Hello. I'm testing OTRS on virtual machine and I can't connect customer with LDAP. I got this error
"Authentication succeeded, but no customer record is found in the customer backend. Please contact your administrator"
So here are my settings
## Set up LDAP for Customer authentication to the Frontend for customers.
$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = '192.168.0.66';
# The ou= is your NT Domain name. The dc= (there may be more than one) is your AD domain name.
$Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'dc=viki, dc=com';
$Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
# Our AD requures a valid login to do LDAP searches. Use a generic one, not admin, not your own.
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'viki';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'lozinka123$';
# We only need to see users. Not computers and no disabled users.
$Self->{'Customer::AuthModule::LDAP::AlwaysFilter'} ='(&(!(objectClass=Computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))';
## Set up LDAP for finding Customers when creating tickets in the Agent Frontend.
$Self->{CustomerUser} = {
Name => '192.168.0.66',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
# Parameters are basically the same as above.
Host => '192.168.0.66',
BaseDN => 'dc=viki, dc=com',
SSCOPE => 'sub',
UserDN => 'cn=viki, cn=Useri, dc=viki, dc=com',
UserPw => 'kochoska',
# if your frontend is e. g. iso-8859-1 and the charset of your
# ldap server is utf-8, use this options (if not, ignore it)
### IMPORTANT FOR NON-ENGLISH USERS WITH SPECIAL CHARACTERS ###
# You *have* to specify the SourceCharset below, else OTRS will default to
# iso8859-1 (I think), and special characters will be garbled. This took me
# half a day to figure out.
SourceCharset => 'utf-8',
DestCharset => 'utf-8',
# We only need to see users. Not computers and no disabled users.
AlwaysFilter => '(&(!(objectClass=Computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))',
},
CustomerKey => 'sAMAccountName',
CustomerID => 'mail',
CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
Map => [
## Set-up the fields you want to import from LDAP.
# note: Login, Email and CustomerID needed!
# var, frontend, storage, shown, required, storage-type
# [ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
# [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ],
# [ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
],
};
I this is what i got in the log file
9:59:20 2012][Error][Kernel::System::CustomerUser::LDAP::_Connect][197] First bind failed! 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1
[Thu Jun 21 09:59:29 2012][Notice][Kernel::System::CustomerAuth::LDAP::Auth] CustomerUser: viki (CN=Viki,OU=Useri,DC=viki,DC=com) authentication ok (REMOTE_ADDR: 127.0.0.1).
[Thu Jun 21 09:59:29 2012][Error][Kernel::System::CustomerUser::LDAP::_Connect][197] First bind failed! 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1
[Thu Jun 21 09:59:29 2012][Error][Kernel::System::CustomerUser::SetPreferences][504] No such user 'viki'!
[Thu Jun 21 09:59:29 2012][Error][Kernel::System::CustomerUser::LDAP::CustomerUserDataGet][614] Can't contact LDAP server
[Thu Jun 21 09:59:29 2012][Error][Kernel::System::CustomerUser::LDAP::_Connect][197] First bind failed! 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1
Can't connect customers with LDAP
Moderator: crythias
-
- Moderator
- Posts: 10170
- Joined: 04 May 2010, 18:38
- Znuny Version: 5.0.x
- Location: SouthWest Florida, USA
- Contact:
Re: Can't connect customers with LDAP
Makes sense. CustomerAuth is being handled through LDAP. CustomerUser is being handled through DB until you put the LDAP on CustomerUser (3.0) 3.1.
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask