Forum GLPI-Project

rayz0r

Member

Registered: 2008-11-04

Posts: 10

Still an Active Directory import problem

I have read all posts about AD integration here but still can't find a solution for my problem.

Using latest glpi version 0.71.2 (installed yesterday)
php 4.3.9, mysql 4.1.2, centos, apache 2.0.x
I have only 1 domain and couple OUs and groups and a lot of users.
I have successfully installed 0.71.2 glpi w/o any error.

When I import group, using filters like this:
Filter to search in groups: (objectclass=group)
Search filter for users: (&(objectclass=user)(objectclass=person))
It will find all groups in mydomain\users

If I change filter into:
Filter to search in groups: (&(objectclass=user)(objectclass=person))
Search filter for users: (&(objectclass=user)(objectclass=person))
It will find all users and groups in the whole domain

When I tried to import users. It looks there's no one user in this domain (shows a null user, but not "No users to be imported").
I tried different filters:
(&(objectclass=user)(objectclass=person))
(objectclass=user)
(objectclass=person)

but same result I get. Could anyone tell me what mistake I made here? it's weird...

Here is my authentication config:
Name: AD
Server: 10.xx.xx.xx (DC)
LDAP port: 389
Basedn: DC=mydomain,DC=com
rootdn: cn=glpi,cn=users,dc=mydomain,dc=com
Pass: xxx
login field: glpi
connection filter: (&(objectClass=user)(objectclass=person))
Use TLS: No
Time zone: GMT
How LDAP aliases should be handled: Never dereferenced (default)
Search type: Users & Groups
User attribute containing its groups:   memberof
Filter to search in groups:             (objectClass=group)
Group attribute containing its users:   member
Use DN in the search:                   Yes
Surname:                                givenname
First name:                             sn
Comments:   
E-mail:                                 mail
Phone:                                  telephonenumber
Phone2:                othertelephone
Mobile:  mobile

---

GLPI 0.71.2, Apache 2.0.52, php 5.1.6, mysql 4.1.20

wawa

GLPI-DEV

From: Montpellier / France

Registered: 2006-07-03

Posts: 6,019

Website

Re: Still an Active Directory import problem

try this filtrer : (&(objectClass=user)(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

rayz0r

Member

Registered: 2008-11-04

Posts: 10

Re: Still an Active Directory import problem

Still no luck
I tried everything possible. I also build another dc but still got this result
Filters I tried:
(&(objectClass=user)(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
(&(objectClass=user)(objectCategory=person))
(objectClass=user)
Still got a blank user

---

GLPI 0.71.2, Apache 2.0.52, php 5.1.6, mysql 4.1.20

wawa

GLPI-DEV

From: Montpellier / France

Registered: 2006-07-03

Posts: 6,019

Website

Re: Still an Active Directory import problem

you haven't use AD preconfiguration right ?
login field should not be glpi, but samaccountname

try to create you ldap in glpi again using the good template

rayz0r

Member

Registered: 2008-11-04

Posts: 10

Re: Still an Active Directory import problem

I used ad preconfiguration. And I created user glpi in myad\users. I also tried other users in different groups/OUs.
I also created quite a few LDAP links using different settings and users.

The thing is, I set glpi to debug mode and when I tried to import users, it gave me errors like this:
PHP ERROR: Undefined index: glpi in /var/www/html/glpi/inc/ldap.function.php at line 435
PHP ERROR: Undefined index: glpi in /var/www/html/glpi/inc/ldap.function.php at line 435
PHP ERROR: Undefined index: glpi in /var/www/html/glpi/inc/ldap.function.php at line 436
PHP ERROR: Undefined index: glpi in /var/www/html/glpi/inc/ldap.function.php at line 435

here's the code:

435   $ldap_users[$info[$ligne][$config_ldap->fields['ldap_login']][0]] = $info[$ligne][$config_ldap->fields['ldap_login']][0];
436   $user_infos[$info[$ligne][$config_ldap->fields['ldap_login']][0]]["timestamp"]=ldapStamp2UnixStamp($info[$ligne]['modifytimestamp'][0],$config_ldap->fields['timezone'],true);

There's no error when I import groups

I'm not good at coding php so I'm still trying to find the reason of this error. But this cannot b/c of incompatible with my php version, right?

Last edited by rayz0r (2008-11-04 12:17:35)

---

GLPI 0.71.2, Apache 2.0.52, php 5.1.6, mysql 4.1.20

wawa

GLPI-DEV

From: Montpellier / France

Registered: 2006-07-03

Posts: 6,019

Website

Re: Still an Active Directory import problem

yes, as I told you before the login field is incorrect...
check my previous message

rayz0r

Member

Registered: 2008-11-04

Posts: 10

Re: Still an Active Directory import problem

Grrr... I always thought it's the samaccount I created

Thanks man! Saved my ass

Last edited by rayz0r (2008-11-05 03:24:31)

---

GLPI 0.71.2, Apache 2.0.52, php 5.1.6, mysql 4.1.20

wawa

GLPI-DEV

From: Montpellier / France

Registered: 2006-07-03

Posts: 6,019

Website

Re: Still an Active Directory import problem

you're welcome,
I close the thread