RE: [otrs] LDAP Auth

13 Apr 2005

      Hi,
...
I am new to RT -
You are on the OTRS Mailingslist. RT has nothing to do with OTRS...
...
Just installed 1.3.2 from source,
This seems you are on the way to install OTRS...
...
and I would like to setup LDAP auth to Active Directory. After 
reading the many examples out there I have made it to a point 
where when a user hits the customer.pl and puts in their 
Active Directory username and password you see a message in 
the logs that the auth was successful - but the web page 
shows Panic! No UserData!!!
OK, there is something wrong in your /opt/otrs/Kernel/Config.pm.
Please read:
http://doc.otrs.org/1.3/en/html/ldap-integration.html#LDAP-INTEGRATION-AD
...
I assume this is because RT wants that users information in 
it's own database, hence the overlay to 
http://wiki.bestpractical.com/index.cgi?AutoCreateFromExternalUserInfo
AutoCreate -
My problem is I believe in installing this overlay - the 
documentation refers to a couple of items that do not seem to 
exist - such as RTSiteConfig.pm which does not exist
Right, these are RT File...
...
- so I was using Config.pm - or the 'lib' directory where you are 
supposed to put files - I have just been placing them in 
Kernel/System -
To get the auth and user creation to work - I copied the 
User_Local.pm and CurrentUser_Local.pm into System - So far 
the auth piece works but the user creation does not - No 
errors are reported in the logs .....
Please don't mix up RT and OTRS Files...
...
Added the following lines to Config.pm
# This is an example configuration for an LDAP auth. backend.
    # (take care that Net::LDAP is installed!)
    $Self->{'Customer::AuthModule'} =
'Kernel::System::CustomerAuth::LDAP';
    $Self->{'Customer::AuthModule::LDAP::Host'} = '172.17.17.110';
    $Self->{'Customer::AuthModule::LDAP::BaseDN'} =
'dc=corp,dc=phillips,dc=com';
    $Self->{'Customer::AuthModule::LDAP::UID'} = 'SamAccountName';
This is only a part of the needed Config...
...
$LDAPExternalAuth = 1;
 $LdapServer="172.17.17.110";
 $LdapUser="cn=administrator,cn=Users,dc=corp,dc=phillips,dc=com";
 $LdapPass="ourpass";
 $LdapBase="dc=corp,dc=phillips,dc=com";
 $LdapUidAttr="sAMAccountName";
 $LdapFilter="(objectclass=*)";
 $LdapTLS = 0;
 $LdapGroup ="cn=Domain Users,ou=Users,dc=corp,dc=phillips,dc=com";
 $LdapGroupAttribute = 'uniqueMember';
 $LdapSSLVersion = 2;
      $LdapNameAttr = "cn";
      $LdapMailAttr = "mail";
      $AutoCreateFromExternalUserInfo = 1;
This is RT...

Again, please don't mix two different products such as RT and OTRS. You
should know on which piece of software you are working on...

Regards,

    Markus Ruecker

--

((otrs.de)) :: OTRS GmbH :: Norsk-Data-Str. 1 :: 61352 Bad Homburg

http://www.otrs.de/ :: Manage your communication!