XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    LDAP Plugin - Syncing Groups from Windows AD (Server 2016) HELP

    Scheduled Pinned Locked Moved Xen Orchestra
    7 Posts 3 Posters 1.1k Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P Offline
      pflaugh
      last edited by

      Has anyone been able to get the new syncing of groups feature to work from Microsoft Active Directory yet? If so would you be able to share your config? I've consulted the documentation but it seems to be more focused on OpenLDAP. I have the basic login working. Below is what i have currently.

      I am running XOCE from source built using Jarli01's script. Server 5.68.0 Web 5.72.0

      ldap config.PNG

      1 Reply Last reply Reply Quote 0
      • P Offline
        pflaugh
        last edited by pflaugh

        Update: I had a typo in the Base field. It is now working, but saying that I am in ALL groups.

        I suspect I dont have the right values in some of the boxes. Any input?

        1 Reply Last reply Reply Quote 0
        • P Offline
          pflaugh
          last edited by

          I figured it out! 😊 Below is my working configuration for Windows AD including Group Syncing.

          ldap config.PNG

          N 1 Reply Last reply Reply Quote 0
          • K Kajetan321 referenced this topic on
          • K kagbasi-wgsdac referenced this topic on
          • T Tomcatter referenced this topic on
          • N Offline
            newbie2xcp @pflaugh
            last edited by olivierlambert

            I wanted to limit users' ability to login to 2 groups

            User filter:

            (&(sAMAccountName={{name}})(|(memberOf=CN=ServerAdmins,OU=ServerAdmins,OU=Admins,DC=DOMAIN,DC=com)(memberOf=CN=grpDevOPs,OU=Security_Groups,DC=DOMAIN,DC=com)))
            

            Adn groups filter has

            (&(objectCategory=group)(|(cn=ServerAdmins)(cn=grpDevOPs)))
            

            I struggled with group sync setup so adding here.

            1 Reply Last reply Reply Quote 0
            • olivierlambertO Offline
              olivierlambert Vates 🪐 Co-Founder CEO
              last edited by

              @newbie2xcp so you mean you figured out and you wanted to share the solution here? 🙂

              N 1 Reply Last reply Reply Quote 0
              • N Offline
                newbie2xcp @olivierlambert
                last edited by

                @olivierlambert Yes. Sorry for not making that more clear

                1 Reply Last reply Reply Quote 0
                • olivierlambertO Offline
                  olivierlambert Vates 🪐 Co-Founder CEO
                  last edited by

                  No problem, happy to see people providing solutions in here! Kudos for that. Would you be interested to contribute to our doc to help even more people at once?

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post