Access denied after enabling agent LDAP authentication
I've just installed OTRS 2.3.2 for the first time under Under 8.04. Eventhing worked ok after installation, I was able to login as root@localhost. Then I enabled LDAP authentication by adding the following lines to /etc/otrs/Kernel/Config.pm $Self->{'AuthModule'} = 'Kernel::System::Auth::DB'; $Self->{'AuthModule::LDAP::Host'} = 'localhost'; $Self->{'AuthModule::LDAP::BaseDN'} = 'ou=Users,dc=mms'; $Self->{'AuthModule::LDAP::UID'} = 'uid'; Now when I try to do anything (even just visting the main page) I get the following error: Message: Access denied for user 'otrs'@'localhost' (using password: NO) Traceback (7238): Module: Kernel::System::DB::new (v1.95) Line: 190 Module: Kernel::System::Web::InterfaceAgent::Run (v1.34) Line: 143 Module: ModPerl::ROOT::ModPerl::Registry::usr_share_otrs_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 47 Module: (eval) (v1.87) Line: 204 Module: ModPerl::RegistryCooker::run (v1.87) Line: 204 Module: ModPerl::RegistryCooker::default_handler (v1.87) Line: 170 Module: ModPerl::Registry::handler (v1.99) Line: 31 Commenting out those lines in Config.pm doesn't make it work again. Is there something I've done wrong or neglected to do that's causing this? Thanks Mark
Hi Mark, Den 22/10/2008 kl. 07.19 skrev Mark Di Nicola:
Then I enabled LDAP authentication by adding the following lines to /etc/otrs/Kernel/Config.pm
Now when I try to do anything (even just visting the main page) I get the following error:
Message: Access denied for user 'otrs'@'localhost' (using password: NO)
It's strange that you can't revert to the old behaviour by removing the lines from Config.pm. Anyway, the single most important thing to do BEFORE switching to LDAP authentication is creating an administrator in OTRS with the same login as a user in your AD. Is your AD account "BOB"? Then create an OTRS account called "BOB" and assign administrator privileges. After switching to LDAP you can only authenticate users within the AD and only login with users created in OTRS. Another important aspect to wrap your head around is that OTRS has two kinds of users: Agents and Customers. Agents *have* to exist in the OTRS user database to be able to login, even if you enable LDAP. What LDAP does for your agents is just allowing them to use the same password they use in Windows. Customers, on the other hand, don't need to be created in OTRS once you enable LDAP authentication for them. -- Lars
participants (2)
-
Lars Jørgensen -
Mark Di Nicola