Multi LDAP authentication and LDAP Sync (1.2): Page 2

Multi LDAP authentication and LDAP Sync (1.2)

jaristigueta

Hello!Great work with this plugin! I just would like to know if this will work with osTicket 1.10.1? I'm having issues with error 500 when trying to syncronize users.Thank you!

jphilbert

@TicketManiak 1. You only need one ... I dont think both can work at the same time anyway..2. All you have to do is create it i the user info and map the LDAP value that it represents.

jphilbert

@jaristigueta Show me the log file.... seems like a common issue with some servers. working on a fix

Mattm

@[deleted]I am having real trouble getting your plugin to work at all and I am not sure why, I have attached some screenshots if you wouldn't mind taking a look and pointing me in the right direction.

jphilbert

@[deleted] what is the acctual problem... Will it not authenticate?

Mattm

@[deleted],Nothing seems to happen at all, idealy I want to sync all my users. I have turned on the verbose logging but when I check the logs they dont even seem to exist.

TicketManiak

jphilbert2. All you have to do is create it i the user info and map the LDAP value that it represents....could you be a little more specific about this? Where I can find this "user info"?

wizard210

So I'm still having some issues getting your plugin to work. I'll try to describe what I'm seeing.

I'm receiving errors on the sync. It looks like agents work but not my ldap users.

Sync executed on (February 14 2018 2 pm) next execution in (February 14 2018 2 pm)Total ldapusers: (0) Total agents: (3) Total Updated Users: (0) Execute Time: (0.009)

To help in my testing I have three ldap users set up in OsTicket.

Here is my search filter which works because I did an AD query with it and it returned all my users.

(&(objectCategory=person)(objectClass=user)(!userAccountControl.2.840.113556.1.4.803:=2))

Authentication mode is set to staff and client.

Ldap attributes: cn,telephonenumber,physicalDeliveryOfficeName,mail

sync map: name, phone,office,email

ldap sync filter: (&(sAMAccountType=805306368)(mail=*))

Also no one who is part of ldap can login. It just says access denied.

Any assistance would be appreciated.

jphilbert

Let me see what I can find.

jphilbert

New update ... should fix several problems.

Flynt81

Same here. The authentification and userlookup with v1.21 and osticket 1.11 ist working. Only the synchro doesnt. The log says every time 1 user updated. But nothing happens. V1.22 of the plugin for me doesnt work with osticket 1.11 at all. No authentification or lookup is possible.

ntozier

osTicket 1.11 is no longer supported. You should upgrade.

The plugin repo says that it was written and tested with:
version 1.10 to 1.11-rc1.

It does not look like they are maintaining it or upgraded it to work with 1.11, 1.12, 1.12.1, or 1.12.2

Flynt81

Thx. Is there an other possibility to sync user automatically with LDAP for 1.11+?

ntozier

The LDAP plugins do not really sync users. It allows auth for an existing usr to be LDAP.

There is the core Authentication::LDAP and AD plugin from osticket.com/download

If you want to Sync your users so you do not have to create them then there is a paid adSync plugin from software-mods. But you still need to have the LDAP plugin for them to authenticate against AD/LDAP. It autopmates the process of creating your users for you.

If you need to have multiple different domains authing against LDAP/AD then you would need to get this one that you are talking about working.

Flynt81

There is an auto-cron AD-Sync option in the Multi-LDAP Plugin and it worked with 1.10. The core provided LDAP plugin is for auth only, yes.
Seems like for now there is no other option except Scott's adSync plugin (Already have the reporting plugin) .

ECLAdmin

Well, what a bummer. I just found this plugin and was in the middle up configuring it only to see at the end of this thread that it no longer works for syncing AD to osTicket. Is the paid adSync plugin our only option now?

Flynt81

Looks like this is the only option. Maybe jphilbert will update his plugin.

Flynt81

Maybe this addon is working ... i used it with osticket 1.9 ... its an older script for an ad-sync. But it hasnt an osticket integration like other plugins.
https://github.com/Chefkeks/osTicket-Addons

ECLAdmin

Thanks! I'll take a snapshot of my VM and try it out.

secretbarker

Any ideas on why the LDAP lookup would work for one domain and not the other, but the sign on works for both domains? We have auto sign on working for both domains without issue. However, when searching for users who haven't logged in yet, the LDAP only finds users for one of the domains. If the user has signed in, it shows them obviously.

I've tinkered a bit with a few of the settings without much luck. Would appreciate any ideas / assistance.

Thank you!

jphilbert

secretbarker I updated a new version you might want to check it out. I am back from my other duties so I will be more active than before.

« Previous Page Next Page »