how in general, we are approaching 2 NIC ESX configurations.

    When trunking multiple VLANs, you either have a default VLAN is nothing is tagged, or you don't.  That's what the vlan native to you, it defines which VLAN would be used if no tag is visible on the packets traversing the network.  For servers, if you are marking, then everything has to tag, if you're not marking at the server level, then the port must be either an access port or a VLAN native or default must be set.  I also don't keep your service console the same network as your vm.  Keep this isolated for the security of the network.  If you isolate this VLAN, you can separate and use a single IP address for installation and one for post construction.

    Or, you can provide an IP address during the build.

    -KjB

    VMware vExpert

  • Change the role of the user once authenticated LDAP authentication

    Hi forum,

    I do know that if it is possible, I have not found a solution so far

    I have a simple web application with LDAP authentication. We would like to use LDAP for authentication and store the information of user roles in the database. After authentication, LDAP assigns the role of "guest" to the user and the home page (the only page available for this role) is displayed.

    In this home page, the user must select a profile (the same user can have multiple profiles) in a list retrieved from the database. The profile of each user has an associated role. After selection, we want to change the role of the user "guest" to the role associated with the selected profile.

    I don't think that implementation of a custom plug-in fits my needs because the role assignment requires the participation of the user.

    Any suggestions?

    Thanks in advance,

    Tatiana.

    Hello

    Well, the problem is that you need to change the subject of the user authenticated, who's a JAAS thing to do. The only way this can work is indeed use a custom LoginModule and then access the user object to add a security principal that represents the role you want to add.

    Frank

  • 2012 LabVIEW Eval/training MVC tutorial must IMAQ but Vision must LV 2011 installed in order to install.

    I'm using LabVIEW 2012 evaluation of training mode in order to find a location using LabVIEW. A MVC tutorial looks like a very good example and I can open the first VI, Starter.vi of MVC, but when I try to open the project which includes screws to MVC OOP advanced with controls and Factory.vi, it must IMAQ live but when I try to install Vision in order to get the screws IMAQ, it needs LV 2011 installed in order to install the Vision and will not proceed with the installation of Vision/IMAQ.

    After searching the site OR days to get responses LVOOP I found this tutorial that could be useful, if it's actually working.

    Setup of Vision should probably work with 2012, but the installer was not setup to work with 2011 or later.

    In addition, I have not found a good description of what the MVC "framework" is all about.

    I used LabVIEW since the beginning of the 1990s, but not from my NI Suite which included LV 8 and LVOOP about 2007. I desperately need a step by step "how-to and why ' for LVOOP, ACTOR, etc. I'm through the core I and Core II manual of training for certification, but it needed LabVIEW work as soon as POSSIBLE and do not have the $2,500 to upgrade my NI Suite or $10,000 for training or time to complete certification now.

    It seems that every time that I start to make progress and NI LabVIEW, I hit a roadblock. Nothing seems to ever work as announced.

    Help, please!

    First, you must determine what version of LabVIEW, you: 2011, 2011 SP1, 2012, 2012 SP1. You can find this by opening LabVIEW and navigate using-> on LabVIEW...

    Then, you download and install the compatible version of the Vision Development Module. Here is the link you should use:

    http://www.NI.com/downloads/products/ (search for Vision Development Module).

    In addition, there is a driver software that exists that is called Vision Acquisition Software. But, if you do not interact with the hardware at this stage, then you don't need it. Here's a better explanation:

    What is the difference between software Vision VDM, VBAI and going TO?

    About MVC, I'm no expert, but you should know what a MVC is and understand LabVIEW and characteristics before you dive into this example of MVC in LabVIEW. My recommendation is to not try to understand/learn MVC for the first time looking at this example. More information can be found by conducting a search on any search engine. Here is the Wikipedia article.

  • Set the UAC: I love completely remove administrator off my programs OR just let it be, but I must not be entered my password all the time. R

    I love completely remove administrator off my programs OR just let it be, but I must not be entered my password all the time. R

    Here's how to turn off the feature of 'User Account Control' of Windows that you have problems with:http://www.howtogeek.com/howto/windows-vista/disable-user-account-control-uac-the-easy-way-on-windows-vista/

  • Why Canon does not have old adapters for my SLR camera lenses? I can get them with Sony, but not for Canon

    I have an old Canon Ftb with a goal of 1.4 fd. I'm getting into digital cameras now (just to have a 12 G for now, mainly used for underwater photography). I would like to stay with Canon, but I'm very annoyed that Canon doesn't have a way to continue to use their old lenses. Nikon, for all their flaws are much better at you can continue to use your old stuff.

    Then I find that if I'm going to Sony (Yes, really, Sony) can I use my lenses from Canon ol via an adapter. This my Canon, tell me it ain't so. You must have a way, I just have not yet discovered.

    There are many challenges with this and the "adapters" are to be considered with a certain scepticism.

    The FD lenses are mechanical - no electronics.  The case of the unit, on the other hand, has an electronic interface for the lens - nothing of mechanics.   This means that if you set the goal, you would have to manually set the aperture but also of manual focus of the lens.

    Your Canon DSLR had a split Prism focusing in the viewfinder to help.  A new camera does not work.  The reason why there is no help from the development is because most of the lenses are autofocus so it is simply not necessary.  This makes it particularly difficult to tell when you've worn exactly the goal.  Making it even more difficult is that any device with a sensor size of APS - C (most of them) have a small viewfinder that you had on your Canon SLR photography.

    In addition, the lenses are optimized for a specific back focus distance.  Canon's EOS cameras have a depth of 44 m from the mounting flange of lens at the front of the body at the level of development within the body.  When you use an adapter, it modifies that distance.  If you change too much, the lens behaves as if it is mounted with extension tubes, the entire range of focus is moved closer to the camera, and it can be is no longer able to focus to infinity.

    There are 3 parties that make these lenses... conversion kits but they do them for a few drinks (not all) and that they require a bit of surgery on the goal (e.g. this level which protrudes beyond the rear of the lens used to set the aperture value should go).

    But... the modern lenses are just so much better than the old FD lenses.   Requires really quite the dozen FD lens to make it interesting this fuss.  Also, I own a Canon SLR (AE-1) and a few glasses of FD... but have no interest in trying to use one of these lenses on my EOS DSLR cameras.

    I think that this question almost as Ford asking why they do not wheel adapters let wheels it T model mount on a Mustang of 2015.  The new wheels are so much better than the old wheels, you want to continue to use the old wheels.

    Leave your old lenses in the past.  Mine are on the shelf alongside my AE-1... body as a conversation piece.  I don't actually use them.

  • Windows Vista taskbar becomes unusable. If clicking on something other than 'error' beep start. Reseting solves the problem, but there must be a permanent fix. Solvable?

    Windows Vista taskbar becomes unusable. If clicking on something other than 'error' beep start. Reseting solves the problem, but there must be a permanent fix. Solvable?

    Hi Comintern,

    ·         Did you do changes on the computer before the show?

    ·         You receive an error message or error code?

    Follow the suggestions below for a possible solution:

     

    Method 1:

     

    Step 1: Start in safe mode and check if the problem persists.

    Start your computer in safe mode

    http://Windows.Microsoft.com/en-us/Windows-Vista/start-your-computer-in-safe-mode

     

    Step 2: If the problem does not occur in safe mode, you can put your system to boot (in normal mode) to solve the problem.

    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

    http://support.Microsoft.com/kb/929135

     

    Note: After troubleshooting, be sure to configure the computer to start as usual as mentioned in step 7 in the above article.

    Method 2: I also suggest that you scan your computer with the Microsoft Security Scanner, which would help us to get rid of viruses, spyware and other malicious software.

    The Microsoft Security Scanner is a downloadable security tool for free which allows analysis at the application and helps remove viruses, spyware and other malware. It works with your current antivirus software.

    http://www.Microsoft.com/security/scanner/en-us/default.aspx

     

    Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again.

    Important: While running scan on the hard drive if bad sectors are found on the hard drive when scanning try to repair this area if all available on which data may be lost.

    Let us know the results.

  • Cisco UCS blades ¦ smbiosDump command returns "undefined, but can be defined.

    Hello community.

    I installed ESXi on a series B UCS blade but were unable to enumerate the UUID (set via Service profile) with the... smbiosDump, more than command.

    All other fields back properly for the serial number, etc... but no UUID. UUID returns: "undefined, but can be defined.    Is this a problem of ESXi and UCS?

    (NOTE, with ESX classic, dmidecoe ¦ more command lists the UUID perfectly.)

    Thoughts, comments, suggestions, input welcome.

    Best of all,

    Jason

    of cpaggen: esxcfg-info | grep UUID

Maybe you are looking for