Any ideas on how to tie AD username and Password to SIMS.net

[timbo343]

Sorry if this has been posted before. We are running a vanilla windows 2003 network and was wondering is there a way for SIMS to tie into Active Directory so staff can input their school logons to access SIMS instead of having a seperate log name and password?

 

We have tried this already...

In System Manager, if you view the properties of a user, there is a magnifying glass icon next to their username. If you click this and you should be able to link the username with one in active directory.

 

That seemed to make sence, but when we tried to put our username and password for the domain into the SIMS.net logon box, SIMS throws an error up saying invalid user name/password. Even if you try it in the form of domain\username the username box turns red.

 

Can someone help out??

 

Thanks

 

Tim

[Mcshammer_dj]

you then need the change the connect.ini to use the trusted password from AD.

[Mcshammer_dj]

ConnectionType=Trusted

 

needs to be added

[timbo343]

ahhhh.... thank you

[Vegas]

You will also need to change all your SIMS usernames to the following format:

 

domain\username

[timbo343]

so our connect.ini file looks something like this:

 

[sIMSConnection]
ServerName=[i]ServerName[/i]\[i]SQLName[/i]
DatabaseName=[i]nameofdatabase[/i] 

 

Then what would i add??

 

[sIMSConnection
ServerName=[i]ServerName[/i]\[i]SQLName[/i]
DatabaseName=[i]nameofdatabase[/i]
ConnectionType=trusted

 

and where do i put in an AD username and password??

 

Thanks so much

 

Tim

Edited December 4, 2008 by timbo343

[Vegas]

Your SIMS usernames in System Manager need to be changed to:

 

domain\adusername

 

There is a thread somewhere on here about it.

[timbo343]

oh right i see... I thought i had to add an account in AD for SIMS to talk to... my mistake..

 

Thanks again

[timbo343]

but just reading http://www.edugeek.net/forums/mis-systems/15643-sims-net-active-directory-integration.html, by adding ConnectionType=Trusted to the connect.ini file which is located on the SIMS server rather than locally to the machine, will this still disable the login box for SIMS.net???

 

If so, that is not what i want to happen. I still want to use the SIMS.net logon box with the users AD username and password.

[Vegas]

It doesn't disable it, all it does is to give you 2 options to login to SIMS.

The first option is just 'Current Windows User' this is checked by default so the SIMS username and password box are greyed out.

Second is 'SIMS User'

All staff need do is to click 'OK'

Change your SIMS.ini on your local PC and see for yourself.

[timbo343]

ahhh, so it does... although that is all well and good, thats going one step too far for me.

What i am wanting to do is get the user to put in their username and password instead of just clicking ok, if you see what i mean.

Edited December 4, 2008 by timbo343

[Vegas]

Am I missing something here. If you want your staff to use use the SIMS login box then don't modify your SIMS.ini file in the first place.

[timbo343]

lol, kinda... i thought that would come up.. Right...

 

what i want is...

1. the sim.net logon box to display

2. the user has to input their AD username and password in them selves, not the SIMS username and password

3. They cannot just click ok to logon.

 

So, they click on sims.net -> log on box displays -> username: ADUsername Password: ADPassword

 

 

Not what we are wanting:

with the "connectiontype=trusted" added: you dont put in any ADusername & ADpassword, you Simply click ok. OR you log in with the SIMS.net username & password.

 

with the "connectiontype=trustedauto" added: SIMS opens it self.

 

 

Hope this makes sense.

[Vegas]

The only way I know to achieve this is to manually change you sims usernames to match your AD usernames

[timbo343]

I have posted a Change Request on the Capita website relating to this problem... If people could be be so kind and help me get this situation sorted out can you log into support.capitaes.co.uk. Hover over support and click on Change Request and type in this number... 0812-444118

 

Thanks

 

Tim Hobson

[localzuk]

I'm sorry, I don't see the value of your request - it doesn't make much sense. Why do you want staff to have to log in twice (ie. once into windows, and once into SIMS)?

[Heebeejeebee]

I'm sorry, I don't see the value of your request - it doesn't make much sense. Why do you want staff to have to log in twice (ie. once into windows, and once into SIMS)?

 

I can see why. It's probably because the staff leave themselves logged in and walk away from the machines!

 

With a single login students can still get into SIMS simply by clicking OK. With separate logins they may have access to the PC as the teacher but they probably don't know the password to get into SIMS.

 

Big stick AUP coupled with enforced DPA compliance is required in schools but is not always applied.

 

HBJB

[localzuk]

I can see why. It's probably because the staff leave themselves logged in and walk away from the machines!

 

With a single login students can still get into SIMS simply by clicking OK. With separate logins they may have access to the PC as the teacher but they probably don't know the password to get into SIMS.

 

Big stick AUP coupled with enforced DPA compliance is required in schools but is not always applied.

 

Then it isn't a technical problem that needs solving. It is a user problem. Even if people have to log in twice, that doesn't stop them leaving SIMS.net open on their computer and walking away.

[Vegas]

Then it isn't a technical problem that needs solving. It is a user problem. Even if people have to log in twice, that doesn't stop them leaving SIMS.net open on their computer and walking away.

 

Here here

[Heebeejeebee]

Then it isn't a technical problem that needs solving. It is a user problem. Even if people have to log in twice, that doesn't stop them leaving SIMS.net open on their computer and walking away.

 

Agreed! You're preaching to the converted chum.

 

I was just putting forward a scenario that may have lead to the request.

 

HBJB