LDAP User authentication

Moderator: crythias

Post Reply
aalzola
Znuny newbie
Posts: 40
Joined: 27 Jul 2018, 13:32
Znuny Version: 6.0.8

LDAP User authentication

Post by aalzola »

Hi OTRS Community,
I have a problem integrating my AD into OTRS. When I edit the config.pm file, I connect with my OTRS agent interface and when I go inside Clients I see all the user's I have on my AD (thats right), BUT on the Customer.pl I can't do login with that users. Do I have to authenticate then or synchronize then? How?

Here above there is the code I have added to Config.pm

Code: Select all

 # This is an example configuration for an LDAP auth. backend.
# (make sure Net::LDAP is installed!)
	$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
    $Self->{'AuthModule::LDAP::Host'} = '172.26.1.20';
    $Self->{'AuthModule::LDAP::BaseDN'} = 'OU=PraxisVitoria,DC=PraxisMad,DC=local';
    $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';

    $Self->{'AuthModule::LDAP::SearchUserDN'} = 'CN=otrs_search,OU=PraxisVitoria,DC=PraxisMad,DC=local';
    $Self->{'AuthModule::LDAP::SearchUserPw'} = 'Inicios123';


    # This is an example configuration for an LDAP auth. backend.
    # (take care that Net::LDAP is installed!)
    $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
    $Self->{'Customer::AuthModule::LDAP::Host'} = '172.26.1.20';
    $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'OU=PraxisVitoria,DC=PraxisMad,DC=local';
    $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';

    # The following is valid but would only be necessary if the
    # anonymous user do NOT have permission to read from the LDAP tree
    $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'CN=otrs_search,OU=PraxisVitoria,DC=PraxisMad,DC=local';
    $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'Inicios123';

 # CustomerUser1
  # (customer user ldap backend and settings)
  $Self->{CustomerUser1} = {
    Module => 'Kernel::System::CustomerUser::LDAP',
    Params => {
      # ldap host
      Host => '172.26.1.20',
      # ldap base dn
      BaseDN => 'OU=PraxisVitoria,DC=PraxisMad,DC=local',
      # search scope (one|sub)
      SSCOPE => 'sub',
      # The following is valid but would only be necessary if the
      # anonymous user does NOT have permission to read from the LDAP tree
      UserDN => 'CN=otrs_search,OU=PraxisVitoria,DC=PraxisMad,DC=local',
      UserPw => 'Inicios123',
      AlwaysFilter => '',
      SourceCharset => 'utf-8',
      DestCharset => 'iso-8859-1',
    },
    # customer uniq id
    CustomerKey => 'sAMAccountName',
    # customer #
    CustomerID => 'mail',
    ##CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
    CustomerUserListFields => ['cn', 'mail'],
    CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
    CustomerUserSearchPrefix => '',
    CustomerUserSearchSuffix => '*',
    CustomerUserSearchListLimit => 500,
    CustomerUserPostMasterSearchFields => ['mail'],
    CustomerUserNameFields => ['givenname', 'sn'],
    Map => [
      # note: Login, Email and CustomerID needed!
      # var, frontend, storage, shown, required, storage-type
      #[ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
      [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
      [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
      [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
      [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
      [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
      [ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
      #[ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ],
      #[ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
    ],
  };
estomagado
Znuny newbie
Posts: 44
Joined: 20 Sep 2019, 16:24
Znuny Version: 6.0.36
Real Name: Henrique Ulbrich
Company: Design for Context

Re: LDAP User authentication

Post by estomagado »

All your users in AD must have their emails entered in User > Properties. If the email field is blank, your AD users authenticate on OTRS but are unable to login.
--
Your pal
Estomagado

Znuny 6.0.36 Vanilla (no add-ons installed, no fancy customization)
MySQL BD backend for external customer users
LDAP (AD) backend for internal customer users & agents
Post Reply