AD authentication not working

Legacy Uncategorised
1

hi Team,

We are working on setting up Octopus tool for AD authentication. Our requirement is that the user access should only be granted access through active directory groups and not individual users. Please let us know if we are missing anything here.

We facing some issues while configuring AD with existing Octopus installations. When we sign in using my domain credentials by clicking on the link “sign with your Microsoft Windows domain account” but that link (http://localhost:8888/Octopus/integrated-challenge) is not opening. Tried all the ways provided at http://docs.octopusdeploy.com/display/OD/Active+Directory+authentication with the scripts given there but no luck yet. See attached image.

Octopus_AD_configuration.jpg
Octopus_AD_configuration.jpg704×432 22.4 KB

2

Hi,

Thanks for getting in touch!

Could you please check your OctopusServer.txt file under the home directory of your Octopus server (by default C:\Octopus\Logs) and see if there are any errors in there relating to issues with your Active Directory configuration.

Thank you and kind regards,

Henrik

3

hi Henrik,

Thanks so much. We are able to configure AD groups now. However, when we add some AD groups under Configuration -> Teams, once a user logs in, we noticed that an entry is added automatically under Configuration -> Users tab and also under Configuration -> Teams -> Everyone.

Is this correct behavior? What happens if a user is mistakenly removed from Users tab or Everyone team? Does he no longer have access even though the AD group is added?

The delete option under Users tab displays “Once you delete this user, there is no going back.” So we want to be sure about the behavior before deleting.

Please provide details or let us know any documentation available about this.

4

Hi,

Yes, this is the correct behavior.

You can’t remove a user from the Everyone team. If you delete a user, the next time they login the user will be added back again.

Hope that helps!

Thank you and kind regards,
Henrik