Difference between revisions of "VALT 6 - LDAP Configuration"
IVSWikiBlue (talk | contribs) |
IVSWikiBlue (talk | contribs) |
||
Line 40: | Line 40: | ||
#In the <b>Additional Groups</b> field, add any secondary VALT groups you want this AD group to be a part of from the drop down. | #In the <b>Additional Groups</b> field, add any secondary VALT groups you want this AD group to be a part of from the drop down. | ||
#Click the <b>Save</b> button at the top of the Sync schedules section to save the changes. | #Click the <b>Save</b> button at the top of the Sync schedules section to save the changes. | ||
+ | #To manually run the Sync schedule, open the schedule back up and click the <b>Import</b> button. You should see a message indicating the changes that have occurred: {{img | file = LDAP_Sync_Message.png}} | ||
+ | |||
}} | }} |
Revision as of 13:45, 1 November 2024
Contents
- Navigate to the Settings section within VALT.
- Enter the subsection Servers & Services.
- In the top right corner, select the + icon, and select LDAP from the drop down menu.
Connecting a new LDAP Server
- In the Server field, enter the address of your server in the following format:
ldap://<server>.<yourdomain.com> - In the LDAP Bind User field, enter an account with read access in the following format:
<username>@<yourdomain.com> - In the Password field, enter the password that corresponds with the LDAP Bind User
✎Note that the Bind User Password cannot contain the following characters:
! * ' ( ) ; : @ & = + $ , / ? % # [ ]
- In the Base DN field, enter the domain components in the following format:
DC=<component>,DC=<component> - In the Type field, select the appropriate server type. This will typically be Active Directory.
- In the Deleted field, select what you want to happen with deleted groups.
- Add any Custom Attributes by selecting the + icon, selecting the applicable attribute from the drop down menu, and filling out the corresponding attribute from your Active Directory.
- Hit the Save button at the top of your screen to save your changes.
- You will be returned to the Servers & Services page, where you see this message:
Importing Users from Active Directory
- Navigate to Users & Groups.
- In the top right corner, select the Import button, which will take you to the Import page.
Importing Individual Users
At the top of the Import page, you'll see the LDAP Import section. This area allows you to search for individual users and import them to specific groups
- In the Find user field, type in the search parameters. You will see a list of matches appear in a drop down. Select the User you wish to import from the list.
- Select the appropriate VALT group in the Group to Add drop down menu.
- Click the Import button to add the user to the selected group.
Importing User Groups
At the bottom of the Import page, you'll see the Sync schedules section. This area allows you to import entire user groups from the Active Directory to their corresponding groups in VALT.
- To create a Sync schedule, click the + button.
- In the Name field, enter the Name of the Sync schedule. Typically, you'll want to name this the same as the group name in VALT.
- In the User type field, leave it as Default.
- In the Container field, select the appropriate container from the drop down. For most cases, this will be Global.
- In the Bind Script field, fill out the script that corresponds to the AD Group you are importing in the following format without any of the Domain elements:
CN=<Common_Name>,OU=<Group_Name> - In the Group to Add field, select the VALT group that you are importing the AD Group to.
- In the Sync Type field, select whether you want the sync to occur automatically or on a manual basis only.
- In the Additional Groups field, add any secondary VALT groups you want this AD group to be a part of from the drop down.
- Click the Save button at the top of the Sync schedules section to save the changes.
- To manually run the Sync schedule, open the schedule back up and click the Import button. You should see a message indicating the changes that have occurred: