Hi All,

We have a fairly large amount of user in our active directory, so that I do not want to import all users into Jazz.

I want to manage the users manually as in the default configuration and just authenticate the passwords against an LDAP / Active Directory.

Is that possible?

Thanks,

Timo

Thanks so far, but I think my problem is not solved.

We cannot change any entries in the Active Directory and thus, I cannot map any RTC groups to LDAP groups.

I need a mix between local user management and LDAP authentication. For those users that are created manually and from which the username map to a username in the LDAP directory, I want to authenticate their passwords against the LDAP directory.

Other users, especially the conceptual users like build users are not existent in LDAP and their passwords should be stored in the local tomcat-users.xml file.

The goal is - for the real users / persons - to manage and reuse their passwords in one place, the LDAP directory.

Is such a setup possible, and how do I configure it?

Thanks a lot,

Timo

You can disable the "LDAP nightly sync" functionality using "Enable LDAP nightly sync" property using https://serverName:9443/jazz/admin#action=com.ibm.team.repository.admin.configureAdvanced

To create individual users, you can either
-> import individual users from Active directory or
-> create a new user in Jazz database with matching user id (user id must match the record in Active directory)

---- Balaji
Jazz Server Team

Hi All,

We have a fairly large amount of user in our active directory, so that I do not want to import all users into Jazz.

I want to manage the users manually as in the default configuration and just authenticate the passwords against an LDAP / Active Directory.

Is that possible?

Thanks,

Timo

Hi All,

We have a fairly large amount of user in our active directory, so that
I do not want to import all users into
Jazz.

I want to manage the users manually as in the default configuration
and just authenticate the passwords against an LDAP / Active
Directory.

Is that possible?

Thanks,

Timo