VMware Cloud Community
Thilo
Contributor
Contributor

Microsoft AD LDS for vCAC 6

Hello,

i've installed vCAC 6 as a pilot and we want to integrate Microsoft Lightweight Directory Services. I've created a new instance according to the Microsoft Tutorial http://technet.microsoft.com/en-us/library/cc770639/v=ws.10).aspx. The Connection test in tenant configuration works fine, also Access with Microsoft Tools and Open LDAP Browser is possible. When i want to select users from identity store in tenant configuration, the search list is empty and i got the message "Data might be incomplete".

Is there anyone with a successful configuration of vCAC 6 and Microsoft Lightweight Directory Services?

Thanks and regards,

Thilo

0 Kudos
2 Replies
firestartah
Virtuoso
Virtuoso

Hi,

Are you seeing any errors in the vCAC logs? I know when i did LDS for vCAC 5.2 I had to follow the below steps to create the azman store.

1. Download the AzManUtil.zip file from the VMware product page at http://www.vmware.com/

products.

2. Extract the contents of the zip file to a local directory.

3. Execute the application AzManUtil.exe.

4. Click Import.

5. To specify the Source file, click Browse, navigate to the location where you extracted the

AzManUtil.zip file, and select the security.xml file.

6. Select Active Directory store.

7. Specify the LDAP connection string including the OU at which you want to create the store, for

example, CN=AzManDataStore,OU=vCACAzManStore.

8. Click Import.

9. When the authorization store has been created, exit the AzManUtil application.

10. Grant the Model Manager Web service user administrative access to the AzMan store.

a. Launch the Authorization Manager administration tool (AzMan.msc).

b. In the navigation pane, right-click Authorization Manager and select Open Authorization

Store.

c. In the Open Authorization Store dialog, select Active Directory or Active Directory

Application Model (ADAM).

d. In the Store name field, enter the LDAP connection string that you specified in step 7.

e. Click OK.

f. Right-click the name of the authorization store you just opened and select Properties.

g. On the Security tab, ensure that Administrator is selected under Authorization Manager

user role.

h. Click Add.

i. In the Select Users, Computers, or Groups dialog, specify the credentials for the Model

Manager Web service user.

j. Click OK twice and exit the Authorization Manager tool.

If you found this or other information useful, please consider awarding points for "Correct" or "Helpful". Gregg http://thesaffageek.co.uk
0 Kudos
Thilo
Contributor
Contributor

Hi,

thanks for this. I did not use the AzMan Utility, may be this was the issue. Meanwhile i've solved it with Apache DS and a OpenLDAP Connection.

0 Kudos