Forum GLPI-Project

rt5504

Member

Registered: 2023-12-16

Posts: 24

LDAP which is the best way?

Hello Community,

We have now installed version 10 and are in the process of setting up our system.

We have connected our local AD through LDAP and imported the users.

Additionally, we have set up OAuth for the mail server to O365 integration.

Currently, on the login source (homepage), I see three sources:

    Internal database (where the GLPI root users and imported users are stored)
    The LDAP database
    The O365 database (for OAuth mail server integration)

We only need one source for login. Which one do you use, LDAP from AD or the internal database with imported users? If the internal database, within what timeframe do you synchronize what?

What settings are advisable to configure, and where exactly do I do that?

Many greetings and thank you in advance for your help.

cconard96

Moderator

Registered: 2018-07-31

Posts: 2,813

Website

Re: LDAP which is the best way?

"Internal database (where the GLPI root users and imported users are stored)"
This is not quite correct. While users from LDAP and other external sources ARE added to the GLPI database to keep track of info like their name, picture, etc, the password doesn't get saved. Therefore, external users are not authenticated against the GLPI database.
If you have an LDAP setup with all of your users in it, I would suggest using that for authentication.

https://glpi-user-documentation.readthe … index.html

---

GLPI Collaborator and Plugin Developer.
My non-English comments are automated translations. Sorry for any confusion that causes.
Mes commentaires non anglais sont des traductions automatiques. Désolé pour toute confusion qui cause.
Mis comentarios que no están en inglés son traducciones automáticas. Perdón por cualquier confusión que cause.