AREA basically does a validation call to the LDAP database. It doesn't 'read' the user password that is stored in LDAP but sends the authentication info to LDAP, which responds back to the AR System on weather or not the user credentials are valid or invalid..
ARDBC reads data from the LDAP database. Let me try to answer some of your questions... look below for my responses.. -----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] Behalf Of Kevin Murray Sent: Tuesday, April 10, 2007 9:08 AM To: [email protected] Subject: Remedy+LDAP (Novell eDirectory) Hi All, Environment: ARSystem 6.3 Patch 20, HPUX 11i, Oracle 9i currently using ARSystem authentication We are planning to implement the LDAP plugins (both AREA and ARDBC) to connect to the corporate Novell eDirectory (Recent Version - tbc), running on separate hardware. Our eDirectory team are keen to understand the logic behind the supplied plug-ins i.e what specific function calls, does it use when interacting with eDirectory, and what attributes does it interact with? I'm specifically interested in the AREA plugin, the ARDBC is very much specific to what you include in the vendor form? e.g. Does the plugin increment the Bad Password counter attribute? In my experience No, this is managed centrally by LDAP Joe - Yes it does.. if you keep entering bad passwords, your account in the AD will be locked out after max allowed wrong attempts Does the plugin update the last logged on attribute? In my experience no, this is managed centrally by LDAP Joe - Yes it would, but I haven't personally confirmed it. In my opinion everytime there is a validation against the LDAP database, it is treated as a login. This would in effect modify that attribute. Does the plugin implement password history? Don't know, but don't think it's really relevant as the password is not set through Remedy managed centrally again through eDirectory Joe - Remedy doesn't store passwords and passwords are managed only at the AD. So there is no question about maintaining password history within Remedy.. Does the plugin update the loginGraceLimit? Don't know Joe - Not sure.. Does the plugin update the loginGraceRemaining? Don't know Joe - Not sure.. Setting-up the integration should be OK, completed it before elsewhere however never had anyone ask me the above before. I don't think providing them with the remedy manual/knowledge base material will work. The documentation provided in the guides/knowledge base are all very ARSystem centric. The eDirectory team are also suggested we could switch in the a Novell API solution? Has anyone done something along these lines with Remedy (instead of using the supplied AREA/ARDBC plugins)? Any information appreciated. Kind Regards, Kevin -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.446 / Virus Database: 269.0.0/754 - Release Date: 4/9/2007 10:59 PM _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are"
