Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
ebelcher Absent Member.
Absent Member.
1889 views

Directory Objects

I may understand this better later, but at this stage I find this quite alarming.

Looking at the documentation https://www.novell.com/documentation/groupwise2014/gw2014_guide_install/data/inst_upgrade_understand_directories.html "The upgrade process does not remove these obsolete GroupWise objects from eDirectory. You can simply ignore them, or you can manually delete them by using ConsoleOne after the domains and post offices have been upgraded."

You really don't want to do this. I configured up my Directory and LDAP servers in Groupwise 2014. All good. I was confused because the User Objects in Groupwise were missing the Firstname. It turns out that the Groupwise user objects might be linked the eDir User objects, but they still maintain cut down Groupwise objects in the tree as well. It was these objects that were missing the first names. (On this test system I don't have IDM running, but assume on production where we do have IDM running, the objects will be synced correctly.) To test this, I removed one of the objects, supposedly now redundant, having been upgraded to Groupwise 2014, using ConsoleOne. It removed the user from Groupwise! I then tried creating a new domain in Groupwise using the new admin portal. (What a breeze by the way) and low and behold, it created a new domain in eDir, visible in ConsoleOne!

Obviously you can't delete the old objects. Either, the doco is wrong or misleading, or I haven't understood something. Thank God I didn't just decide to delete all the old objects as per the doco. I'd have no email system left to speak of.

Appreciate some feedback on this one.
Thanks
Eric.
Labels (1)
Tags (1)
0 Likes
14 Replies
ebelcher Absent Member.
Absent Member.

Re: Directory Objects

in hindsight, maybe it's only the Schema Extensions that can be deleted. It's still not clear.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Directory Objects

In article <ebelcher.6fjeoo@no-mx.forums.novell.com>, Ebelcher wrote:
> in hindsight, maybe it's only the Schema Extensions that can be deleted.
> It's still not clear.
>

No, schema extensions are really a pain to remove and generally shouldn't
be.


Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!

___
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
Knowledge Partner
Knowledge Partner

Re: Directory Objects

In article <ebelcher.6fjeon@no-mx.forums.novell.com>, Ebelcher wrote:
> I removed
> one of the objects, supposedly now redundant, having been upgraded to
> Groupwise 2014, using ConsoleOne. It removed the user from Groupwise!
>

If your ConsoleOne has the GroupWise snap-ins and has a connection to
the GroupWise domain files, then this is working as designed.
Re-read that bit of documentation again and you'll see it does NOT talk
about user objects, though I can see how it could be inferred as
talking about them.
I'd say that page could use a bit of work as it does miss some
assumptions that really should be there.

As for first names, did they previously show in the GroupWise address
books and not now? Does a user now show twice in eDir?


Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!

___
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
ebelcher Absent Member.
Absent Member.

Re: Directory Objects

Hi Andy,
First Names used to be in the address book yes.
It seems like an LDAP mapping problem. If I change Qualifier, Middle Initial and then sync the user, they change in Groupwise. Any change to the First Name is totally ignored and anything that was there is removed. (I can replace by editing the Groupwise User Object in Console one)
My ldap maps is Given Name = firstname
0 Likes
ebelcher Absent Member.
Absent Member.

Re: Directory Objects

Okay solved my own problem. I now have first names

Given Name = givenName is correct.

Where can I find a list of the Groupwise LDAP mappings used? I found the above by trial and error.
Thanks
Eric.
0 Likes
dzanre1 Absent Member.
Absent Member.

Re: Directory Objects

Andy Konecny wrote:

> No, schema extensions are really a pain to remove and generally shouldn't be.


What it means is that you can delete things like the WebAccess server objects
easily. You actually should not delete any OTHER objects from ConsoleOne unless
you remove the GW snapins first. If you install GW 2014 on a Linux server, it
will delete the GW snapins, so deleting from that version of ConsoleOne is
pretty safe. But if you have GW snapins installed, and delete a domain object,
for example, the process will actually attempt to delete the domain from GW -
not what you want.

If you want to clean up your GW-only objects (so not users, eDirectory Groups,
etc.), make sure you don't have GW snapins in ConsoleOne - or do from iManager.

--
Danita
Novell Knowledge Partner
Are you a GroupWise Power Administrator? Join our site.
http://www.caledonia.net/register

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Knowledge Partner
Knowledge Partner

Re: Directory Objects

In article <ebelcher.6fn18o@no-mx.forums.novell.com>, Ebelcher wrote:
> Okay solved my own problem. I now have first names

Excellent. Sometimes it just takes talking the issue through with someone
else to find the problem. I think that is why so many IT professionals
appear to be talking with themselves when working on issues.

> Given Name = givenName is correct.

Far too obvious. So easy to get hung up on a more complex path when the
simpler one is hiding almost in front of us.

> Where can I find a list of the Groupwise LDAP mappings used? I found the
> above by trial and error.

I can't find any such list. And even if there was, I find them to be only
partially useful. The basic human intelligence looking at what is
actually available usually is what it takes. A good tool to help with
this is an LDAP browser, and here the following link is the one I use.
http://directory.apache.org/studio/


Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!

___
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
Knowledge Partner
Knowledge Partner

Re: Directory Objects

In article <ebelcher.6fn18o@no-mx.forums.novell.com>, Ebelcher wrote:
> Where can I find a list of the Groupwise LDAP mappings used? I found the
> above by trial and error.
>

Our Goddess whispered in my ear that it was in her upgrade guide
http://postie.caledonia.net/store/index.php?route=product/product&product_
id=205
It is the exclamation point at the end of the book.


Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!

___
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
mblackham Absent Member.
Absent Member.

Re: Directory Objects


Not saying to NOT get Danita's guide, but here are the LDAP attribute mappings for eDir and AD










GroupWiseeDirAD
User NameuidsamAccountName
GUIDGUIDobjectGuid
Login DisabledloginDisableduserAccountControl
Email AddresseMailAddresseMailAddress
Extra EmailmailproxyAddresses
Descriptiondescriptiondescription
CityphysicalDeliveryOfficeNamephysicalDeliveryOfficeName
Companycompanycompany
Departmentoudepartment
FaxfacsimileTelephoneNumberfacsimileTelephoneNumber
Given NamegivenNamegivenName
Home PhonehomePhonehomePhone
Middle Nameinitialsinitials
Mobile Phonemobilemobile
Other PhoneotherTelephoneotherTelephone
Pagerpagerpager
Locationll
Postal CodepostalCodepostalCode
PO BoxpostOfficeBoxpostOfficeBox
Surnamesnsn
Statestst
Street AddressstreetstreetAddress
PhonetelephoneNumbertelephoneNumber
Titletitletitle
Name PrefixpersonalTitlepersonalTitle
Name SuffixgenerationQualifiergenerationQualifier






--Morris



>>> Andy Konecny<konecnya@no-mx.forums.novell.com> 6/13/2014 12:01 PM >>>



In article <ebelcher.6fn18o@no-mx.forums.novell.com>, Ebelcher wrote:

> Where can I find a list of the Groupwise LDAP mappings used? I found the
> above by trial and error.
>

Our Goddess whispered in my ear that it was in her upgrade guide
http://postie.caledonia.net/store/index.php?route=product/product&product_
id=205
It is the exclamation point at the end of the book.


Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!
0 Likes
mblackham Absent Member.
Absent Member.

Re: Directory Objects


Opps, working on wrong version of what I had. Update, the edir/AD mapping for City/location are switched.



for location, edir is l, AD is physicalDeliveryOfficeName

for City, edir is physicalDeliveryOfficeName, AD is l



sorry,



Morris





>>> Morris Blackham<mblackham@no-mx.forums.novell.com> 6/13/2014 2:07 PM >>>


Not saying to NOT get Danita's guide, but here are the LDAP attribute mappings for eDir and AD











GroupWiseeDirAD
User NameuidsamAccountName
GUIDGUIDobjectGuid
Login DisabledloginDisableduserAccountControl
Email AddresseMailAddresseMailAddress
Extra EmailmailproxyAddresses
Descriptiondescriptiondescription
CityphysicalDeliveryOfficeNamephysicalDeliveryOfficeName
Companycompanycompany
Departmentoudepartment
FaxfacsimileTelephoneNumberfacsimileTelephoneNumber
Given NamegivenNamegivenName
Home PhonehomePhonehomePhone
Middle Nameinitialsinitials
Mobile Phonemobilemobile
Other PhoneotherTelephoneotherTelephone
Pagerpagerpager
Locationll
Postal CodepostalCodepostalCode
PO BoxpostOfficeBoxpostOfficeBox
Surnamesnsn
Statestst
Street AddressstreetstreetAddress
PhonetelephoneNumbertelephoneNumber
Titletitletitle
Name PrefixpersonalTitlepersonalTitle
Name SuffixgenerationQualifiergenerationQualifier







--Morris



>>> Andy Konecny<konecnya@no-mx.forums.novell.com> 6/13/2014 12:01 PM >>>



In article <ebelcher.6fn18o@no-mx.forums.novell.com>, Ebelcher wrote:

> Where can I find a list of the Groupwise LDAP mappings used? I found the
> above by trial and error.
>

Our Goddess whispered in my ear that it was in her upgrade guide
http://postie.caledonia.net/store/index.php?route=product/product&product_
id=205
It is the exclamation point at the end of the book.


Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!
0 Likes
dzanre1 Absent Member.
Absent Member.

Re: Directory Objects

"Morris Blackham" wrote:

> Not saying to NOT get Danita's guide,


Ha 😉

--
Danita
Novell Knowledge Partner
Are you a GroupWise Power Administrator? Join our site.
http://www.caledonia.net/register

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Knowledge Partner
Knowledge Partner

Re: Directory Objects

In article <539B06DD.56D0.00A3.1@no-mx.forums.novell.com>, Morris
Blackham wrote:
> Not saying to NOT get Danita's guide, but here are the LDAP
> attribute mappings for eDir and AD


The table at the back of Danita's guide is so much easier on the eyes.


Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!

___
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
dzanre1 Absent Member.
Absent Member.

Re: Directory Objects

Andy Konecny wrote:

> The table at the back of Danita's guide is so much easier on the eyes.


Where do I send your commission Andy 🙂 ?

--
Danita
Novell Knowledge Partner
Are you a GroupWise Power Administrator? Join our site.
http://www.caledonia.net/register

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Knowledge Partner
Knowledge Partner

Re: Directory Objects

In article <mpro.n7h6qn14gxphr007c.dzanre@no-mx.forums.novell.com>, DZanre
wrote:
> > The table at the back of Danita's guide is so much easier on the eyes.

>
> Where do I send your commission Andy 🙂 ?
>

I guess I'll have to update
http://www.konecnyad.ca/chaosadventurer/prices1.htm
to include this sort of commission for the next time we're in the same
city with the time to get together 😉


Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!

___
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.