KIX 2017 LDAP Configuration sample

[Nilufar]

Hello dear kix team. I've got problem with ldap auth of customer users. i keep getting error in log file:


[Mon Jul 31 17:30:07 2017][Error][Kernel::System::CustomerUser::LDAP::_Connect][200] First bind failed! 80090308: LdapErr: DSID-0C0903C8, comment: AcceptSecurityContext error, data 52e, v2580


Please can you provide any sample configuration of ldap for kixdesk 2017? Thank you in advance.

[Richard Leis]

Hello Nilufar,

a sample configuration for LDAP authorization can be found in <KIX-Home>/Kernel/Config/Defaults.pm (lines 1439 to 1506 for CustomerUsers and 1507 to 1558 for CustomerCompanies).
It is recommended to copy the whole customer authorization part, paste it into your Config.pm and customize it.

I checked the error message that you posted.
This is normally caused when there is a problem with the authentization on the LDAP server.
Please check if the login data of the search user is correct.
Or it might be a problem with special characters in the password.

If this doesn't solve your problem, please let me know.

Best regards

Richard

[Nilufar]

Hi Richard. Thank you for your informative response, i'm taking that into the consideration. But in kix here's GUI version of ldap configuration which can be found in SysConfig -> Framework → Frontend::Customer::Auth
I've been trying to sync with ldap server using gui version and it doesn't work, though all my input credentials are right. Why there's gui ldap configuration then?

[Richard Leis]

Hi Nilufar,

the mapping in the Config.pm was  the initial way of implementing a ldap connection.
The SysConfig page has been invented later by the OTRS AG.

The SysConfig page has some disadvantages compared to the Config.pm-method:

• you can only use one backend (In the Config.pm you can add several different backends)
• you can't map the ldap fields to the KIX-fields

So we always recommend to implement your ldap in the Config.pm


Best regards


Richard