LDAP Attribute in SAP Ticket

[Former Member]

Hi,

i want to put the content of a LDAP attribute into the SAP ticket INSTEAD od the user id.

As far as I know, it is possible to put a LDAP Attribute into the Ticket in addition to the user ID. But then I have to go with an reference system. My problem is, that i can not implement a reference system for various reasons.

I have got the user id of the user in his various sap systems (same id in every system i has to access). I want to put this in a LDAP attribute and send it with the SAP ticket.

Regards

[holger_stumm2 · Accepted solution]

Unfortunately, SAP won't let you work with the creation of the ticket, this is my last knowledge. It only provides libraries to read tickets.

The logon stack works the following: It looks for an R/3 reference system. If the reference system is not found or not existent, it creates the ticket with the LDAP user name that is mapped via the cn=attribute that is set in the LDAP Configuration file .

So far, no (legal) way to work around. If there is a workaround, I would be glad to see it.

Our workaround is to set multiple ShortNames in the LDAP. Logon works with every shortname, but the ticket is created with the very first entry.

If you set the log file level of the JAAS-Library to "ALL", you can see pretty nice the behaviour of the logon stack.