Groups LDAP Directory Link

nickkecooper · 2024-03-06 15:37:33

I need a little clarification / help. I have LDAP functioning and currently it just pulls all non-disabled users from the OU I need. I would like to map a user to a statically set group in GLPI. Our active directory has a lot of groups and most don't need to be in GLPI. So I have made static groups. So let's say the active directory user is a memeberof "IT". I want GLPI to look for that and then place them in the Admin group. How can I go about accomplishing this? I tried to do something like this , but it is not working even if I login to the user account. https:// ibb.co/0qzmWCP

cconard96 · 2024-03-06 16:26:37

You should be able to use the Authorization Assignment Rules with a criteria of "(LDAP) MemberOf" and an action for assigning the related GLPI group.

nickkecooper · 2024-03-06 17:56:08

Thank you. So I made the rule but it isn't adding the user to the group. Do I need to do a full resync or what kicks off this rule?

nickkecooper · 2024-03-06 18:04:55

See config here https:// ibb.co/5BtGzFf

cconard96 · 2024-03-06 22:45:40

Typically the rules are run when the user logs in. They should also be run when new users are imported from LDAP or they are synchronized with LDAP. You can test syncing a user in the Synchronization tab of one of the users.
For bulk synchronization, you can use the GLPI CLI command.

From the GLPI folder, running as www-data or whatever your web server user is:
bin/console glpi:ldap:synchronize_users -u

Check the documentation for the supported command line options.
https://glpi-user-documentation.readthe … nize-users

nickkecooper · 2024-03-06 22:56:22

I tried all options listed to update but the user still isn't added to that group. I will try another memberof to see if the * is messing up the sync.

nickkecooper · 2024-03-08 16:07:36

I tried without the * and it is still not working. Any help would be appreciated! Do I need to make the sync work anymore else or is the rules the only place that can place the user into a static group I created in GLPI?

nickkecooper · 2024-03-11 21:46:16

Figured it out! Need to use the distinguishedName not the Display Name. Found resolution at https:// forum.glpi-project.org/viewtopic.php?id=282718

Forum GLPI-Project

Announcement

#1 2024-03-06 15:37:33

Groups LDAP Directory Link

#2 2024-03-06 16:26:37

Re: Groups LDAP Directory Link

#3 2024-03-06 17:56:08

Re: Groups LDAP Directory Link

#4 2024-03-06 18:04:55

Re: Groups LDAP Directory Link

#5 2024-03-06 22:45:40

Re: Groups LDAP Directory Link

#6 2024-03-06 22:56:22

Re: Groups LDAP Directory Link

#7 2024-03-08 16:07:36

Re: Groups LDAP Directory Link

#8 2024-03-11 21:46:16

Re: Groups LDAP Directory Link

Board footer