Re: [otrs] Active Directory integration

18 Apr 2006

      Hi Guillaume ,

I think there is mention of this little 'problem' in the manual , and it 
states that (unfortunately) only in the 1.3 manual :

http://doc.otrs.org/1.3/en/html/ldap-integration.html#LDAP-INTEGRATION-AD-PR...

So I would suggest going back to the local DB , create a user give 
him/her admin rights and then start with AD integration.

HTH
Daniel

Guillaume Rehm wrote:
...
Hi again,
All works fine now. My test users accounts don't have mail in there 
users settings !!! Is that why.
But now, I can't login into root (admin otrs). Anyone have an idea ?
When I log into root, OTRS search into Active Directory a root user.
How can I say: users=Active Directory and Admin=local DB ?
How can I say: this Active Directory users is admin of otrs ?
Thanks in advance
Guillaume REHM
Service Informatique
Bibliothèque Nationale et Universitaire de Strasbourg
5 rue du Maréchal Joffre
BP 51029
67070 Strasbourg
tél: 03 88 25 28 43
fax: 03 88 25 28 03
mail: guillaume.rehm@bnu.fr
web: http://www.bnu.fr
Guillaume Rehm a écrit :
...
hi,
This is my Config.pm file:
# ---------------------------------------------------- #
    # INTEGRATION ACTIVE DIRECTORY
        # ---------------------------------------------------- #
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
        $Self->{'AuthModule::LDAP::Host'} = 'hostxx';
    $Self->{'AuthModule::LDAP::BaseDN'} = 
'ou=Pro,dc=exploitation,dc=local';
        $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
    $Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=Guillaume 
Rehm,ou=Pro,dc=exploitation,dc=local';
        $Self->{'AuthModule::LDAP::SearchUserPw'} = 'xxx';
$Self->{'Customer::AuthModule'} = 
'Kernel::System::CustomerAuth::LDAP';
        $Self->{'Customer::AuthModule::LDAP::Host'} = 'hostxx';
    $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 
'ou=Pro,dc=exploitation,dc=local';
        $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
    $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 
'cn=Guillaume Rehm,ou=Pro,dc=exploitation,dc=local';
        $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'xxx';
$Self->{CustomerUser} = {
        Module => 'Kernel::System::CustomerUser::LDAP',
    Params => {
        Host => 'hostxx',
    BaseDN => 'ou=Pro,dc=exploitation,dc=local',
        SSCOPE => 'sub',
    UserDN => 'cn=Guillaume Rehm,ou=Pro,dc=exploitation,dc=local',
        UserPw => 'xxx',
    },
        CustomerKey => 'sAMAccountName',
    CustomerID => 'mail',
        CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
    CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
        CustomerUserPostMasterSearchFields => 'mail',
    CustomerUserNameFields => ['givenname', 'sn'],
        Map => [
    # note: Login, Email and CustomerID needed!
        # var, frontend, storage, shown, required, storage-type
    #       [ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
                [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 
'var' ],
            [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
                [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
            [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
                [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
    #       [ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
        #       [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 
'var' ],
    #       [ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
          ],
      };
Thanks in advance
Guillaume REHM
Service Informatique
Bibliothèque Nationale et Universitaire de Strasbourg
5 rue du Maréchal Joffre
BP 51029
67070 Strasbourg
tél: 03 88 25 28 43
fax: 03 88 25 28 03
mail: guillaume.rehm@bnu.fr
web: http://www.bnu.fr
Isaac Gonzalez a écrit :
...
What have you specified as your mappings....
The following work fine for me:
CustomerKey => 'sAMAccountName',
        CustomerID => '[customer_id]',
        CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
        CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
        CustomerUserPostMasterSearchFields => ['mail'],
        CustomerUserNameFields => ['givenname', 'sn'],
        Map => [
          # note: Login, Email and CustomerID needed!
          # var, frontend, storage, shown, required, storage-type
          # [ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
          [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
          [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
          [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
          [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
          [ 'UserCustomerID', 'CustomerID', 'company', 0, 1, 'var' ],
        #       [ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 
'var' ],
        #       [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 
'var' ],
        #       [ 'UserComment', 'Comment', 'description', 1, 0, 
'var' ],
        ],
    };
Possibly send your config
Isaac Gonzalez
Systems Administrator
AutoReturn
Phone: (415)575-2359
Fax: (415)575-2379
-----Original Message-----
From: otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf 
Of Guillaume Rehm
Sent: Thursday, April 13, 2006 3:06 AM
To: otrs@otrs.org
Subject: [otrs] Active Directory integration
Hi all,
I integrate Active Directory into OTRS. I can log in OTRS with the 
account specified to search in active directory. But all others 
account can't be activated by OTRS.
Moreover, root@localhost (local root account) can't log in now.
Anyone have an idea ?
Thanks in advance