AzMan scope level application groups seem to be broken



I've not been able to find anything on this, so it's time to ask for help.

I have an AzMan store in an ADAM instance using ADAM principals. There is
one application defined
and a multitude of scopes. ApplicationGroups are defined at all three
levels (store, app & scope).
If I assign an ADAM principal as a member of either a store or app level
group and include that group
in a role assignment, all is well. GetAssignedScopesPages, GetRoles and
AccessCheck return exactly
what they should.

However, if I assign a principal to an application group at the scope level
and use that group in a role
assignment, I get absolutely nothing back on calls to the above methods.
It's as if the ClientContext
interface is completely ignoring ApplicationGroups at the scope level.

At first I said no big deal, I'll just put all my app groups at the app
level but now it's becoming a
problem with administration. Each scope is a department and without scope
level app groups,
delegating administration to department heads is going to be problematic at
best.

Any help would be appreciated.



.



Relevant Pages

  • Re: ADAM - SSO and provisioning considerations
    ... single credential store. ... > that app will launch our app, so it can pass the username or SID on the ... ADAM doesn't simplify your architecture from what I can tell in your posts. ... LDAP bind is not an authentication process. ...
    (microsoft.public.windows.server.active_directory)
  • AzMan + ADAM + ASP .NET 2.0 problems
    ... I have a web app written in ASP .NET 2.0 which uses AzMan as authorisation ... On the test server, though, I have installed ADAM and created an AzMan ... store there. ...
    (microsoft.public.windows.server.active_directory)
  • Re: First Scope Advice (revised)
    ... > that most telescopes sold in these stores are junk ... ... If somebody's already bought a scope at a department store, ...
    (sci.astro.amateur)
  • Re: Store Wide Events on Additional Stores
    ... i came to the scope and rule ... >> all mailbox stores in the first storage group. ... >> store in the second storage group. ...
    (microsoft.public.exchange.development)
  • Re: Starter scope for 9 year old: StarBlast or SkyQuest?
    ... the store about exchanges. ... StarBlast or the equatorial version. ... use the scope on uneven ground. ... The big difference seems to be the mount type (altazimuth vs ...
    (sci.astro.amateur)