LDAP Sun
Experts,Please let me know how to install the sun LDAP connector and server in OIM 11 g 2.
Refer to this
http://Srini-bellamkonda.blogspot.com/2012/11/installaling-and-configuring-odsee-for.html
Tags: Oracle
Similar Questions
-
Provisioning of the IOM users to ldap SUN
Hi all
I had installed 9.1.0 and connector 9.0.4.1 SJSDS, IOM
Whenever I create a user from the administration console that the user is configured for the ldap Protocol, the same when I change the first name or the name of the administration console is updated in the ldap Protocol.
But every time I update the e-mail id of the admin console, it is not be reflected in the ldap Protocol.
Is the "change email" or "e-mail update" does not get funded. (not sure what is actually)
I also worked with SPML update profile web services, the same thing happening there also.
whenever I have request a change of email ID, the value of the IOM gets changed, but he isn't getting put into service for the ldap Protocol.
I hope my problem statement is clear.
Please help me in this regard.
Thank you.
PS: I am very new to the IOM.Hello
I don't remember default connector has the job of changing Email set in the deployment of the connector process if just do after validation.
1. in Lookup.USR_PROCESS_TRIGGERS has the task to change Email defined in the research.
2 validate the Email task change is defined in the process of provision of connector.If task change Email is not defined in the procurement process and then define and fix the adpater for updating the system target.
Concerning
Nitesh -
Successive connection LDAP fails after the first LDAP authorization: with wrong password
Hello
I am currently integration Oracle CC & B utility to LDAP (Sun Directory Server java - SunOne), but I made a post here because CC & B delegates the task of authentication to the server Weblogic (I user WLS version 10).
In Weblogic, I configured two authentication providers:
1. the principal is the LDAP authentication provider (defined as optional control indicator)
2. secondary education is the default authentication provider (defined as optional control indicator)
Currently, some users of CC & B are stored in LDAP, and some other (more users system) are stored in the default authentication provider.
To help you make the problem more clear, I did the test with followingscenario:
1. user LDUser2 (stored in LDAP) login with correct passwrod-> success
2. the sysuser user (stored in the default authentication provider) connect with incorrect password-> access denied (what is good and normal)
3. the LDUser2 (stored in LDAP) user login with password-> successful OK
4. the sysuser user (stored in the default authentication provider) connect with correct password-> successful OK
5. the user (stored in LDAP) LDUser2 connect with the incorrect password-> denied access, which is normal. However, from this point, the problem starts
6. the user (stored in LDAP) LDUser2 connect with the right password-> rejected access KO is the problem
7. connection (also stored in LDAP as LDUser2) LDUser1 with the right password of the user-> big problem of access denied KO
8. the LDUser7 user (stored in the default authentication provider) connect with the right password-> successful access
9 restart the server resets the situation, but once a user is stored in the LDAP connection with a wrong password (5 point number), attempts by users stored in LDAP fail.
It seems that after the first LDAP authentication with wrong password, all users stored in LDAP connection attempts will fail.
Help, please.
Thank you.
JeffryHello
The connection attempt is made on console weblogic with the same result?
If I'm not wrong, until WLS 10.3 it is a problem reported where once the user connects with password and username incorrect, all attempts after that results in the failure of the connection.
The patch is available with up to 10.3 WLS support
This might be the question however need to check.
-
Have OAM authenticate/authorize users on servers of dir diff
Hi people,
Is it possible to have OAM authenticate/authorize users against diff server under single instance OAM dir?
We have autonomous OAM 10_1_4_3_0 w OHS11g installed on linux and connected to a particular directory server (ldap sun). We have also an application protected by OAM authenticates / allowing users on the same server dir. Pouvons we somehow configure the rules/policies/etc, so that the users who access the app B will be authenticated and authorized against dir Server B; users accessing the app C will be authenticated and authorized against dir server c; etc., without having multiple instances OAM?
Any help is greatly appreciated
Thank you, novelThe best way to do this is to set up a common directory OVD namespace under which each backend directory is represented as a different OU. For example, suppose you have two directories - one for internal users, that is AD and one for external users who is OID. Configure a common namespace, dc = yourcompany, dc = com. Then configure OUS for each directory, OU = external pointing to the OID and OU = internal who showed up at AD.
Then in your authentication schemes, create a credential mapping plugin for the bases of the different mapping (authentication scheme a for internal users, the other for external users).
And in your strategy for each application, configure the rule of authentication for the application to use the appropriate authentication scheme. If this is an application for internal users, use the user authentication schema internals and if an application external users, use the external authentication scheme.
-
DBMS_LDAP with encrypted passwords (SHA)
Guys,
We have a Server LDAP (Sun) that holds our passwords in an encrypted format (SHA).
DBMS_LDAP can be used to authenticate through clear text of the Nations Unies/PW to the LDAP server that encrypted passwords?
Any help with this really appreciated.
Thanks in advance.Hello
Yes absolutely, if you try to authenticate with the password in clear text, the LDAP server's hash and compare it with the stored value (if you think about it, it's the only way that you can really work if it worked if you spent in the password hashed out the place that would be a huge vulnerability for all who knew the value hashed - that is, they could authenticate without knowing the original password).
John.
--------------------------------------------
Blog: http://jes.blogs.shellprompt.net
Work: http://www.apex-evangelists.com
Author of Pro Application Express: http://tinyurl.com/3gu7cd
AWARDS: Don't forget to mark correct or useful posts on the forum, not only for my answers, but for everyone! -
Full reconciliation for Sun Java System Directory Server LDAP
The documentation for the connector says that once you do the first reconciliation, he automatically additional reconciliations then. He also says you can do lot of recons when you want. However it doesn't tell how to do the full recon.
Someone at - it no guidance on you you force all full recon?For the full recon, reset the target resource reconciliation timestamp"value in the * iPlanet user * IT resources to 0."
-
Uninitialized encryption algorithm (91); Unable to connect to the LDAP server
Hello
I configured a new 'provider' in Weblogic to LDAP server. And restarted the management server.
When I tried to search for LDAP users in the tab "Users and groups", there was no displayed to users. I checked the logs and found the entrance of error below.
< SNIP >
Caused by: netscape.ldap.LDAPException: encryption not initialized (91); Unable to connect to the LDAP server
to weblogic.security.providers.authentication.LDAPAtnDelegate$ AtnLDAPSSLSocketFactory.makeSocket (LDAPAtnDelegate.java:4647)
at netscape.ldap.LDAPConnSetupMgr.connectServer (unknown Source)
at netscape.ldap.LDAPConnSetupMgr.openSerial (unknown Source)
at netscape.ldap.LDAPConnSetupMgr.connect (unknown Source)
at netscape.ldap.LDAPConnSetupMgr.openConnection (unknown Source)
at netscape.ldap.LDAPConnThread.connect (unknown Source)
at netscape.ldap.LDAPConnection.connect (unknown Source)
at netscape.ldap.LDAPConnection.connect (unknown Source)
at netscape.ldap.LDAPConnection.connect (unknown Source)
to weblogic.security.providers.authentication.LDAPAtnDelegate$ LDAPFactory.newInstance (LDAPAtnDelegate.java:4141)
at weblogic.security.utils.Pool.newInstance(Pool.java:37)
at weblogic.security.utils.Pool.getInstance(Pool.java:33)
at weblogic.security.providers.authentication.LDAPAtnDelegate.getConnection(LDAPAtnDelegate.java:3487)
at weblogic.security.providers.authentication.LDAPAtnDelegate.getConnection(LDAPAtnDelegate.java:3479)
at weblogic.security.providers.authentication.LDAPAtnDelegate.listUsers(LDAPAtnDelegate.java:2267)
at weblogic.security.providers.authentication.LDAPAuthenticatorImpl.listUsers(LDAPAuthenticatorImpl.java:178)
at weblogic.security.providers.authentication.ActiveDirectoryAuthenticatorMBeanImpl.listUsers(ActiveDirectoryAuthenticatorMBeanImpl.java:227)
at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
< / SNIP >
Can someone tell me why I get this error.
Thank you
Shakeel
Hello
Please add - Dweblogic.security.SSL.nojce = true in your startWeblogic.sh script in the section "JAVA_OPTIONS.
Example: JAVA_OPTIONS = "${JAVA_OPTIONS}-Djavax.net.ssl.trustStore=/u07/oracle/certstore/test_keystore.jks-Dweblogic.security.SSL.nojce=true."
Please try this.
Thank you
-
Hi all
I installed Sun Java (TM) System Directory Server/5.2, which uses LDAP to the 6.0 (TAM) of Tivoli Access Manager.
LDAP has been installed on a separate server as well as the TAM (NPS server, server authorization) components.
I would like to encrypt an attribute (lets say UID) in LDAP as the attribute of password that is encrypted during installation of the software. So, what are all the steps I must follow to the encryption of the attribute. Help, please.
Hello
In addition to you that DS5.2 is an OLD memory, OBSOLETE, not supported, version... and I strongly suggest you move on to a current version (ODSEE 11.1.1.7.2)...
However, the steps are explained in the official documentation available:
Sun Java System Directory Server 5.2 Product Documentation for the library
and specifically to guide Administration:
http://docs.Oracle.com/CD/E19850-01/816-6698-10/entries.html#18538
HTH,
Marco.
PS: when closing a thread as answered please check the answers to fix/useful to help others find.
-
Hello guys, I encounter the above error while trying to redeploy applications Saas Extension JCS service.
Anyone has any ideas on what is causing this? Here is the complete Log file
2015-04-23 00:21:23 PDT: Starting action "Deploy Application" 2015-04-23 00:21:23 PDT: Deploy Application started 2015-04-23 00:21:32 PDT: weblogic.application.WrappedDeploymentException: [LDAP: error code 32 - No Such Object]weblogic.application.WrappedDeploymentException: [LDAP: error code 32 - No Such Object] at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3112) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3033) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2840) at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1849) at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1772) at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386) at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356) at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:276) at oracle.security.jps.internal.common.ldap.util.JpsLdapCommonUtil.search(JpsLdapCommonUtil.java:261) at oracle.security.jps.internal.common.ldap.util.JpsLdapCommonUtil.search(JpsLdapCommonUtil.java:221) at oracle.security.jps.internal.policystore.ldap.JpsLdapDataManager.jpsObjectListQuery(JpsLdapDataManager.java:778) at oracle.security.jps.internal.policystore.entitymanager.impl.InternalQueryManagerImpl.getAttributes(InternalQueryManagerImpl.java:424) at oracle.security.jps.az.internal.management.pd.service.GenericPolicyDistributionService.getAttributes(GenericPolicyDistributionService.java:949) at oracle.security.jps.az.internal.management.pd.service.GenericPolicyDistributionService.internalGetAppPolicyEntry(GenericPolicyDistributionService.java:732) at oracle.security.jps.az.internal.management.pd.service.GenericPolicyDistributionService.getAppPolicyEntry(GenericPolicyDistributionService.java:668) at oracle.security.jps.az.internal.management.pd.service.GenericPolicyDistributionService.getAppPolicyEntry(GenericPolicyDistributionService.java:412) at oracle.security.jps.az.internal.management.pd.service.PolicyDistributionServiceImpl.getAppPolicyEntry(PolicyDistributionServiceImpl.java:175) at oracle.security.jps.az.internal.runtime.policy.ApplicationPolicyImpl.initWithAppPolicyEntry(ApplicationPolicyImpl.java:307) at oracle.security.jps.az.internal.runtime.policy.ApplicationPolicyImpl.initAppPolicy(ApplicationPolicyImpl.java:284) at oracle.security.jps.az.internal.runtime.policy.ApplicationPolicyMap.get(ApplicationPolicyMap.java:113) at oracle.security.jps.az.internal.runtime.service.PDPServiceImpl.getApplicationPolicy(PDPServiceImpl.java:845) at oracle.security.jps.az.internal.runtime.service.PDPServiceImpl.getApplicationPolicy(PDPServiceImpl.java:796) at oracle.security.jps.internal.policystore.PolicyUtil.getGrantedAppRoles(PolicyUtil.java:3005) at oracle.security.jps.internal.policystore.PolicyUtil.getJpsAppRoles(PolicyUtil.java:1968) at oracle.security.jps.internal.policystore.PolicyUtil.getJpsAppRoles(PolicyUtil.java:1913) at oracle.security.jps.internal.core.util.SubjectResolverComputor$1.run(SubjectResolverComputor.java:152) at oracle.security.jps.internal.core.util.SubjectResolverComputor$1.run(SubjectResolverComputor.java:143) at java.security.AccessController.doPrivileged(Native Method) at oracle.security.jps.internal.core.util.SubjectResolverComputor.getAppRoles(SubjectResolverComputor.java:143) at oracle.security.jps.internal.core.util.SubjectResolverComputor.compute(SubjectResolverComputor.java:123) at oracle.security.jps.internal.core.util.SubjectResolverCacheImpl.computeJpsSubject(SubjectResolverCacheImpl.java:207) at oracle.security.jps.az.internal.runtime.service.PDPServiceImpl.computeJpsSubject(PDPServiceImpl.java:2376) at oracle.security.jps.internal.jaas.JpsAbsSubjectResolver.resolveJpsSubject(JpsAbsSubjectResolver.java:216) at oracle.security.jps.internal.jaas.JpsAbsSubjectResolver.resolveSubject(JpsAbsSubjectResolver.java:175) at oracle.security.jps.ee.jmx.JpsJmxInterceptor.internalPreRegister(JpsJmxInterceptor.java:461) at oracle.as.jmx.framework.generic.spi.interceptors.AbstractMBeanInterceptor.doPreRegister(AbstractMBeanInterceptor.java:180) at oracle.as.jmx.framework.generic.spi.interceptors.DefaultMBeanInterceptor.internalPreRegister(DefaultMBeanInterceptor.java:81) at oracle.as.jmx.framework.generic.spi.interceptors.ContextClassLoaderMBeanInterceptor.internalPreRegister(ContextClassLoaderMBeanInterceptor.java:150) at oracle.as.jmx.framework.generic.spi.interceptors.AbstractMBeanInterceptor.doPreRegister(AbstractMBeanInterceptor.java:180) at oracle.as.jmx.framework.generic.spi.interceptors.DefaultMBeanInterceptor.internalPreRegister(DefaultMBeanInterceptor.java:81) at oracle.as.jmx.framework.generic.spi.interceptors.AbstractMBeanInterceptor.doPreRegister(AbstractMBeanInterceptor.java:180) at oracle.as.jmx.framework.standardmbeans.spi.OracleStandardEmitterMBean.preRegister(OracleStandardEmitterMBean.java:619) at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.preRegister(DefaultMBeanServerInterceptor.java:1007) at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.registerDynamicMBean(DefaultMBeanServerInterceptor.java:919) at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.registerObject(DefaultMBeanServerInterceptor.java:900) at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.registerMBean(DefaultMBeanServerInterceptor.java:324) at com.sun.jmx.mbeanserver.JmxMBeanServer.registerMBean(JmxMBeanServer.java:522) at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$27.run(WLSMBeanServerInterceptorBase.java:714) at java.security.AccessController.doPrivileged(Native Method) at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase.registerMBean(WLSMBeanServerInterceptorBase.java:709) at weblogic.management.mbeanservers.internal.JMXContextInterceptor.registerMBean(JMXContextInterceptor.java:445) at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$27.run(WLSMBeanServerInterceptorBase.java:712) at java.security.AccessController.doPrivileged(Native Method) at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase.registerMBean(WLSMBeanServerInterceptorBase.java:709) at weblogic.management.jmx.mbeanserver.WLSMBeanServer.registerMBean(WLSMBeanServer.java:462) at oracle.as.jmx.framework.wls.spi.security.PrivilegedMBeanServerInterceptor$1.run(PrivilegedMBeanServerInterceptor.java:55) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363) at oracle.as.jmx.framework.wls.spi.security.PrivilegedMBeanServerInterceptor.registerMBean(PrivilegedMBeanServerInterceptor.java:60) at oracle.mds.internal.lcm.MDSLifecycleListenerImpl.start(MDSLifecycleListenerImpl.java:173) at oracle.mds.lcm.weblogic.WLLifecycleListener.preStart(WLLifecycleListener.java:77) at weblogic.application.internal.flow.BaseLifecycleFlow$PreStartAction.run(BaseLifecycleFlow.java:290) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321) at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120) at weblogic.application.internal.flow.BaseLifecycleFlow$LifecycleListenerAction.invoke(BaseLifecycleFlow.java:207) at weblogic.application.internal.flow.BaseLifecycleFlow.preStart(BaseLifecycleFlow.java:64) at weblogic.application.internal.flow.HeadLifecycleFlow.prepare(HeadLifecycleFlow.java:283) at weblogic.application.internal.BaseDeployment$1.next(BaseDeployment.java:648) at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52) at weblogic.application.internal.BaseDeployment.prepare(BaseDeployment.java:191) at weblogic.application.internal.EarDeployment.prepare(EarDeployment.java:59) at weblogic.application.internal.DeploymentStateChecker.prepare(DeploymentStateChecker.java:154) at weblogic.deploy.internal.targetserver.AppContainerInvoker.prepare(AppContainerInvoker.java:61) at weblogic.deploy.internal.targetserver.operations.ActivateOperation.createAndPrepareContainer(ActivateOperation.java:208) at weblogic.deploy.internal.targetserver.operations.ActivateOperation.doPrepare(ActivateOperation.java:98) at weblogic.deploy.internal.targetserver.operations.AbstractOperation.prepare(AbstractOperation.java:221) at weblogic.deploy.internal.targetserver.DeploymentManager.handleDeploymentPrepare(DeploymentManager.java:747) at weblogic.deploy.internal.targetserver.DeploymentManager.prepareDeploymentList(DeploymentManager.java:1216) at weblogic.deploy.internal.targetserver.DeploymentManager.handlePrepare(DeploymentManager.java:250) at weblogic.deploy.internal.targetserver.DeploymentServiceDispatcher.prepare(DeploymentServiceDispatcher.java:159) at weblogic.deploy.service.internal.targetserver.DeploymentReceiverCallbackDeliverer.doPrepareCallback(DeploymentReceiverCallbackDeliverer.java:171) at weblogic.deploy.service.internal.targetserver.DeploymentReceiverCallbackDeliverer.access$000(DeploymentReceiverCallbackDeliverer.java:13) at weblogic.deploy.service.internal.targetserver.DeploymentReceiverCallbackDeliverer$1.run(DeploymentReceiverCallbackDeliverer.java:46) at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:545) at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256) at weblogic.work.ExecuteThread.run(ExecuteThread.java:221) 2015-04-23 00:21:32 PDT: WL action state: failed 2015-04-23 00:21:32 PDT: Action FAILED with WL action state: failed 2015-04-23 00:21:32 PDT: Check the server log of your Java cloud service for more info about the failure. 2015-04-23 00:21:32 PDT: Application deployment failed. 2015-04-23 00:21:32 PDT: "Deploy Application" complete: status FAILED
Nothing major changes, it seems that the thrown exception is quite misleading. I created a new profile of deployment and everything seemed to work very well. Not very well why things went south at the start after having been previously successful
-
Hello, can someone cause this problem
I set up LDAP on bi_publisher 11.1.1.7.140527 .
My xmlp-server-config. XML
Using LDAP MS Server 2008 r2 on rhel 6.5 bublisher
-bash-3, $ 2 vi xmlp-server-config. XML
"xmlp-server - config.xml" 35 lines, characters of 2144
" < xmlpConfig xmlns =" http://xmlns.Oracle.com/OXP/xmlp "> "
< property name = "SUPERUSER_PASSWORD" value = "AA3AED1C5A0644CA81AE7483BDB34E2205767AB6BEC7" / >
< property name = "MONITORING_ENABLED" value = "false" / >
< property name = "SUPERUSER_USERNAME" value = "Administrator" / >
< property name = "SAW_PASSWORD" value = "" / >
< property name = "GUEST_FOLDER" value = "false" / >
< property name = "LDAP_PROVIDER_GROUP_ATTR_DESCRIPTION" value = "description" / >
< property name = "SAW_SERVER" value="xxx-xx.xxx.xxx.ru"/ >
< property name = "SAW_JBIPS_PORT" value = "9710" / >
< property name = "SAW_USERNAME" value = "" / >
< property name = "LDAP_PROVIDER_GROUP_ATTR_MEMBER" value = "Member" / >
< property name = "LDAP_PROVIDER_ADMIN_USERNAME" value = "CN = XxxxxXXxxxxx, OR = XXXUsers, DC = xxx, DC = xxx, DC = UK" / >
< property name = "SAW_VERSION" value = "v7" / >
< property name = "ENABLE_SUPERUSER" value = "true" / >
< property name = "MONITORING_DEFAULT_HISTORY_SIZE" value = "30" / >
< property name = "LDAP_PROVIDER_URL" value = "ldap://xxx.xxx.ru:389" / >
< property name = 'DEBUG_LEVEL' value = "exception" / >
< property name = "LDAP_PROVIDER_GROUP_SEARCH" value = "(& amp; (objectclass = group)(cn=*))" / >
< property name = "SAW_SESSION_TIMEOUT" value = "90" / >
< property name = "OPTIMIZE_BURST" value = "false" / >
< property name = "LDAP_PROVIDER_AUTO_CACHE_CLEAR" value = "true" / >
< property name = "SAW_PROTOCOL" value = "http" / >
< property name = "SAW_PORT" value = "9704" / >
< property name = "SAW_URL_SUFFIX" value="analytics-ws/saw.dll"/ >
< property name = "ENDECA_URL_SUFFIX" value = "ws" / >
< property name = "SECURITY_MODEL" value = "LDAP" / >
< property name = "LDAP_PROVIDER_ADMIN_PASSWORD_ENC" value = "xxxxxXxXXx" / >
< property name = "JSESSION_RESET_DISABLED" value = "true" / >
< property name = "LDAP_PROVIDER_GROUP_SEARCH_ROOT" value = "OR Groups, OR = Xxxxxx, OU = 99 = OR = 00, OU = DC = xxx, DC = ru, DC = xxx and Xxxxxxx" / >
< property name = "AUDIT_ENABLED" value = "false" / >
< property name = "LDAP_PROVIDER_FACTORY" value="com.sun.jndi.ldap.LdapCtxFactory"/ >
< property name = "LDAP_PROVIDER_USER_DN" value = "OR is XXXUsers, DC is xxx, DC = xxx, DC = UK" / >
< property name = "ENDECA_PORT" value = "9704" / >
< property name = "LDAP_PROVIDER_GROUP_ATTR_NAME" value = "cn" / >
< / xmlpConfig >
Also try
< property name = "LDAP_PROVIDER_ADMIN_USERNAME" value="xxx.xxx.ru/XxxxxxXXxxxxx"/ > for advertisement on Siebel Server 2008 (use the format [field]-[user] - Doc ID 1441463.1)
as resouls has received the error
1 0 xx_server1 Oracle.XDO xxx - xx.xxx.xxx.ru XX.x.xxx.XX < anonymous > 11 df9a7485245e0c6f:-1b0aa5a4:14758e557fe: - 8000-000000000000159 d java.lang.RuntimeException: java.lang.NullPointerException at oracle.xdo.servlet.security.LDAPSecurityHandler.getLDAPPrincipal(LDAPSecurityHandler.java:286)
at oracle.xdo.servlet.security.LDAPSecurityHandler.impersonate(LDAPSecurityHandler.java:61)
at oracle.xdo.servlet.security.BaseSecurityHandler.impersonateForSawIntegration(BaseSecurityHandler.java:1932)
at oracle.xdo.servlet.security.BaseSecurityHandler.getPrincipalWithSawSession(BaseSecurityHandler.java:1348)
at oracle.xdo.servlet.security.SecurityFilter.handleBieeIntegratedMode(SecurityFilter.java:485)
at oracle.xdo.servlet.security.SecurityFilter.doFilter(SecurityFilter.java:210)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.xdo.servlet.init.InitCheckingFilter.doFilter(InitCheckingFilter.java:63)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
to oracle.security.jps.ee.http.JpsAbsFilter$ 1.run(JpsAbsFilter.java:119)
at java.security.AccessController.doPrivileged (Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:460)
at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
to oracle.security.jps.ee.http.JpsAbsFilter$ 1.run(JpsAbsFilter.java:119)
at java.security.AccessController.doPrivileged (Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:460)
at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
to weblogic.servlet.internal.WebAppServletContext$ ServletInvocationAction.wrapRun (WebAppServletContext.java:3715)
to weblogic.servlet.internal.WebAppServletContext$ ServletInvocationAction.run (WebAppServletContext.java:3681)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2277)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2183)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1454)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
Caused by: java.lang.NullPointerException
at java.util.Hashtable.put(Hashtable.java:394)
at oracle.xdo.security.LdapValidator.getDirContext(LdapValidator.java:489)
at oracle.xdo.security.LdapValidator.validate(LdapValidator.java:466)
at oracle.xdo.servlet.security.LDAPSecurityHandler.getLDAPPrincipal(LDAPSecurityHandler.java:246)Solve, need to add
change
Restart the server admin, bi_server1, opmn
-
Sun Directory Server cannot delete an entry
Hi I use Sun DS 6.0. A suffix is enabled for replication as a CONSUMER. I disabled the replication of the master agreement. Now, I'm trying to delete a single entry to the consumer. I am getting error LDAP refferal.
Can someone suggest a solution to remove the entry
Hello
as long as the consumer will be, you should think of it as a kind of replica in read-only which can be updated only a master. All write operation will be actually redirected (through the referral) to masters of the topology.
If you want to remove a single entry you must reconnect the replication and delete the entry on the master server.
ATTENTION: there is a "time window", a replica can be left out of the topology of replication and automatically catching up with the updates:
The default is one week, after that you will need to perform a re-initialization of the replica of the consumer.
HTH,
Marco
-
We can connect through embedded weblogic ldap
Hi all
We can connect to weblogic incorporated using following code
< String, String > Hashtable env = new Hashtable < String, String > ();
env.put (Context.INITIAL_CONTEXT_FACTORY,
"com.sun.jndi.ldap.LdapCtxFactory");
env.put (Context.SECURITY_AUTHENTICATION, 'Simple');
env.put (Context.SECURITY_PRINCIPAL, "CN = admin, CN = Users, DC = ucm_domain");
env.put (Context.SECURITY_CREDENTIALS, "welcome1");
env.put (Context.PROVIDER_URL, "ldap://198.168.0.147:7001"); ")
env.put ("com.sun.jndi.ldap.connect.timeout", "1");
DirContext ctx = new InitialDirContext (env);
System.out.println ("connection successful.");
} catch (NamingException nex) {}
System.out.println ("connection LDAP: FAILED");
nex.printStackTrace ();
Well, you can try to connect using weblogic identity internal store
try {} JpsContextFactory ctxFactory = JpsContextFactory.getContextFactory (); JpsContext ctx = ctxFactory.getContext (); LdapIdentityStore idstoreService = (LdapIdentityStore) ctx.getServiceInstance (IdentityStoreService.class); idStore = idstoreService.getIdmStore (); } catch (IdentityStoreException ise) {} Logger.severe ("IdentityStoreException in OCCSpacesUserDataClient. Failed to initialize the objects of static block. ", ise); } catch {} (I JpsException) Logger.severe ("IdentityStoreException in OCCSpacesUserDataClient. Failed to initialize the objects of static block. "(,je);" }
It will give all the information of the user. It has different method like searchuser etc.
-
Schedule 7 - How can I change the proxy ldap user?
Hello
Because we have to replace our old Calendar Server, I have prepared a new server virtual calendar (vcalendar7).
As we already have a Calendar Server virtual used to test new versions of calendar7 (precalendar7), I created a clone
of it, changed its name, the network settings... and I run init-config.It seems to work, but when I listed config I see no new proxy user who binds the directory server
has been created. The user is the user created on the test server.I would like one for the new server.
How can I force the creation during the init-config process?I tried to change the value of the base.ldapinfo.ugldap.binddn:
davadmin config change o base.ldapinfo.ugldap.binddn - v "cal-admin - vcalendar7.mydomain.com - 20140419144243Z,...» »
After a reboot I run init-config
No ldap changes has been generated...
at the end of the initial value reappears: cal-admin - precalendar7.mydomain.com - 20121219144243Z...
Can you help me?
Hello
Check the file /opt/sun/comms/davserver/lib/config-templates/DavserverCfg.properties for the cal.enduser.admin.userid of entry. It can still have the old value.
Either change the file to get the correct value or rename/detected file and then restart init-config.
-Deb
-
VCAC6 error: could not retrieve upnSuffixes in AD on Ldap provider
Hello
I had sent a new VCAC 6.0.1 environment and I get a lot of error to /var/log/vmware/sso/vmware-sts-idmd.log who speaks of "Impossible to extract the upnSuffixes in Ldap AD Over provider."
[2014-08-01 16:09, 453 05180a84-03a1-4771-9c80-148a8cbe3c6d demo ERROR] [LdapWithAdMappingsProvider] Failed to retrieve the upnSuffixes in demo.test.local provider Ldap AD Over
java.security.InvalidParameterException: Null or empty values
at com.vmware.identity.idm.server.provider.BaseLdapProvider.getStringValues(BaseLdapProvider.java:238)
at com.vmware.identity.idm.server.provider.ldap.LdapWithAdMappingsProvider.getAlterUpnSuffixes(LdapWithAdMappingsProvider.java:233)
at com.vmware.identity.idm.server.provider.ldap.LdapWithAdMappingsProvider.getRegisteredUpnSuffixes(LdapWithAdMappingsProvider.java:283)
at com.vmware.identity.idm.server.provider.BaseLdapProvider.normalizeAliasInPrincipal(BaseLdapProvider.java:363)
at com.vmware.identity.idm.server.provider.ldap.LdapWithAdMappingsProvider.authenticate(LdapWithAdMappingsProvider.java:304)
at com.vmware.identity.idm.server.IdentityManager.authenticate(IdentityManager.java:2420)
at com.vmware.identity.idm.server.IdentityManager.authenticate(IdentityManager.java:7907)
at sun.reflect.GeneratedMethodAccessor91.invoke (unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke (unknown Source)
at java.lang.reflect.Method.invoke (unknown Source)
at sun.rmi.server.UnicastServerRef.dispatch (unknown Source)
to sun.rmi.transport.Transport$ 1.run (unknown Source)
to sun.rmi.transport.Transport$ 1.run (unknown Source)
at java.security.AccessController.doPrivileged (Native Method)
at sun.rmi.transport.Transport.serviceCall (unknown Source)
at sun.rmi.transport.tcp.TCPTransport.handleMessages (unknown Source)
to sun.rmi.transport.tcp.TCPTransport$ ConnectionHandler.run0 (unknown Source)
to sun.rmi.transport.tcp.TCPTransport$ ConnectionHandler.run (unknown Source)
at java.util.concurrent.ThreadPoolExecutor.runWorker (unknown Source)
to java.util.concurrent.ThreadPoolExecutor$ Worker.run (unknown Source)
at java.lang.Thread.run (unknown Source)
I don't know is this a normal behavior? I have no doubt but I wanted to know, otherwise what would probably get bad around here...
Thanks in advance!
BR,
MG
I could solve the problem by changing the Port for LDAP 389 to Global Catalog Port 3268. This error was to come with the child trusted user in the main domain member. Since I changed the GC port, I'm no more have these errors.
Thank you
BR,
MG
-
Download Java from Sun Directory Server 5.2 x 86
I'll try to find a copy of the x 86 Server version Sun Java Directory compressed archive for Solaris. I am trying to build a test system for some old software, and I have only a copy of the Sparc ldap version. I tried to use the current version of Department available on Oracle e-delivery cloud, but the software is too old to work with it... it's needs version 5.2, specifically. Is anyone know where I can find a copy?
Thanks for any help.
Nope
This is part of the policy of life Support Oracle:
http://www.Oracle.com/us/support/lifetime-support/index.html
'OLD' products can / can still be supported under * SPECIAL * assistance contracts. So if you are entitled to support, you can access it. Otherwise, I fear that the answer is no.
HTH,
Marco
Maybe you are looking for
-
photos of the iPhone will not erase after importing
I have an iPhone 6 Plus. I don't sync them to iTunes library pictures, I just plug my phone from time to time and load all my photos in the Photos app and check the box to delete after import. He never removes my pictures, and now I'm starting to hav
-
Button full screen Vimeo on iweb - CHANGED
Vimeo has changed their code so that if you have a website built with iweb and embed a vimeo video, you no longer have the arrow button "full screen" visible in the menu bar under a video that plays. PROBLEM: They suggested that the reason is the fol
-
Sort excel spreadsheet using activex
Hi all I need to find a way to open and document, excel adds a row of data, then sort the data in the first column and save the document again. I've seen and used other commands of activex for excel, but I have not found a way to do what I want to d
-
Is there a compatible with the HDR-XR100 Handycam wireless microphone? I really want to find one, preferably less than $200. Laurie H.
-
How to transfer my music FROM Media Player to iTunes?
Hello, I have an iPhone and I want to use my iTunes. When I used the easy transfer cable he put all my music in Media Player and iTunes not. I can't get Windows 7 to allow me to transfer my music and video from Media Player to iTunes. How can I do