Re: enabling Anonymous LDAP operations to Active Directory
- From: "John M" <sdkfj@xxxxxxxxxxxxx>
- Date: Tue, 26 Sep 2006 16:53:45 -0500
We use an Oracle product called Express Analyzer. Sometimes the application
has problems logging into AD. Oracle support wants us to make this change.
My experience is that these Oracle 'support' people don't know anything
about Windows and even less about AD.
I don't understand how this would fix an intermittent problem with the
Oracle application. It should either read and authenticate with AD or not,
not most of the time and sometimes not work
Here is the mumbo jumbo from Oracle support about this.
" The message that Express is getting back from the operating system is a
Microsoft error that states:
ERROR_NO_SUCH_LOGON_SESSION
1312 A specified logon session does not exist. It may already have been
terminated.
Which could be that a user has indeed authenticated properly and now that
session is no longer in existence as far as the OS is concerned and
therefore the next time Express attempts to authenticate this user the
failure occurs. Since Express perform
s many more checks than just the one at session login time, to make sure the
user/session has rights to access a file or database object the 1312 message
could
appear at any time. "
Thanks
John
"Brian Desmond [MVP]" <brian@xxxxxxxxxxxxxxxx> wrote in message
news:ewgAFjC4GHA.3428@xxxxxxxxxxxxxxxxxxxxxxx
Let's look at this a different way. Why do you want to do this - what's
the business requirement?
--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services
www.briandesmond.com
"John M" <sdkfj@xxxxxxxxxxxxx> wrote in message
news:eAofUpl3GHA.4588@xxxxxxxxxxxxxxxxxxxxxxx
Is there any security issue with allowing Anonymous LDAP operations to
Active Directory as described in this MS article?
http://support.microsoft.com/kb/326690/en-us
thanks
John
.
- Follow-Ups:
- Re: enabling Anonymous LDAP operations to Active Directory
- From: Brian Desmond [MVP]
- Re: enabling Anonymous LDAP operations to Active Directory
- References:
- enabling Anonymous LDAP operations to Active Directory
- From: John M
- Re: enabling Anonymous LDAP operations to Active Directory
- From: Brian Desmond [MVP]
- enabling Anonymous LDAP operations to Active Directory
- Prev by Date: Major problem after BackupExec issue
- Next by Date: Re: Major problem after BackupExec issue
- Previous by thread: Re: enabling Anonymous LDAP operations to Active Directory
- Next by thread: Re: enabling Anonymous LDAP operations to Active Directory
- Index(es):
Relevant Pages
|