
I'm trying to run OTRS using active directory, and everything works when I point to to a lower level domain controller (expect I can't authenticate people in the other locations). When I point to a higher level domain controller, it seems like Net::LDAP is not picking up the referal. I watch it with a packet sniffer, and I see the DC send the referal to another DC. When I enable debug in the LDAPNew.pm module, the return code from the ->search is 0, not 10. Any ideas on why the referal is not working? Thanks -Mark

On Wednesday, May 05, 2004 11:31 PM
Mark Menke
I'm trying to run OTRS using active directory, and everything works when I point to to a lower level domain controller (expect I can't authenticate people in the other locations). When I point to a higher level domain controller, it seems like Net::LDAP is not picking up the referal.
I believe the result you're receiving aren't LDAP entries as normally received, but referals. We'd have to build in a routine to parse these, I suppose.
I watch it with a packet sniffer, and I see the DC send the referal to another DC. When I enable debug in the LDAPNew.pm module, the return code from the ->search is 0, not 10.
Please forget about LDAPnew.pm, it's LDAP.pm you're wanting. Regards, Robert Kehl -- ((otrs.de)) :: OTRS GmbH :: Norsk-Data-Str. 1 :: 61352 Bad Homburg http://www.otrs.de/ :: Tel. +49 (0)6172 4832388

Thanks for the reply. I didn't understand the difference between a referal and a reference. I'm getting a search result 0x05, and 3 search result references (0x13). 0 I'm working on modifying LDAP.pm to follow the references and re-bind using the same searchuser. -Mark Robert Kehl wrote:
On Wednesday, May 05, 2004 11:31 PM Mark Menke
wrote: I'm trying to run OTRS using active directory, and everything works when I point to to a lower level domain controller (expect I can't authenticate people in the other locations). When I point to a higher level domain controller, it seems like Net::LDAP is not picking up the referal.
I believe the result you're receiving aren't LDAP entries as normally received, but referals. We'd have to build in a routine to parse these, I suppose.
I watch it with a packet sniffer, and I see the DC send the referal to another DC. When I enable debug in the LDAPNew.pm module, the return code from the ->search is 0, not 10.
Please forget about LDAPnew.pm, it's LDAP.pm you're wanting.
Regards,
Robert Kehl
-- ((otrs.de)) :: OTRS GmbH :: Norsk-Data-Str. 1 :: 61352 Bad Homburg http://www.otrs.de/ :: Tel. +49 (0)6172 4832388
_______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support oder Consulting für Ihr OTRS System? => http://www.otrs.de/

On Friday, May 07, 2004 4:40 PM
Mark Menke
Thanks for the reply. I didn't understand the difference between a referal and a reference.
See: <http://search.cpan.org/~gbarr/perl-ldap-0.31/lib/Net/LDAP/FAQ.pod#What_ is_the_difference_between_a_ldap_reference_and_a_ldap_referral?> and: ftp://ftp.rfc-editor.org/in-notes/rfc2251.txt
I'm getting a search result 0x05, and 3 search result references (0x13). 0 I'm working on modifying LDAP.pm to follow the references and re-bind using the same searchuser.
See this for your help: http://search.cpan.org/~gbarr/perl-ldap-0.31/ esp.: <http://search.cpan.org/~gbarr/perl-ldap-0.31/lib/Net/LDAP/Reference.pod
We're eager to integrate a solution into OTRS. Regards, Robert Kehl -- ((otrs.de)) :: OTRS GmbH :: Norsk-Data-Str. 1 :: 61352 Bad Homburg http://www.otrs.de/ :: Tel. +49 (0)6172 4832388

Hi Mark, On Wed, May 05, 2004 at 02:31:20PM -0700, Mark Menke wrote:
I'm trying to run OTRS using active directory, and everything works when I point to to a lower level domain controller (expect I can't authenticate people in the other locations). When I point to a higher level domain controller, it seems like Net::LDAP is not picking up the referal.
I watch it with a packet sniffer, and I see the DC send the referal to another DC. When I enable debug in the LDAPNew.pm module, the return code from the ->search is 0, not 10.
Any ideas on why the referal is not working?
LDAP referal is not implemented in Net::LDAP. We already had this problems with active directory with other customers. The best (and fastest) solution is to configure the global catalog server as OTRS-LDAP host. *) Go the find the ads global catalog server (it's running on an other port, i think 3268 but I'm not sure) *) Configure OTRS to use this port for LDAP access. PS: A disadvantage of ldap referal is also the many connects (to the different servers in you company lan) and the long time to search the whole tree.
-Mark
Martin Edenhofer -- ((otrs.de)) :: OTRS GmbH :: Norsk-Data-Str. 1 :: 61352 Bad Homburg http://www.otrs.de/ :: Manage your communication!
participants (3)
-
Mark Menke
-
Martin Edenhofer
-
Robert Kehl