Guys,

 

I’ve trying to configure my OTRS (version 2.3.4) to authenticate Agents against a LDAP server (Active Directory actually)

 

It works fine for users which were already registered at the DB before the LDAP config. It authenticates correctly only the users that belong to the OTRS_agents group and also set their permissions and groups depending if they belong to OTRS_agents.

 

Problem I have is that If it is a new user created on AD it doesn’t authenticate and get the famous message “Panic! No UserData”. I have already tried to change some specific settings but it never does correct.

I will put right below the settings I am not sure of and further below my full config with regards LDAP Authentication. Can someone give me a hand on it?

 

$Self->{UserSyncLDAPMap} = {

    UserFirstname => 'givenName',

    UserLastname => 'sn',

    UserEmail => 'mail',

  };

 

Not sure if for version 2.3.4 the correct is “UserFirstname” or simply “Firstname” and the same for the others

 

$Self->{UserSyncLDAPGroups} = [

       'users',

  ];

 

Is the “users” there the table at the DB where the data is being synced TO or the group on my AD where the data should be pulled out ?

 

$Self->{'AuthModule::LDAP::GroupDN'}= 'cn=OTRS_agents,ou=Groups,ou=COMPANY,dc=subdomain,dc=domain,dc=net';

  $Self->{'AuthModule::LDAP::AccessAttr'} = 'member';

  $Self->{'AuthModule::LDAP::UserAttr'} = 'DN';

 

Are the two last lines correct? “member” or “sAMAccountName” or “memberUid”

And “DN” if I am using Active Directory.

 

Below my full LDAP config:

 

Thanks in advance.

 

 

$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';

  $Self->{'AuthModule::LDAP::Host'} = 'hostname';

  $Self->{'AuthModule::LDAP::BaseDN'} = 'ou=COMPANY,dc=subdomain,dc=domain,dc=net';

  $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';

 

  $Self->{'AuthModule::LDAP::GroupDN'}= 'cn=OTRS_agents,ou=Groups,ou=COMPANY,dc=subdomain,dc=domain,dc=net';

  $Self->{'AuthModule::LDAP::AccessAttr'} = 'member';

  $Self->{'AuthModule::LDAP::UserAttr'} = 'DN';

 

  $Self->{'AuthModule::LDAP::SearchUserDN'} = 'bind-user;

  $Self->{'AuthModule::LDAP::SearchUserPw'} = '*************';

 

  $Self->{UserSyncLDAPMap} = {

    UserFirstname => 'givenName',

    UserLastname => 'sn',

    UserEmail => 'mail',

  };

 

  $Self->{UserSyncLDAPGroups} = [

       'users',

  ];

 

    # UserTable

    $Self->{DatabaseUserTable} = 'users';

    $Self->{DatabaseUserTableUserID} = 'id';

    $Self->{DatabaseUserTableUserPW} = 'pw';

    $Self->{DatabaseUserTableUser} = 'login';

 

 

  $Self->{'UserSyncLDAPGroupsDefinition'} = {

        'cn=OTRS_agents,ou=Groups,ou=COMPANY,dc=subdomain,dc=domain,dc=net' => {

            'users' => {

                rw => 1,

            },

            'faq' => {

                rw => 1,

            },

            'stats' => {

                rw => 1,

            },

        },

    };

 

   $Self->{'UserSyncLDAPRolesDefination'} = {

        # LDAP group

        'cn=OTRS_agents,ou=Groups,ou=COMPANY,dc=subdomain,dc=domain,dc=net' => {

            'users' => 1,

            'faq' => 1,

            'stats' => 1,

            },

    };