https://ivs.help/wiki/index.php?action=history&feed=atom&title=VALT_5_-_LDAP_Configuration 2026-10-29T01:44:43Z Revision history for this page on the wiki MediaWiki 1.43.11 https://ivs.help/wiki/index.php?title=VALT_5_-_LDAP_Configuration&diff=13526&oldid=prev 2024-11-04T15:54:12Z

<p>Created page with &quot;==Connecting to the LDAP Server== #Navigate to the VALT software either through the IP Address or the FQDN using Chrome, Firefox, or other standard web browser #Log in using y...&quot;</p> <p><b>New page</b></p><div>==Connecting to the LDAP Server==<br /> #Navigate to the VALT software either through the IP Address or the FQDN using Chrome, Firefox, or other standard web browser<br /> #Log in using your login credentials<br /> #: &#039;&#039;&#039;Note:&#039;&#039;&#039; (Default credentials: Username = &#039;&#039;admin&#039;&#039; | Password = &#039;&#039;admin&#039;&#039;)<br /> #Click on &#039;&#039;&#039;Admin&#039;&#039;&#039; -&gt; &#039;&#039;&#039;Users &amp; Groups&#039;&#039;&#039; -&gt; &#039;&#039;&#039;LDAP&#039;&#039;&#039; -&gt; &#039;&#039;&#039;Show Advanced Settings&#039;&#039;&#039;<br /> #:[[File:LDAP1.png|1000px]]<br /> #Scroll down to &#039;&#039;&#039;Servers&#039;&#039;&#039;<br /> #:[[File:LDAP_Server_Box.png|1000px]]<br /> #Enter in your LDAP Server information:<br /> #:&lt;table&gt;<br /> &lt;tr&gt;<br /> &lt;th rowspan=&quot;7&quot;&gt;[[File:Updated_LDAP_Server_Config.png]]&lt;/th&gt;<br /> &lt;/tr&gt;<br /> &lt;tr&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;A:&#039;&#039;&#039;&lt;/td&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Enter the IP Address or FQDN of your Active Directory or other LDAP compatible server in the Server field &lt;br&gt;&lt;span class=&quot;indent&quot;&gt; &lt;font color=&quot;red&quot;&gt;&#039;&#039;&#039;Note: &lt;br&gt; I: &#039;&#039;If you are using LDAPS, enter the IP or FQDN as ldaps://myldapsserver.com&#039;&#039;&#039;&#039;&#039;&lt;br&gt; &#039;&#039;&#039; II: &#039;&#039;If you are using a Global Catalog Server then it needs to be written as myldapserver.com:3268&#039;&#039;&#039;&#039;&#039; &lt;br&gt; &#039;&#039;&#039; III: &#039;&#039;If you are using a Global Catalog Server with LDAPS, then it needs to be formatted as ldaps://myldapserver.com:3269&#039;&#039;&#039;&#039;&#039;&lt;/font&gt;&lt;/span&gt;&lt;/td&gt;<br /> &lt;/tr&gt;<br /> &lt;tr&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;B:&#039;&#039;&#039;&lt;/td&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Enter a Service Account user with read access in the LDAP Bind User field &lt;br&gt;&lt;span class=&quot;indent&quot;&gt;&lt;font color=&quot;red&quot;&gt;&#039;&#039;&#039;Note: The user must be entered as user@domain.com&#039;&#039;&#039;&lt;/font&gt;&lt;/span&gt;&lt;/td&gt;<br /> &lt;/tr&gt;<br /> &lt;tr&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;C:&#039;&#039;&#039;&lt;/td&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Enter the Service Account password&lt;br&gt;&lt;span class=&quot;indent&quot;&gt; &lt;font color=&quot;red&quot;&gt;&#039;&#039;&#039;Note: Our password requirements do not allow for the use of these reserved characters: ! * &#039; ( ) ; : @ &amp; = + $ , / ? % # [ ]&#039;&#039;&#039;&lt;/font&gt;&lt;/span&gt;&lt;/td&gt;<br /> &lt;/tr&gt;<br /> &lt;tr&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;D:&#039;&#039;&#039;&lt;/td&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Enter in the Base DN of the Service Account &lt;br&gt;&lt;span class=&quot;indent&quot;&gt;&lt;font color=&quot;red&quot;&gt;&#039;&#039;&#039;Note: Base DN must be entered in the form of DC=ad,DC=ipivs,DC=com&#039;&#039;&#039;&lt;/font&gt;&lt;/span&gt;&lt;/td&gt;<br /> &lt;/tr&gt;<br /> &lt;tr&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;E:&#039;&#039;&#039;&lt;/td&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Select either &#039;&#039;&#039;Active Directory&#039;&#039;&#039; or &#039;&#039;&#039;Open LDAP&#039;&#039;&#039;&lt;/td&gt;<br /> &lt;/tr&gt;<br /> &lt;tr&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;F:&#039;&#039;&#039;&lt;/td&gt;<br /> &lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Click &#039;&#039;&#039;Save&#039;&#039;&#039;&lt;/td&gt;<br /> &lt;/tr&gt;<br /> &lt;/table&gt;<br /> <br /> <br /> *If the credentials were accepted and a connection was established, you will receive a message stating connected and you will see your LDAP Server in &#039;&#039;&#039;Green:&#039;&#039;&#039;&lt;br&gt;[[File:LDAP2.png]]<br /> &lt;br&gt;<br /> *If the connection fails, you will receive an error message stating &#039;&#039;&#039;Wrong Credentials:&#039;&#039;&#039;&lt;br&gt;[[File:LDAP3.png]]<br /> <br /> ==Syncing Security Groups==<br /> #To sync users accounts, navigate to &#039;&#039;&#039;Sync Schedules&#039;&#039;&#039; <br /> #:[[File:Finding_Sync_Schedules_Box.png|1050px]]<br /> #Once here, start entering in the following information:<br /> #:&lt;table&gt;&lt;tr&gt;&lt;th rowspan=&quot;7&quot;&gt;[[File:Adding_LDAP_Sync_Schedules.png]]&lt;/th&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;A:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Enter in a name for the Security Group &lt;br&gt;&lt;span class=&quot;indent&quot;&gt; &lt;font color=&quot;red&quot;&gt;&#039;&#039;&#039;Note: &#039;&#039;Try to keep these similar to the VALT groups you have created&#039;&#039;&#039;&#039;&#039;&lt;/font&gt;&lt;/span&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;B:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Enter in the DN for the Security Group, omitting the DC components &lt;br&gt;&lt;span class=&quot;indent&quot;&gt;&#039;&#039;&#039;Example:&#039;&#039;&#039; &#039;&#039;CN=Service Accounts,OU=Users,OU=Install&#039;&#039;&lt;/span&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;C:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Select the &#039;&#039;&#039;VALT Group&#039;&#039;&#039; to have the users added to &lt;br&gt;<br /> &lt;span class=&quot;indent&quot;&gt; &lt;font color=&quot;red&quot;&gt;&#039;&#039;&#039;Note: The VALT groups need to be created before you can link the Security Groups to them&#039;&#039;&#039; &lt;/font&gt;&lt;/span&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;D:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Choose either &#039;&#039;&#039;Manual&#039;&#039;&#039; or &#039;&#039;&#039;Automatic&#039;&#039;&#039; Sync Type &lt;br&gt;&lt;span class=&quot;indent&quot;&gt;&lt;font color=&quot;red&quot;&gt;&#039;&#039;&#039;Note: Automatic syncs users every day at 7AM server time whereas Manual requires an Admin account to manually sync the users&#039;&#039;&#039;&lt;/font&gt;&lt;/span&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;E:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Select any &#039;&#039;&#039;Additional Groups&#039;&#039;&#039; you would like the users added to&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;F:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px&quot;&gt;Click &#039;&#039;&#039;Save&#039;&#039;&#039;&lt;/td&gt;&lt;/tr&gt;&lt;/table&gt;<br /> #Test that the user import worked:<br /> :&lt;span class=&quot;indent&quot;&gt;A. Click on the &#039;&#039;&#039;Group&#039;&#039;&#039;&lt;/span&gt;<br /> :&lt;span class=&quot;indent&quot;&gt;B. Click &#039;&#039;&#039;Import&#039;&#039;&#039;&lt;/span&gt;<br /> :::[[File:Testing_Sync_Schedule_Import.png]]<br /> &lt;br&gt;<br /> ::*If the import was successful, &#039;&#039;and there are users assigned to Security Groups&#039;&#039;, you will see this message:&lt;br&gt;<br /> :::[[File:Import_Results.png]]<br /> &lt;br&gt;<br /> ::*If the import failed, &#039;&#039;and there are users assigned to Security Groups&#039;&#039;, you will see this message:&lt;br&gt;<br /> :::[[File:Failed_Import_Results.png]]<br /> &lt;br&gt;<br /> &lt;font color=&quot;red&quot;&gt;Note: If the import failed, &#039;&#039;and you have users assigned to a group&#039;&#039;, most likely either your &#039;&#039;&#039;Bind Script&#039;&#039;&#039; in the &#039;&#039;&#039;&#039;&#039;Sync Schedule&#039;&#039;&#039;&#039;&#039; block or the &#039;&#039;&#039;Base DN&#039;&#039;&#039;/&#039;&#039;&#039;LDAP Bind User&#039;&#039;&#039; in the &#039;&#039;&#039;&#039;&#039;Server&#039;&#039;&#039;&#039;&#039; block are entered incorrectly<br /> <br /> ==Importing an Individual User==<br /> &lt;font color=&quot;black&quot;&gt;<br /> #Navigate to the &#039;&#039;&#039;User Import&#039;&#039;&#039; section:[[File:LDAP5.png|1000px]]<br /> #Enter in the information:<br /> #:&lt;table&gt;&lt;tr&gt;&lt;th rowspan=&quot;7&quot;&gt;[[File:Full_User_Import_.png]]&lt;/th&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;A:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Enter in the name of a user and click &#039;&#039;&#039;Search&#039;&#039;&#039;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;B:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;A list of all users that populate with your search entry will appear&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;C:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;The full DN of the user you select will appear here&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;D:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Select the &#039;&#039;&#039;Group&#039;&#039;&#039; you want to add the user to&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;E:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Select any &#039;&#039;&#039;Additional Groups&#039;&#039;&#039; you would like the user added to&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;&#039;&#039;&#039;F:&#039;&#039;&#039;&lt;/td&gt;&lt;td style=&quot;padding: 0 10px;vertical-align: top&quot;&gt;Click &#039;&#039;&#039;Import&#039;&#039;&#039;&lt;/td&gt;&lt;/tr&gt;&lt;/table&gt;<br /> #You will see a confirmation message displayed that the user has been imported and you can verify the user got assigned to the group:[[File:User_Import_Finalization.png|1000px]]<br /> &lt;/font&gt;</div>

IVSWikiBlue