Welcome to the new Schneider Electric Community

It's your place to connect with experts and peers, get continuous support, and share knowledge.

  • Explore the new navigation for even easier access to your community.
  • Bookmark and use our new, easy-to-remember address (community.se.com).
  • Get ready for more content and an improved experience.

Contact SchneiderCommunity.Support@se.com if you have any questions.

Close
Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
84535members
353792posts

DCO can't see groups in Active Directory

EcoStruxure IT forum

A support forum for Data Center Operation, Data Center Expert, and EcoStruxure IT product users to share knowledge on installation, configuration, and general product use.

Solved
DCIM_Support
Picard
Picard
0 Likes
5
348

DCO can't see groups in Active Directory

This question was originally posted on DCIM Support by Neil Walston on 2019-07-02


I have two Active Directory servers setup in DCO v8.2.12 however the directory structure on one of the servers is preventing DCO seeing the AD groups (it works fine on the second server). Any idea how to get around this?

(CID:146278045)


Accepted Solutions
DCIM_Support
Picard
Picard
0 Likes
3
348

Re: DCO can't see groups in Active Directory

This answer was originally posted on DCIM Support by Jef Faridi on 2019-07-05


Hi Nell,

It might be configuration related issue, try the configuration settings described here:

https://sxwhelpcenter.ecostruxureit.com/display/UADCO8x/Setup+an+AD+%28Active+Directory%29+Server

It is recommended to use tools such as Apache Directory Studio (https://directory.apache.org/studio) to illustrate how the authentication server (groups/users) may look like- that would help you to follow the guide and enter the correct settings.

Kind regards

(CID:146670434)

See Answer In Context

5 Replies 5
DCIM_Support
Picard
Picard
0 Likes
3
349

Re: DCO can't see groups in Active Directory

This answer was originally posted on DCIM Support by Jef Faridi on 2019-07-05


Hi Nell,

It might be configuration related issue, try the configuration settings described here:

https://sxwhelpcenter.ecostruxureit.com/display/UADCO8x/Setup+an+AD+%28Active+Directory%29+Server

It is recommended to use tools such as Apache Directory Studio (https://directory.apache.org/studio) to illustrate how the authentication server (groups/users) may look like- that would help you to follow the guide and enter the correct settings.

Kind regards

(CID:146670434)

DCIM_Support
Picard
Picard
0 Likes
0
348

Re: DCO can't see groups in Active Directory

This comment was originally posted on DCIM Support by Neil Walston on 2019-10-08


Hi Jef

 

Just wanted to say that we've followed your suggestions above, as well as upgrading DCO to 8.3.2, but we still have the same issue.

Can you advise further please?

Thanks

Neil

(CID:149783656)

DCIM_Support
Picard
Picard
0 Likes
0
348

Re: DCO can't see groups in Active Directory

This comment was originally posted on DCIM Support by Jef Faridi on 2019-10-09


Hi Niel,

You mentioned you have two AD integrations (in DCO), one working and one is not. What is the difference between the working and not working one? Do you have the same users/groups in both AD servers?

 

By using the "Apache Directory Studio" if you could log in to AD server, and select a user (that should have access in DCO) and then take screen captures illustrating:

the location of the user in group/domain hierarchy 

plus the users "Attribute Description / Value" info 

(could be a long list, so several screenshots could be taken)

and similar screen captures illustrating for a group (that should have access in DCO).

And also screen captures from DCO illustrating the authentication server settings.

 

I will send you an invite to my =S= box shortly, so the data safely can be shared with me, thanks.

 

Would it be possible to ask for a copy of the backup file + server logs as well?

 

Kind regards

(CID:149783660)

DCIM_Support
Picard
Picard
0 Likes
0
348

Re: DCO can't see groups in Active Directory

This comment was originally posted on DCIM Support by Neil Walston on 2019-10-09


Hi Jeff

The difference between the working and non-working AD servers is that one (the working one unfortunately) is a legacy server that we are migrating away from. I understand that has a flat AD directory structure, so all groups are visible. The other server is on a different domain with a more complicated structure, of wgich DCO only seems to have limited visibility for some reason.

I'm not an AD administrator, so will need to get a colleague involved, which won't be until tomorrow now.

 

Hope that was useful information for you in the meantime.

Thanks

Neil

 

(CID:149783839)

DCIM_Support
Picard
Picard
0 Likes
0
348

🔒 Closed

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.