<html>
<body>
<font size=3>I think I got it to work, changed LdapFilter to * rather
than just commenting the line out. I knew we didn't have
posixAccount in that attribute but didn't know I would actually need it
enabled.<br><br>
sorry for the wasted bandwidth,<br><br>
Kevin<br><br>
<br>
At 02:19 PM 3/19/2008, Kevin Sheen wrote:<br>
<blockquote type=cite class=cite cite="">Hi,<br><br>
I'm trying to get our rt install to authenticate with Active
Directory.<br><br>
I've got the configuration from these two links into our
RT_SiteConfig.pm:<br><br>
<a href="http://wiki.bestpractical.com/view/LDAP" eudora="autourl">
http://wiki.bestpractical.com/view/LDAP</a><br><br>
<a href="http://wiki.bestpractical.com/view/LdapSiteConfigSettingsForActiveDirectory" eudora="autourl">
http://wiki.bestpractical.com/view/LdapSiteConfigSettingsForActiveDirectory</a>
<br><br>
At this point, I'm just trying to get authentication to work, I'm not
trying to add create users or anything like that. I've stripped the
configuration down to a minimum and I'm still getting:<br><br>
[Wed Mar 19 17:57:02 2008] [debug]: Trying LDAP authentication
(/usr/local/rt/local/lib/RT/User_Local.pm:155)<br>
[Wed Mar 19 17:57:02 2008] [debug]: RT::User::IsPassword auth method
IsLDAPPassword FAILED (/usr/local/rt/local/lib/RT/User_Local.pm:293)<br>
[Wed Mar 19 17:57:02 2008] [info]: RT::User::IsInternalPassword AUTH
FAILED: FOO (/usr/local/rt/local/lib/RT/User_Local.pm:257)<br>
[Wed Mar 19 17:57:02 2008] [debug]: RT::User::IsPassword auth method
IsInternalPassword FAILED
(/usr/local/rt/local/lib/RT/User_Local.pm:293)<br>
[Wed Mar 19 17:57:02 2008] [error]: FAILED LOGIN for FOO from
172.16.9.188 (/usr/local/rt/share/html/autohandler:251)<br><br>
I've increased the logging level to debug but it isn't pointing me any
closer to a resolution. Is there any increased logging that I can
enable to attempt to find the actual problem?<br><br>
I can still login to rt using the internal authentication method just not
LDAP.<br><br>
I've got the utility called Active Directory Explorer from
sysinternals.com - there are three attributes named badPwdCount,
badPasswordTime and logonCount stored in Active Directory. None of
those three have changed in all of my testing.<br><br>
I did make a slight change to $LdapUser and started getting an additional
error in the log that led me to believe that I had at least that
parameter and LdapPass correct (again, I'm using my userid to view
AD).<br><br>
<br>
Thanks in advance,<br><br>
Kevin<br><br>
<br>
_______________________________________________<br>
<a href="http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users" eudora="autourl">
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users</a><br>
<br>
Community help:
<a href="http://wiki.bestpractical.com/" eudora="autourl">
http://wiki.bestpractical.com</a><br>
Commercial support: sales@bestpractical.com<br><br>
<br>
Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
<br>
Buy a copy at
<a href="http://rtbook.bestpractical.com/" eudora="autourl">
http://rtbook.bestpractical.com</a></font></blockquote></body>
</html>