Hi Dan, First of all, let me make clear that OTRS has two kinds of users: Customer users, or customers, who can log in to the customer front end, and agents, or the people who have to 'do the actual work'. For customer users you can define a data source in LDAP and there's no need to add them to the database. Agents, on the other hand, need to be stored in the OTRS database. But the good news is that you can let OTRS create an account in the database on login time. For this you would need to define a so-called AuthSyncModule. It's described here: http://doc.otrs.org/2.4/en/html/x1867.html#configuration-agent-auth-backend-... You can define initial groups, which will be valid for all LDAP users, and you can even define group or role membership in OTRS based on LDAP groups, so all of your user management can be done inside OTRS. Look at Kernel/Config/Defaults.pm for examples, and copy the relevant sections to Kernel/Config.pm. # AuthSyncModule::LDAP::UserSyncGroupsDefinition # (If "LDAP" was selected for AuthModule and you want to sync LDAP # groups to otrs groups, define the following.) # $Self->{'AuthSyncModule::LDAP::UserSyncGroupsDefinition'} = { # # ldap group # 'cn=agent,o=otrs' => { # # otrs group # 'admin' => { # # permission # rw => 1, # ro => 1, # }, # 'faq' => { # rw => 0, # ro => 1, # }, # }, # 'cn=agent2,o=otrs' => { # 'users' => { # rw => 1, # ro => 1, # }, # } # }; # AuthSyncModule::LDAP::UserSyncRolesDefinition # (If "LDAP" was selected for AuthModule and you want to sync LDAP # groups to otrs roles, define the following.) # $Self->{'AuthSyncModule::LDAP::UserSyncRolesDefinition'} = { # # ldap group # 'cn=agent,o=otrs' => { # # otrs role # 'role1' => 1, # 'role2' => 0, # }, # 'cn=agent2,o=otrs' => { # 'role3' => 1, # } # }; Hope this helps, -- Michiel Beijen R&D OTRS AG Norsk-Data-Str 1. 61352 Bad Homburg Germany T: +31 (0) 6457 42418 F: +49 (0) 9421 56818-18 I: http://www.otrs.com/ Business location: Bad Homburg, Country Court: Bad Homburg, HRB 10751, VAT ID: DE256610065 Chairman: Burchard Steinbild, Managing Board: André Mindermann CU@ CeBIT 2010 in Hannover (Germany) and get to know more about OTRS at booth no. C37, in hall 2 from March 2-6, 2010! http://bit.ly/4qLvqm On Mon, Dec 21, 2009 at 4:31 PM, Dan Bar Dov wrote:

I have set up OTRS with LDAP authentication, and got it to work with users I define in OTRS.

Is it possible to not define the users in OTRS at all, and let it use the LDAP for all other user information? - I checked, and no.

To do that would mean that instead of querying the OTRS database for information about the user, OTRS would have to query LDAP. (once it got the user info, including UserNumber, it could save the user data in the local table).

I cannot understand why do I need to define users that are already defined in LDAP.  This is a common theme with most applications that have the concept of users.

Dan

--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW! http://www.otrs.com/en/support/enterprise-subscription/