LDAP + Win2003 - не находит агентов

[Sergey_VZ]

Есть такой конфиг:
192.168.0.2 - доменконтролер(домен - cci.by), на котором создана группа OTRSagents, в нее входит пользователь root
192.168.0.72 - OTRS под Win7 с таким конфигом:

Код: Выделить всё

#Agents
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = '192.168.0.2';
$Self->{'AuthModule::LDAP::BaseDN'} = 'DC=cci,DC=by';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthModule::LDAP::GroupDN'} = 'CN=OTRSagents,CN=Users,DC=cci,DC=by';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'CN=root,CN=Users,DC=cci,DC=by';
$Self->{'AuthModule::LDAP::SearchUserPw'} = '123';
$Self->{'AuthModule::LDAP::AlwaysFilter'} = '';
$Self->{'AuthModule::LDAP::Params'} = {
port => 3268,
timeout => 120,
async => 0,
version => 3,
};
$Self->{'AuthSyncModule'} = 'Kernel::System::Auth::Sync::LDAP';
$Self->{'AuthSyncModule::LDAP::Host'} = '192.168.0.2';
$Self->{'AuthSyncModule::LDAP::BaseDN'} = 'DC=cci,DC=by';
$Self->{'AuthSyncModule::LDAP::UID'} = 'sAMAccountName';
$Self->{'AuthSyncModule::LDAP::SearchUserDN'} = 
'CN=root,CN=Users,DC=cci,DC=by';
$Self->{'AuthSyncModule::LDAP::SearchUserPw'} = '123';
$Self->{'AuthSyncModule::LDAP::UserSyncMap'} = {
UserFirstname => 'givenName',
UserLastname => 'sn',
UserEmail => 'mail',
};
$Self->{'AuthSyncModule::LDAP::Params'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};
$Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups'} = [
'users', 'basic_admin',
];
#Customers
$Self->{CustomerUser} = {
Name => 'AD',
Module => 'Kernel::System::CustomerUser::LDAP',
Params => {
Host => '192.168.0.2',
BaseDN => 'DC=cci,DC=by',
SSCOPE => 'sub',
UserDN => 'CN=root,CN=Users,DC=cci,DC=by',
UserPw => '123',
},
SourceCharset => 'utf-8',
DestCharset => 'utf-8',
AlwayFilter => '',
CustomerKey => 'sAMAccountName',
CustomerID => 'sAMAccountName',
CustomerUserListFields => ['sAMAccountName', 'mail'],
CustomerUserSearchFields => ['sAMAccountName', 'cn', 'mail'],
CustomerUserSearchPrefix => '',
CustomerUserSearchSuffix => '*',
CustomerUserSearchListLimit => 10000,
CustomerUserPostMasterSearchFields => ['mail'],
CustomerUserNameFields => ['givenname', 'sn'],
CustomerUserExcludePrimaryCustomerID => 0,
AdminSetPreferences => 0,
Map => [
[ 'UserFirstname', 'Firstname', 'givenname', 1, 1, 'var', ],
[ 'UserLastname', 'Lastname', 'sn', 1, 1, 'var', ],
[ 'UserLogin', 'Username', 'sAMAccountName', 1, 1, 'var', ],
[ 'UserEmail', 'Email', 'mail', 1, 1, 'var', ],
[ 'UserCustomerID', 'CustomerID', 'mail', 0, 1, 'var', ],
[ 'UserPhone', 'Phone', 'telephonenumber', 1, 0, 'var', ],
],
};

при попытке входа под root пишет такую вот ошибку:

Код: Выделить всё

[Wed Sep 20 11:00:34 2013] [error] [client 192.168.0.19] ERROR: OTRS-CGI-72 Perl: 5.12.3 OS: MSWin32 Time: Wed Sep 18 11:00:33 2013, 
referer: http://192.168.0.72/otrs/index.pl
[Wed Sep 20 11:00:34 2013] [error] [client 192.168.0.19] , referer: http://192.168.0.72/otrs/index.pl
[Wed Sep 20 11:00:34 2013] [error] [client 192.168.0.19]  Message: First bind failed! 80090308: LdapErr: DSID-0C090334, comment: 
AcceptSecurityContext error, data 525, vece, referer: http://192.168.0.72/otrs/index.pl

Я так понимаю, OTRS не находит пользователя root в AD. Почему ? Что не так делаю ?