• Search Forums
    Advanced Search
Prev
Next
Forums Infor / Lawson Platforms S3 Systems Administration

Lawson to AD

 5 Replies
 0 Subscribed to this topic
 28 Subscribed to this forum
Sort:
Author
Messages
Kate Liamero
Veteran Member
Posts: 70
Veteran Member
8/3/2007 1:02 PM
We are about to go live on Unix 9.0 with LS Security, Adam Bound, Websphere, Portal , LBI, RSS etc .
Our windows group has just informed us that they are about to retire our current active directory server due to an upgrade for a company wide email project. I need to know what and where we have to change Lawson to point to the new server to authenticate users.
We must get this done and tested this before we go live on or about 8/11 - 8/18

Thanks
Kate Liamero

PS Hope everyone in Minneapolis is safe and unharmed. Our prayers and best wishes are with you.
John Henley
Posts: 3365
New Poster
New Poster
Congrats on posting!
Engaged Reader
Engaged Reader
You are an engaged reader!
Avid Reader
Avid Reader
Avid Reader art thou!
8/3/2007 3:01 PM
Hi Kate, you will need to re-do the ldapbind to attach to the new AD server, specifying whatever the user tree(s) are. On the new AD server, they will need to set up a user who has query access to the new tree(s); you specify that user when setting up the binding information. Make sure you are on LSF9 SP2 or SP3, and when you run the ldapbind, choose the "search multiple trees" option (the single tree option doesn't work). Finally, I have also found that sometimes the ldapbind command doesn't write the info exactly correctly, and I need to use an LDAP tool (like ldap browser or jXplorer) to manually update the SSOP BIND entries so that SSO can correctly bind. Make sure you do a backup of your "primary Lawson LDAP" container before you do the ldapbind, and also save a copy of the SSO*.XML file that gets exported to $LAWDIR/system as the first step of the ldapbind.
Thanks for using the LawsonGuru.com forums!
John
0
liked by Members
Barry Ghotra
Veteran Member
Posts: 63
Veteran Member
1/2/2008 2:06 AM
JOhn, I need a clarification. I have WAS and ADAM installed. But have not done anything in ADAM besides the basic installation. What is needed to be done prior to installing LSF 9.0. MY understanding is that ldapbind needs to happen, but that's after we have migrated the 8.0.3 MSP 11 to LSF 9.0, correct? what needs to happen in ADAM that LSF 9.0 does not choke? Please provide any insights? Thanks.
John Henley
Posts: 3365
New Poster
New Poster
Congrats on posting!
Engaged Reader
Engaged Reader
You are an engaged reader!
Avid Reader
Avid Reader
Avid Reader art thou!
1/2/2008 9:28 PM
Barry, you need to create a DN in which Lawson will store its LDAP data--that DN is then specified during LSF9 install itself. If you are going to use SSL for the LDAP itself (i.e. ldaps), you also need to import the security certificate. The ldapbind itself is done after you've installed and tested everything.
Thanks for using the LawsonGuru.com forums!
John
0
liked by Members
Barry Ghotra
Veteran Member
Posts: 63
Veteran Member
5/11/2008 1:51 AM
John, is it possible at all to give a small sample for the DN for ADAM. Also while creating the unique ADAM instance do you need to import all the : MS-User, MS-UserProxy and MS-InetOrgPerson LDFs? need help please!
subserved
Basic Member
Posts: 9
Basic Member
New Poster
New Poster
Congrats on posting!
10/2/2008 7:38 AM
I am in the same situation. I have ADAM installed and I imported the user LDIF during the creation of the ADAM instance. My DN is: o=d200,ou=law,o=lawson, ldap admin user is: CN=bwatkins,O=d200,OU=law,O=lawson. Keeps telling me my DN name or password is incorrect. I created a User, using ADAM ADSI Edit and assigned the User to the Administrator's group. Tried logging in with that name in an LDAP browser but unsucessful. I know there is an extra step, but need some guidance. Any suggestions?