That's a possibility, but it doesn't explain why other client tools (including a version 7 Remedy server) can use the same authentication credentials and see the entire record. --Tim
----- Original Message ---- From: "Durrant, Michael M. - ITSD" <[EMAIL PROTECTED]> To: arslist@ARSLIST.ORG Sent: Friday, October 26, 2007 1:05:24 PM Subject: Re: [ARSLIST] ARDBC Plug-in Returns only Subset of Data -- Why? Is there any kind of field/column-level access control in LDAP? -----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Tim Widowfield Sent: Friday, October 26, 2007 9:59 AM To: arslist@ARSLIST.ORG Subject: Re: ARDBC Plug-in Returns only Subset of Data -- Why? One of the data elements we're not getting is the 'cn', which is just a seven-character text attribute. The fullName attrib is char(15), and we're getting that one. It's almost as if we're only seeing one part of the aggregation. Like we're seeing only person data related to the record, but no location data. It's very strange. --Tim ----- Original Message ---- From: Carey Matthew Black <[EMAIL PROTECTED]> To: arslist@ARSLIST.ORG Sent: Friday, October 26, 2007 11:18:31 AM Subject: Re: [ARSLIST] ARDBC Plug-in Returns only Subset of Data -- Why? Tim, Just a few WAGS.... Check the data types for the ldap attributes that are not returned. ( Maybe they are not supported in v5.x but are in v7.x ?) Maybe the ARS side is truncating the data due to a size/memory constraint? (and thus you get a partial record) HTH -- Carey Matthew Black Remedy Skilled Professional (RSP) ARS = Action Request System(Remedy) Love, then teach Solution = People + Process + Tools Fast, Accurate, Cheap.... Pick two. On 10/26/07, Tim Widowfield <[EMAIL PROTECTED]> wrote: > Hey, everybody. I was wondering if anyone out there has seen this issue before. It's got a lot of people baffled. > > > > A customer has an AIX server running the latest patch for AR 5.1.2. The target LDAP server is Novell, and it doesn't allow anonymous browsing. When the Remedy daemons start up, all the plug-ins load without a hitch. And in the configuration form, the parameters for ARDBC look correct -- that is, the values are what we were told to use, and they match what I'm using in Softerra's LDAP Browser. > > > > However, when attempting to query the LDAP host the vendor form exhibits strange behavior. It shows us only a subset of any given person's record. For example, we can see the last name, first name, and email address, but no location data. Even more strange is the empty cn field. In database terms, we're getting all the rows, but only some of the columns. > > > > The base query we're using is pretty simple. It looks something like this: > > > > ldaps://[LDAP_Server]/o=[domain]??sub?(objectclass=*) > > > > The customer has an AR System version 7 development server with almost the exact same setup (same query, same credentials), and all the data comes back as expected. Out of desperation, I imported the vendor form onto their production 5.1.2 server, and the same thing happened as on the development 5.1.2 machine: Swiss-cheese data. > I've built new vendor forms from scratch, and I've even performed surgery on def files, all to no avail. > > > There are no errors in the plug-in logs. > As far as the AR Server goes, there is no problem. > > > I'm stumped. Any ideas? > > > > --Tim ________________________________________________________________________ _______ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are" ________________________________________________________________________ _______ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are" The information contained in this email may be privileged, confidential or otherwise protected from disclosure. All persons are advised that they may face penalties under state and federal law for sharing this information with unauthorized individuals. If you received this email in error, please reply to the sender that you have received this information in error. Also, please delete this email after replying to the sender. _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are" _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the Answers Are"
