You are viewing limited content. For full access, please sign in.

Discussion

Discussion

Directory Server STS - How do remove need to manually add users to a group in order to access Forms?

posted on January 21, 2022

In Directory Server STS, which requires individual users be added to a DS group, before they can access Forms, how do you automate this?

I already tried adding their AD group to the DS group, but it requires the invidual account be added to the group anyways.

We want all new users to have basic access to Forms, without any manual steps or need to login to Directory Server.

0 0
replied on January 21, 2022 Show version history

I believe that if the user in an AD group that's a member of an LFDS group with Forms access that you should not need to add the user to the LFDS group individually. I also recall that there were past bugs, now fixed, where Forms did not properly evaluate inheritance for AD groups within LFDS groups. What specific versions of Forms and LFDS is this customer running?

0 0
replied on January 21, 2022

They have about as up to date versions of everything as you can get, before moving to 11.

Forms Version 10.4.5.282

Laserfiche Directory Server Version 10.4.5.623

The same AD group we use to automaticaly create user accounts is a member of Forms Users. Every user will still send me this screenshot though, until I add them explicitly to the Forms Users group.

0 0
replied on January 21, 2022

Check the "Group name (pre-Windows 2000)" attribute of the group you're trying to use for inheritance.

A couple years back we had an issue with some groups not syncing up in Forms and it ended up being old groups that generated incorrectly so the "group name" had numbers and such at the end and didn't match the account name.

1 0
replied on January 23, 2022

Ok I can ask IT, but the group IS working. User accounts added to this group get created, they are just denied any access to the Forms product.

0 0
replied on January 24, 2022

From that error it looks like the LFDS group is missing in the User Authentication section in Forms Configuration:

1 0
replied on January 25, 2022 Show version history

@████████, Forms 11 Update 2 has a new option to allow all users in LFDS access to Forms. My understanding is that we added that functionality specifically so customers can avoid potential sync issues when everyone in LFDS should be able to log into Forms anyway. Give it a spin and let us know if it addresses your issue here.

Consider trying/checking what @████████ pointed out first though, as that's plausibly the problem.

3 0
You are not allowed to follow up in this post.

Sign in to reply to this post.