Unable to create directory in OID

[Ross Mills]

Hi,

I am writing java code to load users into the Oracle Internet Directory. OID and LDAPs are new to me. On install, one of the directories automatically created in OID was "cn=Users, dc=dex, dc=com". I have able to add employees to that directory with no problem. Now I would like to create a new directory for Vendors. Even though I am logging in as the administrator, I am getting an error message claiming I do not have access privileges. I created a small program that successfully adds a user (so that you know I am at least connecting to OID correctly) and then unsuccessfully attempts to create a Vendor directory. What am I doing wrong?

Thanks,
Ross


THE PROGRAM OUTPUT...

Start

Created context

Created user

About to create vendor directory

javax.naming.NoPermissionException: [LDAP: error code 50 - Insufficient Access Rights]; remaining name 'cn=Vendors, dc=dex, dc=com'

javax.naming.NamingException com.sun.jndi.ldap.LdapCtx.mapErrorCode(int, java.lang.String)

void com.sun.jndi.ldap.LdapCtx.processReturnCode(com.sun.jndi.ldap.LdapResult, javax.naming.Name, java.lang.Object, javax.naming.Name, java.util.Hashtable, java.lang.String)

void com.sun.jndi.ldap.LdapCtx.processReturnCode(com.sun.jndi.ldap.LdapResult, javax.naming.Name)

javax.naming.directory.DirContext com.sun.jndi.ldap.LdapCtx.c_createSubcontext(javax.naming.Name, javax.naming.directory.Attributes, com.sun.jndi.toolkit.ctx.Continuation)

javax.naming.directory.DirContext com.sun.jndi.toolkit.ctx.ComponentDirContext.p_createSubcontext(javax.naming.Name, javax.naming.directory.Attributes, com.sun.jndi.toolkit.ctx.Continuation)

javax.naming.directory.DirContext com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(javax.naming.Name, javax.naming.directory.Attributes)

javax.naming.directory.DirContext com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(java.lang.String, javax.naming.directory.Attributes)

javax.naming.directory.DirContext javax.naming.directory.InitialDirContext.createSubcontext(java.lang.String, javax.naming.directory.Attributes)

void com.dex.oidsync.sessionfacade.Sample.main(java.lang.String[])

Process exited with exit code 0.


THE PROGRAM...

package com.dex.oidsync.sessionfacade;
 
import javax.naming.*;
import javax.naming.directory.*;
import java.util.Hashtable;
 
public class Sample 
{
  // OID user attributes
  static private final String ATTR_OBJECTCLASS = "objectclass";
  static private final String ATTR_EMPLOYEENUMBER = "employeenumber";
  static private final String ATTR_GIVENNAME = "givenname";
  static private final String ATTR_MAIL = "mail";
  static private final String ATTR_MIDDLENAME = "middlename";
  static private final String ATTR_USERPASSWORD = "userpassword";
  static private final String ATTR_ORCLACTIVESTARTDATE = "orclactivestartdate";
  static private final String ATTR_DEPARTMENTNUMBER = "departmentNumber";
  static private final String ATTR_SN = "sn";
  
  // OID objectclasses
  static private final String CLASS_TOP = "top";
  static private final String CLASS_PERSON = "person";
  static private final String CLASS_INETORGPERSON = "inetorgperson";
  static private final String CLASS_ORCLUSER = "orcluser";
  static private final String CLASS_ORGANIZATIONALPERSON = "organizationalperson";
  static private final String CLASS_ORCLUSERV2 = "orcluserv2";
  static private final String CLASS_ORCLCONTAINER = "orclContainer";
  
  static private final String EMPLOYEE_ID = "1234";
  static private final String FIRST_NAME = "Bob";
  static private final String MIDDLE_NAME = "A";
  static private final String LAST_NAME = "FISH";
  static private final String DEPARTMENT = "Sales";
  static private final String START_DATE = "20030911000000z";
  static private final String EMAIL_ADDR = "[e-mail]";
  static private final String USERNAME="testuser1";
  static private final String PASSWORD = "password1";
 
  public Sample()
  {
  }
 
  public static void main(String[] args)
  {
    try
    {
      System.out.println("Start");
      
      Hashtable env = new Hashtable();
      env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
      env.put(Context.PROVIDER_URL, "ldap://infradev.dex.com:4032");
      env.put(Context.SECURITY_AUTHENTICATION, "simple");
      env.put(Context.SECURITY_PRINCIPAL,"cn=orcladmin, cn=Users, dc=dex, dc=com");
      env.put(Context.SECURITY_CREDENTIALS, "secret");
      DirContext dirctx = new InitialDirContext(env);
 
      System.out.println("Created context");
 
      Attributes attrs = new BasicAttributes(true);
 
      // setup classes
      Attribute objectclass = new BasicAttribute(ATTR_OBJECTCLASS);
      objectclass.add(CLASS_TOP);
      objectclass.add(CLASS_PERSON);
      objectclass.add(CLASS_INETORGPERSON);
      objectclass.add(CLASS_ORGANIZATIONALPERSON);
      objectclass.add(CLASS_ORCLUSER);
      objectclass.add(CLASS_ORCLUSERV2);
      attrs.put(objectclass);
 
      // employee number
      Attribute employeenumber = new BasicAttribute(ATTR_EMPLOYEENUMBER);
      employeenumber.add(EMPLOYEE_ID);
      attrs.put(employeenumber);
 
      // first name
      Attribute givenname = new BasicAttribute(ATTR_GIVENNAME);
      givenname.add(FIRST_NAME);
      attrs.put(givenname);
 
      // middle name
      Attribute middlename = new BasicAttribute(ATTR_MIDDLENAME);
      middlename.add(MIDDLE_NAME);
      attrs.put(middlename);
 
      // last name
      Attribute sn = new BasicAttribute(ATTR_SN);
      sn.add(LAST_NAME);
      attrs.put(sn);
 
      // password
      Attribute userpassword = new BasicAttribute(ATTR_USERPASSWORD);
      userpassword.add(PASSWORD);
      attrs.put(userpassword);
 
      // department
      Attribute department = new BasicAttribute(ATTR_DEPARTMENTNUMBER);
      department.add(DEPARTMENT);
      attrs.put(department);
 
      // email
      Attribute mail = new BasicAttribute(ATTR_MAIL);
      mail.add(EMAIL_ADDR);
      attrs.put(mail);
      
      Attribute orclactivestartdate = new BasicAttribute(ATTR_ORCLACTIVESTARTDATE);
      orclactivestartdate.add(START_DATE);
      attrs.put(orclactivestartdate);
 
      Context result = dirctx.createSubcontext("cn=" + USERNAME
                                               + ", cn=Users, dc=dex, dc=com", attrs);
 
      System.out.println("Created user");
 
      attrs = new BasicAttributes(true);
 
      // setup classes
      Attribute objectclass2 = new BasicAttribute(ATTR_OBJECTCLASS);
      objectclass2.add(CLASS_TOP);
      objectclass2.add(CLASS_ORCLCONTAINER);
      attrs.put(objectclass2);
 
      System.out.println("About to create vendor directory");
      result = dirctx.createSubcontext("cn=Vendors, dc=dex, dc=com", attrs);
      System.out.println("Vendor directory created");
      
    }
    catch (Exception e)
    {
      e.printStackTrace();
    }
  }
}

[added the code tags Mark described]
[ February 26, 2005: Message edited by: Jeanne Boyarsky ]

[Mark Spritzler]

Hi Ross. Thats a good question. Unfortunately I am unfamiliar with OID, so I can't help you there.
But I did want to let you know that when you post, there is a "CODE" tag button below that you can click and paste your code in between the two tags that it creates.
This will keep all your formatting in place and your indentation.
Mark

[Abhishek Mehta]

hi
well the good news is that i am able to enter user using your code till the user created statement with some modification according to my need. but it works successfully when i am assigning values in program itself. when i try to send values through some method, then it throws the error.
in following code main function has two funtion setuserproperties(parameters) and createuser(). when i user both functions then error comes. and when i user just createuser and userproperties assign there itself(as u can see commented assign varialbles) it works successfully.
i not able to find the root cause, why it generate error when only the difference is sending the parameters and assiging there only.
please help me out.

OUTPUT with ERROR msg:
EMPLOYEE_ID : 1012

USERNAME: ldapuser12

UID_ADDR: [e-mail]

Start

Created context

All Attributes Added

javax.naming.CommunicationException: Request: 2 cancelled; remaining name 'cn=ldapuser12,cn=Users,dc=domain, dc=com'

at com.sun.jndi.ldap.LdapRequest.getReplyBer(LdapRequest.java:60)

at com.sun.jndi.ldap.Connection.readReply(Connection.java:405)

at com.sun.jndi.ldap.LdapClient.processReply(LdapClient.java:947)

at com.sun.jndi.ldap.LdapClient.add(LdapClient.java:1098)

at com.sun.jndi.ldap.LdapCtx.c_createSubcontext(LdapCtx.java:773)

at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_createSubcontext(ComponentDirContext.java:319)

at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:248)

at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:236)

at javax.naming.directory.InitialDirContext.createSubcontext(InitialDirContext.java:176)

at mypackage.SampleUser.createuser(SampleUser.java:173)

at mypackage.SampleUser.main(SampleUser.java:189)

import javax.naming.*;
import javax.naming.directory.*;
import java.util.Hashtable;
 
public class SampleUser 
{
  static private final String ATTR_OBJECTCLASS = "objectclass";
  static private final String ATTR_EMPLOYEENUMBER = "employeenumber";
  static private final String ATTR_GIVENNAME = "givenname";
  static private final String ATTR_MAIL = "mail";
  static private final String ATTR_MIDDLENAME = "middlename";
  static private final String ATTR_USERPASSWORD = "userpassword";
  static private final String ATTR_ORCLACTIVESTARTDATE = "orclactivestartdate";
  static private final String ATTR_DEPARTMENTNUMBER = "departmentNumber";
  static private final String ATTR_SN = "sn";
  static private final String ATTR_UID = "uid";
  
 
 
// OID objectclasses
  static private final String CLASS_TOP = "top";
  static private final String CLASS_PERSON = "person";
  static private final String CLASS_INETORGPERSON = "inetorgperson";
  static private final String CLASS_ORCLUSER = "orcluser";
  static private final String CLASS_ORGANIZATIONALPERSON = "organizationalperson";
  static private final String CLASS_ORCLUSERV2 = "orcluserv2";
  static private final String CLASS_ORCLCONTAINER = "orclContainer";
 
/*
  static private final String EMPLOYEE_ID = "1011";
  static private final String FIRST_NAME = "David";
  static private final String MIDDLE_NAME = "";
  static private final String LAST_NAME = "Franklin";
  static private final String DEPARTMENT = "sales";
  static private final String START_DATE = "20030911000000z";
  static private final String EMAIL_ADDR = "[e-mail]";
  static private final String USERNAME="ldapuser11";
  static private final String PASSWORD = "welcome11";
  static private final String UID_ADDR = "[e-mail]";
 */
  
  SampleUser()
  {
  
  }
 
 private String EMPLOYEE_ID = "";
 private String FIRST_NAME  = "";
 private String MIDDLE_NAME = "";
 private String LAST_NAME   = "";
 private String DEPARTMENT  = "";
 private String START_DATE  = "";
 private String EMAIL_ADDR  = "";
 private String USERNAME    = "";
 private String PASSWORD    = "";
 private  String UID_ADDR    = "";
 private String CN_ADDR    = "";
 
void setuserproperties(String empid,String fn,String mn,String ln,String dept,String sdate, String email,String usernm, String pwd, String userid)
  {
    EMPLOYEE_ID   = new String(empid);
    FIRST_NAME    = new String(fn);
    MIDDLE_NAME   = new String(mn);
    LAST_NAME     = new String(ln);
    DEPARTMENT    = new String(dept);
    START_DATE    = new String(sdate);
    EMAIL_ADDR    = new String(email);
    USERNAME      = new String(usernm);
    PASSWORD      = new String(pwd);
    UID_ADDR      = new String(userid);
    System.out.println("EMPLOYEE_ID : "+EMPLOYEE_ID);
    System.out.println("USERNAME: "+USERNAME);
    System.out.println("UID_ADDR: "+UID_ADDR);
  }
  
  
  void createuser()
  {
    try
    {
      System.out.println("Start");
 
      Hashtable env = new Hashtable();
      env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
      env.put(Context.PROVIDER_URL, "ldap://localhost:3060");
      env.put(Context.SECURITY_AUTHENTICATION, "simple");
      env.put(Context.SECURITY_PRINCIPAL,"cn=orcladmin, cn=Users, dc=domain, dc=com");
      env.put(Context.SECURITY_CREDENTIALS, "welcome");
      DirContext dirctx = new InitialDirContext(env);
 
      System.out.println("Created context");
 
      Attributes attrs = new BasicAttributes(true);
 
// setup classes
      Attribute objectclass = new BasicAttribute(ATTR_OBJECTCLASS);
      objectclass.add(CLASS_TOP);
      objectclass.add(CLASS_PERSON);
      objectclass.add(CLASS_INETORGPERSON);
      objectclass.add(CLASS_ORGANIZATIONALPERSON);
      objectclass.add(CLASS_ORCLUSER);
      objectclass.add(CLASS_ORCLUSERV2);
      attrs.put(objectclass);
 
// employee number
      Attribute employeenumber = new BasicAttribute(ATTR_EMPLOYEENUMBER);
      employeenumber.add(EMPLOYEE_ID);
      attrs.put(employeenumber);
      
          
// first name
      
      Attribute givenname = new BasicAttribute(ATTR_GIVENNAME);
      givenname.add(FIRST_NAME);
      attrs.put(givenname);
  
// middle name
      Attribute middlename = new BasicAttribute(ATTR_MIDDLENAME);
      middlename.add(MIDDLE_NAME);
      attrs.put(middlename);
 
// last name
      Attribute sn = new BasicAttribute(ATTR_SN);
      sn.add(LAST_NAME);
      attrs.put(sn);
 
// password
      Attribute userpassword = new BasicAttribute(ATTR_USERPASSWORD);
      userpassword.add(PASSWORD);
      attrs.put(userpassword);
  
// department
      Attribute department = new BasicAttribute(ATTR_DEPARTMENTNUMBER);
      department.add(DEPARTMENT);
      attrs.put(department);
 
// email
      Attribute mail = new BasicAttribute(ATTR_MAIL);
      mail.add(EMAIL_ADDR);
      attrs.put(mail);
  
// uid
      Attribute uid = new BasicAttribute(ATTR_UID);
      uid.add(UID_ADDR);
      attrs.put(uid);
      
  
//Startdate      
      Attribute orclactivestartdate = new BasicAttribute(ATTR_ORCLACTIVESTARTDATE);
      orclactivestartdate.add(START_DATE);
      attrs.put(orclactivestartdate);
 
      System.out.println("All Attributes Added");
      
      String dn="cn="+USERNAME+",cn=Users,dc=domain, dc=com";
 
      Context result = dirctx.createSubcontext(dn,attrs);
 
      System.out.println("Created user");
 
    }
    catch (Exception e)
    {
      e.printStackTrace();
    }
  }
  
  public static void main(String[] args)
  {
    SampleUser su = new SampleUser();
    su.setuserproperties("1012","David1","","Franklin1","Sports","","[e-mail]","ldapuser12","welcome12","[e-mail]");
        su.createuser();
  }
  
}

[ February 26, 2005: Message edited by: Jeanne Boyarsky ]
[ March 09, 2005: Message edited by: Abhishek Mehta ]

[Ludwig Mueller]

I had a similar problem and found out, that the error message was completely misleading. In my case the real reason was an attribute called "orclactiveenddate" which usually holds a date value. The exception was thrown, when the attributes' value was set to an empty String. In the above code the value of START_DATE is an empty String and may have caused the problem.
[ May 30, 2006: Message edited by: Ludwig Mueller ]