Questions on Directory Services module in Microsoft Domain environment

Amel_Beldi

Hi,I'm new to Livelink administration so excuse me for my ignorance...I just inherited Livelink 9.7.1 Administration (on Windows Server 2003 32bits with IIS6) in a Microsoft Domain environement (with Active directory).Where're using Livelink internal authentification with hundreds of Livelink users and +-100 groups . Note that the usernames in Livelink and in AD are the same (ex. Livelink username:FLep1 = AD username:Flep1).I don't know if you see me coming but now they want to implant Directory services... Now... I've read the Admin doc (Livelink ECM - Directory Services 3.1.0 Installation and Administration Guide.pdf...) and have a few questions...- If I understand correctly, when you're implanting Integrated Windows Authentification source, You're using AD authentification but using Livelink user object for livelink access right? If so, the users and there access rights must be created before login or does Livelink create users at first login? Does livelink will make association between Livelink users and authentification infos?- If I choose to use LDAP(AD) synchronization (read): - Does it import LDAP infos to create Livelink users/groups or only read them? The logical way to implement would be to create Livelink groups and associate AD users to thoses groups... Is it possible? And if so, how...?- Does Livelink offer a "Best practices" manual for Directory services?

Appu_Nair

Usually there is a lot of activity in this area.I have not seen the best practices document that you describe.For sanity's sake I actually do the Livelink authentication part correctly with a manually created userid such as myself in livelink.You have to then setup the livelink web server correctly and the livelink application.I have some screen shots of that in the linkhttps://knowledge.opentext.com/knowledge/llisapi.dll?func=ll&objId=16130891&objAction=audit&nexturl=/knowledge/llisapi.dll?func=ll&objid=16133305&objAction=browse&sort=nameAt this point you should get your seamless login and that really concludes the authentication part.You have to rest passwords to hidden for SSO for your loginAs far as creating AD Users & Groups thru LES Dir Svcs,the interface is not the best one that you can start practisiing on.I use Softerra's free ldap tool ,or the AD MMC snapin and I perfect the queries.Once it runs in them you just cut & paste it into the livelink area and that is how I am accustomed to doing it.Start small with baby queries trying to find your login and your group.Once you master it just go on adding more and more sync sources or use the same source to create more and more complex querise.When you run into difficulties always test with external tools and then raise a tcicket with OT.BTW the integration is pretty manual or automatic how you want to look at it.If you are a LDAP whiz then you may choose to do Sync before the authentication.I come from livelink with manual login screens so I go the other route.