How does LDAP group matching work in the DX NetOps Portal.

Products

• Network Observability
• CA Performance Management

Issue/Introduction

When trying to configure LDAP groups, it does not work and when testing LDAP using SsoConfig the following error is seen:

"Could not determine account user.
java.lang.NullPointerException"

Environment

DX Netops Performance Management all releases.

Cause

The LDAP search looks at the attribute on the user that points to the groups the user is in and searches though those.

It does not get all the groups then search them for the user.

Resolution

In the LDAP groups configuration:

1) searchTag="<value>" should be set to the attribute on the user that contains the groups the user is a member of, most commonly memberOf.

2) user="<value> should be the same attribute used to identify the user, such as sAMAccountName