[otrs] LDAP(AD) + UserSyncLDAPMap

7 Jul 2009

      Guys,

I've trying to configure my OTRS (version 2.3.4) to authenticate Agents
against a LDAP server (Active Directory actually)

It works fine for users which were already registered at the DB before
the LDAP config. It authenticates correctly only the users that belong
to the OTRS_agents group and also set their permissions and groups
depending if they belong to OTRS_agents.

Problem I have is that If it is a new user created on AD it doesn't
authenticate and get the famous message "Panic! No UserData". I have
already tried to change some specific settings but it never does
correct.

I will put right below the settings I am not sure of and further below
my full config with regards LDAP Authentication. Can someone give me a
hand on it?

$Self->{UserSyncLDAPMap} = {

    UserFirstname => 'givenName',

    UserLastname => 'sn',

    UserEmail => 'mail',

  };

Not sure if for version 2.3.4 the correct is "UserFirstname" or simply
"Firstname" and the same for the others

$Self->{UserSyncLDAPGroups} = [

       'users',

  ];

Is the "users" there the table at the DB where the data is being synced
TO or the group on my AD where the data should be pulled out ?

$Self->{'AuthModule::LDAP::GroupDN'}=
'cn=OTRS_agents,ou=Groups,ou=COMPANY,dc=subdomain,dc=domain,dc=net';

  $Self->{'AuthModule::LDAP::AccessAttr'} = 'member';

  $Self->{'AuthModule::LDAP::UserAttr'} = 'DN';

Are the two last lines correct? "member" or "sAMAccountName" or
"memberUid"

And "DN" if I am using Active Directory.

Below my full LDAP config:

Thanks in advance.

$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';

  $Self->{'AuthModule::LDAP::Host'} = 'hostname';

  $Self->{'AuthModule::LDAP::BaseDN'} =
'ou=COMPANY,dc=subdomain,dc=domain,dc=net';

  $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';

  $Self->{'AuthModule::LDAP::GroupDN'}=
'cn=OTRS_agents,ou=Groups,ou=COMPANY,dc=subdomain,dc=domain,dc=net';

  $Self->{'AuthModule::LDAP::AccessAttr'} = 'member';

  $Self->{'AuthModule::LDAP::UserAttr'} = 'DN';

  $Self->{'AuthModule::LDAP::SearchUserDN'} = 'bind-user;

  $Self->{'AuthModule::LDAP::SearchUserPw'} = '*************';

  $Self->{UserSyncLDAPMap} = {

    UserFirstname => 'givenName',

    UserLastname => 'sn',

    UserEmail => 'mail',

  };

  $Self->{UserSyncLDAPGroups} = [

       'users',

  ];

    # UserTable

    $Self->{DatabaseUserTable} = 'users';

    $Self->{DatabaseUserTableUserID} = 'id';

    $Self->{DatabaseUserTableUserPW} = 'pw';

    $Self->{DatabaseUserTableUser} = 'login';

  $Self->{'UserSyncLDAPGroupsDefinition'} = {

'cn=OTRS_agents,ou=Groups,ou=COMPANY,dc=subdomain,dc=domain,dc=net' => {

            'users' => {

                rw => 1,

            },

            'faq' => {

                rw => 1,

            },

            'stats' => {

                rw => 1,

            },

        },

    };

   $Self->{'UserSyncLDAPRolesDefination'} = {

        # LDAP group

'cn=OTRS_agents,ou=Groups,ou=COMPANY,dc=subdomain,dc=domain,dc=net' => {

            'users' => 1,

            'faq' => 1,

            'stats' => 1,

            },

    };

Qube Managed Services Limited:: The Engineer's Choice for Co-Location, Internet Bandwidth, Design & Build, and Managed Servers

Qube Managed Services Limited :: Company Number 6215769 Registered in England and Wales :: VAT Registration No: GB 933 8400 27 
This e-mail and the information it contains are confidential. If you have received this e-mail in error please notify the sender immediately. You should not copy it for any purpose, or disclose its contents to any other person.

P Please consider the environment - do you really need to print this email?

[otrs] LDAP(AD) + UserSyncLDAPMap

Fernando Frediani (Qube)