8.1.12. Users via Domain Services

8.1.12.1. Background

Your version control system is connected to your Domain Services, but reports authors as realnames or email addresses instead of login names.

8.1.12.2. What can be configured?

With option /Project/VCSIntegration/vcs_mapping.vcs_account_callback you can configure a script hook that is being called with author names as reported by your version control system and can then map them to other names.

When using Active Directory and Windows Domain Services you can use the built-in features of Windows to do the mapping after having configured the correct LDAP query string.

8.1.12.3. What needs to be done?

You have to perform the following three things:

• On all agents executing axivion_ci you have to install the “Windows Remote Server Administration Tools (RSAT)” via separate download (for Windows client operating system) or the “AD DS Snap-Ins and Command-Line Tools” feature (it may be hidden below other “AD” top-level features) in Server Manager (for Windows server operating system).

• Find out the LDAP query for dsquery to convert realname/email address to login names and configure your project configuration accordingly.

• Run the axivion_ci processes using a registered Domain User (instead of a Local User).

After installation of the required prerequisites, you have a command line tool called dsquery available.

If you want to map from realnames to login names, you can most likely use this query string:

dsquery * forestroot ^
  -filter "(&(objectCategory=Person)(displayName=%1))" ^
  -attr sAMAccountName -l

If you want to map from email addresses to login names, most likely the following query can be used:

dsquery * forestroot ^
  -filter "(&(objectCategory=Person)(mail=%1))" ^
  -attr sAMAccountName -l

Those queries can either be directly configured as /Project/VCSIntegration/vcs_mapping.vcs_account_callback in your configuration, or you can wrap them in some batch file and call it.