LDAP Sync Trying to Use IPv6 - OTRS 3.3.9

[dhilsbos]

I have a brand new installation of OTRS 3.3.9 with a bunch of add-ons (ITSM, FAQ, etc.), installed on Ubuntu 14.04.1. The host runs nothing else, and is a virtual machine running on Citrix XenServer.

I (attempted to) configured for LDAP authorization and LDAP synchronization. LDAP authorization is working, but synchronization (edit: 10/9/2014) is not.

The error I receive is as follows:
Message: Can't connect to <LDAP IPv4 Address>: IO::Socket::INET6: connect: Connection refused
Then:
Module: Kernel::System::Auth::Sync::LDAP::Sync (OTRS 3.3.9) Line: 124

Later on a follow on error:
Message: No UserID found of '<LDAP sAMAccountName>'!
Followed by:
Module: Kernel::System::User::UserLookup (OTRS 3.3.9) Line: 834

The relevant lines of my configuration (Config.pm) are:

Code: Select all

$Self->{'Authmodule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = '<AD Server IPv4 Address>';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=performair,dc=local'; <The actual BaseDN used is more restrictive>
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::SearchUserDN'} = '<valid low-priviledge user DN>';
$Self->{'AuthModule::LDAP::SearchUserPw'} = '<password>';
$Self->{'AuthModule::LDAP::Params'} = {
    port => 636,
    timeout => 120,
    async => 0,
    version => 3,
    inet4 => 1,
    inet6 => 0,
};

# Configure Sync
$Self->{'AuthModule::UseSyncBackend'} = 'AuthSyncBackend';
$Self->{'AuthSyncModule'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host'} = '<AD server IPv4 address';
$Self->{'AuthSyncModule::LDAP::BaseDN'} = 'dc=performair,dc=local';
$Self->{'AuthSyncModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthSyncModule::LDAP::SearchUserDN'} = '<valid low-priviledge user DN>';
$Self->{'AuthSyncModule::LDAP::SearchUserPw'} = '<password>';
$Self->{'AuthSyncModule::LDAP::Params'} = {
    port => 636,
    timeout => 120,
    async => 0,
    version => 3,
    inet4 => 1,
    inet6 => 0,
};

I added inet6, hoping these was parity between IPv4 and IPv6 in Perl, I also added Params to AuthSyncModule, hoping there is symmetry in their configuration. Perl is whatever is provided by Ubuntu 14.0.4.1. Database is local MySQL.

Note: my perl is installed at /usr/lib/perl and does not have INET6.pm.

Any typos (beyond those listed above) are, probably, the result of retyping.

I've reviewed the manual, and several troubleshooting guides (I manually added the first user, with admin privileges, so I could log in).

Thank you,

Dominic Hilsbos

[crythias]

Hello, and welcome to Otterhub/OTRS forums.

Please clarify:

LDAP authorization is working, but authorization is not.

Please provide additional lines around error messages, if possible. Especially, if it indicates which module is throwing the error.

Relevant documentation:
http://otrs.github.io/doc/manual/admin/ ... ckend-ldap

My HowTo:
viewtopic.php?f=60&t=16543

[dhilsbos]

I'm sorry, authorization is working, synchronization is not.

I included the first line of each error's traceback, which includes the module. The relevant module is Sync::LDAP::Sync, and the problem is that it is attempting to use IPv6 despite IPv6 being turned off for the server.

Thank you for taking the time to review my issue.

[dhilsbos]

I've been working on this, and I found that I do have an INET6.pm, it just isn't with the rest of perl.

I moved and renamed that file, and am still having problems, it's now saying the connection is refused, but again only during sync, authorization works fine.

In addition I found that the port parameter that I passed is being ignored, so all authentication requests are sending passwords in clear text.