Changing LDAP group associations
We decided to refactor our LDAP groups. We originally had one user group mapped to JazzUsers and JazzGuests, and another mapped to JazzAdmins and JazzDWAdmins. We created new LDAP groups so that each Jazz group would have it's own corresponding LDAP group. I changed team.properties to reflect the new mappings, restarted everything, and let the LDAP sync run overnight. However, the Admin users were unable to perform functions that they previously had available. Only by re-adding the user to the old admin LDAP group was I able to get it to work. Can anyone tell me what else needs to be done to get the server to recognize the new mappings?
3 answers
The nightly LDAP sync is only used to update user information, such as a
person's name.
Group membership is managed by the J2EE container, and is not affected
by changes to the teamserver.properties file. Did you also update the
application server's LDAP group mappings?
Matt Lavin
Jazz Server Team
jcurtiss wrote:
person's name.
Group membership is managed by the J2EE container, and is not affected
by changes to the teamserver.properties file. Did you also update the
application server's LDAP group mappings?
Matt Lavin
Jazz Server Team
jcurtiss wrote:
We decided to refactor our LDAP groups. We originally had one user
group mapped to JazzUsers and JazzGuests, and another mapped to
JazzAdmins and JazzDWAdmins. We created new LDAP groups so that each
Jazz group would have it's own corresponding LDAP group. I changed
team.properties to reflect the new mappings, restarted everything,
and let the LDAP sync run overnight. However, the Admin users were
unable to perform functions that they previously had available. Only
by re-adding the user to the old admin LDAP group was I able to get it
to work. Can anyone tell me what else needs to be done to get the
server to recognize the new mappings?
Did you update server.xml with the new mapping information?
https://jazz.net/wiki/bin/view/Main/LDAP4Dummies describes all the changes you need to make to make to server.xml to map Jazz roles to LDAP role names.
--- Balaji
Jazz Server Team
https://jazz.net/wiki/bin/view/Main/LDAP4Dummies describes all the changes you need to make to make to server.xml to map Jazz roles to LDAP role names.
--- Balaji
Jazz Server Team
We decided to refactor our LDAP groups. We originally had one user group mapped to JazzUsers and JazzGuests, and another mapped to JazzAdmins and JazzDWAdmins. We created new LDAP groups so that each Jazz group would have it's own corresponding LDAP group. I changed team.properties to reflect the new mappings, restarted everything, and let the LDAP sync run overnight. However, the Admin users were unable to perform functions that they previously had available. Only by re-adding the user to the old admin LDAP group was I able to get it to work. Can anyone tell me what else needs to be done to get the server to recognize the new mappings?