[LDAP Import not updating user's Roles]

Hi Trevor,

Thank you. I have attached the file.

Many thanks,

Samuel

Hornbill_-_LDAP_Testing.zip

[LDAP Import not updating user's Roles]

Hi Trevor,

Thanks. I have run the script for maredw who should have the extra Job roles from the import and it hasnt worked  He only has the Self Service User and Basic User role applied.

I'm at a loss... will keep checking anyway.

Thanks,

Samuel

[LDAP Import not updating user's Roles]

On 19/05/2016 at 1:42 PM, TrevorKillick said:

Hi Samuel

Not a problem glad its all working for you now.

Regards

Trevor

Thanks Trevor. 

Is there a table where I can do a select query to truly see what Job Roles a user has? I am wondering whether or not it is actually assigning it to them but it's not showing in the Job Roles area.

And also now  i'm thinking about it, the last time I posted on here about it to give users the "Self Service Portal" role it actually added the Job Roles to via the LDAP Import, but not this time. Maybe something has changed? 

Thanks,

Samuel

[LDAP Import not updating user's Roles]

6 minutes ago, TrevorKillick said:

Hi Samuel

Ok the other thing to check is make sure each of the roles you specify has the Privilege level of Basic as you are assigning them to Basic Users and they can only have roles assigned to them that have the Privilege level of Basic and not User.



Kind Regards

Trevor Killick

maredw has a user type of "user" (as does everyone else i'm assigning these job roles to). Doesnt having the Basic User Role assigned to a "user" have any effect on adding additional Job Roles?

Thanks,

Samuel

[LDAP Import not updating user's Roles]

Hi Trevor,

If we look at maredw - these are his job roles after running the above import (please note maredw had these job roles since he was set up on the system manually quite some time ago):

The job roles i specified to assign are not showing up. I am unable to test as the user is currently unavailable but ideally would like to see it appear here. This happens with everyone who do not have at least one of the my the Job Roles against them.

Thanks,

Samuel

[LDAP Import not updating user's Roles]

Hi Trevor,

Sorry I got it now. These are the only errors that I get when running the smallest conf file:

Quote

1572907	04-Aug-16 2:22 PM	error	perf	13772	admin:userAddRole() Operation Invocation results: failure (478175232 B, 9 ms, 0 kB, 0 ms, 0 kB)
1572905	04-Aug-16 2:22 PM	error	sql	13772	MySQL Error 1062: Duplicate entry 'stecul-Self Service User' for key 'PRIMARY'
1572891	04-Aug-16 2:22 PM	error	perf	7752	admin:userAddRole() Operation Invocation results: failure (478175232 B, 10 ms, 0 kB, 0 ms, 0 kB)
1572889	04-Aug-16 2:22 PM	error	sql	7752	MySQL Error 1062: Duplicate entry 'maredw-Self Service User' for key 'PRIMARY'
1572875	04-Aug-16 2:22 PM	error	perf	8968	admin:userUpdate() Operation Invocation results: failure (478175232 B, 5 ms, 0 kB, 0 ms, 0 kB)
1572869	04-Aug-16 2:22 PM	error	perf	8940	admin:userUpdate() Operation Invocation results: failure (478175232 B, 5 ms, 0 kB, 0 ms, 0 kB)

 

[LDAP Import not updating user's Roles]

12 minutes ago, TrevorKillick said:

Hi Samuel

Log prefix is available in the latest version:

https://github.com/hornbill/goLDAPUserImport/releases/tag/v2.0.4

As for this error is there anything in the server log?

Kind Regards

Trevor Killick

Quote

2016/08/04 15:11:50 [DEBUG] ---- XMLMC LDAP Import Utility V2.0.3 ----
2016/08/04 15:11:50 [DEBUG] Flag - Config File AdministrationTOP.json
2016/08/04 15:11:50 [DEBUG] Flag - Zone eur
2016/08/04 15:11:50 [DEBUG] Flag - Dry Run false
2016/08/04 15:11:50 [DEBUG] Flag - Workers 4
2016/08/04 15:11:50 [WARN] 2.0.3 is not latest, you should upgrade to 2.0.4 by downloading the latest package Here https://github.com/hornbill/goLDAPUserImport/releases/tag/v2.0.4
2016/08/04 15:11:50 [DEBUG] Loading Config File: C:\TEMP\Hornbill - Testing/AdministrationTOP.json
2016/08/04 15:11:50 [DEBUG] Instance Endpoint https://eurapi.hornbill.com/****************/xmlmc/
2016/08/04 15:11:51 [DEBUG] Attempting Connection to LDAP... 
Server: ******************************
Port: ***
Type: 
Skip Verify: false
Debug: false
2016/08/04 15:11:51 [DEBUG] Creating LDAP Connection
2016/08/04 15:11:51 [DEBUG] LDAP Search Query 
{Server:************************ UserName:******************* Password:************* Port:*** ConnectionType: InsecureSkipVerify:false Scope:1 DerefAliases:1 SizeLimit:0 TimeLimit:0 TypesOnly:false Filter:(&(objectClass=user)(&(!(sAMAccountName=*GCSX*))(!(objectClass=Computer))(!(sAMAccountName=*test*))(!(sAMAccountName=*.admin))(givenName=*))) DSN:ou=administration,ou=users,ou=users & desktops,ou=***********,DC=************,DC=******,DC=***** Debug:false} ----
2016/08/04 15:11:51 [DEBUG] LDAP Results: 2
2016/08/04 15:11:51 [DEBUG] Processing Users
2016/08/04 15:11:51 2016/08/04 14:11:51 [DEBUG] Buffer For Job: 1 - Worker: 2 - User: maredw
2016/08/04 14:11:51 [DEBUG] Update User: maredw
2016/08/04 14:11:51 [DEBUG] LDAP Attribute for Site Lookup: [physicalDeliveryOfficeName]
2016/08/04 14:11:51 [DEBUG] Looking Up Site *************
2016/08/04 14:11:51 [DEBUG] Site Lookup found Id 1
2016/08/04 14:11:51 [ERROR] Unable to Load LDAP Attribute: telephoneNumber For Input Param: [telephoneNumber]
2016/08/04 14:11:51 [ERROR] Unable to Load LDAP Attribute: mobile For Input Param: [mobile]
2016/08/04 14:11:51 [DEBUG] Add Role to User: Self Service User
2016/08/04 14:11:51 [DEBUG] Add Role to User: Basic User Role
2016/08/04 14:11:51 [DEBUG] Add Role to User: MyLibrary User
2016/08/04 14:11:51 [DEBUG] Add Role to User: Asset Management User
2016/08/04 14:11:51 [DEBUG] Add Role to User: Collaboration Role
2016/08/04 14:11:51 [DEBUG] Add Role to User: Change Management User
2016/08/04 14:11:51 [DEBUG] Add Role to User: Incident Management User
2016/08/04 14:11:51 [DEBUG] Add Role to User: mailbox_it_service_desk
2016/08/04 14:11:51 [DEBUG] Add Role to User: My Boards
2016/08/04 14:11:51 [DEBUG] Add Role to User: Service Request User
2016/08/04 14:11:51 [ERROR] Unable to Assign Role to User: Error assigning one or more roles
2016/08/04 14:11:51 [DEBUG] Processing User Profile Data maredw
2016/08/04 14:11:51 [DEBUG] LDAP Attribute for Manager Lookup: [manager]
2016/08/04 14:11:51 [ERROR] Unable to Load LDAP Attribute: manager For Input Param: [manager]
2016/08/04 14:11:51 [DEBUG] User Profile Update Success

2016/08/04 15:11:51 2016/08/04 14:11:51 [DEBUG] Buffer For Job: 2 - Worker: 1 - User: stecul
2016/08/04 14:11:51 [DEBUG] Update User: stecul
2016/08/04 14:11:51 [DEBUG] LDAP Attribute for Site Lookup: [physicalDeliveryOfficeName]
2016/08/04 14:11:51 [DEBUG] Looking Up Site IMT ********
2016/08/04 14:11:51 [DEBUG] Site Lookup found Id 
2016/08/04 14:11:51 [ERROR] Unable to Load LDAP Attribute: telephoneNumber For Input Param: [telephoneNumber]
2016/08/04 14:11:51 [ERROR] Unable to Load LDAP Attribute: mobile For Input Param: [mobile]
2016/08/04 14:11:51 [DEBUG] Add Role to User: Self Service User
2016/08/04 14:11:51 [DEBUG] Add Role to User: Basic User Role
2016/08/04 14:11:51 [DEBUG] Add Role to User: MyLibrary User
2016/08/04 14:11:51 [DEBUG] Add Role to User: Asset Management User
2016/08/04 14:11:51 [DEBUG] Add Role to User: Collaboration Role
2016/08/04 14:11:51 [DEBUG] Add Role to User: Change Management User
2016/08/04 14:11:51 [DEBUG] Add Role to User: Incident Management User
2016/08/04 14:11:51 [DEBUG] Add Role to User: mailbox_it_service_desk
2016/08/04 14:11:51 [DEBUG] Add Role to User: My Boards
2016/08/04 14:11:51 [DEBUG] Add Role to User: Service Request User
2016/08/04 14:11:51 [ERROR] Unable to Assign Role to User: Error assigning one or more roles
2016/08/04 14:11:51 [DEBUG] Processing User Profile Data stecul
2016/08/04 14:11:51 [DEBUG] LDAP Attribute for Manager Lookup: [manager]
2016/08/04 14:11:51 [ERROR] Unable to Load LDAP Attribute: manager For Input Param: [manager]
2016/08/04 14:11:51 [DEBUG] User Profile Update Success

2016/08/04 15:11:51 [DEBUG] Updated: 0
2016/08/04 15:11:51 [DEBUG] Updated Skipped: 2
2016/08/04 15:11:51 [DEBUG] Created: 0
2016/08/04 15:11:51 [DEBUG] Created Skipped: 0
2016/08/04 15:11:51 [DEBUG] Profiles Updated: 2
2016/08/04 15:11:51 [DEBUG] Profiles Skipped: 0
2016/08/04 15:11:51 [DEBUG] Time Taken: 983.4362ms
2016/08/04 15:11:52 [DEBUG] ---- XMLMC LDAP Import Complete ---- 
 

That's all i get from the smallest conf result (it does the same thing with more users in other OU's too which is set in other conf files)

[LDAP Import not updating user's Roles]

Hi Trevor,

Cheers for that I will keep an eye out for this feature.

I have yet another question... I have been updating our AD so we can pull "Basic" users and "Users" from certain areas. I have enabled the flag "UpdateUserType" , and have already has "UserRoleAction" set to "Create".

For users that were Basic are now updating to User is fine, but for the extra job roles that I need assigned to some of them... it's not working:

Quote

2016/08/03 11:42:19 [DEBUG] Add Role to User: Self Service User
2016/08/03 11:42:19 [DEBUG] Add Role to User: Basic User Role
2016/08/03 11:42:19 [DEBUG] Add Role to User: MyLibrary User
2016/08/03 11:42:19 [DEBUG] Add Role to User: Asset Management User
2016/08/03 11:42:19 [DEBUG] Add Role to User: Collaboration Role
2016/08/03 11:42:19 [DEBUG] Add Role to User: Change Management User
2016/08/03 11:42:19 [DEBUG] Add Role to User: Incident Management User
2016/08/03 11:42:19 [DEBUG] Add Role to User: mailbox_it_service_desk
2016/08/03 11:42:19 [DEBUG] Add Role to User: My Boards
2016/08/03 11:42:19 [DEBUG] Add Role to User: Service Request User
2016/08/03 11:42:20 [ERROR] Unable to Assign Role to User: Error assigning one or more roles

Does that allow updating of current job roles by adding any new non-existing ones?

Thanks,

Samuel

[LDAP Import not updating user's Roles]

@TrevorKillick and @bob_dickinson

Thank you both for responding. I have improved on this by download Softera LDAP Browser, i am now visually able to define Filters, then copy the Filter string into the conf files.

I've also created a Batch file which will run LDAP_Import a few times, but for each run i've changed the conf file it looks at... and it works flawlessly (will take dryrun=true off once testing is completed)

Quote

- LDAP_Import.bat -
ldap_import.exe -dryrun=true -workers=4 -file=Desktop.json
ECHO ---------------------------------
ldap_import.exe -dryrun=true -workers=4 -file=NetworkServices.json
ECHO ---------------------------------
ldap_import.exe -dryrun=true -workers=4 -file=Applications.json
ECHO ---------------------------------
ldap_import.exe -dryrun=true -workers=4 -file=AdministrationTOP.json
ECHO ---------------------------------
ldap_import.exe -dryrun=true -workers=4 -file=Users.json

 

I have a request though... i was wondering if we could have a new feature where we can define what word to prefix at the front the log file as running this batch will produce multiple log files in the same format, with no visible way of know which conf file it was running for.

So to use the example BAT file above, i would expect it could look something like the following (for example):

Quote

- LDAP_Import.bat -
ldap_import.exe -dryrun=true -workers=4 -file=Desktop.json -prefix=Desktop
ECHO ---------------------------------
ldap_import.exe -dryrun=true -workers=4 -file=NetworkServices.json -prefix=NetworkServices
ECHO ---------------------------------
ldap_import.exe -dryrun=true -workers=4 -file=Applications.json -prefix=Applications
ECHO ---------------------------------
ldap_import.exe -dryrun=true -workers=4 -file=AdministrationTOP.json -prefix=AdminTop
ECHO ---------------------------------
ldap_import.exe -dryrun=true -workers=4 -file=Users.json -prefix=Users

Then the log file will look like the following (for example) Desktop_LDAP_User_Import_2016-08-03T10-50-54+01-00.log

Thanks,

Samuel

[LDAP Import not updating user's Roles]

Hello,

Another question - is it possible to use the "Filter": "(objectClass=user)", to do a "NOT" filter?

For example if we have usernames with .admin, could we filter to bring back everything EXCEPT anything with *.admin in the username Attribute? Can this be extended to other Attributes?

Thanks,

Samuel

[LDAP Import not updating user's Roles]

Hello,

I have a few questions:

1. I'm not sure if it's been asked but is it possible to have this import tool look at multiple DSN's within the conf?
2. How does Hornbill / LDAP_Import deal with users that do not exist in AD any more or are Archived? (for example if someone left the council)
3. Further investigation with regards to SSO is underway, how does Auto-Provisioning work with AD and Users? For example does it update if the user's details have been changed on the fly? Does this still require LDAP_Import to be run if Auto-Provisioning is turned on? (Sorry i dont have a great deal of knowledge in this area so might be asking the wrong question)

Thanks,

Samuel

[Queries Regarding Application Upgrades]

2 minutes ago, cchana said:

@samwoo because there may be multiple releases for a version, we keep the release notes the same for every release right now. We are adding any additional fixes as release notes to the top of the list. As Gerry has mentioned we are looking to improve this.

Cheers @cchana just a though if there is any new fixes/features maybe have them appear at the top in bold each time there is an update. Or even better, if there are any new additions to the changelog that the user hasn't seen yet then make it bold otherwise they will not be bold.

Samuel

[Self Service Queries]

On 25/07/2016 at 10:42 AM, samwoo said:

2. Can we change the size of the icons or how the Services / Catalogs are viewed in the Self Service portal (maybe a list for example) - users have said that it's cluttered and too large

@James Ainsworth has submitted a proposal from this post: 

 

On 25/07/2016 at 10:42 AM, samwoo said:

3. Is it possible to remove the large image or have a smaller one as it takes up a lot of space at the top of the screen (on some of our user's laptops, it takes over half the screen)

Question asked in this post: 

 

[Self Service Queries]

@James Ainsworth

On 27/07/2016 at 1:11 AM, James Ainsworth said:

We are currently looking at a change to make use of the existing Service Categories and provide some additional displays on the Portals based on these categories.  This Service Category can be set within the Service Details.  

Is this the type of option that you are looking for?

(I'm not sure why I have two posts with the same title... in this post but this is the main one.)
James are you able to elaborate a bit more on what this would mean going forward?

What I was looking for was a way to have an Applications Service with each business applications as a Sub-Service. When you click on the Sub-Service you get any forms / requests / FAQ's relevant to the Business Application.

Maybe have a checkbox in the Services area to enable "Sub Services" to only enable it against specific services.

See the following image as an example of how it would look in a hierarchical structure

This will allow customers to see fewer services on the main screen, so if they have a specific applications request then they would open the Applications service, then open the relevant Applications Sub-Service then fill out the relevant forms. 

Thanks,

Samuel

 

[Desktop Notifications sometimes not clear]

Cheers Daniel

[Desktop Notifications sometimes not clear]

Hello,

At random occasions (but very often) when desktop Notifications Popup the content is written in what appears to be something similar to flowcode... is is possible to have this make more sense? Such as the call Summary and Reference?

Also (this is always) when clicking on the Desktop Notification it takes us to a blank "Post" screen instead of the related Call / Activity / Comment.

Thanks,

Samuel

[Automatic close on reopened calls]

Sorry I do apologise i misread your post. Not sure about the Timer's for reopened calls sorry

[Automatic close on reopened calls]

Hi,

This is our solution: What we have is a task that is created after the call gets resolved. 

1. Human Task - Is the call resolved?
2. If the "Is the call resolved" Task = "Yes" then create a new Automatic Suspend - Wait for Resolution Task
3. Once the Analyst "Resolves" the call, a new Human Task is created with an expiry of 5 days.  This task contains 1 button ("Reopen Call?")
4. If the Human Task expires then the call will automatically close
5. If the analyst completes the Human Task by clicking on "Reopen Call?" they will need to provide a reason and then the call status will change to "Open"
6. Repeats the call from step 1 above

This will loop if the call is constantly reopened until the Human Task has expired after 5 days,

Sorry my post is a bit rushed if it doesn't make sense.

Is this the sort of info you are looking for?

Thanks,

Samuel

[Portal Home Page Image size]

If we could alter the grid size ourselves horizontally and vertically that would auto resize the icons / text wrapping that would be a great feature alongside some form of improvement to the image.

[Groupings in PC's and BPM]

Hi Neil,

Not quite what I mean but not a bad idea as well.

What i meant was to be able to group certain things manually so a few examples..

1. we could manually add all our Service Requests BPM's into a group called "Service Requests" or
2. All our Individual Applications BPM's into an "Applications" Group or
3. Even a specific "Outlook" group in PC's for all forms related to "Outlook" or
4. For a specific Applications we could group all it's relevant forms (incidents or service requests) so we can easily identify what form the application is using.
5. We could potentially group one BPM in multiple places so we know that it's being used twice etc

I wrote this post in a bit of a rush so i hope it makes sense.

Thanks,

Samuel

[Details Form - Drop down list ordering]

Hi Daniel,

Brilliant it'll be a great start to improve the Simple Lists in ways we've never done before.

Thanks,

Samuel

[Task Completion Mandatory Before Close]

Hi Michael,

There is a way you could do it...

Create the very last task with a decision that once completed automatically resolve the call... then go into the Service and disable the "Resolve Call" button against that Service.

The only downside is that you cannot write a "Resolve" message that gets included in the email to the customer once the call is resolved... unless i'm missing something?

Thanks,

Samuel

[SQL Date Issues]

Hi @Gerry,

Brilliant, i don't generally use MySQL but I can definitely see why we need to give each column a name as i've come across that in other SQL where the column becomes too long.

All resolved from my side - @Everton1878 does Gerry's advice resolve it for you?

Thanks,

Samuel

[Portal Home Page Image size]

Hi Martyn,

I have asked a similar question here: 

It's definitely better to have it as it's own topic. I agree that we should have some control over the size of the image or even remove it entirely... but I guess it would affect the bulletins in some way?

Thanks,

Samuel

[Copy and Paste in Progressive Capture]

Hello Neil,

Brilliant I will be looking forward to this feature. I will keep an eye out for the release and have a go at it.

Cheers,

Samuel.