none
Active Directory Integration With Remedy ..

    Question

  • Hello every body ...
    I hope you doing fine :)
    This is Ahmad Aloiynin from Saudi Arabia and I work as System Admin at SBM.
    Actually, we have an issue with integrate Active Directory with BMC Remedy solution which is viewing the "division" attribute in Remedy. In other meaning, the Remedy team can't read/locate the "Division" attribute even when the attribute value has been set.
    We gave Remedy user Admin privilege to read all attributes but still can't read the Division value.  

    Full of hope that you can help me on this matter. 
    Thank you very much.

    Ahmad Aloiynin
    Sunday, August 25, 2013 12:34 PM

Answers

All replies

  • Hi,

    This problem is related to BMC Remedy, please refer to BMC Remedy related forum to get more professional support.

    Regards,


    Mandy Ye

    Monday, August 26, 2013 10:14 AM
  • Thank you very much for you reply Mr. Mandy.

    I am not sure if the issue is related to BMC Remedy or AD. Actually I read some article which says that we have to edit the schema and mark the "Division" attribute as "Replicate this attribute to the Global Catalog". 

    I am not sure if this can help?? Also I am afraid to touch the schema..

    Any advise :) 

    Monday, August 26, 2013 1:12 PM
  • Thank you very much for you reply Mr. Mandy.

    I am not sure if the issue is related to BMC Remedy or AD. Actually I read some article which says that we have to edit the schema and mark the "Division" attribute as "Replicate this attribute to the Global Catalog". 

    I am not sure if this can help?? Also I am afraid to touch the schema..

    Any advise :) 

    You can edit the division attribute using Attribute edition available in windows 2008 & above or using adsiedit tool. To display attribute like any other attribute, you have to refer below article. I would suggest you to test this in a lab & also, take a system state backup before playing with schema in production.

    You can use adsiedit tool to edit the schema objects, but be cautious, anything performed w/o testing and proper knowledge can put your environment into risk.

    Step-by-Step Guide to Using Active Directory Schema and Display Specifiers

    http://technet.microsoft.com/en-us/library/bb727064.aspx

    Discussion in the past.

    http://social.technet.microsoft.com/Forums/windowsserver/en-US/dd0e635f-6163-486f-85b0-09704b13dde6/adding-new-attribute-to-user-object-in-ad-windows-2003

    http://objectmix.com/microsoft-exchange/259597-how-enable-assistant-division-attributes.html


    Awinish Vishwakarma - MVP

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    Tuesday, August 27, 2013 4:45 AM
  • Thank you for your post. 

    I hope you guys understand my point .. The "Division" attribute already exists in AD and it's available to read and edit using Active Directory Users and Computers console through "User Properties" and then "Attribute Editor" but the issue is reading "Division" attribute value in Remedy System even when we give the "Remedy Service User" admin privilege in the domain.

    Thank you very much for your valuable posting and information.

    Tuesday, August 27, 2013 5:35 AM
  • Hello,

    on the DC where your Remedy program connect to check within the dssec.dat file for the division attribute and set it from "7" to "0". http://technet.microsoft.com/en-us/library/cc755430(v=ws.10).aspx should help you to find the correct one.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Tuesday, August 27, 2013 9:42 AM
  • Thank you very much Mr. Meinoif 

    Am able to see the data in the mentioned file .. But what is the meaning of change the division value from 7 to 0  ??  And what is the effects that may happen after change ?? 

    BTW, we can view some attributes and values but the division attribute we can't ..

     

    Tuesday, August 27, 2013 10:44 AM
  • Hello,

    within the dssec.dat file permissions for viewable, 0, or not viewable, 7,  are set to use Delegate control within AD delegation for attributes.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Tuesday, August 27, 2013 11:20 AM
  • If you mean the issue in permissions .. We give Remedy delegated permission to read all users attributes. 

    Also, we give Domain Admin rights to Remedy user. 

    Tuesday, August 27, 2013 11:44 AM
  • Thank you guys for your contributes.. 

    The Remedy team inform me that the issue has been fixed. 

    According to them, they copy the Division attribute from another remedy form and now it's working fine. So, the issue with Remedy not in Active Directory.

    Thank you very much.

    Wednesday, August 28, 2013 7:56 AM