What happens when a imported users gets deleted from the AD?

[luis-gmonkey]

Hello guys,

Sadly I can't do much to test my AD connection, so I was wondering what happens if I delete an AD user that was previously imported in laravel? Will I still be able to login in my laravel app since the database still holds the user credentials?

I'm asking this because I need to prevent AD deleted user from connecting to the laravel app.

I'll be using soft deletes paired with the `import --delete`` to handle this kind of situations.

[stevebauman]

Hi @luis-gmonkey,

Simply set the sync_passwords option to false and you're all set. Users who are missing from your AD server will not be able to authenticate.

Since you're using soft-deletes on your User Eloquent model, you can also leverage the --delete-missing flag on the php artisan ldap:import command.

[luis-gmonkey]

Hi again @stevebauman :)

But by putting sync_passwords to false wouldn't make the login to fail when the AD is offline?
(since I'm speaking of this is possible to add another connection as a backup? Sorry to make another question here)

I'll be using --delete-missing and --restore

[stevebauman]

Hi @luis-gmonkey,

But by putting sync_passwords to false wouldn't make the login to fail when the AD is offline?

Yes that's correct.

(since I'm speaking of this is possible to add another connection as a backup? Sorry to make another question here)

Yup that's absolutely possible. Simply add another host/IP address to your hosts array that you've configured:

LdapRecord-Laravel/config/ldap.php

Line 32 in 8734ba7

'hosts' => [env('LDAP_HOST', '127.0.0.1')],

However, the other host/IP's you add must be LDAP servers that are on the same domain.

Hope this helps!