Could not figure those out because the DN string was correct. But I did find references that I could use the user@domain.commailto:user@domain.com instead if I did not feel like typing the full DN. Once I did that and added sscope='sub'; to the parameters, I got it working. Just tested it successfully within 30 seconds of your email. :)
Thanks for your help!
From: Gerald Young [mailto:crythias@gmail.com]
Sent: Tuesday, August 27, 2013 6:16 PM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] How to debug LDAP
First bind failed = search user and password not working.
On Tue, Aug 27, 2013 at 6:49 PM, Marty Hillman mailto:mhillman@equuscs.com> wrote:
Thanks, but it did not help me. I found the error.log and found the following error. I traced the error codes on Google, but all of the PERL modules are installed. otrs.CheckModules.plhttp://otrs.CheckModules.pl comes back clean. I have double-checked the DN strings and everything traces fine. And the username below exists because I am logged in to AD using that account.
ERROR: OTRS-CGI-10 Perl: 5.14.2 OS: linux Time: Tue Aug 27 17:42:28 2013
Message: First bind failed! 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece^@
RemoteAddress: 172.18.3.20
RequestURI: /otrs/index.plhttp://index.pl
Traceback (6687):
Module: Kernel::System::Auth::LDAP::Auth (OTRS 3.2.10) Line: 182
Module: Kernel::System::Auth::Auth (OTRS 3.2.10) Line: 186
Module: Kernel::System::Web::InterfaceAgent::Run (OTRS 3.2.10) Line: 201
Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 41
Module: (eval) (v1.99) Line: 204
Module: ModPerl::RegistryCooker::run (v1.99) Line: 204
Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170
Module: ModPerl::Registry::handler (v1.99) Line: 31
ERROR: OTRS-CGI-10 Perl: 5.14.2 OS: linux Time: Tue Aug 27 17:42:28 2013
Message: No UserID found for 'mhillman'!
RemoteAddress: 172.18.3.20
RequestURI: /otrs/index.plhttp://index.pl
Traceback (6687):
Module: Kernel::System::User::UserLookup (OTRS 3.2.10) Line: 795
Module: Kernel::System::Auth::Auth (OTRS 3.2.10) Line: 243
Module: Kernel::System::Web::InterfaceAgent::Run (OTRS 3.2.10) Line: 201
Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 41
Module: (eval) (v1.99) Line: 204
Module: ModPerl::RegistryCooker::run (v1.99) Line: 204
Module: ModPerl::RegistryCooker::default_handler (v1.99) Line: 170
Module: ModPerl::Registry::handler (v1.99) Line: 31
From: Gerald Young [mailto:crythias@gmail.commailto:crythias@gmail.com]
Sent: Tuesday, August 27, 2013 4:23 PM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] How to debug LDAP
http://forums.otterhub.org/viewtopic.php?f=60&t=16543
On Tue, Aug 27, 2013 at 4:55 PM, Marty Hillman mailto:mhillman@equuscs.com> wrote:
Anyone know how to debug LDAP configurations? I had it all configured, but my network administrator decided to reorganize Active Directory and move everything around in new OUs. I changed the strings in Config.pm to point to the new DN, but it is still not allowing logins and shows Login Failed. Trying to figure out what log files I can look at or how to manually test to get an actual error rather than a failed login.
Marty Hillman - IT Manager of Network Infrastructure
[cid:image001.png@01CEA353.00553400]
5801 Clearwater Drive, Minnetonka, MN 55343
P 612.617.4333tel:612.617.4333 | E mhillman@equuscs.commailto:mhillman@equuscs.com
---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
