Hi everyone,

I have been having recent discussions with two of the guys who post to this board who about how to implement single sign on or central user management with Oracle / unix and baan. My suggestion is to look into LDAP with either Oracle OID or MS Active directory as the directory server. I am not a baan expert so don't know of the baan side.

The second much simpler option is to put together a Unix script that will create Baan, Oracle and Unix accounts in one go.

So two questions please.

1 - has anyone any experiences of using LDAP with oracle / unix and baan - good or bad. - or any documents.

2 - Does anyone else feel a unix script is worth putting together to create and change user accounts and passwords - or does anyone have one already? if not I will put one up on my site (after its written of course). If people are interested then i will come back to you for common requirements / privileges etc...:-)

thanks

kind regards

Pete

--
Pete Finnigan
email:pete@petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

I have tested the LDAP>ADS and rexec seems to login ok but baan login protocol fails.

We are presently moving from using a central script utility to add/delete/modify users for UNIX/Baan/Oracle. Although the script worked wonderfully, we ran into several issues pertaining to the recent Sarbanes-Oxley fiasco (US legislation to avert more Enron debacles).

Since we have both a UNIX/Oracle guy (me) and Baan people we are no longer able to do this sort of scripting since it requires knowledge of root/bsp/oracle passwords for individuals who no longer are authorized access to passwords/accounts not directly related to their job (ie only the unix guy knows 'root').

For account administration, we've had to break the tasks into their respective teams.

We, too, are looking to do single login and are presently investigating KRB5 and LDAP. This is no easy task if you consider your normal work load plus the added time necessary to investigate the options and test.