Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Unable to create a Directory Service User

Spinning up a new LEM 6.3.1 instance. When I go to Build > Users and click the "+" I do not get the option for "Directory Service User". I only get "LEM User" and "Import LEM user".

I have the Directory Service Query connector configured and I'm able to import groups from AD in Build > Groups.

I'm following the steps in this document: Enable an LDAP Connection Between the LEM and a Domain Controller to Import Directory Service Users and Groups - SolarWi…

What am I missing?

Thanks.

Find more posts tagged with

Accepted answers

curtisi

Yeah, I get you. We don't have a document specifically for the LDAP portion of the setup, but all the LDAP steps are contained within the steps for SSO configuration. So, open the SSO doc and then follow ONLY:

Open your Microsoft Management Console (MMC) and create at least one security group called ROLE_LEM_ADMINISTRATORS in Active Directory Users and Computers.
Jump down to the section titled "Configure access to Active Directory on your virtual appliance" and follow steps 1 to 5
Add the users you want to have access to the AD group(s) you created
Log into LEM with fully.qualified.contoso.domain\username and it should work

All comments

curtisi

6.3.1 does things a little differently. The Directory Service Query connector is only for Directory Service Groups. To enable LDAP authentication, you'll need to look at this document:

Configure single sign-on

Specifically:

Open your Microsoft Management Console (MMC) and create at least one security group called ROLE_LEM_ADMINISTRATORS in Active Directory Users and Computers.
Jump down to the section titled "Configure access to Active Directory on your virtual appliance" and follow steps 1 to 5
Add the users you want to have access to the AD group(s) you created
Log into LEM with fully.qualified.contoso.domain\username and it should work

jedidad

What if Kerberos is not being used?

curtisi

That's why I gave a list of the steps to follow for just LDAP. You only need Kerberos if you want pure SSO.

jedidad

Sorry, I'm not following you. Your post says "...to enable LDAP authentication, you'll need to look at this document..." Then you link to a document called: "Configure Single Sign On". That's what confused me.

We're not interested in SSO, just the ability to log in to LEM using AD credentials.

Thanks.

curtisi

Open your Microsoft Management Console (MMC) and create at least one security group called ROLE_LEM_ADMINISTRATORS in Active Directory Users and Computers.
Jump down to the section titled "Configure access to Active Directory on your virtual appliance" and follow steps 1 to 5
Add the users you want to have access to the AD group(s) you created
Log into LEM with fully.qualified.contoso.domain\username and it should work

jedidad

Ah, I got it now. Thanks!