Forum GLPI-Project

doberk

Member

Registered: 2022-06-06

Posts: 18

Unable to import users from LDAP

Hello, I am a new GLPI user and I have troubles importing users from Microsoft Active Directory. After set the ldap directory the test runs fine, but a message "No user to be imported" appears when trying to import.
My system runs over Ubuntu 22.04, Apache 2, MySQL 8 and PHP 8.1

This is my directory' settings:

I think my settings are correct because the next script with the same settings works good in the same server, it shows the users of the domain:

Any idea where could be the problem? Thanks in advance.

Last edited by doberk (2022-06-06 18:50:28)

Kaya84

Member

Registered: 2019-06-13

Posts: 217

Re: Unable to import users from LDAP

I take a look at my configuration.
I see only those differences
Default server -> yes
Server -> i used ip. Is dns resolution working?
Connection filter-> (&(objectClass=user)(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
rootdn -> I created a GLPI user , and wrote it withuout @domain (glpi)
login field -> samaccountname
Synch field->  objectguid

doberk

Member

Registered: 2022-06-06

Posts: 18

Re: Unable to import users from LDAP

Hello, thanks for reply, I have tried your suggestions and finally one of them worked for me I am going to describe my tests because they could help any other user in the future.

I take a look at my configuration.
I see only those differences
Default server -> yes

I have 5 domains and only one of them can be the default one. Anyway, default server doesn't work either.

Server -> i used ip. Is dns resolution working?

Yes, resolution names are working. I think test would fail if dns doesn't work. Anyway, I have tried with the IP with the same result.

Connection filter-> (&(objectClass=user)(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

Documentation proposes this filter. I already had try with it, same result.

rootdn -> I created a GLPI user , and wrote it withuout @domain (glpi)

I have tried, but the user without domain makes the test fails. I need to use user@domain.com or domain\user in order to make the test working.

login field -> samaccountname

Yeah! This change makes it working

Synch field->  objectguid

No changes noted since the previous step did work, but I left this field set as you say anyway.

Thank you very much for your help