DCO not able to import AD user from AD server group

[DCIM_Support]

This question was originally posted on DCIM Support by Jimmy Leung on 2019-08-24

---

I have successfully set up a AD server in DCO and add the AD group as the user group in DCO. user authentication is working OK, but I can't see any AD group user listed in the DCO user group. I only got this message when i tried to display the user in this DCO user group. Please advise how can I import the AD group user to DCO?

Users

User Group relations to Users are managed by authentication serve

(CID:148342678)

[DCIM_Support]

This answer was originally posted on DCIM Support by Jef Faridi on 2019-08-26

---

Hi Jimmy,

We do not need to manually import the integrated/add AD group users into DCO.  Following page describes the authentication server settings in DCO (just in case if needed): https://sxwhelpcenter.ecostruxureit.com/display/UADCO8x/Setup+an+AD+%28Active+Directory%29+Server

The added AD groups users would be automatically imported into DCO at least 1 hour after adding the user group. 

Kind regards

(CID:148342878)

[DCIM_Support]

This comment was originally posted on DCIM Support by Jimmy Leung on 2019-08-26

---

Hi Jef,

Even though I added the AD group successfully last week, only user authentication is work. I can't see any AD group user being added to the DCO? any reason why this is not working as per design?

Cheers

(CID:148342931)

[DCIM_Support]

This comment was originally posted on DCIM Support by Jef Faridi on 2019-08-26

---

Hi Jimmy,

Perhaps you might be running an older version of 8.x - I think there have been some improvements since 8.2.7 and/or 8.2.12. I have tested this AD groups users in DCO 8.3.2 without any problem.

Kind regards

(CID:148342958)

[DCIM_Support]

This comment was originally posted on DCIM Support by Greg Sterling on 2019-08-26

---

Hello Jimmy, Adding to Jef's question. I'm wondering whether the groups portion of the AD integration is working properly.

From the support community link Jef pasted in his previous response, was the groups section of your authentication server configuration also set? This would mean when you open the groups view in the web client you should see the list of AD groups in the drop down.

Regards

Greg Sterling

(CID:148343095)

[DCIM_Support]

This comment was originally posted on DCIM Support by Jimmy Leung on 2019-08-28

---

High Greg,

Yes, the AD group was also setup and I can see a list of AD group in the drop down .

Cheers

(CID:148343644)

[DCIM_Support]

This comment was originally posted on DCIM Support by Greg Sterling on 2019-08-28

---

How are the filters in the groups area and the user search base set? 

Per this page: https://sxwhelpcenter.ecostruxureit.com/display/UADCO8x/Setup+an+AD+%28Active+Directory%29+Server

If you are seeing groups in the drop-down list then its likely most of the items in the top section of the AD definition are working. Its still possible the user search base filter is incorrectly set cause you're saying authentication is not working.

Can you provide some details regarding the values/filters being used in the groups section? 

Can you provide an example of a fully qualified username including the OU and CN information? You can change the username itself ... just want to see the format.

Regards

Greg Sterling

(CID:148343764)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.