Znuny Open Source Ticketsystem

Hi,

Meanwhile I did something quite similar.
The ideea is the agents needs to be members to ad group to be able to login.
This ad group it is also syncronized with an otrs role which has no access to any otrs group
When the roles are synchronized with
ad group this role will be first synchronized ...

In Config.pm first inactivate the role for the agent and then activate it.
See bellow an example:

$Self->{'AuthSyncModule::LDAP::UserSyncRolesDefinition'} = {
'cn=otrs-agent,ou=Special Groups,dc=domain,dc=lan' => {
'Write Role' => 0,
},
'cn=otrs-agent,ou=Special Groups,dc=domain,dc=lan ...