LDAP User Cannot Access the DCO Desktop Client

[aashraf]

Dear Gents,

In one of our projects, We added the customer LDAP server to the authentication servers into DCE system.

And the customer can access the DCE desktop or web client with the LDAP user account successfully.

Then in the DCO we added the DCE as authentication server to sync the groups of LDAP which are added into DCE.

And hence the customer can access the web client of the DCO but cannot access the DCO desktop client, Although we added the access to the desktop client in the group and user privilege (refer to the attached screenshots).

When the customer try to access the DCO via the desktop client, the system authenticated the user and started to load the physical model and after loading more than 50% the loading window disappear and the client doesn't open, So please advice.

The LDAP user has access to the Desktop ClientDCO system authenticated the LDAP user and started to load , But this window disappears and the client doesn't open

[Jef]

Hi Ahmed,

I have two comments, both relevant here: 
Indirect AD/LDAP authentication via DCE is not supported in DCO/ITA. So the scenario you've described not recommended to be used.
And furthermore in the latest versions of DCO and ITA there seem to be some issues with using DCE as authentication server. We have included this issue in our backlogs, so enhancements can be implemented in a future version.

So currently in DCO/ITA it is recommended to use AD/LDAP authentication server.

Kind regards,

Jef

[aashraf]

Hi Jef,

Thanks for your appreciated comments,

But when i tried to add the LDAP server directly into DCO as done in DCE, It gives me an error regarding the LDAP domain although these setting is entered into DCO by the LDAP admin person at the customer end and who is the same guy who set the LDAP into DCE and it's working well.

So i thought to add the DCE into DCO as indirect LDAP server.

May be will request a screenshot from the customer for this error or will take one by next visit and will share with you.

[Jef · Accepted solution]

Hi Ahmed,

You are most welcome.

DCO/ITA is not the same/similar product as DCE, so the AD authentication server settings in DCO/ITA may not be the same as DCE requirements.

The following guide describes how to configure/setup an AD/LDAP authentication server in DCO/ITA: 

https://helpcenter.ecostruxureit.com/hc/en-us/articles/360038425373-Setup-an-AD-Active-Directory-Ser...
(this guide is valid both for DCO and ITA).

Kind regards,

Jef