robwillcox3181 Absent Member.
Absent Member.
188 views

IDM and Group Membership


IDM Environment / Configuration:
IDM 4
OES2 (Server1) w/ Remote Loader <--eDir Driver (BiDirectional)-->
MetaDir Engine OES2 (Server2) <--AD Driver (BiDirectional)--> 2008r2 AD
(Server3) w/ Remote Loader

When I create a new group in my production eDir tree on Server1 and add
users to the new group, the group is created in the MetaDir tree on
Server2. The user object in both trees (server1 and server2) both show
membership to the new group, but the group object that I just created
does not have any members in the MetaDir tree (server2) - the members
list is empty. But the user in the same tree shows that it is a member.
The new group object is created on the AD (server3), but the new group
has no members. Also the user object in AD does not show group
membership in the "Member Of" tab.

If I change the password for the user in the production tree (server1),
the user is populated in the group members list on MetaDir (server2),
and also is added to the group in AD (server3).

Is this working as designed, or am I missing something? If IDM is
password change oriented, how/why does it create the group, and why
would it modify the user object's group membership? If it can do that,
why does it not modify the group as well?


--
robwillcox318
------------------------------------------------------------------------
robwillcox318's Profile: http://forums.novell.com/member.php?userid=6886
View this thread: http://forums.novell.com/showthread.php?t=452905

Labels (1)
0 Likes
1 Reply
Knowledge Partner
Knowledge Partner

Re: IDM and Group Membership

On Fri, 02 Mar 2012 20:56:01 +0000, robwillcox318 wrote:

> When I create a new group in my production eDir tree on Server1 and add
> users to the new group, the group is created in the MetaDir tree on
> Server2. The user object in both trees (server1 and server2) both show
> membership to the new group, but the group object that I just created
> does not have any members in the MetaDir tree (server2) - the members
> list is empty.


Configure the "reciprocal attribute mapping" on this driver.



--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.novell.com

Please post questions in the forums. No support provided via email.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.