Page 1 of 1

LDAP import limitations

Posted: Mon Oct 31, 2016 1:51 pm
by vAJ
I'm finding some frustration in LDAP imports for XI. I guess this is a bad problem to have, more users want access to monitoring... but I have to import them!

1. I wish the list of users was given the ability to be sorted/ordered. Even if it's a static A-Z, if I'm working with a large AD group, I have to do a find on the page.
2. I wish if I selected all users for a given group, I had the option to not import specific users, or prevent all duplicates from being imported. At least you highlight the duplicates for me (Log Server doesn't do this!)
3. If I give ALL the duplicates another user name (1, 2, 3, etc.), the import appears to succeed, but limits to 50 users imported... argh!

I wish...


-SkeeLo

Re: LDAP import limitations

Posted: Tue Nov 01, 2016 9:47 am
by dwhitfield
We have a few different LDAP integrations. Before I file feature requests, could you please send a screenshot of each page where you would like functionality improved (arrows and boxes not necessary, but would help make sure I get the FRs correct). Thanks!

I'll post the internal FR #s in this thread once they are in so that you can inquire.

Re: LDAP import limitations

Posted: Tue Nov 01, 2016 4:36 pm
by vAJ
nagios_ldap_userlist.JPG
Here's a list of users from one of my LDAP (Active Directory). The users are in no alphabetical order. I'm assuming it's based on UUID or something? NO rhyme or reason otherwise.
nagios_ldap_import_allreadyexists.JPG
In this shot, several accounts already exist in the instance. If I could just have a checkbox to not attempt import of those specific accounts, or a global option at the top of the page that ignores all duplicates.

Re: LDAP import limitations

Posted: Wed Nov 02, 2016 11:42 am
by dwhitfield
I have submitted feature requests 10000 and 10002 for the first two requests. I want to do some testing before submitting a feature request on the the 50-user limit. We've seen user-limit issues on the AD side in the past, but 50 seems ridiculously low for that.

Could you send a screenshot on what you are seeing after the first set of imported users? Thanks!

Re: LDAP import limitations

Posted: Wed Nov 02, 2016 11:59 am
by vAJ
Not sure I can reproduce the issue again, but I'll try.

Re: LDAP import limitations

Posted: Wed Nov 02, 2016 4:56 pm
by ssax
I'll lab it up tomorrow (AD server is broken at the moment, just tried) and see what the issue is with the 50, maybe it's hitting a PHP limit of some sort. If you don't hear from me by the end of the day, please reply to the post so that it pops up on our dashboard.

Thank you