How to integrate AD for ARD license server

[raju devolla]

Hi Team,

 

How do we integrate AD in ARD license server? can we integrate other domain controller instead of server domain. 

Please provide your inputs.

 

Regards,

Raju Devolla.

[Les Dover]

Hi Raju,

 

I need to have some terms clarified.  AD - I assumed this meant Agile Designer, but it could also be Active Directory.  So this needs to be clarified.   ARD - Agile Requirements Designer.  If this is not correct, please correct it for me.

 

Can we have more detail please? 

What is your specific license?

What version of ARD?

What is your current method of licensing?  Offline?  Online?  Concurrent License Server Model?

If AD means Active Directory, what are you trying to accomplish using AD?  Restrict by Group?

 

Please refer to the licensing documentation found here:

https://docops.ca.com/ca-agile-requirements-designer/2-3/en/installing/license-ca-agile-requirements-designer

 

Please note that if you are looking for Active Directory being used, this is not supported at this time, and it may not be able to be supported.  As a result, you will have to add in an Idea to put this on our Product Manager's desk to consider.  We ask that if you do put in an Idea that you also provide a Business Reason for this request.  We are checking in parallel to this response with Wibu to find out if it is even possible.

 

Your account Manager can definitely help in answering this question if we cannot sort it out here.

 

Cheers!
Les

[raju devolla]

Hi Les,

 

By AD i meant Active Directory.  Below are the details you have requested.

 

What is your specific license? We have work group and automation build licenses.

What version of ARD? 2.3

What is your current method of licensing?  Offline?  Online?  Concurrent License Server Model? License server model

If AD means Active Directory, what are you trying to accomplish using AD?  Restrict by Group? Yes i want to give license access to only a group.

 

We have set up concurrent license server in different Domain controller. we would like to integrate the Active directory of different domain controller is it possible?

 

Please let me know if i need to provide any other information. 

 

Regards,

Raju Devolla.

[Les Dover]

Hi Raju,

Thank you.  We will pass this onto the Developer to further clarify his communication with Wibu.

Cheers!
Les

[Les Dover]

Hi Raju,

 

Got the information back from Engineering.  AD is not in integrated into the current product.  As a result, you will have to add an Idea with a business case that allows our Product Manager to assess the feasibility of coding your request into the product vs. the business case, the impact against the current install base, as well as the applicability across the User Base.

 

The current method of "entrance"/"enabling" the product is through a third party Licensing from Wibu.  As you know, the current product has 3 types of licensing - Offline, Online, and Local License Server (Concurrent Licensing).  Active Directory is not used.  If there is a license available, they can use ARD providing there is an available license for their use.

 

One possible method of integrating AD with ARD with the minimal impact to the Current User Base's system setup is the following:

********************************************************************************

Add a Logon screen to ARD.  A parameter in a setup file is added that states AD_ENABLED=FALSE (this is the default). 

 

In the newly added Logon screen, if AD_ENABLED is FALSE, then the entire Logon screen does not appear and licensing checks continue as today. (This would then be the default.  There would be no impact to the current install base.) 

 

If AD_ENABLED is TRUE and appropriate AD connection information has been supplied via another new method to initialize and test AD authentication, the Logon method first displays a new Logon screen.  After credentials are entered, the Logon method checks to see if those credentials are enabled in a user defined AD group that allows ARD.  If not, then a message stating they are not allowed per their AD entitlements to use ARD.  If they have confirmed entitlement via the AD group, then the request for licensing is sent to the Wibu license server. If all the licenses are in use, then they receive a message stating all licenses are currently checked out.  If a license is available, then the product is opened.

*********************************************************************************

 

As you can see, this is not a trivial request even based on the brief outline above.  Please feel free to put forth your personal vision of how you would enable your new enhancement idea when you add it to the Communities page.

 

Cheers!

Les

[Les Dover]

Hi Raju,

 

We got additional information back from Engineering regarding their query to Wibu about possible integration of AD (Active Directory) in Code Meter WebAdmin.  Wibu mentions AD integration with 6.4 version of WebAdmin. However, it is in 6.3, and the option exists.   The entire operation is explained:

 

http://localhost:22350/$help/CmUserHelp/us/index.html?license_access_permissions.htm

 

You can also download the latest documentation here:

 

https://www.wibu.com/manuals-guides.html

 

CA ARD Developers/QA/Support have never tested this, and we do not know if this is what you are looking for.  We wanted to pass along our findings so you can have another option to explore outside of creating an Idea.  If you try this approach and it does NOT work on the latest GA of ARD, please open a Support case so Support can explore it further.

 

Cheers!
Les