Oracle / LDAP ACLs

From: Scott Canaan <"Scott>
Date: Mon, 8 Jul 2024 13:59:46 +0000
Message-ID: <CH3PR16MB5897EDB8CEE8663923FEE86FC5DA2_at_CH3PR16MB5897.namprd16.prod.outlook.com>



I'm trying to allow Oracle to connect to LDAP using ACLs. The user that requested it is still getting "ORA-24247: network access denied by access control list (ACL)". This is what I've tried:

BEGIN
  DBMS_NETWORK_ACL_ADMIN.create_acl (

    acl          => 'ldap_acl_file.xml',
    description  => 'ACL to grant access to LDAP server',
    principal    => 'APEX_EBA',
    is_grant     => TRUE,
    privilege    => 'connect',
    start_date   => SYSTIMESTAMP,
    end_date     => NULL);

end;
/

begin
  DBMS_NETWORK_ACL_ADMIN.assign_acl (
    acl         => 'ldap_acl_file.xml',
    host        => 'ldap.rit.edu',
    lower_port  => 389,
    upper_port  => NULL);

end;
/

begin
  DBMS_NETWORK_ACL_ADMIN.assign_acl (

    acl         => 'ldap_acl_file.xml',
    host        => 'ldap.rit.edu',
    lower_port  => 686,
    upper_port  => NULL);

  COMMIT;
END;
/

I don't see what is wrong here.

Scott Canaan '88
Sr Database Administrator
Information & Technology Services
Finance & Administration
Rochester Institute of Technology
o: (585) 475-7886 | f: (585) 475-7520
srcdco_at_rit.edu<mailto:srcdco_at_rit.edu> | c: (585) 339-8659

CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.

--
http://www.freelists.org/webpage/oracle-l
Received on Mon Jul 08 2024 - 15:59:46 CEST

Original text of this message