Active Directory Group Name is Displayed Multiple Times when Assigning Security Class Access

Active Directory Group Name is Displayed Multiple Times when Assigning Security Class Access [ID 1347829.1]
		Modified 16-SEP-2011     Type PROBLEM     Status PUBLISHED

In this Document
  Symptoms
  Changes
  Cause
  Solution

---

Applies to:

Hyperion Financial Management - Version: 11.1.1.3.00 to 11.1.1.3.00 - Release: 11.1 to 11.1
Information in this document applies to any platform.

Symptoms

When trying to assign security class access to the MSAD groups, the group names are displayed multiple times.

Changes

The Financial Management (HFM) system has been recently upgraded from an older version.

Cause

Improper upgrade or migration of OpenLDAP data.

Solution

Follow the steps below to resolve the issue of duplicate groups in OpenLDAP:

1. Take the backup of openLDAP-data directory
2. Take a backup of the shared services database repository
3. Export the native directory user, groups and provisioning using LCM (eg. Foundation Metadata>Shared Services in the shared services console)
4. Shutdown shared services and openLDAP services
5. Remove all files from the openLDAP-data directory
6. Run the openldap/configurehubldap.bat to recreate a default openldap database (note: openldap-data is now populated
7. Start the openLDAP and shared services windows services
8. Login to the shared services console
9. Synchronise the Native directory and the shared services database using the "Recover Native Directory" option in the HSS console under administration
10. Import back the provisioning information through LCM (eg. Foundation Metadata>Shared Services in the shared services console)