BusinessObjects Board

Users in more than 1 group

security CMC
#1

Hi, i have just added around 200 groups via LDAP to XI R2 sp4 on windows server sql2005 using iis6.
the problem i have that is when a user belong to just 1 group infoview logs in fine but when a user belong to 2 groups i get the following message
LDAP authentication could not log you on. Your user name is not unique on the LDAP server. Please log on using your distinguished name.
How do i fix this so that they see reports based on both groups when they log in as they do in 6.5?
Thanks

jql :uk: (BOB member since 2005-05-31)

#2

HI There,

And welcome to the complexity of XI!!!

I suggest you will have to check that there is no restrictions at group level that would overwrite the all access … remember in XI OK+KO=KO

Check out this tool that can probably help you better manage your users, rights etc…

Hope this helps

Intelligentsia :australia: (BOB member since 2005-06-07)

#3

Hi Guys,

Anyone is facing this issue? I have 4.1 SP4 P7 (14.1.4.1601) and I have 1 user of 7500 that is facing this issue. I already:

  1. Logged on different machines (did not work)
  2. Reset his LDAP aliases
  3. connect with another user in his machine (works fine)
  4. tried to logon WithNoSSO

Please note, enterprise authentication works fine.

Any help will be very appreciated.
Thank you
Marcelo

BIConsult :new_zealand: (BOB member since 2010-07-28)

#4

Hi all.
You have to restrict more closelly your Base LDAP Distinguished Name
to ensure the uniqueness of the user.

for me it was as:
from: dc=bbbbbb ,dc=aaaaa – receive mentioned error
to: ou=ccccccc,dc=bbbbbb,dc=aaaaa – solved

stasiok (BOB member since 2012-11-13)