User directory: Synchronization and log-in no longer work – COYO Campus

Synchronization problems

If individual users haven’t been synchronized or are considered orphaned, they weren’t found during the synchronization process. Please make sure that these users have completed all of the mandatory fields in your directory.

The mandatory fields are fields that have been stated in COYO in the user directory on the tab "User" under "Attribute for". The profile fields are optional.

If you’re unable to identify the problem here, an LDAP browser, such as ldapsearch (Linux command-line ldap browser), will help.
Then search with precisely the settings that have been used in COYO.

You’ll find the command for the tool ldapsearch below. Execute the command on the COYO host if you operate COYO yourself.

Without SSL:

ldapsearch -h "<Hostname>" -p <Port> -D "<Benutzername>" -w "<Passwort>" -b "<Basis DN>" "<Filter des Benutzer-Objekts (optional)>"

With SSL:

ldapsearch -H "ldaps://<Hostname>:<Port>" -D "<Benutzername>" -w "<Passwort>" -b "<Basis DN>" "<Filter des Benutzer-Objekts (optional)>"

If you’re using the same settings as in COYO, you should see the same user here as in COYO. If your missing user appears here, with all of the necessary fields completed, this user should also be imported/updated during the next sync.

If a users from a user directory is unable to log in, there may be problems with the connection or configuration of the directory set up in COYO.

First, ensure via the COYO Administration that the connection to the user directory is working. To do this, edit the user directory that you’ve set up and click on "Test connection" on the "Connection" tab.

In the event of an error, the button will turn red and a technical error message will be displayed. The LDAP error codes and their meaning can be found on the Internet.

If the connection is working but it’s still not possible to log in, please check whether the last part of the "userPrincipleName" of the respective user matches the AD domain configured in COYO.

If an AD domain is stated in COYO, this needs to apply to the users.

Log entries

COYO On-Premises

If you operate your COYO yourself, you can easily take a look at the log reports for the sync process in Kibana or on your COYO host yourself.

Kibana:

URL: https://<COYO_URL>:5601
User: <COYO_MANAGEMENT_USER>
Password: <COYO_MANAGEMENT_PASSWORD>

You can find the URL, user and password in your .env file.

You can also find a log file directly in the main directory under:

<COYO_DATA_STORAGE>/backend/logs/coyo-backend.log

Start the synchronization process and observe the log. Reports appear here, such as that an e-mail is already assigned or that mandatory fields haven’t been completed. These precise error messages allow you to know what needs fixing.

If you should need any help with this, please contact our Service Desk. Our qualified experts will be happy to help you.

COYO Cloud

If you’re using our Cloud solution, you can send us an inquiry via our Service Desk. We’ll help you with the analysis.