Guide to setting up Active directory

[zag]

I'm trying to get single sign on working with sims.

 

Is there a simple guide anywhere for setting up active directory logins for sims?

 

- What happens to the old sims accounts?

- Is there still that stupid limitation on 2 character usernames?

Edited September 14, 2009 by zag

[matt40k]

Click on Documentation, Handbooks, Browse handbooks alphabetically, >>, >>, System Manager

 

Like most Capita documents, it is a good document. Believe it's page 15.

[dhicks]

What happens to the old sims accounts?

 

You aren't creating, or re-creating, accounts, you are merley telling SIMS that instead of the SIMS client requireing a password for a user to log in to SIMS, simply trust that the username as provided by Windows is correct. The user will still be using the same account as before, it's just that that account will no longer have a password associated with it, SIMS will simply trust Windows.

 

--

David Hicks

[_techie_]

David is correct. IMO this is a very bad way of doing things, and I HATE the way this has been implemented... Rather than just requesting the Windows username and password of the domain account again (ala Moodle/OWA/etc etc etc.), it just trusts the person who is logged onto machine, rather than the person using the machine (which could be different).

 

Just my opinion of course!

[rsenior]

Just a though is the single sign on for offices or classrooms?. Single sign in for sims in the class room my not be the best idea with students getting hold of staff password.

[zag]

Any ideas on how to get around the < 4 character username error?

 

http://img98.imageshack.us/img98/4827/errortu.jpg

[K.C.Leblanc]

Any ideas on how to get around the < 4 character username error?

 

http://img98.imageshack.us/img98/4827/errortu.jpg

 

try domainname\username

 

There is a thread with loads of stuff about sims single sign on, might be worth have a dig around.

[vikpaw]

Security issues aside, it should be straight forward to use and test.

 

In system manager, browse the users. i suggest testing it on a dummy account or your own account first.

 

Where you would normally enter the login name, click the magnifying glass and assuming it's all accessible to the server and you have permissions, you should be able to browse AD for a user account, so select the one you wish to use.

 

Then just save and the SIMS account that was being edited will have single sign-on through the selected AD account.

 

The only other thing you need to do is change the connect.ini

 

What i have done is set it up for myself only, so rather than my local connect.ini redirecting to the one on the sims server (S drive), i've my own local one found at :

 

C:\Program Files\SIMS\SIMS .net

 

with the following :

 

[sIMSConnection]
ServerName=SIMSserver\sims2005
DatabaseName=SIMS
ConnectionType=Trusted

 

With connection type as "Trusted" the login box prompts me to log into sims as the connected user or gives me the option to enter a username and password. I prefer this so that i have the option if someone comes to my office for help to log in as them. Normally, i just have to hit 'Enter' or click 'OK' to log in with my credentials.

 

To fully automate it, the connection type should be "TrustedAuto" i think, and that way running SIMS will automatically try to log in with the windows account, and i believe if that fails then you still get the login prompt after.

 

Once you've tested it, you can choose AD accounts for all the active SIMS users in System Manager and change the main connect.ini on the SIMS server or whereever the central one is kept.

 

I think that's all you need really. Obviously, the issues over password security and your policies on usage have to be sorted out before you can implement for all users. However, with the setup as i've described you can do it for a subset of users for example just the admin offices.

[zag]

Thanks vikpaw, got it up and running in 10mins with that guide.

 

Exactly what I was looking for.

 

Cheers.

[vikpaw]

welcome

[PhilNeal]

"Any ideas on how to get around the < 4 character username error?"

 

Sorry I don't understand what you are having a problem with?

[vikpaw]

@philneal, @ittech

 

The < 4 character limitation is on usernames if you want to create your own in system manager, that still happens.

 

It's not relevant to this thread unless the combination of your domain and username is less than 4 chars which is highly unlikely, even then i don't think it would be an issue.