OTRS Auth

[BTorres]

Hi Crythias!

I appreciate the attention in this forum.
I have a problem for some time with respect to customers authentication via LDAP.
I can authenticate agents without any problems, but not to customers.
At the end I get the same error: "Authentication succeeded, but no customer record is found in the customer backend. Please contact your administrator".
Could you help me please?
I already do not know what else to do.

Thank you very much!

[jojo]

please consult the documentation (http://doc.otrs.org), check your config and come back with some more information like the config for CustomerUser and CustomerAuth

[BTorres]

Hi jojo,

Thanks for the link, I had read it before.
I have about two months with this problem and I have not been able to resolve.
I read other cases but is the same and I do not see answers to help me.
I send you my code waiting to see if you could help me.

Code: Select all

# ****************** AUTH AND SYNC FOR AGENTS****************** #
   
  
    $Self->{AuthModule1} = 'Kernel::System::Auth::LDAP';
    $Self->{'AuthModule::LDAP::Host1'} = 'net-xxxx-004.xxx.xxx';
    $Self->{'AuthModule::LDAP::BaseDN1'} = 'dc=xxx,dc=xxx';
    $Self->{'AuthModule::LDAP::UID1'} = 'sAMAccountName';
    $Self->{'AuthModule::LDAP::GroupDN1'} = 'cn=otrs_agents,cn=Users,dc=xxx,dc=xxx';
    $Self->{'AuthModule::LDAP::AccessAttr1'} = 'member';
    $Self->{'AuthModule::LDAP::UserAttr1'} = 'UID';
    $Self->{'AuthModule::LDAP::UserAttr1'} = 'DN';
    $Self->{'AuthModule::LDAP::SearchUserDN1'} = 'CN=otrs,CN=Users,DC=xxx,DC=xxx';
    $Self->{'AuthModule::LDAP::SearchUserPw1'} = 'passw';
    $Self->{'AuthModule::LDAP::Params'} = {
        port    => 389,
        timeout => 120, 
        async   => 0,
        version => 3,
    };


    $Self->{AuthSyncModule1} = 'Kernel::System::Auth::Sync::LDAP';
    $Self->{'AuthSyncModule::LDAP::Host1'} = 'net-xxxx-004.xxx.xxx';
    $Self->{'AuthSyncModule::LDAP::BaseDN1'} = 'dc=xxx,dc=xxx';
    $Self->{'AuthSyncModule::LDAP::UID1'} = 'sAMAccountName';
    $Self->{'AuthSyncModule::LDAP::SearchUserDN1'} = 'CN=otrs,CN=Users,DC=xxx,DC=xxx';
    $Self->{'AuthSyncModule::LDAP::SearchUserPw1'} = 'passw';
    $Self->{'AuthSyncModule::LDAP::UserSyncMap1'} = {
        # DB -> LDAP
        UserFirstname => 'givenName',
        UserLastname  => 'sn',
        UserEmail     => 'mail',
    };


# *****************************AUTH FOR CUSTOMERS *************************

    $Self->{'Customer::AuthModule2'} = 'Kernel::System::CustomerAuth::LDAP';
    $Self->{'Customer::AuthModule::LDAP::Host2'} = 'net-xxxx-004.xxx.xxx';
    $Self->{'Customer::AuthModule::LDAP::BaseDN2'} = 'dc=xxx,dc=xxx';
    $Self->{'Customer::AuthModule::LDAP::UID2'} = 'sAMAccountName';
    $Self->{'Customer::AuthModule::LDAP::GroupDN2'} = 'CN=otrs_customers,CN=Users,DC=xxx,DC=xxx';
    $Self->{'Customer::AuthModule::LDAP::AccessAttr2'} = 'member';
    $Self->{'Customer::AuthModule::LDAP::UserAttr2'} = 'UID';
    $Self->{'Customer::AuthModule::LDAP::UserAttr2'} = 'DN';
    $Self->{'Customer::AuthModule::LDAP::SearchUserDN2'} = 'CN=otrs,CN=Users,DC=xxx,DC=xxx';
    $Self->{'Customer::AuthModule::LDAP::SearchUserPw2'} = 'Passw';

    $Self->{CustomerUser2} = {
        Name => 'LDAP Backend',
        Module => 'Kernel::System::CustomerUser::LDAP',
        Params => {
            Host => 'net-xxx-004.xxx.xxx',
            BaseDN => 'dc=xxx,dc=xxx',
            SSCOPE => 'sub',
	    UserDN => 'CN=otrs,CN=Users,DC=xxx,DC=xxx',
	    UserPw => 'Passw',
	    GroupDN => 'CN=otrs_customers,CN=Users,DC=xxx,DC=xxx',
	    AccessAttr => 'member',
	    UserAttr => 'UID',
	    },


        CustomerKey => 'sAMAccountName',
        CustomerID => 'sAMAccountName',
        CustomerUserListFields => ['cn', 'mail'],
        CustomerUserSearchFields => ['sAMAccountName','cn', 'mail'],
        CustomerUserSearchPrefix => '',
        CustomerUserSearchSuffix => '*',
        CustomerUserSearchListLimit => 250,
        CustomerUserPostMasterSearchFields => ['mail'],
        CustomerUserNameFields => ['givenname', 'sn'],

        Map => [
           	[ 'UserFirstname',  'Firstname',    'givenname',     1, 1, 'var', '', 0 ],
            	[ 'UserLastname',   'Lastname',    'sn',                  1, 1, 'var', '', 0 ],
           	[ 'UserLogin',         'Username',    'uid',                1, 1, 'var', '', 0 ],
            	[ 'UserEmail',         'Email',          'mail',              1, 1, 'var', '', 0 ],
            	[ 'UserCustomerID', 'CustomerID', 'mail',              0, 1, 'var', '', 0 ],
               ],

[crythias]

I would recommend reading my ldap tutorial. Read my Need help? In my signature.

[BTorres]

Ok Crynthias,

Where can I find your tutorial?

I read the links that you sent me and I have tried, but unfortunately I remain in the same situation.

Regards

[crythias]

viewtopic.php?f=60&t=16543

[BTorres]

Hi Crynthias!!!

Finally we managed authentication and synchronization of agents and customers !!!

Now I have a new question. The language in which we want to work is Spanish (from Mexico). We have fully translated the es_MX.pm file but when we select "Preferences" in the web interface and select Spanish (Mexico), we click on Update, we do not see any change in the interface. but with another languages it is possible.

You know if we need to make any other changes?
Best regards.