Thank you Erling,
How could I insert automatically email and name from AD to OTRS database
?
------------------------------------------
The user needs to be in the OTRS user database. It is important that the
username in OTRS match the user in the AD.
It will then authenticate with the username and password from the AD and
not the OTRS but use the userinformation from OTRS. ( Email, name,
groups e.t.c. )
----- Original Message -----
From: "Arnault Tovar"
To: otrs at otrs.org
Sent: Tuesday, April 6, 2010 1:51:42 PM
Subject: [otrs] SSO with Kernel::System::CustomerAuth::HTTPBasicAuth
display Panic! No UserData!!! Error
Hi everyone,
I try to configure my OTRS customer interface with SSO Active Directory
over Apache.
My Apache authentification works with the sspi module and it looks
great.
My config.pm works fine with LDAP configuration with this configuration:
$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = 'svr.xx.yy.com';
$Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'dc=xx,dc=yy,dc=com';
$Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'CN=Helpdesk,
OU=yy,DC=xx,DC=yy,DC=com';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'Glpi84@';
$Self->{'Customer::AuthModule::LDAP::Params'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};
$Self->{CustomerUser} = {
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => 'svr.xx.yy.com',
BaseDN => 'OU=yy,DC=xx,DC=yy,DC=com',
SSCOPE => 'sub',
UserDN =>'CN=Helpdesk,OU=yy,DC=xx,DC=yy,DC=com',
UserPw => 'Glpi84@',
#SourceCharset => 'iso-8859-1',
#DestCharset => 'utf-8',
},
# customer unique id
CustomerKey => 'sAMAccountName',
# customer #
CustomerID => 'sAMAccountName',
#CustomerValid => 'valid_id',
CustomerUserListFields => ['sAMAccountName', 'sn',
'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'sn',
'mail'],
CustomerUserSearchPrefix => '',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 250,
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
Map => [
# note: Login, Email and CustomerID needed!
# var, frontend, storage, shown, required,
storage-type
#[ 'UserSalutation', 'Title', 'title', 1, 0,
'var' ],
[ 'UserFirstname', 'Firstname', 'givenname', 1,
1, 'var' ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var'
],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1,
'var' ],
#['UserPassword', 'Password', 'pw', 0, 1,
'var'],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
[ 'UserCustomerID', 'CustomerID',
'sAMAccountName', 0, 1, 'var' ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0,
'var' ],
#[ 'UserAddress', 'Address', 'postaladdress', 1,
0, 'var' ],
#[ 'UserComment', 'Comment', 'description', 1,
0, 'var' ],
],
};
But when I want to activate the HTTPBasicAuth because I want that my
users login automatically with their windows authentication, it doesn't
work. I have an error message in the login forms "Panic! No
UserData!!!". I have this on my config.pm for HTTPBasicAuth :
# This is an example configuration for an apache ($ENV{REMOTE_USER})
# auth. backend. Use it if you want to have a singe login through
# apache http-basic-auth
$Self->{'Customer::AuthModule'} =
'Kernel::System::CustomerAuth::HTTPBasicAuth';
# In case there is a leading domain in the REMOTE_USER, you can
# replace it by the next config option.
$Self->{'Customer::AuthModule::HTTPBasicAuth::Replace'} =
'terreor\\';
$Self->{CustomerUser} = {
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => 'svr.xx.yy.com',
BaseDN => 'OU=yy,DC=xx,DC=yy,DC=com',
SSCOPE => 'sub',
UserDN =>'CN=Helpdesk,OU=yy,DC=xx,DC=yy,DC=com',
UserPw => 'Glpi84@',
#SourceCharset => 'iso-8859-1',
#DestCharset => 'utf-8',
},
# customer unique id
CustomerKey => 'sAMAccountName',
# customer #
CustomerID => 'sAMAccountName',
#CustomerValid => 'valid_id',
CustomerUserListFields => ['sAMAccountName', 'sn',
'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'sn',
'mail'],
CustomerUserSearchPrefix => '',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 250,
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
Map => [
# note: Login, Email and CustomerID needed!
# var, frontend, storage, shown, required,
storage-type
#[ 'UserSalutation', 'Title', 'title', 1, 0,
'var' ],
[ 'UserFirstname', 'Firstname', 'givenname', 1,
1, 'var' ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var'
],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1,
'var' ],
#['UserPassword', 'Password', 'pw', 0, 1,
'var'],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
[ 'UserCustomerID', 'CustomerID',
'sAMAccountName', 0, 1, 'var' ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0,
'var' ],
#[ 'UserAddress', 'Address', 'postaladdress', 1,
0, 'var' ],
#[ 'UserComment', 'Comment', 'description', 1,
0, 'var' ],
],
};
I tried a lot of different config found on this mailing list but it
doesn't work.
Laouache
Arnault Tovar