LDAP connection to AD

TGI

Hi,
I am currently testing osTicket on its own web server. But I am struggling with the LDAP setup, connecting to AD. I have downloaded and installed the plugin and configured it. The control panel on OS seems happy but when I try and login with an AD account it does not automatically log me in and wont accept any credentials.

Do I need to "import" users or so something else to make all users active please? We are looking at having c. 3,000 users.
I have read some articles as to how to do this, but something seems amiss. I could not find a YouTube video ti run me through it all.
Thank you.

KevinTheJedi

TGI

Do you happen to have a self-signed certificate? If so, these are quite problematic these days and I would recommend switching to use Let'sEncrypt or a real SSL provider.

Cheers.

TGI

Hi
I've not been prompted for any certificate. We do have a wildcard certificate we use for authentication elsewhere that is provided by a Cert company so works well elsewhere.

All I am trying to do is to setup via the installed helpdesk on our local server, (so not one in the OS cloud) is the ability for users to be able to test this helpdesk. I have tried to setup via LDAP to AD and also tried the Microsoft route too using Azure, without any success.
Ideally want users to go to the URL and then either have to login with their usual credentials or ideally for it to recognise them and have SSO.

Any pointers greatly appreciated.
Thank you.

KevinTheJedi

TGI

Then you will need to do some debugging. I would check all your logs on the server to see what's happening. The URL rewriting could be borked, the connection could be blocked, etc. You just need to find a more detailed reason of why.

I would also recommend clearing any cache/cookies/sessions and retesting. Also, you can try incognito/private window or completely new browser.

Cheers.

TGI

Morning
Thanks for the reply, I should have put on my original post that I'd checked the logs already, my apologies. I've re-checked them and could not find anything amiss.

However... I believe I know what the issue is. I had thought that osTicket would not need us to create all the accounts within the OST system as it had AD integration. But from my understanding of the product all users who want to log a call will need to be created separately from their accounts on AD. This is not particularly practical for us as we are an education establishment and we have new users every day as they enrol on their courses. If I am wrong I am sure someone will correct me! 😄
I assume this is the same whether you host the system yourself or if you pay for the hosting with osTicket?
Our current (in house built) helpdesk just uses the users AD credentials and that allows them to log calls.

Thank you.

KevinTheJedi

TGI

I believe it should auto-create the User when they login and don’t have an existing account if you allow Public Registration. I can double check to make sure though.

And with paid hosted SupportSystem we do not support LDAP.

Cheers.

TGI

Hi Kevin,
Thanks for replying. I've tried multiple times to get a user logged on but it looks like they are not setup. Tried both Azure as well as LDAP to AD. On setup of both all appears normal and no errors. If you could clarify then that would be greatly appreciated.

On this login screen there is a link to create/register as a new user, when going to https://servicedesk.xxx.net/osTicket/login.php But that isn't ideal as we are dealing with c. 3,000 students and staff. This would mean them having to put all their details into the system when their details are already in there and it would be better if they just could use SSO or just sign in without having to enter details.. which know some students will be incorrect data,

As for the hosted version, I assumed that we would need to go down the Azure route, which is fine as we use that.