RE: [ActiveDir] oracle directory service integration with windows 2000 active directory
sounds like you're trying to syncronize oracle data with AD and you want to perform an LDAP query against AD to retrieve the last changes that took place - is this about right? If so, you could use the DirSync contol (but this needs to have an active process running on a DC) or you could use the USN attributes in AD to restrict the export to things that have changed since the last syncronization - e.g. using an LDAP filter with &(usnCREATED>=)(usnCHANGED>=). /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharif Naser Sent: Monday, December 20, 2004 7:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] oracle directory service integration with windows 2000 active directory oracle guys need to know what kind of operation has occured in active directory which is associated with a certain usnchanged number at the time that operation took place. is that possible like can i read the active directory log & know what operation has been done in active directory. regards, -Original Message- From: [EMAIL PROTECTED] on behalf of Mulnick, Al Sent: Mon 12/20/2004 7:07 PM To: ActiveDir@mail.activedir.org Cc: Subject: RE: [ActiveDir] oracle directory service integration with windows 2000 active directory Can you reword that another way? What are you trying to accomplish in this? Your subject says one thing, but your question says another the way I read it. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharif Naser Sent: Sunday, December 19, 2004 4:27 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] oracle directory service integration with windows 2000 active directory Hello All, How do I know the operation which has been done on windows 2000 active directory & identified by a certain usnchangednumber. Regards, DISCLAIMER: This electronic message transmission contains information from Qatar Steel Company (QASCO) which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. Be aware that any disclosure, copying, distribution or use of the contents of this information, including attachments, is prohibited without the written consent of Qatar Steel Company (QASCO). List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] oracle directory service integration with windows 2000 active directory
Still not entirely clear, but let me reword and see if I understand correctly. The oracle folks want to know if Active Directory was used in some way during a transaction on their system. They want to know based on a certain time. Is that right? If so, how is Oracle integrated in your environment? If just the database, then it was likely using identification and authentication services of Active Directory. That being the case, you'd want to be auditing for the events in your security logs on the domain controllers. If oracle is trying to make changes to objects in the directory, then lastchanged would be the way to find out when. To find out whom, you'd have to revert to the audit logs. If there is a certain function they are calling that triggers off of usnchanged, then they should know what they're looking for already which is likely what's confusing me. Do they just want to see if a particular attribute on the object has changed and want to look for it by USNCHANGED value? What component of Oracle are they using? -Original Message- From: Sharif Naser [mailto:[EMAIL PROTECTED] On Behalf Of Sharif Naser Sent: Monday, December 20, 2004 1:01 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] oracle directory service integration with windows 2000 active directory oracle guys need to know what kind of operation has occured in active directory which is associated with a certain usnchanged number at the time that operation took place. is that possible like can i read the active directory log & know what operation has been done in active directory. regards, -Original Message- From: [EMAIL PROTECTED] on behalf of Mulnick, Al Sent: Mon 12/20/2004 7:07 PM To: ActiveDir@mail.activedir.org Cc: Subject: RE: [ActiveDir] oracle directory service integration with windows 2000 active directory Can you reword that another way? What are you trying to accomplish in this? Your subject says one thing, but your question says another the way I read it. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharif Naser Sent: Sunday, December 19, 2004 4:27 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] oracle directory service integration with windows 2000 active directory Hello All, How do I know the operation which has been done on windows 2000 active directory & identified by a certain usnchangednumber. Regards, DISCLAIMER: This electronic message transmission contains information from Qatar Steel Company (QASCO) which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. Be aware that any disclosure, copying, distribution or use of the contents of this information, including attachments, is prohibited without the written consent of Qatar Steel Company (QASCO). List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ DISCLAIMER: This electronic message transmission contains information from Qatar Steel Company (QASCO) which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. Be aware that any disclosure, copying, distribution or use of the contents of this information, including attachments, is prohibited without the written consent of Qatar Steel Company (QASCO). List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] oracle directory service integration with windows 2000 active directory
oracle guys need to know what kind of operation has occured in active directory which is associated with a certain usnchanged number at the time that operation took place. is that possible like can i read the active directory log & know what operation has been done in active directory. regards, -Original Message- From: [EMAIL PROTECTED] on behalf of Mulnick, Al Sent: Mon 12/20/2004 7:07 PM To: ActiveDir@mail.activedir.org Cc: Subject:RE: [ActiveDir] oracle directory service integration with windows 2000 active directory Can you reword that another way? What are you trying to accomplish in this? Your subject says one thing, but your question says another the way I read it. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharif Naser Sent: Sunday, December 19, 2004 4:27 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] oracle directory service integration with windows 2000 active directory Hello All, How do I know the operation which has been done on windows 2000 active directory & identified by a certain usnchangednumber. Regards, DISCLAIMER: This electronic message transmission contains information from Qatar Steel Company (QASCO) which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. Be aware that any disclosure, copying, distribution or use of the contents of this information, including attachments, is prohibited without the written consent of Qatar Steel Company (QASCO). List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ DISCLAIMER: This electronic message transmission contains information from Qatar Steel Company (QASCO) which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. Be aware that any disclosure, copying, distribution or use of the contents of this information, including attachments, is prohibited without the written consent of Qatar Steel Company (QASCO). <>
RE: [ActiveDir] oracle directory service integration with windows 2000 active directory
Can you reword that another way? What are you trying to accomplish in this? Your subject says one thing, but your question says another the way I read it. Al -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharif Naser Sent: Sunday, December 19, 2004 4:27 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] oracle directory service integration with windows 2000 active directory Hello All, How do I know the operation which has been done on windows 2000 active directory & identified by a certain usnchangednumber. Regards, DISCLAIMER: This electronic message transmission contains information from Qatar Steel Company (QASCO) which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. Be aware that any disclosure, copying, distribution or use of the contents of this information, including attachments, is prohibited without the written consent of Qatar Steel Company (QASCO). List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
[ActiveDir] oracle directory service integration with windows 2000 active directory
Hello All, How do I know the operation which has been done on windows 2000 active directory & identified by a certain usnchangednumber. Regards, DISCLAIMER:This electronic message transmission contains information from Qatar Steel Company (QASCO) which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. Be aware that any disclosure, copying, distribution or use of the contents of this information, including attachments, is prohibited without the written consent of Qatar Steel Company (QASCO).
