Problem connecting to my AD

[Nico9417]

Hello,

I would like to test a new LDAP-AD connection. I have successfully connected my Active Directory to OpenUDS. When I click on the test button, the test runs correctly.

Within this authenticator, is it normal to have to enter the user names ourselves (in new current user) for it to suggest them? The main problem I am encountering is that when I assign a “group” (last box at the bottom), it never saves it, so it is as if my user did not have a group.

Have I missed a step?

[dkmstr]

You cannot assign groups to users on UDS on "external" authenticators. The groups si the intersecion of the "registered" groups (those you have "imported" from AD to UDS) and AD user groups.

[Nico9417]

OK thanks for these informations,

The AD groups were not imported into the UDS instance, but I can see my users. In the LDAP authenticator configuration fields (LDAP info), should the Group Name Attr field be the name of the groups I want to synchronise? Or is it an AD attribute for mapping the names of my groups?

[dkmstr]

The Simple LDAP expects an specific structure of posix accounts inside the LDAP . I don't remember the attributes on LDAP part of active directory, but using RegexLdap should be very easy to implement (you can use the attr holding the groups (memberOf, maybe?), and the userPrincipalName as username? . with that, you can create "manually" groups on UDS, that will match against those obtained from the LDAP of Active Directory. Take a look at the source code, is easy to understand.
Hope it helps :)

[Nico9417]

Hi,

I tried again (even with memberOff, and the advice you gave me).
OpenUDS does not see my groups from my Active Directory, although it does see the users.