nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Windows Ad_User management settings

actuser9

Hi BIRT Gurus, 
 
We have set up our iHub3.1 environment with Windows Ad user management setting, and it works well for users and the privileges on ihub3. Based on the groups base DN, the security groups are being shown in the ihub3 sever but the when the folders are shared with the groups, the users under the groups are not able to view the folder or reports.
 
Is this an existing issue? Is there any possible workaround for this issue?
 
Thank you!

Find more posts tagged with

Comments

Clement Wong

I have an iHub 3.1 integrated with Active Directory and have groups working. Here are my settings as seen from System Console:
 
*Group Base DN: DC=somewhere,DC=com 
Group Description Attribute: displayname 
*Group Object: group 
Group Search Filter:
 
 
Have you contacted the Support team yet? They should be able to assist you in troubleshooting the issue, and they will want to know the Group definitions you have defined from System Console.

jar

When you select a user in the ihub administration and look at the assigned usergroups are they there...?
 
We had an issue that the groups where visible in iHub administration and when selecting the group the users where visible but from the user the groups where not. This was caused by our configuration in LDAP. We had sub-folders in the people tree and iHub seems to expect the users in the root of the USER Base DN.
 
It might work when all sub-folders are configured in sysconsole but we had 120+ sub-folders so that was not an option. We opted to remove the sub-folder structure (had the sub-folder name added as an attribute for each user). So we have all users in the root of our people tree.
 
Might be related to your problem...
 
Jeroen

actuser9

Hi Clement, 
 
Yes, we were going back on forth on this for more than 2 months now. And finally the issue seems to be the same as explained by Jeroen below.
 
Hi Jeroen,
 
<blockquote class="ipsBlockquote" data-author="jar" data-cid="142108" data-time="1454559447">
<div>
When you select a user in the ihub administration and look at the assigned usergroups are they there...?
 
</div>
</blockquote>
Yes.
 
<blockquote class="ipsBlockquote">
We had an issue that the groups where visible in iHub administration and when selecting the group the users where visible but from the user the groups where not. This was caused by our configuration in LDAP. We had sub-folders in the people tree and iHub seems to expect the users in the root of the USER Base DN.
<div>
 
It might work when all sub-folders are configured in sysconsole but we had 120+ sub-folders so that was not an option. We opted to remove the sub-folder structure (had the sub-folder name added as an attribute for each user). So we have all users in the root of our people tree.
 
Might be related to your problem...
</div>
</blockquote>
That is exactly the scenario we are having, thanks a bunch for responding. 
 
Our SA's would not want to make any changes to the users sub-folders, so I have tested with giving sub-folders user base DN configured in system console. I tested it and that works. The down side is when new OU are created I will have to follow up and add these to the system console config. :mellow: Hope this will be fixed in future releases.

camuneke

Hi my name is Chika and I would like to interject into this conversation. JIRA IHUB-565 has been filed and will be reviewed in the development process. At this time we do not know if this would be in a future release. To summarize the work around are as follows:
 
1. Make a linear active directory structure where users and groups are all in the same folder
2. Specify each individual subfolder in your LDAP properties (2000 Character limit)
3. Write your own custom RSSE