We have specified LDAP sign on for CA Output Management Web Viewer but some users are able to sign in as mainframe users.

Document ID : KB000005158
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

We have specified LDAP sign on for CA Output Management Web Viewer but some users are able to sign in as mainframe users.

Environment:
LDAP
Cause:

If there are errors when users attempt to sign in with LDAP, Web Viewer then tries mainframe signon.

Resolution:

If users are getting LDAP errors that prevent them from logging in, then Web Viewer will try to logon with mainframe single sign. That is how LDAP users are able to sign in with a default user profile. That is the way Web Viewer is designed. 

Please check on the LDAP errors the users are getting to try to resolve them. Then they will get signed in with LDAP. 

This is specified in the documentation: 

Authentication Configuration 

You can select one of the following security configurations: 

  • Mainframe Security then LDAP Security 
  • LDAP Security then Mainframe Security 
  • External Security (Customer Supplied Authentication Exits)
Additional Information: