Hello every one. I completely stuck with multiple agent backend. =/<div><br></div><div>We have two different departments in one domain:    <a href="http://DOMAIN.RU">DOMAIN.RU</a></div><div>All agents of our domain members of: otrs_allow_agent  (CN=otrs_allow_Agent, OU=IT, OU=City1, DC=domain, DC=ru)</div>
<div>Agents from 1st department located in: OU=Users, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div><div>Agents from 2st department located in: OU=Users, OU=IT, OU=City2, DC=domain, DC=ru&#39;;</div><div>User for reading data from AD: CN=otrs, OU=Users, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div>
<div>With password &quot;anypassword&quot;</div><div>This user have permission to read both OU in our domain</div><div>Here is part of my <a href="http://config.pm">config.pm</a></div><div>########### LDAP Agent Backend   1 ###########</div>
<div><div>    $Self-&gt;{&#39;AuthModule1&#39;} = &#39;Kernel::System::Auth::LDAP&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::Host1&#39;} = &#39;<a href="http://dc.domain.ru">dc.domain.ru</a>&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::BaseDN1&#39;} = &#39;OU=Users, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div>
<div>    $Self-&gt;{&#39;AuthModule::LDAP::UID1&#39;} = &#39;sAMAccountName&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::GroupDN1&#39;} = &#39;CN=otrs_allow_Agent, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div><div>
    $Self-&gt;{&#39;AuthModule::LDAP::AccessAttr1&#39;} = &#39;member&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::SearchUserDN1&#39;} = &#39;CN=otrs, OU=Users, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::SearchUserPw1&#39;} = &#39;anypassword&#39;;</div>
<div><br></div><div>########### LDAP Agent Backend   2 ###########</div><div><br></div><div>    $Self-&gt;{&#39;AuthModule2&#39;} = &#39;Kernel::System::Auth::LDAP&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::Host2&#39;} = &#39;<a href="http://dc.domain.ru">dc.domain.ru</a>&#39;;</div>
<div>    $Self-&gt;{&#39;AuthModule::LDAP::BaseDN2&#39;} = &#39;OU=Users, OU=IT, OU=City2, DC=domain, DC=ru&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::UID2&#39;} = &#39;sAMAccountName&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::GroupDN2&#39;} = &#39;CN=otrs_allow_Agent, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div>
<div>    $Self-&gt;{&#39;AuthModule::LDAP::SearchUserDN2&#39;} = &#39;CN=otrs, OU=Users, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div><div>    $Self-&gt;{&#39;AuthModule::LDAP::SearchUserPw2&#39;} = &#39;anypassword&#39;;</div>
<div><br></div><div><br></div><div><br></div><div>#         Sync DB                      #</div><div><br></div><div>     $Self-&gt;{&#39;AuthSyncModule1&#39;} = &#39;Kernel::System::Auth::Sync::LDAP&#39;;</div><div>     $Self-&gt;{&#39;AuthSyncModule::LDAP::Host1&#39;} = &#39;<a href="http://dc.domain.ru">dc.domain.ru</a>&#39;;</div>
<div>     $Self-&gt;{&#39;AuthSyncModule::LDAP::BaseDN1&#39;} = &#39;OU=Users, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div><div>     $Self-&gt;{&#39;AuthSyncModule::LDAP::UID1&#39;} = &#39;sAMAccountName&#39;;</div><div>
     $Self-&gt;{&#39;AuthSyncModule::LDAP::SearchUserDN1&#39;} = &#39;CN=otrs_allow_Agent, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div><div>     $Self-&gt;{&#39;AuthSyncModule::LDAP::SearchUserPw1&#39;} = &#39;anypassword&#39;;</div>
<div><br></div><div> </div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::UserSyncMap1&#39;} = {</div><div>        # DB -&gt; LDAP</div><div>        UserFirstname =&gt; &#39;givenName&#39;,</div><div>        UserLastname  =&gt; &#39;sn&#39;,</div>
<div>        UserEmail     =&gt; &#39;mail&#39;,</div><div>    };</div><div><br></div><div><br></div><div>    $Self-&gt;{&#39;AuthSyncModule2&#39;} = &#39;Kernel::System::Auth::Sync::LDAP&#39;;</div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::Host2&#39;} = &#39;<a href="http://dc.domain.ru">dc.domain.ru</a>&#39;;</div>
<div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::BaseDN2&#39;} = &#39;OU=Users, OU=IT, OU=City2, DC=domain, DC=ru&#39;;</div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::UID2&#39;} = &#39;sAMAccountName&#39;;</div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::SearchUserDN2&#39;} = &#39;CN=otrs_allow_Agent, OU=IT, OU=City1, DC=domain, DC=ru&#39;;</div>
<div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::SearchUserPw2&#39;} = &#39;anypassword&#39;;</div><div>    $Self-&gt;{&#39;AuthSyncModule::LDAP::UserSyncMap2&#39;} = {</div><div>        # DB -&gt; LDAP</div><div>        UserFirstname =&gt; &#39;givenName&#39;,</div>
<div>        UserLastname  =&gt; &#39;sn&#39;,</div><div>        UserEmail     =&gt; &#39;mail&#39;,</div><div>    };</div><div><br></div>
<div>And now:</div></div><div>Users from both OU Authenticating in LDAP successfully!</div><div>Users from OU=Users, OU=IT, OU=City1, DC=domain, DC=ru </div><div>Successfully syncing and can login to OTRS system.</div><div>
<br></div><div>Users from OU=Users, OU=IT, OU=City2, DC=domain, DC=ru</div><div>getting error message: <span class="Apple-style-span" style="color: rgb(255, 0, 0); ">Panic, user authenticated but no user data can be found in OTRS DB!! Perhaps the user is invalid.</span></div>
<div><span class="Apple-style-span" style="color: rgb(255, 0, 0); "><br></span></div><div>Here is message from log file, with my comments, after user Login attempt:</div><div><div><br></div><div>Its OK. AuthModule1 trying to find User in wrong OU</div>
<div>MY-OTRS OTRS-CGI-10[1353]: [Notice][Kernel::System::Auth::LDAP::Auth] User: Admin2 authentication failed, no LDAP entry found!BaseDN=&#39;OU=Users, OU=IT, OU=City1, DC=domain, DC=ru&#39;, Filter=&#39;(sAMAccountName=Admin2)&#39;, (REMOTE_ADDR: x.x.x.x).</div>
<div><br></div><div>Its OK. AuthModule2 trying to find User correct OU. Authentication ok</div><div>MY-OTRS OTRS-CGI-10[1353]: [Notice][Kernel::System::Auth::LDAP::Auth] User: Admin2 (CN=Admin2,OU=Users, OU=IT, OU=City2, DC=domain, DC=ru&#39;) authentication ok (REMOTE_ADDR: x.x.x.x).</div>
<div><br></div><div>Hm...AuthSyncModule1 trying to Sync user, but its wrong OU</div><div>MY-OTRS OTRS-CGI-10[1353]: [Notice][Kernel::System::Auth::Sync::LDAP::Sync] User: Admin2 sync failed, no LDAP entry found!BaseDN=&#39;OU=Users, OU=IT, OU=City1, DC=domain, DC=ru&#39;&#39;, Filter=&#39;(sAMAccountName=Admin2)&#39;, (REMOTE_ADDR: x.x.x.x).</div>
<div><br></div><div>And F@#KING V&#39;oila!!!! Where is the second attempt to sync user???? With AuthSyncModule2</div><div>I&#39;m just getting this:</div><div>MY-OTRS OTRS-CGI-10[1353]: [Notice][Kernel::System::User::GetUserData] Panic! No UserData for user: Admin2&#39;!!!</div>
<div>MY-OTRS OTRS-CGI-10[1353]: [Notice][Kernel::System::User::GetUserData] Panic! No UserData for user: &#39;Admin2&#39;!!!</div></div><div><br></div><div>What wrong with me?</div><div>T_T Any suggestions? Or Config.pm examples with multiple LDAP Auth and Sync.</div>
<div><span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 19px; line-height: 25px; ">I am in despair.</span></div><div><span class="Apple-style-span" style="color: rgb(255, 0, 0); "><br></span></div>
<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div>