-
Title
How does model mart integrate with LDAP? Or Active Directory Users? How do I set that up? -
Description
How does model mart integrate with LDAP? Or Active Directory Users? How do I set that up? -
Resolution
Does model mart integrate with LDAP? Or Active Directory Users? How do I set that up?
NOTE: if you are not using groups you do not need to fill out the LDAP fields in the configure mart server window.
Solution:
Yes, Model Manager r9 introduced support for LDAP. The way to set that up is to go to,
Start | Programs | CA | ERwin | ERwin Mart Server r9 | Configure MartServer
Fill in the bottom three fields for the LDAP / Active Directory Support:
Basically, you need a user who can access your Active Directory. Any normal Domain User credentials will work. That user is then used by the Mart Server to pull the LDAP data into the Mart Administrator so it can list the Windows groups and users so you can then assign them to the mart. It does not do any harm or write data in Active Directory. We are only retrieving the Group membership Information from Active Directory similar to Microsoft Outlook.
- How do I find out my Domain Controller Name? Please use Nltest and/or see your company help desk personnel.
e.g. executing
nltest /dclist:in a DOS command window should give you your organization's domain controller host machine names.
- Microsoft Exchange server listens on port 3268.
Example domain controller name: ldap://name.company.com:3268
NOTE: If you get the error "encountered error while searching group. Please check the directory service configuration and try again" you most likely have encountered ERWIN Problem #: 12271. The domain controller string will not work with version 9.0 if that has spaces in it. The workaround is to replace spaces with %20. E.g.
Original string: ldap://servername:port/OU=Asia Pacific,DC=ca,DC=com
String with workaround: ldap://servername:port/OU=Asia%20Pacific,DC=xy,DC=com
ERWIN Problem #: 12271 was confirmed resolved by the CA QA Department in r9.2.0. So that should not be a problem in r9.2.0 and later versions of the mart.
- In addition to the above setup, you must also add the users to the Mart Server security as a domain user or as a windows group using the Mart Administrator.