Import and export user and group for native Directory HSS 11.1.2

Similar Questions

• Have ACS pass the access list by user or group for Cisco 2600

  I wonder how I can configure ACS to when a user connects a router and authenticates to ACS, ACS pass back have an access to the router list based on user or group?

  With GANYMEDE, like this:

  http://www.Cisco.com/en/us/Tech/tk583/TK642/technologies_configuration_example09186a0080094656.shtml

  With RADIUS, like this:

  http://www.Cisco.com/en/us/Tech/tk583/tk547/technologies_tech_note09186a0080094032.shtml

• separate authentication and authorization for Active directory groups

  Hi all

  After a long search and failure, I write the question.

  I use apex oracle 4.2 on windows server 2012 on oracle 12 c, all 64 bits.

  We have configured Microsoft Active directory with LDAP.

  in LDAP, we have a core group which is say A and an is down there students and the two groups.

  According to the staff, there are many other groups and students, there are a lot of groups.

  I created a mobile application, it has a main page that is publicly accessible without username and password.

  in this home page, I have a list that contains two elements, personnel and another is a student.

  When one of the list item, the login screen appears.

  now I want to control when the user clicks on the staff list, only personnel should be authenticated.

  If the end user is a student, it doesn't have to be authenticated.

  the same goes for the student list item, if the end-user click on list of students, only students must be authenticated.

  someone please guide me, I'm failed in research and testing.

  Thank you.

  Kind regards.

  Hi Maahjoor,

  Try this (it is written all the attributes for the user) by logging in to your schema to SQL Developer:

  DECLARE
  
    -- Adjust as necessary.
    l_ldap_host    VARCHAR2(256) := 'hct.org';
    l_ldap_port    VARCHAR2(256) := '389';
    l_ldap_user    VARCHAR2(256) := 'cn=hct\itnew';
    l_ldap_passwd  VARCHAR2(256) := 'itnew';
    l_ldap_base    VARCHAR2(256) := 'DC=hct,DC=org';
  
    l_retval       PLS_INTEGER;
    l_session      DBMS_LDAP.session;
    l_attrs        DBMS_LDAP.string_collection;
    l_message      DBMS_LDAP.message;
    l_entry        DBMS_LDAP.message;
    l_attr_name    VARCHAR2(256);
    l_ber_element  DBMS_LDAP.ber_element;
    l_vals         DBMS_LDAP.string_collection;
  
  BEGIN
  
    -- Choose to raise exceptions.
    DBMS_LDAP.USE_EXCEPTION := TRUE;
  
    -- Connect to the LDAP server.
    l_session := DBMS_LDAP.init(hostname => l_ldap_host,
                                portnum  => l_ldap_port);
  
    l_retval := DBMS_LDAP.simple_bind_s(ld     => l_session,
                                        dn     => l_ldap_user||','||l_ldap_base,
                                        passwd => l_ldap_passwd);
  
    -- Get all attributes
    l_attrs(1) := '*'; -- retrieve all attributes
    l_retval := DBMS_LDAP.search_s(ld       => l_session,
                                   base     => l_ldap_base,
                                   scope    => DBMS_LDAP.SCOPE_SUBTREE,
                                   filter   => l_ldap_user,
                                   attrs    => l_attrs,
                                   attronly => 0,
                                   res      => l_message);
  
    IF DBMS_LDAP.count_entries(ld => l_session, msg => l_message) > 0 THEN
      -- Get all the entries returned by our search.
      l_entry := DBMS_LDAP.first_entry(ld  => l_session,
                                       msg => l_message);
  
      << entry_loop >>
      WHILE l_entry IS NOT NULL LOOP
        -- Get all the attributes for this entry.
        DBMS_OUTPUT.PUT_LINE('---------------------------------------');
        l_attr_name := DBMS_LDAP.first_attribute(ld        => l_session,
                                                 ldapentry => l_entry,
                                                 ber_elem  => l_ber_element);
        << attributes_loop >>
        WHILE l_attr_name IS NOT NULL LOOP
          -- Get all the values for this attribute.
          l_vals := DBMS_LDAP.get_values (ld        => l_session,
                                          ldapentry => l_entry,
                                          attr      => l_attr_name);
          << values_loop >>
          FOR i IN l_vals.FIRST .. l_vals.LAST LOOP
            DBMS_OUTPUT.PUT_LINE('ATTIBUTE_NAME: ' || l_attr_name || ' = ' || SUBSTR(l_vals(i),1,200));
          END LOOP values_loop;
          l_attr_name := DBMS_LDAP.next_attribute(ld        => l_session,
                                                  ldapentry => l_entry,
                                                  ber_elem  => l_ber_element);
        END LOOP attibutes_loop;
        l_entry := DBMS_LDAP.next_entry(ld  => l_session,
                                        msg => l_entry);
      END LOOP entry_loop;
    END IF;
  
    -- Disconnect from the LDAP server.
    l_retval := DBMS_LDAP.unbind_s(ld => l_session);
    DBMS_OUTPUT.PUT_LINE('L_RETVAL: ' || l_retval);
  
  END;
  /
  

  NOTE: The DN parameter on line 29 requires exact unique name for the user. In addition, on line 37 to filter, you can use username i.e. "cn = firstname.lastname."

  You can specify a specific attribute must be extracted from the user in order by changing line 33 of the:

  l_attrs(1) := '*';
  

  TO

  l_attrs(1) := 'title';
  

  Then you can write a function based on above the code to extract the attribute LDAP user as follows:

  create or replace function fnc_get_ldap_user_attr_val ( p_username in varchar2
                                                        , p_password in varchar2
                                                        , p_attrname in varchar2 )
  return varchar2
  as
  
    -- Adjust as necessary.
    l_ldap_host    VARCHAR2(256) := 'hct.org';
    l_ldap_port    VARCHAR2(256) := '389';
    l_ldap_user    VARCHAR2(256) := 'cn='||p_username;
    l_ldap_passwd  VARCHAR2(256) := p_password;
    l_ldap_base    VARCHAR2(256) := 'DC=hct,DC=org';
  
    l_retval       PLS_INTEGER;
    l_session      DBMS_LDAP.session;
    l_attrs        DBMS_LDAP.string_collection;
    l_message      DBMS_LDAP.message;
    l_entry        DBMS_LDAP.message;
    l_attr_name    VARCHAR2(256);
    l_attr_value   VARCHAR2(256);
    l_ber_element  DBMS_LDAP.ber_element;
    l_vals         DBMS_LDAP.string_collection;
  
  BEGIN
  
    -- Choose to raise exceptions.
    DBMS_LDAP.USE_EXCEPTION := TRUE;
  
    -- Connect to the LDAP server.
    l_session := DBMS_LDAP.init(hostname => l_ldap_host,
                                portnum  => l_ldap_port);
  
    l_retval := DBMS_LDAP.simple_bind_s(ld     => l_session,
                                        dn     => l_ldap_user||','||l_ldap_base,
                                        passwd => l_ldap_passwd);
  
    -- Get specific attributes
    l_attrs(1) := p_attrname;
    l_retval := DBMS_LDAP.search_s(ld       => l_session,
                                   base     => l_ldap_base,
                                   scope    => DBMS_LDAP.SCOPE_SUBTREE,
                                   filter   => l_ldap_user,
                                   attrs    => l_attrs,
                                   attronly => 0,
                                   res      => l_message);
  
    IF DBMS_LDAP.count_entries(ld => l_session, msg => l_message) > 0 THEN
      -- Get all the entries returned by our search.
      l_entry := DBMS_LDAP.first_entry(ld  => l_session,
                                       msg => l_message);
  
      << entry_loop >>
      WHILE l_entry IS NOT NULL LOOP
        -- Get all the attributes for this entry.
        DBMS_OUTPUT.PUT_LINE('---------------------------------------');
        l_attr_name := DBMS_LDAP.first_attribute(ld        => l_session,
                                                 ldapentry => l_entry,
                                                 ber_elem  => l_ber_element);
        << attributes_loop >>
        WHILE l_attr_name IS NOT NULL LOOP
          -- Get all the values for this attribute.
          l_vals := DBMS_LDAP.get_values (ld        => l_session,
                                          ldapentry => l_entry,
                                          attr      => l_attr_name);
          << values_loop >>
          FOR i IN l_vals.FIRST .. l_vals.LAST LOOP
            DBMS_OUTPUT.PUT_LINE('ATTIBUTE_NAME: ' || l_attr_name || ' = ' || SUBSTR(l_vals(i),1,200));
            l_attr_value := l_vals(i);
          END LOOP values_loop;
          l_attr_name := DBMS_LDAP.next_attribute(ld        => l_session,
                                                  ldapentry => l_entry,
                                                  ber_elem  => l_ber_element);
        END LOOP attibutes_loop;
        l_entry := DBMS_LDAP.next_entry(ld  => l_session,
                                        msg => l_entry);
      END LOOP entry_loop;
    END IF;
  
    -- Disconnect from the LDAP server.
    l_retval := DBMS_LDAP.unbind_s(ld => l_session);
    DBMS_OUTPUT.PUT_LINE('L_RETVAL: ' || l_retval);
    DBMS_OUTPUT.PUT_LINE('Attribute value: ' || l_attr_value);
  
    return l_attr_value;
  
  END fnc_get_ldap_user_attr_val;
  /
  

  Then create an Application AI_USER_AD_TITLE tell you item request-> shared components.

  Create following procedure to define the point of application on the connection of the user in your APEX application:

  create or replace procedure ldap_post_auth
  as
  
    l_attr_value varchar2(512):
  
  begin
  
    l_attr_value := fnc_get_ldap_user_attr_val ( p_username => apex_util.get_session_state('P101_USERNAME')
                                               , p_password => apex_util.get_session_state('P101_PASSWORD')
                                               , p_attrname => 'title' );
  
    apex_util.set_session_state('AI_USER_AD_TITLE', l_attr_value);
  
  end ldap_post_auth;
  

  Change the "name of procedure after authentication' in your 'ldap_post_auth' authentication scheme

  Then modify the process in charge on your homepage to your application of PORTALS to:

  begin
  
      if :AI_USER_AD_TITLE = 'Student' then
          apex_util.redirect_url(p_url=>'f?p=114:1');
      else
          apex_util.redirect_url(p_url=>'f?p=113:1');
      end if;
  
  end;
  

  I hope this helps!

  Kind regards

  Kiran

• Right users and groups cannot be found

  Hey all,.

  I have a problem with a gentle version of the last vCAC and when it comes to adding users and groups to the rights, I find it is blindly with the users and groups that it is and that it allows me to add even if I used some of the users and groups for other configurations and it worked properly just seems to be the right that really gives me worth.  Anyone seeing this and if so what did you do to go beyond that?

  Thank you

  Steve

  Hey steve,

  You have these users and groups added to the corresponding business group?

  BR,

  MG

• creating users and groups in weblogic.

  Hi, I'm new oracle bpm technology. I want to create users and groups for workflows. So can you please guide how to create in weblogic server.now we use oracle BPM 11.1.1.1.6.

  This should help - http://www.youtube.com/watch?v=NAHv_76Ozk8

• How to create user defined groups and users with custom permissions as only open and export in obiee 11 g?

  Hello

  I want to give as open & export to the level of permissions.

  How to create user defined groups and users with custom permissions as only open and export in obiee 11 g?

  For example, if the group permissions, inturn should reflect on the users.

  Please help me.

  Thanks in advance,

  A.Kavya.

  Your question is quite broad and fuzzy then I suggest the security catalog presentation to read documentation: http://docs.oracle.com/middleware/1221/biee/BIESC/mgrgrpsusers.htm#CIHIBJGD

  And I think that you mix you two things which are managed in different places:

  ) an object as read access permissions, write, delete... which control you through the object "Permissions" dialog box

  

  

  (b) functional privileges controlled through "Manage privileges" under "Administration".

  

• How to export users and groups Active Directory of hyperion shared services

  Hello

  We are on 11.1.2.3 and in a situation where we need to export all users and groups of shared services, including the native directory and Active Directory users and groups.

  
  

  Current method of LCM export only the NativeDirectory user and groups. -is this correct?

  
  

  Is there a way to export all users and groups including NativeDirectory and ActiveDirectory?

  
  

  Please suggest.

  
  

  Thank you

  I don't think that there is a way to make the groups and users to the AD, and I wouldn't.

  You need to connect the next AD system and pull on the users and groups in this way.

• access vCOps and import users or groups from LDAP

  Hello guys,.

  I have a few Questions concerning the access of standard and custom of the vcops dashboards.

  Do we not have to provide access to all users and groups in vcenter as shown in image 1 to give access to these groups and users for standard and custom dashboards?

  How does the Protocol LDAP works in custom dashboard? How the custom dashboard can authenticate users accessing personalized dashboards?

  Thank you

  VK

  Hi, VK,.

  Access to vSphere UI is managed via vCenter credentials.  Users need the vCenter Operations Manager user permission to access the user interface of vSphere.

  The custom user interface does not use the credentials of vCenter.  You can import the AD credentials via the LDAP protocol and set vC Ops to auto sync with your LDAP server.

• Using the script for import and export

  Hello
  
  Can any such a me what is the use of the script for import and export.
  
  After you move the pages from / to server what is the need to import / export command.
  
  export/oracle/apps/ap/setup/webui/customizations/site/0/SetupPG - rootdir < destination path > - user < database username > - password < database password > - dbconnection "(description = (address_list = (address = (community = tcp.world) (protocol = tcp) (host = < host name > (port < port id > =))) (connect_data = (sid = < sid >)))".) "
  
  Thanks in advance,
  Roselyne

  Hi Flo,

  Page and the region are stores in database import/export we really want pages/areas to store in the database.

  Thank you
  -Anil

• Additional portal for creating users and groups in OBIEE.

  Good afternoon everyone

  We are facing a situation where a resource by another company needs to create and manage their own users who will access OBIEE.

  That means that for the moment we have create users in Weblogic, but we cannot provide the resource with access to weblogic due to many other services running in the Weblogic causing a safety hazard.

  My question: is there another way, we can provide access to this resource through a portal that will only be able to manage the users and groups that will access OBIEE and not be able to view all other settings?

  Concerning

  Benoit

  Hi Benoit,.

  Cool, can you close the thread if it is right for you? Currently, it is still marked as

  This issue is no answer.

  If you have detailed follow-up questions (which I think you will to the BISQLProviders) you can make a custom thread and we will deal with this matter else on its own.

  See you soon

• Workflow VCO: for list users and groups

  Hello

  I am new to VCO, have created a basic workflow. Is it possible to create workflows to fetch groups, users, domain using VCO groups.

  -A

  Assuming an entry named group (AD:UserGroup) variable, the following journalisera the members of the Group:

  var members = group.userMembers;
  for each (member in members){
  System.debug("User: " + member.accountName);
  }
  

  In this loop above, each 'Member' in the loop is object of AD: use.

  Familiarize yourself with the API Explorer (available in the left pane when you change the script of any workflow, also from the main menu of tools: Tools-> API Explorer.) The API Explorer will show you most properties and methods for the object types that Orchestrator knows.

• How to import of existing. FLA files for versions previous of FLASH in the latest version of FLASH and then export to a FILE that is HTML5 and visible on IPAD?

  How to import of existing. FLA files for versions previous of FLASH in the latest version of FLASH and then export to a FILE that is HTML5 and visible on IPAD?

  Previous version of Flash & Dreamweaver (Macromedia 8)
  Current version of Flash & Dreamweaver (Adobe Flash Professional CC & CC professional Dreamweaver)

  Previously, you must create a FLA SWF export and then put in a layer in DREAMWEAVER

  However the SWF does not work on IPAD, IPHONE etc...

  so, what is the process to convert previous FLA files?

  or create new files in Dreamweaver? I mean that it must be the correct standard OPPS of today?

  Flash professional help | Create and publish a HTML5 Canvas document

• looking for a program that handel can import and export palm doc files

  I'm looking for a program that can handel the import and export of the doc files palm that can convert to either txt or RTF for Vista 32, Palm Desktop 7.1 running.

  Could someone give me some suggestions of any plugin that would be a good thing me?

  Hearns

  You can install Palm desktop 4.1.4 on Vista. It does not it's compatible, but a lot of people have used and reported no problems.

  I posted the instructions for clean uninstall of palm desktop 6.2 and the installation of palm desktop 4.1.4 in the last post. Docs allows you to version 6, which is compatible with your handheld.

• Fix a corrupted user profile - Outlook Import and addresses of mail folders.

  OS: Windows Vista editions Home Premium x 64.  When I try to log on I get the error msg "the user profile service has no logon.  User profile cannot be loaded. "In addition, if I try to go forward and asked a password I am informed that the password has failed.  I tried a system restore, but did not correct the user profile.  Finally, I used the procedures in the posted in Forum Vista to create a new user profile and copy files (music, pictures, Favorites, excel & Word docs, etc) in the new user profile.  Also, I used the Outlook Wizard to connect to my e-mail address with the server of my Internet service provider.

  Question: How do I copy/import my Outlook 2007 e-mail folders and addresses from my old to my new user profile user profile?

  Thank you very much for the help.

  Hello

  You can try to fix it with Safe Mode - repeatedly press F8 as you bootup.

  Some programs such as the Google Updater (if you added the toolbar Google, Chrome or Google Earth) has been
  known to cause this problem.

  How to fix error "the user profile Service has no logon. User profile cannot be loaded. »
  http://www.Vistax64.com/tutorials/130095-user-profile-service-failed-logon-user-profile-cannot-loaded.html

  How to fix error "your user profile was not loaded correctly! You have been logged on with a temporary
  Profile. "in Vista
  http://www.Vistax64.com/tutorials/135858-user-profile-error-logged-temporary-profile.html

  BE VERY CAREFUL IF YOU USE THIS ONE:

  DO NOT USE THE ACCOUNT HIDDEN ON A DAILY BASIS! If it corrrups you are TOAST.

  How to enable or disable the real built-in Administrator account in Vista
  http://www.Vistax64.com/tutorials/67567-administrator-account.html

  Use the hidden administrator account to lower your user account APPLY / OK and then lift it to ADMIN.
  This allows clear of corruption. Do the same for other accounts if necessary after following the above message.

  You can use the hidden - administrator account to make another account as an ADMINISTRATOR with the same password (or
  two with the same password) use to test or difficulty of the other.

  You can run the Admin account hidden from the prompt by if necessary.

  This tells you how to access the System Recovery Options and/or a Vista DVD
  http://windowshelp.Microsoft.com/Windows/en-us/help/326b756b-1601-435e-99D0-1585439470351033.mspx

  If you cannot access your old account, you can still use an Admin to migrate to another (do not forget to always
  not that an Admin account that is not used except for testing and difficulty).

  Difficulty of a corrupted user profile
  http://windowshelp.Microsoft.com/Windows/en-AU/help/769495bf-035C-4764-A538-c9b05c22001e1033.mspx

  ==============================================

  For the problem of Outlook, please check with the experts of the Office and Outlook here: (re - ask your question in)
  These groups). Basically you use Outlook - file - IMPORT and that it points to the Outlook.pst file on
  the old profile.

  Discussions of Questions General Outlook
  http://www.Microsoft.com/Office/Community/en-us/default.mspx?DG=Microsoft.public.Outlook.General&lang=en&CR=us

  MS Office discussion groups
  http://www.Microsoft.com/Office/Community/en-us/FlyoutOverview.mspx
  And here:

  Microsoft.public.Outlook discussions
  http://www.Microsoft.com/communities/newsgroups/list/en-us/default.aspx?DG=Microsoft.public.Outlook&cat=en_us_81f401b3-b3fe-4e8d-B291-066f30b63ec8&lang=en&CR=us

  Office newsgroups
  http://www.Microsoft.com/communities/newsgroups/list/en-us/default.aspx?DG=Microsoft.public.Office.Setup&cat=en_us_642d5640-c1ba-43C3-A224-b3ec1473346c&lang=en&CR=us

  I hope this helps.
  Rob - bicycle - Mark Twain said it is good.

• How can I import and export MBOX files in Thunderbird?

  Hi all, how can I import and export MBOX files in Thunderbird?

  I tried to install the add-on "ImportExportTools" but it seems that it is no longer recognized by Thunderbird, not the most recent generation.

  That this is the case, is no longer seems to be any official method of handling the files MBOX via Thunderbird, which is odd, given that Thunderbird itself announces that it is method of storage of email records is also MBOX files. It seems obvious that Thunderbird should natively support a file format import and export it is used internally

  If you know of a solution that does not rely on the conversion of traditionally third party utilities little reliable, please let me know.

  Thank you, KB_IT

  Hi there and thank you. I got it on 45.2.0.

  "" I haven't managed to make it work, but only by the search for available modules and following a request from 'import export tools' the "see all results" that work only then produced a success for the plugin in question and showed a button to install it.

  Installers hosted on the site of the third party do not work, nor their instructions to use the option "install file". work, which led to the creation of this ticket.

  Since then, I was able to do properly installed where it works very well.

  I hope that they are a regular feature. I intend to announce this as a best practice to my organization, in collaboration with Google fish, during the handling of the mbox files in Windows operating system.

  Thanks again, Kevin