[rt-users] external user authentication (i.e. LDAP)

[Christian Gilmore]

Kendric,

You want to use LookupExternalUserInfo in combination with WebExternalAuth
and will need to set up your web server to authenticate users against your
external LDAP via such modules as Apache::AuthenLDAP.

Under such a setup, there are three ways users are created in RT:

1) via e-mail ticket submission
2) via manual addition via the configuration tools (GUI or command-line)
3) via the contributed code to synchronize RT with an external LDAP
   (found under http://www.fsck.com/pub/rt/contrib/2.0/)

Regards,
Christian

-----------------
Christian Gilmore
Technology Leader
GeT WW Global Applications Development
IBM Software Group

-----Original Message-----
From: rt-users-admin at lists.fsck.com
[mailto:rt-users-admin at lists.fsck.com]On Behalf Of Beachey, Kendric
Sent: Thursday, April 11, 2002 3:58 PM
To: Rt-Users (E-mail)
Subject: [rt-users] external user authentication (i.e. LDAP)


I'm looking at the "LookupExternalUserInfo" functionality.  I'd like to use
our existing Novell Directory Services, accessible via LDAP, to authenticate
people, rather than building yet another independent database of user
accounts.

>From what I can tell, the LookupExternalUserInfo function will always be
called with two arguments--an email address and a "friendly" name.

Does this imply that this external authentication is only performed when RT
is chewing on an incoming email?  What happens when someone who is known to
NDS but not to RT comes along and tries to login to RT's web interface?  In
such a case they would provide not their email address but their NDS login
name.

If the answer is "they won't be able to log in until they send e-mail to
RT", would it be a good idea to create a one-off job to generate a fake
e-mail from all our users, so that the LDAP authentication will be tickled,
thus creating a user account for every user in our system?

--
Kendric Beachey

_______________________________________________
rt-users mailing list
rt-users at lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users