Agent LDAP not working

[][-][eineken]

Can anyone please assist me with my config for agent ldap authentication

When attempting to login i receive the following messages in the log file;

[Fri Mar 18 11:51:42 2011][Notice][Kernel::System::Auth::LDAP::Auth] User: chrish@office.premiertech authentication failed, no LDAP entry found!BaseDN='dc=office,dc=premiertech', Filter='(sAMAccountName=chrish@office.premiertech)', (REMOTE_ADDR: 10.3.2.5).
[Fri Mar 18 11:51:42 2011][Error][Kernel::System::User::UserLookup][696] No UserID found for 'chrish@office.premiertech'!
[Fri Mar 18 11:59:27 2011][Error][Kernel::System::Auth::LDAP::Auth][276] Search failed! base='cn=OTRS_Agent,ou=OTRS,dc=office,dc=premiertech', filter='(member=CN=Phil koutsouris,OU=OU Operations,DC=office,DC=premiertech)', Success
[Fri Mar 18 11:59:39 2011][Error][Kernel::System::Auth::LDAP::Auth][276] Search failed! base='cn=OTRS_Agent,ou=OTRS,dc=office,dc=premiertech', filter='(member=CN=Chris Hindson,OU=OU Operations,DC=office,DC=premiertech)', Success
[Fri Mar 18 12:00:51 2011][Notice][Kernel::System::Auth::LDAP::Auth] User: chris hindson authentication failed, no LDAP entry found!BaseDN='dc=office,dc=premiertech', Filter='(sAMAccountName=chris hindson)', (REMOTE_ADDR: 10.3.2.5).
[Fri Mar 18 12:00:51 2011][Error][Kernel::System::User::UserLookup][696] No UserID found for 'chris hindson'!

Here is my config;

# Enable LDAP Authentication for Agent #
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = '10.3.1.253';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=office,dc=premiertech';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::GroupDN'} = 'cn=OTRS_Agent,ou=OTRS,dc=office,dc=premiertech';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=otrs_ldap,ou=OTRS,dc=office,dc=premiertech';
$Self->{'AuthModule::LDAP::SearchUserPw'} = '####';
$Self->{'AuthModule::LDAP::AlwaysFilter'} = '';
#$Self->{'AuthModule::LDAP::UserSuffix'} = '';
$Self->{'AuthModule::LDAP::Params'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};

# Enable LDAP Authentication Sync for Agent #
$Self->{'AuthSyncModule'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host'} = 'ldap://10.3.1.253:389';
$Self->{'AuthSyncModule::LDAP::BaseDN'} = 'dc=office,dc=premiertech';
$Self->{'AuthSyncModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=otrs_ldap,ou=OTRS,dc=office,dc=premiertech';
$Self->{'AuthModule::LDAP::SearchUserPw'} = '####';

# Enable Agent Mapping from LDAP to DB #
$Self->{'AuthSyncModule::LDAP::UserSyncMap'} = {
# DB -> LDAP
UserFirstname => 'givenName',
UserLastname => 'sn',
UserEmail => 'mail',
};

# AuthSyncModule::LDAP::UserSyncInitialGroups
# (sync following group with rw permission after initial create of first agent
# login)
$Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups'} = [
'users',
];

[jojo]

What is your windows login name?

[][-][eineken]

its either
chrish
chrish@office.premiertech

[jojo]

than try to log in with chrish

[][-][eineken]

When i try with "chrish" i receive the following logs

[Mon Mar 21 07:36:04 2011][Error][Kernel::System::Auth::LDAP::Auth][276] Search failed! base='cn=OTRS_Agent,ou=OTRS,dc=office,dc=premiertech', filter='(member=CN=Chris Hindson,OU=OU Operations,DC=office,DC=premiertech)', Success
[Mon Mar 21 07:36:04 2011][Error][Kernel::System::User::UserLookup][696] No UserID found for 'chrish'!

[Wolfgangf]

did you create "chrish" also as user in OTRS?

[][-][eineken]

Yes it already existes,

Removing the additional config i can log in with "chrish" and its local 'OTRS' password.

My understanding of the additional config is to allow LDAP intergration to create an "OTRS" users based on if they are a user of a specified group, and sync their passowrd with AD.