Monday, February 28, 2011

[20] Clarity and Windows 2008 Active Directory

Infrastructure group was rolling out Active Directory upgrade to Windows 2008. Clarity 12.0.x or below doesn't support Windows 2008 Active Directory.

We worked with Clarity and Microsoft team to find a solution. We didn't have Clarity version that supports 2008 AD and Infrastructure team didn't want to stop upgrading to Windows 2008 AD.

After a long battle and with so many calls/emails with Microsoft, we got a fix from them. This needs a registry change in Active Directory Server. It was tested and finally deployed on all Active Directory Servers. Now Clarity (12.0.x) runs fine with Windows 2008 AD.

[ Make following Registry changes in Windows 2008 R2 Domain controller servers]

HKLM\System\CurrentControlSet\Services\NTDS\Parameters
Add String value “DSA Heuristics”
Set the value to 000000000001

More detailed discussion can be found here , and also some explanation I logged as SangeetC (on 06-Aug-2010)

* Test it in your environment before moving changes in Production.

4 comments:

  1. Hello Sangeet,

    Alarmed by this blog entry I queried about the AD version used in the last project. They say it is 2008. They also say that no problems.
    It is not an upgrade of AD, but already 2008 and Clarity v12.0 SP 5 and Oracle 10. Why might they not have problems?

    With regards

    Martti K.

    ReplyDelete
  2. Hi Martti,

    When we had this issue in 12.0.3, we did contact CA and they suggested that AD 2008 is still not supported. They also acknowledged that similar issues were reported by others, when they used AD 2008.

    In Architecture guide of 12.0.6, it still didn't show AD 2008 in supported list.

    If AD 2008 on 12.0.x works then either CA changed some approach in 12.0.4 or above OR particular AD 2008 version/build may not have that issue.

    Thanks
    Sangeet

    ReplyDelete
  3. Thanks Sangeet,
    v12.1 PAS third edition says
    Supports any LDAP v3 compliant directory server
    and v12.1 SP1 should be out in a month or two.

    This far its been only tests, because there is still some work needed, but better watch it closed keep up to date backups.

    With regards

    Martti K.

    P.S. So you a a cricket guy. Congratulations for the success of India.

    ReplyDelete
  4. Hi Sangeet. Can you share your ticket number on this? We're experiencing this problem as well (12.1.0.5840) and before I ask my AD team to 'patch your stuff' I'm trying to find out from CA if they expect to fix this on their end. Unfortunately support appears to be working this as a 'new' issue - I'd like to save some people some work.

    Thanks!
    Rob Ensinger

    ReplyDelete