[otrs] Active Directory Authentication

5 Aug 2009

      Hello,

I just installed OTRS 2.4.2-01 on Fedora 10.

I have successfully enabled Agent authentication with Active Directory
via LDAP module on otrs. Users' LDAP backend seems to be working too, as
I can search for users in otrs and otrs finds them from Active
Directory. However, User authentication with AD does not work.

The following comes up on the logs when a user tries to login:

[Error][Kernel::System::User::UserLookup][Line:680]: No UserID found for
'jsmith'!

Capturing traffic while a user login shows otrs makes a successful bind
to AD, but then no query is executed. It just unbind.

Here is the Users LDAP backend configuration on Config.pm

    ########################################
    # Customer Info from LDAP:
    ########################################
    $Self->{CustomerUser} = {
    Name => 'Active Directory',
    Module => 'Kernel::System::CustomerUser::LDAP',
    Params => {
      Host => 'dc.domain.net',
      BaseDN => 'dc=domain,dc=net',
      SSCOPE => 'sub',
      UserDN => 'adbrowse',
      UserPw => 'mypassword',
    },
    CustomerKey => 'sAMAccountName',
    CustomerID => 'mail',
    CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
    CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
    CustomerUserSearchPrefix => '',
    CustomerUserSearchSuffix => '*',
    CustomerUserSearchListLimit => 250,
    CustomerUserPostMasterSearchFields => ['mail'],
    CustomerUserNameFields => ['givenname', 'sn'],
    Map => [
      # note: Login, Email and CustomerID needed!
      # var, frontend, storage, shown, required, storage-type
      # [ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
      [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
      [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
      [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
      [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
      [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
      # [ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
      # [ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ],
      # [ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
     ],
    };

    ########################################
    # Customer Authentication against LDAP #
    ########################################

    $Self->{'Customer::AuthModule'} =
'Kernel::System::CustomerAuth::LDAP';
    $Self->{'Customer::AuthModule::LDAP::Host'} = 'dc.domain.net';
    $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'dc=domain, dc=net';
    $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
    $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'adbrowse';
    $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'mypassword';
    $Self->{'Customer::AuthModule::LDAP::AlwaysFilter'} = '';
    $Self->{'Customer::AuthModule::LDAP::GroupDN'} = 'CN=All
Staff,CN=Users,DC=domain,DC=net';
    $Self->{'Customer::AuthModule::LDAP::AccessAttr'} = 'member';
    $Self->{'Customer::AuthModule::LDAP::UserAttr'} = 'DN';

    $Self->{'Customer::AuthModule::LDAP::Params'} = {
                port => 3268,
                timeout => 120,
                async => 0,
                #version => 3,
           };

I don't know what I am missing... Do I need somehow to create users in
otrs database first? I tried by enabling Database and LDAP bases both,
then going to the users webpage and trying creating one user on the
database, but when I try to create a user on the Database it says "User
already exist".

Please help!!

Guillermo Vargas-Dellacasa
Computer Operations Manager
North Hunterdon-Voorhees Regional High School District
gvargas-dellacasa@nhvweb.net

[otrs] Active Directory Authentication

Guillermo Vargas-DellaCasa