Skip to main content
commvault.com commvault.com
Answer

Security Active Directory integration

  • June 29, 2021
  • 3 replies
  • 1549 views
D
Novice
Forum|alt.badge.img+1

Hi all,

I want to use Active Directory as my identity provider… A security group was created in AD and added to the Commcell.

 

However, users in the Active Directory group cannot log on to the Command Center. See thewebserver.log entries

 

2968  122   06/29 12:13:58 122 ### FillLoginResponseWithError - errorCode: [587206108], [errorString: [Login denied to user [Bart Donders] . User has no credentials on this CommServe.]
2968  122   06/29 12:13:58 122 ### HandleGalaxyAndDomainLogins - ErrorCode: [587206108], ErrorString : [Login denied to user [Bart Donders] . User has no credentials on this CommServe.] in domain [domainname]
2968  122   06/29 12:13:58 122 ### FillLoginResponseWithError - errorCode: [587206108], [errorString: [Login denied to user [Bart Donders] . User has no credentials on this CommServe.]

What do I miss? Do I need to create each user manually?

 

Regards,

Bart

Best answer by Tim H

Hello @donders,

In the CommCell Console → CommCell Browser → Security→ Domains and Organizations → AD Domain in question → External groups → Properties → Associated entities tab, did you select the role and assign the entities?

3 replies

MichaelCapon
Vaulter
Forum|alt.badge.img+14

Hi @donders ,

What permissions/role has been assigned to this AD Group in the CommCell? - It’s likely the Group doesn’t have any permissions set yet in Commvault.

 

Best Regards,

Michael

D
Novice
Forum|alt.badge.img+1
  • dondersNovice
  • Author
  • Novice
  • June 29, 2021

Hi @MichaelCapon,


Attached is the custom role..

Users are not known at the moment in the Commcell…

The AD group is added… But as I can see now, the users are not automatically added to the system.

 

Regards,

Bart

1 Attachments
T
Vaulter
Forum|alt.badge.img+3
  • Tim HVaulter
  • Vaulter
  • Answer
  • July 1, 2021

Hello @donders,

In the CommCell Console → CommCell Browser → Security→ Domains and Organizations → AD Domain in question → External groups → Properties → Associated entities tab, did you select the role and assign the entities?

Terms & ConditionsCookie settingsAccessibility statement