Hi folks,
First let me say that OTRS appears to be a great product! Kudos to the
developers!
We are in the process of evaluating our options for a
helpdesk/trouble-ticket system. I would really like to give OTRS a good
evaluation, but I'm having some problems. Our chosen solution must be able
to authenticate users (both agents and customers) via Microsoft Active
Directory. It appears that this is possible, but I've yet to have any
success. I'll outline the steps I've taken and solicit any input from the
community.
OTRS is working fine when authenticating against it's own database. Here's
what I've done to try to authenticate against AD:
I edited Kernel/Config.pm and added:
<begin additions to Config.pm>
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = 'lincoln.tsteel.com';
$Self->{'AuthModule::LDAP::BaseDN'} = 'ou=Tuscaloosa - Sheet
Mill,dc=tsteel,dc=com';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=OTRS Admin,ou=Tuscaloosa
- Sheet Mill,dc=tsteel,dc=com';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'password';
$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = 'lincoln.tsteel.com';
$Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'ou=Tuscaloosa - Sheet
Mill,dc=tsteel,dc=com';
$Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'cn=OTRS
Admin,ou=Tuscaloosa - Sheet Mill,dc=tsteel,dc=com';
$Self->{'Customer::AuthModule::LDAP::SearchUserPW'} = 'password';
$Self->{CustomerUser} = {
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => 'lincoln.tsteel.com',
BaseDN => 'ou=Tuscaloosa - Sheet Mill,dc=tsteel,dc=com',
SSCOPE => 'sub',
UserDN => 'cn=OTRS Admin,ou=Tuscaloosa - Sheet Mill,dc=tsteel,dc=com',
UserPW => 'password',
},
CustomerKey => 'sAMAccountName',
CustomerID => 'mail',
CustomerUserListFields => 'sAMAccountName', 'cn', 'mail',
CustomerUserSearchFields => 'sAMAccountName', 'cn', 'mail',
CustomerUserPostMasterSearchFields => 'mail',
CustomerUserNameFields => 'givenname', 'sn',
Map => [
[ 'UserFirstName', 'Firstname', 'givenname', 1, 1, 'var' ],
[ 'UserLastName', 'Lastname', 'sn', 1, 1, 'var' ],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
],
};
<end additions to Config.pm>
On my AD box, I ran: ldifde -f users.ldf -d "OU=Tuscaloosa - Sheet
Mill,dc=tsteel,dc=com" -r "