Hello there!
I`m having trouble to set up my LDAP Auth for the agents only. I`m running a VM with OTRS 4.0.5 on Hyper-V.
My Config.pm looks like:
------------------------------------------------------------------------------------------------------------------------------------------------------------------------
$Self->{'AuthModule1'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host1'} = 'using IP Adress here';
$Self->{'AuthModule::LDAP::BaseDN1'} = 'OU=test,DC=example,DC=domain,DC=123';
$Self->{'AuthModule::LDAP::UID1'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::GroupDN1'} = 'CN=otrs_agents,OU=Groups,OU=test,DC=example,DC=domain,DC=123';
$Self->{'AuthModule::LDAP::AccessAttr1'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr1'} = 'sAMAccountName'; #'userPrincipalName'; [tested all options (like DN and so on)]
$Self->{'AuthModule::LDAP::SearchUserDN1'} = 'otrsuser@example.domain.123';
$Self->{'AuthModule::LDAP::SearchUserPw1'} = 'thatpw';
# $Self->{'AuthModule::LDAP::AlwaysFilter1'} = '';
# $Self->{'AuthModule::LDAP::UserSuffix1'} = '@example.domain.123';
$Self->{'AuthModule::LDAP::UserLowerCase1'} = 0;
$Self->{'AuthModule::LDAP::Params1'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
sscope => 'sub'
};
$Self->{'AuthModule::LDAP::Die1'} = 1;
------------------------------------------------------------------------------------------------------------------------------------------------------------------------
My Errorlog always says the same:
ERROR: OTRS-CGI-88 Perl: 5.10.1 OS: linux Time: Thu Jan 22 15:28:49 2015
Message: No UserID found for 'testuser'!
RemoteAddress: using IP Adress here
RequestURI: /otrs/index.pl
Traceback (40041):
Module: Kernel::System::User::UserLookup Line: 878
Module: Kernel::System::Auth::Auth Line: 199
Module: Kernel::System::Web::InterfaceAgent::Run Line: 242
Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler Line: 41
Module: (eval) (v1.99) Line: 204
Module: ModPerl::RegistryCooker::run (v1.99) Line: 204
Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170
Module: ModPerl::Registry::handler (v1.99) Line: 31
------------------------------------------------------------------------------------------------------------------------------------------------------------------------
On my LDAP Server (AD Server 2008 R2), i can see that my otrsuser had a sucessful login.
I read very much different configs, tried different options but nothing helped. Guess i can`t see my own mistakes....
Thanks so far
An other LDAP Problem
Moderator: crythias
-
- Moderator
- Posts: 10170
- Joined: 04 May 2010, 18:38
- Znuny Version: 5.0.x
- Location: SouthWest Florida, USA
- Contact:
Re: An other LDAP Problem
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
Re: An other LDAP Problem
Hello crythias,
i already read your guide and its very good, i changed sth in my config but i didn`t helped.
i already read your guide and its very good, i changed sth in my config but i didn`t helped.
-
- Moderator
- Posts: 10170
- Joined: 04 May 2010, 18:38
- Znuny Version: 5.0.x
- Location: SouthWest Florida, USA
- Contact:
Re: An other LDAP Problem
Where's your AuthSync?
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
Re: An other LDAP Problem
sorry for the dealy was quite busy these days....
The Auth Module looks like:
$Self->{'AuthSyncModule1'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host1'} = 'IP Adress';
$Self->{'AuthSyncModule::LDAP::BaseDN1'} = 'OU=test,';
$Self->{'AuthSyncModule::LDAP::UID1'} = 'sAMAccountName';
$Self->{'AuthSyncModule::LDAP::UserAttr1'} = 'DN';
$Self->{'AuthSyncModule::LDAP::AccessAttr1'} = 'member';
$Self->{'AuthSyncModule::LDAP::SearchUserDN1'} = 'CN=otrs_user,OU=test,DC=TEST,DC=Domain,DC=com';
$Self->{'AuthSyncModule::LDAP::SearchUserPw1'} = 'thatpw';
$Self->{'AuthSyncModule::UserSyncMap1'} = {
'UserEmail' => 'mail',
'UserFirstname' => 'givenName',
'UserLastname' => 'sn',
'UserLogin' => 'sAMAccountName'
};
Webgui saying:
Panic, user authenticated but no user data can be found in OTRS DB!! Perhaps the user is invalid.
Cause i`m still looking for a solution, i found out that it is only possible for agents to login if they are manualy created before.
this already works for me....
but is it really still a problem for otrs syncing the information and creating a agent account? its a normal usecase for a ticketsystem...
i can`t imagine that everyone using otrs is creating their agents manually
kind regards
The Auth Module looks like:
$Self->{'AuthSyncModule1'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host1'} = 'IP Adress';
$Self->{'AuthSyncModule::LDAP::BaseDN1'} = 'OU=test,';
$Self->{'AuthSyncModule::LDAP::UID1'} = 'sAMAccountName';
$Self->{'AuthSyncModule::LDAP::UserAttr1'} = 'DN';
$Self->{'AuthSyncModule::LDAP::AccessAttr1'} = 'member';
$Self->{'AuthSyncModule::LDAP::SearchUserDN1'} = 'CN=otrs_user,OU=test,DC=TEST,DC=Domain,DC=com';
$Self->{'AuthSyncModule::LDAP::SearchUserPw1'} = 'thatpw';
$Self->{'AuthSyncModule::UserSyncMap1'} = {
'UserEmail' => 'mail',
'UserFirstname' => 'givenName',
'UserLastname' => 'sn',
'UserLogin' => 'sAMAccountName'
};
Webgui saying:
Panic, user authenticated but no user data can be found in OTRS DB!! Perhaps the user is invalid.
Cause i`m still looking for a solution, i found out that it is only possible for agents to login if they are manualy created before.
this already works for me....
but is it really still a problem for otrs syncing the information and creating a agent account? its a normal usecase for a ticketsystem...
i can`t imagine that everyone using otrs is creating their agents manually
kind regards