DCO can't see groups in Active Directory

[DCIM_Support]

I have two Active Directory servers setup in DCO v8.2.12 however the directory structure on one of the servers is preventing DCO seeing the AD groups (it works fine on the second server). Any idea how to get around this?

(CID:146278045)

[DCIM_Support · Accepted solution]

Hi Nell,

It might be configuration related issue, try the configuration settings described here:

https://sxwhelpcenter.ecostruxureit.com/display/UADCO8x/Setup+an+AD+%28Active+Directory%29+Server

It is recommended to use tools such as Apache Directory Studio (https://directory.apache.org/studio) to illustrate how the authentication server (groups/users) may look like- that would help you to follow the guide and enter the correct settings.

Kind regards

(CID:146670434)

[DCIM_Support]

Hi Jef

Just wanted to say that we've followed your suggestions above, as well as upgrading DCO to 8.3.2, but we still have the same issue.

Can you advise further please?

Thanks

Neil

(CID:149783656)

[DCIM_Support]

Hi Niel,

You mentioned you have two AD integrations (in DCO), one working and one is not. What is the difference between the working and not working one? Do you have the same users/groups in both AD servers?

By using the "Apache Directory Studio" if you could log in to AD server, and select a user (that should have access in DCO) and then take screen captures illustrating:

the location of the user in group/domain hierarchy 

plus the users "Attribute Description / Value" info 

(could be a long list, so several screenshots could be taken)

and similar screen captures illustrating for a group (that should have access in DCO).

And also screen captures from DCO illustrating the authentication server settings.

I will send you an invite to my =S= box shortly, so the data safely can be shared with me, thanks.

Would it be possible to ask for a copy of the backup file + server logs as well?

Kind regards

(CID:149783660)

[DCIM_Support]

Hi Jeff

The difference between the working and non-working AD servers is that one (the working one unfortunately) is a legacy server that we are migrating away from. I understand that has a flat AD directory structure, so all groups are visible. The other server is on a different domain with a more complicated structure, of wgich DCO only seems to have limited visibility for some reason.

I'm not an AD administrator, so will need to get a colleague involved, which won't be until tomorrow now.

Hope that was useful information for you in the meantime.

Thanks

Neil

(CID:149783839)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.