SAP HR- LDAP dn issue

[Former Member]

Hello Experts,

I am configuring SAP-HR with Active Directory. Could able to map most of the things in AD.

Whenever I am trying to change distinguishedName of a user in ADS using ABAP program it does not able to change DN.

Can somebody give me some help how I can change distinguished name in AD using ABAP program.

Thank you in advance.

Regards,

yogesh

[paul_power]

Hi Yogesh,

Unfortunately the AD password cannot be synchronized with your ABAP
system; thus, you cannot use the AD for authentication in an ABAP
system.

There are a few possibilities that I can suggest you:
- If you use a SAP Enterprise Portal, then AD authentication is possible
  - then you can use the logon tickets for SSO matters;
- Another solution is the SAP Netweaver SSO v1.0 product, where you can
  use the AD for authentication.

You cannot synchronize the passwords between AD and ABAP. I am
afraid your developers will not be able to convert the passwords, as
there is no way to know the password from both sides (at least the
password should be personal and unknown for all, except from the actual
user).

If you need more information about the NW SSO product, please access:
http://help.sap.com/nwsso10

I hope this helps.

Regards,

Paul

[Former Member]

Hi Paul,

Thank you for your reply.

Actually, my requirement is to change distinguished name if group of any user is changed in SAP employee master. Accordingly I am able to find such employees of which group is changed using fm LDAP_SEARCH but I am not able to change its distinguishedName in AD.

Even I am able to find out FM LDAP_RENAME for this requirement but I am not able to use it in my code.

Can you give me any example on fm ldap_rename if possible.

Thank you very much for your reply once again.

Regards,

Yogesh