Schlagwörter: #Ldap #authentication #ActiveDirectory #Bind
-
AutorBeiträge
-
-
6. Dezember 2022 um 11:39 Uhr - Views: 911 #14382
Hello,
i’m trying to configure Active Directory as back-end for agents authentication. I’ve created my agents manually in Otobo and added the LDAP part in Config.pm file but in logs i see this error message:
Message: Search failed! 000004DC: LdapErr: DSID-0C090A71, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v3839
I’ve tested my bind user credentials with ldapsearch and it works. These is my Ldap Auth part in config.pm:
$Self->{AuthModule} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=mydomain,dc=local';
$Self->{'AuthModule::LDAP::Host'} = 'dc1.mydomain.local';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'cn=ldapbind,cn=Users,dc=mydomain,DC=local';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'binduserpwd';
$Self->{'AuthModule::LDAP::AlwaysFilter'} = '(objectclass=user)';
$Self->{'AuthModule::LDAP::GroupDN'} = 'cn=otoboagent,cn=users,dc=mydomain,dc=local';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';
$Self->{'AuthModule::LDAP::Params'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};
Can you help me? Is there something I can check on AD side?
Thanks
-
8. Dezember 2022 um 18:43 Uhr #14394
Hello,
“First bind” is always something about the Search User, so SearchUserDN or SearchUserPw.
Kind regards,
Stefa -
14. Dezember 2022 um 16:05 Uhr #14417
Thanks, there was an error in my bind user DN! Now it works
-
-
AutorBeiträge
- Du musst angemeldet sein, um auf dieses Thema antworten zu können.