Active directory domain migration And LDAP

jnyunt

Hi Guys,
Our current ticket system is v1.15.2 and LDAP plugin 0.6.2. All agents are authenticated through one of the DCs. The company is going through the changes at the moment and one of them is migrating to the new AD domain.
What I like to achieve is

LDAP server to be re-configured to new DC from new domain (worked)
Agents can log in using AD credentials (all credentials will be migrated to new domain)
History of assigned tickets to agents are not lost and keep them assigned
How can I achieve that? I have done the below so far and not working,
Test users were created on the current domain
I created a few tickets and assigned them to test users.
Then migrated those test users to the new domain. Re-configured the ldap server to one of the new DC.
Go to migrated agents (Admin Panel => Agent and clicked on Agent name that was migrated to the new domain, then removed the username, and retyped in, it popped up automatically from the new LDAP server, chose it, and saved)
tried to log in as migrated agents and was unable to log in (invalid username and password)
(so for sure, the agent AD username was migrated to the new AD because it can log in to new domain with the same username and password that was used on the old domain)

Thanks very much

KevinTheJedi

jnyunt

Can you check the database to make sure it actually updated the user account information?

Cheers.

jnyunt

Hi KevinTheJedi
Could you please guide me there please? Not sure which table should I be looking at? I checked ost_staff table and didn't see anything about AD or ldap in it , may be I overlooked.

Thanks

KevinTheJedi

jnyunt

The ost_staff.username value for the Agent in question should match the username used to authenticate with AD. Same thing for the email, the ost_staff.email should match the email used to authenticate with AD.

Cheers.

jnyunt

Hi Kevin,
We are migrating all users to the new domain, so the username and email address will be the same. But LDAP server will be changed to a new DC. So not sure where the new domain is saved in the database.

KevinTheJedi

jnyunt

In the plugin configuration (Admin Panel > Manage > Plugins > LDAP Plugin).

Cheers.

jnyunt

KevinTheJedi
Thanks , I was able to change the LDAP server to new domain. But I am still unable to login with migrated user. Getting "Access denied" . Does Osticket has log for authentication? I can create new agent from new domain and no problem logging in.
Thanks

KevinTheJedi

jnyunt

Yes but it’s not detailed at all. It’ll just say User/Agent Logged In, Failed Login Attempt, etc. You should review your AD logs to see detailed errors.

Cheers.

jnyunt

Thank again Kevin for helping patiently. I don't have access directly to new domain, so I can't check the log. But I can request. I did the test by asking new domain admin to change to some dummy email address of migrated user, different from previous email. Then I went to migrated agent and delete a few letter from username and then it popped up the username from new domain and filled up the new email address. So it meant Osticket was able to read the new domain AD. But it won't log me in. Then I changed the migrated agent' s password from Osticket and I was able to login with changed password. That told me that it seemed Osticket is not querying new AD for this user. On the another test, I was able to create new agent from new AD, they had no problem login in. Any idea !!!
Thanks