Problems with Active Directory authentification

[Former Member]

Our Crystal Report server is down due to the errors below.

This all started because we tried to add a user who was included in an AD security group but CMC couldnu2019t find the object or group. Then we tried to add a security group because our security groups had since changed from the ones that were in the CMC but it said that we needed to delete the existing security groups. This is when we started receiving the errors below. We are running Crystal Report Server XIR2.

We also deactivated Windows AD in CMC. We can no longer turn Windows AD back on which means that none of our useru2019s can log back in.

This error occurs when you try to delete one of the mapped groups:

Error Updatng Windows AD authentication properties: Sorry, you do not have the right to 'Delete objects' (id - 22) for 'groupname' (id - 1178). Please contact your system or permissions administrator if you require this right.

This error occurs when we try to turn the Windows AD back on:

Error updating Windows AD authentication properties: Active Directory Authentication failed to verify the mapped groups. If the problem persists, please delete and re-map into Business Objects Enterprise all currently mapped groups.

[BasicTek · Accepted solution]

I think you've created some type of catch 22. You cannot enable your plugin because the group is incorrect. If the plugin is not enabled then you cannot remove the group. What if you remove the group and enable the plugin after and then hit update? If this fails it would indicate you have either more than 1 bad group or possibly a bad username (AD administration credentials) as well. If you cannot enable the plugin I'd suggest opening a case with the Authentication team and see if an engineer can figure out what's wrong. If it's a DEV system and you want to start over you can reinitialize your CMS database. Open CCM > stop the CMS > properties > configuration > from here you can select your CMS DB and reinitialize it. To note this will blank out the entire system to like it was a new install (groups/users/reports/etc)

Regards,

Tim

[Former Member · Accepted solution]

This appears to be a known issue in XIR2. We currently have two environments with these symptoms. The solution previous provided by SAP BO was to run a script they provided that converts AD groups to Enterprise groups, remove the AD groups, re-enble the AD plugin and remap the groups.

Of course, if you're in a production environment with many advanced permissions settings, you may go insane first.

[Former Member]

How do I move this thread to the correct forum?

SAP Community Network Forums » Business Objects » BusinessObjects Enterprise Administration

[former_member11696]

Moved it for you