Sajit,
I guess there is no public access on the tree you are trying to read
from. You should consult your AD administrator to work this out.
You can use the following lines if you need to set up a service
account or so to read from AD:
# The following is valid but would only be necessary if the
# anonymous user do NOT have permission to read from the LDAP tree
$Self->{'AuthModule::LDAP::SearchUserDN'} = '';
$Self->{'AuthModule::LDAP::SearchUserPw'} = '';
As to the Agent Sync process; you should first set up an agent account
in OTRS before they can log in. After authentication certain
attributes can be copied from AD if you'd like to (the Agent Sync
process).
Only for Customer Users with AD it is true that you would not need to
add those to OTRS manually before they can log in.
Regards,
--
Michiel Beijen
Software Consultant
+31 6 - 457 42 418
Bee Free IT + http://beefreeit.nl
2008/12/19 Sajit Kalidas
Hi,
Please assist – I am trying to integrate into AD. Firstly, can someone verify that I have the correct understanding of the process:
- Created a user sajitk in OTRS – this is the same name as my AD account but the passwords are different.
- Am I correct in assuming that I do not need to manually create all the users in OTRS and that they will be created when they logon for the first time (agent sync process)?
I have placed the following code into the config.pm file
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = 'devimon';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=rewards,dc=co,dc=za';
$Self->{'AuthModule::LDAP::UID'} = 'name';
$Self->{'AuthModule::LDAP::Charset'} = 'iso-8859-1';
$Self->{'AuthModule::LDAP::Params'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};
$Self->{UserSyncLDAPMap} = {
DB -> LDAP
UserFirstname => 'givenName',
UserLastname => 'sn',
UserEmail => 'mail',
};
I am getting the following error in the log file:
User: sajitk (DC=sajitk,DC=rewards.co.za,CN=MicrosoftDNS,CN=System,DC=rewards,DC=co,DC=za) authentication failed: '80090308: LdapErr: DSID-0C09030B, comment: AcceptSecurityContext error, data 525, v893
It appears to me that the user is being recognized in AD but it is not being authenticated. I am using the correct credentials.
Please help – this is getting very frustrating.
Thanks
Sajit
________________________________ This e-mail message has been scanned for Viruses and Content and cleared by MailMarshal ________________________________ _______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs