Re: [otrs] Clarification on LDAP authentication.

Hi Adam schrieb:
Ok, so it appears I have it "working" with an AD forest.
I wanted to clarify what it does.
So, when someone goes to the customer.pl or index.pl website, even if they are logged into their computer with a AD domain user, the website will STILL prompt them for a username and password? Or does it automatically authenticate them?
You can do both, theoretically. The standard usage will only authenticate the users entry based on their AD credentials
If you have to provide a login and password, is it your domain username (as it appears to be) and then instead of them having to store their password information in a SQL database, its just stored on the AD domain?
Correct! For Agents, the login information (username, email, first name, lastname) will be stored in the system_user table, but the password will be verified by the AD. For customers, all the user information will be called up every time. This can be cached, but it will not be written in the DB.
Also, if the AD domain requires an account to access it, does this account have to have "privileges" to the ldap server? Or can it just be a user?
It only has to be a memeber, becuase all AD users can search the AD.
Also, do I have to create EACH user within OTRS in order for an LDAP user to log in?
No. -- Shawn Beasley ((otrs)) :: OTRS AG :: Norsk-Data-Straße 1 :: 61352 Bad Homburg Fon: +49 (0) 9421 56818 0 :: Fax: +49 (0) 9421 56818 18 http://www.otrs.com/ :: Communication with success! Geschäftssitz: Bad Homburg Amtsgericht Bad Homburg, HRB 10751 Steuernummer: 003/240/97521 Aufsichtsratsvorsitzender: Burchard Steinbild Vorstandsvorsitzender: André Mindermann _______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
participants (1)
-
Shawn Beasley