Active Directory: LDAP Custom Mapping - unable to map certain fields

ckd

Does anyone know how to map the following fields?

company
assistant
department
otherTelephone
otherHomePhone
manager

I tried the following mapping using the list I found at Grommunio Github, which didn't work unfortunately:

company :: companyname
assistant :: assistant
department :: departmentname
otherTelephone :: business2telephonenumber
otherHomePhone :: home2telephonenumber
manager :: manager

Any ideas? Thanks.

mwilliams

The mapping does work by using special maps which need to be mapped with MAPI tags. You may use the command grommunio-admin taginfo '*' to see all available MAPI tags you can map to.

Except for manager you will find all your mentioned properties already in the default provided set of the Active Directory mapping.

Please note, that with the caching mechanisms in grommunio, it might take up to 5 minutes until you will see freshly set attributes. If you want to rush it, you can clear caches with systemctl reload gromox-http gromox-zcore

https://github.com/grommunio/admin-api/blob/master/res/ldapTemplates.yaml

ckd

I really don't know how to get this working, I tried everything. The attribute name in upper case letters, in lower case letters, the hex value, the decimal value... none of what is given back with the taginfo command works for me. Could you please point me in the right direction? Thank you very much.

company : COMPANYNAME
company : companyname
company : 0x3a16001f
company : 974520351

mwilliams

ckd

Well where did you put it in the first place? In the LDAP config? Systemwide? Org-LDAP? And, since LDAP is a "special resource", have you restarted grommunio-admin-api after changing?

ckd

I have put this under Configuration > LDAP Directory. And yes, I have tried the mapping as explained in my last post and also restarted the service after. It simply doesn't work for me. Just those five mappings are not working, anything else is fine.

Could you please tell me, whether
company :: companyname
is the correct mapping? Thanks.

mwilliams

ckd

Does /etc/gromox/ldap_adaptor.cfg reflect these changes, like

ldap_user_attributes=company companyname

Seems to work here...

Also ... why would you want to set this anyways in the first place? It already in the common set, so this specific option your proposing certainly works, regardless of your custom definition. Again, see https://github.com/grommunio/admin-api/blob/master/res/ldapTemplates.yaml

ckd

Those five attritbutes in my first post are not working by default (using a 2019 AD with 2016 Forest Level). Anything else is working fine. Those fields however will become relevant for us, should Grommunio become the candidate to replace our MS Exchange installation.

Anyway, thanks for your reply. I am gonna do some more tests, perhaps I missed something. 🙂

mwilliams

ckd

To me it smells you are using GC Port with attributes not part of default GC...

ckd

mwilliams

cat /etc/gromox/ldap_adaptor.cfg | grep company
ldap_user_attributes=company companyname

I am using TCP 389 over TLS and I can query all those attributes using ldapsearch from the Grommunio Server host.

ldapsearch -x -D "<account>@ads.domain.tld" -b "ou=accounts,dc=ads,dc=domain,dc=tld" -H ldap://dc1.ads.domain.tld:389/ -W sAMAccountName=<account> -Z

Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <ou=accounts,dc=ads,dc=domain,dc=tld> with scope subtree
# filter: sAMAccountName=<account>
# requesting: ALL
#
# <user>, accounts, ads.domain.tld
dn: CN=<user>,OU=accounts,DC=ads,DC=domain,DC=tld
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: <user>
sn: user
c: XY
l: A
st: B
title: C
description: Description
postalCode: 123
postOfficeBox: PO
physicalDeliveryOfficeName: Office
telephoneNumber: 123
facsimileTelephoneNumber: Fax
givenName: <user>
initials: ABC
distinguishedName: CN=<user>,OU=accounts,DC=ads,DC=domain,DC=tld
instanceType: 4
whenCreated: 20221023125114.0Z
whenChanged: 20240329194032.0Z
displayName: <user>
uSNCreated: 20776
info: Notes
uSNChanged: 2392427
co: Germany
department: IT
company: IT
proxyAddresses: <user>@domain2.tld
streetAddress: Street
wWWHomePage: https://domain.tld
name: <user>
objectGUID:: eH5AD04Rr0On1IZdflFGAA==
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 276
badPasswordTime: 133560157520691569
lastLogoff: 0
lastLogon: 133560158633503273
pwdLastSet: 133111205335569807
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAAtJSUVcrtAV3lgemOUAQAAA==
accountExpires: 9223372036854775807
logonCount: 64
sAMAccountName: <account>
sAMAccountType: 805306368
otherMailbox: <user>@domain2.tld
userPrincipalName: <account>@ads.domain.tld
lockoutTime: 0
ipPhone: IP Phone
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=ads,DC=domain,DC=tld
dSCorePropagationData: 16010101000000.0Z
lastLogonTimestamp: 133558526451174462
mail: <user>@domain.tld
manager: CN=Test,OU=accounts,DC=ads,DC=domain,DC=tld
homePhone: 123
mobile: 123
pager: Pager
# search result
search: 3
result: 0 Success
# numResponses: 2
# numEntries: 1