Active Directory / LDAP Harvester Guide

Modified on Wed, Oct 21 at 6:31 PM

IT ITSupportPanel · Deployment

Active Directory / LDAP Harvester Guide

Install and activate the Invarosoft AD/LDAP Harvester, connect it to a client directory, approve imports, run manual or scheduled updates, and configure deployment through XML and command-line tools.

1 · Installation and activation

The Active Directory/LDAP Harvester imports users from a client’s directory into ITSupportPanel and PSA contacts. Follow the steps below to install, configure, and approve the Harvester.

Approval required: Installing and activating the Harvester does not authorize processing until it has been approved in the Invarosoft Portal.
1Install the Harvester

From the Invarosoft Portal, download the AD Harvester installer to your client’s server and run the installation. The configuration screen opens automatically after installation.

ADHarvester configuration window (PDF page 2)
ADHarvester configuration window (PDF page 2)
2Activate the Harvester

Enter the client’s activation code into the field near the top right of the configuration form and click Activate.

Activation code field and Activate button (page 2)
Activation code field and Activate button (page 2)
3Confirm the pending approval state

The Harvester Info section should display Pending Approval. While it remains in this status, Invarosoft servers will not process any actions.

Harvester Info status: Pending Approval (page 3)
Harvester Info status: Pending Approval (page 3)

The Harvester Activation area should show the partner and client details.

Partner and client activation details (page 3)
Partner and client activation details (page 3)
4Configure your AD/LDAP connection

Enter the Active Directory/LDAP server IP address or hostname, a username with permission to browse the directory, and the associated password. The form also provides AD Domain, OU Filter, and Search Filter fields.

AD Connection form (page 3)
AD Connection form (page 3)

Click Test AD Connection to verify connectivity, then use Review Results to inspect the users returned.

5Save and review

Once the connection test succeeds, click Save Changes to save the connection details. Use Review Results again to confirm the set of users the Harvester will collect.

6Approve the Harvester in the portal

In the Invarosoft Portal, go to Clients and click the Harvest button against the relevant client.

Harvest button on the Clients page (page 4)
Harvest button on the Clients page (page 4)

Click Approve on the client’s Harvest page.

Approve button on the Harvest page (page 4)
Approve button on the Harvest page (page 4)
7Verify approval

After approval, the portal displays the Harvest screen. Invarosoft servers are now ready to receive the first Active Directory upload for processing.

Approved Harvest screen (page 4)
Approved Harvest screen (page 4)
2 · Manual updates

You can manually execute an update to synchronize new users sooner than the default scheduled run.

Method A · Via configuration screen
1Open ADHarvester Config

Use the Start Menu or desktop icon labeled ADHarvester Config to reopen the configuration form.

ADHarvester Config shortcut (page 5)
ADHarvester Config shortcut (page 5)
2Execute the upload

Click Execute Upload in the Harvester Info section.

Execute Upload button (page 5)
Execute Upload button (page 5)
3Check the console output

A confirmation dialog is displayed. For more information, review the black command-style console window that opens during the upload.

Example of successful upload console output (page 5)
Example of successful upload console output (page 5)
4Check the portal

According to the source guide, the server-side processor picks up and processes the dataset within approximately 2–5 minutes. Check the client’s Harvest page in the portal to review its status.

Method B · Via shortcut
1Open ADHarvester Manual Update

Use the Start Menu or desktop shortcut labeled ADHarvester Manual Update.

ADHarvester Manual Update shortcut (page 6)
ADHarvester Manual Update shortcut (page 6)
2Let the update run

The shortcut opens a console window, runs the update automatically, and closes shortly afterwards.

Manual Update console window (page 6)
Manual Update console window (page 6)
3Review the Harvest status

The guide states that processing takes approximately 2–5 minutes. Refer to the client’s Harvest page for the result.

3 · Automatic scheduling

The Harvester installer automatically creates a task that runs every 2 hours. You can modify this schedule in Windows Task Scheduler.

1Open Administrative Tools

On the server, open Control Panel and go to Administrative Tools.

Windows Administrative Tools (page 7)
Windows Administrative Tools (page 7)
2Open Task Scheduler

Select Task Scheduler.

Task Scheduler in Administrative Tools (page 7)
Task Scheduler in Administrative Tools (page 7)
3Edit the Harvester task

Find the entry named ITSP ADHarvester and edit its schedule and settings.

ITSP ADHarvester scheduled task (page 7)
ITSP ADHarvester scheduled task (page 7)
4Use the updated schedule

After saving, the directory harvest will run according to the schedule you defined.

4 · Scripted configuration

The Harvester supports configuration through PSA/RMM tools or custom scripts using an XML configuration file and a command-line action.

Example XML configuration file
<xml> <activationcode></activationcode> <adserverip></adserverip> <adusername></adusername> <adpassword></adpassword> <addomain></addomain> <oufilter></oufilter> <searchfilter></searchfilter> </xml>
XML configuration values
ElementPurpose
activationcodeActivation code for the client to which the Harvester is being installed.
adserveripIP address or hostname of the Active Directory server.
adusernameActive Directory user account with directory browsing rights.
adpasswordPassword for that Active Directory account.
addomainField included in the XML example; the source guide does not give a separate definition.
oufilterField included in the XML example; the source guide does not give a separate definition.
searchfilterField included in the XML example; the source guide does not give a separate definition.
Process the configuration

Run itsp.adharvest.exe from its installation directory with the following arguments:

itsp.adharvest.exe CONFIGUREXML "<path to file>"

The results are written to the console. If successful, no further server-side configuration is required, but you must still approve the Harvester in the Invarosoft Portal.

Security: The guide contains a plaintext password field in the XML template. Restrict access to any configuration file containing credentials and remove it when no longer needed.
5 · Command-line executions

The executable supports the following arguments to script Harvester configuration and execution.

ArgumentAction
ACTIVATE <code>Activate the Harvester using the supplied activation code.
DEACTIVATEDeactivate the Harvester without clearing its Active Directory configuration.
RESETPerform a full factory reset, including deactivation and removal of Active Directory configuration.
CONFIGUREOpen the interactive configuration form.
CONFIGUREXML <path>Configure the Harvester from a formatted XML file.
PROCESSUpload Active Directory users to Invarosoft.
Caution: RESET removes the configuration. Use it only when a full reset is intended.
Based on the Invarosoft ITSupportPanel Active Directory/LDAP Harvester Instructions (9-page PDF). Screenshots and the described interfaces reflect the supplied source document.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article