We do fairly extensive personnel management by pushing and pulling info to and from Active Directory using the LDAP vendor forms. We even do account creation and disabling that way now, through our (customized) personnel management form.
We have set up our ARDBC LDAP form to use a domain account with admin privileges in AD, then I created filters that modify the vendor form data as values are changed in Remedy. The implicit SAVE action from the filter writes the data to AD. I've only had one issue with it, when I tried to modify two values in one filter and it caused the LDAP thread to lock up. While debugging, I split the action into two separate filters (to see which value was causing the problem), and it all cleared up. I'll be happy to provide more detail if you have specific questions. Mike Luttmann Senior Database Engineer [EMAIL PROTECTED] -----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Carey Matthew Black Sent: Monday, November 13, 2006 7:30 AM To: [email protected] Subject: Re: Active Directory Administration from Remedy Chris, I have not yet set out on this path, but I see it in my future too. >From the little work I have done playing with the idea I think one option might be to turn to a command line interface. (Especially if your ARS server runs on a Windows Server.) AD appears to have some command line tools that might make this type of thing fairly easy to to. I would think that if you have to build a Web Service front end to AD that you would have much more initial work to do and likely more ongoing work than using Microsoft supplied command line interfaces. I did stumble into this info and found it quite eye opening on this topic to. ( http://www.intel.com/it/pdf/active-directory.pdf ) Please let us (or at least me) know what you end up doing. :) I am sure there are others out there that would like to let ARS manage their AD universe(s) too. -- Carey Matthew Black Remedy Skilled Professional (RSP) ARS = Action Request System(Remedy) Love, then teach Solution = People + Process + Tools Fast, Accurate, Cheap.... Pick two. On 11/10/06, Chris Abell <[EMAIL PROTECTED]> wrote: > Hi all > > I've been tasked with creating a Remedy front end that will be used to > administer accounts and security groups in Active Directory. > > We're using a few different LDAP vendor forms for part of this project but > this won't meet all of our data requirements, so WebServices appear to be > the most logical next step. > > What I'd like to know is: > > Has anyone else attempted this kind of project? If so, how did you go > about it (in terms of products/protocols)? > > What kind of things should I be looking out for? (interpreting/updating > the userAccountControl attribute being an example of something that won't > be entirely straighforward) > > Thanks > > Chris ________________________________________________________________________ _______ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are" _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are"
