[otrs] Re: Re: Example config of Authentication via Active Dircectory

13 Dec 2005

      I looked in my users section of the admin-area.

I have their windows login name in the Username field, their email address in the Email field and the Valid switch is set to Valid.
Everything else is set in the LDAP portion of the Config.PM section I send you.

I could not get it working via the SysConfig area of the Admin-area. I did it via the Config.PM file.

The admin user referenced in the file I sent is a Domain Admin.  I used this account because a previous LDAP VPN software required 
it.  I do not know if it is required for OTRS.  One note, 'cn=adminuser,ou=mydomain,dc=mydomain,dc=com' has to match where the user 
is in AD.  I edited the file.
Mine is actually: 'cn=Szzzzzr,ou=TEzzzzecurity,dc=tezzzzup,dc=com' , so make sure that you are pointing correctly at the LDAP 
connection user.

-- 
-- 
Steven

May you have the peace and freedom that come from abandoning all hope of having a better past.
---    -      ---  - - -       -    -     -   -   --  - - - --- - ------   - - --- - - -- -  -    - --   -   -    -
"Hamad Al-Gharabally"  wrote in message news:1134476413.7929.60.camel@localhost.localdomain...
...
Ok I think the LDAP users are not being synced with the local db
(mysql).
I used the following command:
bin/otrs.addUser -f "Hamad" -l "Al-Gharabally" -p"mypass" -e
"hgharabally@auk.edu.kw" -g users hgharabally
If I disable my account on the domain controller, I can no longer login:
Dec 13 15:16:58 localhost OTRS-CGI-02[8167]:
[Notice][Kernel::System::Auth::LDAP::Auth] User: hgharabally (CN=Hamad
B. Al-Gharabally,OU=Staff,DC=auk,DC=edu,DC=kw) authentication failed:
'80090308: LdapErr: DSID-0C09030B, comment: AcceptSecurityContext error,
data 533, v893
If I enable my account, I manage to login just find:
Dec 13 15:17:20 localhost OTRS-CGI-02[8183]:
[Notice][Kernel::System::Auth::LDAP::Auth] User: hgharabally (CN=Hamad
B. Al-Gharabally,OU=Staff,DC=auk,DC=edu,DC=kw) authentication ok
(REMOTE_ADDR: 10.1.69.88).
So I guess the question is how can I sync LDAP to my DB?
On Tue, 2005-12-13 at 14:35 +0300, Hamad Al-Gharabally wrote:
...
I've just double checked that all the required perl modules are
installed. And they seem to be.
Im lost. And dont know what to do from here on.
On Mon, 2005-12-12 at 16:03 +0300, Hamad Al-Gharabally wrote:
...
Ok Ive looked at your configuration file, and compared it to mine. I've
attached my configuration as well. Ive also read a lot of emails in the
archives, still I cant seem to see my mistake.
I have 2 problems:
----------------------------------------------------------------------------
When I login to the agent front end, the webpage displays the following
error: Panic! No UserData!!!
Upon checking Syslog:
Dec 12 15:56:53 localhost OTRS-CGI-02[5017]:
[Notice][Kernel::System::Auth::LDAP::Auth] User: hgharabally (CN=Hamad
B. Al-Gharabally,OU=Staff,DC=auk,DC=edu,DC=kw) authentication ok
(REMOTE_ADDR: 10.1.69.88).
Dec 12 15:56:53 localhost OTRS-CGI-02[5017]:
[Notice][Kernel::System::User::GetUserData] Panic! No UserData for user:
'hgharabally'!!!
----------------------------------------------------------------------------
When I log into the client front end:
Dec 12 16:00:32 localhost OTRS-CGI-02[5120]:
[Notice][Kernel::System::CustomerAuth::LDAP::Auth] CustomerUser:
test_customer authentification failed, no LDAP entry found!
BaseDN='dc=auk,dc=edu,dc=kw', Filter='(sAMAccountName=test_customer)',
(REMOTE_ADDR: 10.1.69.88).
------------------------------------------------------------------------------
Now Im wondering where did I go wrong?
(I want both the agents, and customers to authenticate against AD)
Best Regards,
 Hamad Al-Gharabally
On Mon, 2005-12-12 at 06:25 -0500, Steven wrote:
...
mine is attached.
It has redundant LDAP servers, DLAP login for agents and LDAP login and info
for customers.
It still uses the OTRS database for agents (to set permissions, etc.), so
you have to make an account for each one in OTRS (same name as AD login
name), it only uses the LDAP for the login.
The list at the bottom is the customer data I am pulling out of AD; You may
want more or less items there.
-- 
-- 
Steven
May you have the peace and freedom that come from abandoning all hope of
having a better past.
---    -      ---  - - -       -    -     -   -   --  - - - --- - ------   -
 - --- - - -- -  -    - --   -   -    -
"Hamad Al-Gharabally"  wrote in message
news:1134317517.7929.28.camel@localhost.localdomain...
...
Hello,
I would like to use OTRS 2.0.4 (on debian) for the tech support dept,
however I dont know much about LDAP or Active Directory for that matter.
Could someone paste a "real" working example config which would allow
agents and/or customers to log in? (Using the accounts in the Active
Directory)
Ive taken a look at the Documentation but when it comes to dn cn etc..
it seems a bit intimidating. A case example would be.
Were running win2000 domain controllers.
each named: dc1.auk.edu.kw & dc2.auk.edu.kw
Underneath that I have the following Ou's:
+ AUK Students
+ Staff
+ Facutly
Now the customers in this case would be the Students & Faculty & Staff
The agents would be in the Staff ou as well. (I might forsee a problem
here)
Do I need to ask our AD admin to move the agents into a separate OU ?
Best Regards,
Hamad Al-Gharabally
_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support oder Consulting fr Ihr OTRS System?
=> http://www.otrs.de/
begin 666 LDAP-Ref-For-Config.pm
M"@H@("!M>2! ;7ED;VUA:6YH;W-T61O;6%I;BYC;VTG*3L*"B @)%-E;&8M/GLG075T:$UO9'5L
M92=](#T@)TMER=!=71H36]D=6QE.CI,1$%0.CI(;W-T)WT@/2!<0&UY9&]M86EN:&]S
M=',[( H@(" D4V5L9BT^>R=!=71H36]D=6QE.CI,1$%0.CI"87-E1$XG?2 ]
M("=D8SUM>61O;6%I;BQD8SUC;VTG.PH@(" D4V5L9BT^>R=!=71H36]D=6QE
M.CI,1$%0.CI5240G?2 ]("=S04U!8V-O=6YT3F%M92<["B @)%-E;&8M/GLG
M075T:$UO9'5L93HZ3$1!4#HZ4V5A7-T96TZ.D-UR=#=7-T;VUE61O;6%I;FAOR=#=7-T;VUER=#=7-T;VUE61O;6%I;BQD8SUC;VTG.PHD4V5L9BT^>R=#=7-T
M;VUE7-T96TZ.D-UPH@(" @("!(;W-T(#T^(%Q ;7ED
M;VUA:6YH;W-T61O;6%I;BQD8SUC
M;VTG+ H@(" @("!34T-/4$4@/3X@)W-U8B7!E"B,@(" @(" @6R G57-E'1E;"27-I8V%L1&5L:79E
M
_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support oder Consulting fr Ihr OTRS System?
=> http://www.otrs.de/

OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support oder Consulting fr Ihr OTRS System?
=> http://www.otrs.de/
_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support oder Consulting fr Ihr OTRS System?
=> http://www.otrs.de/
_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support oder Consulting für Ihr OTRS System?
=> http://www.otrs.de/