Return-Path: X-Original-To: oracle-l@orafaq.com Delivered-To: oracle-l@orafaq.com Received: from puck1183.startdedicated.com (localhost [127.0.0.1]) by puck1183.startdedicated.com (Postfix) with ESMTP id A72E619610DC for ; Thu, 2 Feb 2017 15:31:11 +0100 (CET) Received: from turing.freelists.org (turing.freelists.org [206.53.239.180]) by puck1183.startdedicated.com (Postfix) with ESMTPS for ; Thu, 2 Feb 2017 15:31:11 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 98CA56C34F; Thu, 2 Feb 2017 09:31:10 -0500 (EST) X-Virus-Scanned: Debian amavisd-new at turing.freelists.org Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9HUz5iVolT_l; Thu, 2 Feb 2017 09:31:10 -0500 (EST) Received: from turing.freelists.org (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 2F8526C364; Thu, 2 Feb 2017 09:30:58 -0500 (EST) Received: with ECARTIS (v1.0.0; list oracle-l); Thu, 02 Feb 2017 09:29:36 -0500 (EST) Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 467946C291 for ; Thu, 2 Feb 2017 09:29:36 -0500 (EST) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KP_UWhJGdtB6 for ; Thu, 2 Feb 2017 09:29:36 -0500 (EST) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTPS id E42556C28E for ; Thu, 2 Feb 2017 09:29:35 -0500 (EST) Received: from userv0022.oracle.com (userv0022.oracle.com [156.151.31.74]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id v12ETYva031994 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 2 Feb 2017 14:29:34 GMT Received: from userv0121.oracle.com (userv0121.oracle.com [156.151.31.72]) by userv0022.oracle.com (8.14.4/8.14.4) with ESMTP id v12ETYqF008886 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 2 Feb 2017 14:29:34 GMT Received: from abhmp0018.oracle.com (abhmp0018.oracle.com [141.146.116.24]) by userv0121.oracle.com (8.14.4/8.13.8) with ESMTP id v12ETXCA029026; Thu, 2 Feb 2017 14:29:33 GMT MIME-Version: 1.0 Message-ID: <4d75102e-dc28-4b34-8d26-b70c428e0626@default> Date: Thu, 2 Feb 2017 06:29:29 -0800 (PST) From: Courtney Llamas To: ilmar.kerm@gmail.com Cc: nagaraj.chk@gmail.com, oracle-l Subject: RE: Oracle Enterprise Manager users through LDAP References: In-Reply-To: Content-Type: multipart/mixed; boundary="__1486045773399218147abhmp0018.oracle.com" X-Source-IP: userv0022.oracle.com [156.151.31.74] X-archive-position: 67555 X-ecartis-version: Ecartis v1.0.0 Sender: oracle-l-bounce@freelists.org Errors-to: oracle-l-bounce@freelists.org X-original-sender: courtney.llamas@oracle.com Precedence: normal Reply-To: courtney.llamas@oracle.com List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: oracle-l X-List-ID: oracle-l List-subscribe: List-owner: List-post: List-archive: X-list: oracle-l --__1486045773399218147abhmp0018.oracle.com Content-Type: multipart/alternative; boundary="__1486045773400218148abhmp0018.oracle.com" --__1486045773400218148abhmp0018.oracle.com Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ha!=C2=A0 Yes, that video is very old ;)=C2=A0 That was my first project af= ter joining Oracle many years ago!=C2=A0=C2=A0=C2=A0 It was for ver 12.1, t= hey=E2=80=99ve made a lot of enhancements and changes since then.=C2=A0 It = will help with the WLS configuration part though, as that is a good example= of creating a new authentication provider! =C2=A0 =C2=A0 --=20 - Courtney HYPERLINK "http://www.oracle.com/" \nOracle Courtney Llamas | Consulting Member of Technical Staff Phone: HYPERLINK "tel:+2814108258"+2814108258 | Mobile: HYPERLINK "tel:+832= 4720596"+8324720596=20 Oracle Strategic Customer Program Oracle=20 HYPERLINK "http://www.oracle.com/commitment" \nGreen Oracle Oracle is committed to developing practices and products that help protect = the environment =C2=A0 From: Ilmar Kerm [mailto:ilmar.kerm@gmail.com]=20 Sent: Thursday, February 02, 2017 8:23 AM To: Courtney Llamas Cc: nagaraj.chk@gmail.com; oracle-l Subject: Re: Oracle Enterprise Manager users through LDAP =C2=A0 I have used the following short video to configure OEM with AD: https://www.youtube.com/watch?v=3DovvHY33oOtQ =C2=A0 The auto provisioning parameter name is already out of date, but when you t= ry to execute the same command, OEM will tell you what the new property nam= e is. =C2=A0 Ilmar =C2=A0 On Thu, Feb 2, 2017 at 3:15 PM, Courtney Llamas wrote: There=E2=80=99s no docs or testing done w/ Redhat LDAP, though it should be= fine with the Open LDAP authentication provider in WLS.=C2=A0=C2=A0 You=E2= =80=99ll need to go thru 2 sets of docs.=C2=A0=20 =C2=A0 First is WLS, as this is the core authentication piece.=C2=A0=C2=A0 You=E2= =80=99ll want to add an authentication provider of type Open LDAP.=C2=A0=20 https://docs.oracle.com/middleware/12212/wls/SECMG/atn_intro.htm#SECMG173 =C2=A0 Some additional configuration is mentioned in OEM docs here.=C2=A0=C2=A0 I = would also skim through the MS Ldap and OID sections of OEM, you will get a= lot of information from there.=C2=A0 They=E2=80=99ve built emctl commands = to configure those, but underneath, it=E2=80=99s all done at WLS layer, jus= t different providers and slightly different options.=C2=A0=20 https://docs.oracle.com/cd/E73210_01/EMSEC/GUID-5DD3B11A-1159-40BD-8AEB-41E= DE664AB12.htm#GUID-558DE78B-8240-4D45-AE25-F93898C392CE =C2=A0 =C2=A0 --=20 - Courtney HYPERLINK "http://www.oracle.com/" \nOracle Courtney Llamas | Consulting Member of Technical Staff Phone: HYPERLINK "tel:+2814108258" \n+2814108258 | Mobile: HYPERLINK "tel:+= 8324720596" \n+8324720596=20 Oracle Strategic Customer Program Oracle=20 HYPERLINK "http://www.oracle.com/commitment" \nGreen Oracle Oracle is committed to developing practices and products that help protect = the environment =C2=A0 From: Nagaraj chk [mailto:HYPERLINK "mailto:nagaraj.chk@gmail.com" \nnagara= j.chk@gmail.com]=20 Sent: Thursday, February 02, 2017 6:16 AM To: oracle-l Subject: Oracle Enterprise Manager users through LDAP =C2=A0 Hi Gurus, =C2=A0 We want to integrate and manage Oracle Enterprise Manager 13c users through= an LDAP server(Redhat LDAP authentication ). All DBA's authentications sho= uld happen via LDAP, Need your help to configure=C2=A0 =C2=A0 -Naga. =C2=A0 --=20 Ilmar Kerm --__1486045773400218148abhmp0018.oracle.com Content-Type: multipart/related; boundary="__1486045773401218149abhmp0018.oracle.com" --__1486045773401218149abhmp0018.oracle.com Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

Ha!=C2=A0= Yes, that video is very old ;)=C2=A0 That was my first project after joini= ng Oracle many years ago!=C2=A0=C2=A0=C2=A0 It was for ver 12.1, they=E2=80= =99ve made a lot of enhancements and changes since then.=C2=A0 It will help= with the WLS configuration part though, as that is a good example of creat= ing a new authentication provider!

 

 = ;

-- - Courtney

3DOracle
Courtney Llamas | Consulting Member of Tec= hnical Staff
Phone: +2814108258 | Mobile: +8324720596
Oracle= Strategic Customer Program

Oracle

<= p class=3DMsoNormal>3D"Green

Oracle is committed to developing practices and produc= ts that help protect the environment

&nbs= p;

From: Ilmar Kerm [mailto:ilm= ar.kerm@gmail.com]
Sent: Thursday, February 02, 2017 8:23 AM
= To: Courtney Llamas
Cc: nagaraj.chk@gmail.com; oracle-lSubject: Re: Oracle Enterprise Manager users through LDAP

 

I have used the following short video to configure OEM with AD= :

 

The auto provisioning parameter name is already out= of date, but when you try to execute the same command, OEM will tell you w= hat the new property name is.

 

Ilmar

<= /div>

 

On Thu, Feb 2, 2017 at 3:15 PM, Courtney Llamas <courtney.llamas@oracle.co= m> wrote:

There=E2=80=99s no d= ocs or testing done w/ Redhat LDAP, though it should be fine with the Open = LDAP authentication provider in WLS.   You=E2=80=99ll need to go = thru 2 sets of docs. 

 

First is WLS, as this is the core authenticat= ion piece.   You=E2=80=99ll want to add an authentication provide= r of type Open LDAP. 

https://docs.oracle.com/middleware/12212/wls/SECMG/atn_int= ro.htm#SECMG173

 

Some additional configuration is mentioned in OEM doc= s here.   I would also skim through the MS Ldap and OID sections = of OEM, you will get a lot of information from there.  They=E2=80=99ve= built emctl commands to configure those, but underneath, it=E2=80=99s all = done at WLS layer, just different providers and slightly different options.=  

https://docs.oracle.c= om/cd/E73210_01/EMSEC/GUID-5DD3B11A-1159-40BD-8AEB-41EDE664AB12.htm#GUID-55= 8DE78B-8240-4D45-AE25-F93898C392CE

&= nbsp;

 

--
- Courtney<= /o:p>

3DOracle
Courtney Llamas | Consulting Member of Technical Staff<= br>Phone: +2814108258 | Mobile: +8324720596
= Oracle Strategic Customer Program

Oracle

3D"Green

Oracle is committed to develop= ing practices and products that help protect the environment

 

From: Nagaraj chk [mailto:nagaraj.chk@gmail.com]
Sent: Thursday, Febru= ary 02, 2017 6:16 AM
To: oracle-l
Subject: Oracle Enter= prise Manager users through LDAP

 

Hi Gurus,

 

We want to integrate and manage Oracle Enterprise = Manager 13c users through an LDAP server(Redhat LDAP authentication ). All = DBA's authentications should happen via LDAP, Need your help to configure&n= bsp;

 

-Naga.


 

--

Ilmar Kerm

--__1486045773401218149abhmp0018.oracle.com Content-Type: image/gif; name="image001.gif" Content-Transfer-Encoding: base64 Content-Disposition: inline; filename="image001.gif" Content-ID: R0lGODlhcgAaAMQAAP8QEP/w8P/Q0P/g4P8wMP9gYP8gIP+goP9QUP+QkP+wsP9wcP+AgP9AQP/A wP8AAP///wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAAA AAAALAAAAAByABoAAAX/ICSOZGmeaKqubOu+cCzPdC0GCqPvvBKUDp5wp1gFdIPVIDfcOQa6A8yR aO4gweQoUHh4v2Bw4SdihM9egyBF8ALIpkEXDR44vA2XwkD/IgYGAAZbbX1nBGRmhl8AWiUJYicC AIsPDFh4LXOGjQ4NAAhrEIUPBQcOqKmoB5sEZV4JqqoHhQVxlGAOJQG4AAunsqg/dw95KwdfBgzB qKIEBMaQDwCiKpOwEIq6KANuJg14igZwEHPULMTGKbxetjF8D1ItxK7aKl8lCl8DAfALW1+2rUi3 QtqgGN2mwYCXzYvAON624LoEQZ9DEfRcEFSBIE2DjyBDfnyIqRgMcA8a/z5AZQWXOxEdHxwUgfIg sX/zMqlAWclVCQFefLpAqdJBAFJn3owgtpJEQkslEWjUmYLnomokcDlS4s0eFzQNqvXDEyzmAwFP yaXYmGJBuxlzELWIacueiE0AFGyF4HbaNTquUEpFRxUFUC9YXQzARYAkEJSNipKQ9kDu0i9SKKNZ 9iXswMIoYgI4oJYFskpgzkkmcdrviELqmPVt1HpRAaaLqCE1lBgjvEpqRtgl8Tevygd7TcCuiKvP m8OVEkAIYLYPThSsRIpEQJr1x94QBIT09FH6QJC6AiRAoB1kEb7tRb4MvyB+AwSlbejfz7+///8A BijggAQWaOCBCCao4A+CDDbo4IMQRijhhBQKGAIAOw== --__1486045773401218149abhmp0018.oracle.com Content-Type: image/gif; name="image002.gif" Content-Transfer-Encoding: base64 Content-Disposition: inline; filename="image002.gif" Content-ID: R0lGODlhLAAcAMQAAP///0x9RHmec9Pf0aa+oleFULHGrmKNW+nv6I+uivT39N7n3W6VZ7zPuZu2 lsjXxYSmfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAAA AAAALAAAAAAsABwAQAXhICCOZGmeaDoaReC+sKAMR7GopIA6boIvLgPAVSAgALxjSYdrOp/Q6NPg YqIEPkTBV2taTwgGbEw+PAZo3FfKbqMQQfeJ8DoY0Hg0wxhAKBgHCl5XLgMqDwFCAAIFPIYDgidr OUQGkSh0cQMJAQyXOXKhoqOkpaanI2aoIwMErq+uCY0BMlANKpxkYwQGBH82TpMicD0pAgQACToD AchqhAG3KQ4HIlQNnErG0IYqB9EAiEQvwEsozC43hy0CAeXMwsLDLS8MAvf497ruCZ+gOA0gfNt3 AIK0J/JWKVzIsEQIADs= --__1486045773401218149abhmp0018.oracle.com-- --__1486045773400218148abhmp0018.oracle.com-- --__1486045773399218147abhmp0018.oracle.com-- -- http://www.freelists.org/webpage/oracle-l