Google Apps CNAME records - RM Unify federation

[jmak]

Hi all

 

Struggling in an area where I have even less knowledge than normal

 

I am trying to set up RM Unify to federate with Google Apps to provide single sign on. We're already using RM Unify for other services and we've been using Google Apps for well over a year, but I can't get one to authorise with the other. I've been asked by RM support to add a CNAME record with our domain registrar. I was pretty sure I'd already done this - I assumed that the domain and website wouldn't work without it. However, I ran a check with MX Lookup Tool - Check your DNS MX Records online - MxToolbox and it reports no CNAME records exist. We use 123-reg as our domain registrar and it shows CNAME records for our domain for the DNS entry www, mail, docs and calendar pointing to ghs.googlehosted.com. All of these services work: http://www.mydomain.co.uk points to our site which is hosted on Google.

 

In the Google admin console/domains section, the message at the top of the page is "Domain is verified." On our domain registrars site, I have a TXT/SPF record for the verification, pointing to google-site-verification. Is this where I'm missing the CNAME record? And if so can I change verification method at this stage? or do I need a CNAME record for the DNS "@" as well as www?

 

Confused as ever!

 

Thanks

[jmak]

I think I have found out where my DNS problems are, but have no idea how to fix it

 

The most important errors reported seem to be "Local NS list does not match Parent NS list" and "Primary Name Server Not Listed At Parent". Is this something I can fix by adding/changing records with Domain Name registrar, or do I have to get someone them to update something on my behalf?

 

Screenshot of reports attached:

 

Thanks

[jmak]

 

Any ideas please? Still stuck and waiting for a response from 123-Reg.

 

Thank you

[Edu-IT]

What is the CNAME for?

 

Step 3 and 5 here should be all you need to do?

https://www.rm.com/support/technicalarticle.asp?cref=tec3306517

[jmak]

Thanks @Edu-IT

 

I've been working through that exact document and get stuck at Step 5, Point 7:

 

Copy the displayed code from the Google page and paste it into the Access Code field on the RM Unify page and click Next.

RM Unify will then run a quick compatibility check to verify that your domain is properly set up and that you have enough licences. The results of this check will be displayed

 

The Google success code is returned, but when I paste it into the RM page, the compatibility check fails. I've worked through this with RM Unify Support viewing my screen and am apparently following the procedure correctly. The screen shot above is what they've come back with - they also sent me a screen shot from a school that has the service working. Their report has all green ticks compared to mine with some red crosses. I don't think I'll get any more support from RM until I get the mismatch between the Local NS and Parent NS sorted. At the minute my domain registrar is saying that they don't support any third party applications - I still think that this is something they should sort, but it's really not my area of expertise.........

[Edu-IT]

I can't see the screenshot you mention.

 

Are you able to attach it again?

[jmak]

Hi

 

Sorry for delay in response - I've re-uploaded the screenshot.....But seems like that was a red herring. Rep for 123-Reg: they did reset whatever black magic goes on in the background and the parent and local Name Server records now match. This seems like a "good thing", although I'm not sure on the actual impact. I did read that it can impact authorisation issues, but in this case it made no difference.

 

I am making progress. RM Support had a dig around in the Google Admin console and found a setting which hadn't been enabled: Security/API Reference/API Access: Enable API Access

 

Seems to have done the trick

 

Now stuck on the next bit: Manage Google Apps Email Addresses and Matched Accounts. When I press save, I get an error message: Sorry, an error occurred while processing your request. If this problem persists, please contact your establishment's RM Unify administrator

I've been through and checked the addresses and can't see any anomalies - I do have a mix of existing and unprovisioned accounts, but that's supposed to work. It's back with RM Support, but if anyone has solved this problem before, I'd be very grateful