Support » Plugin: Active Directory Integration » Problem authentication with many domains

  • shown57

    (@shown57)


    I’ve got 1 primary domain with 5 child domains.

    In Environment tab, I configured 2 domain controllers from my primary domain.
    I put the Base DN to my primary domain root.

    In User tab, I added all my account suffix for every domains, last one is the root domain.

    Active Directory :
    In every Child domain, I configured Global groups where I put all my users from each domain.
    I configured Domain local groups in my primary domain where I put every global groups created before for every domains.

    When I test the authentication, I can only authenticate correctly with a user from my primary domain.
    It does not work with any users from a child domain.

    Logs from a working authentication :

    [DEBUG] Trying to authenticate user with username ‘xxx’ and account suffix ‘@company.com’
    [DEBUG] Authentication successful for username ‘xxx’ and account suffix ‘@company.com’.
    [WARN] Can not block or unblock the user because the user login is only simulated.
    [WARN] Do not send a notification email and/or do not block the user because the user login is only simulated.
    [DEBUG] UserInfo for user ‘xxx’: ………….. many debug Info OK

    Logs from a non working authentication :

    [DEBUG] Trying to authenticate user with username ‘xxx’ and account suffix ‘@test.company.com’
    [DEBUG] Authentication successful for username ‘xxx’ and account suffix ‘@test.company.com’.
    [WARN] Can not block or unblock the user because the user login is only simulated.
    [WARN] Do not send a notification email and/or do not block the user because the user login is only simulated.
    [WARN] Attributes for ‘xxx’: could not be loaded. Does the sAMAccountName or userPrincipalName exist? Is the provided base DN valid?
    [ERROR] User ‘xxx’ with GUID: ” is not in an authorization group.

    The plugin is not able to see memberships from my user in a child domain.

    Someone is able to help me with this ?

  • The topic ‘Problem authentication with many domains’ is closed to new replies.