05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

Home Tutorials Books Youtube Channels About

GLPI LDAP Authentication on Active Directory Home / GLPI / GLPI LDAP Authentication on Active Directory

English  

GLPI LDAP Authentication on Active

Directory
Would you like to learn how to configure GLPI LDAP
authentication on Active directory? In this tutorial, we are going
to show you how to authenticate GLPI users using the Microsoft
Windows database Active directory and the LDAP protocol.
• GLPI version: 9.3.1

Hardware List:
The following section presents the list of equipment used to
create this GLPI tutorial.

Server

Laptop

Switch

Every piece of hardware listed above can be found at Amazon

website.

GLPI Related Tutorial:

On this page, we offer quick access to a list of tutorials related to
GLPI installation.

List of Tutorials - GLPI

GLPI Server Installation

GLPI - Email Notification Setup

GLPI - Changing the Language

Tutorial - Windows Domain Controller Firewall

First, we need to create a Firewall rule on the Windows domain
controller.
This firewall rule will allow the GLPI server to query the Active
directory database. This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 1/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

On the domain controller, open the application named Windows

Firewall with Advanced Security
Create a new Inbound firewall rule.
Home Tutorials Books Youtube Channels About

English  

Select the PORT option.

Select the TCP option.

Select the Specific local ports option.
Enter the TCP port 389.

This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 2/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

Home Tutorials Books Youtube Channels About

English  

Select the Allow the connection option.

Check the DOMAIN option.

Check the PRIVATE option.
Check the PUBLIC option.

This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 3/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

Home Tutorials Books Youtube Channels About

English  

Enter a description to the firewall rule.

Congratulations, you have created the required firewall rule.

This rule will allow GLPI to query the Active directory database.

Tutorial - Windows Domain Account Creation

Next, we need to create 1 account on the Active directory
database.
The GLPI account will be used to query the Active Directory
database.
On the domain controller, open the application named: Active
This website uses cookies and third party services. OK
Directory Users and Computers

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 4/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

Create a new account inside the Users container.

Home Tutorials Books Youtube Channels About

English  

Create a new account named: GLPI

Password configured to the GLPI user: kamisama123@
This account will be used to query the passwords stored on the
Active Directory database.

This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 5/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

Home Tutorials Books Youtube Channels About

English  

Congratulations, you have created the required Active Directory

account.

Tutorial - GLPI LDAP Authentication on Active

Directory
Open your browser and enter the IP address of your web server
plus /glpi.
In our example, the following URL was entered in the Browser:
• http://35.162.85.57/glpi
On the login screen, use the default username and default
password.
• Default Username: glpi
• Default Password: glpi

This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 6/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

Home Tutorials Books Youtube Channels About

English  

After a successful login, you will be sent to the GLPI Dashboard.

On the dashboard screen, access the Setup menu and select

the Authentication option.

Access the following option:

• LDAP directories
Select the option to Add a new LDAP directory.

You need to configure the following items:

• Name: TECH-DC01
• Default server: Yes
• Active: Yes This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 7/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

• Server: 192.168.0.50
• Port: 389
• Connection filter: (&(objectClass=user)(objectCategory=person))
• BaseDN:
Home dc=techexpert,dc=tips
Tutorials Books Youtube Channels About
• RootDN: [email protected]
• Password: kamisama123@
• LoginEnglish  
field: SaMAccountName
• Synchronization field: objectguid
You need to change TECH-DC01 to the name of your domain
controller.
You need to change the IP address 192.168.0.50 to your domain
controller IP.
You need to change the domain information techexpert.tips to
reflect you Network environment.
Click on the Add button.

Access your LDAP directory properties and select the menu

option named: TEST

Click on the Test button.

If your test succeeds, you should see the following message.

This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 8/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

Congratulations! You have configured the GLPI server and

Active directory integration.

Tutorial - GLPI Importing Active Directory Users

Home Tutorials Books Youtube Channels About
Now, you need to import a list of users from Active directory to
your GLPI database.
On theEnglish
dashboard
 screen,
 access the Administration menu and
select the Users option.

Click on the LDAP directory link button.

Select the option: Import new Users.

Click on the Search button.

The GLPI system will query a list of users from the Active
Directory Database.
Select the List of users that need to have access to the GLPI
system.

Click on the Actions button, select the Import option and

confirm the operation.
In our example, we imported the Trunks and Gohan users.
After finishing your configuration, you should log off the GLPI
web interface. This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 9/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

Try to login using an imported account and the password from

the Active Directory database.
• Username: trunks
• Password:
Home Enter the Active directory
Tutorials password.Youtube Channels
Books About

English  

The GLPI User dashboard will be presented.

Congratulations! You have configured the GLPI authentication

on Active Directory using LDAP.

Related Posts

This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 10/11
05/09/2023, 08:49 Tutorial - GLPI LDAP Authentication on Active Directory

Home Tutorials Books Youtube Channels About

GLPI GLPI GLPI Email

English  
Password Changing the Notification
Recovery Web Interface Setup
September 16th, Language October 25th, 2018
2019
October 26th, 2018

Copyright © 2016 by B. T. R.
All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means
without the prior written permission of the publisher.

This website uses cookies and third party services. OK

https://techexpert.tips/glpi/glpi-ldap-authentication-on-active-directory/ 11/11