You are viewing limited content. For full access, please sign in.

Question

Question

Licence Manager rules and restricted licences

asked on March 3, 2016

Hi,

Directory Server rules do not seem to be applying correctly for one of our customers.

We have Retrieval, Restricted and Full licences to allocate.  There are 4 AD groups Readers, Coders, Approvers and Administrators.  The rules for directory synchronisation are set up to apply licences as follows and in this order :

Readers - Retreival
Approvers - Restricted
Coders - Full
Administrators - Full

However, a user who is in both the Approvers and Coders group is only getting a restricted licence.  Is this because Restricted is a special type of licence ?

This is Directory Server 9.2.1 on Server 2012R2

thanks,
Ian

0 0

Answer

SELECTED ANSWER
replied on March 9, 2016

The fix will be in a patch released for LFDS 10, not in the original release of LFDS 10 (LFDS 10 is already out).

We don't have an exact release date, but we are currently working on the patch, and it should be available soon (within a couple weeks).

0 0

Replies

replied on March 3, 2016

The order of the AD synch rules matters. They're applied top-down, not aggregated or assigning the highest license specified. So if Coders is before Approvers, the user would end up with restricted license

0 0
replied on March 3, 2016

Thanks Miruna,

The order of the rules is as i listed, but it still ends up with a Restricted licence

thanks,

Ian

0 0
replied on March 3, 2016

Is it possible you're running out of Full licenses?

0 0
replied on March 3, 2016

We have plenty of licences available :-

 

0 0
replied on March 5, 2016

Hi Ian,

There appears to be a bug in Directory Server with rule order not being correctly enforced. We have filed the issue (bug 141376), and we plan to include it next time we release fixes for LFDS 10 (which should be soon). Please note that this fix would be for LFDS 10, so you would need to upgrade to apply the fix.

For now, you can manually assign the license to the user that is getting the incorrect licenses, and exempt them from synchronization.

Sorry for the inconvenience, and thank you for bringing this issue to our attention.

0 0
replied on March 6, 2016 Show version history

Hi Brianna,

Thanks for letting me know.  Unfortunately it will effect a number of users - only one so far as we have just started roll-out.  I'll have to advise the client to turn off synchronisation and do the allocation manually so they are in control of the licenses being assigned.

Is there a target date for the LFDS 10 release ? 

 

0 0
SELECTED ANSWER
replied on March 9, 2016

The fix will be in a patch released for LFDS 10, not in the original release of LFDS 10 (LFDS 10 is already out).

We don't have an exact release date, but we are currently working on the patch, and it should be available soon (within a couple weeks).

0 0
replied on March 29, 2016

Hi, just revisiting for confirmation. I assume that LFDS 10 does not inter operate with LF 9.2.1 components? So I'll need to upgrade all components to version 10 not just LFDS ?

0 0
replied on April 18, 2016

It depends what you are using Directory Server for. If you just want to use the License Manager functionality (e.g., licensing products and users, but not use Single-Sign On), you can use LFDS 10 with 9.2.1 products. It sounds like that's what you need for now, so you should be fine.

However, if you want to use the new features like Single Sign-On and the new Laserfiche Users, you would need to upgrade the other products.

In case you were not aware, Update 1 for LFDS 10 has been release and does contain this fix.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.