You are viewing limited content. For full access, please sign in.

Question

Question

AD groups do not all show up in Forms

asked on March 19, 2020

I'm currently only seeing a portion of the AD groups that are defined as Laserfiche groups.  I only see about 65 of the total 81 groups.  And it's not that it cuts off the list at 65, it's as if it's picking and choosing the groups to include.  A group I added last week is showing, but a group I added at the same time isn't.

Looking for some thoughts.

0 0

Replies

replied on March 19, 2020 Show version history

Getting an active directory group to appear in Forms starts in LFDS > Accounts > Groups.  You have a group, or several groups here.  Click on each of these LFDS groups and take note of which Active Directory groups are members of which Directory Server groups. 

Are your missing groups displayed here?  Which group are they in?

Next go to your forms server configuration page and make sure that the LFDS group is listed under the user authentication section.

Finally go to Forms > username > Administration.  Last synchronized should show fairly recent.  If not click synchronize users.  Does this succeed?  The AD groups should appear in the system security list.

1 0
replied on March 19, 2020

Erik, LFDS groups would be in play if I were using single sign on through LFDS, correct?

We are setup to retrieve information directly from AD, not LFDS; therefore, there are no groups in my LFDS.

The setup in my forms server configuration identifies my domain controller and domain.  This has been our configuration since we went live in 2016.

I've done a re-sync twice today and the groups still don't show in the list.

0 0
replied on March 19, 2020

Ah I'm afraid I can't comment on that setup because I don't have any experience with it.  I'll be watching the thread to learn your solution.

0 0
replied on March 19, 2020 Show version history

The issue is some AD groups are not showing in Forms?  Forms will synchronize the AD groups added as members of the allowed LFDS groups configured from Forms Configuration only:

You need to make sure the LFDS groups which hold the AD groups are added to the allowed list. Following is the screenshot of LFDS group holds AD group.

0 0
replied on March 20, 2020

I found the issue.  The groups were not added to the LF Admin Console prior to synching!  I've made sure each of the groups in question is in the Admin Console, done a resynch and they are now available in Forms.

Xiang, our setup only has one group in LFDS that assigns full licenses to our users.  We don't have any others within that group setup in Forms configuration.  We do not use SSO.  Does the configuration you show above apply just to SSO?

1 0
replied on March 22, 2020

Yes, the configuration I showed apply only apply when use use Laserfiche Directory Server for Single Sign-On authentication.

1 0
You are not allowed to follow up in this post.

Sign in to reply to this post.