Running the latest OTRS on Win2003:

Please see the error below found in the otrs\var\logs\otrs.log file whenever I try to log in.

 

[Tue Oct 17 13:52:04 2006][Notice][Kernel::System::Auth::LDAP::Auth] User: testuser authentication failed, no LDAP group entry foundGroupDN='CN=pscerms, OU=PSC Users, OU=PSC, DC=sub, DC=domain, DC=com', Filter='(memberUid=testuser)'! (REMOTE_ADDR: 10.1.4.105).

 

I have no idea why the log would say that no LDAP group is found. I use ldp in Windows to search the Active Directory tree and do a direct copy of the DN info found there into the variable sting in the config file.

I am using a domain admin account for the SearchUserDN settings, so it shouldn’t be a search authentication issue.

 

The group is there in Active Directory and the user is in the group.

 

 

Config.pm -----------------------------------------------------------------------------

 

$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';

$Self->{'AuthModule::LDAP::Host'} = 'x.x.x.x';

$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=sub, dc=domain, dc=com';

$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';

           

$Self->{'AuthModule::LDAP::GroupDN'} = 'CN= pscerms, OU=PSC Users, OU=PSC, DC=corporate, DC=dalsym, DC=com';

$Self->{'AuthModule::LDAP::AccessAttr'} = 'memberUid';

$Self->{'AuthModule::LDAP::UserAttr'} = 'UID';

                 

$Self->{'AuthModule::LDAP::SearchUserDN'} = 'CN=FirstName LastName, OU=IT Users, OU=IT, DC=sub, DC=domain, DC=com';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'password';

 

Config.pm -----------------------------------------------------------------------------

Thanks!

Nathan Campbell
Systems Administrator
Dallas
Symphony Association
[EMAIL PROTECTED]
214-871-4026
http://www.dallassymphony.com

 

_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support orr consulting for your OTRS system?
=> http://www.otrs.com/

Reply via email to