Customer Authentication with multiple LDAP domains

[joshhagger]

Hello Everyone,

We are trying to set up a help desk system for our clients & would like them to be able to log in with their domain credentials.
Our current test setup is working against multiple clients servers, but we are running into problems with duplicate usernames.
Does any one know a way around this? Would it be posssible to use their email address instead of domain username?

Regards,
Josh

[crythias]

it's possible to use email ... I believe you need to ignore the suffix part of Config.pm entries.

[joshhagger]

Hi Crythias,

Thanks for the reply.

We did try the suxffix entry, but it didnt seemt o do much so we currently have it turned off.
We have tried loggin in using email address, but authentication fails.
The biggest problem is when the data is imported into the database, although the accounts with the same username have differentemail addresses, only the first one ends up in the customer list.

I have attached our config.pm file in case that helps.

Regards,
Josh

[crythias]

We did try the suxffix entry, but it didnt seemt o do much so we currently have it turned off.

Turn off, ignore, same thing If you have multiple connections, using the suffix is not going to help. People will need to log on with their email address (maybe username@domain.com, maybe username@domain.local) ... YMMV.

Also ...
UserSync isn't for customers. Agents only.

but authentication fails

What error messages are you getting? (OTRS Admin System Log)?

http://wiki.otrs.org/index.php?title=Us ... _customers

[joshhagger]

Thanks for that,

Which bit do we need to take out, UserSyncLDAPMap, or UserSyncLDAPGroups?

When the user attempts to log in using their prinary email address, we get:
[Kernel::System::CustomerAuth::LDAP::Auth] CustomerUser: <user email> authentication failed, no LDAP entry found!BaseDN='<client base DN>', Filter='(sAMAccountName=<user email>)'

Regards,
Josh

[crythias]

[Kernel::System::CustomerAuth::LDAP::Auth] CustomerUser: <user email> authentication failed, no LDAP entry found!BaseDN='<client base DN>', Filter='(sAMAccountName=<user email>)'

on its own, I'd expect you could get up to 3 of these, based upon what you showed me, but that's not enough to make a determination. I'll ponder and check tomorrow.