Yubico Forum
https://forum.yubico.com/

SOLVED - YubiRadius VA - Scheduled user import not working
https://forum.yubico.com/viewtopic.php?f=5&t=837
Page 1 of 1

Author:  remcobierings [ Thu Jul 26, 2012 3:29 pm ]
Post subject:  SOLVED - YubiRadius VA - Scheduled user import not working

We've got 2 YRVA which are in sync, but on both YRVA the scheduled User Import is not working.
When i create a new user in AD, and wait an hour the new user is not in the userlist on the YRVA.
When i do the user import manual by clicking import users under the Users Import tab the new user shows up.

Below the settings used under the Users Import tab:
Use Secure Connection?
No
LDAP/AD Server Address or Host Name
xxxx.ppg.lan
Backup LDAP/AD Server Address or Host Name (optional; for user authentication only)
yyyy.ppg.lan
Port (use 0 or blank to use the default port)
389
Directory Type
Active Directory
LDAP Version
3
Base DN
DC=ppg,DC=lan
User DN
CN=readonly,CN=Users,DC=ppg,DC=lan
Password
***************
Schedule
Hourly
Timeout (Seconds)
0
Filter
(objectClass=person)
Notes
Empty
Login Name Identifier
sAMAccountName


How can i get the scheduled user import working? Or how can i debug why it's is not working?

Thanks,
Remco Bierings

Author:  remcobierings [ Thu Jul 26, 2012 3:50 pm ]
Post subject:  Re: YubiRadius Appliance - Scheduled user import not working

I've solved the problem.
In /var/log/syslog there was an entry:
Code:
Jul 26 14:08:00 yubico01 anacron[1086]: Job `cron.daily' terminated (exit status: 1) (mailing output)
Jul 26 14:08:00 yubico01 anacron[1086]: Normal exit (1 job run)


I did try to execute the command manual and get the error below:
Code:
root@yubico01:/etc/cron.hourly# /usr/share/webmin/yubico-RoP/ykrop2_ldap_user_import.pl 1
bash: /usr/share/webmin/yubico-RoP/ykrop2_ldap_user_import.pl: Permission denied


The /usr/share/webmin/yubico-RoP/ykrop2_ldap_user_import.pl perlscript did not have execute rights.

I made it executable with:
Code:
chmod a+x /usr/share/webmin/yubico-RoP/ykrop2_ldap_user_import.pl


After i did this the scheduled user import is working.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/