[CLOSED] Is there a way without purchasing a specific LDAP adapter to query LDAP
I have a report request where they want an employee's Description and Location (located in active directory) included.
I see there is a purchasable LDAP connector but as I can't see more need that this one report that is not an option.This message has been edited. Last edited by: <Kathryn Henning>,
WebFOCUS 8202M Client: Windows Server 2012R2/Tomcat 8.0/IIS Server: IBM i v7r2m0 MS-SQL
May 12, 2014, 02:20 PM
TexasStingray
Quote from the IBI fee schedule.
Access to LDAP The WebFOCUS Reporting Server can access and interoperate with LDAP at no additional charge.
Scott
May 12, 2014, 02:35 PM
lenny
Ok. So how do I go about connecting into it then?
WebFOCUS 8202M Client: Windows Server 2012R2/Tomcat 8.0/IIS Server: IBM i v7r2m0 MS-SQL
May 12, 2014, 05:47 PM
Waz
Is that true, the LDAP adapter is free ?
I was under the impression that it was the authorisation part of the reporting server that you could point to LDAP for free.
FYI
Dev Studio can do it, as it has all adapters.
Waz...
Prod:
WebFOCUS 7.6.10/8.1.04
Upgrade:
WebFOCUS 8.2.07
OS:
Linux
Outputs:
HTML, PDF, Excel, PPT
In Focus since 1984
Pity the lost knowledge of an old programmer!
May 12, 2014, 10:43 PM
njsden
Waz is correct. Based on the information we were provided at our local IBI office, LDAP can only be used from WebFOCUS for the purpose of Authentication.Authorization at no additional charge. If you require to access an LDAP repository for reporting purposes then you'll have to license the appropriate iWay adapter.
We had a similar need a while back and decided to use a slightly different approach, where we use a VB script to connect to Active Directory, extract user/group information to a CSV file and load its content into a couple of tables in our data warehouse on a daily basis. We can then use WebFOCUS metadata to query those tables using our regular iWay Oracle adapter and build the reports we needed. This approach works for us because user information is relatively stable so live connections to Active Directory are not necessary for our reports.This message has been edited. Last edited by: njsden,
I am actually thinking njsden that we may end up using that approach if I have no direct way to go about it.
WebFOCUS 8202M Client: Windows Server 2012R2/Tomcat 8.0/IIS Server: IBM i v7r2m0 MS-SQL
May 13, 2014, 04:55 PM
TexasStingray
There is also a build in function that will get a list of GROUPS that a user is part of from AD, if the Reporting Server is configured for LDAP Authentication.
-SET &LIST = GRPLIST(32000, 'A32000');
The maximum length that I could get it to work with is 32000 characters.
Not sure when this function was introduced but it there in WebFOCUS 8x
Scott
Scott
May 13, 2014, 06:06 PM
Waz
Some quick tests:
7.1.6: (FOC263) EXTERNAL FUNCTION OR LOAD MODULE NOT FOUND: GRPLIST 7.6.6: (FOC263) EXTERNAL FUNCTION OR LOAD MODULE NOT FOUND: GRPLIST 7.6.12: (FOC263) EXTERNAL FUNCTION OR LOAD MODULE NOT FOUND: GRPLIST 7.7.05M: Returned a blank string for me
Waz...
Prod:
WebFOCUS 7.6.10/8.1.04
Upgrade:
WebFOCUS 8.2.07
OS:
Linux
Outputs:
HTML, PDF, Excel, PPT
In Focus since 1984
Pity the lost knowledge of an old programmer!
May 14, 2014, 10:13 AM
lenny
I tried GRPLIST in 8.0.07 and got a blank list as well.
WebFOCUS 8202M Client: Windows Server 2012R2/Tomcat 8.0/IIS Server: IBM i v7r2m0 MS-SQL
May 14, 2014, 10:56 AM
njsden
GRPLIST worked for me in 7.7.05M. It provided me with a colon-separated list of all AD groups my account is a part of in AD. Interesting!