Query Active Directory via Root domain server
I have an Active Directory Domain that has a root domaincontroller with two sub domain servers. I can point to either of the subdomains and authenticate to any account under the specific DC I select. HoweverI would like to be able to point to the root domain controller and be able toauthenticate to either. My configuration I’m trying to use is below. $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP'; $Self->{'Customer::AuthModule::LDAP::Host'} = 'dcroot.example.com'; $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'DC=example,DC=com'; $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName'; $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'CN=otrs,OU=Support,DC=dc,DC=example,DC=com'; $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} =’otrs4me’; Brett --------------------------------- Everyone is raving about the all-new Yahoo! Mail beta.
Brett Simpson wrote:
I have an Active Directory Domain that has a root domain controller with two sub domain servers. I can point to either of the sub domains and authenticate to any account under the specific DC I select. However I would like to be able to point to the root domain controller and be able to authenticate to either. My configuration I’m trying to use is below.
What you want to do is enable the "Global Catalog" in Active Directory, which represents a combined read only summary of both servers, and point OTRS at the global catalog server. The global catalog server runs on a high port, and is a separate LDAP server from the one running on port 389. Google for details. Regards, Graham --
participants (2)
-
Brett Simpson -
Graham Leggett