Forum GLPI-Project

victorsina

Member

Registered: 2023-06-05

Posts: 2

Autentication integration with Active Directory on SAMBA LINUX SERVER

Hi All

First for all, thanks for this great software.

I have an issue regarding AD integration, but our AD is not running on windows, instead of that runs on a LINUX SAMBA server.
I follow the steps described in the howto, without succes.

This is the configuration

And the AD UO configuration

But the test always fail.

Any help will be appreciated.

Thanks
Victor

Last edited by victorsina (2023-06-07 19:55:17)

Kaya84

Member

Registered: 2019-06-13

Posts: 217

Re: Autentication integration with Active Directory on SAMBA LINUX SERVER

First of all try with http://jxplorer.org/ if u can connect to LDAP.

Then check logfiles for error details.

victorsina

Member

Registered: 2023-06-05

Posts: 2

Re: Autentication integration with Active Directory on SAMBA LINUX SERVER

Hi Kaya84

Thanks for your time.
Ussing jxplorer show me that the ldap implemented into SAMBA have this configuration as default:

Default: ldap server require strong auth = yes

I modified to No and the glpi ldap integration connects and work.
But, Im courious regarding security implications on this parameter?
Is possible to use the options:

allow_sasl_over_tls or yes  with the glpi ldap integration?

I saw that is possible to download the tls certificate and use it into glpi.
I will try on that to secure the communication.

Thanks for all.

Regards
Victor

Kaya84

Member

Registered: 2019-06-13

Posts: 217

Re: Autentication integration with Active Directory on SAMBA LINUX SERVER

If Samba server and glpi server are on the same LAN my opinion is that there are no problems to worry about (u must be on the switch to make paket sniffing ).

Otherwise, u need to import the certificate and try something about it.