[rt-devel] External User Authentication

[seph]

> > A reasonable goal, but I think your implementation may have data
> > integrity problems. RT needs to know who it's users are, and who they
> > were. a user is never deleted, because they appear in old tickets. In
> > a system where RT's users are remote objects, RT is dependent on the
> > remote database to keep it's users, most corporate employee databases
> > don't keep former employees in them usefully.
> 
> There could be a failover mechanism: the data retrieved from external 
> source are stored locally, but never used unless the external source 
> is available. 

what happens if the external system reuses a userid? they usually do
after a couple years.

seph