Hello,
I'm having an issue with self-service authentication. Authentication is blocked on a sub-OU of Active Directory.
Only users in that OU can log in to self-service.
If I remember correctly, during installation I specified this sub-OU initially:
OU=SIO,OU=SERVICE,DC=MY_DOMAIN,DC=FR.
I checked in /opt/wapt/conf/waptserver.ini and it does have:
ldap_auth_base_dn = DC=MY_DOMAIN,DC=fr.
Do you have any idea what the problem might be?
Thank you
[RESOLVED] Self-Service stuck on an OU
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
-
sfonteneau
- WAPT Expert
- Messages: 2318
- Registered: July 10, 2014 - 11:52 PM
- Contact :
Hello Jérôme,
for self-service there are several authentication methods:
https://www.wapt.fr/fr/doc/wapt-usage/w ... elfservice
Are you in basic (system) mode or are you in LDAP mode?
for self-service there are several authentication methods:
https://www.wapt.fr/fr/doc/wapt-usage/w ... elfservice
Are you in basic (system) mode or are you in LDAP mode?
Hi Simon,
I've corrected my wapt-get.ini accordingly by adding these three parameters:
service_auth_type
, ldap_auth_server,
and ldap_auth_base_dn.
The result is successful, thank you.
However, I had created a group called wapt-domain-users. If I add users or user groups to it, it works fine. However, I have a "domain users" group that is the default group for all my users. If I add this group, nothing appears in my directory.
I've corrected my wapt-get.ini accordingly by adding these three parameters:
service_auth_type
, ldap_auth_server,
and ldap_auth_base_dn.
The result is successful, thank you.
However, I had created a group called wapt-domain-users. If I add users or user groups to it, it works fine. However, I have a "domain users" group that is the default group for all my users. If I add this group, nothing appears in my directory.
---
Jérôme
CH-Abbeville
Jérôme
CH-Abbeville
-
dcardon
- WAPT Expert
- Messages: 1932
- Registration: June 18, 2014 - 09:58
- Location: Saint Sébastien sur Loire
- Contact :
Hi Jérôme,
the "domain users" group (-513) is the primary group for user accounts; it's an attribute of the user entry (and shouldn't be changed). However, the "domain users" group itself, as an LDAP entry, is empty in the sense that there's no "member" attribute.
If we want the "domain users" group to function like other groups, we need to use a more resource-intensive query, as it's a calculated result.
If this isn't specified in the documentation, we need to add it.
Denis
the "domain users" group (-513) is the primary group for user accounts; it's an attribute of the user entry (and shouldn't be changed). However, the "domain users" group itself, as an LDAP entry, is empty in the sense that there's no "member" attribute.
If we want the "domain users" group to function like other groups, we need to use a more resource-intensive query, as it's a calculated result.
If this isn't specified in the documentation, we need to add it.
Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
