nachdem ich nun schon seit zwei Tagen mir die Finger wund google muss ich mich nun doch an euch wenden.
Bin neu bei OTRS, das System funktioniert schon soweit recht gut, nur eben nicht die Customer:Auth mittels LDAP.
Ich verwende die OTRS Appliance in der Version 3.3.7.
Domäne ist eine 2008.
OTRS soll nur intern" Laufen
Die LDAP Abfrage funktoniert soweit auch.
LDAP Browser kann ich mich mit den Anmeldeinformationen anmelden
Folgende Fehlermeldungen sind gegeben:
Bei der Anmeldung unter https://otrs.server/otrs/Customer.pl erhalte ich folgende Fehlermeldung:
Authentication succeeded, but no customer record is found in the customer backend. Please contact your administrator.
In der Log steht folgender Fehler:
Code: Select all
Tue May 13 14:52:50 2014 error OTRS-CGI-82 No such user 'testuser'!
Tue May 13 14:52:50 2014 notice OTRS-CGI-82 CustomerUser: testuser (CN=testuser,CN=Users,DC=dc,DC=dc) authentication ok (REMOTE_ADDR: 192.168.X.XX).Nach dem Aufruf des Customer User Management, erhalte ich im System LOG ca. 50x folgende Fehlermeldung:
Code: Select all
Tue May 13 14:55:34 2014 error OTRS-CGI-82 Need UserLogin!Hoffe es kann mir jemand helfen, bin langsam echt am verzweifeln.
Vielen Dank
Gruß
Benno
Das ist meine derzeitige Config:
Code: Select all
# ---------------------------------------------------- #
# customer user ldap backend and settings #
# ---------------------------------------------------- #
# This is an example configuration for an LDAP auth. backend.(take care that Net::LDAP is installed!)
$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = '192.168.X.XX';
$Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'DC=test,DC=testdomain';
$Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
# Check if the user is allowed to auth in a posixGroup(e. g. user needs to be in a group xyz to use otrs)
#$Self->{'Customer::AuthModule::LDAP::GroupDN'} = 'CN=+++++++,OU=Sicherheitsgruppen,DC=corporate,DC=+++++++,DC=de';
#$Self->{'Customer::AuthModule::LDAP::AccessAttr'} = 'memberUid';
# for ldap posixGroups objectclass (just uid)
#$Self->{'Customer::AuthModule::LDAP::UserAttr'} = 'UID';
# for non ldap posixGroups objectclass (full user dn)
$Self->{'Customer::AuthModule::LDAP::UserAttr'} = 'DN';
# The following is valid but would only be necessary if the anonymous user do NOT have permission to read from the LDAP tree
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'otrssearch@test.testdomain';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'password';
# CustomerUser (customer user ldap backend and settings)
$Self->{CustomerUser1} = {
Name => 'LDAP Backend',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => '192.168.X.XX',
BaseDN => 'DC=test,DC=testdomain',
SSCOPE => 'sub',
UserDN => 'otrssearch@test.testdomain',
UserPw => 'password',
SourceCharset => 'utf-8',
DestCharset => 'iso-8859-1',
Params => {
port => 389,
timeout => 120,
async => 0,
version => 3,
},
},
# customer unique id
CustomerKey => 'sAMAccountName',
CustomerID => 'mail',
CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchPrefix => '',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 250,
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
CustomerUserExcludePrimaryCustomerID => 0,
CacheTTL => 0,
Map => [
# # note: Login, Email and CustomerID needed!
# # var, frontend, storage, shown (1=always,2=lite), required, storage-type, http-link, readonly
# [ 'UserTitle', 'Title', 'title', 1, 0, 'var', '', 0 ],
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var', '', 0 ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var', '', 0 ],
[ 'UserLogin', 'Username', 'uid', 1, 1, 'var', '', 0 ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var', '', 0 ],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var', '', 0 ],
# [ 'UserCustomerIDs', 'CustomerIDs', 'second_customer_ids', 1, 0, 'var', '', 0 ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var', '', 0 ],
# [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var', '', 0 ],
# [ 'UserComment', 'Comment', 'description', 1, 0, 'var', '', 0 ],
],
};
