Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name (171 Views)
Reply
Frequent Advisor
rnarasim
Posts: 30
Registered: ‎04-24-2014
Message 1 of 11 (306 Views)

sitescope 11.23 - LDAP Authentication where the group has a space in the group name

We are trying to integration sitescope with AD.

 

Enabled LDAP Authentication in the user management settings. Left the default User Management settings i.e person for user object class and group for group object class. Set the Base DN for LDAP Context.

Mapped Admin role to another group that is sourced from AD Group. When I tried to login using the group get login failed message. This group has a space in the group name.

 

Just for testing used another group that I am member of and that does not have a space in the group name and this worked just fine.  Is there an issue with the space in the group name or is there a way to escape the space in the GUI?

 

Thanks,

-Ravi

Please use plain text.
HP Expert
kenneth.gonzalez
Posts: 1,400
Registered: ‎04-28-2011
Message 2 of 11 (292 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

Have you tried to surround the group name with double quotes?
Kenneth Gonzalez
HP Support

If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.

If you haven’t tried it yet, come and join us in our entitled forums at Support Customer Forums
Please use plain text.
Frequent Advisor
rnarasim
Posts: 30
Registered: ‎04-24-2014
Message 3 of 11 (283 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

I am using this for the user role context and yes tried that too. Din't seem to work.

Please use plain text.
HP Expert
kenneth.gonzalez
Posts: 1,400
Registered: ‎04-28-2011
Message 4 of 11 (231 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

I wasn't able to reproduce the issue, using just the name of the group. Maybe you can fill in the role context with the group DN to make it work?
Kenneth Gonzalez
HP Support

If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.

If you haven’t tried it yet, come and join us in our entitled forums at Support Customer Forums
Please use plain text.
Frequent Advisor
rnarasim
Posts: 30
Registered: ‎04-24-2014
Message 5 of 11 (223 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

Nope did not work even after i provided a full dn. You are on 11.23 without any other patches right? 

Please use plain text.
Frequent Advisor
rnarasim
Posts: 30
Registered: ‎04-24-2014
Message 6 of 11 (210 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

Kenneth:

Further debugging, looks like I am the only one from the group that I was troubleshooting had issues with access.

So basically the LDAP Group that has space in it seems to work and I have checked few members of the group and the roles seems to be mapping just fine. Is there anything that gets cached at the user to role level - which could be the issue that I am seeing? If so how do i troubleshoot it and what would clear it?

 

Thanks,

-Ravi

Please use plain text.
Frequent Advisor
rnarasim
Posts: 30
Registered: ‎04-24-2014
Message 7 of 11 (197 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

Kenneth:
There seems to be something definitely with the roles cached :(. I checked this morning and seems like my role is getting mapped properly. So would like to know how to check/troubelshoot and be able to clear this up.

 

 

Thanks,

-Ravi

Please use plain text.
HP Expert
kenneth.gonzalez
Posts: 1,400
Registered: ‎04-28-2011
Message 8 of 11 (186 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

I don't think there is any caching for LDAP auth as query is sent always during auth attempt. Does that user belong to more than one AD group?
Kenneth Gonzalez
HP Support

If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.

If you haven’t tried it yet, come and join us in our entitled forums at Support Customer Forums
Please use plain text.
Frequent Advisor
rnarasim
Posts: 30
Registered: ‎04-24-2014
Message 9 of 11 (180 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

yes many groups and so are the other memebers of the group for whom the access was working. is there a limit on the groups or some such? is there any way to enable a trace to see the ldap query attempted to troubleshoot?

Please use plain text.
HP Expert
kenneth.gonzalez
Posts: 1,400
Registered: ‎04-28-2011
Message 10 of 11 (178 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

There are some issues with multiple groups: http://h30499.www3.hp.com/t5/SiteScope-Support-Customer-Forum/LDAP-permissions-issue/m-p/6437938#M35...
Kenneth Gonzalez
HP Support

If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.

If you haven’t tried it yet, come and join us in our entitled forums at Support Customer Forums
Please use plain text.
Frequent Advisor
rnarasim
Posts: 30
Registered: ‎04-24-2014
Message 11 of 11 (171 Views)

Re: sitescope 11.23 - LDAP Authentication where the group has a space in the group name

I saw the issue you are referring to in this article. Then i have decided to map only one AD group to a role in SIS. There is currently one AD group that is mapped and saw this issue while i was inflight meddling with quotes and adding and removing AD groups to role mapping. It will be good know about enabling a trace so that I don't have go crazy to troubleshoot this.

 

Thanks,

-Ravi

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation