When I try to log in a user that is not in the OTRS group for the first time, I get a "Can't activate user.". Even more, if the user does not have the information that OTRS is using to fill the DB, it won't let the user log in for the first time. After logging in the first time and having the user created in the DB, I experience the same behavior you're mentioning, the user can log in regardless of being in the group or not. Chris de Vidal wrote:

Alexis Castillo said this with great authority:

...

Here's my configuration for LDAP against AD. I hope it helps.

OK that doesn't look much different than mine. Could you please confirm that a user that is NOT in this group cannot log in? That's the behavior I see; anyone can log in.

CD

Ever lied? You're a liar. Ever stolen? You're a thief. Ever hated? The bible equates hate with murder. Ever lusted? Jesus equated lust with adultery. You've broken God's law.

He'll judge all evil and you're without hope -- unless you have a savior. Repent and believe. _______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support oder Consulting für Ihr OTRS System? => http://www.otrs.de/

-- Alexis Castillo Systems Administrator Quicksilver Express Courier http://www.qec.com/