Re: [otrs] LDAP for Windows 2000 AD

[Reto Mueller]

What does the log say? In otrs system log or the /var/log/messages

kind regards
Reto

Alfredo Frugone wrote:

I've setup LDAP to use AD for agent authentication, my configuration is:

Otrs Server: Debian lenny
AD: Windows 2000
Server: 172.27.110.123
Domain: mycompnay.com 
AD User group= OtrsAgent
User in group: my name
pass:12345678

User "my name" has adminsitrative privileges in windows AD.

I put this in the Config.pm file:

#  #
# insert your own config settings "here"   #
# config settings taken from Kernel/Config/Defaults.pm #
#  #

# Agent Authentication
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = '172.27.110.123'; 
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=mycompany, dc=com';

$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';

$Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=my 
name,ou=OtrsAgent,dc=mycompany,dc=com';

$Self->{'AuthModule::LDAP::SearchUserPw'} = '12345678';

 $Self->{'AuthModule::LDAP::GroupDN'} = 
'cn=OtrsAgent,dc=mycompany,dc=com';

 $Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
 $Self->{'AuthModule::LDAP::UserAttr'} = 'DN';

#  #

First login using DB, I set up a group in Otrs  admin with the name 
OtrsAgent, a usr "my name" with pass=12345678, then I changed the 
config.pm  for LDAP.


The login form changes, but if I put a user from OtrsAgent group I get:
Login failed! Your username or password was entered incorrectly
So my questions are:

1.- what's wrong in the Config.pm?
2.- How can I login to otrs? I'tried to login with Otrs or AD users, 
but is not possible.

3.- How can I check if LDAP client is running OK?

Any help is wellcome, I've digg the internet and manual, but I still 
cant find the aswers.


Saludos
Alfredo


-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/


-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/

Re: [otrs] is it mandatory for OTRS and mysql to be there in thesame box.

[Reto Mueller]

Marco Vannini wrote:

has the remote machine port 3306 open ?

On Fri, Jun 5, 2009 at 1:55 PM, Katta, Lokesh Katta Subramanyam 
mailto:lokesh...@cgi.com>> wrote:


Yes. I created an user with privileges to access from anywhere.
But the error I get is that the  is not allowed to
connect to mysql.

 


Best Regards,

Lokesh K S



*From:* otrs-boun...@otrs.org 
[mailto:otrs-boun...@otrs.org ] *On
Behalf Of *Marco Vannini
*Sent:* Friday, June 05, 2009 4:09 PM
*To:* User questions and discussions about OTRS.
*Subject:* Re: [otrs] is it mandatory for OTRS and mysql to be
there in thesame box.

 


does the remote mysql has an access available from any place for
the user that you are trying to use ?

On Fri, Jun 5, 2009 at 12:06 PM, Katta, Lokesh Katta Subramanyam
mailto:lokesh...@cgi.com>> wrote:

Hi All,

 


While creating the database using the installer, I am getting
errors if I mention the database location to be a different system
other than the localhost. Unable to get what could be wrong. Has
anyone tried it?

 


Best Regards,

 


Lokesh K S

 



-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/

 



-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/




-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/
In some distros the parameter bind-address is set to localhost in the 
the my.cnf. Comment it and restart mysql.


regards,
Reto
-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/

Re: [otrs] LDAP authentication not working

[Reto Mueller]

Hi,

there are any entries in the otrs log?

regards,
Reto

Emily Flynn wrote:


 Hi,

I can't seem to get LDAP authentication working for customer users.

It is a Windows 2000 domain with 2 domain controllers.

Can anyone see where I might be going wrong...?

Thanks

Emily


#  #
# Customer LDAP Authentication #
#  #

#Enable LDAP authentication for Customers / Users
  $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
  $Self->{'Customer::AuthModule::LDAP::Host'} = 'xx.xxx.xx.xx';
  $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 
'ou=user,ou=dublin,dc=int,dc=domain,dc=com';

  $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';

#The following is valid but would only be necessary if the
#anonymous user do NOT have permission to read from the LDAP tree
#  $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'otrsldap';
#  $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'password';

#CustomerUser
#(customer user database backend and settings)
$Self->{CustomerUser} = {
  Module => 'Kernel::System::CustomerUser::LDAP',
  Params => {
  Host => 'xx.xxx.xx.xx',
  BaseDN => 'ou=user,ou=dublin,dc=int,dc=domain,dc=com',
  SSCOPE => 'sub',
  UserDN =>'otrsldap',
  UserPw => 'password',
},
# customer unique id
CustomerKey => 'sAMAccountName',
# customer #
CustomerID => 'mail',
CustomerUserListFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchPrefix => '',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 250,
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
Map => [
  # note: Login, Email and CustomerID needed!
  # var, frontend, storage, shown, required, storage-type
  #[ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
  [ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var' ],
  [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
  [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
  [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
  [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
  #[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var' ],
  #[ 'UserAddress', 'Address', 'postaladdress', 1, 0, 'var' ],
  #[ 'UserComment', 'Comment', 'description', 1, 0, 'var' ],
],
  };
 
#Add the following lines when only users are allowed to login if they 
reside in the spicified security group
#Remove these lines if you want to provide login to all users 
specified in the User Base DN
#example: $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'ou=BaseOU, 
dc=example, dc=com';
  $Self->{'Customer::AuthModule::LDAP::GroupDN'} = 
'CN=OTRS_Users,OU=Security Groups,OU=Dublin,DC=int,DC=domain,DC=com';

  $Self->{'Customer::AuthModule::LDAP::AccessAttr'} = 'member';
  $Self->{'Customer::AuthModule::LDAP::UserAttr'} = 'DN'



-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/


-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/

Re: [otrs] How to enable System Log

[Reto Mueller]

As far as I know you will only be able to log into the log file on 
windows. You should find it under \otrs\var\log.


rallison wrote:

Windows

On Fri, 24 Apr 2009 08:46:26 +0200, Reto Mueller 
wrote:
  

Are you running otrs on a windows or a linux machine?

Regards,
Reto

rallison wrote:


In the Admin-Area, I select System Log is shows no information.  Is
  

there


an option to enable?

It shows colums headers.
[ System Log ]

Time Priority  FacilityMessage



I just enabled Performance Log and I can with information with no
  

problems.



Regards,
Ram



-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/


  

-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/



-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/

  



-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/

Re: [otrs] How to enable System Log

[Reto Mueller]

Are you running otrs on a windows or a linux machine?

Regards,
Reto

rallison wrote:

In the Admin-Area, I select System Log is shows no information.  Is there
an option to enable?

It shows colums headers.
[ System Log ] 

Time Priority  FacilityMessage 




I just enabled Performance Log and I can with information with no problems.



Regards,
Ram
 



-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/

  


-
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

NEW! ENTERPRISE SUBSCRIPTION - Get more information NOW!
http://www.otrs.com/en/support/enterprise-subscription/