Page 1 of 3 1 2 3 >
Topic Options
Rate This Topic
#138544 - 08/08/07 01:20 PM Loading people from Active Directory
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Hi, right now we are looking to change the load people .. we want to use AD, but i really don't know how to do that .. cna someone teel me the way i have to take ....

trhanks

Top
#138551 - 08/08/07 06:28 PM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
Hi,

Look at the integration Guide for ARDBC and LDAP integration.
_________________________
Vincent.

Top
#138558 - 08/09/07 07:16 AM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Where i cna find it ? im not able to find it in the remedy web site ....

Top
#138559 - 08/09/07 08:13 AM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
This guide is available in the documentation section on the BMC Support Site.

This documentation is a AR System V7 doc, but most things are applicable with older version.
_________________________
Vincent.

Top
#138561 - 08/09/07 09:12 AM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Oki, i just entered the information of my lda server in the ardbc ldap forms .. after that i trey to create a vendor forms, and i got this error :

Impossible de se connecter au service de répertoire : Invalid credentials (LDAPERR 49)80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece (ARERR 3375).

you have an idea ?

Top
#138562 - 08/09/07 09:42 AM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
Hi,

Your bind User and / or Bind Password information seems to be wrong. Check that with your LDAP Administrator.
_________________________
Vincent.

Top
#138573 - 08/10/07 09:19 AM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Oki, that works fine, now ... the vendor forms is populated correctly, now what is your reocmmandation to populate my people form one time per day ... an escalation that run every day ? to load information missing in the people forms, but my question is, how can i start the create news user, and modify existing user, or delete user ...

thanks

Top
#138574 - 08/10/07 10:48 AM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
Hi,

You need to design an integration between your ARDBC form and your application people form to :
* Create new people
* Modify only modified people
* Delete only deleted people
* Maintain the relationships between your application people form and other related form in your application

It's not only one escalation... It's a complete integration that you need to design and develop.
_________________________
Vincent.

Top
#138577 - 08/10/07 11:27 AM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
I know that, but you do it by escalation of filter ?
i cna create a filter guide, with many action .. to run all, but i need that to run in every record in my vendor forms ....
if that runs from an escalation, that will be run on every record ... whats your suggestion ?

thanks

Top
#138581 - 08/10/07 11:52 AM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
 Originally Posted By: PAT30
I know that, but you do it by escalation of filter ?


Both \:\)

Escalations (on Vendor Form for Create / Modify and on people for for Delete) with optimized criteria to minimize the number of records. These escalations only do a "Command" Set Field to a Display-Only field. (search for Form Command on BMCDN Library for more explanations about "Command")

Create one filter that execute on modify for each "Command" and then call the right Filter Guide.

I hope this helps.
_________________________
Vincent.

Top
#138584 - 08/10/07 12:01 PM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
thanks

Top
#138612 - 08/13/07 05:07 PM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Can you teel me where i can find that guide, whos talking about the @command@ ?

Top
#138613 - 08/13/07 05:35 PM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
_________________________
Vincent.

Top
#138614 - 08/13/07 10:46 PM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Thanks, i have read it, i know how to build it but its not the better way ill ask you question i you have time.

1- Do you create new user entry in the people forms, with the escalation running on the vendor forms ? like my exemple or escalation flag entry need to be created in people forms and now the filter fire ...
Exp :
Run in vendor forms
Escalation run if = empty
push field if Vendor_forms Login-Names = People Login-Names
if no create new record

2- In the People forms, when a user is present in this forms and not in the vendors forms you flag it with the escalation and after that a filter fire to delete it ?

Run in people forms
Escalation run if = empty
Set field if Vendor_forms Login-Names != People Login-Names
Set field to flag = Delete

3- After that need something to run to modify record in the people form, when users they are modified in the vendors forms, Maybe an escalation like that ?

In vendor forms
Run if = empty
Set field if: (Vendor_forms Login-Names = People Login-Names) AND (Vendor_forms Cost-Center != People Cost-Center) OR (Vendor_forms Name != People Name) OR (Vendor_forms Phone != People Phone) ETC ....

that set a flag in the vendor forms record and my command runs ?

And when one modification is done in the record are you pushing again all information to the people or only the information modified ?

thanks alot your my guru


Edited by PAT30 (08/14/07 01:03 AM)

Top
#138615 - 08/14/07 05:19 AM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
Hi,

Just a quick response... \:\)

General comments :
For performance point of view, it's better to use a qualification to your escalation like :
* Records created today.
* Records modified today

It's better to use a set field in the escalation, then to run the appropriate filters that do the push fields.

In your second point : Think about Login-Names != People Login-Names... And choose another design on this point \:\)
_________________________
Vincent.

Top
#138618 - 08/14/07 01:03 PM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Thanks, but feel free to give me more information, the first escalation that run in the vendor forms to check for update or new creation, can<t have run if ^ i need to check all record , or i don<t understand something correctly

thk

Top
#138623 - 08/15/07 07:08 AM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
Hi,

If it's not possible to have a Run If in the first escalation, so do it without a Run If... \:\)

Each times your escalation is running, all records are synchronized, so if you have many thousands records, it can slow up the AR System and take a long time...
_________________________
Vincent.

Top
#138645 - 08/21/07 07:14 AM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
If i add a field in the vendor forms, (character) and i try to put something in this field, when i try to save the forms i receive an error it is normal ?

Top
#138646 - 08/21/07 07:20 AM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
You must use a Display-Only field...
_________________________
Vincent.

Top
#138647 - 08/21/07 10:40 AM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Ill try to do my first load my people forms is empty .. and i can't do it automaticly ... i have created a display only forms in my vendor forms, i have a filter run on modify, to push record in the people forms, if i save the record in the vendor forms, the filter push info correctly .. but if i have an escalation run in each record in the vendor forms, push "123" in the display only forms, and after that in the escalation i do a command line : PERFORM-ACTION-APPLY .. normally this is suppose to be the same thing ???

thanks

Top
#138648 - 08/21/07 11:03 AM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
 Originally Posted By: PAT30
i have created a display only forms in my vendor forms


You mean Display-Only field and not form? I suppose that for the response bellow \:\)

 Originally Posted By: PAT30
i have an escalation run in each record in the vendor forms, push "123" in the display only forms


You must use a Set Fields in the escalation to set the 123 value in your Display-Only Field.

 Originally Posted By: PAT30
after that in the escalation i do a command line : PERFORM-ACTION-APPLY


You don't need to use this Run Process. Furthermore the PERFORM-ACTION-APPLY works only for Active Links... \:\)

The Set Fields in your escalation do it for you...
_________________________
Vincent.

Top
#138649 - 08/21/07 01:02 PM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Sorry for the error, yep its a display only field, heheheh and im doing a set field with the escalation, and i don't know why the filter never start ....
if you say to me the esscalation is doing a save after the set, normally the filter is suppose to fire .. i have to check what is the problem ..
thanks you so much for your help, really appreciate ...

Top
#138650 - 08/21/07 01:52 PM Re: Loading people from Active Directory [Re: PAT30]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
I know my error, in version 7, witch user remedy use to run escalation 6 i think this user don't have right to do it :

As the General Access of this ticket, you do not have permission to submit or modify the People profile Status from "" to "Enabled". (ARERR 1071032)

this is the funny thing with all new role and permission in version 7 .....

Top
#138651 - 08/21/07 01:54 PM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
Hi,

You have to use ARUtilities (or in the logs \:\) ) and lookup for the filter that generate the ARERR 1071032. Then, modify this filter and add in the Run If : AND $USER$ != "AR_ESCALATOR"

\:\)
_________________________
Vincent.

Top
#138672 - 08/23/07 08:36 AM Re: Loading people from Active Directory [Re: PAT30]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
What you think, about running the escalation for the create people, in the run if, verify the created date from the Active Directory) And same thing for the modification .. it is a good idea ?

thanks

Top
#138673 - 08/23/07 08:40 AM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
Yes \:\)
_________________________
Vincent.

Top
#138680 - 08/23/07 01:19 PM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Another question, when im mapped with the AD, can i choose on each "ou" i need to check the data ?

mine is like that :
ldap://labdsf.com/OU=Admins,OU=Reg_QC,OU=DSF,DC=labdsf,DC=com??sub?(objectclass=user)

but i need to say check in OU=Admins AND OU=Utilisateurs, how i say that ?

thanks

Top
#138681 - 08/23/07 01:53 PM Re: Loading people from Active Directory [Re: PAT30]
Vincent_RIEDWEG Offline

Old Hand
****

Registered: 05/24/05
Posts: 1454
Loc: France
I don't know, I have never tried that \:\)
_________________________
Vincent.

Top
#138693 - 08/24/07 09:14 AM Re: Loading people from Active Directory [Re: Vincent_RIEDWEG]
PAT30 Offline
Stealth Member

Registered: 03/09/07
Posts: 157
Another one ... ;-))
Whats your idea for deleting people in the CTM:People, because i have to check each record and compare it to my vendor forms, if the record is in CTM:People and not in the vendor forms i set it to delete, and after a filter will be fire to delete the record, but i just don't know how to do this compare ...

thanks

Top
Page 1 of 3 1 2 3 >