ok, further update on this item. I realised I was missing something simple, I'm sure this will help others:
- You must authenticate users somehow (i.e. the Login addon)
- The system requires you to log in with your windows credentials, it is not using NTLM
- There is a Plugin which is triggered on the system events onManagerAuthentication, onUserNotFound & onWebAuthentication
At the point of logging in with Windows credentials, modActivedirectory will hit the AD and get the user info block, by logging into the AD with the credentials provided (therefore it does not need the admin credentials supplied).
I've now discovered a further problem (should I raise this elsewhere in a ticketing system??). I noted that the mAD would create the user in MODX but not fill in the details, with a bit of debug logging I determined the following line would fail in onusernotfound.php:
$user->Profile =& $profile;
I simply don't know enough about PHP to get an actual trace, all I know is it didn't make it past this line of code. As a profile save immediate precedes this line, was indeed working and I could see that onauthentication.php fills out the profile again, along with the user added to the appropriate groups (depending on settings), I simply commented out this line. The onWebAuthentication event must surely be fired next in all cases I could think of! Commenting out that line worked and the users are now created fully when logging on using AD credentials.
