Skip to Main Content

Security Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Unable to restrict User Bind DN using OUD11g Proxy

user7807346Jun 2 2014 — edited Jun 6 2014

Hi,

We have large ODSEE 6x topology and are planning to put IP/UserBindDN restrictions using OUD11g Proxy.

Adding an IP to "Allowed Client" list in the OUD Proxy's network-group criteria through the ODSM configuration page allows access to the back-end directories from that IP only while denying the rest of IPs, no problem here.

But as soon as adding an User Bind DN to "Allowed Bind DN" list on same configuration page of OUD11g Proxy, added User Bind DN operation fails from the same IP in the "Allowed Client" as giving following error.

#  ldapsearch -h <HOST>  -p <PROXY PORT> -b <BASE DN> -D "<USER DN>" -w <USER PW> uid=<USER2> cn

ldap_simple_bind: Unknown error

ldap_simple_bind: additional info: Worker Thread 77 encountered an uncaught exception while processing operation BindOperation(connID=91, opID=0, protocol="LDAP 3, dn=<USER DN>, authType=Simple):  NullPointerException ()

Also I tested removing the IP from "Allowed Client" list allowing access from all IPs but I get the same error above.

Is there anything else to configure for User Bind DN restriction on OUD11g Proxy?

Thanks in advance,

-Bora

This post has been answered by Florence Blanc-Renaud -Oracle on Jun 5 2014
Jump to Answer
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Jul 4 2014
Added on Jun 2 2014
10 comments
6,028 views