Symptom
- This setting should be considered a Best Practice for all multi domain and multiple forest environments
- Mapping a group from another domain is successful but fails to authenticate a user from this domain, and the following error message appears:
- "The Active Directory Authentication plug in could not authenticate at this time. Please try again. If the problem persists, please contact your system administrator?
- Unable to map groups from 1 or more domains
- Unable to map groups from 1 or more AD forests
- Intermittent problems with active directory
- Users are not showing proper group membership (view user groups shows only everyone or less than the total groups the user belongs to in AD)
- Any suspected DNS issues with the AD plugin
- CMS logs show errors binding to a domain controller (s)
Read more...
Environment
- This issue affects all version of XI/BI currently
- SAP Business Objects Enterprise XIR2
- SAP Business Objects XI 3.1
- SAP BusinessObjects Business Intelligence Platform 4.x (SAP BI 4.0 / 4.1 / 4.2)
Product
SAP BusinessObjects Business Intelligence platform 4.0 ; SAP BusinessObjects Business Intelligence platform 4.1 ; SAP BusinessObjects Enterprise XI 3.1
Keywords
zie multiple domain, transitive , 4096226, second, non default , non-default use fqdn registry key AD windows active directory , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.