User Realm question

[beerme_]

Is it possible to have multiple user realms pointing to the same Auth. Servers? It doesn't seem that way, as when we tried it, it would only look at one of the user realms assigned to it.

Thanks,

Jim

[SA2000, v6.1R2]

Message Edited by beerme on 06-26-2008 01:47 PM

[kenlars_]

Multiple realms can certainly point to the same authentication server. What are you seeing that makes you think otherwise?

[beerme_]

We had two set up. One for Asia Support, one for USA Support. Under each, users were mapped by group to SupportStaff Asia and SupportStaff USA, respectfully. Essentially, each user role had its own realm. When we tried to log in with an account that was in the Asia group, it would search through the USA realm for the user and when it didn't find it, denied access due to no roles. I did a trace, and it did indeed pull the correct user information from the AD, but it wouldn't look under any other realm except the USA realm to try and match the user.

With both User Roles defined under the same realm, it seems to work fine.

Message Edited by beerme on 06-26-2008 02:19 PM

[kenlars_ · Accepted solution]

We seem to be speaking different languages.

A session is assigned to a realm based on the URL used to contact the SA. This is controlled by the Authentication - Signing In - Sign-in Policies. It doesn't make any sense to speak of a realm being searched. When you mention the "Asia realm being searched", what is being searched?

[beerme_]

Ok - I see what you're saying now. Another person had set that up, so I was unware of it. The URL was assigned to the Support USA realm, so it only looks in that realm when you connect to that URL. Thus my problem - the other realm was set up, but there wasn't a separate URL assigned to it. I didn't realize there were seprerate URLs and the other person had set the root URL to the Support USA realm. I just throught that there was only one URL and it searched the different realms for the appropriate user rights.

Thanks.