Table of contents:

• Active Directory Integration
  • How to connect to an existing ADS
    • 1. Go to the "secondary directory" section and enter your ldap user account settings
    • 2. Change the "Settings for users and groups"
    • 3. Review your changes and click "Ok"
  • Troubleshooting
    • User and groups are correctly shown in the manager but the login on the thinclient fails

Active Directory Integration

How to connect to an existing ADS

First right click on your existing realm and then click on "Edit".



These are the default settings for the Realm:

1. Go to the "secondary directory" section and enter your ldap user account settings

Our focus is the secondary directory section in which we need need to change several settings:
Note: Please do not touch the primary directory server, this is the openthinclient boot server!

For this example we use the following settings.


You could also specify an organizational unit (ou) from the server like this:

2. Change the "Settings for users and groups"

Select the following settings :

option	setting	description
Serverversion	Primary LDAP directory (default)	use openthinclient directory server
	Secondary LDAP directory	authentication with a external directory server
use for	create own directory for users and groups (default)
	read existing data of users	reads users only
	read existing data of users and groups	reads user and groups

3. Review your changes and click "Ok"

That's it. After OpenThinClient has reloaded the user and group data, you should be connected to your existing ADS.

Troubleshooting

User and groups are correctly shown in the manager but the login on the thinclient fails

Please try with the ip address instead of the dns name of your ldap server.