Philip Bennett asked a question.
ACTIVE DIRECTORY GROUP INTEGRATION issue - within my organisation we have 3 domains. The domain I specified in my web config file "Should" forward the Ldap to the appropriate domain. however this is not working. has anyone had a similar issue?
example
Domain 1
Domain 2
Domain 3 (shared domian)
The shared domain should pass the ldap enquiry through to domain 1 and 2, however when we try and login to SNOW we get the following error (screenshot 1)
on the server within logs> error : we see this...
15:29:32,518 ERROR APPLICATION Application error. [PAGE: /Pages/Login.aspx?reason=nocurrentpage | EXCEPTION: Exception of type 'System.Web.HttpUnhandledException' was thrown. (Boolean HandleError(System.Exception), System.Web) | INNER EXCEPTION: Object reference not set to an instance of an object. (Boolean DoLogin(System.String, System.String, Boolean), SnowLicenseManagerWeb)]
Hello,
and what do you see in security log? Was user found in LDAP URL that you have specified? Was account created in SMACC after login?
we dont see anything in the security logs and only get presented by the above screen shot.
the only log of any issue is the "error" log.
11:41:13,262 ERROR APPLICATION Application error. [PAGE: /Pages/Login.aspx?reason=scriptlogout | EXCEPTION: Exception of type 'System.Web.HttpUnhandledException' was thrown. (Boolean HandleError(System.Exception), System.Web) | INNER EXCEPTION: Object reference not set to an instance of an object. (Boolean DoLogin(System.String, System.String, Boolean), SnowLicenseManagerWeb)]
no account created in SMACC either
Cause if you are using Windows authentication, and you want to setup AD integration. To automatically create those users. User should be prompted to enter domain name + password when entering the website. This should authenticate user, and after that user should try login to the portal with his domain name and password and it should create account for him in SMACC. Where you had to create custom role with name of the Active Directory group, where you added this user or users.
Cause of LDAP URL want working or user wasnt authenticated you would get different error. This seems to be related to something else perhaps.
i can log into the system with Domain3\user... that account gets created in smacc.
however domain 3 is set to pass through any requests for the other domains i.e. domain1\users2 or domain2\user3
but it isnt allowing us to use them.
The passthrough from domain3 to domains 1&2 works fine for other systems
With shared domain3 you mean that it has a trust relationship with domain1 and domain2? And the SLM Server is it member of Domain3?
/Preben
yes