Guten Morgen zusammen,
ich habe eine LDAP-Anbindung am Laufen, gegen eine OU=MZZ-Users und hab jetzt eine Aussenstelle dazubekommen auf dem gleichen AD aber User in der OU=ZZZ-Users. Wie erweitere ich hier die config-Datei? Hat jemand einen Tipp? Ich habs nicht hinbekommen
Grüße
Alex
LDAP zweite BaseDN?
Re: LDAP zweite BaseDN?
Code: Select all
#--------------------------------------------------------------------------------------------
# Kunden Authentifizeirung mit AD #
#--------------------------------------------------------------------------------------------
$Self->{'Customer::AuthModule1'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host1'} = 'dc;
$Self->{'Customer::AuthModule::LDAP::BaseDN1'} = 'OU=MZV-Users, DC=, DC=';
$Self->{'Customer::AuthModule::LDAP::UID1'} = 'sAMAccountName';
# Kunden müssen der Gruppe angehören um sich anzumelden
$Self->{'Customer::AuthModule::LDAP::GroupDN1'} = 'CN=otrs-user,OU=MZV-Users,DC=,DC=';
$Self->{'Customer::AuthModule::LDAP::AccessAttr1'} = 'member';
# User Account mit Domänen-Benutzer Recht für AD abgleich
$Self->{'Customer::AuthModule::LDAP::SearchUserDN1'} = 'xx';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw1'} = 'xx';
#--------------------------------------------------------------------------------------------
# Kundendaten #
#--------------------------------------------------------------------------------------------
$Self->{CustomerUser1} = {
Name => 'MZV',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => 'dc',
BaseDN => 'OU=MZV-Users, DC=, DC=',
SSCOPE => 'sub',
UserDN => 'xx',
UserPw => 'xx',
AlwaysFilter => '(&(objectclass=user)(mail=*.*@xx.de))',
SourceCharset => 'utf-8',
DestCharset => 'utf-8',
},
CustomerKey => 'sAMAccountName',
CustomerID => 'mail',
CustomerUserListFields => [ 'cn', 'mail'],
CustomerUserSearchFields => [ 'cn', 'mail'],
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
Map => [
# note: Login, Email and CustomerID needed!
# var, frontend, storage, shown, required, storage-type
[ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
# [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ],
# [ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
[ 'UserOffice', 'Office', 'physicalDeliveryOfficeName', 1, 0, 'var' ],
],
};
#--------------------------------------------------------------------------------------------
# Partner-Kunden Authentifizeirung mit AD #
#--------------------------------------------------------------------------------------------
$Self->{'Customer::AuthModule2'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host2'} = 'dc;
$Self->{'Customer::AuthModule::LDAP::BaseDN2'} = 'OU=Partner-Users, DC=, DC=';
$Self->{'Customer::AuthModule::LDAP::UID2'} = 'sAMAccountName';
# Kunden müssen der Gruppe angehören um sich anzumelden
$Self->{'Customer::AuthModule::LDAP::GroupDN2'} = 'CN=otrs-user,OU=MZV-Users,DC=,DC=;
$Self->{'Customer::AuthModule::LDAP::AccessAttr2'} = 'member';
# User Account mit Domänen-Benutzer Recht für AD abgleich
$Self->{'Customer::AuthModule::LDAP::SearchUserDN2'} = 'xx';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw2'} = 'xx';
$Self->{'Customer::AuthModule2::LDAP::Die'} = 1;
#--------------------------------------------------------------------------------------------
# Partner-Kundendaten #
#--------------------------------------------------------------------------------------------
$Self->{CustomerUser2} = {
Name => 'Partner',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => 'dc',
BaseDN => 'OU=Partner-Users, DC=, DC=',
SSCOPE => 'sub',
UserDN => 'xx',
UserPw => 'xx',
AlwaysFilter => '(&(objectclass=user)(mail=*.*@xx.de))',
SourceCharset => 'utf-8',
DestCharset => 'utf-8',
},
CustomerKey => 'sAMAccountName',
CustomerID => 'mail',
CustomerUserListFields => [ 'cn', 'mail'],
CustomerUserSearchFields => [ 'cn', 'mail'],
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
Map => [
# note: Login, Email and CustomerID needed!
# var, frontend, storage, shown, required, storage-type
[ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
# [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ],
# [ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
[ 'UserOffice', 'Office', 'physicalDeliveryOfficeName', 1, 0, 'var' ],
],
};
Re: LDAP zweite BaseDN?
Er meldet authentification ok aber no such user d.h. er kann den user nicht eintragen...
Hab ich irgendwo noch einen Fehler ?
Hab ich irgendwo noch einen Fehler ?
Re: LDAP zweite BaseDN?
Erledigt der Filter war das problem