In italics are the parts you would replace. Here is an example that works minus information that indicates the company. (BTW, I have 9.3.1 if that makes a difference) Can you tell me how you defined your groups and DIT search, and how you restricted the groups? Is a wildcard allowed? My security group is looking at me very suspiciously. Don't have any idea how this is supposed to verify a user against Active Directory, how it asks for or passes a password, how it lets me know if the user's group is admin or publisher. I don't have JXplorer or something similar. I agree with your comment on documentation insufficiency. The link you posted is a start but doesn't help a lot if you are new to AD. I've submitted an enhancement request to esri to improve the documentation on using AD with the portal. Another sympton was that the login took over 2 minutes before getting a failure message. Once I restricted the search for groups to a specific branch of the AD hierarchy that had only a few entries I was able to log in. The login process was timing out because there were more than 1000 items in the search path for the AD groups. Well over a few thousand items between users, groups, and organization units. I'm working with a large corporation that has a large Active Directory.
" The problem was defining the search DIT for matching the portal roles to Active Directory Groups.
0 kommentar(er)
