Hello,
i’m trying to configure Active Directory as back-end for agents authentication. I’ve created my agents manually in Otobo and added the LDAP part in Config.pm file but in logs i see this error message:
Message: Search failed! 000004DC: LdapErr: DSID-0C090A71, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v3839
I’ve tested my bind user credentials with ldapsearch and it works. These is my Ldap Auth part in config.pm:
$Self->{AuthModule} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=mydomain,dc=local';
$Self->{'AuthModule::LDAP::Host'} = 'dc1.mydomain.local';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=ldapbind,cn=Users,dc=mydomain,DC=local';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'binduserpwd';
$Self->{'AuthModule::LDAP::AlwaysFilter'} = '(objectclass=user)';
$Self->{'AuthModule::LDAP::GroupDN'} = 'cn=otoboagent,cn=users,dc=mydomain,dc=local';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';
$Self->{'AuthModule::LDAP::Params'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};
Can you help me? Is there something I can check on AD side?
Thanks