Once configured using Next Active Directory Integration is easy.

Test authentication

After you have set up the blog configuration you should use the integrated Test authentication tool to make sure everything works flawless.

  • Enter an AD username and the associated password. Depending on your configuration you might have to append the domain.
  • Press the “Try to login” button
  • If everything was set up correctly you should receive a success message
  • Otherwise you will receive an error message including the log which provides you further information about what went wrong.
  • If you receive an error message, please take a look at your options or the FAQ page to fix the appeared error and try it again.

Please note that your administrator account will always be implicitly excluded from any authentication. You have to use a normal user account for testing.

Synchronization

Depending upon your webserver environment, the Cron jobs can't be triggered through curl or wget. This could be the case if the webserver, php-fpm or an upfront proxy has a timeout with a low value. If you are not able or allowed to change the timeout, you can use the WP-CLI premium extension to trigger the synchronization from the local command line without interfering with the timeouts.

Sync to AD

The Sync to AD feature synchronize all mapped and enabled attributes from WordPress users back to their Active Directory user account. Please note that the administrator’s account will never be synchronized.

Settings like auth code etc. depends on the current blog. So be careful which blog you are using. Here are some examples:

# curl
curl --data "next_ad_int-task=sync-to-ad&auth-code=wphc1mAu6GsclKsXPio2" http://localhost/wp-admin/admin.php
## for HTTPS with self-signed certificate
curl --insecure --data "next_ad_int-task=sync-to-ad&auth-code=wphc1mAu6GsclKsXPio2" https://localhost/wp-admin/admin.php

# wget
wget --post-data "next_ad_int-task=sync-to-ad&auth-code=wphc1mAu6GsclKsXPio2" http://localhost/wp-admin/admin.php
## for HTTPS with self-signed certificate
wget --no-check-certificate --post-data "next_ad_int-task=sync-to-ad&auth-code=wphc1mAu6GsclKsXPio2" https://localhost/wp-admin/admin.php

Sync to WordPress

The Sync to WordPress feature imports non-existing and updates already existing users of your WordPress installation.

Settings like auth code etc. depends on the current blog. So be careful which blog you are using. Here are some examples:

# curl
curl --data "next_ad_int-task=sync-to-wordpress&auth-code=MFuyIpDJEEOUhw8cLsB0" http://localhost/wp-admin/admin.php
## for HTTPS with self-signed certificate
curl --insecure --data "next_ad_int-task=sync-to-wordpress&auth-code=MFuyIpDJEEOUhw8cLsB0" https://localhost/wp-admin/admin.php

# wget
wget --post-data "next_ad_int-task=sync-to-wordpress&auth-code=MFuyIpDJEEOUhw8cLsB0" http://localhost/wp-admin/admin.php
## for HTTPS with self-signed certificate
wget --no-check-certificate --post-data "next_ad_int-task=sync-to-wordpress&auth-code=MFuyIpDJEEOUhw8cLsB0" https://localhost/wp-admin/admin.php

Notes

  • The synchronization takes a lot of time. Run the synchronization when your environment is not under load.
  • If you use HTTPS and a self-signed certificate you have to use the parameter
    • –no-check-certificate for wget
    • –insecure for curl