On Mon, Aug 27, 2012 at 5:42 PM, Stefan Michael Guenther <s.guenther@in-put.de> wrote:

Hello,

I'm currently trying to setup the LDAP authentication for both agents and customers. While the agents can login without a problem, the customers can't. We checked the logfiles and found out, that OTRS uses "AuthModule::LDAP::AlwaysFilter" for agents and customers, although we have defined "Customer::AuthModule::LDAP::AlwaysFilter". Here are the relevant lines from the config file, did we make a type or misunderstood something in the configuration? BTW, we are using version 3.1.9

sub Load {
my $Self = shift;

$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = '192.168.10.5';
$Self->{'AuthModule::LDAP::BaseDN'} = 'o=in-put';
$Self->{'AuthModule::LDAP::UID'} = 'uid';
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=otrsuser,o=in-put';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'xxxxxxx';
$Self->{'AuthModule::LDAP::AlwaysFilter'} = '(memberOf=cn=OTRS,ou=Gruppen,o=IN-PUT)';
$Self->{'AuthModule::LDAP::Params'} = { port => 389,timeout => 120,async => 0, version => 3,};
$Self->{'AuthSyncModule'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host'} = '192.168.10.5';
$Self->{'AuthSyncModule::LDAP::BaseDN'} = 'o=in-put';
$Self->{'AuthSyncModule::LDAP::UID'} = 'uid';
$Self->{'AuthSyncModule::LDAP::SearchUserDN'} = 'cn=otrsuser,o=in-put';
$Self->{'AuthSyncModule::LDAP::SearchUserPw'} = 'xxxxx';
$Self->{'AuthSyncModule::LDAP::UserSyncMap'} = { UserFirstname => 'givenName',UserLastname  => 'sn',UserEmail => 'mail', };
$Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups'} = ['users',];

$Self->{'Customer::AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = '192.168.10.5';
$Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'ou=user,o=in-put';
$Self->{'Customer::AuthModule::LDAP::UID'} = 'uid';
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'cn=otrsuser,o=in-put';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'xxxxx';
$Self->{'Customer::AuthModule::LDAP::AlwaysFilter'} = '(sn=*)';
$Self->{'Customer::AuthModule::LDAP::Params'} = {port => 389, timeout => 120, async => 0, version => 3,};
$Self->{'Customer::AuthSyncModule'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'Customer::AuthSyncModule::LDAP::Host'} = '192.168.10.5';
$Self->{'Customer::AuthSyncModule::LDAP::BaseDN'} = 'o=in-put';
$Self->{'Customer::AuthSyncModule::LDAP::UID'} = 'uid';
$Self->{'Customer::AuthSyncModule::LDAP::SearchUserDN'} = 'cn=otrsuser,o=in-put';
$Self->{'Customer::AuthSyncModule::LDAP::SearchUserPw'} = 'xxxxx';
$Self->{'Customer::AuthSyncModule::LDAP::UserSyncMap'} = {UserFirstname => 'givenName', UserLastname  => 'sn',UserEmail     => 'mail', };
$Self->{'Customer::AuthSyncModule::LDAP::UserSyncInitialGroups'} = ['customers',];


Thanks for any hints or suggestions,

Stefan
---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs