Part 3 - SNIPE-IT LDAP/AD Sync 

Hi Vinod Bathi you are most welcome.

Likewise, no luck getting this to work.

@@KapengBarakoTheReal Did you manage to solve it? It syncs perfectly, but I can't log in

Hi Abhishek, Yes, it can be automated. You have to create a simple script for this task which points to the SNIPE-IT root directory. Basically, it will run this command in the SNIPE-IT root directory "php artisan snipeit:ldap-sync". Then make a scheduled task to achieve the desired results.

LDAP should work.

I checked Snipe-it documentation and it doesn’t look like if it is supported. Only base search.

@@TekNexSolutions thanks a lots.

1. Set up AD environment 2. Configure Ubuntu’s “search domain” 3. Install Snipe-IT and configure LDAP

I have done all the steps. Now I stuck with multiple OU sync. What will provide on base bind DN. I have configured on my production environment. I have one AD but different OU. We have to provide this as groups?

I don't think this is possible. You could request for this functionality or vote if it is already requested through GitHub.

AD is your LDAP. I am assuming you have already tried what is demonstrated in the video.

Hi Louis, I am glad you find my channel helpful. What did you enter in the Base Bind DN option?

@@TekNexSolutions my company has 3 OU: Frontend, Backend, and VN. When I entered 1 OU in the Base bind DN: ou=FRONTEND,DC=DONGPLUS,DC=LOCAL, it's ok, but I don't know how to sync 2 OU, example: frontend and VN

@@TienTranIT Did you find a solution for this? I have been looking for days and cant figure it out.

@@TienTranIT Need the same!

@@gaston100018 I found a solution that worked for me, I put it as follows: OU=Company,DC=xyz,DC=com Here the important thing is the in the LDAP filter, you must place: &(objectCategory=user) so that it only brings the users

Using the DN for "Users" should pull all the users in the subfolders if you passed in the filter shown in the video.

Many thanks@@fusionterror8906

I haven’t configured it myself but sure I will look into it. Stay tuned 👍🏻.

@@TekNexSolutions Thanks a lot, will be waiting for it. Subscribed.

@@TekNexSolutions Also, i have just set up an azure virtual machine, ubuntu server and built Snipe IT on it. i also have and old snipe IT on premises server, from which i would like to migrate all data to the new azure server. I saw this documentation: snipe-it.readme.io/docs/moving-snipe-it. but im not very familiar with sql migrations and stuff like that. it would mean a world to me if you could make a video on how to migrate information from old server to a new server according to that documentation.

Enable LDAP extension through PHP manager. Check my first video. I demonstrated how to enable required PHP extensions.

@@TekNexSolutions Test LDAP Sync is OK. But user syn testing error, same if i go to PEOPLE and click LDAP sync than "no such result" error occur.

@@halfsurreely8633 i've the same issue

Hi Krishna, You are welcome. Have you figured this out?

@@TekNexSolutions No Jay, Still struggling to get this info...if u try this in ure testing environment and post ure suggestions, this would be helpfull

@@krishnachaitanya7536 you should have Jay on the payroll

I am assuming you have tested with FQDN?

@@TekNexSolutions thanks for the quick reply. Found the answer through google. Should have looked some more before asking my question (^_^;)

Gude Boindy You’re welcome. You need to enable ldap extension. You can do this through PHP manager. Check my blog here blog.teknex.com.au/snipe-it/snipe-it-installation-on-windows-server and look for PHP installation section. I documented how to enable extensions. Don’t forget to leave a comment on the blog if it helps.

Thanks.

Could you please elaborate?

Sure. Right now locations are pulled from the LDAP portion of Settings>Locations>OU. This creates an issue if my AD structure doesn’t have an OU for every single location (I have 27 locations almost all of which are under Domain>Employees (Employees being the OU.) I want to be able to pull user location from the office attribute within the user in AD. This makes more sense for most locations with one domain and several locations in which different GPO’s are not required. Any ideas?

@@apartmentexpertsdrh Use cn instead of OU

I found this error too.

Me too

Me too

Glad it helped!

Agus Pujiyo Is your ldap syncing? Settings shown in the video have been tested and they work.

Also, best practice is not have space within the username. I haven’t tested that type of username. I am pretty sure a lot of third party vendors don’t support such environment. When I get chance I can test it for you.

No worries at all. I am glad it helped.

just go with: DC=yourdomain,DC=local

This is interesting one.

Are you able to ping your DC?

@@TekNexSolutions Yes