Очередной косяк-с с АД-бакэнд

[Syfer43]

Проблема. бьюсь вторую неделю, перечитал и перепробовал конфигов штук 50, все бестолку.
Конфиг:

Код: Выделить всё

$Self->{'AuthModule1'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host1'} = '192.168.100.249';
$Self->{'AuthModule::LDAP::BaseDN1'} = 'DC=usib,DC=local';
$Self->{'AuthModule::LDAP::UID1'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::GroupDN1'} = 'OU=Admins,DC=usib,DC=local';
$Self->{'AuthModule::LDAP::AccessAttr1'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr1'} = 'DN';
$Self->{'AuthModule::LDAP::SearchUserDN1'} = 'CN=otrs,CN=Users,DC=usib,DC=local';
$Self->{'AuthModule::LDAP::SearchUserPw1'} = 'Aa123123';
$Self->{'AuthModule::LDAP::AlwaysFilter1'} = '';
$Self->{'AuthModule::LDAP::Params1'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};
$Self->{'AuthSyncModule1'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host1'} = '192.168.100.249';
$Self->{'AuthSyncModule::LDAP::BaseDN1'} = 'DC=usib,DC=local';
$Self->{'AuthSyncModule::LDAP::UID1'} = 'sAMAccountName';
$Self->{'AuthSyncModule::LDAP::SearchUserDN1'} = 'CN=otrs,CN=Users,DC=usib,DC=local';
$Self->{'AuthSyncModule::LDAP::SearchUserPw1'} = 'Aa123123';
$Self->{'AuthSyncModule::LDAP::UserSyncMap1'} = {
UserFirstname => 'givenName',
UserLastname => 'sn',
UserEmail => 'mail',
};
    $Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups1'} = [
        'users',
    ];

[Syfer43]

кусок номер два:

Код: Выделить всё

    $Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups1'} = [
        'users',
    ];

    $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
    $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'dc=usib,dc=local';
    $Self->{'Customer::AuthModule::LDAP::Host'} = 'sibsol-srv-dc.usib.local';
    $Self->{'Customer::AuthModule::LDAP::UID'} = 'sAMAccountName';
    $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'CN=otrs,CN=russalt_users,DC=usib,DC=local';
    $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'Aa123123';
    $Self->{CustomerUser} = {
    Name => 'Active Directory',
    Module => 'Kernel::System::CustomerUser::LDAP',
    Params => {
    Host => '192.168.100.249',
    BaseDN => 'dc=usib,dc=local',
    SSCOPE => 'sub',
    UserDN => 'CN=otrs,CN=Users,DC=usib,DC=local',
    UserPw => 'Aa123123',
AlwaysFilter => '(&(objectcategory=person)(objectclass=user)(mail=*)(!(description=built-In))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))',
    SourceCharset => 'utf-8',
    DestCharset => 'utf-8',
    },
    ReadOnly => 1,
    CustomerKey => 'sAMAccountName',
    CustomerID => 'mail',
    CustomerUserListFields => ['givenname', 'sn', 'mail'],
    CustomerUserSearchFields => ['displayName','sAMAccountName','givenName', 'sn', 'mail','description'],
    CustomerUserSearchPrefix => '',
    CustomerUserSearchSuffix => '*',
    CustomerUserPostMasterSearchFields => ['displayName','sAMAccountName','givenName','sn','mail','description'],
    CustomerUserNameFields => ['givenname', 'sn'],
    CustomerUserExcludePrimaryCustomerID => 0,
    CacheTTL => 120,
    Map => [
    [ 'UserSalutation', 'Title', 'title', 1, 0, 'var' ],
    [ 'UserFirstname', 'Firstname', 'givenName', 1, 1, 'var' ],
    [ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var' ],
    [ 'UserLogin', 'Login', 'sAMAccountName', 1, 1, 'var' ],
    [ 'UserEmail', 'Email', 'mail', 1, 1, 'var' ],
    [ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var' ],
    [ 'UserPhone', 'Phone', 'telephoneNumber', 1, 0, 'var' ],
    [ 'UserAddress', 'Address', 'postalAddress', 1, 0, 'var' ],
    [ 'UserStreet', 'Street', 'streetAddress', 1, 0, 'var' ],
    [ 'UserCity', 'City', 'l', 1, 0, 'var' ],
    [ 'UserZip', 'ZIP', 'postalCode', 1, 0, 'var' ],
    [ 'UserCountry', 'Country', 'co', 1, 0, 'var' ],
    [ 'UserComment', 'Comment', 'wWWHomePage', 1, 0, 'var' ],
    ],
    };
        $Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups'} = [
    'users',
    ];

[Syfer43]

и лог апача на десерт:

Код: Выделить всё

ERROR: OTRS-CGI-10 Perl: 5.10.1 OS: linux Time: Fri Feb  8 19:09:55 2013

 Message: First bind failed! 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece

 RemoteAddress: 192.168.3.149
 RequestURI: /otrs/customer.pl

 Traceback (1417):
   Module: Kernel::System::CustomerAuth::LDAP::Auth (v1.42) Line: 193
   Module: Kernel::System::CustomerAuth::Auth (v1.40) Line: 152
   Module: Kernel::System::Web::InterfaceCustomer::Run (v1.72) Line: 205
   Module: ModPerl::ROOT::ModPerl::Registry::opt_otrs_bin_cgi_2dbin_customer_2epl::handler (unknown version) Line: 46
   Module: (eval) (v1.48) Line: 204
   Module: ModPerl::RegistryCooker::run (v1.48) Line: 204
   Module: ModPerl::RegistryCooker::default_handler (v1.48) Line: 170
   Module: ModPerl::Registry::handler (v1.99) Line: 31

[Syfer43]

Всем спасибо за "Мгновенную помощь." Проблема решена.