SGD 4.31 - User application mapping( AD enable )

Question

Dear Forum users,
Objective: Assign AD authenticated users with specific applications.....
I have installed SGD 4.31 in my SFV240 server. Have configured and enable AD for users to authenticate.
These are my DNS SGD servers lookup:
portal-01.esuria.com.bn ---> 172.16.2.82
172.16.2.82 ---> portal-01.esuria.com.bn
portal-02.esuria.com.bn ---> 172.16.2.83
172.16.2.83 ---> portal-02.esuria.com.bn
Note: In our existing DNS server, our admin configured the Domain as "ESURIA.COM.BN"
These are my Array Manager AD Settings:
URL: ad://esuria.com
Base Domain: esuria.com
Default Domain: esuria.com
Note: Our existing AD server, admin has configured the Domain as "ESURIA.COM"
Object Manager Settings:
Note: These are created by default( dc=bn, dc=com, dc=esuria )
I created Active Directory Container( cn=Users )
I created Person object ( cn=ali ) and assign some applications to ali.
Note:
1) User Ali is created in AD server only.
2) The reason i created the above AD Container and Person object is to assigned specific applications to user Ali.
Open a firefox browser and type the sgd url and click login. Enter username ali and password and i am successfully login to SGD webtop. Unfortunately, every time i login to webtop, i saw the LDAP Applications NOT the applications i specified in the Object Manager( Person Object ).
Here are the logs output:
root@portal-02 # tail -f server-login.log
2007/11/12 18:43:25.152 (pid 11467) server/login/moreinfo #1194864205152
Attempted login for ali
using disambiguation attributes {}.
2007/11/12 18:43:25.165 (pid 11467) server/login/moreinfo #1194864205165
The login authority com.sco.tta.server.login.ens.SearchENSLoginAuthority
has found a potential login candidate
.../_ens/dc=bn/dc=com/dc=esuria/cn=Users/cn=ali.
2007/11/12 18:43:25.177 (pid 11467) server/login/moreinfo #1194864205177
The login authority com.sco.tta.server.login.ens.SearchENSLoginAuthority
has found a potential login candidate
.../_ens/dc=bn/dc=com/dc=esuria/cn=Users/cn=ali.
2007/11/12 18:43:26.568 (pid 11467) server/login/info #1194864206568
Login attempt for ali.
Login successful.
2007/11/12 18:43:26.571 (pid 11467) server/login/info #1194864206571
User .../_service/sco/tta/ldapcache/CN=Ali,CN=Users,DC=ESURIA,DC=COM
logged in using profile
.../_ens/o=Tarantella System Objects/cn=LDAP Profile
from 172.16.2.109.
I believe i had missed some steps. Can the forum experts, help me to archive my objective..
Thanks.

Answer 1

This docs page describes the steps that are required:
http://docs.sun.com/source/820-1088/ldap_mirroring.html
It's worth noting that the location of the users in ENS must map directly to the location of the users in LDAP/AD.
So a user located in active directory under domain "esuria.com" must be positioned in ENS under "dc=com,dc=esuria". I can see from the example you gave you are using "dc=bn,dc=com,dc=esuria". These will not match.
So instead of of creating a user in ENS under "dc=bn,dc=com,dc=esuria,cn=Users" you would create them under "dc=com,dc=esuria,cn=Users".
HTH
Deany Dean
Edited by: deanydean_sgd on Nov 13, 2007 5:10 AM