It's all about the answers!

Ask a question

LDAP/BluePages/BlueGroups with M5


Pravesh Patel (37622615) | asked Mar 11 '08, 4:45 p.m.
I'm trying to figure out the parameters required to make the user import from LDAP work with bluepags. I've created 5 BlueGroups: WA_JazzGroups, WA_JazzAdmins, WA_JazzDWAdmins, WA_JazzUsers, WA_JazzGuests. The last 4 groups are members of the first group.

WA_JazzAdmins has 1 member and WA_JazzUsers has several members.

Does anyone know the correct settings to make this work? I've played around with various options for com.ibm.team.repository.service.internal.userregistry.LDAPUserRegistryProvider with no success.

I'm assuming that when these settings are correct, I simply go to the Manage Users page in the WebUI and specify which users I want to import, is that correct?

Any help would be greatly appreciated!

EDIT: I should specify that I'm using the latest integration build which as the fix for 45900

15 answers



permanent link
Mark Parry (31121711) | answered Mar 13 '08, 1:01 p.m.
Mark D. Parry wrote:
pravesh wrote:
I'm trying to figure out the parameters required to make the user
import from LDAP work with bluepags. I've created 5 BlueGroups:
WA_JazzGroups, WA_JazzAdmins, WA_JazzDWAdmins, WA_JazzUsers,
WA_JazzGuests. The last 4 groups are members of the first group.

WA_JazzAdmins has 1 member and WA_JazzUsers has several members.
Does anyone know the correct settings to make this work? I've played
around with various options for
com.ibm.team.repository.service.internal.userregistry.LDAPUserRegistryProvider

with no success.
I'm assuming that when these settings are correct, I simply go to the
Manage Users page in the WebUI and specify which users I want to
import, is that correct?
Any help would be greatly appreciated!

EDIT: I should specify that I'm using the latest integration build
which as the fix for 45900


If I'm reading this correctly...
https://jazz.net/wiki/bin/view/Main/RoleMigrationAndLdapConfiguration

Wouldn't you need groups with name 'JazzAdmins' , 'JazzUsers',
'JazzGuests' , and 'JazzDWAdmins' under your ou=WA_JazzGroups (ie. not
prefixed with WA).

And if thats the case I don't see how this could even remotely work
inside IBM. The first person to claim the JazzAdmin bluegroup would be
the only person able to deploy Jazz with IIP auth.


--Mark

Actually, the more I think about this... Looks like a bluegroup isn't
even classified as an organizational unit. So specifying the parent
bluegroup in the baseGroupDN shouldn't even work.

--Mark

permanent link
Balaji Krish (1.8k12) | answered Mar 13 '08, 1:30 p.m.
JAZZ DEVELOPER
New->User only allows u to import users who are not present in the
repository. Can you find out if you are already in Jazz repo. You can
administer the users present in the repo using Administer->Open Users dialog
(from the repositoy connection node in Eclipse UI)

--- Balaji

"pravesh" <pravesh@us.ibm-dot-com.no-spam.invalid> wrote in message
news:frbl95$p81$1@localhost.localdomain...
I can not import users using RTC with the following settings:

Base DN of Jazz application group:
cn=WA_JazzGroups,ou=memberlist,ou=ibmgroups,o=ibm.com
Base DN of users in the registry: ou=bluepages,o=ibm.com
Find groups for user: uniquemember={USER-DN}
Find users by any name query: (| (cn=* ?1*) (cn=*_?1*))
Find users by name query: cn=?1*
Jazz Application group name attribute: cn
Jazz to LDAP group mapping:
JazzAdmins=WA_JazzAdmins,JazzUsers=WA_JazzUsers;WA_JazzUsers1,JazzDWAdmins=WA_JazzDWAdmins,JazzGuests=WA_JazzGuests
Jazz user attributes to LDAP entry attributes mapping:
userId=mail,name=cn,emailAddress=mail
LDAP registry location: ldap://bluepages.ibm.com:389
Max number of entries returned from user search: 100
Query to find users by user id: uid=?1
user id/password to acces LDAP registry set correctly

When RTC New > User I've tried to search for the following
strings:

Pravesh Patel
Patel
pravesh@us.ibm.com
pravesh*

I am a member of the WA_JazzUsers bluegroup, but I'm unable to
successfully add myself to Jazz using the New > User function.

permanent link
Pravesh Patel (37622615) | answered Mar 13 '08, 1:40 p.m.
Balaji,

This is a new repository, I haven't added any users yet. I confirmed that I'm not already in the repository.

permanent link
Balaji Krish (1.8k12) | answered Mar 13 '08, 2:34 p.m.
JAZZ DEVELOPER
Pravesh,

I see only one problem with your config but it should not affect Import
users function..

the findUsersByUserIdQuery should search using mail...
com.ibm.team.repository.ldap.findUsersByUserIdQuery=mail=?1


Ping me when you are free and I will take a look at your config.

---- Balaji


"pravesh" <pravesh@us.ibm-dot-com.no-spam.invalid> wrote in message
news:frbpcd$r0m$1@localhost.localdomain...
Balaji,

This is a new repository, I haven't added any users yet. I confirmed
that I'm not already in the repository.

permanent link
Pravesh Patel (37622615) | answered Mar 17 '08, 9:52 a.m.
I've started a new thread since I've narrowed down the issue to a specific problem. Details can be found in the following thread:

https://jazz.net/forums/viewtopic.php?t=1017

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.