Active directory integration

[Hybrid]

Well that issue is now resolved with special thanks to Varun for his excellent support.

The problem was because we had the e-mail addresses all in the e-mail field on the profiles. The SWIFT backend doesnt use this by default so that needed to be changed.

Now we have a fully functioning version and we are now very happy!!

Thanks to everyone who helped us out.

[Varun Shoor]

No Problem, Just a note that the updated LoginShare will be available in the next CVS commit for other users with similar issues.

Regards,

Varun Shoor

[deepfresh]

Hello Varun,

Is it already in the CSV Build 06 Dec 2005 01:10 AM??

I have the same issue here and this would save me a lot of work.

Thanks
Deep

[Varun Shoor]

Its now in the latest .27 build.

Regards,

Varun Shoor

[deepfresh]

Hello Varun,

Great, for the first time it is working now my support desk. Wonderfull.

The only section now, which has to be improved is the report section. there are just

4 reports I can create from SDesk to manage my employees and this is to little.

Are there any work in progress?

(What I am missing is the possibility to manage reports with custom fields. We have setup the SD with ticket class, like Incident, Call, Request for change and so on and it would be nice to create report per section.

Thanks a lot.

Deep

[kipper3d]

I would highly recommend using open directory instead of active directory. Active directory itself is buggy as hell.

[kaviar]

Originally Posted by Hybrid

04 Dec 2005 10:21:32 PM: Connecting to LDAP Server: 172.16.0.1:389
04 Dec 2005 10:21:32 PM: Connected!
04 Dec 2005 10:21:32 PM: Binded to: CN=administrator, CN=Users, DC=STBEDES, DC=internal, PASS: ******
04 Dec 2005 10:21:32 PM: Starting the validation process
04 Dec 2005 10:21:32 PM: Connecting to LDAP Server (AGAIN): 172.16.0.1:389
04 Dec 2005 10:21:32 PM: Connected!
04 Dec 2005 10:21:32 PM: User Binded to: CN=administrator, CN=Users, DC=STBEDES, DC=internal, PASS: ******
04 Dec 2005 10:21:32 PM: Registering User:

How do you view this? I've also been having a lot of trouble setting up AD, looking through every page in this thread as well as the knowledge base. Still no luck. Our users are buried within 3 or 4 subdirectories in AD.

Cheers

Kaviar

[kaviar]

Hi

Sorry to double post. Basically we have many different sites in the form of organisational units. in each OU, there are sub menu's, 'computers' and 'users'. Everytime i put in the settings i get an error invalid username and password, no matter which account it try. Here are the settings i'm putting in:

Active Directory Host: [ip address of active directory server]
Port (Default: 389): 389
Base DN: dc=TRANSPAC, dc=com.au (we've also tried 'dc=transpac' by itself)
RDN: transpac\administrator
Password: [administrator password]



Cheers

Kaviar

[c-wex]

Hmm is the DC correct here ?

i think you should split it up lik

DC=transpac, DC=com, DC=au

[kaviar]

Mate you are a legend!!!

Cheers, all works fine now

[schmidman]

In addition to setting up the Templates\LoginShare\AD settings you also need to go to Templates\Manage Groups\Settings for each group (we only use the default group) and specificy which LoginShare template to use. This is probably posted in this post but I thought I'd add it just in case.

[aukesd]

Originally Posted by c-wex

It Works !!!
So here is the formula for setting up active directory integration

1. ldap must be compiled in to the PHP or setup as extension in PHP.INI
2. under admin cp -> templates -> manage groups ... Click settings and set loginshare = Microsoft Active Directory
3. under admin cp -> templates -> login share ... locate "Microsoft Active directory" and click settings.
3a. Configure the active directory as follows:

Active Directory Host = [ip adress of your AD server]
Port (Default: 389) = [389]
Base DN = [dc=domain,dc=com]
RDN = [prewin2k username for user with access to AD eg domain\administrator]
Password = [password for user in the RDN field]

Test by logging in to the support part of kayako.
There is no support for AD integration with the Staff CP or the Admin CP.
When the integration works users beeing logged in will be "imported" to :
Staff CP -> Manage Users.

Ok that is correct it does work, however for some of us it still might not work unless you do this:

Admin CP -> Settings -> User Registration: Enable E-Mail Verification = Off

Once this is done everything should be ok.

[aexley]

Hi.

Just wanting to know if anyone knows how to log the LDAP request coming from SupportSuite to the AD. We have a problem where some users are able to login using the AD credentials and others aren't.


Thanks.

[samatheson]

Originally Posted by wgillam

Yes, it's a VBscript that grabs all the users in a given AD container and inserts them into the supportsuite database. I haven't had much time to think it out fully or even work on it yet but it's on my to-do list.

Any news on this VB script? Also, would it would make them regular users I assume?

Though, somthing just occured to me. If the user is being imported; when the user tries to login will it still authenticate against AD first, then load the user? Or will it authenticate against mysql? Speaking of which, if the user changes their password in Active Directory, the authentication would fail because doesn't have the updated password... yes? Would need to be some part of the script that syncs with AD.. or just make sure it's always authenticating against AD...

Sorry, stream of thoughs

[chimborazo]

Well I tried to set up authentication pointing to our open LDAP server, but no success. I followed the instruction an tested all kind of different options but no scuccess. Please help. hs