Active directory integration

[dnicol]

I know how solved this is after the user gets the OK that he is valid we go into the swusers and swuseremails table and modify their loginapi_module and loginapu_userid to reflect the proper information in LDAP.

The reason why it fails for people who already have accounts is because there is a database contraint of unique on the email table in swuseremails. So when the AD tries to insert the record it fails.

I dont what the exact code we added was but I posted our open ldap stuff in the mods forum.

[landspeed]

Hey all. I purchased the SupportSuite today and searched the forums to see we still don't have any AD import ability so I sat down and wrote a quick LDAP search and import utility.

I'll upload it asap, I'm just running into one snag where I hit an LDAP search size limit and it stops after around 850 users.

I may need to fix the code to import sections of users at a time.

[landspeed]

An update to my last reply.

http://forums.kayako.com/showthread.php?p=46189

[whoapower]

Working on getting AD to function correctly. LDAP DLL is there, php.ini configured correctly, but when logging in I get a blank screen.

I've tried creating a new user: kayako, in AD, but still... just a blank screen with nothing in the source.

Ideas?

[markduffield]

HOLY CRIPES!

Finally got it working after about 10 hours of hair yanking.

totally my own fault - skipped a very basic step in the setup.

My environment is Win2k3/IIS/PHP/MYSQL - It works fine, I am now just trying to fine tune the permissions. A plain old domain user was not able to get it done, it's running with my domain admin account right now but It shouldn't need full control to everything.

I was getting the error:

Warning: ldap_bind() [function.ldap.bind]: Unable to bind to server: Invalid credentials in C:\inetpub.....

Changed it to a domain admin and it works. But I need to fix that - cant have that PW in the clear.

I urge those having problems to RE READ the first few posts in this thread. I missed the part about setting Microsoft AD in the Group Template! I was thrashing around the net trying to debug openLDAP! NOT FUN! I wanted to kill... but it works now so I am happy again.

....until the next module blows up.

[jamesM]

I am in the same boat markduffield My company has just merged and has tripped in size and I no longer look after the network or AD. I have to request a USER ID and detial the bare minimuim of rights this user ID needs to be able to run the LDAP query. So if any one knows this please let me know.

I also have to some how change that the password find to be hidden.

PHP Code:

<input type="text" class="swifttext" name="adpassword" id="adpassword" value="password" size="30" /> 


If any one knows how to do this please let me know as it is called from an arry in activedirectory.login.php but the form is some how set a little differently.

PHP Code:

<input type="password" class="swifttext" name="adpassword" id="adpassword" value="password" size="30" />