Forum GLPI-Project

teide3718

Member

From: Canary Island - Spain

Registered: 2006-07-26

Posts: 25

Active Directory with complex architecture

Hello.
I have glpi integrated with the AD in w2003.
My AD structure is the following:

DC=,mycompany,DC=es
|
|-- CN=Users
     |
     |--CN=glpi ----> User for rootdn
|
|-- OU=SITE_1
     |
     |--OU=PCs
     |--OU=Users
|
|-- OU=SITE_n
     |
     |--OU=PCs
     |--OU=Users

My problem: the accounts within CN=Users are only validated and not those that are the rest of the structure.

Wich ADSI Edit i have given to permissions to the user "glpi" for read access to all the AD.

Some idea?

Thank

Last edited by teide3718 (2006-10-26 15:11:11)

teide3718

Member

From: Canary Island - Spain

Registered: 2006-07-26

Posts: 25

Re: Active Directory with complex architecture

My config:

ldap server: ldap://myldapserver.domainname.es
ldap port: 389
basedn: CN=Users,DC=domainname,DC=es
rootdn: CN=glpi,CN=Users,DC=domainname,DC=es
pass: "paswd for glpi user"
conn. filter: (objectClass=user)
login name: samaccountname
tls use: no

rootdn user: glpi
member of: guests and domain guests
security --> permissions:
  - Domain : glpi read all structure
  - Configuration: glpi nothing
  - Schema: glpi nothing

I use: GLPI ver 0.68.2 on MS W2003 Enterprise Edition
OcsInventory 1.0 RC3-1 witch Xampp
Apache 2
MySQL

mags

Member

From: CH

Registered: 2006-06-06

Posts: 12

Re: Active Directory with complex architecture

in this case your basedn should be simply: DC=domainname,DC=es
(adding CN=Users to it means it will only authenticate those in Users)

---

non toxique (si utilisé comme prescrit)

teide3718

Member

From: Canary Island - Spain

Registered: 2006-07-26

Posts: 25

Re: Active Directory with complex architecture

Correct, it works.

Thank and greeting.