UnityVersionControl - OnPremise - AD sync restrictions???

Hi there,

we have a configured AD as authentication type and it woks pretty well so far. currently we’re adding users one by one on each new repo (we sadly have to) which always takes a while until everybody is set up. for some repos we already tested to add AD goups and it also woked fine so far.

On a new repo we set up yesterday we’ve had the first time that a few group members didn’t see the new repo but orhers did. the group is filled correctly, ad connection is up and running (connection tested). I already switched back to add everybody one by one and now everybody is able to find the repo. I didn’t find that much information on this special topic.

are there any known restrictions when using ADgroups (name lenght)? would you recommend using ADGroups in general? We’d also like to switch server admin to a AD group cause we’re not allowed to share pwds. Are ther any restricions we should take care of? I don’t really know where to start digging

Many Thanks

Hi,

We are not aware of any restrictions on using AD groups. But note that when configuring permissions, if a user belongs to multiple groups, the permissions are overlapped and the deny always prevails. It could explain why some users belonging to some groups were not able to see the repos.

I don’t see any problem with setting the server owner to a group.

Regards,
Carlos.

hi there, good to know. thanks for your reply and sorry for my late response. best chris