05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

RDR-IT Menu

RDR-IT » Tutorial » Softwares » GLPI » GLPI link with an Active Directory

GLPI link with an Active Directory

In this article, we will see how to configure GLPI with an Active Directory so that users can identify with their
Windows session name and password.

Configuration of the Active Directory in GLPI

Import users

Import of groups

Automation of user import and synchronization

Configuration of the Active Directory in GLPI

From the navigation menu go to Configuration 1 > Authentications 2 .

In the External Authentications list, click LDAP Directories 1 .

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill th… 1/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

RDR-IT

Click on the + 1 to add a directory.

Click on Active Directory 1 to pre-fill the fields.

Configure Active Directory :

1 Enter a name.
2 Set this directory as default
3 Make the server Active
4 Enter the fqdn name or ip of your domain controller
5 Enter Active Directory Domain DN Base
6 Username and password of an account authorized to login
7 Click Add.

Click on the newly added server 1 .

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill th… 2/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

RDR-IT

From the LDAP Directory 1 tab, you can find the configuration of the directory you entered just before.

Go to the Test 1 tab and click on the Test 2 button. If the configuration is good you should get the
confirmation message 3.

The tab Users 1 makes it possible to parameterize the connections between the Active Directory and the GLPI
base.

The tab Groups 1 allows the import of groups AD and to make the link also with GLPI.

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill th… 3/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

RDR-IT

Import users
From the navigation menu go to Administration 1 / Users 2 .

For the moment, there are only the default users. Click the LDAP Directory Link button 1 .

From this page, it is also possible to synchronize the user already imported in case of modification in the Active
Directory. Click on Import new users 1 .

From this form, it is possible to make search filters. Here we want to import all users, click on Search 1 .

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill th… 4/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

RDR-IT

Below the form the search result 1 is displayed.

Check the users 1 that should be imported and click on the Actions 2 button.

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill th… 5/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

RDR-IT

At the action level select Import 1 and click on Send 2 .

A notification should be displayed with the result of the action.

Go back to the list of users to check that they are present.

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill th… 6/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

RDR-IT

Synchronization works the same way.

Import of groups
The operation for importing groups is the same as for users.

From the navigation menu, go to Administration 1 / Groups 2 .

Click LDAP Directory Link 1 .

Click Import New Groups 1 .

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill th… 7/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

Click on Send 1 to execute the search, select the groups to import 2 and click on Action 3 .
RDR-IT

At the action level select Import 1 and click on Send 2 .

Go back to the group list and check the result.

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill th… 8/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

RDR-IT

Automation of user import and synchronization

Unfortunately there are no automatic actions in GLPI to perform these tasks.

Fortunately the developers of GLPI have thought of everything, there is a script (ldap_mass_sync.php) which
makes it possible to carry out that.

Before setting up the automation I invite you to read the following article: GLPI: automatic actions
configuration.

The implementation of import and synchronization automation uses the same operation. Creation of a bat with a
scheduled task.

The following explanations are for Windows. By reading the article on automatic actions and adapting the
following explanations it is possible to do it under Linux.

In the installation directory of GLPI located the file ldap_mass_sync.php which is in the scripts directory at the
root of the site.

Create a bat file with the following contents :

"C:\Program Files (x86)\PHP\vX.Y\php.exe" "C:\inetpub\glpi\scripts\ldap_mass_sync.php"

This line will have the effect of synchronizing users all the directories declared in GLPI.

Create a new scheduled task on the web server that will launch the bat. According to your needs adapt the
execution interval.

Syntaxe

ldap_mass_sync.php [<Options>]

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill th… 9/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

Parameters
RDR-IT
Parameter Description

Optional, this parameter is used to specify the LDAP server ID.

ldapservers_id
If the parameter is not filled in, the script will run for all active servers.

Optional, this parameter is used to determine the action to be taken.

0: Import only
action 1: Synchronization of existing users
2: Import and synchronization
If no value is filled in, the script will only synchronize

Example :

ldap_mass_sync.php ldapservers_id=1 action=1

The script will run only for the ldap server with ID 1 and synchronizes the users.

GLPI
Active Directory, GLPI

Leave a Comment

Name *

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill t… 10/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

Email *
RDR-IT

Website

Post Comment

Latest tutorials

PowerShell: sign scripts

Zabbix: restart a Windows service

GPO: configure default programs

Random tutorials

Export / Import a scheduled task

Microsoft 365: create an SMTP connector with a fixed IP address

Setting up a read-only domain controller – RODC

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill t… 11/12
05/09/2023, 08:28 GLPI link with an Active Directory - RDR-IT

RDR-IT

Articles by type

Tutoriel
Troubleshooting
Scripts

Tags

Active Directory Agent Backup Certificate Configuration Database Deployment

Disk DNS Domain Exchange Files Firewall GLPI GPO high availability Hyper-V IIS Install
Mailbox Management MDT Migration Monitor Network Network sharing Optimization PowerShell RDP
RDS Remote Desktop Restore Scripts Security Server Sophos XG Storage Ubuntu Update User
Veeam Virtuals Computers Windows Windows Update WSUS

RDR-IT

PNG for GLPI datacenter

Flux RSS
Legal Notice (FR)
Privacy policy (FR)
Contact

© 2022 - RDR-IT
English

https://rdr-it.com/en/glpi-link-with-an-active-directory/#:~:text=Configuration of the Active Directory in GLPI From,Click on Active Directory to pre-fill t… 12/12