WebLogic with problem supplier Active Directory Authentication: < DN for user...: null >

Similar Questions

• Windows Server 2008 R2, with two Windows Storage Server 2003 Standard: How can I add the MAC authentication on top of Active Directory authentication for a storage servers?

  I have two running Windows Storage Server 2003 storage servers in a domain R2 Windows Server 2008 Standard.  On top of the Active Directory authentication, I want to add authentication of MAC address for the access to one of the storage servers.  In this scenario, an authenticated user is unable to log on to the target storage server unless the user is also on one of the computers MAC address accepted.  All domain users will have access to other folders and files as configuration storage server in Active Directory.  I already have a user access to installation by the permissions for folders on the storage server target, but I still want to restrict access to specific computers as well.  For what it's worth the server hardware is HP Proliant DL360 G5 for the Standard Server 2008 R2 and server HP Proliant DL185 G5 for two Storage Server 2003 computers.  I don't want to have MAC address authentication as the main means of access control to the network, only for the storage server a as an addition to control Active Directory.

  Hi Kerry,

  The question you posted would be better suited in the TechNet Server Forums since we have dedicated to this support; We recommend that you post your question in the TechNet Forums to get help:

  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

  Keep us informed on the status of the issue.

• An error occurred when DNS was questioned about the resource record (SRV) service location used to locate a domain controller Active Directory (AD DC) for the domain 'HAMI. LOCAL ".

  An error occurred when DNS was questioned about the resource record (SRV) service location used to locate a domain controller Active Directory (AD DC) for the domain 'HAMI. LOCAL ".

  The error was: "an existing connection was to be closed by the remote host".
  (0 x 00002746 WSAECONNRESET error code)

  The query was for the SRV record for _ldap._tcp.dc._msdcs. HAMI. LOCAL

  Hello

  Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the Forums TechNet Windows 7 Technet.

  Here is the link:
  http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads

  Hope this helps

• Continuation with VIO and Active Directory reference error

  While deploying the instance OpenStack de VIO, I get the following error message when checking the parameters of authentication source:

  Cannot find the specified user (Group). Details: The LDAP search request failed. Further reference

  This seems to be a problem, I met several times, where AD would send a reference instead of the response that the client must follow. But I don't see any option to allow removal with Active Directory. Is there a way around this?

  Concerning

  Gerald

  I found a work around for the problem:

  The query is successful when you use the ports for the Active Directory Global catalog.

  The ports are:

  • 3268 (without encryption)

  or

  • 3269 (with SSL)

  Disadvantage: You can't just use your do domain name address all the domain controller, you must specify one with its host name.

• Active Directory authentication via host profile

  I am trying to use apply a profile host through powershell script that will add an esxi host to my domain active directory.

  $vCenter = Read-Host "Enter vCenter.

  $esxhost = Read-Host "enter the domain the ESXi host's FULL name.

  $ADdomaincreds = $host.ui.PromptForCredential ("Enter Credentials", "Please enter your user name Active Directory and password.", "", "")

  $hostprofile = Read-Host "Enter HostProfile to apply"

  SECURESTRING #CONVERT

  $CONVERT_AD_PASSWORD = http://System.Runtime.InteropServices.Marshal: SecureStringToBSTR($ADdomaincreds.Password)

  $AD_PASSWORD = http://System.Runtime.InteropServices.Marshal: name ($CONVERT_AD_PASSWORD)

  SE connect-VIServer $vCenter

  $hostprof = get-VMHostprofile-name $hostprofile

  $applyhost = get-VMHost $esxhost

  Game-VMHost - VMHost $applyhost - State "maintenance".

  $additionalConfiguration = apply-VMHostProfile - ApplyOnly - $hostprof profile-entity $applyhost - confirm: $false

  $additionalConfiguration = $ADdomaincreds.username

  $additionalConfiguration = $AD_PASSWORD

  $additionalConfiguration = apply VMHostProfile - $hostprof profile-entity $applyhost - Variable $additionalConfiguration - confirm: $false

  It runs without error, but when I look at the esxi host he always says that he uses local authentication.  If I apply the host through the VI Client profile, it works without problem. Is this what I need to put in the variable?

  I also tried using the Set-VMHostADDomain of LucD function.  This works, however, if I then apply the profile of my host to complete the configuration of the other components such as syslog, ntp, etc., authentication gets restore local authentication after a reboot.

  Hello

  There is a bug in the Apply-VMHostProfile cmdlet that is already filed in our bugtracking system. The fix will be available in a future release.

  The problem is caused by using an incorrect version of the API (4.0) which is not taken in charge of operations active directory.

  Here are possible solutions:

  1. join the domain without using the host profile feature. Here's a simple script that can do for you:

  function JoinDomainWithAD ($vmhost, $domainName, $domainUser, $domainPassword) {
     $vmhostView = Get-View -id $vmhost.ID
     $authenticationManagerView = Get-View $vmhostView.ConfigManager.AuthenticationManager
     $hostActiveDirectoryAuthenticationMoRef = $authenticationManagerView.SupportedStore | where { $_.Type -eq 'HostActiveDirectoryAuthentication' }
     $hostActiveDirectoryAuthentication = Get-View $hostActiveDirectoryAuthenticationMoRef
     $hostActiveDirectoryAuthentication.JoinDomain($domainName, $domainUser, $domainPassword)
  }
  

  2. apply the solution profiles host with direct API calls (Get-View)

  Let me know if you need anything that anyone else.

  Kind regards

  Nedko Nedev

  PowerCLI development team

• Active Directory virtualization - security for AD VMDK

  Hello

  I'm an Active Directory server virtualization project manager. Currently, they are all physical, and my approach is to build virtual computers costs running 64-bit Windows 2003 R2 with sufficient storage space and disk. The actual creation of the VM is not a problem. But what is a problem for our security people and AD ops team is to protect the vmdk and associated files.

  The current VSI (Virtual Server Infrastructure) has each computer virtual using a LUN for the OS disk (c :)) drive and another logic unit number for the Page file/temp files.) Data files are also placed on a separate logical unit number. Now, the question arises since all virtual machines for a single blade (host ESX, BL685 HP) server are placed on the same logical unit number, there will be a mixture of files of the type of server (apps, SQLs, ads, etc.) in the data store. This means that C readers for all the virtual machines on this blade are running under the same security policy.

  If lock us the data store for the people of AD and other approved people, then the people to support normal ops (in another country) do not receive access to files. Only the AD team has right of ads and domain controllers, so I will try to reproduce this security model.

  So my idea is to have specific data only for ads stores; provide one for the C: drive (SysVol, etc.) and the other for Page files. Then I can lock these and let others to their current level of security.

  Does this sound logical? Feasible? Prefferable?

  That others make about it? Or is it overkill?

  Thank you very much

  Mark-Allen

  My guess is that only the AD team would never start/stop/etc a virtual machine, then maybe that's possible.

  You can create a custom role on your permission vcenter and delegete for some users, who will not have access to certain virtual machines!

• Authentication failed for users of the AD and work for users of OID using OAM 11 G

  Hi all
  
  
  I have deployed an Application in OSH where the doors of the web are installed. In OAM 11 G, I created the Userid as OVD store and created policies for that. and I was able to protect the application.
  
  But authentication works very well for users of the OID. But does not not for users of the AD (saying ID user and password are incorrect)
  
  Part of the OID, AD with TPM. but the AD authentication does not work.
  
  
  could someone help me with this.
  
  
  
  Thank you
  Kiran

  Hi Kiran,

  Check that the name attribute of such user as defined in the Data Source is mapped in TPM attribute AD that you plan to hold the user name. Perhaps, it is use usrprincipalname instead of the samaccountname, or something like that? The oam_server1 - diagnostic.log, or newspapers OVD, may give more clues as to which is the problem.

  Kind regards
  Colin

• Meraki and Active Directory authentication

  Hello

  I have two remote sites, each with 5 users and pc. Instead of Site2Site VPN, I want to use Meraki, but want to ensure that users always authenticate with my ad.

  The domain controller is AWS.

  What is the process to put in place what and what is the communicati0n arise when a user enters their cred to ad authentication?

  Thanks in advance.

  https://Meraki.Cisco.com/blog/2014/11/now-in-the-MX-greater-flexibility-...

• Sharing of active command not available for users

  I searched all day for some reason why my non-admin in Contribute 3 users can't insert images via the Insert-> option of Division of property. The command is dimmed. Their role permissions have "authorize unlimited edition", so I can't understand why they would be excluded from this shared good feature. I REALLY want to give these users full administrator privileges. They become tired to rerun new connection key everytime I try to chance a new setting. Any help would be greatly appreciated.

  It seems that by disabling the ability of the user to insert images (with the exception of shared property) is the way to go. As long as an administrator I was spoiled as I can insert images any way I chose (insert--> images, cut-and - paste and shared property). As a normal user, it's one or the other, either shared assets or Insert--> Images, not both.

  So in order to give users the ability to access shared property, you must go and set "Allow unrestricted editing" then check the option 'prevent users to insert images. After that they activate the connection key it then only allows them to insert images in active sharing feature.

• Oracle Apex 4.2.4 is compatible with IE10?  Need to update IE for users. Please cofirm that any product will be appreciated. Thank you

  We work on IE9, need to upgrade version of IE. But before that must confirm, that it is compatible with IE10 or not.

  2743880 wrote:

  Please update your forum profile with a real handle instead of '2743880 '.

  We work on IE9, need to upgrade version of IE. But before that must confirm, that it is compatible with IE10 or not.

  Oracle do not publish the detailed browser compatibility requirements. The basic requirements are covered in the documentation.

  Tests in the new version of browser applications are necessary to ensure compatibility. Test should focus on the components of the nonstandard application (such as plugins, themes, existing or custom and models and third-party JavaScript libraries) and the browser features such as compatibility and security modes.

• Problem with Active Directory and the NAC

  Hello.

  Please I need help.

  I have my server with the "Active Directory SSO" began, but when a user tries to connect to the network with its credentials in Active Directory, the PC agent say that 'Invalid username and password.

  My server is tuned by the 8910 port.

  I conectivity with CBS and active directory.

  kpass command runs successfully.

  Thks.

  Jorge,

  If the service is running, then you must put emphasis on the communication client/AD and see where the break occurs.

  Can you ensure that the unauthenticated role, you have all the required TCP/UDP ports open, and ICMP and IP FRAGMENTS to all your domain controllers?

  HTH,

  Faisal

  --

  If you find this article useful, please note so that others can easily find the answer

• OBIEE 11.1.1.7.0 works is not after you have configured to use authentication MSAD (Active Directory)

  Hi all

  I'm trying to configure OBIEE 11 g to use the MSAD (Active Directory) authentication. I followed the instructions of Configuration Oracle BI with Oracle Internet Directory , but after a restart all services, I do not get connect OBIEE. I've hearded that there is a bug in this version (11.1.1.7.0) when you rearrange the suppliers and put the new (that you created) as the frist, followed by DefaultAuthenticator and DefaultIdentityAsserter providers.

  Someone had this problem? How to resolve that? Is there a URL or DocID teach how this is set correctly?

  Thanks in advance,

  Concerning

  is even if you have 10 k + users it will show only 1000, this is the limitation, but you can still find the users from the top by clicking on customize the table, it options you give the criteria in filter and view display, you can select the column by which you can search for example: by using the name or description, or Provider(AD or Default) in this path , you can search for specific users you want to see or Alvaro * so it will give u the list whose name start with Alvaro

  I hope it helps brand if not

• Active Directory for authentication - authorization database

  Hello
  
  I searched a lot but could not find a way to work to do and I have Weblogic Server 10.3.4. My problem is; I currently have an Authenticator SQL read-only which validates the name of user and password and he also holds a group membership of those users. Thus, the when users are connected to our Flex application, they are authenticated and authorized through this security provider. Now, I want to * move the part name validation of username/password to Active Directory * and group membership and other roles etc will stay in the read-only SQL authenticator. To do this, I added the second security provider to my Kingdom which is Active Directory Authenticator, but right now because users are authenticated via Active Directory roles, the etc group memberships do not come to the user, resulting in not to be able to call EJB.
  
  So my question is, How can I manipulate simply authenticate users to Active Directory and other parties (roles, groups) of database (in the database I don't store the password more meaningless it longer)? Do I have to write a custom provider to do this, if this is the case can show you a way to work from the merger of two suppliers of security?
  
  Thank you.

  Yes, you will need to create a security provider for this.

  -Faisal
  http://www.WebLogic-wonders.com

• Active Directory and the Source of data in Application Weblogic

  Hello

  I was asked to find a way to record information of users created via Active Directory in my datasource request so my application can control if the user as authorization.

  My application, services to extract the data and the data source will be in the weblogic.

  What I found so far that there was to be a supplier Active Directory in the weblogic for authentication, and it will work similar to the SQL provider, put all the users and groups in the weblogic.

  Basically which, according to me, I have to do is create something (service or DB package function perhaps) that will allow to establish synchronization between the two AD and my database somehow.

  How I can do it, or there is an easier way to do it?

  Thank you

  Hello

  Yes, that is what I suggested in my initial post. In some scenarios, I also use JAVA API for details of user AD and works pretty well.

  Thank you

  Amey

• Client pix VPN how to authenticate with Active Directory

  Hi all, I've just set up my first Client VPN on a Cisco PIX. Everything works very well so that hitting the correct subnet and logon. However, I would like to see how I can get my connection of remote users with there active directory accounts. Right now I use the local connection for the pix for testing purposes. Sounds easy, but I'm missing something

  We use:

  Cisco Pix 515E version 6.3 (3)

  Thank you

  Dan

  Unfortunately the PIX 6.3.3 version does not support Active Directory authentication. V6.3.3 PIX only supports authentication to the server database, radius, and Ganymede local PIX.

  If you want to authenticate to active directory, it is support for PIX v7.x go.

  Here are the different types of authentication support for PIX v7.x leave for your reference:

  http://www.Cisco.com/en/us/docs/security/ASA/asa70/configuration/guide/AAA.html

  Hope that answers your question.