[Error][Kernel::System::CustomerUser::LDAP::CustomerUserData

[aumann]

Wir haben eine Abfrage von mehreren Active Directoris über LDAP
Und wir bekommen manchmal Fehler beim Suchen von Usern/Kunden im Telefonticket
Im OTRS kann man dann obige Fehlermeldung sehen
Unsere Anbindung sieht etwas gekürzt so wie unten aus
Hat jemand eine Idee?

C:\Programme\OTRS\OTRS\Kernel\Config.pm

$Self->{CustomerUser} = {
Name => 'Globale User',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => 'dc01.metatron.hammer.int',
BaseDN => 'OU=_Globale-User,DC=METATRON,DC=Hammer,DC=int',
SSCOPE => 'sub',
UserDN => 'otrsuser@metatron.hammer.int',
UserPw => 'xyz',
SourceCharset => 'utf-8',
DestCharset => 'utf-8',
Die => 0,
},
# customer uniq id
CustomerKey => 'samaccountname',
CustomerID => 'samaccountname',

CustomerUserListFields => ['cn', 'mail'],
CustomerUserSearchFields => ['sn', 'mail', 'telephoneNumber'],
CustomerUserSearchPrefix => '',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 250,
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
# show not own tickets in customer panel, CompanyTickets
# CustomerUserExcludePrimaryCustomerID => 0,
# add a ldap filter for valid users (expert setting)
# CustomerUserValidFilter => '(!(description=gesperrt))',
# admin can't change customer preferences
# AdminSetPreferences => 0,
# cache time to life in sec. - cache any ldap queris
# CacheTTL => 0,

Map => [
# note: Login, Email and CustomerID needed!
# var, frontend, storage, shown (1=always,2=lite), required, storage-type, http-link, readonly
[ 'UserSalutation', 'Title', 'title', 1, 0, 'var', '', 1 ],
[ 'UserFirstname', 'Firstname', 'givenname', 1, 0, 'var', '', 1 ],
[ 'UserLastname', 'Lastname', 'sn', 1, 0, 'var', '', 1 ],
[ 'UserLogin', 'Username', 'samaccountname', 1, 0, 'var', '', 1 ],
[ 'UserEmail', 'Email', 'mail', 1, 0, 'var', '', 1 ],
[ 'UserCustomerID', 'CustomerID', 'samaccountname', 0, 0, 'var', '', 1 ],
# [ 'UserCustomerIDs', 'CustomerIDs', 'second_customer_ids', 1, 0, 'var', '', 1 ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var', '', 1 ],
[ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var', '', 1 ],
[ 'UserComment', 'Comment', 'description', 1, 0, 'var', '', 1 ],
],
};

$Self->{CustomerUser4} = {
Name => 'Lando',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
# ldap host
Host => '195.0.227.200',
# ldap base dn
BaseDN => 'OU=Lando,DC=Lando,DC=local',
# search scope (one|sub)
SSCOPE => 'sub',
# The following is valid but would only be necessary if the
# anonymous user does NOT have permission to read from the LDAP tree
UserDN => 'otrsuser@lando.local',
UserPw => 'xyz',
SourceCharset => 'utf-8',
DestCharset => 'utf-8',
Die => 0,
},
CustomerKey => 'name',
CustomerID => 'name',

CustomerUserListFields => ['cn'],
CustomerUserSearchFields => ['cn', 'telephoneNumber'],
CustomerUserSearchPrefix => '*',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 250,
CustomerUserPostMasterSearchFields => ['name'],
CustomerUserNameFields => ['givenname', 'sn'],

Map => [

[ 'UserCustomerID', 'CustomerID', 'name', 0, 0, 'var', '', 1 ],
[ 'UserLogin', 'Username', 'name', 1, 0, 'var', '', 1 ],
[ 'UserSalutation', 'Title', 'title', 1, 0, 'var', '', 1 ],
[ 'UserFirstname', 'Firstname', 'givenname', 1, 0, 'var', '', 1 ],
[ 'UserLastname', 'Lastname', 'sn', 1, 0, 'var', '', 1 ],
[ 'UserStreet', 'Strasse', 'streetaddress', 1, 0, 'var', '', 1 ],
[ 'UserCity', 'Ort', 'l', 1, 0, 'var', '', 1 ],
[ 'UserCompany', 'Firma', 'company', 1, 0, 'var', '', 1 ],
[ 'UserOostalcode', 'PLZ', 'postalcode', 1, 0, 'var', '', 1 ],
[ 'UserBundesland', 'Bundesland', 'st', 1, 0, 'var', '', 1 ],
[ 'UserEmail', 'Email', 'mail', 1, 0, 'var', '', 1 ],
# [ 'UserCustomerIDs', 'CustomerIDs', 'second_customer_ids', 1, 0, 'var', '', 1 ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var', '', 1 ],
# [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var', '', 0 ],
[ 'UserComment', 'Comment', 'description', 1, 0, 'var', '', 1 ],
[ 'UserPostofficebox', 'Postfach', 'postofficebox', 1, 0, 'var', '', 1 ],
[ 'UserDepartment', 'Abteilung', 'department', 1, 0, 'var', '', 1 ],
[ 'UserHomepage', 'Webseite', 'wwwhomepage', 1, 0, 'var', '', 1 ],
],
};

[aumann]

Nachtrag
genaue Fehlermeldung lautet:
[Error][Kernel::System::CustomerUser::LDAP::CustomerUserDataGet][580] Bad filter