GLPI with Active Directory, is the synchronization in the 2 ways?

jaovallea · 2022-09-16 17:34:02

Hello!!

Nethserver (7.9.2009) and GLPI 10.0.2:

In Proxmox, I have a VM for Nethserver, with the Active Directory and a CT (Debian 11) with GLPI 10.0.2, the connection did not work, so I had to adjust the policy in smb.conf "ldap server require strong auth = no" and it worked. However, when I’m syncing, what I’ve edited from a user via GLPI is lost, only what the AD has remains.

I have also tried GLPI 9.5.8 on another CT (Ubuntu 18.04) and no more. To test the connection to AD, I used phpldapadmin, from CT Debian 11, and all right, I was able to edit the AD records in Nethserver.

Is the synchronization in the 2 ways?

Thank you very much.

------------------------------------------
Server

Operating system: Linux svrglpi 5.15.30-2-pve #1 SMP PVE 5.15.30-3 (Fri, 22 Apr 2022 18:08:27 +0200) x86_64
PHP 8.0.22 fpm-fcgi (Core, FFI, PDO, Phar, Reflection, SPL, SimpleXML, Zend OPcache, apcu, bz2, calendar, cgi-fcgi, ctype, curl,
date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, intl, json, ldap, libxml, mbstring, mysqli, mysqlnd, openssl,
pcre, pdo_mysql, posix, readline, session, shmop, sockets, sodium, standard, sysvmsg, sysvsem, sysvshm, tokenizer, xml,
xmlreader, xmlrpc, xmlwriter, xsl, zip, zlib)
Setup: max_execution_time="30" memory_limit="128M" post_max_size="8M" safe_mode="" session.save_handler="files"
upload_max_filesize="2M"
Software: nginx/1.23.1
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36
Server Software: mariadb.org binary distribution
Server Version: 10.9.2-MariaDB-1:10.9.2+maria~deb11-log
Server SQL Mode: STRICT_TRANS_TABLES,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
Parameters: glpi@localhost/glpi
Host info: Localhost via UNIX socket

PHP version (8.0.22) is supported.PHP version (8.0.22) is supported.
Sessions configuration is OK.Sessions configuration is OK.
Allocated memory is sufficient.Allocated memory is sufficient.
mysqli extension is installed.mysqli extension is installed.
Following extensions are installed: dom, fileinfo, json, simplexml.Following extensions are installed: dom, fileinfo, json, simplexml.
curl extension is installed.curl extension is installed.
gd extension is installed.gd extension is installed.
intl extension is installed.intl extension is installed.
libxml extension is installed.libxml extension is installed.
zlib extension is installed.zlib extension is installed.
The constant SODIUM_CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES is present.The constant SODIUM_CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES is present.
Database engine version (10.9.2) is supported.Database engine version (10.9.2) is supported.
------------------------------------------

php.errors.log
------------------------------------------
[2022-09-03 14:25:45] glpiphplog.WARNING: Test logger
[2022-09-03 18:26:00] glpiphplog.WARNING: Test logger
[2022-09-05 14:54:19] glpiphplog.WARNING: Test logger
[2022-09-05 14:54:36] glpiphplog.WARNING: Test logger
[2022-09-05 15:21:17] glpiphplog.WARNING: Test logger
[2022-09-05 16:56:03] glpiphplog.WARNING: *** PHP Warning (2): Undefined array key "glpiactiveentities" in /usr/share/nginx/html/glpi/src/Dashboard/Dashboard.php at line 481
Backtrace :
src/Dashboard/Dashboard.php:155 Glpi\Dashboard\Dashboard::checkRights()
src/Dashboard/Grid.php:1539 Glpi\Dashboard\Dashboard->canViewCurrent()
src/Html.php:1399 Glpi\Dashboard\Grid::getDefaultDashboardForMenu()
src/Html.php:1507 Html::getMenuInfos()
src/Html.php:1766 Html::generateMenuSession()
marketplace/glpiinventory/index.php:51 Html::header()

[2022-09-05 16:56:03] glpiphplog.CRITICAL: *** Uncaught Exception TypeError: array_intersect(): Argument #2 must be of type array, null given in /usr/share/nginx/html/glpi/src/Dashboard/Dashboard.php at line 481
Backtrace :
src/Dashboard/Dashboard.php:481 array_intersect()
src/Dashboard/Dashboard.php:155 Glpi\Dashboard\Dashboard::checkRights()
src/Dashboard/Grid.php:1539 Glpi\Dashboard\Dashboard->canViewCurrent()
src/Html.php:1399 Glpi\Dashboard\Grid::getDefaultDashboardForMenu()
src/Html.php:1507 Html::getMenuInfos()
src/Html.php:1766 Html::generateMenuSession()
marketplace/glpiinventory/index.php:51 Html::header()

[2022-09-05 16:57:51] glpiphplog.WARNING: *** PHP Warning (2): Undefined array key "users_id" in /usr/share/nginx/html/glpi/src/Dashboard/Dashboard.php at line 559
Backtrace :
src/Dashboard/Dashboard.php:147 Glpi\Dashboard\Dashboard->isPrivate()
src/Dashboard/Grid.php:249 Glpi\Dashboard\Dashboard->canViewCurrent()
marketplace/glpiinventory/front/menu.php:51 Glpi\Dashboard\Grid->show()

[2022-09-08 15:43:48] glpiphplog.WARNING: *** PHP Warning (2): Undefined array key "users_id" in /usr/share/nginx/html/glpi/src/Dashboard/Dashboard.php at line 559
Backtrace :
src/Dashboard/Dashboard.php:147 Glpi\Dashboard\Dashboard->isPrivate()
src/Dashboard/Grid.php:249 Glpi\Dashboard\Dashboard->canViewCurrent()
marketplace/glpiinventory/front/menu.php:51 Glpi\Dashboard\Grid->show()

[2022-09-09 15:30:00] glpiphplog.WARNING: Test logger
[2022-09-09 15:46:10] glpiphplog.WARNING: Test logger
[2022-09-09 15:50:15] glpiphplog.DEBUG: Html::compileScss() in /usr/share/nginx/html/glpi/src/Html.php line 6820
Compile css/palettes/auror.scss {"user":"2@svrglpi"}
[2022-09-09 15:51:11] glpiphplog.DEBUG: Html::compileScss() in /usr/share/nginx/html/glpi/src/Html.php line 6820
Compile css/standalone/dashboard.scss {"user":"2@svrglpi"}
[2022-09-09 15:51:11] glpiphplog.DEBUG: Html::compileScss() in /usr/share/nginx/html/glpi/src/Html.php line 6820
Compile css/standalone/gridstack-grids.scss {"user":"2@svrglpi"}
[2022-09-09 15:51:14] glpiphplog.DEBUG: Html::compileScss() in /usr/share/nginx/html/glpi/src/Html.php line 6820
Compile css/standalone/chartist.scss {"user":"2@svrglpi"}
[2022-09-09 15:58:47] glpiphplog.WARNING: Test logger
[2022-09-12 13:26:31] glpiphplog.WARNING: Test logger
[2022-09-12 13:28:08] glpiphplog.WARNING: Test logger
[2022-09-12 13:31:28] glpiphplog.WARNING: Test logger
[2022-09-12 13:32:06] glpiphplog.WARNING: Test logger
[2022-09-12 13:32:21] glpiphplog.WARNING: Test logger
[2022-09-12 13:33:50] glpiphplog.WARNING: Test logger
[2022-09-12 13:34:50] glpiphplog.WARNING: Test logger
[2022-09-12 13:39:02] glpiphplog.WARNING: Test logger
[2022-09-12 13:39:14] glpiphplog.WARNING: Test logger
[2022-09-12 13:39:56] glpiphplog.WARNING: Test logger
[2022-09-12 13:54:33] glpiphplog.WARNING: Test logger
[2022-09-12 13:58:57] glpiphplog.WARNING: Test logger
[2022-09-12 14:02:05] glpiphplog.WARNING: Test logger
------------------------------------------

cconard96 · 2022-09-17 14:03:59

The LDAP sync is not 2-way. It only takes data from LDAP and populates fields in GLPI.

jaovallea · 2022-09-17 15:26:51

Okay, many thanks, I couldn’t find any information to confirm it. I am too newbie with GLPI, since its interface allows editing those records brought from LDAP, it gives the appearance that could be done. And for fear it was a bug I didn’t move forward with the implementation. Thanks again.

Last edited by jaovallea (2022-09-17 15:28:54)

Kaya84 · 2022-09-19 17:24:59

By the way, is better if u use a READ ONLY user for AD connection... I hope you didn't use the admin one.

Forum GLPI-Project

Announcement

#1 2022-09-16 17:34:02

GLPI with Active Directory, is the synchronization in the 2 ways?

#2 2022-09-17 14:03:59

Re: GLPI with Active Directory, is the synchronization in the 2 ways?

#3 2022-09-17 15:26:51

Re: GLPI with Active Directory, is the synchronization in the 2 ways?

#4 2022-09-19 17:24:59

Re: GLPI with Active Directory, is the synchronization in the 2 ways?

Board footer