We have specified LDAP sign on for CA Output Management Web Viewer but some users are able to sign in as mainframe users.

book

Article ID: 5158

calendar_today

Updated On:

Products

CA Output Management Document Viewer CA Output Management Web Viewer

Issue/Introduction

We have specified LDAP sign on for CA Output Management Web Viewer but some users are able to sign in as mainframe users.

Cause

If there are errors when users attempt to sign in with LDAP, Web Viewer then tries mainframe signon.

Environment

LDAP

Resolution

If users are getting LDAP errors that prevent them from logging in, then Web Viewer will try to logon with mainframe single sign. That is how LDAP users are able to sign in with a default user profile. That is the way Web Viewer is designed. 

Please check on the LDAP errors the users are getting to try to resolve them. Then they will get signed in with LDAP. 

This is specified in the documentation: 

Authentication Configuration 

You can select one of the following security configurations: 

  • Mainframe Security then LDAP Security 
  • LDAP Security then Mainframe Security 
  • External Security (Customer Supplied Authentication Exits)

Additional Information

https://docops.ca.com/ca-output-management-web-viewer/12-1/en/configuring/run-the-configuration-tool/configuration-tool-settings#ConfigurationToolSettings-AuthenticationConfiguration