HPUX BO XI3 + multiple LDAP (AD) domains

[Former Member]

Hello!

In my organization we have BO XI3 installed on HPUX server and 7 distributed Active Directory domains. Can we import (log in) users from all of this domains (SSO is not required)? How to implement this?

[Former Member · Accepted solution]

Hello, Tim

Unfortunately in my organization we had independent AD-trees. Is it possible to workaround this problem?

[BasicTek · Accepted solution]

Put your CMSs on windows and use the AD plugin, or else this is a limitation of the LDAP plugin as it isn't fully designed to incorporate the microsoft domain structure (thus why we have the AD one).

The LDAP plugin has 1 base DN so when you have multiple trees or forests we can only query 1.

Anoher option would be creating an ADAM server and mapping against that.

Regards,

Tim

[Former Member · Accepted solution]

Thank you, Tim for explanation.

We can't move to Windows environment, so ADAM is the only choise..

Do you have any tutorial explaining how to work with ADAM: install, add domains from different forests, link it with BO?

[BasicTek · Accepted solution]

SAP/BO won't have anything documented about the setup of ADAM. Here's some links I found

http://technet.microsoft.com/en-us/library/cc755705(WS.10).aspx

http://www.microsoft.com/downloads/details.aspx?familyid=5163B97A-7DF3-4B41-954E-0F7C04893E83&displa...

Regards,

Tim

[BasicTek]

if all the domains are in the same forest and tree, and none of the users are duplicated, you can map against the global catalog port 3268 vs 389 and you must map in universtal groups using the samaccountname to login. This is documented in a KB (LD configuration Active directory search tearms on SMP)

Regards,

Tim