topic Using LDAP for authenticating to OnCommand Insight report in Active IQ Unified Manager Discussions

Using LDAP for authenticating to OnCommand Insight report

kortas — Thu, 05 Jun 2025 06:32:40 GMT

I am looking for instructions for configuring the LDAP settings dialog in the OnCommand insight report tools.

I would like users in a Windows 2003 or 2008 Active Directory to be able to log in /authenticate to view / create reports. Can someone suggest recommended values for the LDAP settings dialog? Thanks

Re: Using LDAP for authenticating to OnCommand Insight report

yuvaraju — Tue, 13 Mar 2012 06:34:49 GMT

Check the attached screenshots for reference. The screenshot provides an example of the parameters to be provided for AD configuration.

Here are the fields which require changes/inputs. Rest of the fields can be left with the default values shown.

1.) User principal Name – The value is generally “sAMAccountName” for Active Directory.

2.) LDAP Server – IP address of the LDAP server. Remember to give “ldap://” before the ip address.

3.) Domain – Domains configured in the Active directory server.

4.) Server Administrators – The group within the active directory server whose members can be allowed to work with admin portal.

5.) Report authors - The group within the active directory server whose members can be allowed to work with reporting portal with reporting author role.

6.) Report viewers - The group within the active directory server whose members can be allowed to work with reporting portal with reporting viewer role.

7.) Directory look up user – The name of the user who has credentials to perform lookup in the active directory.

8.) Directory look up password – The password of the directory look up user.

Re: Using LDAP for authenticating to OnCommand Insight report

JROBERTS6670 — Mon, 03 Jun 2013 14:59:35 GMT

Once LDAP is setup, and the groups are listed using the distinguished name of the group, how does the user login? [domain]\[username] or [username]?

Do I have to create a user under general settings for the people in the Active Directory group?

Thanks,

Jack

Re: Using LDAP for authenticating to OnCommand Insight report

CAMPBELLSI — Fri, 13 Sep 2013 01:30:49 GMT

Hey Jack,

It should be [domain]\[username] OCR is like most things very particular about it's LDAP config. You might have to check the group settings, this is where I went wrong.

Regards,

Simon

Re: Using LDAP for authenticating to OnCommand Insight report

RAJMEHTA1 — Wed, 09 Oct 2013 17:13:32 GMT

I have ldap configured as the screenshots but i am still unable to log in with a user account. Can anyone assist?

Re: Using LDAP for authenticating to OnCommand Insight report

bencodental — Wed, 04 Dec 2013 22:56:39 GMT

I have the same issue. It accepted my ldap config but no one can log in except the built in admin. What are we doing wrong, or is this a bug?

Re: Using LDAP for authenticating to OnCommand Insight report

bencodental — Wed, 04 Dec 2013 23:00:38 GMT

Nevermind, after re-looking at the screens and comparing them I found I missed DC=domain ( forgot to change it to the actual domain), and I also still had UserPrincipleName instead of sAMAccountName. Once I changed those 2 and resaved I can log in now w/ active directory. Hope that helps someone else out.