Skip to Main Content

APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

LDAP Syntax for LDAP Global Catalogue Search (WIndows AD)

indy2005Sep 8 2016 — edited Sep 9 2016

In Oracle Apex, I can authenticate via LDAP if I add a very specific Distinguished Name and choose the option to use Exact Distinguished Name:

CN=%LDAP_USER%,OU=Office,OU=Users,OU=UKAPD,DC=rd,DC=mycompany,DC=net

This works.

However, I need to search across OUs and Domains (60,000 people in my organisation), so want to use a wildcard search against the global catalogue.  Note, the above working LDAP DN is also against the global catalog on port 3268.

So If I select "No" to Use Exact Distinguished Name, then reduce my DN to be:

DC=mycompany,DC=net

and then add a search filter of:

CN=%LDAP_USER%

I get a bind failure on LDAP.

•Authentication failed  ORA-31202: DBMS_LDAP: LDAP client/server  error: Operations error. 000004DC: LdapErr: DSID-0C090749, comment: In  order to perform this operation a successful bind must be completed on  the connection., data 0, v2580

How do I perform a global search across all domains and OUs in Oracle Apex?  There is very little documentation on this subject.  I have created via my DBA the necessary ACL in Oracle - as can be seen by my managing to succesfully authenticate when using a very specific DN string.

Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Oct 7 2016
Added on Sep 8 2016
9 comments
702 views