We have specified LDAP sign on for CA Output Management Web Viewer but some users are able to sign in as mainframe users.

Products

• Output Management Document Viewer
• Output Management Web Viewer

Issue/Introduction

We have specified LDAP sign on for CA Output Management Web Viewer but some users are able to sign in as mainframe users.

Environment

LDAP

Cause

If there are errors when users attempt to sign in with LDAP, Web Viewer then tries mainframe signon.

Resolution

If users are getting LDAP errors that prevent them from logging in, then Web Viewer will try to logon with mainframe single sign. That is how LDAP users are able to sign in with a default user profile. That is the way Web Viewer is designed. 

Please check on the LDAP errors the users are getting to try to resolve them. Then they will get signed in with LDAP. 

This is specified in the documentation: 

Authentication Configuration 

You can select one of the following security configurations: 

• Mainframe Security then LDAP Security 
• LDAP Security then Mainframe Security 
• External Security (Customer Supplied Authentication Exits)

Additional Information

Configuration Tool Settings