Active directory expiration date

[#1]

Hi to all,

My organization has an EP7 SP14 installation on Windows Server 2003 sp2/MSSQLServer 2005 SP2

and the portal's UME is connected to the Active Directory with readonly connection.

We want to start setting expiration dates for users in the Active Direcrtory,

so far we tested it on several users and it didn't affect the portal.

Is this configuration aproved by SAP and does setting expiration dates for users

affects the portal in some way we couldn't find?

Thanks in advance,

Roey

[MichaelShea · Accepted solution]

Roey,

The portal (and thereby the UME) gets the account validity data from the local database. However, if a user attempts to log on, and the account is no longer valid in the LDAP, the LDAP should not return the user and the AS Java should produce an authentication error. Is this not the case?

-Michael

[Former Member · Accepted solution]

Yes Michael, thats the point.

I just want to know if that configuration works and more important

I want to be sure SAP supports that configuration.

I couldn't find notes on that issue.

Thanks in advance,

Roey

[MichaelShea · Accepted solution]

Roey,

Yes, that configuration works. See also: [LDAP Directory as Data Source|http://help.sap.com/saphelp_nw04s/helpdata/en/48/d1d13f7fb44c21e10000000a1550b0/frameset.htm]

In the topic is a link to the SAP Service Market Place with a list of the compatible LDAPs.

-Michael

[Former Member]

Hello,

no, that is a standard requirement of most businesses and th eportals unftionality is not affected by it.

As yu know - the users or their passwords are not storedin the Portal DB, they are grabbed from the LDAP when needed (i.e at Logon).

Regards,

Andi

[Former Member]

But in regards to password expirations, does the portal notify you that your password has expired when using AD as your datasource?