Simple LDAP authentication is all I am after right now, and I continue to get bind errors.
LDAP = AD on Windows Server 2012
OTRS Running on = Windows 7 Ultimate (this is a lab right now till I get this working will move to windows server at some point)
Another issue that has made this extremely frustrating to test is making changes to config.pm do not take right away. It takes like 10 minutes for them to actually start working. I have tried restarting OTRS Scheduler service, WWW publishing service, useing DeleteCache.pl and cleanup.pl none of that seems to make the configuration take any sooner. Any idea how to make the configuration changes to config.pm take right away?
Also I have testing ldifde, and 2 other 3rd party connection tools to make sure that my settings were correct and they all work fine and pull the users I am looking for without error. So this is not a password error.
Here is a copy of my config.pm authentication section. I eventually want to do this for agents as well but figured if I can get customers it will be the same setup.
Code: Select all
# # ---------------------------------------------------- #
# # Customer authentication section #
# # ---------------------------------------------------- #
#Enable LDAP authentication for Customers / Users
$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = 'xx.xx.xx.xx';
$Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'OU=otrs,DC=xxx,DC=local';
$Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'Customer::AuthModule::LDAP::UserAttr'} = 'DN';
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'CN=otrs ldap,CN=Managed Service Accounts,DC=XXXXXXX,DC=local';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = '<password removed for security>';
$Self->{'Customer::AuthModule::LDAP::AlwaysFilter'} = '(objectCategory=user)';
$Self->{'Customer::AuthModule::LDAP::UserSuffix'} = '@xxxx.local';
# $Self->{'AuthModule::LDAP::Die'} = 1;
#CustomerUser
#(customer user database backend and settings)
$Self->{CustomerUser} = {
Name => 'LDAP Backend',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => 'xx.xx.xx.xx',
BaseDN => 'OU=otrs,DC=xxxxxx,DC=local',
SSCOPE => 'sub',
UserDN => 'CN=otrs ldap,CN=Managed Service Accounts,DC=XXXXXX,DC=local',
UserPw => '<password removed for security>',
SourceCharset => 'utf-8',
DestCharset => 'utf-8',
inet4 => 1,
},
CustomerKey => 'sAMAccountName',
CustomerID => 'mail',
CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'cn', 'givenname', 'mail'],
CustomerUserSearchPrefix => '',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 250,
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
CustomerUserExcludePrimaryCustomerID => 0,
AdminSetPreferences => 0,
CacheTTL => 0,
Map => [
[ 'UserTitle', 'Title', 'title', 1, 0, 'var', '', 0 ],
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var', '', 0 ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var', '', 0 ],
[ 'UserLogin', 'Username', 'sAMAccountName', 1, 1, 'var', '', 0 ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var', '', 0 ],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var', '', 0 ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var', '', 0 ],
[ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var', '', 0 ],
[ 'UserComment', 'Comment', 'description', 1, 0, 'var', '', 0 ],
],
};