How 1C authenticate via Active Directory?

Understanding basics of 1C:Enterprise platform. To start working with 1C:Enterprise platform visit Getting started page

#1
People who like this:0Yes/0No
Just came
Rating: 0
Joined: Oct 28, 2014
Company: MjSoft

I have a DC abc.com (Server 2012) that install AD with exist users.
How to bind and authenticate 1C user with this AD server?

 
#2
People who like this:0Yes/0No
Timofey Bugaevsky
Guest

Joined:
Company:

Hello, quynh chi, please see To attract the users registered in Active Directory topic.

 
#3
People who like this:0Yes/0No
Just came
Rating: 0
Joined: Oct 28, 2014
Company: MjSoft

I installed 1C on DC abc.com.
In AD I created user quynh pwd 1234567@
In 1C list users I create user quynh. Unchecked 1C Authentication; Checked OS Authentication with OSUser "\\abc.com\quynh".
But when I logon with account quynh pwd 1234567@, it not work???
How to solve this problem?

 
#4
People who like this:0Yes/0No
Timofey Bugaevsky
Guest

Joined:
Company:

You log on to the domain controller with quynh user, then start 1C:Enterprise, open the infobase where this user is specified for log on, and still receive a log on dialog box, right?

 
#5
People who like this:0Yes/0No
Just came
Rating: 0
Joined: Oct 28, 2014
Company: MjSoft

No, I log on DC with account abc\Administrator.
I cannot logon  1C in design mode with user quynh / OS authentication
I had to checked 1C authentication and log on 1C by user quynh/ blank pass

Edited: quynh chi - Oct 31, 2014 02:30 AM
 
#6
People who like this:0Yes/0No
Timofey Bugaevsky
Guest

Joined:
Company:

To log on 1C with OS authentication, you must log on your PC with this user first. After that 1C can use domain authentication to authorize this user in the infobase.

 
#7
People who like this:0Yes/0No
Just came
Rating: 0
Joined: Oct 28, 2014
Company: MjSoft

I log in DC with account  abc\Administrator, pass 123.. and bind 1c user quynh with this account. But when I log in 1C with quynh/ password 123.. it still doesn't work. (Invalid username or password)
I published to IIS8/win server 2012 fail too.

Edited: quynh chi - Nov 07, 2014 08:49 PM
 
#8
People who like this:0Yes/0No
Timofey Bugaevsky
Guest

Joined:
Company:

It should log on automatically to the infobase where the user binded to abc\Administrator is.

 
#9
People who like this:0Yes/0No
Just came
Rating: 0
Joined: Oct 28, 2014
Company: MjSoft

Could u describe more detail plz?
I tried o lot of times but it does not work  :(

 
#10
People who like this:0Yes/0No
Timofey Bugaevsky
Guest

Joined:
Company:

Sure,

The only thing you need to do in the infobase is to add a user which have the operating system authentication enabled. This user can have other types of authentication, but this is not necessary. If the user is logged on the computer and during this session this user runs 1C:Enterprise, then opens the infobase in Enterprise or Designer mode, this user will log on.

See the attached screenshot for example of settings.

The only thing which may happen is that this user have no right to run the requested type of client. For example, if he tries to log on the application using Thin client and there are roles in the application. At the same time this user has no role containing right of running Thin client. Then this user will not be allowed to log on. But in this case a message will be displayed saying, that this user is not allowed to run this type of client. If there are no roles in the applied solution, you can skip this notice.

Download user.png (21.81 KB)
 
#11
People who like this:0Yes/0No
Active user
Rating: 2
Joined: May 15, 2013
Company:

Hello,
I tried to use Operating system authentication on Linux client (Ubuntu 14.04 connected to Windows AD, 1C 8.3.5.1248), but failed. User list is empty, 1C fails to log in.

All required libraries (User manual 2.4.) are installed.

What am I missing?

 
#12
People who like this:0Yes/0No
Timofey Bugaevsky
Guest

Joined:
Company:

Does the user that you use to run 1C:Enterprise in Designer mode to add users have enough rights to read the list of all OS users?

 
#13
People who like this:0Yes/0No
Active user
Rating: 2
Joined: May 15, 2013
Company:

Quote
Does the user that you use to run 1C:Enterprise in Designer mode to add users have enough rights to read the list of all OS users?
The user I use for testing is a Domain Administrator. It sees all Domain users with:
Code
getent passwd

 
#14
People who like this:0Yes/0No
Timofey Bugaevsky
Guest

Joined:
Company:

Thank you for the information, we are investigating the problem.

 
#15
People who like this:0Yes/0No
Timofey Bugaevsky
Guest

Joined:
Company:

Hello, Aurimas Fišeras!

I'm sorry to say that, but at the moment, OS authentication on Linux clients is not supported. When it will be, it will be noticed in release notes.

 
Subscribe
Users browsing this topic (guests: 1, registered: 0, hidden: 0)
Be the first to know tips & tricks on business application development!

A confirmation e-mail has been sent to the e-mail address you provided .

Click the link in the e-mail to confirm and activate the subscription.