<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3059" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=515225205-27032007>The key items in the document you referred to relates
to mod_ntlm: </SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=515225205-27032007></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN class=515225205-27032007>*
Grab mod_ntlm for the relevant version of Apache you have (v1/v2) from here : <A
href="http://modntlm.jamiekerwick.co.uk/">http://modntlm.jamiekerwick.co.uk/</A></SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN class=515225205-27032007>*
Check the mod_ntlm directives in your Apache configuration are
correct.</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT><SPAN class=515225205-27032007><FONT face=Arial
size=2>* Check that <EM>'the URL of your RT apache vhost to either the "trusted
sites" or "intranet sites" zone of Internet
Explorer'</EM>.</FONT></SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=515225205-27032007></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=515225205-27032007>There may be an error in your configuration which is
stopping the NTLM calls being made correctly.</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=515225205-27032007></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=515225205-27032007>HTH</SPAN></FONT></DIV><!-- Converted from text/rtf format -->
<P align=left><SPAN lang=en-us><FONT face=Arial
size=2>Regards,<BR>Sasha</FONT></SPAN> </P>
<P><SPAN lang=en-us><FONT face=Arial size=2>Sasha Gerrand</FONT></SPAN>
<BR><SPAN lang=en-us><FONT face=Arial size=2>Web & Database
Developer</FONT></SPAN> <BR><SPAN lang=en-us><FONT face=Arial
size=2> </FONT></SPAN> <BR><SPAN lang=en-us><B><FONT face=Arial
size=2>Austbrokers Holdings Limited</FONT></B></SPAN> <BR><SPAN lang=en-us><FONT
face=Arial size=2>Level 21, 111 Pacific Highway</FONT></SPAN> <BR><SPAN
lang=en-us><FONT face=Arial size=2>North Sydney NSW 2060</FONT></SPAN> <BR><SPAN
lang=en-us><FONT face=Arial size=2>PO Box 1813 North Sydney NSW
2060</FONT></SPAN> <BR><SPAN lang=en-us><FONT face=Arial
size=2> </FONT></SPAN> <BR><SPAN lang=en-us><FONT face=Arial size=2>Ph:
02 9935 2230</FONT></SPAN> <BR><SPAN
lang=en-us><FONT face=Arial size=2>Mobile: 0431 895 718</FONT></SPAN>
<BR><SPAN lang=en-us><FONT face=Arial size=2>Email:
sashag@austbrokers.com.au</FONT></SPAN> <BR><SPAN lang=en-us><FONT face=Arial
size=2>Web: <A
href="http://www.austbrokers.com.au/">http://www.austbrokers.com.au</A></FONT></SPAN>
<BR><SPAN lang=en-us><FONT face=Arial size=2> </FONT></SPAN> <BR><SPAN
lang=en-us><FONT face=Arial size=1>NOTICE</FONT></SPAN> <BR><SPAN
lang=en-us><FONT face=Arial size=1>If you are not an authorised recipient of
this email, please contact Austbrokers Holdings immediately by return e-mail or
by telephone on +61-2-4920-6117. In this case, you should not read, print,
re-transmit, store or act on this e-mail or any attachments. Please destroy the
message and attachments. This e-mail and any attachments are confidential and
may contain legally privileged information and/or copyright material of
Austbrokers Holdings or third parties. You should only re-transmit, distribute
or commercialise the material if you are authorised to do so. Internet e-mails
are not necessarily secure, Austbrokers Holdings does not accept responsibility
for changes made to this message after it was sent. This Notice should not be
removed.</FONT></SPAN></P>
<DIV> </DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> rt-users-bounces@lists.bestpractical.com
[mailto:rt-users-bounces@lists.bestpractical.com] <B>On Behalf Of </B>Rob
Shupe<BR><B>Sent:</B> Friday, 23 March 2007 8:51 AM<BR><B>To:</B>
rt-users@lists.bestpractical.com<BR><B>Subject:</B> [rt-users] AD
Authentication/Single Signon Issues<BR></FONT><BR></DIV>
<DIV></DIV>I know this concept has been beaten to death, as I've dug through
many many posts today related to the issue in the archives. Unfortunately, I
can't find an answer to my specific question so here goes. I was able to get
Active Directory authentication to work through LDAP using the guide at <A
href="http://wiki.bestpractical.com/index.cgi?LDAP">http://wiki.bestpractical.com/index.cgi?LDAP</A>.
I also have accounts being auto-created for new users. The only thing that still
doesn't seem to happen is a single signon. I can type in a username and password
and it will authenticate against active directory just fine, I just can't get it
to go automatically if someone has already logged into their workstation. No
matter what, I always have to login at the login page. <BR><BR>From the guide I
can't exactly tell if it's supposed to even do a single signon, but I'd like to
know if the possibility exists and how to go about doing it. I know there is
also this guide <A
href="http://blank.org/memory/output/rt-ad-sso.html">http://blank.org/memory/output/rt-ad-sso.html</A>
but it seems to be older (for Apache 1, older version of RT, etc.) and
I've already implemented the other solution, so I'm trying to make the other
solution work but still have single signon. <BR><BR>Any suggestions would be
appreciated. Thanks.<BR></BODY></HTML>