Issue enable AD authentication

[Former Member]

Hi,

I have Crystal server 2011 SP4 Patch 2 installed on a Windows 2008 R2 server.  I have just tried to enable the AD Authentication but I get the following error;

The secWinAD security plugin is not enabled. Contact your system administrator for details. (FWB 00002)

I have checked the registery and the file location is correct and the secWinAD.dll exist both for 32 and 64 bit.

Any ideas on how to resolve this issue?

Thanks,

Pamela

[Former Member]

Hi Pamela,

Did you configure the Windows AD plug-in in CMC->Authentication->Windows AD ?

Are you getting this error after clicking on Update?

Could you please specify what have you done till now to configure windows AD authentication?

Regards,

Swapnil

[former_member184468]

Follow the steps in the PDF guide attached to this SAP note

https://bosap-support.wdf.sap.corp/sap/support/notes/1631734

[Former Member]

Pamela,

I would also suggest you to check the username specified in CMC->Authentication->Windows AD->AD administration Name has read/write permissions on the Domain Controller.

Are you able to see Windows Active Directory users and groups in CMC under Users and Groups?

Also, could you please check whether the option "Enable Windows Active Directory (AD)" is checked or not?

Have you tried to logon to any other application like Universe designer, CMC using Windows AD authentication?

If yes, then do we face the same issue there as well.

Could you please verify whether the all SIAs are running under "Local System" account or Service account (AD username)?

Regards,

Swapnil

[Former Member]

Hi Swapnil,

I'll answer your questions as best I can;

Did you configure the Windows AD plug-in in CMC->Authentication->Windows AD ? YES

Are you getting this error after clicking on Update? YES

Could you please specify what have you done till now to configure windows AD authentication?  I have a service account setup correctly and the SIA is set to use it.  I just go to the CMC->Authentication->Windows AD and enter the AD Administration Name (domain\service account) and the Default AD Domain.  I enter a AD group.  I select the Enable Windows Active Directory and click update and I get the error.

I would also suggest you to check the username specified in CMC->Authentication->Windows AD->AD administration Name has read/write permissions on the Domain Controller.  - It has

Are you able to see Windows Active Directory users and groups in CMC under Users and Groups? No becuase I haven't got that far

Also, could you please check whether the option "Enable Windows Active Directory (AD)" is checked or not?  Error occurs when checking and updating so no

Have you tried to logon to any other application like Universe designer, CMC using Windows AD authentication? no as I'm not able to enable AD

If yes, then do we face the same issue there as well.

Could you please verify whether the all SIAs are running under "Local System" account or Service account (AD username)?  Service account

Kind Regards,

Pamela

[Former Member]

Hi Pamela,

I would suggest you to troubleshoot this issue step by step so that you negotiate and can find the root cause for the issue very easily.

The error message suggests that the Crystal Enterprise Server is not able to recognize the windows AD plug in CMC. To negotiate that please remove all the values (AD Administrator Name etc) and make the Windows AD plug in look fresh. Now just check "Enable Windows Active Directory (AD)" and click on update. You should get following error message "The Active Directory Authentication plugin does require valid global administration credentials in order to access Active Directory. Please specify administration credentials and try again" if there is no problem with Windows AD plug in.

Now go ahead and provide AD administrator credentials and then update (do not add AD groups at this moment) and see whether you get any error messages.

Once this is done without any issues you can go ahead with further configuration

Please let me know in case of any further queries.

Best Regards,

Sastry