{"id":6728,"date":"2018-01-26T01:11:37","date_gmt":"2018-01-25T16:11:37","guid":{"rendered":"https:\/\/chat-messenger.com\/?p=6728"},"modified":"2026-03-22T01:44:46","modified_gmt":"2026-03-21T16:44:46","slug":"active-directory-ldap","status":"publish","type":"post","link":"https:\/\/chat-messenger.com\/en\/manual\/camserver\/active-directory-ldap","title":{"rendered":"Active Directory Linkage"},"content":{"rendered":"<h2 class=\"wp-block-heading\">Active Directory Linkage Overview<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">On-premise CAMServer Enterprise makes ID authentication very easy by providing Active Directory linkage. The following can be achieved<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"\/en\/manual\/install-discount\/cam-webapp\/\">Web App Version<\/a>Active Directory Authentication ID is initially displayed during login authentication when using<\/li><li>Passwordless authentication and OS passwords can be used for ID authentication.<\/li><li>CAMServer uses Active Directory's LDAP protocol to determine if identity authentication is successful.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Active Directory ID Linkage<\/h2>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"2961\" height=\"1327\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2024\/03\/image-10.png\" alt=\"\" class=\"wp-image-10770\"\/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\">When Active Directory ID Linkage is enabled, the login ID is automatically set if the user is Active Directory authenticated.<\/p>\n\n\n\n<p class=\"is-style-icon_announce wp-block-paragraph\">The login ID can be set automatically by <a href=\"https:\/\/chat-messenger.com\/en\/manual\/install-discount\/cam-webapp\/\">Web App Version<\/a> only.<\/p>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Authentication method<\/h2>\n\n\n\n<p class=\"is-style-icon_info wp-block-paragraph\"><span class=\"swl-fz u-fz-s\">Before saving this setting, be sure to complete the LDAP settings first and perform &quot;Test LDAP Settings&quot;.<\/span><\/p>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"3100\" height=\"1300\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2024\/03\/image-11.png\" alt=\"\" class=\"wp-image-10772\"\/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\">After enabling Active Directory ID linkage, you can optionally select &quot;Passwordless Authentication&quot; or &quot;OS Password Authentication&quot;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n<\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"ADPasswordless\">Passwordless Authentication<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you are logged in to AD, the information that can be obtained is encrypted and used as an authentication token, making it possible to log in to the service without a password.<span class=\"swl-marker mark_blue\">Before enabling this setting, you must configure the &quot;AD user to perform proxy authentication&quot; and &quot;Test LDAP settings&quot;.<\/span><\/p>\n\n\n\n<p class=\"is-style-icon_info wp-block-paragraph\"><a href=\"https:\/\/chat-messenger.com\/en\/manual\/camserver\/windows-authentication\/\">SSO with Integrated Windows Authentication<\/a> has the advantage in terms of security.<\/p>\n\n\n\n<p class=\"is-style-big_icon_caution wp-block-paragraph\">interpoint (interword separation)<span class=\"swl-marker mark_orange\">If this setting is activated, access will only be available in the Web App version.<\/span><br>- If there is a configuration error, no one will be able to log in. However, you can disable &quot;passwordless authentication&quot; by setting cam.disableADPasswordless=true in the CAMServer\/boot.ini file and starting CAMServer. After disabling and starting, review all settings and be sure to perform an &quot;LDAP setting test&quot; before enabling &quot;passwordless authentication&quot;. After enabling it, delete cam.disableADPasswordless from the cam.ini file and restart CAMServer.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">OS Password Authentication<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The OS password is used for user authentication.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When registering a new user, please set a temporary password and register it. Once &quot;OS password authentication&quot; is successful, authentication will be considered OK, and the registered password on C&amp;M will be overwritten.<\/p>\n\n\n\n<p class=\"is-style-icon_pen wp-block-paragraph\">Even if &quot;OS password authentication&quot; fails, the user will be registered with C&amp;M and a password will be set; if it matches, authentication will be considered successful.<br>This setting is <a href=\"https:\/\/chat-messenger.com\/en\/manual\/camserver\/windows-authentication\/\">SSO with Integrated Windows Authentication<\/a> It can be used in conjunction with the following:<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"LDAP-config\">LDAP Settings<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full is-resized is-style-border\"><img decoding=\"async\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2026\/03\/image-11.png\" alt=\"\" class=\"wp-image-12763\" width=\"554\" height=\"209\"\/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">LDAPUrl<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This is the URL for searching the ActiveDirectory server using LDAP. Specify the address and port in LDAPUrl as necessary. If blank, <code>ldap:\/\/localhost:389<\/code> You can access it via port 389, which is the default for ldap.<\/p>\n\n\n\n<p class=\"is-style-icon_pen wp-block-paragraph\">If SSL is required, use LDAPS <code>ldaps:\/\/&lt;FQDN&gt;:636<\/code> Specify this.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">LDAPBaseDN<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">LDAPBaseDN is a value that specifies the starting position for searching for a user in the object tree of the LDAP server. Multiple LDAPBaseDNs can be specified, separated by newlines.<\/p>\n\n\n\n<p class=\"is-style-icon_announce wp-block-paragraph\">In CAMServer v4.60.17 and later versions, leaving it unspecified is usually not a problem. In previous versions, if left unspecified, only the Users container (e.g., CN=Users,DC=camtest,DC=com) would be automatically added.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">If not specified<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">If not specified, the LDAPBaseDN is automatically generated from the domain of the user ID and the entire domain is searched. For example, when searching for a user named user1@camtest.com, the LDAPBaseDN would be &quot;DC=camtest, DC=com&quot;.<\/p>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-resized is-style-border\"><img decoding=\"async\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2024\/04\/image-2.png\" alt=\"\" class=\"wp-image-10811\" width=\"290\" height=\"226\"\/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"1159\" height=\"605\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2024\/04\/image-1.png\" alt=\"\" class=\"wp-image-10809\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h4 class=\"wp-block-heading\">If specified<\/h4>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container\">\n<p class=\"wp-block-paragraph\">If users are located within organizational units (OUs), you can narrow down your search by specifying their individual BaseDNs. The diagram below shows a setting that searches the organizational units (OUs) of the Sales Department and the Accounting Department.<\/p>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-resized is-style-border\"><img decoding=\"async\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/05\/image-1.png\" alt=\"\" class=\"wp-image-11938\" width=\"467\" height=\"207\"\/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<p class=\"is-style-icon_pen wp-block-paragraph\"><span class=\"swl-fz u-fz-s\">Even if you specify otherwise, the default Users container (CN=Users,DC=yourdomain,DC=com) will also be automatically added to the search.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Testing Delegated Authentication AD User and LDAP Settings<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When using SSO or passwordless authentication with Windows Integrated Authentication, configure an AD user to perform proxy authentication and then perform a &quot;Test LDAP Settings&quot;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the above authentication process, an internal LDAP search is performed to verify whether the AD user performing proxy authentication is a legitimate AD user.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ADSync\">Active Directory synchronization settings<\/h2>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"1473\" height=\"618\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2024\/03\/image-9.png\" alt=\"\" class=\"wp-image-10763\"\/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\">When Active Directory synchronization settings are enabled, information will be retrieved from Active Directory at the specified time and user information in Chat&amp;Messenger will be updated.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The information to be updated is below.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Username...AD displayName attribute<\/li><li>Group name...AD department attribute<\/li><li>Email\u30fb\u30fb\u30fbAD email attribute<\/li><\/ul>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">FAQ<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Can I create a user that does not exist in Active Directory?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you do not select &quot;Passwordless&quot; as the authentication method, you can create an account on the Chat&amp;Messenger user management screen and log in even if the user does not exist in Active Directory.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Can I synchronize with Active Directory to automate user addition?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Currently, Chat&amp;Messenger does not automatically add or delete users based on Active Directory users. Therefore, even if Active Directory linkage is enabled, the administrator must create Chat&amp;Messenger users using the user registration screen on the management screen or by uploading CSV.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>\n<figure><img decoding=\"async\" src=\"\/images\/user-admin-userinput.png\" border=\"0\"><\/figure><div class=\"card-img post_img\" style=\"width: 300px!important;\"><\/div>\n<\/td><td> <figure><img decoding=\"async\" border=\"0\" src=\"\/images\/user-admin-csvupload.png\"><\/figure><div class=\"card-img post_img\" style=\"width: 300px!important;\">*CSV upload only adds\/changes Chat&amp;Messenger users and does not delete them. Please delete one item at a time from the management screen.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"Get-ADUser\">I want to get a list of Active Directory users and create a CSV.<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You can obtain a list of Active Directory users using PowerShell&#039;s Get-ADUser. of this list <em>UserPrincipalName<\/em> Please create a CSV file using the User ID (work email address) on Chat&amp;Messenger.<\/p>\n\n\n\n<div class=\"hcb_wrap\" data-no-translation=\"\"><pre class=\"prism line-numbers lang-bash\" data-lang=\"Bash\"><code>&gt; Get-ADUser -Filter {objectClass -eq &quot;user&quot;} -Properties info\n\nDistinguishedName : CN=user1,CN=Users,DC=***,DC=com\nGivenName         : \u30e6\u30fc\u30b6\uff11\nName              : user1\nObjectClass       : user\nObjectGUID        : bf84cdab-2c21-44cf-aaca-afe493d97f2a\nSamAccountName    : user1\nSID               : S-1-5-21-3698402442-2374923176-*****-1104\nSurname           : \u30e6\u30fc\u30b6\uff11\nUserPrincipalName : user1@***.com\n\nDistinguishedName : CN=user2,CN=Users,DC=***,DC=com\nGivenName         : user2\nName              : user2\nObjectClass       : user\nObjectGUID        : 482450a4-482a-40ac-b89b-434605f45571\nSamAccountName    : user2\nSID               : S-1-5-21-3698402442-2374923176-*****-1105\nSurname           : \u30c6\u30b9\u30c8\nUserPrincipalName : user2@***.com\n\n# AD users \u306e\u30ea\u30b9\u30c8\u3092 CSV\u3067\u51fa\u529b\n&gt; $users = Get-ADUser -Filter {objectClass -eq &quot;user&quot;} -Properties UserPrincipalName, GivenName\n&gt; $selectedUsers = $users | Select-Object UserPrincipalName, GivenName\n&gt; $selectedUsers | Export-Csv -Path &quot;C:\\path\\to\\output\\users.csv&quot; -NoTypeInformation<\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>Active Directory \u9023\u643a\u6982\u8981 \u30aa\u30f3\u30d7\u30ec\u30df\u30b9 CAMServer Enterprise \u3067\u306f\u3001Ac [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":"","footnotes":""},"categories":[17],"tags":[],"class_list":["post-6728","post","type-post","status-publish","format-standard","hentry","category-camserver"],"_links":{"self":[{"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/posts\/6728","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/comments?post=6728"}],"version-history":[{"count":9,"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/posts\/6728\/revisions"}],"predecessor-version":[{"id":12772,"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/posts\/6728\/revisions\/12772"}],"wp:attachment":[{"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/media?parent=6728"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/categories?post=6728"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chat-messenger.com\/en\/wp-json\/wp\/v2\/tags?post=6728"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}