AD User looses profile settings after logging off

[Kimanibob]

I have successfully joined precurio to my windows Active directory and users can login using their AD credentials. I have created a default user role for all users. When even a new user logs in I place he/her in that role. The user the refreshes the precurio page and all links appear. however, once the user logs off and logs in again the user gets a guest page with 2links on the main menu ('home' and 'my page')
I need users to have the profile intact, how do i got about this?

[mayorbrain]

I am glad you've got most of the issues sorted out.

First an explanation.
When you integrate Precurio with your active directory, Precurio immediately relies on the active directory for user and group management.
So when you integrate with AD, users added through Precurio cannot login neither will groups added via Precurio work.

When an AD user logs in, Precurio syncs all his group membership from the AD, so any user-group membership done through Precurio will be lost. For example, if a user is added to a Precurio group called "Staff", if that user logs in the next time, the user is removed from the group, because according to AD, the user does not belong to any "staff" group. This is exactly what is happening in your case.

Solution
When you integrate Precurio with AD, you don't need to do any user & group management. You will simply rely on the AD.
Automatically, AD groups will be imported to Precurio each time a user member logs into Precurio. So pick any of the appropriate AD groups and convert them to Precurio roles (you do this by editing the group). You can then configure the access rules on those roles.

Hope you understand?

[Kimanibob]

(09-Jul-2012 03:38 AM)mayorbrain Wrote:  I am glad you've got most of the issues sorted out.

First an explanation.
When you integrate Precurio with your active directory, Precurio immediately relies on the active directory for user and group management.
So when you integrate with AD, users added through Precurio cannot login neither will groups added via Precurio work.

When an AD user logs in, Precurio syncs all his group membership from the AD, so any user-group membership done through Precurio will be lost. For example, if a user is added to a Precurio group called "Staff", if that user logs in the next time, the user is removed from the group, because according to AD, the user does not belong to any "staff" group. This is exactly what is happening in your case.

Solution
When you integrate Precurio with AD, you don't need to do any user & group management. You will simply rely on the AD.
Automatically, AD groups will be imported to Precurio each time a user member logs into Precurio. So pick any of the appropriate AD groups and convert them to Precurio roles (you do this by editing the group). You can then configure the access rules on those roles.

Hope you understand?

Thanks Mayorbrain
This is interesting, I checked the groups and found all groups there.
However, i locked myself out. (but I think this will work for me) thnaks a mil.

[Kimanibob]

I managed to unlock myself.
However, the steps provided above did not work.
This is how my config is: I have domain admins as a group, i made it a role, but after a domain admins member logged in the settings get lost. (same problem as my original post).

[mayorbrain]

Confirm the following

1. The Role "Domain Admin" still exists
2. The access rules on role "Domain Admin" still exists
3. The user is still a member of the "Domain Admin" role
   

Typically, the answer to all this should be yes.

[Kimanibob]

1. The Role "Domain Admin" still exists (Role exists)
2. The access rules on role "Domain Admin" still exists(Rules exist)
3. The user is still a member of the "Domain Admin" role (User is still a member)

[mayorbrain]

I have experienced a weird case with a client where users are created again each time they login.
Please confirm that this is not the case, go through the database table p2_users, do you notice any repetitions?

[mayorbrain]

also go through users_details.

[Kimanibob]

(09-Jul-2012 08:25 AM)mayorbrain Wrote:  I have experienced a weird case with a client where users are created again each time they login.
Please confirm that this is not the case, go through the database table p2_users, do you notice any repetitions?

This is strange, I found repetition of user accounts.
What is the remedy for this?

[mayorbrain]

It took me having a look at their AD setup to figure out the issue. But if I remember correctly, the problem had to do with the "mail" property of the AD users not being the same as their email address, which is not typical.

Please confirm that this is the same setup you have (i.e. mail property not the correct email address)