schakko
Forum Replies Created
-
Forum: Plugins
In reply to: [Active Directory Integration] Active Directory TLS problemsI am sorry. The description of the previous version seems to be wrong. For ADI 1.x “TLS” seems to mean “STARTTLS” so it is running on port 389.
LDAPS is still running on 689.Leaving the port on 389 should be enough.
Forum: Plugins
In reply to: [Active Directory Integration] Active Directory TLS problemsThere could be a problem with your network configuration. The timeout indicates that the AD endpoint can not be contacted. Please note that AD with TLS (not STARTTLS!) is running on port 689 and *not* 389.
Forum: Plugins
In reply to: [Active Directory Integration] Problem with SAMWe found this issue during ADI 2 development, too and already fixed it. Thank you for the report!
We fixed this issue in ADI 2 by storing the UPN in the wp_user_meta.
Forum: Plugins
In reply to: [Active Directory Integration] Local users accessIn addition to that: With ADI 2 you can exclude specific usernames from AD authentication, even if “Fallback to local password” is disabled.
Forum: Plugins
In reply to: [Active Directory Integration] do not add DISABLED userHey guys,
a lot is going on in this thread 😉1. With ADI 2 the current behavior is still used. Every AD user is synchronized to WordPress. After the initial synchronization his account gets disabled in WordPress – if disabled in Active Directory. I filled an issue in our backlog but will not promise that we eventually change this behavior.
2. As mrasker already said, we will never delete anything. Deletion is evil.
3. @cityfox this seems to be an issue of BuddyPress. “blocked” is not an official WordPress role. I filled an issue in our backlog. The much cleaner solution would be that we – as the ADI team – provide a hook which is called after disabling a WordPress user. You can listen to this hook and update the WordPress role.
4. @mrasker thank you for the Kerberos hint in https://ww.wp.xz.cn/support/topic/disabled-users-not-showing-up-in-disabled-column?replies=9#post-8293125. I added this to our backlog.
Forum: Plugins
In reply to: [Active Directory Integration] Bind username/password please!Hey guys,
during authentication the entered username and password is used for the binding. At least this is the behavior in ADI 2.x. The authenticated connection is re-used for synchronizing the user’s account.Have you more information about your Active Directory configuration? I do not really understand which setting inside the Active Directory let ADI fail. For ADI 2 I’d be glad to fix this issue.
Forum: Plugins
In reply to: [Active Directory Integration] Use TLS creates 500 errorsemargl, please check the error.log of your Apache webserver. It might be possible that PHP’s OpenSSL support has not been compiled into the core or the php_openssl has not been loaded.
Forum: Plugins
In reply to: [Active Directory Integration] Add actions/filters to custom importHi Marcus,
thank you for this feature request. I added it to our internal bugtracker (#ADI-145).Forum: Plugins
In reply to: [Active Directory Integration] Auto-loginThe auto-login/SSO feature highly depends upon your network environment. We are planning to release some documentation describing the problem and its possible solutions in the mid of this year.
Forum: Plugins
In reply to: [Active Directory Integration] Role assignment only with firs OU in DNHi Miralbe,
WordPress roles can only be assigned to Windows security groups and not to organizational units.
You have to use the “Role Equivalent Groups” feature of ADI to assign a security group to a WordPress role.Forum: Plugins
In reply to: [Active Directory Integration] Service AccountsADI already makes use of service accounts. They are internally called “Sync Back User” and “Bulk Import User”.
For ADI 2.0 we already changed the translation to “Service Account”.Forum: Plugins
In reply to: [Active Directory Integration] Multiple AD GroupsHey guys,
I added this feature request as ADI-141 to our internal bugtracker. Will be most likely included in ADI 2.0.