LDAP err: In order to perform this operation a successful bind must be completed

[Stefano Grespan]

Hello,

i’m trying to configure Active Directory as back-end for agents authentication. I’ve created my agents manually in Otobo and added the LDAP part in Config.pm file but in logs i see this error message:

Message: Search failed! 000004DC: LdapErr: DSID-0C090A71, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v3839

I’ve tested my bind user credentials with ldapsearch and it works. These is my Ldap Auth part in config.pm:

$Self->{AuthModule} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=mydomain,dc=local';
$Self->{'AuthModule::LDAP::Host'} = 'dc1.mydomain.local';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=ldapbind,cn=Users,dc=mydomain,DC=local';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'binduserpwd';
$Self->{'AuthModule::LDAP::AlwaysFilter'} = '(objectclass=user)';

$Self->{'AuthModule::LDAP::GroupDN'} = 'cn=otoboagent,cn=users,dc=mydomain,dc=local';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';

$Self->{'AuthModule::LDAP::Params'} = {
  port => 389,
  timeout => 120,
  async => 0,
  version => 3,
};

Can you help me? Is there something I can check on AD side?

Thanks

[Stefan Abel]

Hello,

„First bind“ is always something about the Search User, so SearchUserDN or SearchUserPw.

Kind regards,
Stefa

[Stefano Grespan]

Thanks, there was an error in my bind user DN! Now it works

[Author]

Posts