Hi Bernd,
wenn du NUR LDAP anbinden willst dann musst du den ersten Teil
auskommentieren, siehe Bsp.
Ich hab dir die Änderungen die du machen musst mal fett markiert.
Es wird nicht "verglichen" sondern der Wert ensprechend dem Feld
übernommen. Als Kundennummer wird die Mail Adresse des Users genommen, ist
insoweit sinnvoll als das du hier zwischen den Usern differenzierst.
Wo welche Felder genommen werden siehst du im letzten Block.
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = 'IPADRESSE';
$Self->{'AuthModule::LDAP::BaseDN'} = 'DC=DOMAIN,DC=local';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::SearchUserDN'} = '
CN=USER,CN=Users,DC=DOAMIN,DC=local';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'PASSWORD';
# This is an example configuration for an LDAP auth. backend.
# (take care that Net::LDAP is installed!)
$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = 'IPADRESSE';
$Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'DC=DOMAIN,DC=local';
$Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
# The following is valid but would only be necessary if the
# anonymous user do NOT have permission to read from the LDAP tree
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = '
CN=USER,CN=Users,DC=DOAMIN,DC=local';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'PASSWORD';
# CustomerUser
# (customer user database backend and settings)
# $Self->{CustomerUser} = {
# Name => 'Datenbank',
# Module => 'Kernel::System::CustomerUser::DB',
# Params => { Table => 'customer_user',
# # to use an external database
# DSN => 'DBI:odbc:yourdsn',
# DSN => 'DBI:mysql:database=customerdb;host=customerdbhost',
# User => '', Password => '',
# },
# customer uniq id
# CustomerKey => 'login',
# CustomerID => 'customer_id',
# CustomerValid => 'valid_id',
# CustomerUserListFields => ['first_name', 'last_name', 'email'],
# CustomerUserListFields => ['login', 'first_name', 'last_name',
'customer_id', 'email'],
# CustomerUserSearchFields => ['login', 'last_name',
'customer_id'],
# CustomerUserSearchPrefix => '',
# CustomerUserSearchSuffix => '*',
# CustomerUserSearchListLimit => 250,
# CustomerUserPostMasterSearchFields => ['email'],
# CustomerUserNameFields => ['salutation', 'first_name',
'last_name'],
# ReadOnly => 1,
# Map => [
# note: Login, Email and CustomerID needed!
# var, frontend, storage, shown, required, storage-type,
http-link
# [ 'UserSalutation', 'Salutation', 'salutation', 1, 0, 'var'
],
# [ 'UserFirstname', 'Firstname', 'first_name', 1, 1, 'var' ],
# [ 'UserLastname', 'Lastname', 'last_name', 1, 1, 'var' ],
# [ 'UserLogin', 'Login', 'login', 1, 1, 'var' ],
# [ 'UserPassword', 'Password', 'pw', 0, 1, 'var' ],
# [ 'UserEmail', 'Email', 'email', 0, 1, 'var' ],
# [ 'UserCustomerID', 'CustomerID', 'customer_id', 0, 1, 'var'
],
# [ 'UserComment', 'Comment', 'comments', 1, 0, 'var' ],
# [ 'ValidID', 'Valid', 'valid_id', 0, 1, 'int' ],
# ],
# };
# CustomerUser1
# (customer user ldap backend and settings)
$Self->{CustomerUser1} = {
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
# ldap host
Host => 'IPADRESSE',
# ldap base dn
BaseDN => 'DC=DOMAIN,DC=local',
# search scope (one|sub)
SSCOPE => 'sub',
# The following is valid but would only be necessary if the
# anonymous user does NOT have permission to read from the LDAP tree
UserDN => 'CN=USER,CN=Users,DC=DOMAIN,DC=local',
UserPw => 'password',
AlwaysFilter => '',
SourceCharset => 'utf-8',
DestCharset => 'utf-8',
},
# customer uniq id
CustomerKey => 'sAMAccountName',
# customer #
CustomerID => 'mail',
CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchPrefix => '',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 250,
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
Map => [
# note: Login, Email and CustomerID needed!
# var, frontend, storage, shown, required, storage-type
#[ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
#[ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ],
#[ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
],
};
Von:
Bernd Nachtigall
