Problem with LDAP

[Alex_Sanchez]

Hi everyone,

The reason for this post is that my organization has made a change in the AD, specifically in the distinguished name field, which makes users look like this

This new format causes problems when opening streams among other things

I have changed my filter in ldap, adding the value displayName, since in AD it is the same as the old format

(memberOf=CN=GROUPNAME,OU=X,OUX=XX,OU=XX XX,DC=XX,DC=XX,DC=com,displayName=Name)

I thought this would cause users to be renamed to the old format, but I have observed two things:

Users go to inactive state

Once users are deleted and re-enter the hub, they are renamed with a value similar to sAMAccountName, and they lose the permissions in the streams, and applications.

Thanks for all

[Lauri]

Take a look at this thread:

https://community.qlik.com/t5/Knowledge/Qlik-Sense-moved-to-a-new-domain-or-server-name-changed-Conv...

I was able to update my users by editing Postgres directly. You might do that to update their usernames to match new format. It's scary, but if it works with a test account, it sure beats giving everyone new accounts.

[Alex_Sanchez]

Hi Lauri,

Thanks for your reply. The url return "Page not found"..

[Alex_Sanchez]

I can see the article, but my problem it's not exactly these. We don't change the UDC, we use the same UDC but we change one field in AD.

As I indicated in the first post, we have these format in the user name SURNAME, NAME (COUNTRY - CITY), but now the format is these SURNAME, NAME [logonname], but in the security rules we see the user with the old format

This makes this user unable to access the streams, because Qlik detect two diferent username for the same user.

[Lauri]

I was thinking that you could update your users' accounts in Qlik (directly in Postgres) -- change their usernames to match the new format. It's a risky thing to do. I would test thoroughly.

[Alex_Sanchez]

Thanks for your reply Lauri, can you provide more information about these?

I see the users in various tables in the BD, and i dont kown i rename the users

[Lauri]

I believe the table you need to work with is public."Users" but I am not certain. I would recommend you reply with a question in the thread I mentioned (https://community.qlik.com/t5/Knowledge/Qlik-Sense-moved-to-a-new-domain-or-server-name-changed-Conv...). 

[Alex_Sanchez]

I think but i don't know, i can replace the Name field with other field like userid or mail in all my security rule.

Maybe these is more easy-

Anyone can help me in these question?