Search found 17 matches

by gwaitsi
19 Feb 2011, 01:28
Forum: General
Topic: TimeAccounting 1.4.92
Replies: 2
Views: 1873

Re: TimeAccounting 1.4.92

uninstall and downgrade to 1.4.91 seems to work
by gwaitsi
16 Feb 2011, 10:33
Forum: General
Topic: TimeAccounting 1.4.92
Replies: 2
Views: 1873

TimeAccounting 1.4.92

I have check this on a couple of different test systems now and have getting: TimeAccounting 1.4.92 - Package not correctly deployed! You should reinstall the Package again! Uninstall/Reinstall option on the packages list. Have tried both, to no effect. Error Log states: Wed Feb 16 10:21:12 2011 err...
by gwaitsi
15 Feb 2011, 13:21
Forum: General
Topic: Overcome AD/LDAP limitations
Replies: 13
Views: 15197

Re: Overcome AD/LDAP limitations

yes, it seems i was fighting myself mixing the two things. I have set CustomerUserSearchListLimit => 100, which gives me a quick response and then the ability to filter for specific names. so functionally it works. Nevertheless, i still get a size limit exceeded because i have more than 1000 users a...
by gwaitsi
15 Feb 2011, 12:06
Forum: General
Topic: Overcome AD/LDAP limitations
Replies: 13
Views: 15197

Re: Overcome AD/LDAP limitations

Well, when you click on "Customers" from the backend menu, in my case it takes one or two minutes to build the list of people because it has to traverse the whole tree (we have users and different country containers). From the list that is built, i know there must be 200+ missing (although...
by gwaitsi
15 Feb 2011, 09:54
Forum: General
Topic: Overcome AD/LDAP limitations
Replies: 13
Views: 15197

Re: Overcome AD/LDAP limitations

"The simple paged results control is a type of control that can be attached to a search operation to indicate that only a subset of the results should be returned. It may be used to iterate through the search results a page at a time. It is similar to the virtual list view control with the exce...
by gwaitsi
14 Feb 2011, 18:57
Forum: General
Topic: Overcome AD/LDAP limitations
Replies: 13
Views: 15197

Re: Overcome AD/LDAP limitations

no, but from my understanding, the application should build its table using paging per my earlier post, then this wouldn't be an issue.
by gwaitsi
14 Feb 2011, 18:08
Forum: General
Topic: Overcome AD/LDAP limitations
Replies: 13
Views: 15197

Re: Overcome AD/LDAP limitations

I changed the below setting to a range of numbers between 1500 and 4000 (current) - doesn't make any difference to where it stops in my list.

CustomerUserSearchListLimit => 250,
by gwaitsi
14 Feb 2011, 17:47
Forum: General
Topic: AD/LDAP authentication - groups in group
Replies: 16
Views: 12303

Re: AD/LDAP authentication - groups in group

I am not sure i agree with that. "Nested groups" was the word i was looking for and i don't see how that would be less secure. i.e. the is less room for error by only dealing with sub groups of individuals. From my browsing it seems to be an application decision whether or not to implement...
by gwaitsi
14 Feb 2011, 17:10
Forum: General
Topic: Overcome AD/LDAP limitations
Replies: 13
Views: 15197

Re: Overcome AD/LDAP limitations

If i use "Customers" from the backend, i only receive a partial list of customers/users - we have approx 1500. i.e. we only receive up to the letter "P". In the log is the error "Size Limit Exceeded". This also occurs if i use an LDAP browser. We have Win2003 and i unde...
by gwaitsi
14 Feb 2011, 14:05
Forum: General
Topic: Overcome AD/LDAP limitations
Replies: 13
Views: 15197

Re: Overcome AD/LDAP limitations

After further reading, i understand the queries should used results control per below. Is it possible to configure OTRS to use paged results for the customers/users list? The simple paged results control is a type of control that can be attached to a search operation to indicate that only a subset o...
by gwaitsi
14 Feb 2011, 12:40
Forum: General
Topic: Overcome AD/LDAP limitations
Replies: 13
Views: 15197

Overcome AD/LDAP limitations

We have about 1500 users in different contained and i have successfully authenticated the users to AD/LDAP and filtered to only the active users showing up. My problem is, i don't get all the users i.e. only to "P" because of what appears to be the AD MaxPageSize setting of 1000. my admin ...
by gwaitsi
14 Feb 2011, 12:35
Forum: General
Topic: AD/LDAP authentication - groups in group
Replies: 16
Views: 12303

Re: AD/LDAP authentication - groups in group

Sorry, i don't get your meaning. i tried to change as follows; $Self->{'AuthModule::LDAP::GroupDN'} = 'cn=OTRS_Agents,ou=Services,ou=Maintenance,dc=blah,dc=blah'; $Self->{'AuthModule::LDAP::AccessAttr'} = 'memberUid'; $Self->{'AuthModule::LDAP::UserAttr'} = 'DN'; to $Self->{'AuthModule::LDAP::GroupD...
by gwaitsi
11 Feb 2011, 23:00
Forum: General
Topic: AD/LDAP authentication - groups in group
Replies: 16
Views: 12303

Re: AD/LDAP authentication - groups in group

i don't think that is the solution. i.e. the IT Group would be a member of the Agents group, but only selected members of other departments would be members of the Agents group. It seems to me, that it would be better to test the "membersOf" attribute of the user. If the user is a member o...
by gwaitsi
11 Feb 2011, 16:56
Forum: General
Topic: AD/LDAP authentication - groups in group
Replies: 16
Views: 12303

Re: AD/LDAP authentication - groups in group

thanks crythias, that has some interesting info in that article but doesn't quite deal with my issue. My agents are members of certain department groups. these department groups are added to the OTRS_Agents group. If using the default authentication based on group membership, it doesn't work because...
by gwaitsi
11 Feb 2011, 14:03
Forum: General
Topic: AD/LDAP authentication - groups in group
Replies: 16
Views: 12303

Re: AD/LDAP authentication - groups in group

Let me rephase the question. Instead of using # Check if the user is allowed to auth in a posixGroup # (e. g. user needs to be in a group OTRS_Agents to use otrs) $Self->{'AuthModule::LDAP::GroupDN'} = 'cn=OTRS_Agents,ou=Services,ou=Maintenance,dc=blah,dc=blah'; $Self->{'AuthModule::LDAP::AccessAttr...
by gwaitsi
09 Feb 2011, 15:57
Forum: General
Topic: AD/LDAP authentication - filters
Replies: 1
Views: 1529

AD/LDAP authentication - filters

I have LDAP/AD authentication working for agents and customers, however, my users are spread in country containers and therefore i need to search the whole tree. for filtering, i need to filter based on (&(objectClass=user)(!(objectClass=computer))) but this doesn't seem to work. Is it possible ...
by gwaitsi
09 Feb 2011, 15:55
Forum: General
Topic: AD/LDAP authentication - groups in group
Replies: 16
Views: 12303

AD/LDAP authentication - groups in group

I have LDAP authentication working for the Agents via MS AD. I created a group OTRS_Agents and for users directly added to the group, it is no problem. I couldn't figure out how to get a group in group member to authenticate though. i.e. users -> IT (group) -> OTRS_Agents (group) users -> HR (group)...