Db2

ldap.groups.user=cn=grp1,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=grp2,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;CN=grp3,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=gpr4,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx​

When trying the same on DMC,  we are unable to specify multiple groups in the console,  separating them by ;  It does not complain during the setup,  but fails when someone tries to authenticate. 

Error: Encounter errors when performing search group entry in LDAP. 

If we go back,  and specify only one single group, then it works fine.  But this does not works for us..   as we need to allow multiple groups to becomes users on DMC console.  (big enterprise with hundreds os DBAs) 


Please,  how can we setup multiple LDAP groups on DMC ? 

This is really a show stopper for us.  We can't even further evaluate the product without it, as more than 80% of the users would loose their access to the product.  :-( 

Regards

ldap.groups.user=cn=grp1,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=grp2,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;CN=grp3,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=gpr4,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx​

When trying the same on DMC,  we are unable to specify multiple groups in the console,  separating them by ;  It does not complain during the setup,  but fails when someone tries to authenticate. 

Error: Encounter errors when performing search group entry in LDAP. 

If we go back,  and specify only one single group, then it works fine.  But this does not works for us..   as we need to allow multiple groups to becomes users on DMC console.  (big enterprise with hundreds os DBAs) 


Please,  how can we setup multiple LDAP groups on DMC ? 

This is really a show stopper for us.  We can't even further evaluate the product without it, as more than 80% of the users would loose their access to the product.  :-( 

Regards

Hello Jason,

Is this limitation of configuring only a single ldap group in DMC still applicable for DMC version 3.1.12 . Could you please confirm.

Regards,

Ashish Mondal

------------------------------
Ashish Kumar Mondal

Original Message:
Sent: Wed December 02, 2020 04:49 PM
From: Jason Sizto
Subject: Multiple LDAP user groups !?

Hello Samuel,
 
This is a known limitation also described in DMC KC: https://www.ibm.com/support/knowledgecenter/en/SS5Q8A_3.1.x/com.ibm.datatools.dsweb.ots.security.doc/topics/Confldapgroupinfo.html

We will open internal git issue to track this gap.  Thanks.

------------------------------
Jason Sizto

Original Message:
Sent: Fri November 27, 2020 09:09 AM
From: Samuel Pizarro
Subject: Multiple LDAP user groups !?

Hi Team

At Amex,  we  are evaluating upgrading from DSM to DMC 3.1.3.   As of now,  it seems to have the features we need. 

We currently have DSM integrated with their ADS domain,  and we use the advanced LDAP settings on DSM ,  to allow multiple user groups , like bellow: 

DSM ldap setting: 

ldap.groups.user=cn=grp1,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=grp2,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;CN=grp3,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=gpr4,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx​

When trying the same on DMC,  we are unable to specify multiple groups in the console,  separating them by ;  It does not complain during the setup,  but fails when someone tries to authenticate. 

Error: Encounter errors when performing search group entry in LDAP. 

If we go back,  and specify only one single group, then it works fine.  But this does not works for us..   as we need to allow multiple groups to becomes users on DMC console.  (big enterprise with hundreds os DBAs) 


Please,  how can we setup multiple LDAP groups on DMC ? 

This is really a show stopper for us.  We can't even further evaluate the product without it, as more than 80% of the users would loose their access to the product.  :-( 

Regards

Hello Ashish,

Unfortunately the limitation still exists in V3.1.12.

Hello Jason,

Is this limitation of configuring only a single ldap group in DMC still applicable for DMC version 3.1.12 . Could you please confirm.

Regards,

Ashish Mondal

------------------------------
Ashish Kumar Mondal

Original Message:
Sent: Wed December 02, 2020 04:49 PM
From: Jason Sizto
Subject: Multiple LDAP user groups !?

Hello Samuel,
 
This is a known limitation also described in DMC KC: https://www.ibm.com/support/knowledgecenter/en/SS5Q8A_3.1.x/com.ibm.datatools.dsweb.ots.security.doc/topics/Confldapgroupinfo.html

We will open internal git issue to track this gap.  Thanks.

------------------------------
Jason Sizto

Original Message:
Sent: Fri November 27, 2020 09:09 AM
From: Samuel Pizarro
Subject: Multiple LDAP user groups !?

Hi Team

At Amex,  we  are evaluating upgrading from DSM to DMC 3.1.3.   As of now,  it seems to have the features we need. 

We currently have DSM integrated with their ADS domain,  and we use the advanced LDAP settings on DSM ,  to allow multiple user groups , like bellow: 

DSM ldap setting: 

ldap.groups.user=cn=grp1,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=grp2,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;CN=grp3,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=gpr4,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx​

When trying the same on DMC,  we are unable to specify multiple groups in the console,  separating them by ;  It does not complain during the setup,  but fails when someone tries to authenticate. 

Error: Encounter errors when performing search group entry in LDAP. 

If we go back,  and specify only one single group, then it works fine.  But this does not works for us..   as we need to allow multiple groups to becomes users on DMC console.  (big enterprise with hundreds os DBAs) 


Please,  how can we setup multiple LDAP groups on DMC ? 

This is really a show stopper for us.  We can't even further evaluate the product without it, as more than 80% of the users would loose their access to the product.  :-( 

Regards

ldap.groups.user=cn=grp1,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=grp2,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;CN=grp3,OU=PRCRole,OU=ISOMgmt,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx;cn=gpr4,OU=SecurityGroups,OU=Process,DC=xxx,DC=xxx,DC=xxx​

When trying the same on DMC,  we are unable to specify multiple groups in the console,  separating them by ;  It does not complain during the setup,  but fails when someone tries to authenticate. 

Error: Encounter errors when performing search group entry in LDAP. 

If we go back,  and specify only one single group, then it works fine.  But this does not works for us..   as we need to allow multiple groups to becomes users on DMC console.  (big enterprise with hundreds os DBAs) 


Please,  how can we setup multiple LDAP groups on DMC ? 

This is really a show stopper for us.  We can't even further evaluate the product without it, as more than 80% of the users would loose their access to the product.  :-( 

Regards