Forum GLPI-Project

alex.brezina75

Member

Registered: 2022-07-15

Posts: 2

Unable to search for User Accounts in MS AD

Hello

I have troubles with GLPI 10.2 searching for user objects in AD.
The GLPI Server runs on Windows Server 2019 with IIS and PHP 8.0.21

In the php_error log I receive the following errors.

[2022-07-15 13:18:25] glpiphplog.WARNING:   *** PHP Warning (2): ldap_search(): Search: Operations error in C:\inetpub\wwwroot\glpi\src\AuthLDAP.php at line 1869
  Backtrace :
  src\AuthLDAP.php:1869                              ldap_search()
  src\AuthLDAP.php:2027                              AuthLDAP::searchForUsers()
  src\AuthLDAP.php:4449                              AuthLDAP::getAllUsers()
  src\AuthLDAP.php:1666                              AuthLDAP::getUsers()
  src\AuthLDAP.php:3942                              AuthLDAP::showLdapUsers()
  front\ldap.import.php:69                           AuthLDAP::searchUser()

I tried to search for users in simple and expert mode. Both without sucess
The Test connection to the AD Server succeeded over port 389 and the specified bind user.

I am thankfull for any help.

Best Regards
Alex

Rafumel1774

Member

Registered: 2019-05-11

Posts: 131

Re: Unable to search for User Accounts in MS AD

My guess is that your searchfilter is wrong. Please show the searchfilter.

alex.brezina75

Member

Registered: 2022-07-15

Posts: 2

Re: Unable to search for User Accounts in MS AD

Thanks for your reply

My guess is that your searchfilter is wrong. Please show the searchfilter.

SearchFilter if I want to import users in expert mode:
(& (samaccountname=*) (&(objectClass=user)(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))))

Best Regards
Alex

Kaya84

Member

Registered: 2019-06-13

Posts: 217

Re: Unable to search for User Accounts in MS AD

Try with:
(&(objectClass=user)(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

the part with (samaccountname=*) is useless