Questions Tagged With activedirectory

Troubleshoot ActiveDirectory user import to my ivy 3.9 webApp

SupportIvyTeam — Wed, 01 May 2019 03:02:29 -0400

I have to maintain a legacy workflow app still running with XpertIvy 3.9. The users of the application are synchronized from our MS Active Directory.

Recently I got reports that some users are not able to connect to the WebApp. What can I do to verify and trace the ActiveDirectory user synchronization?

Lazy / On-demand Synchronization of LDAP Users

SupportIvyTeam — Mon, 29 Apr 2019 09:53:15 -0400

In our project we are using Microsoft AD as our security system. Our access policy is that anyone working in our company is allowed to access our Ivy application.

Our problem now is that daily user synchronization and user filtering in our code is quite slow as we have over 50'000 possible users to synchronize, even though our application is only used by a couple of thousand users.

Is it possible to 'lazy load' users, only adding users to our Ivy system database on first usage / login? And not on first synchronization with our AD system? But still updating users that have been changed in AD during synchronization?

Can not login with synchronized user from active directory

SupportIvyTeam — Fri, 04 Dec 2015 14:57:14 -0500

The user is synchronized with the active directory, but I can not login with it. In the log there is the following message:

Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-03100213, problem 2001 (NO_OBJECT), data 0, best match of:
    ''NULL]; remaining name '/'
    at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3160)
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3081)
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2888)
    at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1846)
    at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1769)
    at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:392)
    at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358)
    at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:276)
    at ch.ivyteam.ivy.security.internal.jndi.dircontext.LazyBindingDirContextAccess.search(LazyBindingDirContextAccess.java:47)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem$3$1.execute(JndiSecuritySystem.java:1063)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem$3$1.execute(JndiSecuritySystem.java:1)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem.execute(JndiSecuritySystem.java:613)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem$3.call(JndiSecuritySystem.java:1058)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem$3.call(JndiSecuritySystem.java:1)
    at ch.ivyteam.ivy.security.internal.jndi.JndiSecuritySystem.executeWithCachedContext(JndiSecuritySystem.java:637)

How to ensure that the LDAP connection pool is used

SupportIvyTeam — Thu, 05 Mar 2015 12:55:35 -0500

In the Admin UI we can enable connection pooling for ActiveDirectory. We enabled this pool as the connection setup to our AD is very slow and ivy Public API seems to call AD frequently. But it seems like the enabling of the pool doesn't speed up anything.

How can we track and trace if the pool is working?

Where can I inspect and change the current 3.9 Active Directory settings

SupportIvyTeam — Mon, 16 Feb 2015 14:17:21 -0500

Some users of my customer can't connect with the ivy 3.9 server. Where can I inspect the actual Active Directory (AD) settings of the ivy Application?

How can I specify additional properties/attributes for an External Security System?

SupportIvyTeam — Tue, 05 Aug 2014 11:43:02 -0400

If I use Microsoft Active Directory or Novel eDirectory as External Security System is there any possibility to specify an additional environment property / attribute? Examples are java.naming.referral (which is on Ivy set to follow per default) or java.naming.ldap.derefAliases etc.