Hi,
I have tried all documentations possible on this subject but cannot make the AD users login. I configured a new realm as per Paul Cannon's blog successfully. Configured AD and brought in required users and groups successfully. I have "DefaultAuthenticator" as the primary one. AD is second in line. "virtualize=true" option is set. I am able to login using WL id but not my AD id.
1. If I remove "virtualize=true" option, I am not able to login with either WLS userid or AD user id.
2. attribute settings are sAMAccountName. Proof that it is working correctly is because I can see the login ID's of AD users in my Users/groups.
3. I have not deleted the BISystemUser from WLS but matched passwords for both from EM.
4. system.user I changed password to match with AD's bissytemuser.
5. Global admin role added for bisystemuser
Operating System is AIX. Does that make a difference?
I also notice that I am not able to login to RPD in online mode.
I notice that when I try to add bissytemuser to any role( any AD user to any role), it gives me java exception lang errors.
I see this error in bi server log:
oracle.webservices.provider.ProviderException: javax.xml.ws.WebServiceException: BI Security Service Access Denied - credentials supplied in SOAP Message header failed authentication
I want to keep AD as the secondary authentication provider and still make it work. Could someone help me out please? Been struggling to make it work inspite of so much documentation and following all steps in those documentations.
Thanks,
Dan