[otrs] LDAP tls authentication Fun

5 Aug 2009

      I am trying to have otrs to have some of my agents defined in ldap. So, 
I set  /etc/otrs/Kernel/Config.pm as follows:

     # Authenticate agents against LDAP backend
     $Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
     $Self->{'AuthModule::LDAP::Host'} = 'ldap-pserver.internal.domain.com';
     $Self->{'AuthModule::LDAP::BaseDN'} = 'dc=domain,dc=com';
     $Self->{'AuthModule::LDAP::UID'} = 'uid';
     $Self->{'AuthModule::LDAP::GroupDN'} = 
'cn=users,ou=Groups,dc=domain,dc=com';
     $Self->{'AuthModule::LDAP::AccessAttr'} = 'memberUid';
     $Self->{'AuthModule::LDAP::UserAttr'} = 'UID';
     $Self->{'AuthModule::LDAP::Params'} = {
              port => 389,
              timeout => 120,
              verify => 'require',
              cafile => '/etc/ssl/certs/root.pem',
              # async => 0,
              version => 3,
         };

When I try to login, either as a previously defined (in its database, 
and that includes root) otrs user or as one of the ldap users, it seems 
to be looking for them in ldap:

ERROR: OTRS-CGI-10 Perl: 5.10.0 OS: linux Time: Wed Aug  5 12:09:54 2009

  Message: First bind failed! TLS confidentiality required

  Traceback (32329):
    Module: Kernel::System::Auth::LDAP::Auth (v1.46) Line: 191
    Module: Kernel::System::Auth::Auth (v1.29) Line: 121
    Module: Kernel::System::Web::InterfaceAgent::Run (v1.34) Line: 192
    Module: /usr/share/otrs/bin/cgi-bin/index.pl (v1.87) Line: 47

What should I tell otrs to look for users in its own database there and 
then for ldap users, well, in ldap? And, what would this "TLS 
confidentiality required" error be trying to tell me?

[otrs] LDAP tls authentication Fun

Mauricio Tavares