Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
![]() |
![]() |
Home -> Community -> Mailing Lists -> Oracle-L -> RE: ldap authentication
Jason,
Would you care to share that proof of concept code???
-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Jason Heinrich
Sent: Friday, August 26, 2005 11:16 AM
To: stellr_at_cns.vt.edu; oracle-l
Subject: Re: ldap authentication
The article in question is talking about logging into an application
(especially an HTMLDB application), not logging into the database. The
assumption is that the application is already connected/authenticated
with
the database. The only software requirement for the LDAP authentication
then is an Oracle database with the DBMS_LDAP package, which comes with
Standard edition.
I did something like this last month as a proof-of-concept for
authenticating against our Active Directory. Basically it involves
connecting to AD as a read-only lookup user, retrieving the user's DN,
then
attempting to reconnect to AD as that DN with the user-supplied
password.
If the second connection worked, we return TRUE that they're
authenticated.
> From: Ray Stell <stellr_at_cns.vt.edu>
> Reply-To: <stellr_at_cns.vt.edu>
> Date: Fri, 26 Aug 2005 10:56:31 -0400
> To: oracle-l <oracle-l_at_freelists.org>
> Subject: ldap authentication
>
>
> In this howto:
>
>
http://www.oracle.com/technology/products/database/htmldb/howtos/how_to_
ldap_a
> uthenticate.html
>
> there is a link for "software requirements" that goes
> to /dev/null. Anybody know how this works, is advanced
> security product required? I don't see how the
> standard shared secret/net8 encryption would work.
> ============================================================
> Ray Stell stellr_at_vt.edu (540) 231-4109 Tempus fugit 28^D
> --
> http://www.freelists.org/webpage/oracle-l
-- http://www.freelists.org/webpage/oracle-l -- http://www.freelists.org/webpage/oracle-lReceived on Fri Aug 26 2005 - 10:22:07 CDT
![]() |
![]() |