[SOLVED] LDAP authentication subgroups

[aph]

Helllo,

when applying the LDAP group restrictions for agent or customer authentication, does the user have to be a direct member of the LDAP group? For example I have an AD group OTRS_Users. This group has two subgroups CRM and IT. The individual agents are members of these groups. I would like the members of subgroups to be able to log into OTRS. Is it possible?

Thanks

[crythias]

does the user have to be a direct member of the LDAP group?

yes, and so my document says.

This group has two subgroups CRM and IT.

http://stackoverflow.com/questions/1953 ... oups-squid

Please read my ldap troubleshooting again.

[aph]

For those wo may be interested, I was able to find a solution for the nested groups problem. An external package called ConnectAD (https://github.com/rkaldung/ConnectAD).

Now my AD directory structure is supported:
The AD group OTRS_Users contains groups ABC and PQR. The agents are members of the subgroups (ABC and PQR) and not the direct member of AD group OTRS_Users.

For the module to work, one has to download the connectAD opm from http://packages.opmzone.org/ and install it via Package Manager in Admin area.

Please note connectAD is an external package and not part of the OTRS core. The Config.pm has to be changed accordingly to use connectAD modules.