Authentication failed for customers - Windows 2012 R2 AD LDAP

Hello I have an Active Directory installed on Windows Server 2012 R2. The OTRS can view all users, however, when I try to authenticate, displays error like username or password is incorrect. Does anyone have any tips on how to solve? Thanks Raul Libório http://rauhmaru.blogspot.com/ openSUSE Member | Linux User #4444581

Fix Config.pm (If you would like more assistance, you may want to post this
question in the forum, rather than posting information in this mailing list
for all eternity.)
On Thu, Oct 9, 2014 at 5:11 PM, Raul Libório
Hello
I have an Active Directory installed on Windows Server 2012 R2. The OTRS can view all users, however, when I try to authenticate, displays error like username or password is incorrect. Does anyone have any tips on how to solve?
Thanks
Raul Libório http://rauhmaru.blogspot.com/ openSUSE Member | Linux User #4444581
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

Ok bro. Thanks.
Raul Libório
http://rauhmaru.blogspot.com/
openSUSE Member | Linux User #4444581
On Fri, Oct 10, 2014 at 12:31 AM, Gerald Young
Fix Config.pm (If you would like more assistance, you may want to post this question in the forum, rather than posting information in this mailing list for all eternity.)
On Thu, Oct 9, 2014 at 5:11 PM, Raul Libório
wrote: Hello
I have an Active Directory installed on Windows Server 2012 R2. The OTRS can view all users, however, when I try to authenticate, displays error like username or password is incorrect. Does anyone have any tips on how to solve?
Thanks
Raul Libório http://rauhmaru.blogspot.com/ openSUSE Member | Linux User #4444581
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

From: otrs-bounces@otrs.org On Behalf Of Raul Libório Sent: Thursday, October 09, 2014 5:12 PM Subject: [otrs] Authentication failed for customers - Windows 2012 R2 AD LDAP I have an Active Directory installed on Windows Server 2012 R2. The OTRS can view all users, however, when I try to authenticate, displays error like username or password is incorrect. Does anyone have any tips on how to solve? Not sure if this is on point but I seem to recall there are security settings w/i AD LDAP which will return all authenication requests as failed by default (no certain about this statement it was a while ago!?). I do remember retreiving the denial code and which provided a more specific error and then just followed the bouncing ball. It was a "well known" microsoft issue. gl,

Did you verify what are you using to authenticate as uuid, email,
SAMAccountname, other, that affects too. Also, are you having issues
authenticating agents or customers?
Regards
2014-10-09 15:11 GMT-06:00 Raul Libório
Hello
I have an Active Directory installed on Windows Server 2012 R2. The OTRS can view all users, however, when I try to authenticate, displays error like username or password is incorrect. Does anyone have any tips on how to solve?
Thanks
Raul Libório http://rauhmaru.blogspot.com/ openSUSE Member | Linux User #4444581
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
-- ___________________________ Alvaro Cordero Retana Consultor de Tecnologias Gridshield Monitoreo de Redes e Infraestructura. 2258-5757 ext 123 alvaro@gridshield.net www.gridshield.net

Marshall,
Yes, I have also read something about that but I can not remember that was
related. I'm looking to find these parameters, if a problem of AD.
Alvaro, my problem is with customers. I'm using the sAMAccountName for
authentication, as the mapping done in Config.pm
Thanks!
Raul Libório
http://rauhmaru.blogspot.com/
openSUSE Member | Linux User #4444581
On Fri, Oct 10, 2014 at 12:18 PM, Alvaro Cordero
Did you verify what are you using to authenticate as uuid, email, SAMAccountname, other, that affects too. Also, are you having issues authenticating agents or customers?
Regards
2014-10-09 15:11 GMT-06:00 Raul Libório
: Hello
I have an Active Directory installed on Windows Server 2012 R2. The OTRS can view all users, however, when I try to authenticate, displays error like username or password is incorrect. Does anyone have any tips on how to solve?
Thanks
Raul Libório http://rauhmaru.blogspot.com/ openSUSE Member | Linux User #4444581
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
-- ___________________________ Alvaro Cordero Retana Consultor de Tecnologias Gridshield Monitoreo de Redes e Infraestructura. 2258-5757 ext 123 alvaro@gridshield.net www.gridshield.net
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

Raul - sounds like packet capture time
From: otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf Of Raul
Libório
Sent: Friday, October 10, 2014 1:59 PM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] Authentication failed for customers - Windows 2012 R2 AD
LDAP
Marshall,
Yes, I have also read something about that but I can not remember that was
related. I'm looking to find these parameters, if a problem of AD.
Alvaro, my problem is with customers. I'm using the sAMAccountName for
authentication, as the mapping done in Config.pm
Thanks!
Raul Libório
http://rauhmaru.blogspot.com/
openSUSE Member | Linux User #4444581
On Fri, Oct 10, 2014 at 12:18 PM, Alvaro Cordero

Hello all,
We had a very similar issue trying to authenticate Customer accounts against LDAP provided by Windows 2012 R2. We finally tracked down a solution (worked for us, your results may vary) by modifying the lookup code that checks to see if a user account is enabled.
A code snippet from our Config.pm file appears below. My understanding is that since Win2008 the 'enabled' value is no longer stored as a discreet value, but is instead contained in a hash that combines the results of the state of many user account attributes. I don't have a deep knowledge of this, but hopefully this can serve as a starting point for further investigation.
Code snippet to test for 'enabled' state on user account:
# in case you want to add always one filter to each ldap query, use
# this option. e. g. AlwaysFilter => '(mail=*)' or AlwaysFilter => '(objectclass=user)'
$Self->{'AuthModule::LDAP::AlwaysFilter'} = '(&(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))';
Thanks,
Pat
From: otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf Of LQ Marshall
Sent: Friday, October 10, 2014 1:02 PM
To: 'User questions and discussions about OTRS.'
Subject: Re: [otrs] Authentication failed for customers - Windows 2012 R2 AD LDAP
Importance: Low
Raul - sounds like packet capture time...
From: otrs-bounces@otrs.orgmailto:otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf Of Raul Libório
Sent: Friday, October 10, 2014 1:59 PM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] Authentication failed for customers - Windows 2012 R2 AD LDAP
Marshall,
Yes, I have also read something about that but I can not remember that was related. I'm looking to find these parameters, if a problem of AD.
Alvaro, my problem is with customers. I'm using the sAMAccountName for authentication, as the mapping done in Config.pm
Thanks!
Raul Libório
http://rauhmaru.blogspot.com/
openSUSE Member | Linux User #4444581
On Fri, Oct 10, 2014 at 12:18 PM, Alvaro Cordero

Raul, if customer is the issue, you need to ensure you have configured AD
also in sysconfig, look for Auth variable and there you should have the
same settings as in Config.pm otherwise you need to add customers into data
base.,
Frontend::Customer::Auth
Regards
2014-10-10 11:59 GMT-06:00 Raul Libório
Marshall, Yes, I have also read something about that but I can not remember that was related. I'm looking to find these parameters, if a problem of AD.
Alvaro, my problem is with customers. I'm using the sAMAccountName for authentication, as the mapping done in Config.pm
Thanks!
Raul Libório http://rauhmaru.blogspot.com/ openSUSE Member | Linux User #4444581
On Fri, Oct 10, 2014 at 12:18 PM, Alvaro Cordero
wrote: Did you verify what are you using to authenticate as uuid, email, SAMAccountname, other, that affects too. Also, are you having issues authenticating agents or customers?
Regards
2014-10-09 15:11 GMT-06:00 Raul Libório
: Hello
I have an Active Directory installed on Windows Server 2012 R2. The OTRS can view all users, however, when I try to authenticate, displays error like username or password is incorrect. Does anyone have any tips on how to solve?
Thanks
Raul Libório http://rauhmaru.blogspot.com/ openSUSE Member | Linux User #4444581
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
-- ___________________________ Alvaro Cordero Retana Consultor de Tecnologias Gridshield Monitoreo de Redes e Infraestructura. 2258-5757 ext 123 alvaro@gridshield.net www.gridshield.net
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
-- ___________________________ Alvaro Cordero Retana Consultor de Tecnologias Gridshield Monitoreo de Redes e Infraestructura. 2258-5757 ext 123 alvaro@gridshield.net www.gridshield.net
participants (5)
-
Alvaro Cordero
-
Dillon, Patrick J
-
Gerald Young
-
LQ Marshall
-
Raul Libório