Customer AD Authentication and Integration Problems

Moderator: crythias

Locked
saqnrobinson
Znuny newbie
Posts: 1
Joined: 21 Jan 2013, 23:18
Znuny Version: 3.1.7
Real Name: Robinson Santiago
Company: Dedini S/A Inds. de Base

Customer AD Authentication and Integration Problems

Post by saqnrobinson »

Hi,

I'm trying to use AD as backend for Agents and Customers login.

I don't have any problem with Agents login(index.pl).

When I try to login a customer (customer.pl) the following message appear:
Authentication succeeded, but no customer record is found in the customer backend. Please contact your administrator.

Checking the otrs.log file, the following messages appear:
[Tue Jan 22 16:00:03 2013][Notice][Kernel::System::CustomerAuth::LDAP::Auth] CustomerUser: testeotrs (CN=Teste OTRS,OU=OTRS,DC=dedini,DC=com,DC=br) authentication ok (REMOTE_ADDR: 172.25.108.18).
[Tue Jan 22 16:00:03 2013][Error][Kernel::System::CustomerUser::LDAP::CustomerUserDataGet][621] 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece
[Tue Jan 22 16:00:03 2013][Error][Kernel::System::CustomerUser::SetPreferences][506] No such user 'testeotrs'!
[Tue Jan 22 16:00:03 2013][Error][Kernel::System::CustomerUser::LDAP::CustomerUserDataGet][621] 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece
[Tue Jan 22 16:00:03 2013][Error][Kernel::System::CustomerUser::LDAP::CustomerUserDataGet][621] 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece


My code is:

# Agents Auth (OK)
$Self->{'AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = '132.10.2.232';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=dedini,dc=com,dc=br';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::GroupDN'} = 'cn=OTRS_Agentes,ou=OTRS,dc=dedini,dc=com,dc=br';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';

$Self->{'AuthModule::LDAP::SearchUserDN'} = 'otrs_admin@dedini.com.br';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'anypwd';
$Self->{'AuthModule::LDAP::Params'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};

# Agents Sync AD -> DB (OK)
$Self->{'AuthSyncModule'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host'} = '132.10.2.232';
$Self->{'AuthSyncModule::LDAP::BaseDN'} = 'dc=dedini,dc=com,dc=br';
$Self->{'AuthSyncModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthSyncModule::LDAP::UserAttr'} = 'DN';
$Self->{'AuthSyncModule::LDAP::AccessAttr'} = 'memberUid';
$Self->{'AuthSyncModule::LDAP::SearchUserDN'} = 'otrs_admin@dedini.com.br';
$Self->{'AuthSyncModule::LDAP::SearchUserPw'} = 'anypwd';

$Self->{'AuthSyncModule::LDAP::UserSyncMap'} = {
UserFirstname => 'givenName',
UserLastname => 'sn',
UserEmail => 'mail',
};
$Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups'} = [
'users',
];

# Customers Auth Seems OK
$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = '132.10.2.232';
$Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'dc=dedini,dc=com,dc=br';
$Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'otrs_admin@dedini.com.br';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'anypwd';

# Customers Sync something wrong)
$Self->{CustomerUser} = {
Name => 'LDAP Datasource',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => '132.10.2.232',
BaseDN => 'dc=dedini,dc=com,dc=br',
SSCOPE => 'sub',
UserDN => 'otrs_admin@dedini.com.br',
UserPW => 'anypwd',
SourceCharset => 'utf-8',
DestCharset => 'utf-8',
Params => {
port => 389,
timeout => 120,
async => 0,
version => 3,
},
},
CustomerKey => 'sAMAccountName',
CustomerID => 'mail',
CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
CustomerUserExcludePrimaryCustomerID => 0,
AdminSetPreferences => 0,
Map => [
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var'],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var'],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var'],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var'],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var'],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var'],
[ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var'],
[ 'UserComment', 'Comment', 'description', 1, 0, 'var'],
],
};

I've reading about this configuration and I can't find where is the problem.

Could you help me, folks?

TKX.
crythias
Moderator
Posts: 10170
Joined: 04 May 2010, 18:38
Znuny Version: 5.0.x
Location: SouthWest Florida, USA
Contact:

Re: Customer AD Authentication and Integration Problems

Post by crythias »

viewtopic.php?f=60&t=16543
In order to perform this operation a successful bind must be completed on the connection. <--
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
Locked