Can only see User Management in Admin Tools

Question

I configured an LDAP realm and included the required admin group to access
the Administration Tools. However, the only thing I can see in
Administration Tools is User Management. Why is that?

Answer 1

Wendy,
Would it be possible for you to send us a file from your LDAP directory
server? Please forward this information to the support case you have open.
In the \iPlanet\Servers\slapd-yourhost\config directory.
Send the dse.ldif file.
Basically what we want to do is to compare the user and group dn values
specified in the vlvBase lines with your config.xml. Also grab the
string that starts with creatorsname ... look for something like
creatorsName:
uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot
The principal value in the config.xml will be the creatorsName string.
Set the principal string in config.xml should be something like
Principal="uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot"
unless your iPlanet schema has been changed.
So, in the config.xml LDAPRealm definition explicitly set Group is context.
GroupIsContext="false"
Set the AuthProtocol to simple.
Your config.xml LDAPRealm definition should have 13 fields and look
something like:
<LDAPRealm
AuthProtocol="simple"
Credential="password"
GroupDN="o=beasys.com, ou=Groups"
GroupIsContext="false"
GroupNameAttribute="cn"
GroupUsernameAttribute="uniquemember"
LDAPURL="ldap://myhost.beasys.com:389"
Name="myLdapRealmV1"
Principal="uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot"
SSLEnable="false"
UserAuthentication="bind"
UserDN="o=beasys.com, ou=People"
UserNameAttribute="uid"/>
-- Jim
Wendy Kajiyama wrote:
Hi,
iPlanet 5.0, no service pack.
I got the user and group DN from our Network Admin.
"Jim Litton" <[email protected]> wrote in message
news:[email protected]...
Wendy,
Can you also supply the vendor and version number of your directory
server?
I was looking at your config.xml from your support case and I am
unfamiliar with the user DN and group DN strings you are using.
Where did you find the syntax for those strings? Is that particular
string syntax documented somewhere on the LDAP vendors site?
Jim Litton
Developer Relations
Ture Hoefner wrote:
Hello Wendy,
I suspect a configuration problem in the LDAPRealm, but it is possible
that you have a P13N-only license. That is probably a long-shot because
I
don't know if we sell those any more. You are using Portal 7.0, right?
I can try to help... can you answer these questions:
* which version?
* After you log into as "administrator" (who is a member of
"SystemAdministrator"), can you access the Group Management tools and
see
the "SystemAdministrator" group and the list of users who belong to that
group?
* Do the all of the users and groups that you see match what you have
in
your LDAP server?
"Wendy Kajiyama" <[email protected]> wrote in message
news:[email protected]...
Hi Ture,
Thanks for your reply. Unfortunately, after contacting support and
receiving the patch for LDAP I am still having the problem of not being
able
to see the icons in Admin Tools.
Any other ideas?
Thanks,
wendy
"Ture Hoefner" <replyto@newsgroup> wrote in message
news:[email protected]...
Hi Wendy,
Which version?
After you log into as "administrator" (who is a member of
"SystemAdministrator"), can you access the Group Management tools and
see
the "SystemAdministrator" group and the list of users who belong to
that
group? Does it match what you have in your LDAP server? If you cannot
list
members of groups in your Portal JSP admin tool then contact support
and
ask
for the patch that fully enables WLS's LDAPRealm for use with Portal
(it
is
CR070870 for Portal 4.0, I don't know if there is a patch for 7.0, or
if
it
is included in a SP for 7.0...)
If you are able to list the users in a group then make sure you have
the
group "SystemAdministrator", not "SystemAdministrators".
I've used delegated portal administration with LDAPRealm for 7.0 so I
know
it works. I suspect a configuration issue. I will try to help you
figure
it out.
"Wendy Kajiyama" <[email protected]> wrote in message
news:[email protected]...
yup, i set up LDAP to have the required administrator groups and log
in
the
admin tools as administrator which is a user in the
SystemAdministrator
group.
"kurt c" <[email protected]> wrote in message
news:[email protected]...
could this not be a permissions issue? are you logged in as
'administrator'?
"Wendy Kajiyama" <[email protected]> wrote:
I checked to see if ebusiness.jar was in my application and it's
there.
Any
other ideas?
Thanks!
wendy
"Peter Laird" <[email protected]> wrote in message
news:[email protected]...
Wendy,
You may be seeing CR081150, which is a bug report regarding the
removal
of
ebusiness.jar
from your application. If you remove this JAR, the admin tool
fails
to
load certain
EJBs which cause it to only display more than the user tool. The
workaround is
to put ebusiness.jar back into your applicaiton. If this is
unacceptable,
contact
Support and they will work with you.
Cheers,
PJL
"Wendy Kajiyama" <[email protected]> wrote:
I configured an LDAP realm and included the required admin group
to
access
the Administration Tools. However, the only thing I can see in
Administration Tools is User Management. Why is that?