Do you know if your LDAP/Active Directory settings work with anything else? I was using the snipe-IT IT inventory program, also with LDAP, so I knew the user account I had setup for LDAP authenication was working.
At first, the system was accepting the settings Iām adding but I canāt login using LDAP login with any user I have from MS AD.
Now Iām facing a new error " ldap3.core.exceptions.LDAPSocketOpenError: invalid server address " when trying to add almost the same settings Iāve added before.
Sorry Iām away for a few days, will try and help more once Iām back and have full access to everything. Try and see if your LDAP Windows account has the right permissions using another way.
Please let me know if you could help with any additional information once youāre back.
Iām still struggling with the integration.
I also noticed these couple of errors in the logs:
(
2023-01-01 20:17:17,991 ERROR frappe New Exception collected with id: 2023-01-01 20:17:17.987233-192.168.2.110-52b
Site: site1.local
Form Dict: {ācmdā: āfrappe.integrations.doctype.ldap_settings.ldap_settings.logi nā, āusrā: āuser1ā, ādeviceā: ādesktopā}
)
(
500 INTERNAL SERVER ERROR
)
By the way I tried this LDAP windows account with another system and it worked fine I could log in with the AD users I have.
Many Thanks for your efforts. I finally solved the issue the sign in problem was caused due to the lack of email felling in the AD user crearion
So once I added emails to my AD users I could normally sign in with LDAP in ERPNext.
Now Iām struggling with LDAP group mapping. All users are registered with no roles even if I tried to separate them based on groups in the provided table in the LDAP settings.
Do you have any idea on how to specify customized permissions with LDAP user creation?
Glad to hear youāve got it working. I came across the same issue when I was settling up and had to update our accounts accordingly.
Unfortunately I havenāt tried group mapping yet, as Iām still setting up with a lot of customisations on the install. Hopefully someone else can help you out