schakko

@pegasuspress I have just corrected the shown text into “Please make sure you have added all UPN suffixes to the configuration tab User -> Account suffix”.

Please take a look into the documentation at https://active-directory-wp.com/docs/Getting_Started.html or purchase a support license and open a ticket.

I do not understand your reply. The synchronization did work (see above) but you can’t login because there are no WordPress roles mapped to Role Equivalent Groups.

Ok guys, I took a deeper look into this. I could reproduce the issue if the Active Directory account has no UPN suffix assigned.

e.g.:

– NADI configuration
— AD username: intranet@my.ad
— AD password: $my_password
– AD configuration
— sAMAccountName: intranet
— userPrincipalName: intranet
— UPN suffix: <empty>

The authentication works but NADI can not resolve the AD attributes of the intranet@my.ad account as the userPrincipalName does not exist.

Solution: In the “Active Directory User and Computer MMC” > “Account” > “User logon name”: Make sure, that the first box (User logon name) contains your username (“intranet”) and in the second select list behind your UPN suffix is selected (“@my.ad”).

Let me know if this worked.

@kyleabailey That is … interesting. Can you verify that your administrator account you use for the verification process has a valid SID? You can issue the following command to get the object SID of the Administrator

dsquery * -filter (samAccountName=Administrator) -attr ObjectSID

The password is stored encrypted. You can echo the decrpyted password if you are using the Sync Back option.

In ad-integration.php, line 1342 you can change

if ($this->_syncback_use_global_user === true) {
$ad_username = $this->_syncback_global_user;
$ad_password = $this->_decrypt($this->_syncback_global_pwd);
} else {

into

if ($this->_syncback_use_global_user === true) {
$ad_username = $this->_syncback_global_user;
$ad_password = $this->_decrypt($this->_syncback_global_pwd);
die(“AD password: ” . $ad_password);
} else {

and start the syncback process.
Otherwise you have to manually change the password of the account by using PowerShell or MMC.

@pwssupport Would you please include the HTTP body in your reply? Does the debug.log of NADI contains any error messages? Does the error.log of your Apache contains any errors?

At the moment there is no way to write the attributes to different WordPress settings/keys. We have plans for adding a usable API which could be used to accomplish this but no release date.