Hallo Nicola, vielen Dank für die Information. Ich habe den Code von Dir übernommen und nur die entsprechenden Login- und Hostdaten abgeändert. Leider bekomme ich immer noch nicht ins OTRS rein - weder in das Customerinterface noch in das Agenteninterface. Als Fehlermeldung erhalte ich: Anmeldung fehlgeschlagen! Benutzername oder Passwort falsch. Das syslog meldet: Jul 26 10:52:57 TICKETDEV1 OTRS-CGI-10[26229]: [Notice][Kernel::System::CustomerAuth::LDAP::Auth] CustomerUser: otrsldap@domaincontroller.local authentification failed, no LDAP entry found!BaseDN='dc=domaincontroller,dc=local', Filter='(&(sAMAccountName=otrsldap@domaincontroller.local)(&(mail=*)(objectClass=Person)(!(objectClass=Computer))(!(objectClass=publicFolder))))'. Hat jemand eine Idee? Mit freundlichen Grüßen Timo Salmen -----Ursprüngliche Nachricht----- Von: otrs-de-bounces@otrs.org [mailto:otrs-de-bounces@otrs.org] Im Auftrag von Nicola Tiling Gesendet: Freitag, 23. Juli 2010 18:15 An: User questions and discussions about OTRS.org in German Betreff: Re: [otrs-de] AD-Anbindung BaseDN scheint mir nicht richtig zu sein. nicht "domain.local" sondern 'dc=domain,dc=local' Hier eine funktionierende Konfiguration: # ---------------------------------------------------- # # Customer Authentifizirung via LDAP # # ---------------------------------------------------- # $Self->{'Customer::AuthModule1'} = 'Kernel::System::CustomerAuth::LDAP'; $Self->{'Customer::AuthModule::LDAP::Host'} = '192.168.0.1'; $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'dc=domain,dc=local'; $Self->{'Customer::AuthModule::LDAP::GroupDN'} = 'cn=OTRSUser,cn=users,dc=domain,dc=local'; $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'otrs@domain.local'; $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = '123456'; $Self->{'Customer::AuthModule::LDAP::AlwaysFilter'} = '(&(mail=*)(objectClass=Person)(!(objectClass=Computer))(!(objectClass=publicFolder)))'; $Self->{'Customer::AuthModule::LDAP::AccessAttr'} = 'member'; $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName'; $Self->{'Customer::AuthModule::LDAP::UserAttr'} = 'DN'; $Self->{'Customer::AuthModule::LDAP::Params'} = { SourceCharset => 'utf-8', DestCharset => 'utf-8', }; # ---------------------------------------------------- # # customer Auth # # ---------------------------------------------------- # # CustomerUser # (customer user ldap backend and settings) $Self->{CustomerUser1} = { Module => 'Kernel::System::CustomerUser::LDAP', Name => 'Active Directory', Params => { # ldap host Host => '192.168.0.1', # ldap base dn BaseDN => 'dc=domain,dc=local', # search scope (one|sub) SSCOPE => 'sub', UserDN => 'otrs@domain.local', UserPw => '123456', AlwaysFilter => '(&(mail=*)(objectClass=Person)(!(objectClass=Computer))(!(objectClass=publicFolder)))', SourceCharset => 'utf-8', DestCharset => 'utf-8', }, # customer uniq id CustomerKey => 'sAMAccountName', # customer # CustomerID => 'mail', CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'], CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'], CustomerUserSearchPrefix => '', CustomerUserSearchSuffix => '*', CustomerUserExcludePrimaryCustomerID => 0, CustomerUserSearchListLimit => 2500, CustomerUserPostMasterSearchFields => ['mail'], CustomerUserNameFields => ['givenname', 'sn'], ReadOnly => 1, Map => [ # note: Login, Email and CustomerID needed! # var, frontend, storage, shown, required, storage-type #[ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ], [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var', '', 0 ], [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var', '', 0 ], [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var', '', 0 ], [ 'UserEmail', 'Email', 'mail', 1, 1, 'var', '', 0 ], #[ 'UserEmail', 'Email', 'extensionAttribute1', 0, 1, 'var', '', 0 ], [ 'UserCustomerID', 'CustomerID', 'company', 0, 1, 'var', '', 0 ], #[ 'UserCustomerIDs', 'CustomerIDs', 'company', 1, 0, 'var', '', 0 ], #[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var', '', 0 ], #[ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var', '', 0 ], #[ 'UserComment', 'Comment', 'description', 1, 0, 'var', '', 0 ], ], }; Am 23.07.2010 um 16:26 schrieb Salmen, Timo:
Hallo Liste,
ich habe hier ein OTRS 2.2.7, welches ich partout nicht an einen Windows Server 2008 AD angunden bekommen.
Meine Config: $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP'; $Self->{'Customer::AuthModule::LDAP::Host'} = '10.0.0.15'; $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'domaene.local'; $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName'; $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'OTRSLDAP@domaene.local'; $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = '123456';
#--------------------------------------# # LDAP Konfiguration / Kundendaten # #--------------------------------------# $Self->{CustomerUser1} = { Name => 'LDAP Datenquelle', Module => 'Kernel::System::CustomerUser::LDAP', Params => { Host => '10.0.0.15', BaseDN => 'domaene.local', SSCOPE => 'sub', UserDN => USER@domaene.local', UserPw => '123456', }, CustomerKey => 'sAMAccountName', CustomerID => 'mail', CustomerUserListFields => ['sAMAccountName', 'CN', 'mail'], CustomerUserSearchFields => ['sAMAccountName', 'CN', 'mail'], CustomerUserPostMasterSearchFields => ['mail'], CustomerUserNameFields => ['givenname', 'SN'], Map => [ # note: Login, Email and CustomerID needed! # var, frontend, storage, shown, required, storage-type [ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ], [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ], [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ], [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ], [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ], [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ], [ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ], # [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ], # [ 'UserComment', 'Comment', 'description', 1, 0, 'var' ], ], };
Der Syslog sagt: Jul 23 18:00:02 COOCGNOTRS001 /USR/SBIN/CRON[9877]: (otrs) CMD (test -x $HOME/bin/GenericAgent.pl && $HOME/bin/GenericAgent.pl -c db > /dev/null) Jul 23 18:00:02 COOCGNOTRS001 OTRS-GenericAgent-10[9880]: [Error][Kernel::System::CustomerUser::LDAP::new][Line:136]: First bind failed! 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0#000 Jul 23 18:00:02 COOCGNOTRS001 OTRS-GenericAgent-10[9879]: [Error][Kernel::System::CustomerUser::LDAP::new][Line:136]: First bind failed! 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0#000 Jul 23 18:01:27 COOCGNOTRS001 OTRS-CGI-10[2501]: [Error][Kernel::System::CustomerAuth::LDAP::Auth][Line:168]: First bind failed! 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0#000 Jul 23 18:01:38 COOCGNOTRS001 OTRS-CGI-10[2501]: [Error][Kernel::System::CustomerAuth::LDAP::Auth][Line:168]: First bind failed! 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0#000 Jul 23 18:01:52 COOCGNOTRS001 OTRS-CGI-10[2501]: [Notice][Kernel::System::Auth::DB::Auth] User: otrsldap@compass.localmailto:otrsldap@compass.local doesn't exist or is invalid!!! (REMOTE_ADDR: 192.168.102.102) Jul 23 18:02:57 COOCGNOTRS001 OTRS-CGI-10[2499]: [Notice][Kernel::System::Auth::DB::Auth] User: otrsldap doesn't exist or is invalid!!! (REMOTE_ADDR: 192.168.102.102) Jul 23 18:03:03 COOCGNOTRS001 OTRS-CGI-10[2499]: [Error][Kernel::System::CustomerAuth::LDAP::Auth][Line:168]: First bind failed! 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0#000
Hat jemand hier in der Liste eine Idee, wie ich das lösen kann?
Mit freundlichen Grüßen Timo Salmen
--------------------------------------------------------------------- OTRS mailing list: otrs-de - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs-de To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs-de
NEU! ENTERPRISE SUBSCRIPTION - JETZT informieren und buchen! http://www.otrs.com/de/support/enterprise-subscription/