[rt-users] Implementing LDAP Authentication in RT 4.0.2

[Izz Abdullah]

Here is the LDAP config porting in my RT_SiteConfig file:

Set($ExternalAuthPriority, 'My_LDAP');

Set($ExternalInfoPriority, 'My_LDAP');

Set($ExternalServiceUsesSSLorTLS,    0);

Set($AutoCreateNonExternalUsers,    0);

Set($ExternalSettings, 'My_LDAP' => {
                      'type'                      =>  'ldap',
                      'server'                    =>  '***blankedout***.hibbett.com',
                      'user'                      =>  '***blankedout***',
                      'pass'                      =>  '***blankedout***',
                      'base'                      => 'ou=***blankedout***,dc=***blankedout***,dc=hibbett,dc=com',
                      'filter'                    =>  '(objectClass=*)',
                      'd_filter'                  =>  '(objectClass=NoOneAtALL)',
                      'tls'                       =>  0,
                      'ssl_version'               =>  3,
                      'net_ldap_args'             => [    version =>  3   ],
                      'attr_match_list'           => [    'Name',
                      					  	    'EmailAddress'  ],
		          'attr_map'                  =>  {   
									    'Name' => 'sAMAccountName',
                      					  	    'EmailAddress' => 'mail',
                                                          'Organization' => 'physicalDeliveryOfficeName',
                                                          'RealName' => 'cn',
                                                          'ExternalAuthId' => 'sAMAccountName',
                                                          'Gecos' => 'sAMAccountName',
                                                          'WorkPhone' => 'telephoneNumber',
                                                          'Address1' => 'streetAddress',
                                                          'City' => 'l',
                                                          'State' => 'st',
                                                          'Zip' => 'postalCode',
                                                          'Country' => 'co'
                                                      }
                                    }
);

Why is the attr_match_list utilizing [] when the attr_map is utilizing {}?

-----Original Message-----
From: rt-users-bounces at lists.bestpractical.com [mailto:rt-users-bounces at lists.bestpractical.com] On Behalf Of Kevin Falcone
Sent: Friday, September 16, 2011 9:27 AM
To: rt-users at lists.bestpractical.com
Subject: Re: [rt-users] Implementing LDAP Authentication in RT 4.0.2

On Thu, Sep 15, 2011 at 04:49:37PM -0500, Izz Abdullah wrote:
> Thanks a ton.  I got this installed and tweaked the RT_SiteConfig file, but I get the following error:
> Can't use string ("My_LDAP") as an ARRAY ref while "strict refs" in use at /opt/rt4/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAuth.pm line 55.

Your config is wrong, but since you haven't posted it we can't tell you how it is wrong.

-kevin

> If I comment the use strict; out of the ExternalAuth perl directive, then I can access RT, but not utilizing LDAP.  Any ideas?
> 
> -----Original Message-----
> From: rt-users-bounces at lists.bestpractical.com 
> [mailto:rt-users-bounces at lists.bestpractical.com] On Behalf Of Kevin 
> Falcone
> Sent: Thursday, September 15, 2011 2:47 PM
> To: rt-users at lists.bestpractical.com
> Subject: Re: [rt-users] Implementing LDAP Authentication in RT 4.0.2
> 
> On Thu, Sep 15, 2011 at 02:04:18PM -0500, Izz Abdullah wrote:
> >    I have yet to find some definitive documentation on implementing LDAP authentication in RT
> >    4.0.x.  I found this wiki: 
> > [1]http://requesttracker.wikia.com/wiki/LdapSiteConfigSettings
> > 
> >    I've also found a lot of other things related to outdated, very early 3.x, versions of RT.  I
> >    would appreciate if anyone could assist in pointing me in the right direction.
> 
> You appear to have found another wildly out of date wiki page.
> Thanks, I've added the appropriate category.
> 
> If you review:
> http://requesttracker.wikia.com/wiki/LDAP
> 
> It points at the relevant options.
> 
> RT-Authen-ExternalAuth 0.09 or mod_auth_kerb work fine with RT4
> 
> -kevin
> --------
> RT Training Sessions (http://bestpractical.com/services/training.html)
> *  Chicago, IL, USA  September 26 & 27, 2011
> *  San Francisco, CA, USA  October 18 & 19, 2011
> *  Washington DC, USA  October 31 & November 1, 2011
> *  Melbourne VIC, Australia  November 28 & 29, 2011
> *  Barcelona, Spain  November 28 & 29, 2011