DirectoryTree / LdapRecord-Laravel

Multi-domain LDAP Authentication & Management for Laravel.
https://ldaprecord.com/docs/laravel/v3
MIT License
492 stars 51 forks source link

[Support] Can't create user in Azure AD #519

Closed vascocarreira closed 1 year ago

vascocarreira commented 1 year ago

Environment:

Hi, I'm using this package to connect a Laravel app to Azure Active Directory.

I can sign in, and retrieve users and groups, but I can't create users. I get the following error no matter the user's data I'm using.

imagem

I guess some kind of flag/param is missing or some setting isn't enabled, but I can't figure it out.

Can anyone using Azure Domain Services kindly check this out, please?

Thank you. Regards.

vascocarreira commented 1 year ago

@HepplerDotNet , @rcraig12 , @sammyaxe

I did some digging and from what I understood, you use Azure services. Can you please check this? I'm kinda stuck with this one :confused:

I apologize for the inconvenience.

Thank you. Regards.

rcraig12 commented 1 year ago

Without seeing all of the config. I am assuming that you have an enterprise application setup and that you have given the app the correct rights to be able to manage users fully? The diagnostic message is saying what is wrong - not enough rights.

vascocarreira commented 1 year ago

What do you mean by "enterprise application setup"?

All I did was to setup the LDAPS connection in Azure DS and set the connection params in the Laravel app.

stevebauman commented 1 year ago

Hi @vascocarreira,

This error occurs when you try to perform an operation (in this case, adding an entry) in an LDAP directory but do not have the necessary permissions to do so. This error message indicates that the user performing the operation does not have sufficient access rights to complete the action.

Re-attempt creation of the entry using an account that has the rights to do so.

vascocarreira commented 1 year ago

Just FYI, same error if I use a global administrator.

I use this package to connect to an AD running on Windows Server and it works great, but it does not work with AD running on Azure. Perhaps, some additional steps are necessary.

Sorry to bother. I'll figure it out.