<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
So I have just gotten this working with RHEL5, RT-3.8.1,
ExternalAuth-0.06_02 and eDIR.<br>
<br>
A few things i had to hack:<br>
/opt/rt3/local/lib/RT/User_Vendor.pm<br>
Change line 1050 from:<br>
$msg = $ldap->bind($ldap_user, password => $ldap_pass);<br>
to:<br>
$msg = $ldap->bind($ldap_user, ); #This fixed the Novell
null password idiocy<br>
<br>
I also had to import or eDIR CA (not sure this is really needed)<br>
certutil -A -d /etc/pki/nssdb -n "root ca cert" -t "CT,C,C" -i
~/eDirCACert.pem <br>
My Netware Admin exported this for me from Console1; Security -->
Organizational CA<br>
<br>
Modify /etc/openldap/ldap.conf to use the CA too<br>
[root@tickets-dev:~]# cat /etc/openldap/ldap.conf <br>
#<br>
# LDAP Defaults<br>
#<br>
<br>
# See ldap.conf(5) for details<br>
# This file should be world readable but not world writable.<br>
<br>
#BASE dc=example, dc=com<br>
#URI <a class="moz-txt-link-freetext" href="ldap://ldap.example.com">ldap://ldap.example.com</a> <a class="moz-txt-link-freetext" href="ldap://ldap-master.example.com:666">ldap://ldap-master.example.com:666</a><br>
<br>
#SIZELIMIT 12<br>
#TIMELIMIT 15<br>
#DEREF never<br>
<br>
TLS_CACERT /etc/pki/tls/certs/eDirCACert.pem<br>
# Self signed server cert (nothing to do with eDir)<br>
TLS_CERT /etc/pki/tls/certs/server.crt<br>
TLS_KEY /etc/pki/tls/private/server.key<br>
<br>
I had to use the short name of the eDir server as its Certificate was
not FQDN (stupid!)<br>
I also did not define d_filter but plan too just my Netware Admin is in
training.<br>
<br>
'base' => 'o=ggu',<br>
'filter' =>
'(objectClass=Person)',<br>
'd_filter' => '',<br>
'tls' => 1,<br>
<br>
<br>
Hope this is useful for anybody trying to get this to work with eDir.<br>
<br>
<br>
<br>
Mike Peachey wrote:
<blockquote cite="mid:490035AC.90507@jennic.com" type="cite">
<pre wrap="">Michael Mollard wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Mike,
RE: the wiki 'PostInstall'
although I have progressed slightly, I think I didn't realise that I needed to put
Set( @Plugins,(qw(RT::Authen::ExternalAuth)));
</pre>
</blockquote>
<pre wrap=""><!---->
I will add this when I can, this was not required for 3.6 installs.
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
*************************************
John McCoy, Jr
Sr. Systems and Network Administrator
Enterprise Technology Services
Golden Gate University
*************************************
</pre>
</body>
</html>