philbertphotos / osticket-multildap-auth-plugin

Plugin for OS Ticket that allows for authentication with multiple domains.
GNU General Public License v3.0
28 stars 17 forks source link

Only getting one active directory to work #64

Open coast2snow opened 1 year ago

coast2snow commented 1 year ago

Hey philberthotos! So I am almost to the point of getting this to completely work. I enter in one domain and it works. I had in a second domain and it doesnt work. I add in the other domain all by itself and it works. So it seems that when the domains are both added the system goes wonky. I am new to the field and I apologize for the lack of details. Let me know what else you need

philbertphotos commented 1 year ago

There is a bit funkyness at play that I am fixing in the next version out in a week or so... but for now just make sure you follow the examples in Github.

Make sure you do the commas or carriage returns as required. Or else it will fail

coast2snow commented 1 year ago

We have done the commas and carriage returns as shown and can still only get one domain to work, can't get both domains to work. I have a third that needs to be added to but we are just trying to get these ones to work at the moment. Like I said before I can get the domains to work individually but once combined, nothing works.

philbertphotos commented 1 year ago

Ok do this ... show me what ever errors you get in PHP and a screenshot of your settings sanitized of course. Would not be hard to figure it out.

Also before you do that test all the other servers by themselves with the plugin just to be sure.

philbertphotos commented 1 year ago

Take a look of a similar issue also #56

coast2snow commented 1 year ago

Keeps giving the same error of can't contact LDAP server. But some users are working and others are not. The only error it keeps giving me "can't contact LDAP serrver"

coast2snow commented 1 year ago

By boss is helping me at the moment on a different computer, so I am not able to get screen shots. I will be able to soon if we can't figure this out. Another error that keeps popping up is 49-invalid credentials.

philbertphotos commented 1 year ago

Yea you may have the work DN for a user or password some where ... like I said test each server separately and may sure the login works ... from what you are saying so far it seems to be a login/admin account issue,.

coast2snow commented 1 year ago

Each server does work separately, but once all three are added together in on instance, it can only find people in one domain. I will send you screenshots in about 15mins

coast2snow commented 1 year ago

Here is my config... image image image

coast2snow commented 1 year ago

image image

These are the two errors I keep getting once searching for a user...

coast2snow commented 1 year ago

lastly the error log image

The access log is very long... So I don't think I will include that unless you need to see it... Also, could this be an issue because it is running on OSTicket Awesome? I appreciate all your help and feedback, I am just to the point of complete loss in knowing what needs to be fixed in order for this to work.

philbertphotos commented 1 year ago

Ok easy correction just remove the semicolons in the server section.`Leave then where they are it works with carriage return and not commas or semicolons... Then soon to release update will make it a bit more logical when adding multiple servers.

coast2snow commented 1 year ago

Still not working... when typing in there name to search for a user, it brings it up in the search criteria, I click on it to add it, and it still gives me an error image I try to login with my credentials, and it says access denied as well. I am sorry to be a thorn in your side about this.

philbertphotos commented 1 year ago

Well the search and add part is a problem on the Osticket side and not the plugin. As for the login issue hmmm its very strange. This should work. I noticed the sync Map is missing a value....it looks like you deleted something. LDAP Attributes and Sync Map has to match in number example office:Physical......

993099 commented 1 year ago

Hello I would like to Setup Multi LDAP authentication plugin with Active Directory of Parent domain and Child Domain My Current Infra Parent Domain: GA.DM.CH (Primary and Secondary DC)

Child Domain: BL.GA.DM.CH (Primary and Secondary DC)

Exchange 2016(CU23) (Standalone Server)

oSTicket 1.17.2 Version OS CentOS 7. I am too tired to Search in the article for configuration of Parent and Child Domain Users to able to login as domain Users. Also it would be nice. Atleast if I give Universal Group. so I can add Parent and Child Domain Users to able to login as domain User

Can you give me attributes to be given in this field

Please advise IMG_20221124_064658

philbertphotos commented 1 year ago

@993099 just follow the directions and add the information for both servers ...