Wayne Scott wrote:
Steve,
As per your 2 emails I gave your suggestions a try:
Firstly I fully qualified the ldap user:
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'CN=ldap.lookup, OU=Support, OU=IT, OU=Melbourne, OU=Staff, DC=company, DC=com, DC=au';
Dear Wayne If I may please say so that might not be the place where you need to change it. But before you make any other change, could you please make sure that you can connect to your AD using the username you have chosen? Now, for the changes, this is what I have in my system and it is working #Enable LDAP authentication for Customers / Users $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP'; $Self->{'Customer::AuthModule::LDAP::Host'} = 'ldapServer.admin.myOrganisation.net'; $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'OU=Staff,DC=admin,DC=myOrganisation,DC=net'; $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName'; #The following is valid but would only be necessary if the #anonymous user do NOT have permission to read from the LDAP tree $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'MyOTRS_User'; $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'PassWord'; #CustomerUser #(customer user database backend and settings) $Self->{CustomerUser} = { Module => 'Kernel::System::CustomerUser::LDAP', Params => { Host => 'ldapServer.admin.myOrganisation.net', BaseDN => 'OU=Staff,DC=admin,DC=myOrganisation,DC=net', SSCOPE => 'sub', UserDN =>'MyOTRS_User', UserPw => 'PassWord', }, # customer unique id CustomerKey => 'sAMAccountName', # customer # CustomerID => 'mail', CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'], CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'], CustomerUserSearchPrefix => '', CustomerUserSearchSuffix => '*', CustomerUserSearchListLimit => 2500, CustomerUserPostMasterSearchFields => ['mail'], CustomerUserNameFields => ['givenname', 'sn'], Map => [ # note: Login, Email and CustomerID needed! # var, frontend, storage, shown, required, storage-type #[ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ], [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ], [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ], [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ], [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ], [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ], [ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ], #[ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ], #[ 'UserComment', 'Comment', 'description', 1, 0, 'var' ], ], }; Hope this helps