
I have active directory authentication working with the exception of the GroupDN for the admin interface. When I comment out the GroupDN and the UserAttr lines everything works fine again. We are running Windows Server 2003 on our DCs if that matters. $Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP'; $Self->{'AuthModule::LDAP::Host'} = 'dc1.example.org'; $Self->{'AuthModule::LDAP::BaseDN'} = 'OU=users,dc=example,dc=org'; $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName'; $Self->{'AuthModule::LDAP::SearchUserDN'} = 'CN=LDAP\\, Linux,OU=Service Accounts,DC=example,DC=org'; $Self->{'AuthModule::LDAP::SearchUserPw'} = 'password'; $Self->{'AuthModule::LDAP::GroupDN'} = 'CN=otrs,OU=users,DC=example,DC=org'; $Self->{'AuthModule::LDAP::UserAttr'} = 'DN'; $Self->{UserSyncLDAPMap} = { #DB -> LDAP Firstname => 'givenName', Lastname => 'sn', Email => 'mail', }; Also while I'm asking can I put multiple DCs in under host for failover? IE can I do something like: $Self->{'AuthModule::LDAP::Host'} = 'dc1.example.org;dc2.example.org'; and will OTRS use dc2 if dc1 is down? Thanks, Jason R. Benedick Workstation Technician Thaddeus Stevens College of Technology