User login gets disabled anytime I manually do a sync

[twinsmom71]

Wondering if anyone else is seeing this, if I do a manual LDAP sync all of my users who I had marked to have the ability to login get reset. Any ideas?

[snipe]

Hi @twinsmom71 - sounds to me like you don't have the correct mapping set up in your LDAP settings. See the screenshot below:

[twinsmom71]

And what should it be set to if I only want to allow certain users to login and not everyone?

[snipe]

We don't currently support that, unfortunately.

[swift2512]

And what should it be set to if I only want to allow certain users to login and not everyone?
I edit users via 'Bulk edit' feature and it looks like that ability for user to login doesn't change on LDAP sync. I've tested this today and all employees with disabled logins in AD are marked as able to login in Snipe-IT.
(Field 'LDAP Active Flag' is left blank in my install.)

[swift2512]

@twinsmom71 Just tested, for me it works both way. I've disabled login for user (via 'Bulk edit') who is Enabled in LDAP and ran LDAP Sync on SnipeIT- login didn't change to to Enabled.
You can always create a user group in admin settings with every permission denied - this way users can login, but can only see items assigned to them and nothing else.