Must I create the CLM System Accounts in Active Directory for LDAP configuration?
![](http://jazz.net/_images/myphoto/6d2650ad4608e334108c47e3e925d64e.jpg)
Hello,
I am connecting my JTS to AD via LDAP. Do I have to create the CLM system users in the active directory as well? If so, which Jazz group must they be in? Does this also have to be done for the datawarehouse user that I defined (in this case dw_user)?
ccm_user
jts_user
lpa_user
qm_user
rm_user
dw_user
Thank you in advance!
Best regards,
Andrew
5 answers
![](http://jazz.net/_images/myphoto/6d2650ad4608e334108c47e3e925d64e.jpg)
They only exist in the databases and are created automatically. You should not need or want to modify those accounts.
The dw_user was replaced with etl_user as the default name during setup. As of rtc 3.0.1.3 the etl_user is created automatically although it is still possible to use an account from LDAP for backwards compatibility. Previous to this, you would have had to have a dw_user in LDAP. It would be an existing account in the JazzAdmins group. The default etl_user account does not appear in the list of users under user administration.
The dw_user was replaced with etl_user as the default name during setup. As of rtc 3.0.1.3 the etl_user is created automatically although it is still possible to use an account from LDAP for backwards compatibility. Previous to this, you would have had to have a dw_user in LDAP. It would be an existing account in the JazzAdmins group. The default etl_user account does not appear in the list of users under user administration.
![](http://jazz.net/_images/myphoto/6d2650ad4608e334108c47e3e925d64e.jpg)
I installed CLM 4.0.3. I configured AD authentication with WAS.
In setup wizard, I entered "etl_user" who is NOT AD user. After finished, I don't see "etl_user" in the active user list as you said.
Does this mean, we don't need to assign data collector license to etl_user?
Also, there's error in jts_etl.log saying "com.ibm.rational.dataservices.client.auth.AuthenticationException: CRRRE1404E: user name or password invalid" and etl job fails.
Could you tell me how to fix it?
In setup wizard, I entered "etl_user" who is NOT AD user. After finished, I don't see "etl_user" in the active user list as you said.
Does this mean, we don't need to assign data collector license to etl_user?
Also, there's error in jts_etl.log saying "com.ibm.rational.dataservices.client.auth.AuthenticationException: CRRRE1404E: user name or password invalid" and etl job fails.
Could you tell me how to fix it?
Comments
![](http://jazz.net/_images/myphoto/fc542749fb5e1c5bb3b13a468db5b5fe.jpg)
Thanks, I followd the steps in the technote and the problem fixed.
But I'm still not sure what I should have entered in setup wizard as "data collection user".
I entered "etl_user" expecting that this user being created automatically during setup in internal regstry, but setup wizard warned that "this user does not exist in LDAP".
Shoud I neet to set blank?
![](http://jazz.net/_images/myphoto/859c11e67dec7ede8d2a4a31112cf60e.jpg)
Yohko
--> You can either give 'etl_user' or any other ID as the functional user ID. Even if you leave it blank it is fine. JTS will automatically generate a consumer name and key for this internal user.
--> You received the warning because the user, 'etl_user' in your case does not exist in LDAP. You can ignore this warning or add this user ID in LDAP and then use it.
![](http://jazz.net/_images/myphoto/6d2650ad4608e334108c47e3e925d64e.jpg)
1. The etl_user is an internal functional user ID used to run the ETL Data Collection jobs instead of a real LDAP ID. So you don't see etl_user in the active user list and is expected.
There is no need to assign data collector license to etl_user, as far as I know.
2. For the error in jts_etl.log you might want to see this technote: