No password required with eDirectory


We recently upgraded from 2012 to 2014 and love it, but ran into an issue. I work with a woman who got married, and needed her last name changed. I was able to find the "rename" feature to change her username quickly and easily. However the Name, Last Name, etc was all grayed out in the GroupWise Admin console via a browser. Tried updating her account info in C1 since she is also an active users on our Netware server. The only way I could change her name on the email address book was to Disassociate. Now she is required to login to Netware, and then again to GroupWise, and that is annoying. I tried Associating with LDAP but that doesn't seem to have worked.



Any tips out there on how to get it back so that she can login to eDirectory via the Netware Server and not also have to login to GroupWise 14?



Mike
Parents
  • Hi Mike,

    When a user is associated to an LDAP object i.e. eDir, then all name changes etc need to be made in eDir, preferably using iManager. Those changes will sync automatically according to your sync schedule or alternatively you can manually initiate a sync just on that user object in the GroupWise Admin Console.

    In order to correct your situation, as far as I am aware, you need to reassociate the GroupWise user object with the corresponding eDirectory object. I would recommend that you double-check the association that you have created between that object in GroupWise with the LDAP directory in question.

    Please let us know how it goes.

    Cheers,

  • Well thank you, now that I found iManager again I see where I can make those changes, not sure how to get my other user fixed however.



    This is what I currently have for her



    LDAP User:cn=username,ou=ccrr,o=umchs

    But that isn't working, got rid of the Error 34 Syntax issue and let me "associate" but not working.




    >>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 11/5/2015 10:46 PM >>>




    Hi Mike,

    When a user is associated to an LDAP object i.e. eDir, then all name
    changes etc need to be made in eDir, preferably using iManager. Those
    changes will sync automatically according to your sync schedule or
    alternatively you can manually initiate a sync just on that user object
    in the GroupWise Admin Console.

    In order to correct your situation, as far as I am aware, you need to
    reassociate the GroupWise user object with the corresponding eDirectory
    object. I would recommend that you double-check the association that
    you have created between that object in GroupWise with the LDAP
    directory in question.

    Please let us know how it goes.

    Cheers,


    --
    Laura Buckley
    Technical Consultant
    IT Dynamics, South Africa

    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below...
    ------------------------------------------------------------------------
    laurabuckley's Profile: https://forums.novell.com/member.php?userid=122
    View this thread: https://forums.novell.com/showthread.php?t=495047
  • Hi Mike,

    Just so we are both clear on what has happened, kindly describe how you created the new association between the GroupWise object and the eDir object. I just want to ensure that I'm not missing anything here.

    Another thing that you can do is compare the LDAP GUID on the GroupWise user object with the GUID on the eDir User Object, specifically the last 12 digits - at least those are the digits that I look at!

    Cheers,

  • I started this "journey" wanting to change the last name of a person, and all fields were locked. Couldn't access iManager so I read a forum post about disassociating the user to allow the change. BINGO! That worked great, name changed. But now she has to log into Netware and then GroupWise and it's more of a hassle than anything.



    I am trying now to get that fixed. I clicked on the "More" menu in the GroupWise Admin console (web based) and then Associate, and then found that LDAP string on another forum and it accepted it, but it doesn't seem to be working.



    I do not know where to find the LDAP GUID in GroupWise or C1, so I would love to compare those but am not sure how. I did just click on "Display Object Information" and found GUID and there is a section of 12 numbers at the end. Just don't know what/where to compare that to now.



    >>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 11/6/2015 10:56 AM >>>




    Hi Mike,

    Just so we are both clear on what has happened, kindly describe how you
    created the new association between the GroupWise object and the eDir
    object. I just want to ensure that I'm not missing anything here.

    Another thing that you can do is compare the LDAP GUID on the GroupWise
    user object with the GUID on the eDir User Object, specifically the last
    12 digits - at least those are the digits that I look at!

    Cheers,


    --
    Laura Buckley
    Technical Consultant
    IT Dynamics, South Africa

    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below...
    ------------------------------------------------------------------------
    laurabuckley's Profile: https://forums.novell.com/member.php?userid=122
    View this thread: https://forums.novell.com/showthread.php?t=495047
Reply

  • I started this "journey" wanting to change the last name of a person, and all fields were locked. Couldn't access iManager so I read a forum post about disassociating the user to allow the change. BINGO! That worked great, name changed. But now she has to log into Netware and then GroupWise and it's more of a hassle than anything.



    I am trying now to get that fixed. I clicked on the "More" menu in the GroupWise Admin console (web based) and then Associate, and then found that LDAP string on another forum and it accepted it, but it doesn't seem to be working.



    I do not know where to find the LDAP GUID in GroupWise or C1, so I would love to compare those but am not sure how. I did just click on "Display Object Information" and found GUID and there is a section of 12 numbers at the end. Just don't know what/where to compare that to now.



    >>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 11/6/2015 10:56 AM >>>




    Hi Mike,

    Just so we are both clear on what has happened, kindly describe how you
    created the new association between the GroupWise object and the eDir
    object. I just want to ensure that I'm not missing anything here.

    Another thing that you can do is compare the LDAP GUID on the GroupWise
    user object with the GUID on the eDir User Object, specifically the last
    12 digits - at least those are the digits that I look at!

    Cheers,


    --
    Laura Buckley
    Technical Consultant
    IT Dynamics, South Africa

    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below...
    ------------------------------------------------------------------------
    laurabuckley's Profile: https://forums.novell.com/member.php?userid=122
    View this thread: https://forums.novell.com/showthread.php?t=495047
Children
  • Hi Mike,

    In iManager, browse to the user object and select "Modify Object". On the screen that displays select "Other". On the screen select GUID and Edit. It is not an editable field but will show you the value. Compare that to what you see when you click on the General tab of the user object. I'm not in front of my servers right now as it's a little late at night here so please forgive the lack of more detailed instruction.

    Please let us know how it goes, or if you need any further information in following the above suggestion.

    Cheers,

  • First off let me say THANK YOU for spending so much time helping me, I do appreciate the lessons!



    I am in iManager, and I can scroll down on the left and click on Users/Modify User, but when that info comes up it looks just like C1. I do not see a link or screen marked "Other". I have tabs of General, NMAS, Linux Profile, Security, and Restrictions. Under General I have ID, Environment, Group Memberships, Postal Address, Login Script, and See Also







    >>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 11/19/2015 11:46 AM >>>




    Hi Mike,

    In iManager, browse to the user object and select "Modify Object". On
    the screen that displays select "Other". On the screen select GUID and
    Edit. It is not an editable field but will show you the value. Compare
    that to what you see when you click on the General tab of the user
    object. I'm not in front of my servers right now as it's a little late
    at night here so please forgive the lack of more detailed instruction.

    Please let us know how it goes, or if you need any further information
    in following the above suggestion.

    Cheers,


    --
    Laura Buckley
    Technical Consultant
    IT Dynamics, South Africa

    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below...
    ------------------------------------------------------------------------
    laurabuckley's Profile: https://forums.novell.com/member.php?userid=122
    View this thread: https://forums.novell.com/showthread.php?t=495047
  • Hi Mike,

    You specifically have to use "Modify Object" and not "Modify User". I use the "Browse" tab (look for the magnifying glass on the bar across the top, click on that and then the browse tab on the left-hand side) find the user and then click on it, from the context menu choose "Modify Object".

    Please let us know how it goes... hopefully we get you through this ;)

    Cheers,
  • Since I'm lazy: You DID try and remove the association, save, and associate again? :-)

    Uwe


    --
    Novell Knowledge Partner
    Please don't send me support related e-mail unless I ask you to do so.

  • Okay, I did find them both now. In the GroupWise Admin her LDAP GUID is longer and slightly different than in iManager, however the last 12 digits are exactly the same. I never entered that info so it pulled it from eDir in GroupWise I assume. The only difference in the last 12 are upper case vs lower case, but I don't think this is case sensitive.







    >>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 11/20/2015 8:36 AM >>>




    Hi Mike,

    You specifically have to use "Modify Object" and not "Modify User". I
    use the "Browse" tab (look for the magnifying glass on the bar across
    the top, click on that and then the browse tab on the left-hand side)
    find the user and then click on it, from the context menu choose "Modify
    Object".

    Please let us know how it goes... hopefully we get you through this ;)

    Cheers,


    --
    Laura Buckley
    Technical Consultant
    IT Dynamics, South Africa

    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below...
    ------------------------------------------------------------------------
    laurabuckley's Profile: https://forums.novell.com/member.php?userid=122
    View this thread: https://forums.novell.com/showthread.php?t=495047

  • Okay, I did find them both now. In the GroupWise Admin her LDAP GUID is longer and slightly different than in iManager, however the last 12 digits are exactly the same. I never entered that info so it pulled it from eDir in GroupWise I assume. The only difference in the last 12 are upper case vs lower case, but I don't think this is case sensitive.







    >>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 11/20/2015 8:36 AM >>>




    Hi Mike,

    You specifically have to use "Modify Object" and not "Modify User". I
    use the "Browse" tab (look for the magnifying glass on the bar across
    the top, click on that and then the browse tab on the left-hand side)
    find the user and then click on it, from the context menu choose "Modify
    Object".

    Please let us know how it goes... hopefully we get you through this ;)

    Cheers,


    --
    Laura Buckley
    Technical Consultant
    IT Dynamics, South Africa

    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below...
    ------------------------------------------------------------------------
    laurabuckley's Profile: https://forums.novell.com/member.php?userid=122
    View this thread: https://forums.novell.com/showthread.php?t=495047

  • Yes, that was the first (and 2nd/3rd) thing I tried ;)



    >>> Uwe Buckesfeld<u.buckesfeld@web.de> 11/20/2015 9:41 AM >>>



    Since I'm lazy: You DID try and remove the association, save, and associate again? :-)

    Uwe


    --
    Novell Knowledge Partner
    Please don't send me support related e-mail unless I ask you to do so.
  • Hi Mike,

    Apologies for the delayed response - I've been out of my home country for 10 days.

    If the last 12 digits match up then the LDAP association is pointing to the correct object and it's not case sensitive as far as I am aware. Perhaps we need to test if there is LDAP synchronization happening between eDir and that particular GroupWise user account. If at all possible try to change an attribute, I typically use Telephone Number, then manually do a synchronise in the GroupWise admin console on that user account and see if the information updates on the GroupWise user information.

    Please let us know how it goes.

    Cheers,

  • Thanks for all your help Laura, I ended up opening an SR with Novell as there seemed to be bigger issues with this and there was. I spent a while on a chat (even took a lunch) with Shirisha and she was amazing. I was technically in the wrong queue because it wasn't eDir that was the issue, more GroupWise and the LDAP association. She admitted this was out of her area but still got the job done, and I was grateful. The tree is now accessible since we were able to configure the LDAP settings which allows me to browse the tree and make the association. Tested and working (at least with one user) so I'm on the right path again.


    Thank you for your patience and willingness to help a noob.



    Mike



    >>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 11/30/2015 11:06 AM >>>




    Hi Mike,

    Apologies for the delayed response - I've been out of my home country
    for 10 days.

    If the last 12 digits match up then the LDAP association is pointing to
    the correct object and it's not case sensitive as far as I am aware.
    Perhaps we need to test if there is LDAP synchronization happening
    between eDir and that particular GroupWise user account. If at all
    possible try to change an attribute, I typically use Telephone Number,
    then manually do a synchronise in the GroupWise admin console on that
    user account and see if the information updates on the GroupWise user
    information.

    Please let us know how it goes.

    Cheers,


    --
    Laura Buckley
    Technical Consultant
    IT Dynamics, South Africa

    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below...
    ------------------------------------------------------------------------
    laurabuckley's Profile: https://forums.novell.com/member.php?userid=122
    View this thread: https://forums.novell.com/showthread.php?t=495047
  • Hi Mike

    I would like to apologize to you - I assumed, incorrectly so, that your LDAP configuration was intact, which it would appear was not the case. Thus I sent you on a wild goose chase :(

    I am glad that you got your issues resolved and thank you very much for reporting back.

    Feel free to come back to the forums at any time you have a question. We welcome the interaction with the community at large :)

    Cheers,