DISCLAIMER: The information and links provided on this site are my personal notes, based on my limited experience installing, using, and deinstalling Oracle databases and application servers on a variety of computers using Windows NT/2000/XP operating systems. The installation and deinstallation procedures found here can cause irreversable loss of data and may damage your operating system. However, you are welcome to use them AT YOUR OWN RISK. I am in no way responsible for data you lose or operating systems you damage or destroy.
REFERENCE: Howto create Resource Access Descriptors for Oracle9i Forms single sign-on with PLSQL
The CREATE_SAMPLE_PROCEDURE.SQL script uses the cn=orcladmin superuser account for OID session binding. Use of the superuser account in a production environment is strongly discouraged. Instead, any OID user account with the ability to create and modify user accounts may be used, however the full distinguished name for this user must be passed to the DBMS_LDAP session binding function. This is what it should look like using the forms_rad.createOidSession function provided in the Oracle sample code:
forms_rad.createOidSession('cn=oidadmin,cn=Users,dc=adm17655,dc=com','adminoid','oid.hostname.com',389, 'dc=hostname,dc=com');