Issue
A replica of the ADAM database was created on a secondary Application Server and now when users try to log into the IMPAX Client they are unsuccessful.
Details
When creating a replica of an ADAM database on a secondary Application Server, the user must be logged in as a domain user. If they are logged in as the local machine administrator, instead of a domain user, the replica cannot be accessed properly. This causes errors and users are unable to log into the IMPAX Client. The following error is displayed in the AgfaHC.User.Security.Web.Services.log file:
ERROR 2006.09.13 15:00:13.538 (5144) [10.60.3.125,,Generated-450852A9-1-16,]
[] LdapDacBase.Compare: Unable to read from LDAP server using the negotiated
user credentials Exception: AgfaHC.DirectoryServices.Ldap.LdapException Message:
No Such Attribute - CN=Agfa,CN=healthcare,DC=agfa,DC=com Source:
AgfaHC.DirectoryServices.Ldap at
AgfaHC.DirectoryServices.Ldap.Ldap.ExecuteOnConnection(LdapCommand* cmd,
LdapConnection connection) at AgfaHC.Data.SqlClient.LdapDacBase.Compare(String dn,
String attributeName, String val)
To update the access to the ADAM replica, the local machine administrator must be added to the ADAM database.
Solution
To add the local machine administrator to the ADAM database
On the secondary Application Server, log in as the local machine administrator.
Select Start > All Programs > ADAM > ADAM ADSI Edit.
In the left pane, navigate to Data > CN=healthcare,dc=agfa,dc-com > CN=Roles.
In the list of roles in the right pane, double-click CN=Administrators.
The CN=Administrators Properties dialog is displayed.
In the list of attributes, select member and click Edit.
In the Multi-valued Distinguished Name With Security Principal Editor dialog, click Add Windows Account.
In the Select Users or Groups dialog, click Locations.
In the Enter Network Password dialog, click Cancel.
In the Locations dialog, select the machine name and click OK.
In the Select Users or Groups dialog, in the Enter the object names to select field, type impaxserveruser and click Check Names.
The field is populated with machinename\ImpaxServerUser.
Click OK.
Perform an IISRESET.
Select Start > Run.
In the Open dialog, type CMD and press Enter.
At the prompt, type iisreset and press Enter.
After IIS has been restarted successfully, close the dialog.
 | Note: This procedure must be completed on each Application Server where the ADAM database is being replicated. |