Is this the root of the tree? If so you are unlikely to be able to create the vendor form as the LDAP plugin will timeout performing the discovery of the tree. Try the following;
· Make sure you have Server-Plugin-Default-Timeout: 500 set in ar.conf · Find the full DN of a user in one of the trees you are interested in (eg CN=User0033,OU=FinDept,OU=UK, DC=uspl,DC=enbridge,DC=com) · Use this DN as the Base DN for Discovery on the ARDBC LDAP config form, also make sure to specify port 3268 · Create the Vendor form in the admin tool and add the fields you want from the user object. (Tip – use uSNCreated as they key field) · Save the form and verify it works · Once it is working open the form in the admin tool and use Form, Form Properties, Vendor Information tab and change the Table Name to the common base DN that the trees share o The table name will look something like ldap://ldap_server_name:3268/ CN=User0033,OU=FinDept,OU=UK,DC=uspl,DC=enbridge,DC=com??sub?(objectclass=user) o Change it to ldap://ldap_server_name:3268/ DC=uspl,DC=enbridge,DC=com??sub?(objectclass=user) The problem you may be seeing is that the ARDBC LDAP plugin is very determined in discovering the LDAP attributes of the tree and, if you are not specific enough when specifying the base DN, it will take too long and timeout. Using a single user to create the form and then changing it to something more general is the workaround to get past this. If you’re still having problems set your Plugin-Log-Level: 100 and see what, if any errors you can see. If you see a long list of these; <ARSYS.ARDBC.LDAP> <FINEST> Entering CLDAPDiscovery::GetDataType As part of a +GMF call then your discovery DN is too general. Mark From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Benjamin Trimmer Sent: 01 May 2008 20:46 To: [email protected] Subject: Re: V7 ARDBC Vendor form LDAP query Mark, I have the following in the Base DN: DC=uspl,DC=enbridge,DC=com Regards, Ben "Walters, Mark" <[EMAIL PROTECTED]> Sent by: "Action Request System discussion list(ARSList)" <[email protected]> 05/01/2008 09:42 AM Please respond to [email protected] To [email protected] cc Subject Re: V7 ARDBC Vendor form LDAP query What do you have as your Base DN for Discovery? If this is too general you may find the plugin times out and will not be available. Set this to something very specific – the full DN of a user for example. Once you have created the vendor form you can change the base DN via the form properties vendor information tab. Mark From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Benjamin Trimmer Sent: 01 May 2008 14:40 To: [email protected] Subject: Re: V7 ARDBC Vendor form LDAP query Mark, When I cahnge the port to 3268, the ARSYS.ARDBC.LDAP "Available Vendor Name" is no longer in the list and I'm not able to select a vendor table. I'm basically in the need for help in writing the specific LDAP query that will pull a list of all domain users from each of the domains in the forest. Regards, Ben "Walters, Mark" <[EMAIL PROTECTED]> Sent by: "Action Request System discussion list(ARSList)" <[email protected]> 04/30/2008 09:15 AM Please respond to [email protected] To [email protected] cc Subject Re: V7 ARDBC Vendor form LDAP query ** This should work but you will need to use the global catalog port (3268 IIRC) rather than the default LDAP port (389). Also, when specifying the BaseDN in the plugin config form, start with a specific user and modify it via the vendor form properties later. If you just point to the root of the tree you’ll probably get a timeout when trying to create the vendor form as the plugin trawls the LDAP server collecting data. Mark From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Benjamin Trimmer Sent: 30 April 2008 14:29 To: [email protected] Subject: V7 ARDBC Vendor form LDAP query ** Listers, I am working on a Actice Directory integration where I need to pull user's (people) data from AD. The environment that I am in is a forest with 4 domains. I wanteto make a connection the the forest level AD server, and get the information from the domains below. I am having issues writing the correct LDAP query. Is there anyone who can be of assistance on this? Regards, Ben Trimmer * * * * * * * * * * * * * * * * * * * * * * * * * IMPORTANT NOTICE* * * * * * * * * * * * * * * * * * * * * * * * * Unless otherwise indicated or obvious from the nature of the transmittal, the information contained in this email message is CONFIDENTIAL information intended for the use of the individual or entity named herein. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify the sender using the above contact information or by return email and delete this message and any copies from your computer system. Thank you. __Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" html___ __Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" html___
