RE: [otrs] installing otrs2
I agree. I did a manual install on Etch and the only problems I had were which perl module to install and some ldap/ad issues. FWIW here's my perl packages, these maybe more than is needed. (`dpkg --get-selections | grep perl`) libalgorithm-diff-perl install libapache2-mod-perl2install libapt-pkg-perl install libauthen-sasl-perl install libcompress-zlib-perl install libconvert-asn1-perlinstall libconvert-binhex-perl install libcrypt-passwdmd5-perl install libdate-pcalc-perl install libdbd-mysql-perl install libdbi-perl install libdevel-symdump-perl install libdigest-hmac-perl install libdigest-sha1-perl install libemail-valid-perl install libgd-gd2-noxpm-perlinstall libgd-graph-perlinstall libgd-text-perl install libhtml-parser-perl install libhtml-tagset-perl install libhtml-tree-perl install libio-stringy-perl install liblocale-gettext-perl install libmailtools-perl install libmime-perlinstall libnet-daemon-perl install libnet-dns-perl install libnet-domain-tld-perl install libnet-ip-perl install libnet-ldap-perlinstall libpdf-api2-perlinstall libperl5.8 install libplrpc-perl install libtext-charwidth-perl install libtext-diff-perl install libtext-iconv-perl install libtext-wrapi18n-perl install libtimedate-perlinstall liburi-perl install libwww-perl install libxml-parser-perl install perlinstall perl-base install perl-modulesinstall Regarding 'I would like to go live this week.' from the original poster, I don't see how you can expect to go live by the end of the week, if you're having install issues. Presumably you are going to tailor and test? UAT ? I'll happily help if I can, but http://catb.org/~esr/faqs/smart-questions.html Matthew Joyce 02 9382 0051 | IT Manager | Children's Cancer Institute Australia for Medical Research From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Lubel Sent: Tuesday, 7 August 2007 1:59 AM To: User questions and discussions about OTRS.org Subject: Re: [otrs] installing otrs2 Wow, Do a manual install. The only issues that a normal sysadmin would have is solving the perl dependencies. Im not sure exactly what a unix analyst is but if you cant manually install OTRS then you definitely don't want to use this long term in a production environment unless you purchase support. On 8/6/07 11:22 AM, "Laurent Minost" <[EMAIL PROTECTED]> wrote: Hi Andrew, As a Unix Systems Analyst, don't you feel we will miss a little bit of informations/details please ? :) Do you have some informations through Syslog and/or OTRS logs ( I don't know if with Etch package Syslog is the default logging method for OTRS) ? Did you check if OTRS database has been created automatically by post-script package install ? Does your mysql default installation is working properly ( do a simple test through from your machine) More basically, did you try the tarball package installation method ? or check the INSTALL file that comes with it ( all the installation process is listed in it) ? Thanks by advance, Best regards. Laurent Le lundi 06 août 2007 à 09:59 -0500, Andrew Meyer a écrit : Hi,
RE: [otrs] PostmasterPOP3 error: Can't use string ("mail") as an ARRAY
Maybe the problem is with the config, perhaps wherever 'mail' is being
provided should be ['mail'].
Matthew Joyce
02 9382 0051 | IT Manager | Children's Cancer Institute Australia for
Medical Research
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> Behalf Of Jeroen Prinse
> Sent: Monday, 30 July 2007 9:07 PM
> To: otrs@otrs.org
> Subject: [otrs] PostmasterPOP3 error: Can't use string
> ("mail") as an ARRAY
>
> Dear list,
>
> Maybe someone knows the answer to my problem.
>
> The situation:
>
> OS: CentOS
> OTRS: Version 2.2.1 + ITSM 1.0.1
>
> The postmaster account is setup succesfully and username and
> password is working. Manually running the postmasterpop3
> (./PostmasterPOP.pl) gives the following error:
>
> "Can't use string ("mail") as an ARRAY ref while "strict
> refs" in use at /opt/otrs/Kernel/System/CustomerUser/LDAP.pm
> line 240, line 225."
>
> Couldn't find anything wrong in LDAP.pm
>
> Please help me out :)
>
> Kind Regards,
>
> Jeroen Prinse.
>
>
> ___
> OTRS mailing list: otrs - Webpage: http://otrs.org/
> Archive: http://lists.otrs.org/pipermail/otrs
> To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
> Support or consulting for your OTRS system?
> =http://www.otrs.com/
>
___
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support or consulting for your OTRS system?
=> http://www.otrs.com/
RE: [otrs] Problems getting OTRS to fetch from POP3
I think you can increase dubug by adding the following the directive to
your config and restarting apache.
$Self->{'Debug'} = 0;
You can run otrs/bin/PostMasterPOP3.pm to force a pop3 pickup.
Matthew Joyce
02 9382 0051 | IT Manager | Children's Cancer Institute Australia for
Medical Research
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> Behalf Of Thomas Kristensen
> Sent: Sunday, 29 July 2007 8:12 AM
> To: otrs@otrs.org
> Subject: [otrs] Problems getting OTRS to fetch from POP3
>
> Hello guys
>
> Iam new to this OTRS but i looks nice and is what i need to
> handle my support email. But i got this problem, i cant the
> pop3 fetching to work.
> I get this error:
>
> [Sun Jul 29 00:02:36 2007][Error][main::FetchMail][162] Auth
> for user [EMAIL PROTECTED]@mail.cs-hosting.dk failed!
>
> And i know the password and username is the right ones
> because i an login from the web mail with that same data i gave OTRS.
> Is there a way to enable some more debug, maybe the error
> messge from the POP3 says that i cant login ?
>
> --
>
> Hilsen Thomas Kristensen
> CS-Hosting
>
> ___
> OTRS mailing list: otrs - Webpage: http://otrs.org/
> Archive: http://lists.otrs.org/pipermail/otrs
> To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
> Support or consulting for your OTRS system?
> => http://www.otrs.com/
>
___
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support or consulting for your OTRS system?
=> http://www.otrs.com/
[otrs] Email ticket issue
Hi, I have v2.2 running and I thought I had it working, however during my tests I've found something odd. Logged in as an agent, I click 'Email Ticket' If I enter a partial login name in the TO field, and search, it displays a dropdown of matching users full names. If I select and take one, it places the full name in the TO field and say it's invalid. Presumably because it's not a email addy. Why does it insert the full name (which maybe a Display Name from LDAP sync), and not the email address? Thanks Matthew Joyce 02 9382 0051 | IT Manager | Children's Cancer Institute Australia for Medical Research ___ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
[otrs] Forwarding tickets
Using v2.2 (+ITSM), I try to forward a ticket, but the from address is
[EMAIL PROTECTED]
I couldn't find any occurrence of this email in my config, but grep
finds
System/Email.pm:$Param{From} =
$Self->{ConfigObject}->Get('AdminEmail') || '[EMAIL PROTECTED]';
My config does include :
Config.pm:$Self->{'AdminEmail'} = '[EMAIL PROTECTED]';
Is this the correct directive to control who the ticket is forwarded by
?
Thanks
Matthew Joyce
02 9382 0051 | IT Manager | Children's Cancer Institute Australia for
Medical Research
___
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support or consulting for your OTRS system?
=> http://www.otrs.com/
[otrs] New 2.2.1 install, ldap/ad question.
Hi,
I've manually installed v2.2.1 on Debian Etch and I'm working my way
through the configuration process.
I have LDAP Authentication working for both Agents and Users.
What I'm not clear about is whether I need to create the initial agent
and user accounts in OTRS.
At the moment I do.
I have the AD users in two groups OTRS-Agents and OTRS-Users, I though
this distinction would be used to autocreate the initial accounts on
first login.
Is that right ?
Here the LDAP settings I'm using (thanks to all the usful posts in the
archive, etc)
#--#
# LDAP CONFIGURATION #
#--#
my $ldapuser='cn=otrs,cn=Users,dc=xxx,dc=xxx';
my $ldapuserpw='';
my $ldaphost='x.x.x.x';
my $basedn='OU=Institute,dc=xxx,dc=xxx';
my $agentgroupdn='cn=OTRS-Agents,ou=Groups,dc=xxx,dc=xxx';
my $custgroupdn='cn=OTRS-Users,ou=Groups,dc=xxx,dc=xxx';
#Agents to use LDAP for Auth
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = $ldaphost;
$Self->{'AuthModule::LDAP::BaseDN'} = $basedn;
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::SearchUserDN'} =$ldapuser;
$Self->{'AuthModule::LDAP::SearchUserPw'} = $ldapuserpw;
#Users to Auth using LDAP
$Self->{'Customer::AuthModule'} =
'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = $ldaphost;
$Self->{'Customer::AuthModule::LDAP::BaseDN'} =$basedn;
$Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} =$ldapuser;
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} =$ldapuserpw;
$Self->{CustomerUser} = {
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => $ldaphost,
BaseDN => $basedn,
SSCOPE => 'sub',
UserDN => $ldapuser,
UserPw => $ldapuserpw,
AlwaysFilter => '(mail=*)',
},
CustomerKey => 'sAMAccountName',
CustomerID => 'sAMAccountName',
CustomerUserListFields => ['displayName'],
CustomerUserSearchFields => ['displayName', 'sAMAccountName'],
CustomerUserPostMasterSearchFields => ['sAMAccountName'],
CustomerUserNameFields => ['givenName', 'sn'],
Map => [
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
[ 'UserCustomerID', 'CustomerID', 'Name', 0, 1, 'var' ],
],
};
$Self->{'AuthModule::LDAP::GroupDN'} =$agentgroupdn;
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';
$Self->{'Customer::AuthModule::LDAP::GroupDN'} = $custgroupdn;
$Self->{'Customer::AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'Customer::AuthModule::LDAP::UserAttr'} = 'DN';
# UserSyncLDAPMap
$Self->{UserSyncLDAPMap} = {
Firstname => 'givenName',
Lastname => 'sn',
Email => 'mail',
};
# UserSyncLDAPGroups
# (If "LDAP" was selected for AuthModule, you can specify
# initial user groups for first login.)
$Self->{UserSyncLDAPGroups} = [
'users',
];
I guess if we have to create accounts we will, but it would seem like a
step which could be automated as the group membership determines the
need and AD provides the details.
Help welcomed.
Thanks
Matthew Joyce
02 9382 0051 | IT Manager | Children's Cancer Institute Australia for
Medical Research
___
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support or consulting for your OTRS system?
=> http://www.otrs.com/
RE: [otrs] OTRS 2.2 on Debian Etch (Stable)
Could you post the output from `dpkg --get-selections` on Etch? I'm a little unclear which CPAN modules I need to install. Thanks Matthew Joyce 02 9382 0051 | IT Manager | Children's Cancer Institute Australia for Medical Research > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Jesús M. Navarro > Sent: Tuesday, 26 June 2007 10:04 AM > To: User questions and discussions about OTRS.org > Subject: Re: [otrs] OTRS 2.2 on Debian Etch (Stable) > > Hi, Matthew: > > El Martes, 26 de Junio de 2007 01:23, Matthew Joyce escribió: > > Hi, > > > > Can anyone confirm whether or not OTRS v2.2 can run on Debian Etch ? > > > [...] > > > I'm happy to have a crack at installing from source, but I just > > wondered if anyone had it working. > > I can confirm it: It does work both on Sarge and Etch (I > made a first test on Etch, and I'm currently running a pilot > install on Sarge with no major issues -well, there's one > regarding text strings within session variables and UTF8, but > nothing too serious). In both cases I worked out from source > tarballs. > -- > Jesús M. Navarro > Jefe de Sistemas y Soporte > Ándago Ingeniería - www.andago.com > > Teléfono: +34 916 011 373 (ext. 29) > Móvil: +34 666 431 088 > e-mail: [EMAIL PROTECTED] > ___ > OTRS mailing list: otrs - Webpage: http://otrs.org/ > Archive: http://lists.otrs.org/pipermail/otrs > To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs > Support or consulting for your OTRS system? > =http://www.otrs.com/ > ___ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
RE: [otrs] ldap customer auth
I found this post to be very helpful : http://www.opensubscriber.com/message/otrs@otrs.org/6822335.html Also these : http://www.opensubscriber.com/search?q=otrs+ldap&c=510 Matthew Joyce 02 9382 0051 | IT Manager | Children's Cancer Institute Australia for Medical Research From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pussy da Silva Green Sent: Monday, 25 June 2007 6:26 PM To: User questions and discussions about OTRS.org Subject: Re: [otrs] ldap customer auth Hello, I'm having some troubles to configure my OTRS no authenticate the users via LDAP. Can you send me some URLs that guided you and, perhaps, you config files? Cheers, On 6/23/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hello, I've ldap authentification set up and working perfectly (thanks to all those whose tutorials were available by Google). Now I'd like (but perhaps this is simply not possible ?) to let customers login from another LDAP server (AD actually), I can see them from an admin login but when they try to login it just looks in the first LDAP server (I must point out that these ADs are completely autonomous and unrelated). It would be great if it is possible but even without OTRS is fantastic ! Thanks in advance, Adam ___ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/ ___ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
[otrs] OTRS 2.2 on Debian Etch (Stable)
Hi, Can anyone confirm whether or not OTRS v2.2 can run on Debian Etch ? I see there is a v2.2 package in experimental, but I need to run it in stable. http://packages.debian.org/cgi-bin/search_packages.pl?searchon=names&ver sion=all&exact=1&keywords=otrs2 I'm happy to have a crack at installing from source, but I just wondered if anyone had it working. Thanks Matthew Joyce 02 9382 0051 | IT Manager | Children's Cancer Institute Australia for Medical Research ___ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
[otrs] Stats and reports
Hi, I'm evaluating v2.0.4 on Debian Etch, and I can't see any option for reporting or stats. Is there any reporting features, or is that something people work out for them selves from the database ? Thanks Matt ___ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
Re: [otrs] ORTS, LDAP and AD groups
ah, got it.
Thanks for your help!!
On 6/12/07, Matthew Joyce <[EMAIL PROTECTED]> wrote:
Sorry much *appreciated*.
However, I have not been able to login as a customer yet.
I used you kindly provided config, and really the only parts I changed
are those which pertain to my setup.
ldaphost,ldapuser,ldapuserpw, basedn, agent group dn, and user group dn.
I can login as an Agent, but not as a customer.
Here's the log output
I login...
Kernel::System::Auth::LDAP::Auth] User: mjoyce (CN=Matt
Joyce,OU=IT,OU=Operations,OU
=,DC=,DC=) authentication ok (REMOTE_ADDR: xxx.xxx.xxx.xxx).
I logout
[Notice][Kernel::System::AuthSession::DB::RemoveSessionID] Removed
SessionID 10ac457be93b8d79
1d1529f8552d0b0c13.
I try as customer...
[Notice][Kernel::System::Auth::LDAP::Auth] User: mjoyce.test
authentication failed, no LDAP group entry foundGroup
DN='cn=OTRS-Agents,ou=Groups,dc=,dc=',
Filter='(member=CN=mjoyce.test,OU=IT,OU=Operations,OU=,DC=xxx
,DC=)'! (REMOTE_ADDR: xxx.xxx.xxx.xxx).
To me this seem right my customer account mjoyce.test is not a member
of the agent group.
But why doesn't it test (and report in the log file) against the customer group.
Have I completely misunderstood something, customers are able to login
to login via the web right ?
thanks
On 6/12/07, Matthew Joyce <[EMAIL PROTECTED]> wrote:
> Much unappreciated Greg, I'm going to work through this today.
> I have the Agent group working, but not the customer group.
>
> With your setup, are Agents in both groups?
>
> Thanks
>
>
> On 6/8/07, Greg Horne <[EMAIL PROTECTED]> wrote:
> >
> >
> > Sorry to hear its going slow. Had fun also with getting it to work using
> > AD. You did not include all of your config for LDAP, so I'll just cover a
> > few general things.
> >
> > Setup a user account that can browse AD's LDAP. (username - OTRS_Account
> > password - whatever) you may want to make it never expire.
> >
> > Setup two groups, one for Customers and one for Agents.
> >
> > Make AD users members of the Customers group.
> >
> > Add AD users to the Agents group that you want to use the system as an
> > agent.
> >
> > Create a user in OTRS and add to the admin group using the same username
> > that you intend to login to AD with.
> >
> > Modify your Config.pm file adding the following to allow agents and
> > customers/users to login using LDAP. Modify for your structure. Taken from
> > my setup, add and modify as needed. Just an example:
> > ## Start of Config.pm
> >
> >
> > #we want to use LDAP for Auth
> > $Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
> > $Self->{'AuthModule::LDAP::Host'} = 'ldap.domain.com';
> > $Self->{'AuthModule::LDAP::BaseDN'} =
> > 'dc=domainname,dc=win,dc=domain,dc=com';
> > $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
> > #The username and password of the user you setup to access LDAP
> > information in AD
> > $Self->{'AuthModule::LDAP::SearchUserDN'} =
> > 'CN=otrs_helpdesk,OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com';
> > $Self->{'AuthModule::LDAP::SearchUserPw'} = 'whateverYourPasswordIs';
> >
> > #We want our Customer/users to Auth using LDAP
> > $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
> >
> > $Self->{'Customer::AuthModule::LDAP::Host'} = 'ldap.domain.com';
> > $Self->{'Customer::AuthModule::LDAP::BaseDN'} =
> > 'OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com';
> > $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
> > $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} =
> > 'CN=otrs_helpdesk,OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com';
> > $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} =
> > 'whateverYourPasswordIs';
> >
> > $Self->{CustomerUser} = {
> > Module => 'Kernel::System::CustomerUser::LDAP',
> > Params => {
> > Host => 'ldap.domain.com',
> > BaseDN => 'OU=Users,OU=OldTown,DC=domain,DC=win,DC=domain,DC=com',
> > SSCOPE => 'sub',
> > UserDN =>
> > 'CN=otrs_helpdesk,OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com',
> > UserPw => 'whateverYourPasswordIs',
> >
Re: [otrs] ORTS, LDAP and AD groups
Sorry much *appreciated*.
However, I have not been able to login as a customer yet.
I used you kindly provided config, and really the only parts I changed
are those which pertain to my setup.
ldaphost,ldapuser,ldapuserpw, basedn, agent group dn, and user group dn.
I can login as an Agent, but not as a customer.
Here's the log output
I login...
Kernel::System::Auth::LDAP::Auth] User: mjoyce (CN=Matt
Joyce,OU=IT,OU=Operations,OU
=,DC=,DC=) authentication ok (REMOTE_ADDR: xxx.xxx.xxx.xxx).
I logout
[Notice][Kernel::System::AuthSession::DB::RemoveSessionID] Removed
SessionID 10ac457be93b8d79
1d1529f8552d0b0c13.
I try as customer...
[Notice][Kernel::System::Auth::LDAP::Auth] User: mjoyce.test
authentication failed, no LDAP group entry foundGroup
DN='cn=OTRS-Agents,ou=Groups,dc=,dc=',
Filter='(member=CN=mjoyce.test,OU=IT,OU=Operations,OU=,DC=xxx
,DC=)'! (REMOTE_ADDR: xxx.xxx.xxx.xxx).
To me this seem right my customer account mjoyce.test is not a member
of the agent group.
But why doesn't it test (and report in the log file) against the customer group.
Have I completely misunderstood something, customers are able to login
to login via the web right ?
thanks
On 6/12/07, Matthew Joyce <[EMAIL PROTECTED]> wrote:
Much unappreciated Greg, I'm going to work through this today.
I have the Agent group working, but not the customer group.
With your setup, are Agents in both groups?
Thanks
On 6/8/07, Greg Horne <[EMAIL PROTECTED]> wrote:
>
>
> Sorry to hear its going slow. Had fun also with getting it to work using
> AD. You did not include all of your config for LDAP, so I'll just cover a
> few general things.
>
> Setup a user account that can browse AD's LDAP. (username - OTRS_Account
> password - whatever) you may want to make it never expire.
>
> Setup two groups, one for Customers and one for Agents.
>
> Make AD users members of the Customers group.
>
> Add AD users to the Agents group that you want to use the system as an
> agent.
>
> Create a user in OTRS and add to the admin group using the same username
> that you intend to login to AD with.
>
> Modify your Config.pm file adding the following to allow agents and
> customers/users to login using LDAP. Modify for your structure. Taken from
> my setup, add and modify as needed. Just an example:
> ## Start of Config.pm
>
>
> #we want to use LDAP for Auth
> $Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
> $Self->{'AuthModule::LDAP::Host'} = 'ldap.domain.com';
> $Self->{'AuthModule::LDAP::BaseDN'} =
> 'dc=domainname,dc=win,dc=domain,dc=com';
> $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
> #The username and password of the user you setup to access LDAP
> information in AD
> $Self->{'AuthModule::LDAP::SearchUserDN'} =
> 'CN=otrs_helpdesk,OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com';
> $Self->{'AuthModule::LDAP::SearchUserPw'} = 'whateverYourPasswordIs';
>
> #We want our Customer/users to Auth using LDAP
> $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
>
> $Self->{'Customer::AuthModule::LDAP::Host'} = 'ldap.domain.com';
> $Self->{'Customer::AuthModule::LDAP::BaseDN'} =
> 'OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com';
> $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
> $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} =
> 'CN=otrs_helpdesk,OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com';
> $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} =
> 'whateverYourPasswordIs';
>
> $Self->{CustomerUser} = {
> Module => 'Kernel::System::CustomerUser::LDAP',
> Params => {
> Host => 'ldap.domain.com',
> BaseDN => 'OU=Users,OU=OldTown,DC=domain,DC=win,DC=domain,DC=com',
> SSCOPE => 'sub',
> UserDN =>
> 'CN=otrs_helpdesk,OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com',
> UserPw => 'whateverYourPasswordIs',
> },
> CustomerKey => 'sAMAccountName',
> CustomerID => 'userPrincipalName',
> CustomerUserListFields => ['displayName', 'userPrincipalName'],
> CustomerUserSearchFields => ['displayName', 'userPrincipalName'],
> CustomerUserPostMasterSearchFields => userPrincipalName,
> CustomerUserNameFields => ['givenNa
Re: [otrs] ORTS, LDAP and AD groups
Much unappreciated Greg, I'm going to work through this today.
I have the Agent group working, but not the customer group.
With your setup, are Agents in both groups?
Thanks
On 6/8/07, Greg Horne <[EMAIL PROTECTED]> wrote:
Sorry to hear its going slow. Had fun also with getting it to work using
AD. You did not include all of your config for LDAP, so I'll just cover a
few general things.
Setup a user account that can browse AD's LDAP. (username - OTRS_Account
password - whatever) you may want to make it never expire.
Setup two groups, one for Customers and one for Agents.
Make AD users members of the Customers group.
Add AD users to the Agents group that you want to use the system as an
agent.
Create a user in OTRS and add to the admin group using the same username
that you intend to login to AD with.
Modify your Config.pm file adding the following to allow agents and
customers/users to login using LDAP. Modify for your structure. Taken from
my setup, add and modify as needed. Just an example:
## Start of Config.pm
#we want to use LDAP for Auth
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = 'ldap.domain.com';
$Self->{'AuthModule::LDAP::BaseDN'} =
'dc=domainname,dc=win,dc=domain,dc=com';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
#The username and password of the user you setup to access LDAP
information in AD
$Self->{'AuthModule::LDAP::SearchUserDN'} =
'CN=otrs_helpdesk,OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'whateverYourPasswordIs';
#We want our Customer/users to Auth using LDAP
$Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
$Self->{'Customer::AuthModule::LDAP::Host'} = 'ldap.domain.com';
$Self->{'Customer::AuthModule::LDAP::BaseDN'} =
'OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com';
$Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'Customer::AuthModule::LDAP::SearchUserDN'} =
'CN=otrs_helpdesk,OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com';
$Self->{'Customer::AuthModule::LDAP::SearchUserPw'} =
'whateverYourPasswordIs';
$Self->{CustomerUser} = {
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => 'ldap.domain.com',
BaseDN => 'OU=Users,OU=OldTown,DC=domain,DC=win,DC=domain,DC=com',
SSCOPE => 'sub',
UserDN =>
'CN=otrs_helpdesk,OU=Users,OU=OldTown,DC=ot,DC=win,DC=domain,DC=com',
UserPw => 'whateverYourPasswordIs',
},
CustomerKey => 'sAMAccountName',
CustomerID => 'userPrincipalName',
CustomerUserListFields => ['displayName', 'userPrincipalName'],
CustomerUserSearchFields => ['displayName', 'userPrincipalName'],
CustomerUserPostMasterSearchFields => userPrincipalName,
CustomerUserNameFields => ['givenName', 'sn'],
#the following must map to valid fields in your AD
(givenname,sn,sAMAccountName,...)
Map => [
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
[ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
[ 'UserEmail', 'Email', 'userPrincipalName', 1, 1, 'var' ],
[ 'UserCustomerID', 'CustomerID', 'userPrincipalName', 0, 1, 'var' ],
],
};
#OK now lets have our agents use LDAP
$Self->{'AuthModule::LDAP::GroupDN'} =
'CN=helpdesk_agents,OU=Groups,OU=OldTown,DC=domain,DC=win,DC=domain,DC=com';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';
$Self->{'Customer::AuthModule::LDAP::GroupDN'} =
'CN=helpdesk_customers,OU=Groups,OU=OldTown,DC=domain,DC=win,DC=domain,DC=co
m';
$Self->{'Customer::AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'Customer::AuthModule::LDAP::UserAttr'} = 'DN';
# UserSyncLDAPMap
# (map if agent should create/synced from LDAP to DB after login must
match your AD)
$Self->{UserSyncLDAPMap} = {
# DB -> LDAP
Firstname => 'givenName',
Lastname => 'sn',
Email => 'userPrincipalName',
};
[otrs] ORTS, LDAP and AD groups
Hi all,
I'm having glacial progress with getting otrs (Debian) to authenticate
with Active Directory.
I've have trawled the archives and I'm still not even sure the setup
I'm after can be done.
I have a standard structure of OUs
Customer and Agent account are distributed throughout the OUs
I'd like to put Agents in a group to distinguish then from Customers
The login IDs should be their samAccountName
Group membership can be derived from the group attribute 'member'
which contains users DNs.
here's the config...
$Self->{'AuthModule::LDAP::UID'} = 'samAccountName';
$Self->{'AuthModule::LDAP::GroupDN'} =
'cn=OTRS-Agents,ou=Groups,dc=domain,dc=local';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'distinguishedname';
Looking at the log, it seems membership is being tested using the
Login ID and failing.
Jun 8 11:37:28 vm-helpdesk OTRS-CGI-10[13668]:
[Notice][Kernel::System::Auth::LDAP::Auth] User: mjoyce authentication
failed, no LDAP group
entry foundGroupDN='cn=OTRS-Agents,ou=Groups,dc=domain,dc=local',
Filter='(member=mjoyce)'! (REMOTE_ADDR: x.x.x.x).
Have I misunderstood how this authentication process works ?
Can anyone advise me ?
Thanks
Matt
___
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support or consulting for your OTRS system?
=> http://www.otrs.com/
[otrs] POP3 pickups not working
Hi, I've literally just installed OTRS and I'm trying to setup a pop3 mailbox pickup. OTRS 2.0.4p01-17 (on Debian), Mailbox on Exchange.2003. I've created a mailbox on our mail system Mail arrives in the mailbox. I can login and check it via a pc client. Using the same credentials on the OTRS system, I see the following error in the system log. Wed Jun 6 16:00:01 2007 error OTRS-PM3-10 Can't connect to mail.domain.com From a shell : # ./PostMasterPOP3.pl ERROR: OTRS-PM3-10 Perl: 5.8.8 OS: linux Time: Wed Jun 6 16:01:24 2007 Message: Can't connect to mail.domain.com Traceback (8805): Module: main::FetchMail (v1.17) Line: 154 Module: ./PostMasterPOP3.pl (v1.17) Line: 126 connecting via fetchmail works... # fetchmail -c -u helpdesk mail.domain.com 1 message (1 seen) for helpdesk at mail.domain.com I don't understand why OTRS is having difficulty accessing the mailbox. Can anyone suggest my next step ? Thanks ___ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
[otrs] Unregistered customers ?
Hi, I've been looking for a new ticketing system over the past few months and I keep coming back to OTRS. We have have multiple support teams supporting internal customers, that seem simple enough. We also would like to support external customers, but we don't want to create customer accounts prior to use. We're a non-profit, we have donors who email us questions and requests, we want to capture these conversations in the ticketing system. Does OTRS support unknown customers creating tickets via email ? Does it automatically create a new customer account based on the email address (that would be fine) ? Many thanks Matt ___ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support or consulting for your OTRS system? => http://www.otrs.com/
