An other LDAP Problem

Moderator: crythias

Locked
needHelp
Znuny newbie
Posts: 3
Joined: 22 Jan 2015, 16:35
Znuny Version: 4.0.5

An other LDAP Problem

Post by needHelp »

Hello there!
I`m having trouble to set up my LDAP Auth for the agents only. I`m running a VM with OTRS 4.0.5 on Hyper-V.

My Config.pm looks like:
------------------------------------------------------------------------------------------------------------------------------------------------------------------------
$Self->{'AuthModule1'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host1'} = 'using IP Adress here';
$Self->{'AuthModule::LDAP::BaseDN1'} = 'OU=test,DC=example,DC=domain,DC=123';
$Self->{'AuthModule::LDAP::UID1'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::GroupDN1'} = 'CN=otrs_agents,OU=Groups,OU=test,DC=example,DC=domain,DC=123';
$Self->{'AuthModule::LDAP::AccessAttr1'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr1'} = 'sAMAccountName'; #'userPrincipalName'; [tested all options (like DN and so on)]
$Self->{'AuthModule::LDAP::SearchUserDN1'} = 'otrsuser@example.domain.123';
$Self->{'AuthModule::LDAP::SearchUserPw1'} = 'thatpw';
# $Self->{'AuthModule::LDAP::AlwaysFilter1'} = '';
# $Self->{'AuthModule::LDAP::UserSuffix1'} = '@example.domain.123';
$Self->{'AuthModule::LDAP::UserLowerCase1'} = 0;
$Self->{'AuthModule::LDAP::Params1'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
sscope => 'sub'
};


$Self->{'AuthModule::LDAP::Die1'} = 1;
------------------------------------------------------------------------------------------------------------------------------------------------------------------------

My Errorlog always says the same:

ERROR: OTRS-CGI-88 Perl: 5.10.1 OS: linux Time: Thu Jan 22 15:28:49 2015

Message: No UserID found for 'testuser'!

RemoteAddress: using IP Adress here
RequestURI: /otrs/index.pl

Traceback (40041):
Module: Kernel::System::User::UserLookup Line: 878
Module: Kernel::System::Auth::Auth Line: 199
Module: Kernel::System::Web::InterfaceAgent::Run Line: 242
Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler Line: 41
Module: (eval) (v1.99) Line: 204
Module: ModPerl::RegistryCooker::run (v1.99) Line: 204
Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170
Module: ModPerl::Registry::handler (v1.99) Line: 31
------------------------------------------------------------------------------------------------------------------------------------------------------------------------

On my LDAP Server (AD Server 2008 R2), i can see that my otrsuser had a sucessful login.

I read very much different configs, tried different options but nothing helped. Guess i can`t see my own mistakes....

Thanks so far
crythias
Moderator
Posts: 10170
Joined: 04 May 2010, 18:38
Znuny Version: 5.0.x
Location: SouthWest Florida, USA
Contact:

Re: An other LDAP Problem

Post by crythias »

OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
needHelp
Znuny newbie
Posts: 3
Joined: 22 Jan 2015, 16:35
Znuny Version: 4.0.5

Re: An other LDAP Problem

Post by needHelp »

Hello crythias,

i already read your guide and its very good, i changed sth in my config but i didn`t helped.
crythias
Moderator
Posts: 10170
Joined: 04 May 2010, 18:38
Znuny Version: 5.0.x
Location: SouthWest Florida, USA
Contact:

Re: An other LDAP Problem

Post by crythias »

Where's your AuthSync?
OTRS 6.0.x (private/testing/public) on Linux with MySQL database.
Please edit your signature to include your OTRS version, Operating System, and database type.
Click Subscribe Topic below to get notifications. Consider amending your topic title to include [SOLVED] if it is so.
Need help? Before you ask
needHelp
Znuny newbie
Posts: 3
Joined: 22 Jan 2015, 16:35
Znuny Version: 4.0.5

Re: An other LDAP Problem

Post by needHelp »

sorry for the dealy was quite busy these days....
The Auth Module looks like:



$Self->{'AuthSyncModule1'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host1'} = 'IP Adress';
$Self->{'AuthSyncModule::LDAP::BaseDN1'} = 'OU=test,';
$Self->{'AuthSyncModule::LDAP::UID1'} = 'sAMAccountName';
$Self->{'AuthSyncModule::LDAP::UserAttr1'} = 'DN';
$Self->{'AuthSyncModule::LDAP::AccessAttr1'} = 'member';
$Self->{'AuthSyncModule::LDAP::SearchUserDN1'} = 'CN=otrs_user,OU=test,DC=TEST,DC=Domain,DC=com';
$Self->{'AuthSyncModule::LDAP::SearchUserPw1'} = 'thatpw';






$Self->{'AuthSyncModule::UserSyncMap1'} = {
'UserEmail' => 'mail',
'UserFirstname' => 'givenName',
'UserLastname' => 'sn',
'UserLogin' => 'sAMAccountName'
};




Webgui saying:

Panic, user authenticated but no user data can be found in OTRS DB!! Perhaps the user is invalid.



Cause i`m still looking for a solution, i found out that it is only possible for agents to login if they are manualy created before.
this already works for me....
but is it really still a problem for otrs syncing the information and creating a agent account? its a normal usecase for a ticketsystem...

i can`t imagine that everyone using otrs is creating their agents manually


kind regards
Locked