Absent Member.
Absent Member.
1067 views

Query Values in Entitlement Search in 4.7

Using Role-Based Entitlement Driver in a IDM SE 4.7 setup with Designer
4.7, all on current patches.
Have an entitlements-enabled AD driver running. I go to create a Test
Policy in the Driver Set; it shows me the driver, and its published
entitlements, but when I go to query the driver for value (in this case
Groups), no query is made through the driver, and Designer 4.7 just
returns the message:

"We were unable to obtain the query values for your entitlemnet because
the entitlement driver [ad driver name has not been started."

It has. I can repeat this on a test setup too. If I use Designer 4.6,
the query runs perfectly, and returns a list of all the AD Groups.

Also the browser in the Dynamic member Filter for BaseDN allows me to
select various object types, but not OUs. I can type these though.

I could use iManager and switch the mode to "Legacy" entitlements but
this is better avoided.

I suspect these are bugs with Designer 4.7, but would be interested in
others views.

PaulK
Labels (1)
2 Replies
Absent Member.
Absent Member.

Strike the bit about Legacy entitlements. The client is stuck with
those with the dumb Entitlement Service Driver anyway.

But the possible Designer bug seem to exist in both format modes.

On 14/06/18 13:43, PaulK wrote:
> Using Role-Based Entitlement Driver in a IDM SE 4.7 setup with Designer
> 4.7, all on current patches.
> Have an entitlements-enabled AD driver running.  I go to create a Test
> Policy in the Driver Set; it shows me the driver, and its published
> entitlements, but when I go to query the driver for value (in this case
> Groups), no query is made through the driver, and Designer 4.7 just
> returns the message:
>
> "We were unable to obtain the query values for your entitlemnet because
> the entitlement driver [ad driver name has not been started."
>
> It has.  I can repeat this on a test setup too.  If I use Designer 4.6,
> the query runs perfectly, and returns a list of all the AD Groups.
>
> Also the browser in the Dynamic member Filter for BaseDN allows me to
> select various object types, but not OUs.  I can type these though.
>
> I could use iManager and switch the mode to "Legacy" entitlements but
> this is better avoided.
>
> I suspect these are bugs with Designer 4.7, but would be interested in
> others views.
>
> PaulK


0 Likes
Commodore
Commodore

Hello,
was there any resolution to this problem?
I suspect we both must be doing some obvious thing wrong because nobody else is complaining about it...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.