Hi, all.

 I have set up OTRS with LDAP authentication, but LDAP auth not work.

I cannot understand why LDAP auth not work.

I create in MS AD User and group, user otrs I give rights Windows Authorization Access Group.

I have error in  /var/log/user.log

Dec 22 16:05:19 asterisk OTRS-CGI-10[12842]: [Error][Kernel::System::CustomerAuth::LDAP::Auth][Line:189]: Search failed! Bad filter

It’s  my file ZZZAuto.pm

cat /usr/share/otrs/Kernel/Config/Files/ZZZAuto.pm

$Self->{'SecureMode'} =  1;

$Self->{'FQDN'} =  '172.16.0.5';

$Self->{'AdminEmail'} =  'support@domain.ru';

$Self->{'Organization'} =  'Domain';

$Self->{'UserSyncLDAPMap'} =  {

 'UserEmail' => 'mail',

  'UserFirstname' => 'givenName',

  'UserLastname' => 'sn'

};

$Self->{'UserSyncLDAPGroups'} =  [

  'hd'

];

$Self->{'PreferencesGroups'}->{'SpellDict'} =  {

  'Prio' => '5000',

  'Label' => 'Spelling Dictionary',

  'PrefKey' => 'UserSpellDict',

  'Module' => 'Kernel::Output::HTML::PreferencesGeneric',

  'Desc' => 'Select your default spelling dictionary.',

  'Data' => {

    'russian' => 'Russian',

    'english' => 'English'

  },

  'Colum' => 'Other Options',

  'Activ' => '1'

};

$Self->{'Customer::AuthModule'} =  'Kernel::System::CustomerAuth::LDAP';

$Self->{'Customer::AuthModule::LDAP::Host'} =  '172.16.0.50';

$Self->{'Customer::AuthModule::LDAP::BaseDN'} =  'dc=domain,dc=local';

$Self->{'Customer::AuthModule::LDAP::UID'} =  'sAMAccountName';

$Self->{'Customer::AuthModule::LDAP::GroupDN'} =  'cn=hd,ou=hd,dc=domain,dc=local';

$Self->{'Customer::AuthModule::LDAP::AccessAttr'} =  'memberUid';

$Self->{'Customer::AuthModule::LDAP::UserAttr'} =  'UID';

$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} =  'cn=otrs,ou=hd,dc=domain,dc=local';

$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} =  'qwerty123';

$Self->{'Customer::AuthModule::LDAP::AlwaysFilter'} =  '(!objectclass=computer)';

$Self->{'Customer::AuthModule::LDAP::UserSuffix'} =  '@domain.local';

$Self->{'Customer::AuthModule::LDAP::Params'} =  {

  'async' => '0',

  'timeout' => '120',

  'version' => '3',

  'port' => '389'

};

$Self->{'1'} = 1;

Sorry, my english J

Andrew