
It WORKS!
I did read more about ldap and downloaded the windows xp systems tools so I
can toy with adsi edit , and eventually i figured things out
The lines I totally got wrong were
$Self->{'AuthModule::LDAP::BaseDN'} = 'cn=servername01, ou=ou_l1,
ou=sub_ou, dc=somethingdomain, dc=somethingelse, dc=com';
I previously entered the DN for the Active Directory server, and you should
enter the DN for the branch that contain the Users DN(s)
and
I also had this line wrong
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'somethingdomain\name';
I previously entered the user name just as i entered it in the windows login
screen, and you should enter the DN for the user instead (just as the param
name implies :$)
I do recommend everyone interested in using AD with OTRS to down asdi edit
to figure out the DN for everything on his corporate AD, if you work for a
big company the tree can be huge and you might find it hard to find what you
want asdi edit does not have a search capability, sou you might need your
sys admin help to tip you on which branches contain the users etc ....
On 2/11/08, Ali M.
Well, yes, sorry but I can't see what you are pointing at. I entered in my config.pm file the exact lines everyone said it worked for them, just to repeat here they are
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP'; $Self->{'AuthModule::LDAP::Host'} = 'servername01'; $Self->{'AuthModule::LDAP::BaseDN'} = 'cn=servername01, ou=ou_l1, ou=sub_ou, dc=somethingdomain, dc=somethingelse, dc=com'; $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName'; #what is this for anyway!!! $Self->{'AuthModule::LDAP::SearchUserDN'} = 'somethingdomain\name'; #notice that somethingdomain is the same as the first dc in thebasedn $Self->{'AuthModule::LDAP::SearchUserPw'} = 'nontrivialpassword'
And OTRS do seem to notice them! since its removed the how-to get a new password pard from the index page.
My best guess is that I am sending or have entered wrong values in those parameters, my problem is OTRS doesn't confirm this! For example for the parameter
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'something'
i tried it with domain\usrname and with the username only, but OTRS doesn't seem to indicate to me which one is wrong and which is right!
note that i did create two users inside otrs one with the domain\ as part of the name and another without it
my best bet now is to learn more about Perl ldap support, and try to write my own ldap perl script to just be sure about the correct parameter values for the parameters in config.pm
On 2/8/08, Shawn Beasley
wrote: Hi,
did you see this post?
Lars Jørgensen schrieb:
Hi.
We use LDAP for the majority of customers and a local OTRS DB for a few customers not in AD.
I would like the non-AD users to be able to log in to OTRS and view their tickets. Is it possible to define multiple Customer::AuthModules in Config.pm http://config.pm/? I tried to postfix them with numbers, like $Self{'Customer::AuthModule1'} but that didn't work at all.
If I define multiple $Self{'Customer::AuthModule'} statements, only the last one works. Predictably.
Try this:
http://faq.otrs.org/otrs/public.pl?Action=PublicFAQ&ItemID=219
-- Shawn Beasley ((otrs)) :: OTRS AG :: Norsk-Data-Straße 1 :: 61352 Bad Homburg Fon: +49 (0) 9421 56818 0 :: Fax: +49 (0) 9421 56818 18 http://www.otrs.com/ :: Communication with success!
Geschäftssitz: Bad Homburg Amtsgericht Bad Homburg, HRB 10751 Steuernummer: 003/240/97521
Aufsichtsratsvorsitzender: Burchard Steinbild Vorstandsvorsitzender: André Mindermann
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHovjZXdEh7jEdzBsRAimjAKDEXgr8/eP6wdZaEuKTNca5TzY3ngCgpByF L9GagXICwj3sIqPhcNK+9hs= =KawJ -----END PGP SIGNATURE-----
_______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
_______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/