Windows AD - First Logon

[TheGoldMineGuru]

BOEXI just installed on new server.

I have setup and enabled Windows AD authentication. I have added a WinAD group and properly enabled Single Sign-on, so the users should then be able to login.

When a user attempts to login for the first time, an "unspecified error" is displayed. The second attempt works fine. This happens every single time a user attempts to login for the first time. It appears that even though the WinAD group is added, specific users are not added. When they login for the first time, it creates the account, but does not let them log in, and instead, throws that error. The second attempt works seemingly because the user account has been created.

Any way around this? We will have 500 users and we'll get flooded with calls for this one error.

Thanks!

 

[techie2]

Do you SP1 installed. BO did fix couple of AD related issues and they are listed in file along with SP1 download.

 

[techie2]

Hi,

Were you able to figure out this one. I am implementing CRS11 and have SP1 installed too.

When I log in with user for the 1st time, I get the error message and 2nd time it is fine, basically same issue you mentioned above.

Were you able to find solution for that.

 

[TheGoldMineGuru]

Hello,

I call BO tech support and they said it took 24hrs to propogate the users. A week later, the error still occurs for new users. I have not figured it out, but I've been working on other issues. I'll be getting back on this one later this week. I'll post an answer, if I find one.

Thanks

 

[Turkbear]

Hi,
Use the CMC - Users folder to check on user's status..

In our CE/AD system, new users are added within 15 minutes and AD Groups are added immediately, but the users in that group may not show up for 15-20 minutes..





To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[TheGoldMineGuru]

Hi Turkbear,

That's what BOE said, except that the AD users may take 24hrs to show up. It's been over two weeks and no users.

Within the Windows AD window in Authentication, I add the group name but leave all the defaults. Is there anything else I am supposed to check?

Thanks

 

[Turkbear]

Hi,
Go to the Groups folder, select the Group and look at the members..Do they show up?

Also, after adding the Group do you highlight it ( click with mouse) and select 'Update' -- any error?





To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[TheGoldMineGuru]

The users that show up are those who have already logged on. The other users do not show up.

No errors after Updating as you specified.

Our web developer has come to the conclusion that we cannot bypass this error. I know there's got to be a way around it.

Thanks for the help!

 

[Turkbear]

Hi,
Ask your AD administrator if any policies are in place governing the propagation of Group members to apps that use Group membership to authenticate.






To Paraphrase:"The Help you get is proportional to the Help you give.."