You are not logged in.

Announcement

 Téléchargez la dernière version stable de GLPI      -     Et vous, que pouvez vous faire pour le projet GLPI ? :  Contribuer
 Download last stable version of GLPI                      -     What can you do for GLPI ? :  Contribute

#1 2019-01-16 13:07:02

acepero
Member
Registered: 2019-01-15
Posts: 8

Import User AD

Good Morning,

I'm having trouble importing users from my Active Directory to GLPI.

I make the connection satisfactorily, but then it is not able to bring users, and I do not know if it is because it has something more of the conifguration to the position.

Attached screenshots of the entire configuration of my AD connection.

As you do not import images, I attach a URL below that shows the screenshots

https: // imgur. com / a / ksBmdrf

Thanks for helping, greetings,

Atte .: Alberto

Offline

#2 2019-01-16 16:52:56

LuminousWings
Member
Registered: 2019-01-11
Posts: 18

Re: Import User AD

Is the test connection succesfull?
What happens when you go to administration - users - ldap directory link (yellow button) - import new users - click on search

Offline

#3 2019-01-17 10:23:25

acepero
Member
Registered: 2019-01-15
Posts: 8

Re: Import User AD

LuminousWings wrote:

Is the test connection succesfull?
What happens when you go to administration - users - ldap directory link (yellow button) - import new users - click on search

Good Morning,

It always tells me the same thing:

No user to import.

I have changed the configuration several times, and always with the successful connection test, but it always tells me the same message to import user, which does not find any user.

Offline

#4 2019-01-17 12:32:49

LuminousWings
Member
Registered: 2019-01-11
Posts: 18

Re: Import User AD

Can you post your ldap config (No pictures as I can't view those)? and where are the users located in your AD?

Last edited by LuminousWings (2019-01-17 12:34:19)

Offline

#5 2019-01-17 13:03:46

Langundo
Member
Registered: 2016-07-21
Posts: 71

Re: Import User AD

Hello acepero,

can you remove the connection filter for a test?

or you can have a look here: https://forum.glpi-project.org/viewtopic.php?id=30012


Debian 11.7 - PHP 7.4.33 - MariaDB 10.5.19 - 10.0.8-dev

Offline

#6 2019-01-17 16:51:25

acepero
Member
Registered: 2019-01-15
Posts: 8

Re: Import User AD

LuminousWings wrote:

Can you post your ldap config (No pictures as I can't view those)? and where are the users located in your AD?


Name: MyCompany                         
Default Server: Yes                  Active: Yes
Server: 10.X.X.X                             Port:389
Connection Filter: (&(objectClass=user)(objectCategory=person)(!userAccountControl: 1.2.840.113556.1.4.803:=2)))
Basedn: DC=MYCOMPANY,DC=LOCAL
rootdn: CN=user,OU=Apps,DC=MYCOMPANY,DC=LOCAL
Pass: *****
Login Field: samaccountname



The users are in different organizational units

Offline

#7 2019-01-17 18:15:04

Langundo
Member
Registered: 2016-07-21
Posts: 71

Re: Import User AD

For me it looks like that your rootdn is a container and not a user.
Specify a user as rootdn with Pass(word)


Debian 11.7 - PHP 7.4.33 - MariaDB 10.5.19 - 10.0.8-dev

Offline

#8 2019-01-18 09:33:02

LuminousWings
Member
Registered: 2019-01-11
Posts: 18

Re: Import User AD

acepero wrote:
LuminousWings wrote:

Can you post your ldap config (No pictures as I can't view those)? and where are the users located in your AD?


Name: MyCompany                         
Default Server: Yes                  Active: Yes
Server: 10.X.X.X                             Port:389
Connection Filter: (&(objectClass=user)(objectCategory=person)(!userAccountControl: 1.2.840.113556.1.4.803:=2)))
Basedn: DC=MYCOMPANY,DC=LOCAL
rootdn: CN=user,OU=Apps,DC=MYCOMPANY,DC=LOCAL
Pass: *****
Login Field: samaccountname



The users are in different organizational units

Your RootDN cn=user has to be an actual administrator user, so probably admin or administrator.

Offline

#9 2019-01-18 09:44:38

Jean-Christophe
Moderator
Registered: 2007-08-22
Posts: 734

Re: Import User AD

RootDN DOESN'T need to be an administrator of the domain.

It only requires AD read only access.
A "simple" user account is enough.

Offline

#10 2019-01-18 12:58:38

acepero
Member
Registered: 2019-01-15
Posts: 8

Re: Import User AD

Good Morning,

Thank you all for your help, I have already managed to make it work, the configuration was correct, from what I have been able to observe, the connection user did not save the password, and I suppose, that GLPI was not able to find users.

Offline

Board footer

Powered by FluxBB