Re: Active Directory Query

From: Maxim Demenko <mdemenko_at_gmail.com>
Date: Wed, 11 May 2005 21:00:12 +0200
Message-ID: <d5tkno$bp4$02$1@news.t-online.com>

Niall Litchfield schrieb:
> ame..._at_iwc.net wrote:
>

>>Hi,
>>
>>I'm trying to write a query that will, from Oracle 8i, query a

>
> Windows
>

>>Active Directory and return values based on the query.
>>
>>I'm not finding anything useful on this topic and was wondering if
>>anyone else had tried this.
>>
>>Sybrand, yes I've looked at the manuals, for 3 weeks now, and I've

>
> not
>

>>come up with anything.
>>
>>If you know the answer, please provide the query.  Otherwise, telling
>>me to look back in the manuals again is wasting time.

>
>
> As others have pointed out, there was no LDAP support in 8i. There was
> however (IIRC) the UTL_TCP package which allows you to open a tcp
> session on a specific port and communicate with whatever is listening
> there, so if upgrading or using an intermediate database isn't an
> available option then you might be able to do your communication
> directly obver tcp.
>
> Alternatively as 8i introduced the Java VM in the db you could write
> (http://docs.sun.com/source/816-6402-10/writing.htm) or load an
> existing java LDAP client into the db and utilize this client for your
> LDAP queries.
>
> Neither is going to be as technically straightforward as obtaining a
> current version of Oracle though.
>
> Niall Litchfield
> Oracle DBA
> http://www.niall.litchfield.dial.pipex.com
>

I disagree with you, there are fully LDAP compliant support in 8i. The fact that Oracle 8i was released before W2K doesn't matter, both products are LDAP compliant, that means they can communicate with each other over LDAP protocol ( no need to load external client , of course possible too).
It is well documented by MS
http://www.microsoft.com/windowsserver2003/techinfo/overview/ldapcomp.mspx as well by Oracle
http://download-uk.oracle.com/docs/pdf/A86082_01.pdf Pp:2-22,3-2
As Sybrand posted some days ago to similar topic, it is fully enough to run as sys the $ORACLE_HOME/rdbms/admin/catldap.sql to get fully functional LDAP client into the database ( more precisely C API is just here, script creates only PL SQL API, which is a little bit restricted compared to C, but covers the core functionality). I just have tested the sample code from the OID Application Developer’s Guide, simply replaced host,port,account and base dn with those from my Domain Controller - it works perfectly. I didn't have access to W2K3, but assume, there are basically no difference. Moreover (maybe i am wrong on this) , 9i and 10g didn't significantly enhanced the functionality of PL SQL API, the major improvements concern OID itself and AD ( as well as other 3rd party) Directory Integration, Identity Management etc, but to query any LDAP compliant Directory ( as AD is ), 8i is fully capable.

Best regards

Maxim Received on Wed May 11 2005 - 14:00:12 CDT