LDAP zweite BaseDN?

[beastmoar]

Guten Morgen zusammen,

ich habe eine LDAP-Anbindung am Laufen, gegen eine OU=MZZ-Users und hab jetzt eine Aussenstelle dazubekommen auf dem gleichen AD aber User in der OU=ZZZ-Users. Wie erweitere ich hier die config-Datei? Hat jemand einen Tipp? Ich habs nicht hinbekommen

Grüße
Alex

[beastmoar]

Code: Select all

#--------------------------------------------------------------------------------------------
    #                              Kunden Authentifizeirung mit AD                              #
    #--------------------------------------------------------------------------------------------
      $Self->{'Customer::AuthModule1'} = 'Kernel::System::CustomerAuth::LDAP';
      $Self->{'Customer::AuthModule::LDAP::Host1'} = 'dc;
      $Self->{'Customer::AuthModule::LDAP::BaseDN1'} = 'OU=MZV-Users, DC=, DC=';
      $Self->{'Customer::AuthModule::LDAP::UID1'} = 'sAMAccountName';
     
      # Kunden müssen der Gruppe angehören um sich anzumelden
      $Self->{'Customer::AuthModule::LDAP::GroupDN1'} = 'CN=otrs-user,OU=MZV-Users,DC=,DC=';
      $Self->{'Customer::AuthModule::LDAP::AccessAttr1'} = 'member';


      # User Account mit Domänen-Benutzer Recht für AD abgleich
      $Self->{'Customer::AuthModule::LDAP::SearchUserDN1'} = 'xx';
      $Self->{'Customer::AuthModule::LDAP::SearchUserPw1'} = 'xx';


 #--------------------------------------------------------------------------------------------
    #                                     Kundendaten                                           #
    #--------------------------------------------------------------------------------------------
       $Self->{CustomerUser1} = {
        Name => 'MZV',
        Module => 'Kernel::System::CustomerUser::LDAP',
        Params => {
          Host => 'dc',
          BaseDN => 'OU=MZV-Users, DC=, DC=',
          SSCOPE => 'sub',
          UserDN => 'xx',
          UserPw => 'xx',
AlwaysFilter =>  '(&(objectclass=user)(mail=*.*@xx.de))',
         SourceCharset => 'utf-8',
          DestCharset => 'utf-8',
         },
        CustomerKey => 'sAMAccountName',
        CustomerID => 'mail',
        CustomerUserListFields => [ 'cn', 'mail'],
        CustomerUserSearchFields => [ 'cn', 'mail'],
        CustomerUserPostMasterSearchFields => ['mail'],
        CustomerUserNameFields => ['givenname', 'sn'],
        Map => [
          # note: Login, Email and CustomerID needed!
          # var, frontend, storage, shown, required, storage-type
          [ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
          [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
          [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
          [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
          [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
          [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
          [ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
    #       [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ],
    #       [ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
          [ 'UserOffice', 'Office', 'physicalDeliveryOfficeName', 1, 0, 'var' ],	
        ],
      };




#--------------------------------------------------------------------------------------------
    #                              Partner-Kunden Authentifizeirung mit AD                              #
    #--------------------------------------------------------------------------------------------
      $Self->{'Customer::AuthModule2'} = 'Kernel::System::CustomerAuth::LDAP';
      $Self->{'Customer::AuthModule::LDAP::Host2'} = 'dc;
      $Self->{'Customer::AuthModule::LDAP::BaseDN2'} = 'OU=Partner-Users, DC=, DC=';
            $Self->{'Customer::AuthModule::LDAP::UID2'} = 'sAMAccountName';
     
      # Kunden müssen der Gruppe angehören um sich anzumelden
      $Self->{'Customer::AuthModule::LDAP::GroupDN2'} = 'CN=otrs-user,OU=MZV-Users,DC=,DC=;
      $Self->{'Customer::AuthModule::LDAP::AccessAttr2'} = 'member';


      # User Account mit Domänen-Benutzer Recht für AD abgleich
      $Self->{'Customer::AuthModule::LDAP::SearchUserDN2'} = 'xx';
      $Self->{'Customer::AuthModule::LDAP::SearchUserPw2'} = 'xx';

 $Self->{'Customer::AuthModule2::LDAP::Die'} = 1;

   
     #--------------------------------------------------------------------------------------------
    #                                     Partner-Kundendaten                                           #
    #--------------------------------------------------------------------------------------------
       $Self->{CustomerUser2} = {
        Name => 'Partner',
        Module => 'Kernel::System::CustomerUser::LDAP',
        Params => {
          Host => 'dc',
          BaseDN => 'OU=Partner-Users, DC=, DC=',
          SSCOPE => 'sub',
          UserDN => 'xx',
          UserPw => 'xx',
AlwaysFilter =>  '(&(objectclass=user)(mail=*.*@xx.de))',
         SourceCharset => 'utf-8',
          DestCharset => 'utf-8',
         },
        CustomerKey => 'sAMAccountName',
        CustomerID => 'mail',
        CustomerUserListFields => [ 'cn', 'mail'],
        CustomerUserSearchFields => [ 'cn', 'mail'],
        CustomerUserPostMasterSearchFields => ['mail'],
        CustomerUserNameFields => ['givenname', 'sn'],
        Map => [
          # note: Login, Email and CustomerID needed!
          # var, frontend, storage, shown, required, storage-type
          [ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
          [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
          [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
          [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
          [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
          [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
          [ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
    #       [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ],
    #       [ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
          [ 'UserOffice', 'Office', 'physicalDeliveryOfficeName', 1, 0, 'var' ],	
        ],
      };

[beastmoar]

Er meldet authentification ok aber no such user d.h. er kann den user nicht eintragen...
Hab ich irgendwo noch einen Fehler ?

[beastmoar]

Erledigt der Filter war das problem