[RESOLVED] Active Directory authentication problem on the WAPT console.

Questions about WAPT Server / Requests and help related to the WAPT server
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
Admin-CAB
Messages: 1
Registration: March 8, 2022 - 2:52 PM

March 8, 2022 - 3:01 PM

Hello everyone,

I've consulted the forum on this topic but haven't been able to solve my problem...

I can't authenticate to the WAPT console using an Active Directory account.

I've correctly modified the settings in the Opt/wapt/conf/waptserver.ini file as recommended. The path seems correct. But despite this, I still can't use an AD account to log in to the console.

I've checked with telnet on port 389 of my DC server, and the connection is working.

Do you have any idea what the problem might be? Here is a copy/paste of my waptserver.ini file


wapt_admin_group_dn= CN=adm-postes,OU=IT,DC=xxx,DC=xxx,DC=fr
ldap_auth_server= srv-adds01.xxx.xxx.fr
ldap_auth_base_dn= DC=xxx,DC=xxx,DC=fr
ldap_auth_ssl_enabled=False
secret_key = xxxxxxxxxxxxxxxxxxxxxxxx
server_uuid = xxxxxxxxxxxxxxxxxxxxxxxx
wapt_huey_db = /opt/wapt/db/waptservertasks.sqlite
wapt_password = xxxxxxxxxxxxxxxxxxxxxxxxxxx
waptwua_folder = /var/www/html/waptwua
allow_unauthenticated_registration = True
allow_unauthenticated_connect = True
clients_signing_key = /opt/wapt/conf/ca-srv-wapt.xxxxxxx.fr.pem
clients_signing_certificate = /opt/wapt/conf/ca-srv-wapt.xxxxxxxx.fr.crt

Thank you for your feedback.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

March 8, 2022 - 8:20 PM

Hello,

is the account you're logging in with part of the "protected users" group in Active Directory?

Note: you can now use
`wapt_admin_group = adm-postes`
instead of `wapt_admin_group_dn`.

Simon Fonteneau
Locked