LDAP sync about user who is removed from Active Directory
![]()
I configured CLM 4.0.3 on WAS 8.5 with Active Directory.
When synchronizing AD with JTS, I found that users who were deleted from AD still remains in JTS user directory. I read the infocenter and expected that Error record was created, but it didn't. Synchronizing LDAP with Jazz Team Server repository user information http://pic.dhe.ibm.com/infocenter/clmhelp/v4r0m3/topic/com.ibm.jazz.repository.web.admin.doc/topics/cldapsynctask.html Is this behaviour expected? ( I understand so, by reading the article below, but want to make sure just in case.) https://jazz.net/forum/questions/7546/updates-to-ldap-jazzadmins-group-not-getting-populated Is there any way to sync "deleted users"? (If deleted from AD, the users deleted from JTS as well) If it's impossible, is there any way to know the users who were removed from AD but still remains JTS? |
One answer
![]()
Ralph Schoon (63.3k●3●36●46)
| answered Jan 07 '14, 5:46 a.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
As far as I can tell, deletion of users is not supported. As Sam points out, you are supposed to archive users that should no longer be used.
Please see the answer on https://jazz.net/forum/questions/137633/deleting-users-non-ldap-tomcat-in-rtc-4x for details. Comments Thank you Sam, Ralph.
![]() FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
JTS or RTC don't "know" about what is in LDAP and what is not, as far as I can tell. The user entry is just managed in the database. If LDAP is configured, RTC delegates authentication to LDAP through the application server.
Thank you!
|
Your answer
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.
Comments
You should not remove the user from jts, as their id is in all kinds of data. The user should be archived.