AD integration with OA logon issue

[huyle]

We're starting to link our iLO/OA environments to AD (w2k3) and are running into a problem. So far, we're able to log onto the OA via the DN (distinguish name) just fine, but get "Invalid username/password" when trying the NetBIOS (domain\username) or FQDN (username@domain) names.

The OA-AD guide states we should be able to use both fine. Any ideas what configuration is wrong?

Works:
- cn=username,ou=......

Doesn't work:
- username
- DOMAIN\username
- username@domain

[James ~ Happy Dude]

Hello Huyle,

You Cannot login using the Username, you need to use the Account name.

For Example : If the Account name is "Sujith James" & my username is "James";

I wont be able to login using "James"; I need to use "Sujith James"

Because that format is not supported by LDAP !

Regards,
James.

[huyle]

Are you saying if:

DN is: "cn=First Last,ou=OU1,dc=dom,dc=ext"
and
User logon/samAccountName is: "FLast"

Then you can use "First Last" instead of "FLast"?

Either way, both don't work. The only thing that works is if you use the full DN.

Also, in the OA Directory Settings, there is an option for "Use NT Account Name Mapping (DOMAIN\username)". This sounds like what we're looking for, but doesn't appear to work. Is there something we've missed?

[xxzab]

I have the use NT Domain/username checked and it works for me, you might need to look at where you have the OA reading your info from AD it might be wrong, Also for iOL to use Domain/username you need "Initialize and script activX" enabled in IE security Settings also need "Use HTTP 1.1 through proxy connections" hope that helps you out

[Raghuarch]

Hi Huyle,

Please refer to
https://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1156517

Regards,
Raghuarch

[huyle]

Following the other thread, and after putting a specific Search Context, we are now able to user the DN and "username@domain" methods. However, the use of the NetBIOS (DOMAIN\username) option still does not work. Is this a bug in the firmware?

[Raghuarch]

Hi,

Its nice you made it to work.

Did you enable the Use NT Account Name Mapping (DOMAIN\username) option in OA.

Please refer to the attachment.

Regards,
Raghuarch

[Rob Leon]

What was the final fix to your search string to get the user@domain.com to work?