Focal Point
[CLOSED] Active Directory Authentication

This topic can be found at:
https://forums.informationbuilders.com/eve/forums/a/tpc/f/7971057331/m/899105184

July 06, 2010, 10:21 AM
Majid Jeddi
[CLOSED] Active Directory Authentication
Hi,

I have just activate the AD authetication on the webconsole. I have been asked to specify the user that will have admin rights which i did.
In the file admin.cfg, this user has admin_level= SRV but when i connect to the console i can see that i do not have the admin privileges.

Did i do soemthing wrong or is it a bug in 7.6.5

Regards.

This message has been edited. Last edited by: Kerry,


WebFocus 7.6.5
AND WebLogic server as web server
sql2005 as database server
July 07, 2010, 08:04 AM
dlogan
What you did sounds right.

If you go to "My Console" -> "Logon Status".

Does it show you logged in as the user you think you're logged in as, and with what privileges?

The 765 Reporting Server has a bug that makes it not able to use ldap_ad_only set to "Yes" without locking the userid. However, I have not encountered any problems in 765 with LDAP security in specifying and identifying and Admin userid.


WF 71.x, 76.x, 7701, 8.0 Beta OS: Linux, Win2k3, Win2k, Win2k8, WinXP


July 07, 2010, 10:06 AM
Majid Jeddi
Hi Dlogan

here is what i can see:

Updated: July 7 16:03:40
Security: LDAP
User: 280webfocustest
Administration Level: Basic User
Authentication:explicit
Total Web Sessions: 2

What is funny is when i turned on AD on the sebconsole it asked me to specify the user that will be the administrator and that is 280webfocustest.
When i look to admin.cfg i am able to see that this user has Admin_Level=SRV.

So i am confused.

Thanks for your help.


WebFocus 7.6.5
AND WebLogic server as web server
sql2005 as database server
July 07, 2010, 10:46 AM
dlogan
Interesting, maybe its a bug with a username that starts with a number?

Can you try another userid that starts with a letter and see if you get the same results?

You can copy and paste an entry into the end of the admin.cfg if you need to for the new user, just be sure to drop the password block, or have the password of that new user the same as the other.

e.g.

admin_id = MyNewUserid
BEGIN
  admin_level = SRV
END



WF 71.x, 76.x, 7701, 8.0 Beta OS: Linux, Win2k3, Win2k, Win2k8, WinXP


July 08, 2010, 10:19 AM
Majid Jeddi
Hi Dlogan,

Still does not work. Webfocus always surprise me. You read the doc but the result is something else. I just will give up and let it without security. It is Safe this way Lol.

Thanks anyway for your help

Regards.


WebFocus 7.6.5
AND WebLogic server as web server
sql2005 as database server
July 08, 2010, 10:38 AM
dlogan
Ok, if you don't have a case open yet, why don't you open one with Techsupport so that they can run traces, etc?

They should be able to help you out.


WF 71.x, 76.x, 7701, 8.0 Beta OS: Linux, Win2k3, Win2k, Win2k8, WinXP


July 08, 2010, 05:19 PM
Dan Pinault
Majid Jeddi,

Are you using MS Internet Explorer when you access the Server Console? We use LDAP authentication with Windows Active Directory. I am constantly running into issues between DevStudio and MS Internet Explorer.
For example, if I log on to the WebFOCUS Admin Console as an administrator then launch the WebFOCUS Server Console from there it authenticates me with the cookie from the last time I logged on to the Business Intelligence Dashboard.
When I am working in DevStudio and I want to test something in our MRE using Internet Explorer I need to log off the server in DevStudio otherwise, even though I log on to the BID as a normal user, it will still be using the profile from the admin user.

I guess my point here is that I wonder if it has more to do with your browser than with the security settings. What happens if you log on to the Server Console using Firefox?

Regards,

Dan


7.7.05M/7.7.03 HF6 on Windows Server 2003 SP2 output to whatever is required.