Clarity

  • 1.  Clarity PPM 13.3 and LDAP (Microsoft AD ) synchronization

    Posted Feb 20, 2017 12:43 PM

    I have a question around Clarity PPM and Microsoft Active Directory synchronization. We had this setup and working perfectly. Our server team reorganized / renamed a couple of the departments in our Active Directory and now Clarity PPM  fails the synchronization anytime a user is placed in our AD group to get synchronized with Clarity PPM if they belong to one of those departments. If I take any of these users, belonging to these departments our of my AD group then the sync job will complete successfully.

     

    My question is, does Clarity PPM (13.3) store the AD structure anywhere within PPM and compares it with the current AD structure and tries to match them? If our organization renames department OU's within Active Directory should the Clarity Administrator have to do anything on the Clarity side as well to incorporate these changes. See the error below from my clarity bg-ca log file.

     

    ERROR 2017-02-20 13:35:14,334 [Dispatch pool-5-thread-8 : bg@STJH1978 (tenant=clarity)] niku.njs (clarity:chrisflynn:10258177__1BF84F1F-04DE-4865-A562-62FE5DEEAA31:LDAP - Synchronize New and Changed Users) Error executing job: 5086284
    java.lang.Exception: Synchronize new and changed users job failed: com.niku.security.directory.DirectoryServiceException: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of:
     'OU=Department,DC=PSNL,DC=CA'
     ]; remaining name 'OU=Users,OU=Fisheries and Aquaculture,OU=Fisheries\,Forestry and Agrifoods,OU=Department'
     at com.niku.security.directory.LDAPAddModifySyncAgent.scheduledEventFired(LDAPAddModifySyncAgent.java:60)
     at com.niku.njs.Dispatcher$BGTask.run(Dispatcher.java:362)
     at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
     at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
     at java.lang.Thread.run(Thread.java:724)



  • 2.  Re: Clarity PPM 13.3 and LDAP (Microsoft AD ) synchronization

    Posted Feb 20, 2017 02:12 PM

    Hi

     

    Check the CSA configure, you may need to adjust the OU renamed.



  • 3.  Re: Clarity PPM 13.3 and LDAP (Microsoft AD ) synchronization

    Posted Feb 20, 2017 02:16 PM

    Where would I look to do that? Are there any instructions?

     

    Chris Flynn | Manager, Project Management Office - Solution Delivery

     

    Office of the Chief Information Officer

    Executive Council

    Government of Newfoundland & Labrador

    P.O. Box 8700,  40 Higgins  Line,   St. John's  NL  A1B 4J6

     

    709 729-4446 (t)[phone]  | 709 729-6767  (f)   | chrisflynn@gov.nl.ca



  • 4.  Re: Clarity PPM 13.3 and LDAP (Microsoft AD ) synchronization

    Posted Feb 20, 2017 02:24 PM

    Ok you are talking about the system administration tool. I don’t think that is the problem as all other Departments are still synchronizing fine. The Root Context, Search User, Group name, and password are all functioning fine. It is just the OU’s that had their name changed.

     

    Chris Flynn | Manager, Project Management Office - Solution Delivery

     

    Office of the Chief Information Officer

    Executive Council

    Government of Newfoundland & Labrador

    P.O. Box 8700,  40 Higgins  Line,   St. John's  NL  A1B 4J6

     

    709 729-4446 (t)[phone]  | 709 729-6767  (f)   | chrisflynn@gov.nl.ca



  • 5.  Re: Clarity PPM 13.3 and LDAP (Microsoft AD ) synchronization

    Posted Feb 20, 2017 02:46 PM

    Hi

     

    I'd suggest to recheck your CSA LDAP settings. CA PPM database does not store your AD structure., unless you have a customization. All details are in CSA (properties.xml) file.



  • 6.  Re: Clarity PPM 13.3 and LDAP (Microsoft AD ) synchronization

    Posted Feb 20, 2017 02:53 PM

    Everything looks good in the properties.xml file. Thanks for the suggestion. Seems to be just the AD OU’s that had the name changed.

     

    Chris Flynn | Manager, Project Management Office - Solution Delivery

     

    Office of the Chief Information Officer

    Executive Council

    Government of Newfoundland & Labrador

    P.O. Box 8700,  40 Higgins  Line,   St. John's  NL  A1B 4J6

     

    709 729-4446 (t)[phone]  | 709 729-6767  (f)   | chrisflynn@gov.nl.ca