hi, and thanks fot the second help of the day<div><br></div><div>i have to integrate otrs 3.1 (windows version) with the domain active directory, based on 2003 object, but installed on a windows 2008 r2 server...<div><br></div>
<div>but i have always the same error:</div><div><br></div><div>[Fri Jul  6 14:41:39 2012][Error][Kernel::System::Auth::LDAP::Auth][187] First bind failed! 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0</div>
<div>[Fri Jul  6 14:41:39 2012][Error][Kernel::System::User::UserLookup][797] No UserID found for &#39;adone\agente1&#39;!</div><div><br></div><div>the network configuration is that:</div><div><br></div><div>domain controller: dcad101</div>
<div>domain name: adone.lan</div><div><br></div><div><br></div><div>ad configuration is that:</div><div><br></div><div>Groups:</div><div><ul><li>OTRSAgents</li><li>OTRSCustomers</li></ul></div><div>Agent Users:</div><div>
<ul><li>agente1</li><li>agente2</li><li>otrs (i use to sync otrs with ldap)</li></ul><div><br></div></div><div>Customer Users:</div><div><ul><li>cliente1</li><li>cliente2</li></ul></div><div><br></div><div>all objects are in the root of active directory</div>
<div><br></div><div><br></div><div>in the login form i use as name: domain\username (adone\agente1)
</div><div><br></div><div><br></div><div>this is the part of load function related to login:</div><div><br></div><div><div># Enable LDAP lookups for Agent logins. User must be a member of OTRS Agents group.</div><div>    $Self-&gt;{&#39;AuthModule&#39;} = &#39;Kernel::System::Auth::LDAP&#39;;</div>
<div>    $Self-&gt;{&#39;AuthModule::LDAP::Host&#39;} = &#39;dcad101.adone.lan&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::BaseDN&#39;} = &#39;dc=adone,dc=lan&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::UID&#39;} = &#39;sAMAccountName&#39;;</div>
<div>    $Self-&gt;{&#39;AuthModule::LDAP::SearchUserDN&#39;} = &#39;cn=otrs,cn=Users,dc=adone,dc=lan&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::SearchUserPw&#39;} = &#39;a12345++&#39;;</div><div>$Self-&gt;{&#39;AuthModule::LDAP::AlwaysFilter&#39;} = &#39;&#39;;</div>
<div>    $Self-&gt;{&#39;AuthModule::LDAP::GroupDN&#39;} = &#39;cn=OTRSAgents,cn=Users,dc=adone,dc=lan&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::AccessAttr&#39;} = &#39;memberUid&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::UserAttr&#39;} = &#39;UID&#39;;</div>
<div><br></div><div>    # Enable LDAP lookups of Agent account informations and default roles.</div><div>    $Self-&gt;{&#39;AuthSyncModule&#39;} = &#39;Kernel::System::Auth::Sync::LDAP&#39;;</div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::Host&#39;} = &#39;dcad101.adone.lan&#39;;</div>
<div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::BaseDN&#39;} = &#39;dc=adone,dc=lan&#39;;</div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::UID&#39;} = &#39;sAMAccountName&#39;;</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>$Self-&gt;{&#39;AuthSyncModule::LDAP::SearchUserDN&#39;} = &#39;cn=otrs,cn=OTRSAgents,dc=adone,dc=lan&#39;;</div>
<div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::SearchUserPw&#39;} = &#39;a12345++&#39;;</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>$Self-&gt;{&#39;AuthSyncModule::LDAP::AlwaysFilter&#39;} = &#39;&#39;;</div>
<div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::GroupDN&#39;} = &#39;cn=OTRSAgents,cn=Users,dc=adone,dc=lan&#39;;</div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::AccessAttr&#39;} = &#39;memberUid&#39;;</div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::UserAttr&#39;} = &#39;UID&#39;;</div>
<div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::UserSyncMap&#39;} = {</div><div>        UserFirstname =&gt; &#39;givenName&#39;,</div><div>        UserLastname  =&gt; &#39;sn&#39;,</div><div>        UserEmail     =&gt; &#39;mail&#39;,</div>
<div>    };</div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::UserSyncRolesDefinition&#39;} = {</div><div>        &#39;cn=OTRSAgents,cn=Users,dc=adone,dc=lan&#39; =&gt; {</div><div>            &#39;Company Agents&#39; =&gt; 1,</div>
<div>        },</div><div>        &#39;cn=Domain Admins,cn=Users,dc=adone,dc=lan&#39; =&gt; {</div><div>            &#39;Tech Support Agents&#39; =&gt; 1,</div><div>        }</div><div>    };</div><div><br></div><div><br>
</div><div>    # Enable LDAP lookups for Customer logins.</div><div>    $Self-&gt;{&#39;Customer::AuthModule&#39;} = &#39;Kernel::System::CustomerAuth::LDAP&#39;;</div><div>    $Self-&gt;{&#39;Customer::AuthModule::LDAP::Host&#39;} = &#39;dcad101.adone.lan&#39;;</div>
<div>    $Self-&gt;{&#39;Customer::AuthModule::LDAP::BaseDN&#39;} = &#39;dc=adone,dc=lan&#39;;</div><div>    $Self-&gt;{&#39;Customer::AuthModule::LDAP::UID&#39;} = &#39;sAMAccountName&#39;;</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>$Self-&gt;{&#39;Customer::AuthModule::LDAP::SearchUserDN&#39;} = &#39;cn=otrs,cn=OTRSCustomers,dc=adone,dc=lan&#39;;</div>
<div>    $Self-&gt;{&#39;Customer::AuthModule::LDAP::SearchUserPw&#39;} = &#39;a12345++&#39;;</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>$Self-&gt;{&#39;Customer::AuthModule::LDAP::AlwaysFilter&#39;} = &#39;&#39;;</div>
<div>    $Self-&gt;{&#39;Customer::AuthModule::LDAP::GroupDN&#39;} = &#39;cn=OTRSCustomers,dc=adone,dc=lan&#39;;</div><div>    $Self-&gt;{&#39;Customer::AuthModule::LDAP::AccessAttr&#39;} = &#39;memberUid&#39;;</div><div>
    $Self-&gt;{&#39;Customer::AuthModule::LDAP::UserAttr&#39;} = &#39;UID&#39;;</div><div><br></div><div>    # Enable LDAP lookups for Customer account information.</div><div>    $Self-&gt;{CustomerUser} = {</div><div>      Module =&gt; &#39;Kernel::System::CustomerUser::LDAP&#39;,</div>
<div>      Params =&gt; {</div><div>        Host =&gt; &#39;dcad101.adone.lan&#39;,</div><div>        BaseDN =&gt; &#39;dc=adone,dc=lan&#39;,</div><div>        SSCOPE =&gt; &#39;sub&#39;,</div><div>        UserDN =&gt; &#39;cn=otrs,cn=Users,dc=adone,dc=lan&#39;,</div>
<div>        UserPw =&gt; &#39;a12345++&#39;,</div><div>        #AlwaysFilter =&gt; &#39;(objectclass=user)&#39;,</div><div><span class="Apple-tab-span" style="white-space:pre">		</span>AlwaysFilter =&gt; &#39;&#39;,</div>
<div>        GroupDN =&gt; &#39;cn=OTRSCustomers,dc=adone,dc=lan&#39;,</div><div>        AccessAttr =&gt; &#39;memberUid&#39;,</div><div>        UserAttr =&gt; &#39;UID&#39;,</div><div>      },</div><div>      CustomerKey =&gt; &#39;sAMAccountName&#39;,</div>
<div>      CustomerID =&gt; &#39;[customer_id]&#39;,</div><div>      CustomerUserListFields =&gt; [&#39;sAMAccountName&#39;, &#39;sn&#39;, &#39;givenname&#39;, &#39;company&#39;,  &#39;mail&#39;],</div><div>      CustomerUserSearchFields =&gt; [&#39;sAMAccountName&#39;, &#39;sn&#39;, &#39;givenname&#39;, &#39;company&#39;, &#39;mail&#39;],</div>
<div>      CustomerUserPostMasterSearchFields =&gt; [&#39;mail&#39;],</div><div>      CustomerUserNameFields =&gt; [&#39;givenname&#39;, &#39;sn&#39;],</div><div>      CustomerUserValidFilter =&gt; &#39;(company=*)&#39;,</div>
<div>      Map =&gt; [</div><div>        [ &#39;UserSalutation&#39;, &#39;Title&#39;, &#39;title&#39;, 1, 0, &#39;var&#39; ],</div><div>        [ &#39;UserFirstname&#39;, &#39;Firstname&#39;, &#39;givenname&#39;, 1, 1, &#39;var&#39; ],</div>
<div>        [ &#39;UserLastname&#39;, &#39;Lastname&#39;, &#39;sn&#39;, 1, 1, &#39;var&#39; ],</div><div>        [ &#39;UserLogin&#39;, &#39;Login&#39;, &#39;sAMAccountName&#39;, 1, 1, &#39;var&#39; ],</div><div>        [ &#39;UserEmail&#39;, &#39;Email&#39;, &#39;mail&#39;, 1, 1, &#39;var&#39; ],</div>
<div>        [ &#39;UserCustomerID&#39;, &#39;CustomerID&#39;, &#39;company&#39;, 0, 1, &#39;var&#39; ],</div><div>        [ &#39;UserPhone&#39;, &#39;Phone&#39;, &#39;telephonenumber&#39;, 1, 0, &#39;var&#39; ],</div><div>
        [ &#39;UserAddress&#39;, &#39;Address&#39;, &#39;postaladdress&#39;, 1, 0, &#39;var&#39; ],</div><div>        [ &#39;UserComment&#39;, &#39;Comment&#39;, &#39;description&#39;, 1, 0, &#39;var&#39; ],</div><div>      ],</div>
<div>    };</div></div></div>