topic Problem with LDAP in Management & Governance

Problem with LDAP

Alex_Sanchez — Fri, 22 Oct 2021 15:26:22 GMT

Hi everyone,

The reason for this post is that my organization has made a change in the AD, specifically in the distinguished name field, which makes users look like this

This new format causes problems when opening streams among other things

I have changed my filter in ldap, adding the value displayName, since in AD it is the same as the old format

(memberOf=CN=GROUPNAME,OU=X,OUX=XX,OU=XX XX,DC=XX,DC=XX,DC=com,displayName=Name)

I thought this would cause users to be renamed to the old format, but I have observed two things:

Users go to inactive state

Once users are deleted and re-enter the hub, they are renamed with a value similar to sAMAccountName, and they lose the permissions in the streams, and applications.

Thanks for all

Re: Problem with LDAP

Lauri — Fri, 22 Oct 2021 18:25:43 GMT

Take a look at this thread:

https://community.qlik.com/t5/Knowledge/Qlik-Sense-moved-to-a-new-domain-or-server-name-changed-Convert

I was able to update my users by editing Postgres directly. You might do that to update their usernames to match new format. It's scary, but if it works with a test account, it sure beats giving everyone new accounts.

Re: Problem with LDAP

Alex_Sanchez — Mon, 25 Oct 2021 07:24:35 GMT

Hi Lauri,

Thanks for your reply. The url return "Page not found"..

Re: Problem with LDAP

Alex_Sanchez — Mon, 25 Oct 2021 08:27:41 GMT

I can see the article, but my problem it's not exactly these. We don't change the UDC, we use the same UDC but we change one field in AD.

As I indicated in the first post, we have these format in the user name SURNAME, NAME (COUNTRY - CITY), but now the format is these SURNAME, NAME [logonname], but in the security rules we see the user with the old format

This makes this user unable to access the streams, because Qlik detect two diferent username for the same user.

Re: Problem with LDAP

Lauri — Mon, 25 Oct 2021 13:04:57 GMT

I was thinking that you could update your users' accounts in Qlik (directly in Postgres) -- change their usernames to match the new format. It's a risky thing to do. I would test thoroughly.

Re: Problem with LDAP

Alex_Sanchez — Mon, 25 Oct 2021 13:12:41 GMT

Thanks for your reply Lauri, can you provide more information about these?

I see the users in various tables in the BD, and i dont kown i rename the users

Re: Problem with LDAP

Lauri — Mon, 25 Oct 2021 13:24:51 GMT

I believe the table you need to work with is public."Users" but I am not certain. I would recommend you reply with a question in the thread I mentioned (https://community.qlik.com/t5/Knowledge/Qlik-Sense-moved-to-a-new-domain-or-server-name-changed-Convert/ta-p/1713323).

Re: Problem with LDAP

Alex_Sanchez — Mon, 25 Oct 2021 15:02:19 GMT

I think but i don't know, i can replace the Name field with other field like userid or mail in all my security rule.

Maybe these is more easy-

Anyone can help me in these question?