adSync - Can you select the user group to be added/synched as Agents

JuVDC

Hey there,

Quick question. I am considering getting the adSync plugin, but I can't find much information about its configuration.
Our helpdesk is an internal support service. Right now we've installed OpenID to allow our users and agents to log in more easily via SSO, but before they can login the first time the user and agent account need to be created.

I thus think the adSync would be useful to manage and maintain the user account creation and update automatically.

However my worry is that adSync would create agent accounts for all users of our organization (10K+), whereas only a limited few should be agents and the rest should be end-users who are able to create tickets.

Is there a way to specify the user groups that should be created as agents, as users, and those that should not have an account at all?

KevinTheJedi

@JuVDC

This is not a core osTicket plugin. You will need to contact the developer of the plugin directly for further assistance.

Cheers.

JuVDC

KevinTheJedi aaaah okkkkaaayy. I thought the community's experience with this plugin could be useful for anyone facing this similar issue.

ntozier

I run this plugin (and have since it came out). It does not create Agent logins, it only creates user accounts.

JuVDC

ntozier Hey, okay, that's already some useful info, thanks!

ntozier

Very welcome. 🙂

I've actually meant to write a HowTo article for it, but never seem to quite find the time. Having it also create Agent accounts is something that has been suggested to the author (but I dont know if it will ever get added).

JuVDC

ntozier
Ah cool 😀

And so in your case, it creates/updates users accounts for all members of your organization?

ntozier

Yes. We have a collection of companies (5) in our AD, and it creates and updates user accounts for all of those OUs.

(Okay so I should have mentioned that we have a "All_Users" OU and each company has their own OU under that.)

JuVDC

Hey @ntozier thanks for the info!
Are you able to segment which users (groups) should have an account created?
(What does "OU" stand for btw?)

ntozier

OU is Organizational Unit. In Active Directory (AD) terms its like a folder or container.

As an example to put this visually, this is a [doctored] image of my Active Directory Users and Computer.

In this image "All_Users", "Board of Directors", and "Consultants" are OU's.

You should be able to use an AD Search base that only includes members of a specific group if you wanted to (using something like this):
https://stackoverflow.com/questions/9890049/query-to-list-all-users-of-a-certain-group

JuVDC

Thanks @ntozier !

Daedalus01

Just my two bits. I had the plugin as well and never got it to sync at all. Contacted the author directly and they stopped responding to me.

ntozier

@Daedalus01 I've installed the adsync plugin for several people and never had any problems getting it working. The most common problem I've seen is people messing up their Search Base.

Daedalus01

I had it searching the Entire Directory. It should have synced someone in, but it never did.

ntozier

That could likely be your issue. osTicket requires accounts have names and email addresses. It might have bombed when it got to users with out email addresses.

Did you turn on reporting to see what it was doing?

Are you running cron.php with a scheduler? (This is also required for IMAP/POP email collection)

JuVDC

Do you guys have any news from the ADSync dudes? We've bought the plugin last friday but we haven't received anything.... 🙁

ntozier

I'll reach out to Scottro for you.

JuVDC

Hey @ntozier thanks!
Scrottro replied finally 🙂 via the helpdesk. So for anyone else reading this, it's best to contact via the helpdesk: http://www.software-mods/support/

Cm-8

Hi @ntozier,
do you know if this plugin or another one can sync contact from other database different from AD?
Our database is a online ERP and it have not AD.
Thanks

Daedalus01

Hi Cm-8. Its actually not specific to Microsoft Active Directory. It actually syncs using the LDAP protocol. If you ERP system backend is LDAP based, then as long as connections are open to it from osTicket it should be able to connect and sync but cant guarantee it.