How to Recreate an LDAP User for Elastic Application Runtime

Products

• VMware Tanzu Application Service

Issue/Introduction

When troubleshooting LDAP user login issues, you may want to recreate the user in CF and UAA. You can follow these steps to recreate the user

Environment

Elastic Application Runtime

Resolution

 

1. Unset the user's roles and delete them from CF 
   • cf unset-org-role <USERNAME> <ORG> <ROLE> --origin ldap
   • cf unset-space-role <USERNAME> <ORG> <SPACE> <ROLE> --origin ldap
   • cf delete-user <USERNAME> --origin ldap
2. Delete the user in UAA
   • uaac user delete <USERNAME> --origin ldap
3. Login to CF again to recreate them in CF and UAA
   • cf login -a api.example.com --origin ldap
4. Create the user and set roles again
   • cf create-user <USERNAME> --origin ldap
   • cf set-org-role <USERNAME> <ORG> <ROLE> --origin ldap
   • cf set-space-role <USERNAME> <ORG> <SPACE> <ROLE> --origin ldap

 

Additional Information

Connect and login to Elastic Application Runtime UAA server