Re: OTRS 6 LDAP Auth
Nick Bright <[email protected]> Wed, 21 Aug 2019 14:38:05 -0500
| Newsgroups | gmane.comp.otrs.user |
|---|---|
| Organization | Valnet Holdings, LLC |
| Message-ID | <[email protected]> |
No, the users were not registered. Both the primary and secondary domain have mixed case in the configuration. On 8/20/2019 8:20 PM, Gustavo Antonio Lutz de Matos wrote: > Hey Nick, > > Did the user from the second domain get registered in the OTRS Database? > Check it on Administration > Agent. > If so, are your second domain registered with capital letters? > > Em ter, 20 de ago de 2019 às 19:02, Alvaro Cordero > <[email protected] <mailto:[email protected]>> escreveu: > > Hello Nick, for each backend you configure, it is needed to also > configure the maping section for the agents to be created in the > OTRS Database. > > It seems you did not create the mapping part. > > Regards > > El mar., 20 ago. 2019 a las 16:31, Nick Bright > (<[email protected] <mailto:[email protected]>>) escribió: > > Greetings, > > I'm setting up an OTRS 6 installation on CentOS 7, with the > latest > version of OTRS (installed today). OS is fully updated. > > Following the documentation at > https://doc.otrs.com/doc/manual/admin/6.0/en/html/external-backends.html#agent-auth-backend-ldap > > I was able to configure OTRS to authenticate and successfully > log in on > the primary domain that I want to use (Windows AD back ends). > > I added a second domain by adding "1" to the end of the > AuthModule and > AuthSyncModule clauses, but I'm getting an error when trying > to log in > with a user on that domain stating "Authentication succeeded, > but no > user data record is found in the database." In > /var/log/messages the > error is OTRS-CGI-99[14435]: > [Error][Kernel::System::User::UserLookup][Line:969]: No UserID > found for > 'username'! > > I suspect (hope) there's just some silly configuration error > I'm not seeing. > > $Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP'; > $Self->{'AuthModule::LDAP::Host'} = '10.0.0.2'; > $Self->{'AuthModule::LDAP::BaseDN'} = 'DC=DOMAIN01,DC=local'; > $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName'; > $Self->{'AuthModule::LDAP::SearchUserDN'} = > '[email protected]'; > $Self->{'AuthModule::LDAP::SearchUserPw'} ='PASSWORD'; > $Self->{'AuthModule::LDAP::AlwaysFilter'} = ''; > $Self->{'AuthModule::Radius::Die'} = 1; > $Self->{'AuthModule::LDAP::Params'} = {port => 389, > timeout => 120, > async => 0, version => 3,}; > $Self->{'AuthModule::UseSyncBackend'} = 'AuthSyncBackend'; > $Self->{'AuthSyncModule'} = > 'Kernel::System::Auth::Sync::LDAP'; > $Self->{'AuthSyncModule::LDAP::Host'} = 'ldap://10.0.0.2/ > <http://10.0.0.2/>'; > $Self->{'AuthSyncModule::LDAP::BaseDN'} = > 'DC=DOMAIN01,DC=local'; > $Self->{'AuthSyncModule::LDAP::UID'} = 'sAMAccountName'; > $Self->{'AuthSyncModule::LDAP::SearchUserDN'} = > '[email protected]'; > $Self->{'AuthSyncModule::LDAP::SearchUserPw'} = 'PASSWORD'; > $Self->{'AuthSyncModule::LDAP::UserSyncMap'} = > {UserFirstname => > 'givenName', UserLastname => 'sn', UserEmail => 'mail',}; > $Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups'} = > ['users',]; > # ---- SECONDARY SERVER > $Self->{'AuthModule1'} = 'Kernel::System::Auth::LDAP'; > $Self->{'AuthModule::LDAP::Host1'} = '192.168.0.2'; > $Self->{'AuthModule::LDAP::BaseDN1'} = > 'DC=DOMAIN02,DC=local'; > $Self->{'AuthModule::LDAP::UID1'} = 'sAMAccountName'; > $Self->{'AuthModule::LDAP::SearchUserDN1'} = > '[email protected]'; > $Self->{'AuthModule::LDAP::SearchUserPw1'} ='PASSWORD'; > $Self->{'AuthModule::LDAP::AlwaysFilter1'} = ''; > $Self->{'AuthModule::LDAP::Params1'} = {port => 389, > timeout => > 120, async => 0, version => 3,}; > $Self->{'AuthModule::UseSyncBackend1'} = 'AuthSyncBackend'; > $Self->{'AuthSyncModule1'} = > 'Kernel::System::Auth::Sync::LDAP'; > $Self->{'AuthSyncModule::LDAP::Host1'} = > 'ldap://192.168.0.2/ <http://192.168.0.2/>'; > $Self->{'AuthSyncModule::LDAP::BaseDN1'} = > 'DC=DOMAIN02,DC=local'; > $Self->{'AuthSyncModule::LDAP::UID1'} = 'sAMAccountName'; > $Self->{'AuthSyncModule::LDAP::SearchUserDN1'} = > '[email protected]'; > $Self->{'AuthSyncModule::LDAP::SearchUserPw1'} = 'PASSWORD'; > $Self->{'AuthSyncModule::LDAP::UserSyncMap1'} = > {UserFirstname => > 'givenName', UserLastname => 'sn', UserEmail => 'mail',}; > $Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups1'} = > ['users',]; > > -- > ----------------------------------------------- > - Nick Bright - > - Vice President of Technology - > - Valnet -=- We Connect You -=- - > - Tel 888-332-1616 x 315 / Fax 620-331-0789 - > - Web http://www.valnet.net/ - > ----------------------------------------------- > - Are your files safe? - > - Valnet Vault - Secure Cloud Backup - > - More information & 30 day free trial at - > - http://www.valnet.net/services/valnet-vault - > ----------------------------------------------- > > --------------------------------------------------------------------- > OTRS mailing list: otrs - Webpage: http://otrs.org/ > Archive: http://lists.otrs.org/pipermail/otrs > To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs > > > > -- > /Alvaro Cordero Retana > Consultor de Tecnologias/ > /Tel: 22585757 ext 123/ > /Email:/ [email protected] <mailto:[email protected]> > > --------------------------------------------------------------------- > OTRS mailing list: otrs - Webpage: http://otrs.org/ > Archive: http://lists.otrs.org/pipermail/otrs > To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs > > > --------------------------------------------------------------------- > OTRS mailing list: otrs - Webpage: http://otrs.org/ > Archive: http://lists.otrs.org/pipermail/otrs > To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs -- ----------------------------------------------- - Nick Bright - - Vice President of Technology - - Valnet -=- We Connect You -=- - - Tel 888-332-1616 x 315 / Fax 620-331-0789 - - Web http://www.valnet.net/ - ----------------------------------------------- - Are your files safe? - - Valnet Vault - Secure Cloud Backup - - More information & 30 day free trial at - - http://www.valnet.net/services/valnet-vault - ----------------------------------------------- --------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs