Hello,

Another Update:

I also tried the AD-attribute <photo>.
And I also used a software instead of PowerShell (CodeTwo Active Directory 
Photos 1.32 - this software also checks the imagefiles for allowed maximum 
size).
Still - doesn't work ("Internal Error").

By the way (this might actually be an important information): 
One DOESN'T get "Internal Error" if there is no AD-Photo provided.
So all users with no picture stored in AD can login.
The second I save <ldap_user_attr_picture=thumbnailPhoto> or 
<ldap_user_attr_picture=jpegPhoto> or <ldap_user_attr_picture=photo> AND try to 
login with a an LDAP-user-account, that has an image stored in AD, I get 
"Internal Error".



I'm beginning to think, that openmeetings cannot read pictures from AD (octet 
string).
Has anyone managed to use AD-stored-photos OR found a way to provide 
LDAP-accounts with photos?

Best wishes,
Alex


-----Ursprüngliche Nachricht-----
Von: Ninnig, Alexander <alexander.nin...@rechnungshof.rlp.de> 
Gesendet: Montag, 18. Mai 2020 12:03
An: user@openmeetings.apache.org
Betreff: AW: OM 4.0.10, AD-Pictures (or: how can I provide pictures for 
LDAP-accounts)

Hello,

update on my question.

CHECKING ANOTHER AD-ATTRIBUTE
---------------------------------------------------

I just checked the AD-attribute <jpegPhoto>, which also can be used to store 
pictures in Active Directory (<ldap_user_attr_picture=jpegPhoto>). Doesn't work 
either ("Internal Error").


CHECKING THE PICTUREFILES
--------------------------------------------------

After that, I checked my picture-files (to make sure, there is nothing wrong 
with them) and I created two picturefiles "from scratch", meaning, I copied my 
picture into Windows Paint and saved it as .png and as .jpg and even as .bmp.

I imported the jpg using powershell:
        Import-Module ActiveDirectory
        $photo = [byte[]](Get-Content C:\Thumbs\myself.jpg -Encoding byte)
        Set-ADUser Alex -Replace @{jpegPhoto=$photo}
        Set-ADUser Alex -Replace @{thumbnailPhoto=$photo}
Still: "Internal Error" when trying to login.

Then I used the png using powershell:
        Import-Module ActiveDirectory
        $photo = [byte[]](Get-Content C:\Thumbs\myself.png -Encoding byte)
        Set-ADUser Alex -Replace @{jpegPhoto=$photo}
        Set-ADUser Alex -Replace @{thumbnailPhoto=$photo}
Still: "Internal Error" when trying to login.

Then I used the bmp using powershell:
        Import-Module ActiveDirectory
        $photo = [byte[]](Get-Content C:\Thumbs\myself.png -Encoding byte)
        Set-ADUser Alex -Replace @{jpegPhoto=$photo}
        Set-ADUser Alex -Replace @{thumbnailPhoto=$photo} Last command led to 
an error, since <thumbnailPhoto> doens't accept bitmap.
Still: "Internal Error" when trying to login.

My picturefiles are 200x200 pixel and pretty small (png 64 kb, jpg 13 kb, bmp 
118 kb).
I could work on the picturefiles, if I knew what to change (like compression or 
dpi).
But without any hints, it's like a needle in a haystack.
And I don't know if the files are the problem or the AD-attribute or the way, 
the pictures are stored in AD.


Does anyone have an idea?

Best wishes,
Alex

-----Ursprüngliche Nachricht-----
Von: Ninnig, Alexander <alexander.nin...@rechnungshof.rlp.de>
Gesendet: Montag, 18. Mai 2020 10:40
An: user@openmeetings.apache.org
Betreff: OM 4.0.10, AD-Pictures (or: how can I provide pictures for 
LDAP-accounts)

Hello,

we are using OpenMeetings 4.0.10 in our productive environment.

LDAP-Configuration (om_ldap.cfg) works fine, except for getting 
thumbnails/pictures stored in Active Directory.
If I uncomment the line <ldap_user_attr_picture=thumbnailPhoto> and save the 
config-file, I cannot login anymore with my Active-Directory-account - 
OpenMeetings shows an internal error instead.

The only AD-account with a picture stored is my own (so far). The AD-attribute 
ist thumbnailPhoto, so that is correct. Outlook displays my picture, so that 
works, too.

I wouldn't really need AD-stored photos, but I would like my user-accounts to 
have pictures, so one doesn't just see a lot of questionmarks-profilepictures, 
when starting a conference without webcam.
If I use the LDAP-connection, I can provide a picture for my account, but this 
picture is discarded the next time I log in.
So the ldap-connection configured doesn't let me change openmeetings-accounts 
permantenly - which is logical, since they are ldap-accounts.

I just need a way to provide accounts with pictures.
I wouldn't mind configuring them manually.

Does anyone know how to provide user-pictures for ldap-accounts?

Have a nice day and an even better week, Alex

PS: If this already has been discussed and there is an answer I haven't found 
by myself, I apologize. In that case, can you just send my the link tot he 
previous discussion?

Reply via email to