Messages

1

Installation and Upgrades / Re: AD sync only transfers some users

« on: February 11, 2010, 09:56:28 pm »

Ok, I fixed the initial error by editing /usr/share/perl5/EBox/UsersAndGroups.pm and set MAXGROUPLENGTH to be 40. However, now it is giving another one:

2010/02/11 14:45:12 DEBUG> ebox-ad-sync:296 main::getPrincipalName - [ad-sync] can't get userPrincipalName for...

And it says that about a number of users. Still now change otherwise, I still am only getting the same few users imported as before. Not sure what would be causing this. Thoughts?

2

Installation and Upgrades / Re: AD sync only transfers some users

« on: February 05, 2010, 09:30:49 pm »

Is that a group created by you or a windows default one? If it is the second, do you know if it has a special attribute in LDAP in order to filter it during the sync?

No, I have no idea where that group came from. Perhaps I should just try deleting it? The documentation said that you would have to reset user passwords before they'll show up on eBox? I did this on a test account, and it did not appear. Whereas some of the accounts that are syncing haven't been touched in quite a while. The odd thing is that it's not just the first few users, it's a random sampling that seem to work.

I'm very new to AD myself, so maybe I'm not the best person to be testing this. But on the other hand, if you need to be a Windows Server expert to figure it out, then it still needs work.!

Basically I have OUs for students, staff, and the administration. I'm trying to get eBox pull in the accounts, and apply policies (captive portal, content filtering, etc) based on the user's OU. Is that unrealistic?

3

Installation and Upgrades / Re: AD sync only transfers some users

« on: February 04, 2010, 10:18:59 pm »

Yeah, I checked the logs and get a list of existing users that it's updating, followed by a message about groups, like so

...
ebox-ad-sync:66 main:: - [ad-sync] Updating existing user jkirk

ebox-ad-sync:78 main:: - [ad-sync] Adding new group Windows Authorization Access Group

UsersAndGroups.pm:1362 EBox::UsersAndGroups::addGroup - Groupname must not be longer than 32 characters

Would that have anything to do with it?

4

Installation and Upgrades / AD sync only transfers some users

« on: February 03, 2010, 09:58:56 pm »

I had this issue under 1.3 and am now getting the same results after a completely clean fresh install of the 1.4 beta. I have a Windows 2003 Active Directory tree with about 50 users. Setting up the eBox as a slave to AD worked fine and everything seems to be connecting correctly... except only 14 users show up on the eBox, including the "eboxadsync". There seems to be no rhyme or reason for why those particular users are working and not the others. They are from different OU's, some are administrators and some not, some have logged in recently and others not, etc. It seems completely random.

Any suggestions on why this would be happening, or more importantly on how to get the rest of them to show up?

5

News and Announcements / Re: Usage of eBox Platform

« on: August 24, 2009, 07:18:32 pm »

I'm the "campus geek" for a small non-profit self supporting school. I've over to eBox as my main router and hope to be using it as my domain controller with network shares. I also have it handling content filtering, which is very important, and would like to have that integrate into a captive portal for wifi as well.