Still not entirely clear, but let me reword and see if I understand
correctly.

The oracle folks want to know if Active Directory was used in some way
during a transaction on their system.  They want to know based on a certain
time.

Is that right?

If so, how is Oracle integrated in your environment?  If just the database,
then it was likely using identification and authentication services of
Active Directory.  That being the case, you'd want to be auditing for the
events in your security logs on the domain controllers.  

If oracle is trying to make changes to objects in the directory, then
lastchanged would be the way to find out when. To find out whom, you'd have
to revert to the audit logs.

If there is a certain function they are calling that triggers off of
usnchanged, then they should know what they're looking for already which is
likely what's confusing me.  Do they just want to see if a particular
attribute on the object has changed and want to look for it by USNCHANGED
value?  

What component of Oracle are they using?

-----Original Message-----
From: Sharif Naser [mailto:[EMAIL PROTECTED] On Behalf Of
Sharif Naser
Sent: Monday, December 20, 2004 1:01 PM
To: [email protected]
Subject: RE: [ActiveDir] oracle directory service integration with windows
2000 active directory


oracle guys need to know what kind of operation  has occured in active
directory which is associated with a certain usnchanged number at the time
that operation took place. is that possible like can i read the active
directory log & know what operation has been done in active directory.

regards,

-----Original Message-----
From:   [EMAIL PROTECTED] on behalf of Mulnick, Al
Sent:   Mon 12/20/2004 7:07 PM
To:     [email protected]
Cc:     
Subject:        RE: [ActiveDir] oracle directory service integration with
windows 2000 active directory
Can you reword that another way?  What are you trying to accomplish in this?


Your subject says one thing, but your question says another the way I read
it.

Al 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sharif Naser
Sent: Sunday, December 19, 2004 4:27 AM
To: [email protected]
Subject: [ActiveDir] oracle directory service integration with windows 2000
active directory

Hello All,
 
How do I know the operation which has been done on windows 2000 active
directory & identified by a certain usnchangednumber.
 
Regards,
DISCLAIMER:
This electronic message transmission contains information from Qatar Steel
Company (QASCO) which may be confidential or privileged. The information is
intended to be for the use of the individual or entity named above. Be aware
that any disclosure, copying, distribution or use of the contents of this
information, including attachments, is prohibited without the written
consent of Qatar Steel Company (QASCO).
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


DISCLAIMER:
This electronic message transmission contains information from Qatar Steel
Company (QASCO) which may be confidential or privileged. The information is
intended to be for the use of the individual or entity named above. Be aware
that any disclosure, copying, distribution or use of the contents of this
information, including attachments, is prohibited without the written
consent of Qatar Steel Company (QASCO).

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to