Skip to Main Content

Security Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Authenticate to eDirectory via OID server chaining (No sychronizing)

790389Aug 9 2010
Has anyone (or is it possible ) to do the following:
connect to an Oracle DB that is setup to use OID (oracle LDAP), which in turn routes the query (via server chaining) to eDirectory.
So in other words the user does not reside in OID the user resides in eDirectory, and OID's function is to just pass the request on.

I have achieved most of the above, in fact if I use another client EG: ldapbind or ldapsearch, I can bind to OID as a user that only exists in eDirectory, but doing it through sqlplus I get:
" ORA-28274: No ORACLE password attribute corresponding to user nickname exists" , which seems like OID has alot more classes that dont exist in eDirectory, but which are they and how do I get them in eDirectory, and will it even work?

Basically, I want to have the Oracle database to use eDirectory as its source of authentication, it seems I will probabaly need OID, but I DONT want to synchronise OID and eDirectory.
I thought thats what server chaining was all about, and hey it works from standard LDAP clients, just not from Oracle.

Please help!
thanks
Paul
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Sep 6 2010
Added on Aug 9 2010
0 comments
532 views