[rt-users] Re: LDAP to AD for AutoCreateAndCanonicalizeUserInfo

[seph]

"Dylan Masson" <dylan.masson at gmail.com> writes:

>   Hey Everyone,
>   I was wondering if anyone has gotten this to work. I'm using the
> LDAP overlay to get data from our Active Directory tree to have it
> pass the data to RT to automate the AutoCreateAndCanonicalizeUserInfo
> process. I've gotten to the point where it will create an account, but
> since it's trying to get the hash info for for the user's password,
> and AD uses Kerberos, it doesn't populate the password. Has anyone
> gotten the Kerberos passwords to automatically parse into this? Do I
> simply need to call on a different set of attributes?

You wouldn't usually stick the password into RT. Instead you'd either
use ExternalAuth and have apache talk to AD; or use the ldap overlay
to override the password auth function.

seph