Discussions
Categories
Groups
Community Home
Categories
INTERNAL ENABLEMENT
POPULAR
THRUST SERVICES & TOOLS
CLOUD EDITIONS
Quick Links
MY LINKS
HELPFUL TIPS
Back to website
Home
Web CMS (TeamSite)
iwldapsync
LooseCannon
TS 671 SP1 w/latest patch
RedHat ES 4u4 smp kernel
Has anyone successfully synchronized the users in LDAP with TeamSite users (tsusers.xml) using the iwldapsync CLT??? I can't get it to work....
Our LDAP schema had an unused attribute "UD-009" that's now being used to identify TS users and the attribute is appropriately defined in user_databses.xml cfg as
<attr_sync name="UD-009" value="master,tsuser,ccpro,ccstd,ccpro_only,ccstd_only" />
but running iwldapsync never updates tsusers.xml.
According to trace, TS is connecting to LDAP, just not finding the users
[Wed Mar 12 12:34:48 2008] Getting existing TeamSite users for LDAP server "AD_User_DB"
[Wed Mar 12 12:34:48 2008] There is no existing TeamSite user for LDAP server "AD_User_DB".
[Wed Mar 12 12:34:48 2008] Synchronizing users from LDAP server "AD_User_DB".
[Wed Mar 12 12:34:48 2008] Finished synchronizing users from LDAP server "AD_User_DB".
[Wed Mar 12 12:34:48 2008] Getting existing TeamSite users for LDAP server "LDAP_User_DB"
[Wed Mar 12 12:34:48 2008] There is no existing TeamSite user for LDAP server "LDAP_User_DB".
[Wed Mar 12 12:34:48 2008] Synchronizing users from LDAP server "LDAP_User_DB".
[Wed Mar 12 12:34:54 2008] Finished synchronizing users from LDAP server "LDAP_User_DB".
[Wed Mar 12 12:34:54 2008] There is no LDAP user to be updated.
[Wed Mar 12 12:34:54 2008] There is no LDAP user to be removed.
[Wed Mar 12 12:34:54 2008] There is no LDAP user to be created.
[Wed Mar 12 12:34:54 2008] Finshed synchronizing LDAP user information.
Has anyone successfully used the iwldapsync CLT?
Find more posts tagged with
Comments
LooseCannon
Looks the issue might be caused by the Active Directory attribute being defined as a single value field instead of a multi value. The TeamSite documentation doesn't specify which is correct...
User records are being returned when the search filter uses wildcards:
/p01/app/iw/tsite/iw-home/bin/iwldapsearch -t AD_User_DB UD-009='*master,ccpro*'
But not:
/p01/app/iw/tsite/iw-home/bin/iwldapsearch -t AD_User_DB UD-009='master,ccpro'
I have a request in to security to update the att to multi value....
jzhuang
The ldapsync attribute must be a multi-valued attribute.
LooseCannon
The ldapsync attribute must be a multi-valued attribute.
Yeah, I figured that out. Too bad it wasn't stated as such in the users guide. Also, make you get the updated iwldapsync binary from IWOV support as the one shipped with 671 SP1 is buggy.