Topic Resolution: Resolved
Viewing 2 reply threads
  • Author
    Posts
    • #14382
      Stefano Grespan
      Participant

        Hello,

        i’m trying to configure Active Directory as back-end for agents authentication. I’ve created my agents manually in Otobo and added the LDAP part in Config.pm file but in logs i see this error message:

        Message: Search failed! 000004DC: LdapErr: DSID-0C090A71, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v3839

        I’ve tested my bind user credentials with ldapsearch and it works. These is my Ldap Auth part in config.pm:

        $Self->{AuthModule} = 'Kernel::System::Auth::LDAP';
        $Self->{'AuthModule::LDAP::BaseDN'} = 'dc=mydomain,dc=local';
        $Self->{'AuthModule::LDAP::Host'} = 'dc1.mydomain.local';
        $Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
        $Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=ldapbind,cn=Users,dc=mydomain,DC=local';
        $Self->{'AuthModule::LDAP::SearchUserPw'} = 'binduserpwd';
        $Self->{'AuthModule::LDAP::AlwaysFilter'} = '(objectclass=user)';

        $Self->{'AuthModule::LDAP::GroupDN'} = 'cn=otoboagent,cn=users,dc=mydomain,dc=local';
        $Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
        $Self->{'AuthModule::LDAP::UserAttr'} = 'DN';

        $Self->{'AuthModule::LDAP::Params'} = {
          port => 389,
          timeout => 120,
          async => 0,
          version => 3,
        };

        Can you help me? Is there something I can check on AD side?

        Thanks

      • #14394
        Stefan Abel
        Moderator

          Hello,

          “First bind” is always something about the Search User, so SearchUserDN or SearchUserPw.

          Kind regards,
          Stefa

        • #14417
          Stefano Grespan
          Participant

            Thanks, there was an error in my bind user DN! Now it works

        Viewing 2 reply threads
        • You must be logged in to reply to this topic.