Oracle Analytics Cloud and Server

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

Integration of OBIEE and Microsoft AD (LDAP)

Received Response
11
Views
4
Comments
Fabricio_Jorge
Fabricio_Jorge Rank 3 - Community Apprentice

Hi all,

   OBIEE....: 12.2

   OS.........: OEL 6.6

   I am trying to integrate the Microsoft AD of one of our customers with OBIEE. I've configured the Microsoft AD provider in Weblogic "correctly".

   The strange thing here is that only a few AD users are being returned and showed on Weblogic Console. The AD has more than 900 users, but on Weblogic console, i can only see 27 users. All the AD groups are returned normally, only the users aren't. I've already tested one of the users, and it is able to connect to the Publisher / Report normally.

   I'm using the following in the "Provider Specific" section:

      User Base DN: DC=domain,DC=com

      All Users Filter: (objectclass=user)

      User From Name Filter: (&(cn=%u)(objectclass=user))

      User Search Scope: subtree

      User Name Attribute: sAMAccountName

      User Object Class: user

Where is the catch here? Is there a configuration at the AD side that has to be done?

Any help will be appreciated.

Thanks.

Answers

  • [Deleted User]
    [Deleted User] Rank 2 - Community Beginner

    Have you bumped up the logging to see what exactly gets sent in terms of queries to the AD? Have you checked the logs on AD side?

  • Fabricio_Jorge
    Fabricio_Jorge Rank 3 - Community Apprentice

    Hi,

       thanks for the attention. We don't have access to the customer's AD logs.

       Is there any oracle-side logs that can help us analize this issue?

    Thanks.

  • [Deleted User]
    [Deleted User] Rank 2 - Community Beginner

  • While looking at logs (based on Christian's link) did you try to connect with a LDAP client and enter the same criteria in the search? Do you end up with all the users or just few of them?

    (Maybe the AD guys didn't really told you the truth about their LDAP and so your settings aren't really working ...)