Oracle Analytics Cloud and Server

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

LDAP filter out disabled users

Received Response
323
Views
27
Comments
13»

Answers

  • A long thread going in many directions so I missed a point but ...

    The issue is that an agent has a static list of defined recipients, and that agent is set to run as these recipients. The problem being that if one of these recipients is disabled in MSAD then the agent fail.

    Right?

    I maybe missed a thing but sounds "normal" to me ... The list in the agent is hardcoded inside the agent, you can't make it dynamic if you keep it as static list. If you move it as "sourced" from an analysis (like mentioned already) you can make it a smarter list of recipients and each time only active users will be included.

    As your user is disabled OBIEE can't "login" as the user when it's about to execute the agent, it's like if you define as recipients a non existent user: same deal, it will fail because it can't find the user.

    So my point of view is that it work as expected. A static list must be maintained (by hand), if you don't want to maintain it then use a dynamic list (recipients are read from an analysis).

  • Rank 7 - Analytics Coach

    Just taking a stab at this, is it possible  that Oracle Virtual Directory service could be a culprit here ? What if the virtualize=true is removed and only external authenticator is enabled, does the issue still exist ? I'm not good at this, so if this was dumb please ignore.

  • Rank 4 - Community Specialist

    I will try that and let you know.  I am game for anything at this point.

  • Rank 4 - Community Specialist

    That did not work.  Still get the disabled user when searching and I now can not log into the Admin tool using the weblogic user. 

  • Rank 7 - Analytics Coach

    ok, so then you should revert the change.

  • Rank 4 - Community Specialist

    I have to leave for the weekend.  If anyone comes up with anymore ideas I will check back on Tues. when I return.  Thank you so much for looking at this with me. 

  • Rank 2 - Community Beginner

    The virtualize=true would only have "removed" the user it he/she existed in the WLS LDAP as well but your search across "All Providers" did not yield anything.The virtualize=true would only have "removed" the user it he/she existed in the WLS LDAP as well but your search across "All Providers" did not yield anything.

Welcome!

It looks like you're new here. Sign in or register to get started.