[Bug]: LDAP Sync Button Missing for Administrators

[PP-JN-RL]

Snipe-IT Version

v8.7.2 build 24589

PHP Version

8.3.6

Composer Version

2.10.2

MySQL/MariaDB version

MySQL 9.7.2

How did you install Snipe-IT?

Docker

Is this a fresh install or an upgrade?

Upgrade

What happened?

It looks like in the latest version, the LDAP Sync button is no longer available for administrators.
It only appears for super admins. Is there a way to give administrators access to this without making them a super admin?

What browsers are you seeing the problem on?

Microsoft Edge

Can you reproduce this on the public demo?

N/A

Do you have full multiple company support enabled?

No

If you have full multiple company support enabled, do you have location scoping to company enabled?

I do not have full multiple company support enabled

Application log output

Browser console output

Common Issues

• I have searched this repo for existing issues related to my issue (including closed issues)
• My APP_URL is set correctly in my .env file (including http or https and no trailing slash)
• I have searched the official Snipe-IT documentation and have checked the Common Issues documentation (where applicable)
• I have run database migrations (where applicable).
• I have attached screenshots and/or videos of the issue (where applicable)

Code of Conduct

• I agree to follow this project's Code of Conduct

[snipe]

That's not really a bug, it was a choice we made. LDAP syncs should really be run on a cron, as they can often time out on larger directories, and with FMCS+location scoping, it gets messy letting users who could be company or location-scoped touch things that cross companies/locations.

[PP-JN-RL]

Ok, understood. With that in mind, could we have a least an option within Snipe to have the LDAP sync run on a fixed schedule?
This would make it easier for container deployments without having to make up shell scripts to hook into the container to run it.

[snipe]

You own the container, so you always have that option.

• https://snipe-it.readme.io/docs/configuring-alerts-backups
• https://snipe-it.readme.io/docs/ldap-sync

You'd want to set up a cron in the container that periodically runs php artisan snipeit:ldap-sync

Snipe-IT Documentation

Configuring Alerts & Backups

Starting from Snipe-IT v3.0, all automated tasks are handled via the scheduler. To set a cron job to run every minute to ping the scheduler: * * * * * /path/to/php /path/to/artisan schedule:run >> /dev/null 2>&1 The scheduler already knows how often it should trigger the individual tasks, because of…

Snipe-IT Documentation

LDAP Sync

❗️ Large LDAP Directories: In your .env file, you may need to modify the LDAP_MEM_LIM (expressed as '500M' for 500MB) and/or the LDAP_TIME_LIM (expressed in seconds) in order to avoid a large LDAP sync from timing out or exhausting all memory. The default time limit is 10 minutes. The default memory…

[PP-JN-RL]

Ok, I have found a way that works for me. Sharing here incase anyone comes across the same issue.
I'm using Komodo to orchestrate the containers.

1. Create an Action in Komodo with the following content:

let shell = "sh";
let server = "your-server-name";
let container = "your-snipe-it-container-name";
let command = "php artisan snipeit:ldap-sync --summary";  // remove --summary after testing

await komodo.execute_container_terminal(
  {
    server,
    container,
    command,
    init: { command: shell, recreate: "Always" },
  },
  {
    onLine: (line) => {
      console.log(line);
    },
    onFinish: (code) => {
      console.log(`Command finished with exit code ${code}`);
    },
  },
);

2. Create a Procedure to call the Komodo Action

[[procedure]]
name = "Sync Snipe LDAP"
config.webhook_enabled = false
config.schedule = "Every 30 minutes" // set this to your preferred time

[[procedure.config.stage]]
name = "Stage 1"
enabled = true
executions = [
  { execution.type = "RunAction", execution.params.action = "snipe-ldap-sync", execution.params.args = {}, enabled = true }
]

3. Thats it!

I hope this helps in case anyone else comes across this.
A good long term solution would be to add a schedule to PHP that runs the ldap-sync command at a configurable interval.
Will look into this when I have a bit more time.

[snipe]

A good long term solution would be to add a schedule to PHP that runs the ldap-sync command at a configurable interval.

Yes, it's called cron. It's documented.