Hallo Sami. Danke für Deine schnelle Antowrt! Ich hatte es gestern schon einmal mit einem Benutzer versucht. Habe aber vorsichtshalber einen neuen OTRS-Benutzer angelegt, der laut den Eigenschaften als Domänen-Benutzer Abfragen machen darf.
Leider bisher ohne Erfolg. Das gleiche Verhalten / Fehler. Habe als Anhang die config.pm beigefügt. Hoffe das gibt meht Aufschluss. Viele Grüsse Christian -----Ursprüngliche Nachricht----- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Sami Bejaoui Gesendet: Donnerstag, 25. August 2005 10:37 An: User questions and discussions about OTRS.org in German Betreff: RE: [otrs-de] Benutzerdatenanbindung LDAP Hallo Christian, hast du im AD einen User angelegt der das LDAP durchsuchen darf? Dieser muss auch in der Config.pm im LDAP Bereich eingegeben werden. > #UserDN => 'cn=OTRS Service, ou=People, dc=example, dc=com', #UserPw > => 'secret', Dies geschieht mit UserDN und UserPW, diese sind in deiner Konfig noch kommentiert. Ich weiss nicht ob es daran liegt, aber du kannst ja mal testen. Es wäre auch gut einen Blick in die gesamte Config.pm zu haben. Aber bitte die DB Passwörter vorher entfernen. Gruss, Sami > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Christian Volkmer > Sent: Thursday, August 25, 2005 9:22 AM > To: [email protected] > Subject: [otrs-de] Benutzerdatenanbindung LDAP > > Hallo OTRS Gemeinde! > > Ich versuche (bisher leider ohne Erfolg) die Integration von Active > Directory - Usern als Customer-Quelle. Zum einen möchte ich die > Informationen aus dem AD lesen (damit bei Tieckets die Kunden > zugeordnet werden), zum anderen sollen sich die Benutzer mit ihrem > Accountnamen am Customer-Interface anmelden können. > > In diesem Fall ist so, dass die Kundenbenutzer die internen Benutzer > (alle im Active Directory angelegt und mit div. > Zusatzinformationen ausgestattet) sind und diese über mehrere OU's > verteilet sind (auch auf gleicher Ebene), sodass ich nicht nur die > Root-OU angeben kann, unter der die Benutzer zu finden sind. > > Mit der angegebenen Konfiguration erhalte ich bei der Suche über das > Agent-Interface (z.b. bei der Erstellung eines neuen > Telefontickets) keine Ergebnisse. Wenn ich in den Kunden suche habe > ich zwei Quellen zur Auswahl "AD-LDAP" und "Datenbank", beide bringen > keine Ergebnisse (in die Datenbank selbst sind auch noch keine Kunden > eingepflegt, hier ist es klar). > > Wenn ich versuche mich mit einem Usernamen (aus dem AD, der sich in > der im Config-File angegebenen OU befindet) anmelde, erscheint im > Logfile eine Fehlermeldung: > > "[Wed Aug 24 17:47:53 > 2005][Notice][Kernel::System::CustomerAuth::LDAP::Auth] > CustomerUser: c.volkmer authentification failed, no LDAP entry > found!BaseDN='dc=bsb, dc=local', Filter='(sAMAccountName=c.volkmer)', > (REMOTE_ADDR: 192.168.201.12)." > > Ein Auszug aus der Config.pm ist im Anhang beigefügt. > > Vielen Dank für Eure Bemühungen! > > Christian > > ----------------------------------------- > Christian Volkmer - IBITECH AG > OTRS 2.0.1 - W2K Server - Apache - Mysql <<otrs_ldap.txt>> > > _______________________________________________ OTRS Mailingliste: otrs-de - Webpage: http://otrs.org/ Archiv: http://lists.otrs.org/pipermail/otrs-de/ Listenabo verwalten: http://lists.otrs.org/cgi-bin/listinfo/otrs-de/ Support oder Consulting fuer Ihr OTRS System? =http://www.otrs.de/
# -- # Kernel/Config.pm - Config file for OTRS kernel # Copyright (C) 2001-2005 Martin Edenhofer <[EMAIL PROTECTED]> # -- # $Id: Config.pm.dist,v 1.16 2005/05/27 18:12:15 martin Exp $ # -- # This software comes with ABSOLUTELY NO WARRANTY. For details, see # the enclosed file COPYING for license information (GPL). If you # did not receive this file, see http://www.gnu.org/licenses/gpl.txt. # -- # Note: # # -->> OTRS does have a lot of config settings. For more settings # (Notifications, Ticket::ViewAccelerator, Ticket::NumberGenerator, # LDAP, PostMaster, Session, Preferences, ...) see # Kernel/Config/Defaults.pm and copy your wanted lines into "this" # config file. This file will not be changed on update! # # -- package Kernel::Config; # -- sub Load { my $Self = shift; # ---------------------------------------------------- # # ---------------------------------------------------- # # # # Start of your own config options!!! # # # # ---------------------------------------------------- # # ---------------------------------------------------- # # ---------------------------------------------------- # # database settings # # ---------------------------------------------------- # # DatabaseHost # (The database host.) $Self->{'DatabaseHost'} = 'localhost'; # Database # (The database name.) $Self->{'Database'} = 'otrs'; # DatabaseUser # (The database user.) $Self->{'DatabaseUser'} = 'otrs'; # DatabasePw # (The password of database user. You also can use bin/CryptPassword.pl # for crypted passwords.) $Self->{'DatabasePw'} = 'XXXXX'; # DatabaseDSN # (The database DSN for MySQL ==> more: "man DBD::mysql") $Self->{DatabaseDSN} = "DBI:mysql:database=$Self->{Database};host=$Self->{DatabaseHost};"; # (The database DSN for PostgrSQL ==> more: "man DBD::Pg") # if you want to use a local socket connection # $Self->{DatabaseDSN} = "DBI:Pg:dbname=$Self->{Database};"; # if you want to use a tcpip connection # $Self->{DatabaseDSN} = "DBI:Pg:dbname=$Self->{Database};host=$Self->{DatabaseHost};"; # ---------------------------------------------------- # # fs root directory # ---------------------------------------------------- # $Self->{Home} = 'C:/OTRS/otrs'; # **************************************************** # # insert your own config settings "here" # # config settings taken from Kernel/Config/Defaults.pm # # **************************************************** # # $Self->{SessionUseCookie} = 0; # $Self->{'CheckMXRecord'} = 1; # ------------------------------------------------------# # E-Mail Einstellungen - Sendmail # # ------------------------------------------------------# $Self->{'SendmailModule'} = 'Kernel::System::Email::SMTP'; $Self->{'SendmailModule::Host'} = 'fhsexc01.bsb.local'; $Self->{'SendmailModule::AuthUser'} = ''; $Self->{'SendmailModule::AuthPassword'} = ''; # ------------------------------------------------------# # TimeWeekdaysCounted # (counted days for sla time used) # ------------------------------------------------------# $Self->{TimeWeekdaysCounted} = { Mon => 1, Tue => 1, Wed => 1, Thu => 1, Fri => 1, Sat => 0, Sun => 0, }; # ------------------------------------------------------# # TimeWorkingHours # (counted hours for sla time used) # ------------------------------------------------------# $Self->{TimeWorkingHours} = { Mon => [ 8,9,10,11,12,13,14,15,16,17,18 ], Tue => [ 8,9,10,11,12,13,14,15,16,17,18 ], Wed => [ 8,9,10,11,12,13,14,15,16,17,18 ], Thu => [ 8,9,10,11,12,13,14,15,16,17,18 ], Fri => [ 8,9,10,11,12,13,14,15,16,17,18 ], Sat => [ ], Sun => [ ], }; # ------------------------------------------------------# # TimeVacationDays # adde new own days with: # "$Self->{TimeVacationDays}->{10}->{27} = 'Some Info';" # ------------------------------------------------------# $Self->{TimeVacationDays} = { 1 => { 01 => 'New Year\'s Eve!', }, 5 => { 1 => '1 St. May', }, 12 => { 24 => 'Christmas', 25 => 'First Christmas Day', 26 => 'Second Christmas Day', 31 => 'Silvester', }, }; # ------------------------------------------------------# # LDAP Integration # ------------------------------------------------------# # This is an example configuration for an LDAP auth. backend. # (take care that Net::LDAP is installed!) $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP'; $Self->{'Customer::AuthModule::LDAP::Host'} = 'dzdwdc01.bsb.local'; $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'ou=Ben_Allgemein, ou=BSB_Benutzer, dc=bsb, dc=local'; $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName'; # The following is valid but would only be necessary if the # anonymous user do NOT have permission to read from the LDAP tree $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'cn=otrs, ou=Ben_Allgemein, ou=BSB_Benutzer, dc=example, dc=com'; $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'XXXXX'; # CustomerUser # (customer user database backend and settings) $Self->{CustomerUser} = { Name => 'Datenbank', Module => 'Kernel::System::CustomerUser::DB', Params => { Table => 'customer_user', # to use an external database #DSN => 'DBI:odbc:yourdsn', #DSN => 'DBI:mysql:database=customerdb;host=customerdbhost', #User => '', Password => '', }, # customer uniq id CustomerKey => 'login', CustomerID => 'customer_id', CustomerValid => 'valid_id', CustomerUserListFields => ['first_name', 'last_name', 'email'], #CustomerUserListFields => ['login', 'first_name', 'last_name', 'customer_id', 'email'], CustomerUserSearchFields => ['login', 'last_name', 'customer_id'], CustomerUserSearchPrefix => '', CustomerUserSearchSuffix => '*', CustomerUserSearchListLimit => 250, CustomerUserPostMasterSearchFields => ['email'], CustomerUserNameFields => ['salutation', 'first_name', 'last_name'], #ReadOnly => 1, Map => [ # note: Login, Email and CustomerID needed! # var, frontend, storage, shown, required, storage-type, http-link [ 'UserSalutation', 'Salutation', 'salutation', 1, 0, 'var' ], [ 'UserFirstname', 'Firstname', 'first_name', 1, 1, 'var' ], [ 'UserLastname', 'Lastname', 'last_name', 1, 1, 'var' ], [ 'UserLogin', 'Login', 'login', 1, 1, 'var' ], [ 'UserPassword', 'Password', 'pw', 0, 1, 'var' ], [ 'UserEmail', 'Email', 'email', 0, 1, 'var' ], [ 'UserCustomerID', 'CustomerID', 'customer_id', 0, 1, 'var' ], [ 'UserComment', 'Comment', 'comments', 1, 0, 'var' ], [ 'ValidID', 'Valid', 'valid_id', 0, 1, 'int' ], ], }; # CustomerUser1 # (customer user ldap backend and settings) $Self->{CustomerUser1} = { Name => 'AD-LDAP', Module => 'Kernel::System::CustomerUser::LDAP', Params => { # ldap host Host => 'dzdwdc01.bsb.local', # ldap base dn BaseDN => 'ou=Ben_Allgemein, ou=BSB_Benutzer, dc=bsb, dc=local', # search scope (one|sub) SSCOPE => 'sub', # The following is valid but would only be necessary if the # anonymous user does NOT have permission to read from the LDAP tree UserDN => 'cn=otrs, ou=Ben_Allgemein, ou=BSB_Benutzer, dc=example, dc=com', UserPw => 'XXXXX', AlwaysFilter => '', SourceCharset => 'utf-8', DestCharset => 'iso-8859-1', }, # customer uniq id CustomerKey => 'sAMAccountName', # customer # CustomerID => 'mail', CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'], CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'], CustomerUserSearchPrefix => '', CustomerUserSearchSuffix => '*', CustomerUserSearchListLimit => 250, CustomerUserPostMasterSearchFields => ['mail'], CustomerUserNameFields => ['givenname', 'sn'], Map => [ # note: Login, Email and CustomerID needed! # var, frontend, storage, shown, required, storage-type #[ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ], [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ], [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ], [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ], [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ], [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ], [ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ], #[ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ], #[ 'UserComment', 'Comment', 'description', 1, 0, 'var' ], ], }; # **************************************************** # # ---------------------------------------------------- # # data inserted by installer # # ---------------------------------------------------- # $Self->{'LogModule'} = 'Kernel::System::Log::File'; $Self->{'LogModule::LogFile'} = 'C:/OTRS/otrs/var/log/otrs.log'; # $DIBI$ $Self->{'SystemID'} = 10; $Self->{'SecureMode'} = 1; $Self->{'Organization'} = ''; $Self->{'FQDN'} = 'fhssup01.bsb.local'; $Self->{'DefaultLanguage'} = 'de'; $Self->{'DefaultCharset'} = 'utf-8'; $Self->{'AdminEmail'} = '[EMAIL PROTECTED]'; # ---------------------------------------------------- # # ---------------------------------------------------- # # # # End of your own config options!!! # # # # ---------------------------------------------------- # # ---------------------------------------------------- # } # ---------------------------------------------------- # # needed system stuff (don't edit this) # # ---------------------------------------------------- # use strict; use vars qw(@ISA $VERSION); use Kernel::Config::Defaults; push (@ISA, 'Kernel::Config::Defaults'); $VERSION = '$Revision: 1.16 $'; $VERSION =~ s/^\$.*:\W(.*)\W.+?$/$1/; # -----------------------------------------------------# 1;
_______________________________________________ OTRS Mailingliste: otrs-de - Webpage: http://otrs.org/ Archiv: http://lists.otrs.org/pipermail/otrs-de/ Listenabo verwalten: http://lists.otrs.org/cgi-bin/listinfo/otrs-de/ Support oder Consulting fuer Ihr OTRS System? => http://www.otrs.de/
