Помогите с авторизацией хотя бы агенов через AD

[ROMANOFF174]

Доброго времени суток.
Имеется установленная OTRS на WinServ2008R2+mySQL+Apache (паком)
Помял всю голову с авторизацией, перепробовал кучу конфигов, перелопатил тьму форумов, победить не удалось ни авторизацию агентов. Need help.
Что сделано:
Созданы группа в AD
- OTRS_agents
в ней юзеры:
- OTRS_read с правами "Администратор домена"
- test1
Создана группа OTRS_customers
- test2

Создан локальный пользователь БД в ОТРС: OTRS_read с полными правами и паролем как и у доменного OTRS_read

[ROMANOFF174]

Config.pm Часть 2

Код: Выделить всё

# --
# Kernel/Config.pm - Config file for OTRS kernel
# Copyright (C) 2001-2011 OTRS AG, http://otrs.org/
# --
# $Id: Config.pm.dist,v 1.25 2011/09/16 10:58:28 mg Exp $
# --
# This software comes with ABSOLUTELY NO WARRANTY. For details, see
# the enclosed file COPYING for license information (AGPL). If you
# did not receive this file, see http://www.gnu.org/licenses/agpl.txt.
# --
#  Note:
#
#  -->> OTRS does have a lot of config settings. For more settings
#       (Notifications, Ticket::ViewAccelerator, Ticket::NumberGenerator,
#       LDAP, PostMaster, Session, Preferences, ...) see
#       Kernel/Config/Defaults.pm and copy your wanted lines into "this"
#       config file. This file will not be changed on update!
#
# --

package Kernel::Config;

use utf8;

sub Load {
    my $Self = shift;
    # ---------------------------------------------------- #
    # ---------------------------------------------------- #
    #                                                      #
    #         Start of your own config options!!!          #
    #                                                      #
    # ---------------------------------------------------- #
    # ---------------------------------------------------- #

    # ---------------------------------------------------- #
    # database settings                                    #
    # ---------------------------------------------------- #
    # DatabaseHost
    # (The database host.)
    $Self->{'DatabaseHost'} = 'localhost';
    # Database
    # (The database name.)
    $Self->{'Database'} = 'otrs';
    # DatabaseUser
    # (The database user.)
    $Self->{'DatabaseUser'} = 'otrs';
    # DatabasePw
    # (The password of database user. You also can use bin/otrs.CryptPassword.pl
    # for crypted passwords.)
    $Self->{'DatabasePw'} = 'скрыт';
    # DatabaseDSN
    # (The database DSN for MySQL ==> more: "man DBD::mysql")
    $Self->{DatabaseDSN} = "DBI:mysql:database=$Self->{Database};host=$Self->{DatabaseHost};";

    # (The database DSN for PostgreSQL ==> more: "man DBD::Pg")
    # if you want to use a local socket connection
#    $Self->{DatabaseDSN} = "DBI:Pg:dbname=$Self->{Database};";
    # if you want to use a tcpip connection
#    $Self->{DatabaseDSN} = "DBI:Pg:dbname=$Self->{Database};host=$Self->{DatabaseHost};";
    # if you have PostgresSQL 8.1 or earlier, activate the legacy driver with this line:
#    $Self->{DatabasePostgresqlBefore82} = 1;

    # ---------------------------------------------------- #
    # fs root directory
    # ---------------------------------------------------- #
    $Self->{Home} = 'C:/OTRS/OTRS';

    # ---------------------------------------------------- #
    # insert your own config settings "here"               #
    # config settings taken from Kernel/Config/Defaults.pm #
    # ---------------------------------------------------- #
    # $Self->{SessionUseCookie} = 0;
    # $Self->{CheckMXRecord} = 0;

    # ---------------------------------------------------- #

    # ---------------------------------------------------- #
    # data inserted by installer                           #
    # ---------------------------------------------------- #

    $Self->{LogModule}          = 'Kernel::System::Log::File';
    $Self->{LogModule::LogFile} = 'C:/OTRS/OTRS/var/log/otrs.log';
    # $DIBI$

[ROMANOFF174]

Config.pm Часть 2

Код: Выделить всё

   # ---------------------------------------------------- #
    # ---------------------------------------------------- #
    #                                                      #
    #           End of your own config options!!!          #
    #                                                      #
    # ---------------------------------------------------- #
    # ---------------------------------------------------- #
}

# ---------------------------------------------------- #
# needed system stuff (don't edit this)                #
# ---------------------------------------------------- #
use strict;
use warnings;

use vars qw(@ISA $VERSION);
$VERSION = qw($Revision: 1.25 $)[1];

use Kernel::Config::Defaults;
push (@ISA, 'Kernel::Config::Defaults');

1;

my $Self = shift;
# Авторизация АГЕНТОВ через LDAP#
$Self->{'AuthModule1'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host1'} = '192.168.0.2';   
$Self->{'AuthModule::LDAP::BaseDN1'} = 'DC=скрыт,DC=скрыт';
$Self->{'AuthModule::LDAP::UID1'} = 'sAMAccountName';

$Self->{'AuthModule::LDAP::GroupDN1'} = 'DN=OTRS_agents,DN=Users,DC=скрыт,DC=скрыт';  
$Self->{'AuthModule::LDAP::AccessAttr1'} = 'member';  
$Self->{'AuthModule::LDAP::UserAttr1'} = 'DN';

$Self->{'AuthModule::LDAP::SearchUserDN1'} = 'CN=OTRS_read,OU=Users,DC=chzti,DC=скрыт';  
$Self->{'AuthModule::LDAP::SearchUserPw1'} = 'скрыт';
$Self->{'AuthModule::LDAP::AlwaysFilter1'} = '';


$Self->{'AuthModule::LDAP::Params1'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};

$Self->{'AuthSyncModule1'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host1'} = '192.168.0.2';
$Self->{'AuthSyncModule::LDAP::BaseDN1'} = 'DC=скркрытыт,DC=с';
$Self->{'AuthSyncModule::LDAP::UID1'} = 'sAMAccountName';
$Self->{'AuthSyncModule::LDAP::SearchUserDN1'} = 'CN=OTRS_read,CN=Users,DC=скрыт,DC=скрыт';
$Self->{'AuthSyncModule::LDAP::SearchUserPw1'} = 'скрыт';

$Self->{'AuthSyncModule::LDAP::UserSyncMap1'} = {
UserFirstname => 'givenName',
UserLastname => 'sn',
UserEmail => 'mail',
};

    $Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups1'} = [
        'users',
    ];


# -----------------------------------------------------#


 

[ROMANOFF174]

Лог APACHE

Код: Выделить всё

ERROR: OTRS-CGI-10 Perl: 5.12.3 OS: MSWin32 Time: Tue Nov 27 11:04:32 2012

 Message: No UserID found for 'test1'!

 Traceback (2856): 
   Module: Kernel::System::User::UserLookup (v1.121) Line: 797
   Module: Kernel::System::Auth::Auth (v1.56) Line: 244
   Module: Kernel::System::Web::InterfaceAgent::Run (v1.64) Line: 204
   Module: ModPerl::ROOT::ModPerl::Registry::C_3a_OTRS_OTRS_bin_cgi_2dbin_index_2epl::handler (unknown version) Line: 46
   Module: (eval) (v1.90) Line: 204
   Module: ModPerl::RegistryCooker::run (v1.90) Line: 204
   Module: ModPerl::RegistryCooker::default_handler (v1.90) Line: 170
   Module: ModPerl::Registry::handler (v1.99) Line: 31

[ROMANOFF174]

Лог OTRS

Код: Выделить всё

[Tue Nov 27 10:31:57 2012][Notice][Kernel::System::Auth::DB::Auth] User: otrs_read@скрыт.скрыт doesn't exist or is invalid!!! (REMOTE_ADDR: 192.168.0.233)
[Tue Nov 27 10:31:57 2012][Error][Kernel::System::User::UserLookup][797] No UserID found for 'otrs_read@скрыт.скрыт'!
[Tue Nov 27 10:43:44 2012][Notice][Kernel::System::CustomerAuth::DB::Auth] CustomerUser: No auth record in 'customer_user' for 'test1' (REMOTE_ADDR: 192.168.0.233)
[Tue Nov 27 10:43:53 2012][Notice][Kernel::System::CustomerAuth::DB::Auth] CustomerUser: No auth record in 'customer_user' for 'test1@скрыт.скрыт' (REMOTE_ADDR: 192.168.0.233)
[Tue Nov 27 10:44:02 2012][Notice][Kernel::System::CustomerAuth::DB::Auth] CustomerUser: No auth record in 'customer_user' for 'OTRS_read' (REMOTE_ADDR: 192.168.0.233)
[Tue Nov 27 11:04:32 2012][Notice][Kernel::System::Auth::DB::Auth] User: test1 doesn't exist or is invalid!!! (REMOTE_ADDR: 192.168.0.233)
[Tue Nov 27 11:04:32 2012][Error][Kernel::System::User::UserLookup][797] No UserID found for 'test1'!
[Tue Nov 27 11:04:56 2012][Notice][Kernel::System::CustomerAuth::DB::Auth] CustomerUser: No auth record in 'customer_user' for 'test' (REMOTE_ADDR: 192.168.0.233)

[ROMANOFF174]

Up!!!!

[alexus]

End of your own config options!!!
Эта строчка означает, что ниже нее ничего их ваших настроек не должно находиться!

[ROMANOFF174]

Спасибо, помогло