配置LDAP 用户连接Oracle

select *from dba_users,

用户显示 password项是global 不是password，不能使用aler user 修改密码，会导致password项改为password，LDAP登录失败

How to add LOCAL_LISTENER or REMOTE_LISTENER net service names into OID for LDAP Naming resolution.

SOLUTION

Valid LOCAL_LISTENER or REMOTE_LISTENER entries in TNSNAMES.ORA file like following :

LOCAL_LISTENER?=
??(DESCRIPTION?=
??????(ADDRESS?=?(PROTOCOL?=?TCP)(HOST?=?SAMPLE.COM)(PORT?=?1525))
??)

Can not be seen via in Net Manager GUI tool, so can not be added to OID for LDAP naming, via the wizard.One solution is to add a ldif file

dn:?cn=LOCAL_LISTENER,cn=OracleContext,dc=sample,dc=com
objectclass:?top
objectclass:?orclNetService
cn:LOCAL_LISTENER
orclNetDescString:?(DESCRIPTION?=?(ADDRESS_LIST?=?(ADDRESS?=?(PROTOCOL?=?TCP)(HOST?= SAMPLE.COM)(PORT?=1525))))

And add to OID via?ldapadd command

ldapadd?-D?"cn=orcladmin"?-w?<Password>?-h?<OID?server>?-p?<Port#>?-v?-f?<ldif file>

Example

C:\>ldapadd?-D?"cn=orcladmin"?-w?welcome1?-h?sflood-uk2?-p?389?-v?-f?test.ldif
add?objectclass:
top
orclNetService
add?cn:
LOCAL_LISTENER
add?orclNetDescString:
(DESCRIPTION?=?(ADDRESS_LIST?=?(ADDRESS?=?(PROTOCOL?=?TCP)(HOST?=?SAMPLE.COM
)(PORT?=1525))))
adding?new?entry?cn=LOCAL_LISTENER,cn=OracleContext,dc=sample,dc=com
modify?complete

At this point, a simple tnsping of the entry should yield OK:

tnsping LOCAL_LISTENER should return:?

Used LDAP adapter to resolve the alias.

Then OK