Documentation Centre

System Requirements

Download Project

First, get the project files onto your machine.

1. Download the Project

git clone https://github.com/Ali7Zeynalli/S-RCS.git
cd S-RCS

2. Configuration (.env)

Open the .env file and update the database credentials. You must change the default passwords!

MYSQL_ROOT_PASSWORD=StrongPassword123!
MYSQL_DATABASE=ldap_auth
MYSQL_USER=srcs_admin
MYSQL_PASSWORD=YourPasswordHere!

# Ports
HTTP_PORT=8080
HTTPS_PORT=8043

3. Start Containers

# Build and start services
docker-compose up -d --build

# Check status (Wait 1-2 mins for MySQL)
docker-compose ps

Docker Installation

If you haven't installed Docker yet, follow the instructions for your operating system below.

sudo apt update
sudo apt install -y docker.io docker-compose
sudo usermod -aG docker $USER
# Log out and log back in

Install-Module -Name DockerMsftProvider -Force
Install-Package -Name docker -ProviderName DockerMsftProvider -Force
Restart-Computer

Active Directory Preparation

Step 1: Install Certificate Services

On your Domain Controller, install the Active Directory Certificate Services role via Server Manager. Include these sub-roles:

• ✅ Certification Authority
• ✅ Certification Authority Web Enrollment

Step 2: CA Configuration

After installation, click the yellow notification flag in Server Manager to configure the service. Use these settings:

1. Setup Type: Enterprise CA
2. CA Type: Root CA
3. Private Key: Create a new private key
4. Cryptography: Default (SHA256)
5. Validity: 5 Years

Step 3: Firewall Configuration

You must allow inbound traffic on Port 636. Use one of the following methods:

New-NetFirewallRule -Name "LDAPS" -DisplayName "LDAPS (636)" -Protocol TCP -LocalPort 636 -Action Allow -Direction Inbound

Step 4: Verify LDAPS

Run this command on your DC to verify the port is listening:

Test-NetConnection -ComputerName localhost -Port 636
# Expected Result: TcpTestSucceeded : True

Setup Wizard

Once your containers are running, navigate to https://localhost:8043 (or your server IP). The installer will guide you through 6 steps:

Step 1: System Requirements

The system automatically checks for required extensions (LDAP, PDO, MySQL) and PHP version (7.4+).

• ✅ PHP 7.4+
• ✅ LDAP Extension
• ✅ OpenSSL

Step 2: Domain Configuration

Enter your Active Directory details.

Domain Controller IP	e.g., 192.168.1.10
LDAPS Port	636 (Required)
Admin Group	Group allowed to login first (e.g. Domain Admins)

Step 3: Database

Read-only view of database settings loaded from `.env`.

Step 4 & 5: Install

Review settings and click Install. You will receive a License Key.

Step 6: Security Lock

After installation, the system locks automatically to prevent unauthorized access. If you try to access the installer again, you will see the "System Locked" screen.

To Reinstall:

1. Navigate to www/config/
2. Delete the .installed file

Post-Installation

Granting Access

Initially, only the Admin Group (Step 2) can log in. To add more groups (e.g., "Helpdesk"):

1. Log in as Admin.
2. Go to System Settings → Active Directory.
3. Add groups to Allowed Groups.

Dashboard & Login

The interactive dashboard allows you to monitor your AD environment at a glance.

Login Screen

Dashboard

User Management

Manage users with ease: Reset passwords, unlock accounts, disable/enable, and delete users.

OU Management

Explore your Organization Units in Tree View or Table View.

Group Management

Create and manage Security and Distribution groups. Bulk add members feature available.

Computers & GPOs

View computer objects and GPO details.

Task Management

Internal Helpdesk system for tracking IT requests.

Reporting

Export data to CSV/Excel for auditing.

Audit Logs

Track all administrator actions within the portal.

Troubleshooting

docker-compose down
# Remove mysql volume/folder
docker-compose up -d --build

docker-compose logs              # All logs
docker-compose logs php-apache   # Apache only
docker-compose logs mysql        # MySQL only

Remote Access

Use NovusGate VPN to access S-RCS securely from anywhere without static IPs.

Enterprise Support

We offer paid support services for installation, training, and customization.