RE: Antw: Re: Re: Oracle and Novell eDirectory LDAP

Markus - Thanks for your ideas. Basically our issue isn't Oracle logins, but Oracle connections (replacing tnsnames.ora). For us, the user doesn't directly log into Oracle, but the application handles the login for them. However, I was searching for an alternative to maintaining tnsnames.ora on each client. I considered the Oracle Names server, but Oracle has announced this is going away in favor of OID. But my network guys favor MS AD.

Dennis Williams
DBA
Lifetouch, Inc.
dwilliams_at_lifetouch.com

-----Original Message-----
Sent: Tuesday, December 09, 2003 10:09 AM To: Multiple recipients of list ORACLE-L

NO - not instead of tnsnames.ora. We stuck to the tnsnames.ora files. We had it once, but this was rather tricky to get it working at that time. Especially the uploading of certificates thet we made ourselves ... - but we had already a solution to update the OID on a daily/hourly basis for user authentication.

We then decided not to use/need it, because we only need IAS authentication for users
who have an NOVELL account - about thousand people like employees, students, parttimers...

MS AD:
we don't have it.
may I propose: you need an interface or procedure - possibly java or even c.

Then configure ORACLE to use this procedure, and update e.g. on an hourly basis.
You must make up your mind who (MS or OID) administers - esp changes - passwords.

kr MR

>>> DWILLIAMS_at_LIFETOUCH.COM 12/09 3:59 >>>
Markus - Do you use Novell instead of tnsnames.ora as well as authenticating users? We use MS AD. Any insights as to how your method could be applied to MS AD?

Dennis Williams
DBA
Lifetouch, Inc.
dwilliams_at_lifetouch.com

-----Original Message-----
Sent: Tuesday, December 09, 2003 7:54 AM To: Multiple recipients of list ORACLE-L

what we have is an novell ldap with jave plugins used by oracle IAS to authenticate users. we started once with OID but stayed then with novell. check it for yourself - http://mdwis.mdw.ac.at/ - we had to run a config script that allows us to use the novell ldap instead of OID. I don't know this config script by heart.

later on I wrote a separate authentication routine to identify against novall ldap. but we decided not to use it since we found a configuration that did the job for us.

hope this helps. further details must be dug out - if allowed to disclose.

kr mr

>>> adar76_at_inter.net.il 12/09 1:54 >>>

You are talking about Novell using LDAP. I am talking about Oracle using LDAP, especially with enterprise user.

I was told that version 9i or 10g will support only OID as LDAP.

Yechiel Adar
Mehish
----- Original Message -----
To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com> Sent: Tuesday, December 09, 2003 1:54 PM

> we use some java plugins for novell to contct ldap for authentication.
used more than two years - no problems.
> BUT: we taylored it to our needs - and do NOT use OID at all.
> kr
> mr
>
> >>> adar76_at_inter.net.il 12/09 9:59 >>>
> IIRC Oracle is going to support only OID as LDAP.
> You need to set up OID and use a product like DIRXML to propagate updates
> from Novell to OID.
>
> Yechiel Adar
> Mehish
> ----- Original Message -----
> To: "Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>
> Sent: Monday, December 08, 2003 4:34 PM
>
>
> > Hi,
> >
> > We are in the preliminary analysis of implementing an assurance package
> (Sunguard's Compass) based on Oracle (Oracle 9.2.04, Oracle 9iAS Web
> Services and Forms on AIX 5.2).
> >
> > We are using Novell eDirectory as our LDAP.
> >
> > I looked on Metalink but did not find much thing. The way I understand
it
> is that you must load the LDAP info into Oracle Internet Directory.
> >
> > Am I right ?
> >
> > Anybody using Novell eDirectory integrated with Oracle ?
> >
> > TIA
> >
> >
> > Stephane Paquette
> > Administrateur de bases de donnees
> > Database Administrator
> > Standard Life
> > www.standardlife.ca
> > Tel. (514) 499-7999 poste 7470
> > stephane.paquette_at_standardlife.ca
> >
> > --
> > Please see the official ORACLE-L FAQ: http://www.orafaq.net
> > --
> > Author: Stephane Paquette
> > INET: stephane.paquette_at_standardlife.ca
> >
> > Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> > San Diego, California -- Mailing list and web hosting services
> > ---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from). You may
> > also send the HELP command for other information (like subscribing).
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Yechiel Adar
> INET: adar76_at_inter.net.il
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Markus Reger
> INET: reger_at_mdw.ac.at
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net 
-- 
Author: Yechiel Adar
  INET: adar76_at_inter.net.il 

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com 
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net 
-- 
Author: Markus Reger
  INET: reger_at_mdw.ac.at 

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com 
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net 
-- 
Author: DENNIS WILLIAMS
  INET: DWILLIAMS_at_LIFETOUCH.COM 

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com 
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Markus Reger
  INET: reger_at_mdw.ac.at

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: DENNIS WILLIAMS
  INET: DWILLIAMS_at_LIFETOUCH.COM

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).