This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Can Orion/NPM/SAM authenticate against multiple AD Domains?

martian_monster over 5 years ago

We have a rather interesting setup here and I was wondering if we can have multiple domains authenticate to Solarwinds access. From what I can tell and what I found it looks like that is a NO. Can anyone comfirm or deny this? So far from what I found it looks like it is a no. Screen shot below -

Top Replies

0 rharland2012 over 5 years ago

I'm not positive on the answer to this, but are your multiple domains in one forest?
Cancel
Vote Up 0 Vote Down

Cancel
0 martian_monster over 5 years ago in reply to rharland2012

Different forests.
Cancel
Vote Up 0 Vote Down

Cancel
0 rharland2012 over 5 years ago in reply to martian_monster

I'll defer to other thwacksters or SW personnel to give the official answer, but my feeling is the same as yours - that would be a no.
Cancel
Vote Up 0 Vote Down

Cancel
0 martian_monster over 5 years ago

And to add to this can DPA do multiple AD Domains (or forests) as well?
Cancel
Vote Up 0 Vote Down

Cancel
0 rharland2012 over 5 years ago in reply to martian_monster

To quote from the help info on my DPA instance:
"If your domain users authenticate from a different domain than the one listed here (which is the original domain I configured), you must connect to the global catalog ports 3268 or 3269. The domain users must belong to a universal group, and that universal group must be added to DPA under Options>Administration>User Administration."
It still implies a requirement for either a common forest or trust between the domains of some sort.
Cancel
Vote Up +1 Vote Down

Cancel
0 rogdog over 5 years ago

Hi,
We have 2 domains (with a trust between them) in my environment and users from both domains can authenticate into Orion. I have also setup UDT to Sync user login details from both of these domains.
Cancel
Vote Up +1 Vote Down

Cancel
0 martian_monster over 5 years ago in reply to rogdog

We have a domain trust between our current forests but this is another 'external' domain so looks like we can only do the one unless there are trusts. Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 muckman over 4 years ago in reply to rogdog

rogdog Are you using LDAP or SAML authentication?
Cancel
Vote Up 0 Vote Down

Cancel
0 rogdog over 4 years ago in reply to muckman

LDAP only
Cancel
Vote Up 0 Vote Down

Cancel