When using SSL, Remedy won't bind. We had to use stunnel to get it out. Jack
Corporate IT Enterprise Systems Management Remedy Support Team Remedy Support Team Home Page http://collaborate.mckesson.com/sites/esm/remedy -----Original Message----- From: Tim Widowfield [mailto:[EMAIL PROTECTED] Sent: Friday, October 26, 2007 10:52 AM To: [email protected] Subject: Re: ARDBC Plug-in Returns only Subset of Data -- Why? --0-1178468522-1193421149=:48183 Content-Type: text/plain; charset=us-ascii That's a possibility, but it doesn't explain why other client tools (including a version 7 Remedy server) can use the same authentication credentials and see the entire record. --Tim ----- Original Message ---- From: "Durrant, Michael M. - ITSD" <[EMAIL PROTECTED]> To: [email protected] Sent: Friday, October 26, 2007 1:05:24 PM Subject: Re: [ARSLIST] ARDBC Plug-in Returns only Subset of Data -- Why? Is there any kind of field/column-level access control in LDAP? -----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Tim Widowfield Sent: Friday, October 26, 2007 9:59 AM To: [email protected] Subject: Re: ARDBC Plug-in Returns only Subset of Data -- Why? One of the data elements we're not getting is the 'cn', which is just a seven-character text attribute. The fullName attrib is char(15), and we're getting that one. It's almost as if we're only seeing one part of the aggregation. Like we're seeing only person data related to the record, but no location data. It's very strange. --Tim ----- Original Message ---- From: Carey Matthew Black <[EMAIL PROTECTED]> To: [email protected] Sent: Friday, October 26, 2007 11:18:31 AM Subject: Re: [ARSLIST] ARDBC Plug-in Returns only Subset of Data -- Why? Tim, Just a few WAGS.... Check the data types for the ldap attributes that are not returned. ( Maybe they are not supported in v5.x but are in v7.x ?) Maybe the ARS side is truncating the data due to a size/memory constraint? (and thus you get a partial record) HTH -- Carey Matthew Black Remedy Skilled Professional (RSP) ARS = Action Request System(Remedy) Love, then teach Solution = People + Process + Tools Fast, Accurate, Cheap.... Pick two. On 10/26/07, Tim Widowfield <[EMAIL PROTECTED]> wrote: > Hey, everybody. I was wondering if anyone out there has seen this issue before. It's got a lot of people baffled. > > > > A customer has an AIX server running the latest patch for AR 5.1.2. The target LDAP server is Novell, and it doesn't allow anonymous browsing. When the Remedy daemons start up, all the plug-ins load without a hitch. And in the configuration form, the parameters for ARDBC look correct -- that is, the values are what we were told to use, and they match what I'm using in Softerra's LDAP Browser. > > > > However, when attempting to query the LDAP host the vendor form exhibits strange behavior. It shows us only a subset of any given person's record. For example, we can see the last name, first name, and email address, but no location data. Even more strange is the empty cn field. In database terms, we're getting all the rows, but only some of the columns. > > > > The base query we're using is pretty simple. It looks something like this: > > > > ldaps://[LDAP_Server]/o=[domain]??sub?(objectclass=*) > > > > The customer has an AR System version 7 development server with almost the exact same setup (same query, same credentials), and all the data comes back as expected. Out of desperation, I imported the vendor form onto their production 5.1.2 server, and the same thing happened as on the development 5.1.2 machine: Swiss-cheese data. > I've built new vendor forms from scratch, and I've even performed surgery on def files, all to no avail. > > > There are no errors in the plug-in logs. > As far as the AR Server goes, there is no problem. > > > I'm stumped. Any ideas? > > > > --Tim ________________________________________________________________________ _______ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are" ________________________________________________________________________ _______ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are" The information contained in this email may be privileged, confidential or otherwise protected from disclosure. All persons are advised that they may face penalties under state and federal law for sharing this information with unauthorized individuals. If you received this email in error, please reply to the sender that you have received this information in error. Also, please delete this email after replying to the sender. ________________________________________________________________________ _______ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are" ________________________________________________________________________ _______ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are" --0-1178468522-1193421149=:48183 Content-Type: text/html; charset=us-ascii ** <html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:verdana,helvetica,sans-serif;font-size:10pt">That's a possibility, but it doesn't explain why other client tools (including a version 7 Remedy server) can use the same authentication credentials and see the entire record.<br><div> </div>--Tim<div style="font-family: verdana,helvetica,sans-serif; font-size: 10pt;"><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: "Durrant, Michael M. - ITSD" <[EMAIL PROTECTED]><br>To: [email protected]<br>Sent: Friday, October 26, 2007 1:05:24 PM<br>Subject: Re: [ARSLIST] ARDBC Plug-in Returns only Subset of Data -- Why?<br><br>Is there any kind of field/column-level access control in LDAP?<br><br>-----Original Message-----<br>From: Action Request System discussion list(ARSList)<br>[mailto:<a ymailto="mailto:[email protected]"; href="mailto:[email protected]";>[email protected]</a>] On Behalf Of Tim Widowfield<br>Sent: Friday, October 26, 2007 9:59 AM<br>To: <a ymailto="mailto:[email protected]"; href="mailto:[email protected]";>[email protected]</a><br>Subject: Re: ARDBC Plug-in Returns only Subset of Data -- Why?<br><br>One of the data elements we're not getting is the 'cn', which is just a<br>seven-character text attribute. The fullName attrib is char(15), and<br>we're getting that one. <br><br>It's almost as if we're only seeing one part of the aggregation. Like<br>we're seeing only person data related to the record, but no location<br>data.<br><br>It's very strange.<br><br>--Tim<br><br><br>----- Original Message ----<br>From: Carey Matthew Black <<a ymailto="mailto:[EMAIL PROTECTED]" href="mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</a>><br>To: <a ymailto="mailto:[email protected]"; href="mailto:[email protected]";>[email protected]</a><br>Sent: Friday, October 26, 2007 11:18:31 AM<br>Subject: Re: [ARSLIST] ARDBC Plug-in Returns only Subset of Data -- Why?<br><br><br>Tim,<br><br>Just a few WAGS....<br><br>Check the data types for the ldap attributes that are not returned. (<br>Maybe they are not supported in v5.x but are in v7.x ?)<br><br>Maybe the ARS side is truncating the data due to a size/memory<br>constraint? (and thus you get a partial record)<br><br>HTH<br><br>--<br>Carey Matthew Black<br>Remedy Skilled Professional (RSP)<br>ARS = Action Request System(Remedy)<br><br>Love, then teach<br>Solution = People + Process + Tools<br>Fast, Accurate, Cheap.... Pick two.<br><br><br>On 10/26/07, Tim Widowfield <<a ymailto="mailto:[EMAIL PROTECTED]" href="mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</a>> wrote:<br>> Hey, everybody. I was wondering if anyone out there has seen this<br> issue before. It's got a lot of people baffled.<br>><br>><br>><br>> A customer has an AIX server running the latest patch for AR 5.1.2.<br> The target LDAP server is Novell, and it doesn't allow anonymous<br>browsing. When the Remedy daemons start up, all the plug-ins load<br>without a hitch. And in the configuration form, the parameters for<br>ARDBC look correct -- that is, the values are what we were told to use,<br>and they match what I'm using in Softerra's LDAP Browser.<br>><br>><br>><br>> However, when attempting to query the LDAP host the vendor form<br> exhibits strange behavior. It shows us only a subset of any given<br>person's record. For example, we can see the last name, first name,<br>and email address, but no location data. Even more strange is the<br>empty cn field. In database terms, we're getting all the rows, but<br>only some of the columns.<br>><br>><br>><br>> The base query we're using is pretty simple. It looks something like<br> this:<br>><br>><br>><br>> ldaps://[LDAP_Server]/o=[domain]??sub?(objectclass=*)<br>><br>><br >><br>> The customer has an AR System version 7 development server with<br> almost the exact same setup (same query, same credentials), and all the<br>data comes back as expected. Out of desperation, I imported the vendor<br>form onto their production 5.1.2 server, and the same thing happened as<br>on the development 5.1.2 machine: Swiss-cheese data.<br>> I've built new vendor forms from scratch, and I've even performed<br> surgery on def files, all to no avail.<br>><br>><br>> There are no errors in the plug-in logs.<br>> As far as the AR Server goes, there is no problem.<br>><br>><br>> I'm stumped. Any ideas?<br>><br>><br>><br>> --Tim<br><br>___________________________________________________________ _____________<br>_______<br><span>UNSUBSCRIBE or access ARSlist Archives at <a target="_blank" href="http://www.arslist.org";>www.arslist.org</a></span><br>ARSlist:"Whe re the Answers Are"<br><br>____________________________________________________________ ____________<br>_______<br><span>UNSUBSCRIBE or access ARSlist Archives at <a target="_blank" href="http://www.arslist.org";>www.arslist.org</a> ARSlist:"Where</span><br>the Answers Are"<br>The information contained in this email may be privileged, confidential or otherwise protected from disclosure. All persons are advised that they may face penalties under state and federal law for sharing this information with unauthorized individuals. If you received this email in error, please reply to the sender that you have received this information in error. Also, please delete this email after replying to the sender.<br><br>_________________________________________________________ ______________________<br><span>UNSUBSCRIBE or access ARSlist Archives at <a target="_blank" href="http://www.arslist.org";>www.arslist.org</a> ARSlist:"Where the Answers Are"</span><br></div><br></div></div></body></html> __20060125_______________________This posting was submitted with HTML in it___ --0-1178468522-1193421149=:48183-- _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are"
