[SOLVED] Synchronization with Active Directory

sIBajHYG · 2023-10-16 17:03:09

Good morning. Please tell me how to fix this problem?

My settings:

Sync code:

(&(objectClass=user)(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(samaccountname=*$)))

Last edited by sIBajHYG (2023-12-13 00:47:59)

cedric-anne · 2023-10-18 08:41:33

Hi,

This issue is probably due t the fact that you have 2 users with the same DN (the one visible in the error). If you delete permanently one of them (put it in trashbin then delete it from database), the problem should dissapear.

sIBajHYG · 2023-10-18 16:34:05

cedric-anne wrote:

Hi,
This issue is probably due t the fact that you have 2 users with the same DN (the one visible in the error). If you delete permanently one of them (put it in trashbin then delete it from database), the problem should dissapear.

Please tell me how best to fix this? As far as I understand, my mistake was that I created a user in AD with the same name for the “glpi” account (which is in glpi “from the box”). And now, I see that this entry “by default” was synchronized with the account from AD.
my AD account for synchronization:

duplicate accounts:

1:

2:

As far as I understand. account "1" - was created by glpi itself, but was changed after synchronization. account "2" - added from AD after synchronization.

I think there are 2 ways to solve the problem.
1. create a new account in AD with a unique name and reconfigure synchronization, and then delete "2" account "2"
2. create a new account "1" in glpi - with a unique name and then delete account "1" created by glpi.

Please tell me what is the best way to go. Which way is the safest? Is it possible to delete the "glpi" account with "Super Admin" rights, which was created by glpi itself (there are other users with "Super Admin" rights in glpi).

If I delete the default “glpi” user, then I’ll probably get a bunch of errors in the database, since many settings/categories of tickets/tickets/and much more were created on behalf of this user?

Last edited by sIBajHYG (2023-10-18 17:18:27)

sIBajHYG · 2023-10-18 17:10:38

I went along the 1st path. created a new user in AD for synchronization, disabled the old one and reconfigured synchronization in glpi for the new user. everything seems to be working correctly. The errors disappeared, no new ones appeared. Thanks for your help!

Forum GLPI-Project

Announcement

#1 2023-10-16 17:03:09

[SOLVED] Synchronization with Active Directory

#2 2023-10-18 08:41:33

Re: [SOLVED] Synchronization with Active Directory

#3 2023-10-18 16:34:05

Re: [SOLVED] Synchronization with Active Directory

#4 2023-10-18 17:10:38

Re: [SOLVED] Synchronization with Active Directory

Board footer