OTRS LDAP Binding Issue with AD

[logibooze]

Hello Community,

after searching far and wide for a Solution for my Problem, im writing you for help.
Nothing i have found for this Topic has helped me.

I set up a new Server with CentOS 7 and OTRS 6.0.9.
Then i wanted to connect it via LDAP to our Windows AD.

Here is what i did in the Config.pm:

Code: Select all

$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = 'ad.mydomain.local';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=mydomain,dc=local';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';

#IT@mydomain.de is the actual CN
$Self->{'AuthModule::LDAP::GroupDN'} = 'cn=IT@mydomain.de,ou=Gruppen Verteiler,ou=Gruppen,dc=mydomain,dc=local';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'sAMAccountName';

$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'CN=LDAP Lookup,CN=Users,DC=mydomain,DC=local';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'XXXXXXX';
$Self->{'AuthModule::LDAP::Params'} = {
        port => 389,
        timeout => 120,
        async => 0,
        version => 3,
};

Here is the Error Message im getting in the otrs.log:

Code: Select all

[Error][Kernel::System::Auth::LDAP::Auth][215] Search failed! 000004DC: LdapErr: DSID-0C0907C2, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v2580

After some searching i found out that the reason should be the SearchUserDN and or PW so i tried like recomended:
-Different User
-MYDOMAIN\ldap
-ldap@mydomain.local
-I Quadruplechecked the PW
-I checked with LPD.exe if the authentication with the ldap user works and it did.

Also i tried different things for UsrAttr: userPrincipalName, DN and uid

Is there something i am missing? Is there a Error in my config? I hope you can help me.

If theres something i have forgotten to tell you pls tell me.

Kind Regards Logibooze

[logibooze]

Hello again,

i just realized my mistake and feel realy stupid for it.
The problem was that i had written 'Customer' in front of Auth Module for the SearchUser.

After removing that there is no longer an error in the log.

But now i have a different Problem: Even now that everything is configured i cant log in.
On the Web Page it says Wrong Username or Password but no error in the log. i definitly put the right credentials in.

I dont understand why its happening.
Is there another log for that to look at?