[Plugin: Active Directory Integration] Multiple Organizational Unit

  • Resolved DonChino

    (@donchino)


    15 years, 2 months ago

    I noticed someone asked about Multiple Domains but I am more interested in Multiple Organization Units, although I will admit that I am not an Active Directory expert.

    Basically, under the tab – USER – there is a user-specific setting for “Account Suffix” and it only allows you to enter in one. So for example, I might have americas.company.com but I also have emea.company.com and asiapacific.company.com…

    So is there a way to check the username against other organization units? That way if the user is part of a single domain but instead part of a different organization unit and have this appended in the following option. If we so choose…

    Alternate Conversation:
    Multiple Domains

    http://ww.wp.xz.cn/extend/plugins/active-directory-integration/

Viewing 14 replies - 16 through 29 (of 29 total)
1 2
  • Plugin Author glatze

    (@glatze)

    14 years, 6 months ago

    Hi Greg,
    looks like a good idea. It should be easy to implement. I’ll have a look at the code.

    Plugin Author glatze

    (@glatze)

    14 years, 6 months ago

    Hi Greg,
    we have a little problem here. Let’s assume the following:

    [email protected] logs on as “paul” the first time. User “paul” is created. Now [email protected] logs on as “[email protected]”. What should happen now? Should the user created be named “paul”? That won’t work, because we already have that user. The only option seems to be, that we create the user ” [email protected]”. Is this what you want?

    greg.fenton

    (@gregfenton-1)

    14 years, 6 months ago

    Yes, I have no problem telling the @corp-internal.local folks to log in with their full domain name. Many apps already force the users to do that just to do RDC or map network drives, especially in organizations with multiple domains.

    If someone signs on with “paul”, then they would indeed authenticate as “[email protected]”. If they really are internal, they need to log in as “[email protected]”.

    Thanks.

    greg.fenton

    (@gregfenton-1)

    14 years, 6 months ago

    BTW: is this a big change? Would it take long to implement?

    Plugin Author glatze

    (@glatze)

    14 years, 6 months ago

    No, it is not. Only a few lines. I’ll commit a development version soon, so you can do some tests before I release a new version.

    greg.fenton

    (@gregfenton-1)

    14 years, 6 months ago

    Awesome! I’m ready to test right about……now!

    🙂

    Thanks!

    Plugin Author glatze

    (@glatze)

    14 years, 6 months ago

    Ok. I have committed a new development version. The latest development version can be found here: http://downloads.wp.xz.cn/plugin/active-directory-integration.zip

    Give it try to see if it works as you aspected. And don’t forget to give me some feedback. If all works fine, I’ll release 1.1.2.

    Plugin Author glatze

    (@glatze)

    14 years, 6 months ago

    Hi Greg,
    have you tested the development version? Please send me some feedback.

    Greetings from Germamy
    Christoph

    greg.fenton

    (@gregfenton-1)

    14 years, 6 months ago

    Hi Christoph,

    Yes, I have tested just this morning and it works great. Thank you!

    …except…

    So now I can log in with @corp-internal.local, but the call to get_userinfo() is coming back empty. I am not sure if this is an AD configuration where corp-external.local should be automatically passing thru the request to corp-internal.local, or if the plugin needs to be smart enough to fetch details from one AD for @corp-external and a different AD for @corp-internal.

    Thoughts?

    Plugin Author glatze

    (@glatze)

    14 years, 6 months ago

    Could you please send me the output of the test tool for both types of users? (Don’t forget to remove security relevant information.)

    greg.fenton

    (@gregfenton-1)

    14 years, 6 months ago

    You want it here or via email? If email, what address?

    Thanks,

    greg.fenton

    (@gregfenton-1)

    14 years, 6 months ago

    Another interesting feature would be an option to fail the user creation if the email address does not exist in the AD record. Currently I see that I have a few test users in AD that don’t have mail values. Right now, ADI creates a user account if the email is blank (though subsequent users fails with “This email address is already registered.”).

    Plugin Author glatze

    (@glatze)

    14 years, 6 months ago

    Sorry Greg, I forgot to give you my address: [email protected]

    Plugin Author glatze

    (@glatze)

    14 years, 6 months ago

    ADI creates a user account if the email is blank (though subsequent users fails with “This email address is already registered.”).

    This seems to be a bug. ADI should try to give every user a unique email address if none exists. But the feature you request sounds good. Please leave a feature request on http://bt.ecw.de.

Viewing 14 replies - 16 through 29 (of 29 total)
1 2

The topic ‘[Plugin: Active Directory Integration] Multiple Organizational Unit’ is closed to new replies.