Cosme;
The UserEmail attribute is required
This log line:
[Thu Jan 28 10:45:40 2016][Error][Kernel::System::User::UserAdd][348] Need UserEmail!
Indicates that there isn't an email address for the agent it is trying to insert.
Have you verified the "mail " is a proper attribute of your LDAP server, and that it is populated for the agent you're trying to have login?
Can you tell us what your LDAP server is (Microsoft Active Directory, OpenLDAP, Apache Directory, etc.)?
Thank you,
Dominic L. Hilsbos, MBA, EIT, CSDA
Director - Information Technology
[Perform Air International, Inc.]
DHilsbos@PerformAir.commailto:DHilsbos@PerformAir.com
www.PerformAir.comhttp://www.performair.com
From: otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf Of Cosme Faria Corrêa
Sent: Thursday, January 28, 2016 11:08 AM
To: otrs@otrs.org
Subject: Re: [otrs] Login not creating a DB entry for a new LDAP agent
Hi Alvaro,
thanks for your help.
I am not sure if I undesrtand.
I walked arround sysconfig, without success.
CustomerInformationCenter
1
Framework
Frontend::Admin
4
Framework
Frontend::Admin::AdminCustomerCompany
1
Framework
Frontend::Admin::AdminCustomerUser
1
Framework
Frontend::Admin::AdminSelectBox
1
Framework
Frontend::Admin::ModuleRegistration
28
Framework
Frontend::Agent
29
Framework
Frontend::Agent::Auth::TwoFactor
4
Framework
Frontend::Agent::Dashboard
11
Framework
Frontend::Agent::LinkObject
1
Framework
Frontend::Agent::ModuleMetaHead
1
Framework
Frontend::Agent::ModuleNotify
7
Framework
Frontend::Agent::ModuleRegistration
15
Framework
Frontend::Agent::NavBarModule
2
Framework
Frontend::Agent::Preferences
13
Framework
Frontend::Agent::SearchRouter
1
Framework
Frontend::Agent::Stats
10
Framework
Frontend::Customer
28
Framework
Frontend::Customer::Auth
26
Framework
Frontend::Customer::Auth::TwoFactor
4
Framework
Frontend::Customer::ModuleMetaHead
I have:
* Frontend::Customer::Auth
I do not have:
* Frontend::Agent::Auth
Why?
I am using LDAP with memberof.
My idea is:
* Do not use root@localhost in normal operation.
* LDAP Auth is suppressing DB Auth.
I have no problems If i create, manually, an account and log AFTER.
This is a part of my Config.pm
...
# OpenLDAP
# authenticate agents against ldap
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = '127.0.0.1';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=aaa,dc=bb';
$Self->{'AuthModule::LDAP::UID'} = 'uid';
# Check if the user is allowed to auth in a posixGroup
# (e. g. user needs to be in a group clerks to use otrs)
$Self->{'AuthModule::LDAP::GroupDN'} = 'cn=clerks,ou=Group,dc=aaa,dc=bb';
# $Self->{'AuthModule::LDAP::AccessAttr'} = 'memberUid';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';
# defines AuthSyncBackend (AuthSyncModule) for AuthModule
# if this key exists and is empty, there won't be a sync.
# example values: AuthSyncBackend, AuthSyncBackend2
$Self->{'AuthModule::UseSyncBackend'} = 'AuthSyncBackend';
# sync agents from ldap to mysql
$Self->{'AuthSyncModule'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host'} = '127.0.0.1';
# $Self->{'AuthSyncModule::LDAP::BaseDN'} = 'ou=People,dc=aaa,dc=bb';
$Self->{'AuthSyncModule::LDAP::BaseDN'} = 'dc=aaa,dc=bb';
$Self->{'AuthSyncModule::LDAP::UID'} = 'uid';
$Self->{'AuthSyncModule::LDAP::UserSyncMap'} = {
# DB -> LDAP
UserFirstname => 'givenName',
UserLastname => 'sn',
UserEmail => 'mail',
UserMobile => 'mobile',
# UserComment => 'description',
};
# AuthSyncModule::LDAP::UserSyncInitialGroups
# (sync following group with rw permission after initial create of first agent
# login)
$Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups'} = [
'users',
];
# Attributes needed for group syncs
# (attribute name for group value key)
# $Self->{'AuthSyncModule::LDAP::AccessAttr'} = 'memberUid';
$Self->{'AuthSyncModule::LDAP::AccessAttr'} = 'member';
# (attribute for type of group content UID/DN for full ldap name)
# $Self->{'AuthSyncModule::LDAP::UserAttr'} = 'UID';
$Self->{'AuthSyncModule::LDAP::UserAttr'} = 'DN';
# AuthSyncModule::LDAP::UserSyncGroupsDefinition
# (If "LDAP" was selected for AuthModule and you want to sync LDAP
# groups to otrs groups, define the following.)
$Self->{'AuthSyncModule::LDAP::UserSyncGroupsDefinition'} = {
# # ldap group
'cn=netadmins,ou=Group,dc=aaa,dc=bb' => {
# # otrs group
'admin' => {
# # permission
rw => 1,
ro => 1,
},
},
'cn=users,ou=Group,dc=aaa,dc=bb' => {
'users' => {
rw => 1,
ro => 1,
},
}
};
...
Could you help me?
I will appreciate any kind of directions or examples.
TIA
On 28/01/16 11:15, Alvaro Cordero wrote:
Hello,
That means that the user cannot be sync to the database, you need to verify the user mapping in sysconfig, to match the fields from ldap into OTRS.
Regards
2016-01-28 9:59 GMT-06:00 Cosme Faria Corrêa
