Reporting Configuration: Configure LDAP/AD - Revision history

Rpandara at 09:01, 21 September 2010

2010-09-21T09:01:31Z

← Older revision	Revision as of 09:01, 21 September 2010
Line 1:	Line 1:
-	+	'''This page has been moved to [http://docwiki.cisco.com/wiki/Reporting_Configuration:_Configure_LDAP_%28Active_Directory%29_for_user_authentication Reporting Configuration: Configure LDAP (Active Directory) for user authentication]'''

Rpandara: Removing all content from page

2010-09-21T08:54:34Z

Removing all content from page

← Older revision		Revision as of 08:54, 21 September 2010
Line 1:		Line 1:
-	~~== Configure LDAP (Active Directory) for user authentication ==~~

-	~~{\| border="1"~~
-	\|-
-	~~! '''Problem Summary'''~~
-	~~\| Domain user cannot log in through LDAP server~~
-	\|-
-	~~! '''Error Message'''~~
-	~~\| Invalid username or password. Please try again.~~
-	\|-
-	~~! '''Possible Cause'''~~
-	~~\| The LDAP parameters are incorrect or incomplete~~
-	\|-
-	~~! '''Recommended Action'''~~
-	~~\|Sample parameters:~~
-	~~Host Address for Active Directory Server: 192.168.1.2~~
-	~~port: 389~~
-	~~"Use SSL" is not checked~~
-	~~Host Address for Redundant Active Directory Server:~~
-	~~Manager Distinguished Name: CN=Administrator, CN=Users, DC=myCompany, DC=com~~
-	~~Manager Password: <password for user administrator>~~
-	~~User Search Base: CN=Users, DC=myCompany, DC=com~~
-	~~Attribute for User ID: sAMAccountName~~
-
-	~~Sample value 2 for Manager Distinguished Name: CN=user1,OU=icm8,OU=UCCE80,OU=Cisco_ICM_domain,DC=UCCE80,DC=cisco,DC=com~~
-	~~Sample value 3 for Manager Distinguished Name: CN=testuser,OU=Employees,OU=Cisco Users,DC=cisco,DC=com~~
-
-	~~Tip 1: The values of OU could be case sensitive.~~
-	~~Tip 2: The max number of characters for Manager Distinguished Name field cannot exceed 85.~~
-
-	~~'''Action Plan-1:''' Verify following in CUIC setup~~
-	~~1. Verify the users credentials are correct in Active Directory~~
-	~~2. Verify the user is logging in with the correct Domain pre-pended to their Active Directory username. Verify they have not been locked out in Active Directory for too many failed login attempts.~~
-	3. Verify that the Active Directory server configured in OAMP is the same one used by UCCE/ICM. Verify the Manager Distinguished Name has the correct Domain name as that used by the ICM Server: CN=Administrator, CN=users, DC=MYDOMAIN, DC=COM
-
-	~~'''Action Plan-2:''' If Domain user is not able to login to CUIC yet, do the following:~~
-
-	Step-1: In OAMP Active Directory configuration page, check if User Search Base has 'CN=Users' in it. This is needed except incase User Search Base is already CN=Domain Users. Try To login to CUIC with supervisor name prepended with proper domain name
-	~~Step-2: If Step-1 doesn’t work, If user is not able to login still, modify to 'CN=Domain Users' in User Search Base and try to login~~
-	~~Step-3: If Step-2 doesn’t work, change following~~
-	~~Attribute for User ID = userPrincipalName~~
-	~~User Search Base search base, modify to = CN=Domain Users~~
-	~~And then try to login to CUIC with user id as testuser@bioscripinc.net (for this to work Ldap should be configured to accept both UserPrincipleName for login)~~
-
-	~~'''If AD user is still not able to login~~
-	~~'''~~
-	~~1.Login to Active directory using 'Active Directory Explorer by Microsoft' or Softerra LDAP browser~~
-	~~2.Navigate to the AD account name~~
-	~~3.Look for attribute distinguishedName, it would be something like "CN=UserName,DC=Users,DC=CompanyName,DC=COM...."~~
-	~~4.Copy every thing from distinguishedName except CN=UserName to 'User Search Base' element in OAMP Active directory configuration page~~
-	~~5.Make 'User ID Attribute' to userPrincipleName and from LDAP browser findout the userPrincipleName Attibute~~
-	~~Use the same thing to login to CUIC, login name would be like testuser@company.com~~
-	~~6.If user is not able to login to CUIC, then problem might be with Active directory LDAP authentication, then~~
-	~~Make 'User ID Attribute' to samAccountName and from LDAP browser find out the samAccountName Attibute~~
-	~~Use the same thing to login to CUIC, login name would be like 'company\testuser'~~
-
-	\|-
-	~~! '''Release'''~~
-	~~\| Release 8.0(1)~~
-	\|-
-	~~! '''Associated CDETS#/ Similar SRs '''~~
-	~~\| 614786193,615387559,614830251, cdets-defectid:CSCth62535 '''~~
-	\|-
-	\|}
-	~~[[Category:Unified IC, Release 8.0]]~~

Rpandara at 08:51, 21 September 2010

2010-09-21T08:51:01Z

← Older revision		Revision as of 08:51, 21 September 2010
Line 63:		Line 63:
	\|-		\|-
	\|}		\|}
-	[[Category: ~~Configuration Examples~~]]	+	[[Category:Unified IC, Release 8.0]]

Bhanprak at 07:18, 17 September 2010

2010-09-17T07:18:43Z

← Older revision		Revision as of 07:18, 17 September 2010
Line 43:		Line 43:
	And then try to login to CUIC with user id as testuser@bioscripinc.net (for this to work Ldap should be configured to accept both UserPrincipleName for login)		And then try to login to CUIC with user id as testuser@bioscripinc.net (for this to work Ldap should be configured to accept both UserPrincipleName for login)

		+	'''If AD user is still not able to login
		+	'''
		+	1.Login to Active directory using 'Active Directory Explorer by Microsoft' or Softerra LDAP browser
		+	2.Navigate to the AD account name
		+	3.Look for attribute distinguishedName, it would be something like "CN=UserName,DC=Users,DC=CompanyName,DC=COM...."
		+	4.Copy every thing from distinguishedName except CN=UserName to 'User Search Base' element in OAMP Active directory configuration page
		+	5.Make 'User ID Attribute' to userPrincipleName and from LDAP browser findout the userPrincipleName Attibute
		+	Use the same thing to login to CUIC, login name would be like testuser@company.com
		+	6.If user is not able to login to CUIC, then problem might be with Active directory LDAP authentication, then
		+	Make 'User ID Attribute' to samAccountName and from LDAP browser find out the samAccountName Attibute
		+	Use the same thing to login to CUIC, login name would be like 'company\testuser'

	\|-		\|-
Line 49:		Line 60:
	\|-		\|-
	! '''Associated CDETS#/ Similar SRs '''		! '''Associated CDETS#/ Similar SRs '''
-	\| 615387559 '''	+	\| 614786193,615387559,614830251, cdets-defectid:CSCth62535 '''
	\|-		\|-
	\|}		\|}
	[[Category: Configuration Examples]]		[[Category: Configuration Examples]]

Bhanprak: /* Configure LDAP (Active Directory) for user authentication */

2010-09-14T08:02:04Z

Configure LDAP (Active Directory) for user authentication

← Older revision		Revision as of 08:02, 14 September 2010
Line 48:		Line 48:
	\| Release 8.0(1)		\| Release 8.0(1)
	\|-		\|-
-	! '''Associated CDETS #'''	+	! '''Associated CDETS#/ Similar SRs '''
-	\| ~~None~~'''	+	\| 615387559 '''
	\|-		\|-
	\|}		\|}
	[[Category: Configuration Examples]]		[[Category: Configuration Examples]]

Bhanprak: /* Configure LDAP (Active Directory) for user authentication */

2010-09-14T07:59:16Z

Configure LDAP (Active Directory) for user authentication

← Older revision		Revision as of 07:59, 14 September 2010
Line 34:		Line 34:
	3. Verify that the Active Directory server configured in OAMP is the same one used by UCCE/ICM. Verify the Manager Distinguished Name has the correct Domain name as that used by the ICM Server: CN=Administrator, CN=users, DC=MYDOMAIN, DC=COM		3. Verify that the Active Directory server configured in OAMP is the same one used by UCCE/ICM. Verify the Manager Distinguished Name has the correct Domain name as that used by the ICM Server: CN=Administrator, CN=users, DC=MYDOMAIN, DC=COM

-	'''Action Plan-2:''' If ~~Ldap~~ user is not able to login to CUIC yet, do the following:	+	'''Action Plan-2:''' If Domain user is not able to login to CUIC yet, do the following:

	Step-1: In OAMP Active Directory configuration page, check if User Search Base has 'CN=Users' in it. This is needed except incase User Search Base is already CN=Domain Users. Try To login to CUIC with supervisor name prepended with proper domain name		Step-1: In OAMP Active Directory configuration page, check if User Search Base has 'CN=Users' in it. This is needed except incase User Search Base is already CN=Domain Users. Try To login to CUIC with supervisor name prepended with proper domain name

Bhanprak at 07:54, 14 September 2010

2010-09-14T07:54:23Z

← Older revision		Revision as of 07:54, 14 September 2010
Line 28:		Line 28:
	Tip 1: The values of OU could be case sensitive.		Tip 1: The values of OU could be case sensitive.
	Tip 2: The max number of characters for Manager Distinguished Name field cannot exceed 85.		Tip 2: The max number of characters for Manager Distinguished Name field cannot exceed 85.
		+
		+	'''Action Plan-1:''' Verify following in CUIC setup
		+	1. Verify the users credentials are correct in Active Directory
		+	2. Verify the user is logging in with the correct Domain pre-pended to their Active Directory username. Verify they have not been locked out in Active Directory for too many failed login attempts.
		+	3. Verify that the Active Directory server configured in OAMP is the same one used by UCCE/ICM. Verify the Manager Distinguished Name has the correct Domain name as that used by the ICM Server: CN=Administrator, CN=users, DC=MYDOMAIN, DC=COM
		+
		+	'''Action Plan-2:''' If Ldap user is not able to login to CUIC yet, do the following:
		+
		+	Step-1: In OAMP Active Directory configuration page, check if User Search Base has 'CN=Users' in it. This is needed except incase User Search Base is already CN=Domain Users. Try To login to CUIC with supervisor name prepended with proper domain name
		+	Step-2: If Step-1 doesn’t work, If user is not able to login still, modify to 'CN=Domain Users' in User Search Base and try to login
		+	Step-3: If Step-2 doesn’t work, change following
		+	Attribute for User ID = userPrincipalName
		+	User Search Base search base, modify to = CN=Domain Users
		+	And then try to login to CUIC with user id as testuser@bioscripinc.net (for this to work Ldap should be configured to accept both UserPrincipleName for login)
		+
		+
	\|-		\|-
	! '''Release'''		! '''Release'''

Jkratky at 19:24, 2 August 2010

2010-08-02T19:24:44Z

← Older revision		Revision as of 19:24, 2 August 2010
Line 36:		Line 36:
	\|-		\|-
	\|}		\|}
		+	[[Category: Configuration Examples]]

Wadegong: /* Configure LDAP (Active Directory) for user authentication */

2010-07-21T21:20:02Z

Configure LDAP (Active Directory) for user authentication

← Older revision		Revision as of 21:20, 21 July 2010
Line 4:		Line 4:
	\|-		\|-
	! '''Problem Summary'''		! '''Problem Summary'''
-	\| ~~To Configure~~ LDAP server ~~for CUIC user authentication~~	+	\| Domain user cannot log in through LDAP server
	\|-		\|-
	! '''Error Message'''		! '''Error Message'''
-	\| ~~None~~	+	\| Invalid username or password. Please try again.
	\|-		\|-
	! '''Possible Cause'''		! '''Possible Cause'''

Wadegong at 20:25, 21 July 2010

2010-07-21T20:25:01Z

← Older revision		Revision as of 20:25, 21 July 2010
Line 27:		Line 27:

	Tip 1: The values of OU could be case sensitive.		Tip 1: The values of OU could be case sensitive.
-	Tip 2: The max number of characters cannot exceed 85.	+	Tip 2: The max number of characters for Manager Distinguished Name field cannot exceed 85.
	\|-		\|-
	! '''Release'''		! '''Release'''