wir versuchen verzweifelt SSO in OTRS 4.0.10 zu nutzen. Verwendet wird Kerberos unter Ubuntu 14.10.
Die Config.PM schaut wie folgt aus:
Code: Select all
$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::HTTPBasicAuth';
$Self->{'Customer::AuthModule::HTTPBasicAuth::ReplaceRegExp'} ='@HENSELAD.DE';
# CustomerUser (customer user ldap backend and settings)
$Self->{CustomerUser} = {
Name => 'LDAP Backend',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => 'blade_ad1.henselad.de',
BaseDN => 'OU=Hensel,DC=henselad,DC=de',
SSCOPE => 'sub',
UserDN => 'CN=otrs,OU=IT,OU=Benutzer,OU=HKG,OU=Hensel,DC=henselad,DC=de',
UserPw => 'Passwort',
SourceCharset => 'utf-8',
DestCharset => 'iso-8859-1',
Params => {
port => 389,
timeout => 120,
async => 0,
version => 3,
},
},
# customer unique id
CustomerKey => 'sAMAccountName',
CustomerID => 'sAMAccpuntName',
CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchPrefix => '',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 250,
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
CustomerUserExcludePrimaryCustomerID => 0,
CacheTTL => 0,
Map => [
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var', '', 0 ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var', '', 0 ],
[ 'UserLogin', 'Username', 'sAMAccountName', 1, 1, 'var', '', 0 ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var', '', 0 ],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var', '', 0 ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var', '', 0 ],
],
};Code: Select all
LoadModule auth_kerb_module usr/lib/apache2/modules/mod_auth_kerb.so
<Directory "/opt/otrs/bin/cgi-bin/">
Options FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
AuthType Kerberos
AuthName "OTRS"
Krb5Keytab /etc/apache2/keytabs/ldapotrs.keytab
KrbAuthRealm HENSELAD.DE
KrbMethodNegotiate on
KrbSaveCredentials on
KrbMethodK5Passwd on
KrbServiceName HTTP
Require valid-user
KrbLocalUserMapping on
</Directory>Code: Select all
[libdefaults]
default_realm = HENSELAD.DE
[realms]
HENSELAD.DE = {
kdc = blade_ad1.henselad.de
admin_server = blade_ad1.henselad.de
}
[domain_realm]
.henselad.de = HENSELAD.DE
henselad.de = HENSELAD.DE
ignore_acceptor_hostname = true
Folgende Fehlermeldung erscheint:
Code: Select all
[Notice][Kernel::System::Auth::HTTPBasicAuth::Auth] User: No $ENV{REMOTE_USER} or $ENV{HTTP_REMOTE_USER} !(REMOTE_ADDR: 192.168.X.X).Vielen Dank im Voraus!