Active Directory Logon

[jksaarinen]

Hi

We are planning to use eSupport internally and therefore would be convenient to have AD authetication ingtegrated with it. I have configured the LoginShare | Microsoft Active Directory options and changed the Template Group setting accordingly, but I end up with same error message every time:

Fatal error: Call to undefined function: ldap_connect() in /usr/local/apache2/htdocs/includes/LoginShare/activedirectory.login.php on line 40

We are using version: 3.00.04 (CVS, 12 Sep 2005 01:10 AM).

What are requirement for the AD authentication to work and is there quide how one can setup it correctly?

BR
JkSaarinen

[AnthonyIsDa]

We are evaluating V3 on Solaris and tried to set up AD. The same message appears in our logs when logging in to eSupport (user login). I was hoping to use AD for staff/admin as well, but so far it looks like the PHP is incomplete or has a typo in it. Since it's encrypted, there's no way to tell what's going on...

I hope an answer gets posted here soon. Our eval is for a short duration and so far the reviews are mixed.

Anthony

[AnthonyIsDa]

I contacted support and this was a compilation issue. I was using the package from sunfreeware.com which isn't compiled with LDAP. If you want to use AD/LDAP you need to compile PHP using the --with-ldap argument when you run ./configure.

Also - I had to grab the latest gz from php.net. The sunfreeware source (5.0.4) wouldn't work with Zend Optimizer from some reason. 5.0.5 did work.

Anthony

[Varun Shoor]

Hi Anthony,
Thanks for updating the thread.

Regards,

Varun Shoor

[jksaarinen]

Excellent! Thanks Anthony, I will also try the PHP recompile.

BR
JkSaarinen

[dcohn]

I had the same issue and once we compiled with LDAP I received a new error on line 62.

I could see the request get past my firewall and no errors on my server side of things.

It simply would not work.

Then yesterday I decided to try nine different combinations of how to enter the domain name, user names etc.

Well it seems that LDAP uses the older style login info from Windows. The NT4 compatibility login. In out case these were different names. I changed it to max then and it now works with some bugs.

The biggest issue is it imports all the users email addresses not just the promary.

Additionally it does not use the Default email account from Exchange in Kayako. Iy seems to use the last account in the users list.

The next issue is you you delete one email address in the all users list then the related user account is also deleted, even if that user had 5 other email addresses related to him/her.

If you manage the individual user and from that screen delete the unwanted addresses then it cleans it up properly.

Be nice if we could select a single primary domain to respond with. like the primary domain the site was created with for starters. Then alow us to delete all email addresses that are not that domain. That would work for me.

Could I simply clean up the database directly or will that create new problems?

While there is AD intergration it really needs some cleanup.

Lastly Varun it seems like you are management. May I ask you why support is so slow and poorly managed? You obviously know you have an excellent product. Why not offer real support even if you must charge a fee but get someone willing to really help. I am not wild about making decisions on how to set something up with no way to verify it is the correct setting. It may work but it may not be the correct method.

[brendan]

Originally Posted by dcohn

Additionally it does not use the Default email account from Exchange in Kayako. Iy seems to use the last account in the users list.

Hi dcohn, are you using Kayako in your organisation and did you find a solution to this?

We could probably go live if we get this issue resolved...